Komputer wolno sie uruchamia, blue screen przy aplikacjach.

Lubie_Lody · 30 Kwietnia 2013

Witam. Komputer strasznie muli, po uruchomieniu programy na pasku zadan pojawiac sie zaczynaja po 10 minutach. Probowalem zrobic logi otl, ale podczas skanowania wyskoczyl blue screen. Nie tylko podczas takich czynnosci wywala bs, ale np podczas wlaczania skype lub gg. przepisalem blad bluescreena

*** STOP: 0x000000F3 (0x00000003, 0x8954B888, 0x8954B9FC, 0x805D22AA) Prosze o pomoc. Kiedys pisalem podobny temat ale pomoglo na jakis czas. Pisze z komorki bo podczas pisania tego na komputerze wyskoczyl wlasnie bluescreen. kiedys pisalem podobny temat, ale chyba znos wrocil problem:x

Miszczu519 · 30 Kwietnia 2013

Kliknij ctrl+alt+del uruchom menadżer i za trzymaj aplikacje których nie używasz bo pewnie któryś z nich dużo ciągnie Procesoru CPU I pamięci Fizycznej

Lubie_Lody · 30 Kwietnia 2013

Gdyby to bylo takie proste to bym to zrobil, ale moge wylaczyc wszystkie aplikacje zabierajace duzo pamieci a bedzie podobnie. mam windowsa xp.

Fr3shMak3r · 30 Kwietnia 2013

To zrób to w trybie awaryjnym .

Wejdź w msconfig i zakładka uruchamianie i najlepiej odznacz wszystko .

Lubie_Lody · 30 Kwietnia 2013

W trybie awaryjnym mam tylko napisy po bokach ze jest wlaczony, kursorem moge ruszac ale nic innego zrobic nie moge

Fr3shMak3r · 30 Kwietnia 2013

Na działającym komputerze wypal na czystą płytkę OTLPE :

http://oldtimer.geekstogo.com/OTLPENet.exe

Zresztą tutaj masz dokładną instrukcje co dalej robić :

http://www.MPCpc.pl/topic/4414-diagnostyka-infekcji-na-niestartujacych-windows/

Lubie_Lody · 30 Kwietnia 2013

W trybie awaryjnym mam tylko napisy po bokach ze jest wlaczony, kursorem moge ruszac ale nic innego zrobic nie moge

Na telefonie nie moge edytowac. Sprobuje zrobic te logi otl zaraz moze sie uda.

tryb awaryjny jednak dziala! Co mam w nim zrobic??

Fr3shMak3r · 30 Kwietnia 2013

Najlepiej to zrób loga OTL .

Lubie_Lody · 30 Kwietnia 2013

OTL logfile created on: 2013-04-30 21:49:18 - Run 4

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\KAMA\Pulpit

Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

3,50 Gb Total Physical Memory | 2,90 Gb Available Physical Memory | 83,02% Memory free

5,34 Gb Paging File | 4,80 Gb Available in Paging File | 89,98% Paging File free

Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 48,83 Gb Total Space | 23,63 Gb Free Space | 48,39% Space Free | Partition Type: NTFS

Drive D: | 87,89 Gb Total Space | 28,51 Gb Free Space | 32,44% Space Free | Partition Type: NTFS

Drive E: | 96,16 Gb Total Space | 37,42 Gb Free Space | 38,92% Space Free | Partition Type: NTFS

Computer Name: KAMA-058BEFE890 | User Name: KAMA | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013-04-13 20:11:01 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\KAMA\Pulpit\OTL.exe

PRC - [2013-04-04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

PRC - [2013-04-04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

PRC - [2013-04-04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

PRC - [2013-03-15 07:47:17 | 001,266,464 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

PRC - [2013-01-29 15:28:02 | 000,188,760 | ---- | M] () -- C:\Program Files\Web Assistant\ExtensionUpdaterService.exe

PRC - [2013-01-27 12:11:46 | 000,020,456 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe

PRC - [2013-01-27 12:11:06 | 000,947,152 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe

PRC - [2012-12-17 11:39:02 | 000,615,440 | ---- | M] () -- C:\Program Files\EslWire\service\WireHelperSvc.exe

PRC - [2012-10-02 13:13:44 | 003,064,000 | ---- | M] (Skype Technologies S.A.) -- C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe

PRC - [2011-03-31 16:36:54 | 000,499,796 | ---- | M] (Atheros) -- C:\WINDOWS\system32\acs.exe

PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe

PRC - [2005-04-02 01:51:48 | 000,217,600 | ---- | M] (Rocket Division Software) -- E:\programy\alkohol\Alcohol 120\StarWind\StarWindService.exe

PRC - [2004-12-21 23:28:58 | 000,602,220 | ---- | M] (Executive Software International, Inc.) -- C:\Program Files\Executive Software\Diskeeper\DkService.exe

========== Modules (No Company Name) ==========

MOD - [2013-02-06 15:05:42 | 000,165,888 | ---- | M] () -- C:\Program Files\EslWire\service\NocIPC32.dll

MOD - [2013-01-29 15:28:02 | 000,188,760 | ---- | M] () -- C:\Program Files\Web Assistant\ExtensionUpdaterService.exe

MOD - [2012-12-17 11:39:02 | 000,615,440 | ---- | M] () -- C:\Program Files\EslWire\service\WireHelperSvc.exe

========== Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- C:\Program Files\Linksys\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe WMP54Gv4.exe -- (WMP54Gv4SVC)

SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)

SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)

SRV - [2013-04-04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)

SRV - [2013-04-04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)

SRV - [2013-03-26 07:54:28 | 000,543,656 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)

SRV - [2013-03-15 07:47:17 | 001,266,464 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)

SRV - [2013-02-28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)

SRV - [2013-01-29 15:28:02 | 000,188,760 | ---- | M] () [Auto | Running] -- C:\Program Files\Web Assistant\ExtensionUpdaterService.exe -- (Web Assistant)

SRV - [2013-01-27 12:11:46 | 000,020,456 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)

SRV - [2012-12-17 11:39:02 | 000,615,440 | ---- | M] () [Auto | Running] -- C:\Program Files\EslWire\service\WireHelperSvc.exe -- (EslWireHelper)

SRV - [2012-10-02 13:13:44 | 003,064,000 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)

SRV - [2012-07-14 02:13:54 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2011-03-31 16:36:54 | 000,499,796 | ---- | M] (Atheros) [Auto | Running] -- C:\WINDOWS\system32\acs.exe -- (ACS)

SRV - [2011-03-31 16:36:52 | 000,360,529 | ---- | M] (wireless) [On_Demand | Stopped] -- C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\WPS\jswpsapi.exe -- (jswpsapi)

SRV - [2005-04-02 01:51:48 | 000,217,600 | ---- | M] (Rocket Division Software) [Auto | Running] -- E:\programy\alkohol\Alcohol 120\StarWind\StarWindService.exe -- (StarWindService)

SRV - [2004-12-21 23:28:58 | 000,602,220 | ---- | M] (Executive Software International, Inc.) [Auto | Running] -- C:\Program Files\Executive Software\Diskeeper\DkService.exe -- (Diskeeper)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)

DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)

DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)

DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Documents and Settings\All Users\Dane aplikacji\MTA San Andreas All\1.3\temp\FairplayKD.sys -- (FairplayKD)

DRV - File not found [Kernel | System | Stopped] -- -- (Changer)

DRV - [2013-04-30 18:13:57 | 000,040,776 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)

DRV - [2013-04-04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)

DRV - [2012-12-17 11:38:54 | 000,867,344 | ---- | M] (<Turtle Entertainment>) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\ESLWireACD.sys -- (ESLWireAC)

DRV - [2012-08-29 13:59:18 | 000,223,128 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\dtscsi.sys -- (dtscsi)

DRV - [2012-08-29 10:24:38 | 000,664,064 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd)

DRV - [2011-07-28 20:06:06 | 001,763,584 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athuw.sys -- (AR9271)

DRV - [2011-06-28 13:15:20 | 006,363,752 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)

DRV - [2011-03-31 16:36:52 | 000,058,208 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wsimd.sys -- (WSIMD)

DRV - [2011-03-31 16:36:52 | 000,057,440 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\jswscimd.sys -- (JSWSCIMD)

DRV - [2011-03-22 09:58:42 | 000,065,136 | R--- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\l1c51x86.sys -- (L1c)

DRV - [2010-04-28 01:57:28 | 000,066,632 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WmXlCore.sys -- (WmXlCore)

DRV - [2010-04-28 01:57:28 | 000,015,048 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WmVirHid.sys -- (WmVirHid)

DRV - [2010-04-28 01:57:24 | 000,031,816 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WmHidLo.sys -- (WmHidLo)

DRV - [2010-04-28 01:57:22 | 000,022,856 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WmBEnum.sys -- (WmBEnum)

DRV - [2010-04-27 23:01:26 | 000,037,704 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WmFilter.sys -- (WmFilter)

DRV - [2009-11-18 01:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)

DRV - [2009-11-18 01:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)

DRV - [2009-03-18 16:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)

DRV - [2008-04-14 01:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)

DRV - [2007-03-16 10:11:38 | 000,012,256 | ---- | M] (Windows ® 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\TBPanel.sys -- (TBPanel)

DRV - [2007-03-16 10:11:38 | 000,012,256 | ---- | M] (Windows ® 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TBPanel.sys -- (Cardex)

DRV - [2006-11-04 06:45:48 | 000,178,913 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\V0260Vid.sys -- (V0260VID)

DRV - [2005-10-26 18:06:30 | 000,356,096 | R--- | M] (Ralink Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rt61.sys -- (RT61)

DRV - [2005-04-25 10:43:58 | 000,159,616 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\Vax347b.sys -- (Vax347b)

DRV - [2004-08-13 04:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)

DRV - [2004-04-30 09:33:00 | 000,005,248 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\Vax347s.sys -- (Vax347s)

DRV - [2003-09-25 22:15:32 | 000,015,872 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\GTNDIS5.sys -- (GTNDIS5)

DRV - [2002-07-24 07:52:26 | 000,998,004 | R--- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ha10kx2k.sys -- (ha10kx2k)

DRV - [2002-07-19 04:48:04 | 000,195,432 | R--- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv)

DRV - [2002-07-19 04:47:52 | 000,837,548 | R--- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctaud2k.sys -- (ctaud2k)

DRV - [2001-08-17 21:19:20 | 000,003,712 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctljystk.sys -- (ctljystk)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com

IE - HKLM\..\SearchScopes,DefaultScope =

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com

IE - HKCU\..\SearchScopes,DefaultScope =

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC

IE - HKCU\..\SearchScopes\{4303BA07-C863-4C0B-9D83-AE06C0154800}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=crm&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=84365201-B0E6-4AFF-89E4-B3890CB30274&apn_sauid=99274EBE-7EEC-4C64-AD63-A5571C9E3A9C

IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\..\SearchScopes\{A8CEAA4D-0BBA-4D36-A48B-DCEB03792C92}: "URL" = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=as1212y&ir=as1212y&cd=2XzuyEtN2Y1L1QzutDtDtBtCtBzy0EtB0DtCyCtBtAzzyD0CtN0D0Tzu0CtAyDtDtN1L2XzutBtFtBtFtCtFyEtDyB&cr=449467938

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultthis.engineName: ""

FF - prefs.js..browser.search.defaulturl: ""

FF - prefs.js..browser.search.order.1,S: S", ""

FF - prefs.js..browser.search.selectedEngine,S: S", ""

FF - prefs.js..keyword.URL: ""

FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-08-06 20:49:35 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2012-08-06 20:50:12 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\KAMA\Dane aplikacji\Mozilla\Extensions

[2013-04-15 13:55:56 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\KAMA\Dane aplikacji\Mozilla\Firefox\Profiles\af1wqn7v.default\extensions

[2012-10-07 11:06:40 | 000,000,000 | ---D | M] (ADDICT-THING) -- C:\Documents and Settings\KAMA\Dane aplikacji\Mozilla\Firefox\Profiles\af1wqn7v.default\extensions\[email protected]

[2013-02-09 17:31:40 | 000,000,000 | ---D | M] (MagniPic) -- C:\Documents and Settings\KAMA\Dane aplikacji\Mozilla\Firefox\Profiles\af1wqn7v.default\extensions\[email protected]

[2013-02-09 17:36:53 | 000,025,868 | ---- | M] () (No name found) -- C:\Documents and Settings\KAMA\Dane aplikacji\Mozilla\Firefox\Profiles\af1wqn7v.default\extensions\[email protected]

[2012-08-06 20:49:35 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions

[2012-11-03 23:13:55 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

[2012-07-14 02:15:45 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll

[2012-07-14 03:22:43 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml

[2012-07-14 03:22:43 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml

[2012-07-14 03:22:43 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml

[2012-07-14 03:22:43 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml

[2012-07-14 03:22:43 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml

[2012-07-14 03:22:43 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)

CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}

CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}

CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll

CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer

CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll

CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\26.0.1410.64\pdf.dll

CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Acrobat 7.0\Reader\Browser\nppdf32.dll

CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll

CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll

CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll

CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.135\npGoogleUpdate3.dll

CHR - plugin: Unity Player (Enabled) = C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll

CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll

CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw_1166636.dll

CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

CHR - plugin: Java Deployment Toolkit 7.0.170.2 (Enabled) = C:\WINDOWS\system32\npDeployJava1.dll

CHR - Extension: Skype Click to Call = C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0\

O1 HOSTS File: ([2006-03-02 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O4 - HKLM..\Run: [DiskeeperSystray] C:\Program Files\Executive Software\Diskeeper\DkIcon.exe (Executive Software International, Inc.)

O4 - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)

O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe ()

O4 - HKLM..\RunServices: [WUSB54GC] C:\Program Files\ [2013-04-30 18:55:22 | 000,000,000 | R--D | M]

O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\TP-LINK Wireless Configuration Utility.lnk = C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()

O4 - Startup: C:\Documents and Settings\KAMA\Menu Start\Programy\Autostart\Diskeeper 9 Professional Edition Registration.lnk = C:\Program Files\Executive Software\Diskeeper\ESIRegister.exe (Leader Technologies/Executive Software)

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.62 62.179.1.63

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{267D0576-B4EC-466C-BE26-F70033F2B6BD}: DhcpNameServer = 62.179.1.62 62.179.1.63

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3BE228A9-3A01-4B8B-935C-746C98FBCD66}: DhcpNameServer = 62.179.1.62 62.179.1.63

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)

O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home

O24 - Desktop WallPaper: C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp

O24 - Desktop BackupWallPaper: C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2012-08-06 14:59:20 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O32 - AutoRun File - [2012-10-26 18:38:34 | 000,000,089 | ---- | M] () - E:\AUTORUN.INF -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013-04-30 21:07:30 | 000,171,344 | ---- | C] (Kaspersky Lab ZAO) -- C:\Documents and Settings\KAMA\Pulpit\SalityKiller.exe

[2013-04-30 20:15:19 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\KAMA\Recent

[2013-04-30 19:08:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KAMA\Dane aplikacji\Leadertech

[2013-04-30 18:59:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\Downloaded Installations

[2013-04-30 18:55:22 | 000,000,000 | ---D | C] -- C:\Program Files\Executive Software

[2013-04-30 17:29:18 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys

[2013-04-23 12:39:49 | 000,000,000 | ---D | C] -- C:\Download

[2013-04-23 12:39:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KAMA\.swt

[2013-04-20 12:00:26 | 000,000,000 | ---D | C] -- C:\_OTL

[2013-04-19 17:18:52 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype

[2013-04-14 16:11:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KAMA\Dane aplikacji\Malwarebytes

[2013-04-14 16:11:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes' Anti-Malware

[2013-04-14 16:11:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes

[2013-04-14 16:11:17 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys

[2013-04-14 16:11:17 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware

[2013-04-13 20:10:53 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\KAMA\Pulpit\OTL.exe

[2013-04-12 14:31:16 | 001,012,512 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvdispco3231422.dll

[2013-04-12 14:31:16 | 000,892,704 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvdispgenco3231422.dll

[2013-04-10 21:12:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\jmdp

[2013-04-07 13:12:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\GamersFirst

[2013-04-02 19:20:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KAMA\Dane aplikacji\Need for Speed World

[2013-04-02 19:06:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\Electronic_Arts_Inc

[2013-04-02 19:06:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts

[2013-04-02 17:35:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Metin2 Ravia.eu

========== Files - Modified Within 30 Days ==========

[2013-04-30 21:53:31 | 000,000,406 | -H-- | M] () -- C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job

[2013-04-30 21:52:21 | 000,000,366 | -H-- | M] () -- C:\WINDOWS\tasks\MpIdleTask.job

[2013-04-30 21:44:10 | 000,012,666 | ---- | M] () -- C:\WINDOWS\System32\nvAppTimestamps

[2013-04-30 21:42:18 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2013-04-30 19:08:30 | 000,001,021 | ---- | M] () -- C:\Documents and Settings\KAMA\Menu Start\Programy\Autostart\Diskeeper 9 Professional Edition Registration.lnk

[2013-04-30 18:30:38 | 000,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk

[2013-04-30 18:13:57 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys

[2013-04-30 18:13:05 | 000,000,211 | -HS- | M] () -- C:\boot.ini

[2013-04-30 18:06:39 | 000,000,558 | ---- | M] () -- C:\WINDOWS\DFC.INI

[2013-04-30 16:49:23 | 000,003,888 | ---- | M] () -- C:\WINDOWS\System32\BMXCtrlState-{00000004-00000000-00000001-00001102-00000002-80651102}.rfx

[2013-04-30 16:49:23 | 000,003,888 | ---- | M] () -- C:\WINDOWS\System32\BMXBkpCtrlState-{00000004-00000000-00000001-00001102-00000002-80651102}.rfx

[2013-04-25 07:58:00 | 000,001,076 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-299502267-1715567821-839522115-1004Core.job

[2013-04-21 13:46:36 | 000,002,513 | ---- | M] () -- C:\Documents and Settings\KAMA\Pulpit\Microsoft Office Word 2007.lnk

[2013-04-20 20:07:37 | 000,000,649 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\ESL Wire.lnk

[2013-04-19 13:44:10 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2013-04-14 16:11:35 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes Anti-Malware.lnk

[2013-04-13 20:11:01 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\KAMA\Pulpit\OTL.exe

[2013-04-12 21:59:45 | 001,083,360 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb0.bin

[2013-04-12 21:59:45 | 000,000,001 | ---- | M] () -- C:\WINDOWS\System32\nvdrssel.bin

[2013-04-12 21:59:44 | 001,083,360 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb1.bin

[2013-04-12 18:29:58 | 000,164,134 | ---- | M] () -- C:\Documents and Settings\KAMA\Pulpit\salitykiller.zip

[2013-04-11 20:51:09 | 000,861,088 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\npDeployJava1.dll

[2013-04-11 20:51:09 | 000,782,240 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll

[2013-04-11 16:05:23 | 000,271,784 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2013-04-09 13:59:21 | 000,000,519 | ---- | M] () -- C:\Documents and Settings\KAMA\Pulpit\Skrót do game.lnk

[2013-04-07 18:00:07 | 000,007,680 | ---- | M] () -- C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2013-04-04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys

[2013-04-03 21:43:42 | 000,139,424 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys

[2013-04-03 21:43:29 | 000,282,104 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr

[2013-04-03 18:42:36 | 000,282,104 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.ex0

[2013-04-03 18:31:15 | 000,138,056 | ---- | M] () -- C:\Documents and Settings\KAMA\Dane aplikacji\PnkBstrK.sys

[2013-04-02 12:33:22 | 000,237,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MpSigStub.exe

[2013-04-01 10:08:17 | 000,557,816 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat

[2013-04-01 10:08:17 | 000,495,654 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2013-04-01 10:08:17 | 000,105,412 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat

[2013-04-01 10:08:17 | 000,084,242 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

========== Files Created - No Company Name ==========

[2013-04-30 19:08:30 | 000,001,021 | ---- | C] () -- C:\Documents and Settings\KAMA\Menu Start\Programy\Autostart\Diskeeper 9 Professional Edition Registration.lnk

[2013-04-30 19:06:36 | 000,001,721 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Executive Software Diskeeper.lnk

[2013-04-20 12:15:07 | 000,000,406 | -H-- | C] () -- C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job

[2013-04-20 12:14:51 | 000,000,366 | -H-- | C] () -- C:\WINDOWS\tasks\MpIdleTask.job

[2013-04-14 16:11:35 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes Anti-Malware.lnk

[2013-04-12 18:29:54 | 000,164,134 | ---- | C] () -- C:\Documents and Settings\KAMA\Pulpit\salitykiller.zip

[2013-04-12 14:31:16 | 000,016,514 | ---- | C] () -- C:\WINDOWS\System32\nvinfo.pb

[2013-04-09 13:59:21 | 000,000,519 | ---- | C] () -- C:\Documents and Settings\KAMA\Pulpit\Skrót do game.lnk

[2013-02-13 18:42:46 | 000,262,216 | ---- | C] () -- C:\WINDOWS\System32\IPTests.dll

[2013-02-13 18:42:13 | 000,422,000 | ---- | C] () -- C:\WINDOWS\System32\wgapi.dll

[2013-02-13 18:17:21 | 000,113,373 | R--- | C] () -- C:\WINDOWS\System32\ctbasicw.dat

[2013-02-13 18:17:21 | 000,065,536 | R--- | C] ( ) -- C:\WINDOWS\System32\a3d.dll

[2013-02-13 18:17:19 | 000,179,669 | R--- | C] () -- C:\WINDOWS\System32\ctstatic.dat

[2013-02-13 18:17:19 | 000,164,044 | R--- | C] () -- C:\WINDOWS\System32\ctdlang.dat

[2013-02-13 18:17:19 | 000,044,055 | R--- | C] () -- C:\WINDOWS\System32\ctdaught.dat

[2013-02-12 13:25:46 | 000,031,950 | ---- | C] () -- C:\WINDOWS\Ascd_log.ini

[2013-02-11 20:30:46 | 000,025,548 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT

[2013-02-01 20:14:52 | 000,000,829 | ---- | C] () -- C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\recently-used.xbel

[2013-01-12 23:48:29 | 000,159,744 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat

[2012-12-26 19:53:36 | 000,139,424 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys

[2012-12-26 19:53:34 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\KAMA\Dane aplikacji\PnkBstrK.sys

[2012-12-26 19:53:08 | 000,282,104 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe

[2012-12-26 19:52:56 | 000,076,888 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe

[2012-12-05 18:19:06 | 000,008,128 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat

[2012-10-26 19:16:43 | 000,000,920 | ---- | C] () -- C:\WINDOWS\System32\WLAN.INI

[2012-10-07 19:49:00 | 000,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll

[2012-10-07 19:45:31 | 000,159,616 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\Vax347b.sys

[2012-10-07 19:45:31 | 000,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\Vax347s.sys

[2012-10-05 12:57:54 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll

[2012-09-09 14:46:04 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PowerReg.dat

[2012-08-29 13:52:17 | 000,223,128 | ---- | C] () -- C:\WINDOWS\System32\drivers\dtscsi.sys

[2012-08-29 10:24:36 | 000,096,384 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd9901.sys

[2012-08-28 20:48:44 | 000,558,133 | ---- | C] () -- C:\WINDOWS\System32\sqlite3.dll

[2012-08-06 20:55:09 | 001,083,360 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin

[2012-08-06 20:55:09 | 001,083,360 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin

[2012-08-06 20:55:09 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin

[2012-08-06 20:54:44 | 002,288,632 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data

[2012-08-06 17:08:41 | 000,007,680 | ---- | C] () -- C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2012-08-06 15:33:54 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\GTW32N50.dll

[2012-08-06 15:27:29 | 000,000,558 | ---- | C] () -- C:\WINDOWS\DFC.INI

[2012-08-06 15:05:49 | 000,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys

[2012-08-06 15:05:44 | 000,001,769 | ---- | C] () -- C:\WINDOWS\Language_trs.ini

[2012-08-06 15:05:41 | 000,024,816 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini

[2012-08-06 15:05:41 | 000,010,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS

[2012-08-06 15:00:56 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat

[2012-08-06 14:56:43 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat

[2012-06-08 16:49:27 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI

[2012-06-08 16:48:18 | 000,271,784 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT

========== ZeroAccess Check ==========

[2012-12-25 22:56:36 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shdocvw.dll -- [2012-10-31 13:32:21 | 001,510,400 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009-02-09 12:53:44 | 000,473,600 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-14 22:50:58 | 000,273,920 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

========== Alternate Data Streams ==========

@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:D1B5B4F1

< End of report >

Zawartość logu otl. Nie wrzucę na żaden hosting bo może bs wyskoczyć;x

Udało mi się go zrobić na normalnie uruchomionym systemie.

Fr3shMak3r · 30 Kwietnia 2013

A gdzie log Extras ?

Weź ten log w spoiler .

Dodatkowo widzę że dziś pobrałeś SalityKiller .

W jakim celu ?

[2013-04-30 21:07:30 | 000,171,344 | ---- | C] (Kaspersky Lab ZAO) -- C:\Documents and Settings\KAMA\Pulpit\SalityKiller.exe

Lubie_Lody · 30 Kwietnia 2013

Czytalem poradnik jak usunac sality i patrzalem na obiawy to wygladaly mi na podobne wiec chcialem to sprawdzic. extras mi sie nie zrobil (powinen byc na pulpicie, a go nie ma)

Fr3shMak3r · 30 Kwietnia 2013

Bo w OTL nie zaznaczyles skan rejestr dodatkowy na uzyj filtrowania.

Lubie_Lody · 30 Kwietnia 2013

Extras:

OTL Extras logfile created on: 2013-04-30 22:22:29 - Run 5
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\KAMA\Pulpit
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

3,50 Gb Total Physical Memory | 2,96 Gb Available Physical Memory | 84,73% Memory free
5,34 Gb Paging File | 4,82 Gb Available in Paging File | 90,33% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 48,83 Gb Total Space | 23,62 Gb Free Space | 48,37% Space Free | Partition Type: NTFS
Drive D: | 87,89 Gb Total Space | 28,51 Gb Free Space | 32,44% Space Free | Partition Type: NTFS
Drive E: | 96,16 Gb Total Space | 37,42 Gb Free Space | 38,92% Space Free | Partition Type: NTFS

Computer Name: KAMA-058BEFE890 | User Name: KAMA | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = ChromeHTML.T6ZXHSUD7CIB7VIGQKAH2VBGSI] -- C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe (Google Inc.)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"UacDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallDisableNotify" = 0
"FirewallOverride" = 0
"UacDisableNotify" = 0
"UpdatesDisableNotify" = 0

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"58574:TCP" = 58574:TCP:*:Enabled:Pando Media Booster
"58574:UDP" = 58574:UDP:*:Enabled:Pando Media Booster

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"58574:TCP" = 58574:TCP:*:Enabled:Pando Media Booster
"58574:UDP" = 58574:UDP:*:Enabled:Pando Media Booster

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\Program Files\Pando Networks\Media Booster\PMB.exe" = C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"D:\GRY\METIN\metin2client.bin" = D:\GRY\METIN\metin2client.bin:*:Enabled:Metin2Client -- (Ymir Entertainment)
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation)
"C:\WINDOWS\system32\rundll32.exe" = C:\WINDOWS\system32\rundll32.exe:*:Enabled:Uruchamia plik DLL jako aplikację -- (Microsoft Corporation)
"C:\Program Files\Gadu-Gadu 10\gg.exe" = C:\Program Files\Gadu-Gadu 10\gg.exe:*:Enabled:Gadu-Gadu 10 -- (GG Network S.A.)
"D:\GRY\Draenor2 Klient\metin2client.bin" = D:\GRY\Draenor2 Klient\metin2client.bin:*:Enabled:metin2client -- ()
"C:\WINDOWS\system32\javaw.exe" = C:\WINDOWS\system32\javaw.exe:*:Enabled:Java Platform SE binary
"D:\GRY\CS\SteamApps\gangrenki\condition zero\hl.exe" = D:\GRY\CS\SteamApps\gangrenki\condition zero\hl.exe:*:Enabled:Half-Life Launcher
"D:\uTorrent.exe" = D:\uTorrent.exe:*:Enabled:µTorrent
"D:\GRY\KamerMod\metin2mod_2011sf.exe" = D:\GRY\KamerMod\metin2mod_2011sf.exe:*:Enabled:metin2mod_2011sf
"D:\GRY\Tiveria\game.bin" = D:\GRY\Tiveria\game.bin:*:Enabled:game
"D:\GRY\Nowy folder (2)\metin2client.bin" = D:\GRY\Nowy folder (2)\metin2client.bin:*:Enabled:metin2client
"D:\GRY\BattleRelams\Battle_Realms_F.exe" = D:\GRY\BattleRelams\Battle_Realms_F.exe:*:Enabled:Battle_Realms_F -- ()
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE" = C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" = C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"D:\GRY\patcher\metin2.bin" = D:\GRY\patcher\metin2.bin:*:Enabled:metin2
"D:\GRY\starter.exe" = D:\GRY\starter.exe:*:Enabled:starter
"C:\Program Files\Counter-Strike 1.6\hl.exe" = C:\Program Files\Counter-Strike 1.6\hl.exe:*:Enabled:Half-Life Launcher
"D:\GRY\Imetin\starter.exe" = D:\GRY\Imetin\starter.exe:*:Enabled:starter
"C:\Program Files\Java\jre7\bin\javaw.exe" = C:\Program Files\Java\jre7\bin\javaw.exe:*:Enabled:Java Platform SE binary
"C:\Program Files\Pando Networks\Media Booster\PMB.exe" = C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
"C:\WINDOWS\system32\dmwu.exe" = C:\WINDOWS\system32\dmwu.exe:*:Enabled:dmwu
"C:\WINDOWS\system32\ARFC\wrtc.exe" = C:\WINDOWS\system32\ARFC\wrtc.exe:*:Enabled:wrtc -- ()
"D:\GRY\Irnal\metin2client.bin" = D:\GRY\Irnal\metin2client.bin:*:Enabled:metin2client
"D:\GRY\ProMT2\metin2client.bin" = D:\GRY\ProMT2\metin2client.bin:*:Enabled:metin2client
"C:\Program Files\Metin2\Eleris.exe" = C:\Program Files\Metin2\Eleris.exe:*:Enabled:Eleris
"D:\GRY\REINOR\Reinor.exe" = D:\GRY\REINOR\Reinor.exe:*:Enabled:Reinor
"D:\GRY\WoT\WoTLauncher.exe" = D:\GRY\WoT\WoTLauncher.exe:*:Enabled:World of Tanks Launcher -- (Wargaming.net)
"D:\GRY\WoT\WorldOfTanks.exe" = D:\GRY\WoT\WorldOfTanks.exe:*:Enabled:World of Tanks -- (Wargaming.net)
"D:\GRY\Balantia\Balantia.exe" = D:\GRY\Balantia\Balantia.exe:*:Enabled:Balantia -- ()
"D:\GRY\Gloria\Gloria.exe" = D:\GRY\Gloria\Gloria.exe:*:Enabled:Gloria
"C:\Documents and Settings\KAMA\Ustawienia lokalne\Apps\2.0\Y8K62XV0.ERT\80PJ32OX.J7E\laun...app_59711684aa47878d_0001.001d_82c2447510b53390\Launcher.exe" = C:\Documents and Settings\KAMA\Ustawienia lokalne\Apps\2.0\Y8K62XV0.ERT\80PJ32OX.J7E\laun...app_59711684aa47878d_0001.001d_82c2447510b53390\Launcher.exe:*:Enabled:Launcher
"C:\WINDOWS\system32\PnkBstrA.exe" = C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA -- ()
"C:\WINDOWS\system32\PnkBstrB.exe" = C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB -- ()
"C:\Ubisoft\Ghost Recon Online\PDC-Live\GhostReconOnline.exe" = C:\Ubisoft\Ghost Recon Online\PDC-Live\GhostReconOnline.exe:*:Enabled:GRO Client
"D:\GRY\CS\SteamApps\gangrenki\team fortress 2\hl2.exe" = D:\GRY\CS\SteamApps\gangrenki\team fortress 2\hl2.exe:*:Enabled:hl2
"C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\Google\Google Talk Plugin\googletalkplugin.exe" = C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin
"D:\GRY\CS\Steam.exe" = D:\GRY\CS\Steam.exe:*:Enabled:Steam -- (Valve Corporation)
"D:\GRY\TESTDRIVE\TestDriveUnlimited.exe" = D:\GRY\TESTDRIVE\TestDriveUnlimited.exe:*:Enabled:Test Drive Unlimited -- (Eden Games)
"C:\Documents and Settings\KAMA\Ustawienia lokalne\Temp\funmt2.exe" = C:\Documents and Settings\KAMA\Ustawienia lokalne\Temp\funmt2.exe:*:Enabled:funmt2
"D:\GRY\NightCore\NightCore.PL\NightCore.PL.exe" = D:\GRY\NightCore\NightCore.PL\NightCore.PL.exe:*:Enabled:NightCore.PL
"C:\Program Files\EslWire\wire.exe" = C:\Program Files\EslWire\wire.exe:*:Enabled:ESL Wire Client -- (Turtle Entertainment GmbH)
"D:\GRY\Almantia_full\Almantia.exe" = D:\GRY\Almantia_full\Almantia.exe:*:Enabled:Almantia
"C:\Program Files\EA Games\Battlefield Heroes\BFHeroes.exe" = C:\Program Files\EA Games\Battlefield Heroes\BFHeroes.exe:*:Enabled:Battlefield Heroes
"D:\GRY\Yitian2\metin2client.bin" = D:\GRY\Yitian2\metin2client.bin:*:Enabled:metin2client
"D:\GRY\CS\steamapps\common\dota 2 beta\dota.exe" = D:\GRY\CS\steamapps\common\dota 2 beta\dota.exe:*:Enabled:Dota 2
"D:\GRY\CS\steamapps\common\Half-Life\hl.exe" = D:\GRY\CS\steamapps\common\Half-Life\hl.exe:*:Enabled:Counter-Strike -- (Valve)
"D:\GRY\Nowy folder\game.exe" = D:\GRY\Nowy folder\game.exe:*:Enabled:game -- ()
"C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts\Need For Speed World\Data\nfsw.exe" = C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts\Need For Speed World\Data\nfsw.exe:*:Enabled:Need for Speed World -- (Electronic Arts)
"C:\Program Files\EA Games\Battlefield Play4Free\BFP4f.exe" = C:\Program Files\EA Games\Battlefield Play4Free\BFP4f.exe:*:Enabled:BFP4f Application
"D:\GRY\Balantia\metin2client.bin" = D:\GRY\Balantia\metin2client.bin:*:Enabled:metin2client -- ()
"C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe" = C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe:*:Enabled:Daemonu.exe -- (NVIDIA Corporation)
"C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1" = Euro Truck Simulator 2
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1" = World of Tanks
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2AFF2951-86B1-3C53-B34D-B440F11E7D0A}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - PLK
"{319D91C6-3D44-436C-9F79-36C0D22372DC}" = TP-LINK Wireless Configuration Utility
"{321320E1-0E5A-36CB-9E52-F3B201B8C4D4}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{38A1E3ED-D913-41D2-9953-A93D5ACE3ADF}" = TL-WN721N/TL-WN722N Driver
"{390DD8BB-BB57-4942-A029-2D913E4E9D74}" = Microsoft Security Client
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4DDC3BED-CC68-44AA-B435-D727B620CA5B}" = Linksys Wireless-G PCI Adapter
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.3
"{5A0DDC27-88E5-3CAD-BC3D-28FFD05CA6B9}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - PLK
"{5C19E2DC-4CCF-3114-B40A-6E565987025F}" = Microsoft .NET Framework 4 Extended PLK Language Pack
"{60D32CDC-E3BE-4578-BA10-29322307CDDC}" = Logitech Gaming Software 5.10
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX
"{90120000-0010-0415-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Polish) 12
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0015-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-001F-0415-0000-0000000FF1CE}_ENTERPRISE_{9CC96D78-9E1D-46E0-AF4D-3EB440CD4619}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-0044-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}_ENTERPRISE_{0C8AB602-A234-45AB-B355-4C863C1D2FA8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9AA761E6-CA51-4FF2-A552-D51638BF0595}" = Battle Realms
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1045-7B44-A70000000000}" = Adobe Reader 7.0 - Polish
"{B18CEC65-463D-49CA-9D5F-19B63E48015D}" = Diskeeper Professional Edition
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 314.22
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 314.22
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView" = NVIDIA nView 136.53
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.12.1031
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 1.12.12
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C37A0BC1-52EE-4F97-8223-5CA9FC0357B0}" = Test Drive Unlimited
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{E0303B6A-C675-4102-95DA-C013625BFA99}" = GTA San Andreas
"{E5F05232-96B6-4552-A480-785A60A94B21}" = System Requirements Lab CYRI
"{E9F81423-211E-46B6-9AE0-38568BC5CF6F}" =
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"7-Zip" = 7-Zip 9.20
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"CCleaner" = CCleaner
"Counter-Strike 1.6" = Counter-Strike 1.6
"Creative Live! Cam Center" = Creative Live! Cam Center
"Creative Live! Cam Vista IM User's Guide English" = Creative Live! Cam Vista IM User's Guide (English)
"Creative Software AutoUpdate" = Creative Software AutoUpdate
"Creative VF0260" = Creative Live! Cam Vista IM Driver (1.01.03.1104)
"Creative WebCam Center" = Creative WebCam Center
"ENTERPRISE" = Microsoft Office Enterprise 2007
"ESL Wire_is1" = ESL Wire 1.15.4
"Fraps" = Fraps
"Gadu-Gadu 10" = Gadu-Gadu 10
"GIMP-2_is1" = GIMP 2.8.2
"ie8" = Windows Internet Explorer 8
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware wersja 1.75.0.1300
"Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended
"Microsoft Security Client" = Microsoft Security Essentials
"Mozilla Firefox 14.0.1 (x86 pl)" = Mozilla Firefox 14.0.1 (x86 pl)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MTA:SA 1.3" = MTA:SA v1.3.1
"PunkBusterSvc" = PunkBuster Services
"Ravia.eu" = Ravia.eu
"Steam App 35450" = Red Orchestra 2: Heroes of Stalingrad
"Steam App 440" = Team Fortress 2
"Steam App 570" = Dota 2
"SysInfo" = Creative System Information
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"VDOTool_is1" = VDOTool 5.3
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR 4.20 (32-bitowy)
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
"Yitian2" = Yitian2 1.0

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"1320869477.portal.qtrax.com" = Qtrax Player
"Google Chrome" = Google Chrome
"UnityWebPlayer" = Unity Web Player

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 2013-04-24 15:11:41 | Computer Name = KAMA-058BEFE890 | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094),
P2 4.2.223.0, P3 timeout, P4 1.1.9402.0, P5 fixed, P6 2 _ 2049+, P7 5 _ not boot,
P8 NIL, P9 NIL, P10 NIL.

Error - 2013-04-24 15:32:19 | Computer Name = KAMA-058BEFE890 | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094),
P2 4.2.223.0, P3 timeout, P4 1.1.9402.0, P5 fixed, P6 2 _ 2049+, P7 5 _ not boot,
P8 NIL, P9 NIL, P10 NIL.

Error - 2013-04-24 15:36:21 | Computer Name = KAMA-058BEFE890 | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094),
P2 4.2.223.0, P3 timeout, P4 1.1.9402.0, P5 fixed, P6 2 _ 2049+, P7 5 _ not boot,
P8 NIL, P9 NIL, P10 NIL.

Error - 2013-04-28 04:04:45 | Computer Name = KAMA-058BEFE890 | Source = crypt32 | ID = 131080
Description = Nie można automatycznie pobrać aktualizacji numeru sekwencji głównej
listy innych firm z: ,
wystąpił błąd: The server name or address could not be resolved

Error - 2013-04-28 04:04:45 | Computer Name = KAMA-058BEFE890 | Source = crypt32 | ID = 131080
Description = Nie można automatycznie pobrać aktualizacji numeru sekwencji głównej
listy innych firm z: ,
wystąpił błąd: To połączenie sieciowe nie istnieje.

Error - 2013-04-29 12:03:21 | Computer Name = KAMA-058BEFE890 | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd lollauncher.exe, wersja 0.0.0.0, moduł powodujący
błąd launcher.maestro.dll, wersja 1.0.0.29, adres błędu 0x000022d6.

Error - 2013-04-30 06:51:07 | Computer Name = KAMA-058BEFE890 | Source = MsiInstaller | ID = 11609
Description =

Error - 2013-04-30 08:52:29 | Computer Name = KAMA-058BEFE890 | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 0x80070670, P2 patchapplication, P3 am bdd,
P4 11.1.4340.0, P5 mpsigstub.exe, P6 4.2.223.0, P7 microsoft security essentials,
P8 NIL, P9 NIL, P10 NIL.

Error - 2013-04-30 13:37:38 | Computer Name = KAMA-058BEFE890 | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094),
P2 4.2.223.0, P3 timeout, P4 1.1.9402.0, P5 fixed, P6 2 _ 2049+, P7 5 _ not boot,
P8 NIL, P9 NIL, P10 NIL.

Error - 2013-04-30 14:19:33 | Computer Name = KAMA-058BEFE890 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca explorer.exe, wersja 6.0.2900.5512, moduł zawieszenia
hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.

[ System Events ]
Error - 2013-04-30 13:17:13 | Computer Name = KAMA-058BEFE890 | Source = Service Control Manager | ID = 7011
Description = Limit czasu (30000 milisekund) podczas oczekiwania na odpowiedź transakcji
z usługi ALG.

Error - 2013-04-30 13:17:13 | Computer Name = KAMA-058BEFE890 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Usługa bramy warstwy aplikacji z powodu
następującego błędu: %%1053

Error - 2013-04-30 13:21:59 | Computer Name = KAMA-058BEFE890 | Source = atapi | ID = 262153
Description = Urządzenie \Device\Ide\IdePort2 nie odpowiedziało w ramach ustalonego
limitu czasu.

Error - 2013-04-30 13:23:08 | Computer Name = KAMA-058BEFE890 | Source = atapi | ID = 262153
Description = Urządzenie \Device\Ide\IdePort2 nie odpowiedziało w ramach ustalonego
limitu czasu.

Error - 2013-04-30 13:30:27 | Computer Name = KAMA-058BEFE890 | Source = System Error | ID = 1003
Description = Kod błędu 000000f4, parametr 1 00000003, parametr 2 89100020, parametr
3 89100194, parametr 4 805d22aa.

Error - 2013-04-30 14:23:54 | Computer Name = KAMA-058BEFE890 | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi
EventSystem z argumentami „” w celu uruchomienia serwera: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 2013-04-30 15:27:50 | Computer Name = KAMA-058BEFE890 | Source = atapi | ID = 262153
Description = Urządzenie \Device\Ide\IdePort2 nie odpowiedziało w ramach ustalonego
limitu czasu.

Error - 2013-04-30 15:34:40 | Computer Name = KAMA-058BEFE890 | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi
EventSystem z argumentami „” w celu uruchomienia serwera: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 2013-04-30 15:46:42 | Computer Name = KAMA-058BEFE890 | Source = System Error | ID = 1003
Description = Kod błędu 000000f4, parametr 1 00000003, parametr 2 88ead020, parametr
3 88ead194, parametr 4 805d22aa.

Error - 2013-04-30 16:10:47 | Computer Name = KAMA-058BEFE890 | Source = Service Control Manager | ID = 7011
Description = Limit czasu (30000 milisekund) podczas oczekiwania na odpowiedź transakcji
z usługi NVSvc.

< End of report >

Jabyś mógł napisz jaki to wirus i jak go usunąć (o ile jest). Ja zaraz chyba kończe, więc zrobię reszte jutro.

Fr3shMak3r · 1 Maja 2013

Uruchom OTL i w Oknie Własne Opcje Skanowania :

:OTL
O4 - HKLM..\Run: [DiskeeperSystray] C:\Program Files\Executive Software\Diskeeper\DkIcon.exe (Executive Software International, Inc.)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Documents and Settings\All Users\Dane aplikacji\MTA San Andreas All\1.3\temp\FairplayKD.sys -- (FairplayKD)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

:Files
C:\WINDOWS\System32\BMXCtrlState-{00000004-00000000-00000001-00001102-00000002-80651102}.rfx
C:\WINDOWS\System32\BMXBkpCtrlState-{00000004-00000000-00000001-00001102-00000002-80651102}.rfx
C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
C:\WINDOWS\tasks\MpIdleTask.job
C:\Documents and Settings\All Users\Pulpit\Skype.lnk

:Commands
[emptytemp]

I klik na wykonaj skrypt zatwierdź restart i pokazujesz log z usuwania .

Pobierz AdwCleaner i użyj opcji Delete i po restarcie przesyłasz log .

Obowiązkowo log GMER :

http://www.mpcforum.pl/topic/679592-tutlogi-co-i-jak/

Tylko ,że z racji tego że u ciebie działa emulator napędów wirtualnych odinstaluj go całkowicie z systemu przed tworzeniem loga GMER!!!

DRV - [2012-08-29 10:24:38 | 000,664,064 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd)

Tu masz jak odinstalować go całkowicie z systemu :

http://www.MPCpc.pl/forum-6/announcement-2-wa%C5%BCne-oprogramowanie-emuluj%C4%85ce-nap%C4%99dy/

Lubie_Lody · 1 Maja 2013

Konieczne jest przesylanie logu z usuwania tym skryptem w otl? chyba go nie zapisalem i usunelem:x

Fr3shMak3r · 1 Maja 2013

Powinien być w C:/_OTL

Jeśli nie ma to zrób nowy log .

Lubie_Lody · 1 Maja 2013

To jest log adwcleaner, zaraz znajde z otl'a.

# AdwCleaner v2.300 - Log utworzony 01/05/2013 o 10:59:16
# Aktualizacja 28/04/2013 przez Xplode
# System operacyjny : Microsoft Windows XP Dodatek Service Pack 3 (32 bits)
# Użytkownik : KAMA - KAMA-058BEFE890
# Tryb uruchomienia : Normalny
# Ścieżka : C:\Documents and Settings\KAMA\Moje dokumenty\Downloads\AdwCleaner (1).exe
# Opcja [usuń]

***** [usługi] *****

***** [Pliki / Foldery] *****

Folder Usunięto : C:\Program Files\Web Assistant

***** [Rejestr] *****

Klucz Usunięto : HKLM\SOFTWARE\Classes\CLSID\{14F35FFC-522A-4DD1-A07E-6B8B65C6891E}
Klucz Usunięto : HKLM\SOFTWARE\Classes\TypeLib\{AC329328-7EC4-4C34-B672-0A2B90CB9B00}

***** [Przeglądarki Internetowe] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Rejestr w porządku.

-\\ Mozilla Firefox v14.0.1 (pl)

Plik : C:\Documents and Settings\KAMA\Dane aplikacji\Mozilla\Firefox\Profiles\af1wqn7v.default\prefs.js

[OK] Plik w porządku.

-\\ Google Chrome v26.0.1410.64

Plik : C:\Documents and Settings\KAMA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Preferences

[OK] Plik w porządku.

*************************

AdwCleaner[R1].txt - [30162 octets] - [15/04/2013 13:55:04]
AdwCleaner[s1].txt - [29090 octets] - [15/04/2013 13:55:39]
AdwCleaner[s2].txt - [418 octets] - [01/05/2013 10:58:55]
AdwCleaner[s3].txt - [1333 octets] - [01/05/2013 10:59:16]

########## EOF - C:\AdwCleaner[s3].txt - [1393 octets] ##########

Z usuwania otl:

All processes killed
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\DiskeeperSystray deleted successfully.
C:\Program Files\Executive Software\Diskeeper\DkIcon.exe moved successfully.
Service FairplayKD stopped successfully!
Service FairplayKD deleted successfully!
File C:\Documents and Settings\All Users\Dane aplikacji\MTA San Andreas All\1.3\temp\FairplayKD.sys not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
========== FILES ==========
C:\WINDOWS\System32\BMXCtrlState-{00000004-00000000-00000001-00001102-00000002-80651102}.rfx moved successfully.
C:\WINDOWS\System32\BMXBkpCtrlState-{00000004-00000000-00000001-00001102-00000002-80651102}.rfx moved successfully.
C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job moved successfully.
C:\WINDOWS\tasks\MpIdleTask.job moved successfully.
C:\Documents and Settings\All Users\Pulpit\Skype.lnk moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Administrator.KAMA-058BEFE890
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: KAMA
->Temp folder emptied: 29681296 bytes
->Temporary Internet Files folder emptied: 378155 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 31317388 bytes
->Flash cache emptied: 716 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 502414 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33192 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 63437486 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 120,00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 05012013_104545

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Fr3shMak3r · 1 Maja 2013

Bierz Się na GMER ,ale pamiętaj żebyś usunął ten sterownik który podałem ci na górze .

Tam masz poradnik jak to zrobić .

Lubie_Lody · 1 Maja 2013

Log w gmer ma byc pelny wszystkich dyskow czy szybki???

Fr3shMak3r · 1 Maja 2013

Pełny .

Tam masz wszystko zaznaczyć .

Lubie_Lody · 2 Maja 2013

Chce teraz wlaczyc komputer to przy uruchamianiu i napisie 'zapraszamy' wyskakiwal blad costam o zabezpieczeniach i uszkodzonym jakims pliku (nie bylo podanej nazwy tego pliku) i gdy poczekalem 30 sek. Tego co sie tam ladowalo to wyskoczylo ze uruchomi sie w jakims trybie i dane zostana skasowane po wylogowanu

Zresetowalem komputer i teraz sprawdzanie systemu plikow na c

Ile moga sie robic te logi gmer??

Lubie_Lody · 3 Maja 2013

reff.

Teraz jest juz odrobine lepiej, ale ciagle komputer wolno pracuje

Lubie_Lody · 3 Maja 2013

Dobra, zostawiam komputer z robiacym sie logiem gmer, jezeli dzis to sie nie zrobi, to nie chce dluzej czekac pakuje zdjecia na pendrivea i wale format:x

Lubie_Lody · 5 Maja 2013

Dobra, robie format.

Powiedzcie jeszcze, jakich ja sterowników potrzebuje. Mam takie:

-Plyte od windowsa

-Plyte od karty graficznej

-plyte od plyty glownej

-plyte od internetu

Nie wiem, gdzie mam plyte od karty dzwiekowej, jezeli pobiore te sterowniki z internetu, to beda one dzialaly??

Fr3shMak3r · 5 Maja 2013

Tak będą działały .

Karte dźwiękową masz dedykowaną czy zinterowaną ?

Zaloguj się

👋 Witaj na MPCForum!

Komputer wolno sie uruchamia, blue screen przy aplikacjach.

Rekomendowane odpowiedzi

Zarchiwizowany