wasu69 utworzono 2 lutego 2010 utworzono 2 lutego 2010 (edytowane) Witam mam problem z procesorem mianowicie: [url="http://www.wgraj.net/img.php?mode=show&file=51089&height=515&width=441"]Screen[/url] Moja plyta glowna to : AsRock G31M-GS Gdy zamiast tej kolosalnej liczby 60Gb pojawia sie standardowo 2,93 system dzial poprawnie,lecz taka wartosc juz sie nie pojawia raz jest tak jak na screenie, po resecie 25Gb potem aspowrotem i tak w kolko. System wlacza sie bardzo powoli tak jak gry i programy, gry np jesli juz sie wlaczy co trwa naprawde dlugo dziala w trybie tzw SLOW MOTION. Nie wiem co sie stalo czemu tak nagle zaczelo sie dziac, macie jakis pomysl zeby to naprawic ?
asmodeuszz komentarz 2 lutego 2010 komentarz 2 lutego 2010 To wszystko jest co najmniej dziwne. Proponowałbym reset ustawień BIOS za pomocą zworki / baterii, ewentualnie jego aktualizację.
wasu69 komentarz 2 lutego 2010 Autor komentarz 2 lutego 2010 (edytowane) [code]REGLOOKS logfile - version 0.985 Scan started: 10-02-02 20:43:19,53 --- INFORMATION --- Manufacturer: To Be Filled By O.E.M. - Model: To Be Filled By O.E.M. Operating System: Microsoft Windows XP Professional -- 5.1.2600 -- Dodatek Service Pack 2 -- Processor: Procesor Intel Pentium III Xeon Work Station Bootmode: Normal boot Total RAM: 3263 MB (free 2588 MB - 79%) Computername: WASOWICZ-205897 Domain: GRUPA_ROBOCZA Processor: Procesor Intel Pentium III Xeon Work Station Bootmode: Normal boot Total RAM: 3263 MB (free 2588 MB - 79%) Computername: WASOWICZ-205897 Domain: GRUPA_ROBOCZA User: wasowicz (Administrator account) Bootdevice: \Device\HarddiskVolume1 Systemdrive: C: Windowsdirectory: C:\WINDOWS Systemdirectory: C:\WINDOWS\system32 Internet Explorer Version: 6.0.2900.2180 Antivirus Program: Kaspersky Internet Security 9.0.0.463 [Enabled - Updated] Firewall: Kaspersky Internet Security 9.0.0.463 [Enabled] --- SIGCHECK --- C:\WINDOWS\explorer.exe -- [1033728] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\appmgmts.dll -- [172032] -- [04-08-03 23:43] -- sigcheck OK C:\WINDOWS\system32\browser.dll -- [77312] -- [04-08-03 23:43] -- sigcheck OK C:\WINDOWS\system32\comres.dll -- [822272] -- [04-08-03 23:43] -- sigcheck OK C:\WINDOWS\system32\comctl32.dll -- [611328] -- [04-08-03 23:43] -- sigcheck OK C:\WINDOWS\system32\cryptsvc.dll -- [60416] -- [04-08-03 23:43] -- sigcheck OK C:\WINDOWS\system32\ctfmon.exe -- [15360] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\es.dll -- [253952] -- [08-07-07 21:33] -- sigcheck OK C:\WINDOWS\system32\eventlog.dll -- [55808] -- [04-08-03 23:43] -- sigcheck OK C:\WINDOWS\system32\ias.dll NOT found C:\WINDOWS\system32\imm32.dll -- [110080] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\kernel32.dll -- [1014784] -- [09-03-21 15:21] -- sigcheck OK C:\WINDOWS\system32\linkinfo.dll -- [18944] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\lpk.dll -- [22016] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\lsass.exe -- [13312] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\mfc40u.dll -- [924432] -- [01-10-26 16:29] -- sigcheck OK C:\WINDOWS\system32\msgsvc.dll -- [33792] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\mshtml.dll -- [3084800] -- [09-12-22 06:43] -- sigcheck OK C:\WINDOWS\system32\mspmsnsv.dll -- [52736] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\mswsock.dll -- [246784] -- [08-06-20 18:42] -- sigcheck OK C:\WINDOWS\system32\netlogon.dll -- [407040] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\netman.dll -- [198144] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\ntkrnlpa.exe -- [2017280] -- [09-08-04 18:07] -- sigcheck OK C:\WINDOWS\system32\ntmssvc.dll -- [435712] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\ntoskrnl.exe -- [2137600] -- [09-08-04 18:07] -- sigcheck OK C:\WINDOWS\system32\pchsvc.dll NOT found C:\WINDOWS\system32\powrprof.dll -- [17408] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\qmgr.dll -- [382464] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\rasauto.dll -- [89088] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\regsvc.dll -- [59904] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\rpcss.dll -- [399360] -- [09-02-09 11:22] -- sigcheck OK C:\WINDOWS\system32\scecli.dll -- [185344] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\schedsvc.dll -- [192000] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\services.exe -- [111104] -- [09-02-09 11:10] -- sigcheck OK C:\WINDOWS\system32\sfc.dll -- [5120] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\sfcfiles.dll -- [1548288] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\spoolsv.exe -- [57856] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\srsvc.dll -- [171008] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\ssdpsrv.dll -- [71680] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\svchost.exe -- [14336] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\tapisrv.dll -- [246272] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\termsrv.dll -- [296448] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\upnphost.dll -- [185856] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\user32.dll -- [578560] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\userinit.exe -- [25088] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\wininet.dll -- [664576] -- [09-12-22 06:43] -- sigcheck OK C:\WINDOWS\system32\winlogon.exe -- [504832] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\ws2_32.dll -- [82944] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\wscntfy.exe -- [13824] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\wuauclt.exe -- [53472] -- [09-08-06 18:24] -- sigcheck OK C:\WINDOWS\system32\xmlprov.dll -- [129536] -- [04-08-03 23:44] -- sigcheck OK C:\WINDOWS\system32\drivers\acpiec.sys -- [12032] -- [01-10-26 15:46] -- sigcheck OK C:\WINDOWS\system32\drivers\aec.sys -- [142464] -- [04-08-03 23:54] -- sigcheck OK C:\WINDOWS\system32\drivers\asyncmac.sys -- [14336] -- [04-08-03 22:05] -- sigcheck OK C:\WINDOWS\system32\drivers\atapi.sys -- [95360] -- [04-08-03 21:59] -- sigcheck OK C:\WINDOWS\system32\drivers\beep.sys -- [4224] -- [01-08-17 20:47] -- sigcheck OK C:\WINDOWS\system32\drivers\classpnp.sys -- [49664] -- [04-08-03 22:14] -- sigcheck OK C:\WINDOWS\system32\drivers\disk.sys -- [36352] -- [04-08-03 21:59] -- sigcheck OK C:\WINDOWS\system32\drivers\iaStor.sys NOT found C:\WINDOWS\system32\drivers\ip6fw.sys -- [29056] -- [04-08-03 22:00] -- sigcheck OK C:\WINDOWS\system32\drivers\kbdclass.sys -- [24960] -- [04-08-03 23:38] -- sigcheck OK C:\WINDOWS\system32\drivers\ndis.sys -- [182912] -- [04-08-03 22:14] -- sigcheck OK C:\WINDOWS\system32\drivers\ntfs.sys -- [574592] -- [04-08-03 22:15] -- sigcheck OK C:\WINDOWS\system32\drivers\tcpip.sys -- [360320] -- [08-06-20 11:45] -- sigcheck OK --- SSODL regkeys --- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] "PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}" -- File: %SystemRoot%\system32\SHELL32.dll -- [?] "CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}" -- File: %SystemRoot%\system32\SHELL32.dll -- [?] "SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}" -- File: C:\WINDOWS\system32\stobject.dll -- [122368] -- [04-08-03 23:44] "WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}" -- File: %SystemRoot%\system32\webcheck.dll -- [?] --- STS regkeys --- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Moduł wstępnego ładowania interfejsu Browseui" -- File: %SystemRoot%\system32\browseui.dll -- [?] "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Demon buforu kategorii składników" -- File: %SystemRoot%\system32\browseui.dll -- [?] --- USERINIT regkey --- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "Userinit"="C:\\WINDOWS\\system32\\userinit.exe," File: C:\WINDOWS\system32\userinit.exe -- [25088] -- [04-08-03 23:44] --- SHELL regkey --- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "Shell"="Explorer.exe" File: C:\WINDOWS\Explorer.exe -- [1033728] -- [04-08-03 23:44] --- SYSTEM regkey --- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "System"="" --- APPINIT_DLLS regkey --- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="C:\\PROGRA~1\\KASPER~1\\KASPER~1\\mzvkbd3.dll,C:\\PROGRA~1\\KASPER~1\\KASPER~1\\kloehk.dll" File: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll -- [109072] -- [09-09-03 17:14] File: C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll -- [12304] -- [09-07-03 14:48] --- NOTIFY regkey --- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain] -- File: C:\WINDOWS\system32\crypt32.dll -- [601088] -- [04-08-03 23:43] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet] -- File: C:\WINDOWS\system32\cryptnet.dll -- [63488] -- [04-08-03 23:43] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll] -- File: C:\WINDOWS\system32\cscdll.dll -- [102400] -- [04-08-03 23:43] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon] -- File: C:\WINDOWS\system32\klogon.dll -- [219664] -- [09-07-03 14:48] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp] -- File: C:\WINDOWS\system32\wlnotify.dll -- [93184] -- [04-08-03 23:44] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule] -- File: C:\WINDOWS\system32\wlnotify.dll -- [93184] -- [04-08-03 23:44] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy] -- File: C:\WINDOWS\system32\sclgntfy.dll -- [22016] -- [04-08-03 23:44] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn] -- File: C:\WINDOWS\system32\WlNotify.dll -- [93184] -- [04-08-03 23:44] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv] -- File: C:\WINDOWS\system32\wlnotify.dll -- [93184] -- [04-08-03 23:44] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon] -- File: C:\WINDOWS\system32\wlnotify.dll -- [93184] -- [04-08-03 23:44] --- RUN / LOAD regkeys --- [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] "load"="" --- SHELLEXECUTEHOOKS regkey --- [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"="" -- File: shell32.dll -- [?] --- HKLM AUTORUN regkeys --- [HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor] "AutoRun"="" --- HKCU AUTORUN regkeys --- [HKEY_CURRENT_USER\Software\Microsoft\Command Processor] no AutoRun regkey found --- HKLM\RUN regkey --- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "nwiz" -- File: nwiz.exe /install -- [?] "NvCplDaemon" -- File: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup -- [?] "RTHDCPL" -- File: RTHDCPL.EXE -- [?] "Alcmtr" -- File: ALCMTR.EXE -- [?] "KMConfig" -- File -- "C:\Program Files\Multimedia Keyboard Driver\V5\StartAutorun.exe" KMConfig.exe -- [X] "SSBkgdUpdate" -- File: "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot -- [?] "PaperPort PTD" -- File "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe" -- [30248] -- [07-01-29 20:12] "IndexSearch" -- File "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe" -- [46632] -- [07-01-29 20:10] "PPort11reminder" -- File: "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Dane aplikacji\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini -- [?] "ControlCenter3" -- File: C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun -- [?] "Krait" -- File C:\Program Files\Razer\Krait\razerhid.exe -- [147456] -- [06-01-24 09:38] "AVP" -- File "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe" -- [303376] -- [09-07-03 14:56] "SunJavaUpdateSched" -- File "C:\Program Files\Java\jre6\bin\jusched.exe" -- [149280] -- [09-09-03 18:13] "CameraFixer" -- File C:\WINDOWS\CameraFixer.exe -- [20480] -- [05-10-03 10:23] "tsnpstd3" -- File C:\WINDOWS\tsnpstd3.exe -- [90112] -- [05-11-04 14:05] "snpstd3" -- File C:\WINDOWS\vsnpstd3.exe -- [339968] -- [05-09-05 14:55] "Adobe ARM" -- File "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" -- [935288] -- [09-09-04 11:08] "DeviceDetector" -- File: "C:\Program Files\ProXmedia\ProXmedia - Edytor zdjęć PRO v2\DeviceDetector.exe" -- [?] --- HKLM\RUNONCE regkey --- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] key not found --- HKLM\RUNONCEEX regkey --- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx] no runonceex values found --- HKLM\RUNSERVICES regkey --- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices] key not found --- HKLM\RUNSERVICESONCE regkey --- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce] key not found --- HKCU\RUN regkey --- [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MSMSGS" -- File: "C:\Program Files\Messenger\msmsgs.exe" /background -- [?] "ctfmon.exe" -- File C:\WINDOWS\system32\ctfmon.exe -- [15360] -- [04-08-03 23:44] "zASRockInstantBoot" -- File "C:\Program Files\ASRock Utility\InstantBoot\InstantBoot.exe" -- [2409992] -- [09-02-12 14:48] --- HKCU\RUNONCE regkey --- [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] no runonce values found --- HKCU\RUNONCEEX regkey --- [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx] key not found --- HKCU\RUNSERVICES regkey --- [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices] key not found --- HKCU\RUNSERVICESONCE regkey --- [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce] key not found --- HKU\.DEFAULT\Run regkeys - Default user --- [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE" -- File C:\WINDOWS\system32\CTFMON.EXE -- [15360] -- [04-08-03 23:44] --- HKU\S-1-5-18\Run regkeys - user SYSTEM --- [HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE" -- File C:\WINDOWS\system32\CTFMON.EXE -- [15360] -- [04-08-03 23:44] --- HKU\S-1-5-19\Run regkeys - User Lokale service --- [HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE" -- File C:\WINDOWS\system32\CTFMON.EXE -- [15360] -- [04-08-03 23:44] --- HKU\S-1-5-20\Run regkeys - User Lokale service --- [HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE" -- File C:\WINDOWS\system32\CTFMON.EXE -- [15360] -- [04-08-03 23:44] --- HKLM\Explorer\Run regkeys --- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] key not found --- HKCU\Explorer\Run regkeys --- [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] key not found --- Image File Execution regkeys --- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options] no debuggers found --- BROWSER HELPER OBJECTS regkeys --- [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] -- File: C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll -- [75128] -- [09-02-27 12:07] [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}] -- File: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll -- [68112] -- [09-07-03 14:48] [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] -- File: C:\Program Files\Java\jre6\bin\jp2ssv.dll -- [41760] -- [09-09-03 18:13] [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}] -- File: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll -- [264720] -- [09-09-03 17:14] [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] -- File: C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll -- [73728] -- [09-09-03 18:13] --- TOOLBAR regkeys --- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] no toolbars found --- HKLM\URLSEARCHHOOKS regkeys --- [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks] key not found --- HKCU\URLSEARCHHOOKS regkeys --- [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] {CFBFAE00-17A6-11D0-99CB-00C04FD64497} -- File: %SystemRoot%\system32\shdocvw.dll -- [?] --- SRCEENSAVER regkey --- [HKEY_CURRENT_USER\Control Panel\Desktop] scrnsave.exe value not found --- ALTERNATESHELL regkey --- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot] File: C:\WINDOWS\system32\cmd.exe -- [395776] -- [04-08-03 23:44] --- SECURITYPROVIDERS regkey --- [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" File: C:\WINDOWS\system32\msapsspc.dll -- [86016] -- [04-08-03 23:44] File: C:\WINDOWS\system32\schannel.dll -- [168448] -- [09-06-25 09:48] File: C:\WINDOWS\system32\digest.dll -- [68608] -- [04-08-03 23:43] File: C:\WINDOWS\system32\msnsspc.dll -- [290816] -- [04-08-03 23:44] --- Active Setup\Installed Components regkey --- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] -- File: %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE -- [?] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS] -- File: RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP -- [?] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] -- File: %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE -- [?] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] -- File: %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll -- [?] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] -- File: "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install -- [?] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] -- File: rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT -- [?] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] -- File: rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser -- [?] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] -- File: rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub -- [?] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}] -- File: regsvr32.exe /s /n /i:U shell32.dll -- [?] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}] -- File: %SystemRoot%\system32\ie4uinit.exe -- [?] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}] -- File: %SystemRoot%\system32\ie4uinit.exe -- [?] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -- File: c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install -- [?] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}] -- filepath not found --- Services regkey --- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cardex] -- File: \??\C:\WINDOWS\system32\drivers\TBPANEL.SYS -- [?] --- SAFEBOOT MINIMAL SERVICES --- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal no unknown services found --- SAFEBOOT Network SERVICES --- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network DnsCache --- BOOTEXECUTE regkey --- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager] "BootExecute"= autocheck autochk *\0\0 --- PENDINGFILERENAMEOPERATIONS regkey --- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager] PendingFileRenameOperations key not found --- WOW-CMDLINE regkeys --- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WOW] "cmdline" = %SystemRoot%\system32\ntvdm.exe "cmdline" = %SystemRoot%\system32\ntvdm.exe -a %SystemRoot%\system32\krnl386 --- NETSVCS regkey --- [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] -- NETSVCS 0WmdmPmSN --- DNS SERVER regkeys --- no "NameServer" values found --- File associations --- .BAT files: ("%1" %*) .COM files: ("%1" %*) .EXE files: ("%1" %*) .HLP files: (%SystemRoot%\System32\winhlp32.exe %1) .INF files: (%SystemRoot%\System32\NOTEPAD.EXE %1) .INI files: (%SystemRoot%\System32\NOTEPAD.EXE %1) .JS files: (%SystemRoot%\System32\WScript.exe "%1" %*) .PIF files: ("%1" %*) .REG files: ("regedit.exe" "%1") .SCR files: ("%1" /S) .TXT files: (%SystemRoot%\system32\NOTEPAD.EXE %1) .VBS files: (%SystemRoot%\System32\WScript.exe "%1" %*) --- STARTUP FOLDERS --- C:\Documents and Settings\wasowicz\Menu Start\Programy\Autostart\desktop.ini -- [84] -- [09-09-03 15:57] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\desktop.ini -- [84] -- [09-09-03 15:57] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\DSLMON.lnk -- [836] -- [09-09-09 21:44] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk -- [1750] -- [09-09-03 17:30] --- TASK SCHEDULER JOBS --- C:\WINDOWS\tasks\WGASetup.job -- [260] -- [10-02-02 20:14] Scan completed: 10-02-02 20:44:05,46 FINISHED [/code] [code]Logfile of random's system information tool 1.06 (written by random/random) Run by wasowicz at 2010-02-02 20:46:31 Microsoft Windows XP Professional Dodatek Service Pack 2 System drive C: has 411 GB (86%) free of 477 GB Total RAM: 3263 MB (79% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:46:32, on 10-02-02 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Multimedia Keyboard Driver\V5\StartAutorun.exe C:\Program Files\Multimedia Keyboard Driver\V5\KMConfig.exe C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe C:\Program Files\Razer\Krait\razerhid.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\WINDOWS\CameraFixer.exe C:\Program Files\Brother\ControlCenter3\brccMCtl.exe C:\WINDOWS\vsnpstd3.exe C:\Program Files\Multimedia Keyboard Driver\V5\KMProcess.exe C:\Program Files\ProXmedia\ProXmedia - Edytor zdjęć PRO v2\DeviceDetector.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Multimedia Keyboard Driver\V5\KMWDSrv.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\Razer\Krait\razerofa.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\ASRock Utility\InstantBoot\InstantBoot.exe C:\Program Files\Nowe Gadu-Gadu\gg.exe C:\Program Files\Nowe Gadu-Gadu\spellchecker_gg.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\wasowicz\Moje dokumenty\Pobieranie\RSIT.exe C:\Program Files\trend micro\wasowicz.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.duxet.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.duxet.com/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [KMConfig] "C:\Program Files\Multimedia Keyboard Driver\V5\StartAutorun.exe" KMConfig.exe O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe" O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe" O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Dane aplikacji\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun O4 - HKLM\..\Run: [Krait] C:\Program Files\Razer\Krait\razerhid.exe O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [CameraFixer] C:\WINDOWS\CameraFixer.exe O4 - HKLM\..\Run: [tsnpstd3] C:\WINDOWS\tsnpstd3.exe O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [DeviceDetector] "C:\Program Files\ProXmedia\ProXmedia - Edytor zdjęć PRO v2\DeviceDetector.exe" O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [zASRockInstantBoot] "C:\Program Files\ASRock Utility\InstantBoot\InstantBoot.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: Dodaj do blokowanych banerów - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: &Wirtualna klawiatura - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: &Sprawdzanie adresów - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{28717143-A29A-4C68-B75A-7BDD61202080}: NameServer = 213.241.79.38,213.241.79.37 O17 - HKLM\System\CCS\Services\Tcpip\..\{C85A4386-D89B-4A8A-A3B8-949E7BFE390B}: NameServer = 83.238.255.76 213.241.79.37 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Multimedia Keyboard Driver\V5\KMWDSrv.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Unknown owner - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe -- End of file - 7282 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\WGASetup.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}] IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll [2009-07-03 68112] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-09-03 41760] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}] FilterBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll [2009-09-03 264720] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-09-03 73728] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "nwiz"=nwiz.exe /install [] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-06-10 13758464] "RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-10-28 17331200] "Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344] "KMConfig"=C:\Program Files\Multimedia Keyboard Driver\V5\StartAutorun.exe [2007-03-06 212992] "SSBkgdUpdate"=C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25 210472] "PaperPort PTD"=C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe [2007-01-29 30248] "IndexSearch"=C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe [2007-01-29 46632] "PPort11reminder"=C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe [2007-02-01 255528] "ControlCenter3"=C:\Program Files\Brother\ControlCenter3\brctrcen.exe [2007-01-26 65536] "Krait"=C:\Program Files\Razer\Krait\razerhid.exe [2006-01-24 147456] "AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [2009-07-03 303376] "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-09-03 149280] "CameraFixer"=C:\WINDOWS\CameraFixer.exe [2005-10-03 20480] "tsnpstd3"=C:\WINDOWS\tsnpstd3.exe [2005-11-04 90112] "snpstd3"=C:\WINDOWS\vsnpstd3.exe [2005-09-05 339968] "Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288] "DeviceDetector"=C:\Program Files\ProXmedia\ProXmedia - Edytor zdjęć PRO v2\DeviceDetector.exe [2009-11-01 30720] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2004-08-03 1667584] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-03 15360] "zASRockInstantBoot"=C:\Program Files\ASRock Utility\InstantBoot\InstantBoot.exe [2009-02-12 2409992] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe [2009-11-11 870400] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [2007-03-12 663552] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] C:\WINDOWS\system32\NvMcTray.dll [2009-06-10 86016] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam] c:\program files\steam\steam.exe [2009-11-17 1217808] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart DSLMON.lnk - C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLS"="C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon] C:\WINDOWS\system32\klogon.dll [2009-07-03 219664] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "HonorAutoRunSetting"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent" "C:\Program Files\Nowe Gadu-Gadu\gg.exe"="C:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu" "C:\Program Files\Steam\steamapps\krejz0l69\counter-strike\hl.exe"="C:\Program Files\Steam\steamapps\krejz0l69\counter-strike\hl.exe:*:Enabled:Half-Life Launcher" "C:\Program Files\mIRC\mirc.exe"="C:\Program Files\mIRC\mirc.exe:*:Enabled:mIRC" "C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary" "C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary" "C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test" "C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Uruchamia plik DLL jako aplikację" "C:\Program Files\EA GAMES\Need for Speed Most Wanted\Need for Speed Most Wanted.exe"="C:\Program Files\EA GAMES\Need for Speed Most Wanted\Need for Speed Most Wanted.exe:*:Enabled:Need for Speed Most Wanted" "C:\Program Files\KONAMI\Pro Evolution Soccer 6\pes6.exe"="C:\Program Files\KONAMI\Pro Evolution Soccer 6\pes6.exe:*:Enabled:pes6.exe" "C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a10f7f7b-e4c5-11de-b238-4d6564696130}] shell\Auto\command - auto.exe shell\AutoRun\command - auto.exe ======File associations====== .reg - open - "regedit.exe" "%1" ======List of files/folders created in the last 1 months====== 2010-02-02 20:45:17 ----D---- C:\Program Files\trend micro 2010-02-02 20:45:16 ----D---- C:\rsit 2010-02-02 20:44:05 ----A---- C:\result.txt 2010-02-02 20:18:11 ----D---- C:\Program Files\ASRock Utility 2010-02-02 19:30:32 ----D---- C:\WINDOWS\setup.pss 2010-01-31 21:17:42 ----D---- C:\kopia_dokumentow 2010-01-30 00:30:27 ----D---- C:\Program Files\ALLConverter 2010-01-30 00:30:17 ----A---- C:\WINDOWS\system32\iconv.dll 2010-01-30 00:30:16 ----D---- C:\Program Files\NAPI-PROJEKT 2010-01-30 00:30:14 ----D---- C:\Program Files\ALLPlayer 2010-01-29 23:10:33 ----D---- C:\Program Files\JDownloader 2010-01-23 03:00:38 ----HDC---- C:\WINDOWS\$NtUninstallKB978207$ 2010-01-12 22:24:38 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$ 2010-01-12 22:24:29 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$ ======List of files/folders modified in the last 1 months====== 2010-02-02 20:45:32 ----D---- C:\WINDOWS\Temp 2010-02-02 20:45:17 ----RD---- C:\Program Files 2010-02-02 20:44:05 ----D---- C:\WINDOWS 2010-02-02 20:43:23 ----D---- C:\WINDOWS\system32\CatRoot2 2010-02-02 20:40:55 ----D---- C:\Program Files\Mozilla Firefox 2010-02-02 20:18:20 ----D---- C:\WINDOWS\system32\drivers 2010-02-02 20:15:10 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab 2010-02-02 20:02:45 ----A---- C:\WINDOWS\SchedLgU.Txt 2010-02-02 19:30:35 ----A---- C:\WINDOWS\UPGRADE.TXT 2010-02-02 14:15:30 ----D---- C:\WINDOWS\Prefetch 2010-02-01 00:53:13 ----D---- C:\Program Files\VOX BOX 2.12 2010-01-31 21:50:47 ----HD---- C:\WINDOWS\inf 2010-01-31 10:53:28 ----D---- C:\WINDOWS\system32 2010-01-31 10:53:28 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2010-01-31 10:52:15 ----D---- C:\Program Files\Steam 2010-01-25 19:03:39 ----SD---- C:\Documents and Settings\wasowicz\Dane aplikacji\Microsoft 2010-01-24 17:04:41 ----D---- C:\Program Files\Nowe Gadu-Gadu 2010-01-24 16:35:39 ----D---- C:\Documents and Settings\wasowicz\Dane aplikacji\Audacity 2010-01-24 13:09:59 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Norton 2010-01-24 13:09:52 ----SD---- C:\WINDOWS\Tasks 2010-01-23 15:56:58 ----D---- C:\Documents and Settings\wasowicz\Dane aplikacji\Adobe 2010-01-23 15:56:48 ----D---- C:\WINDOWS\system32\Macromed 2010-01-23 03:00:47 ----RSHDC---- C:\WINDOWS\system32\dllcache 2010-01-23 03:00:45 ----D---- C:\Program Files\Internet Explorer 2010-01-22 13:51:21 ----HD---- C:\WINDOWS\$hf_mig$ 2010-01-18 18:54:54 ----D---- C:\Documents and Settings\wasowicz\Dane aplikacji\Skype 2010-01-18 18:51:08 ----D---- C:\Documents and Settings\wasowicz\Dane aplikacji\skypePM 2010-01-14 16:26:41 ----SHD---- C:\WINDOWS\Installer 2010-01-13 14:19:04 ----D---- C:\WINDOWS\AppPatch 2010-01-10 20:42:25 ----D---- C:\Documents and Settings\wasowicz\Dane aplikacji\Nowe Gadu-Gadu 2010-01-06 17:50:28 ----A---- C:\WINDOWS\NeroDigital.ini 2010-01-04 18:56:42 ----D---- C:\Documents and Settings\wasowicz\Dane aplikacji\XnView ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 intelppm;Sterownik procesora Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-03 40320] R1 kbdhid;Sterownik klawiatury HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-03 14848] R1 KLIF;Kaspersky Lab Driver; C:\WINDOWS\system32\DRIVERS\klif.sys [2009-09-03 296976] R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2009-09-06 5632] R3 adiusbaw;USB ADSL WAN Adapter; C:\WINDOWS\system32\DRIVERS\adiusbaw.sys [2003-06-24 127497] R3 AsrIbDrv;AsrIbDrv; \??\C:\WINDOWS\system32\Drivers\AsrIbDrv.sys [] R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752] R3 hidusb;Sterownik Microsoft klasy HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-10-31 4942336] R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:\WINDOWS\system32\DRIVERS\klim5.sys [2009-05-13 31760] R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [2009-05-16 19472] R3 mouhid;Sterownik myszy HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-26 12160] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-07-03 8087712] R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-08-07 111360] R3 usbccgp;Rodzajowy sterownik nadrzędny USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616] R3 usbehci;Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624] R3 usbhub;Standardowy sterownik koncentratora USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600] R3 usbuhci;Sterownik Miniport uniwersalnego kontrolera hosta USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480] S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys [2003-07-17 46167] S3 an64l5yu;an64l5yu; C:\WINDOWS\system32\drivers\an64l5yu.sys [] S3 BrScnUsb;Brother USB Still Image driver; C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys [2004-10-15 15295] S3 Cardex;Cardex; \??\C:\WINDOWS\system32\drivers\TBPANEL.SYS [] S3 CCDECODE;Dekoder napisów; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024] S3 krait03;Razer krait USB Filter Driver; C:\WINDOWS\System32\Drivers\krait.sys [2005-12-07 13324] S3 MSTEE;Konwerter strumieni Tee/Sink-to-Sink Microsoft Streaming; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504] S3 NABTSFEC;Koder-dekoder NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376] S3 NdisIP;Połączenie TV/wideo firmy Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880] S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136] S3 SNPSTD3;USB PC Camera (SNPSTD3); C:\WINDOWS\system32\DRIVERS\snpstd3.sys [2005-11-07 8718848] S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ss_bus.sys [2007-05-02 83592] S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys [2007-05-02 15112] S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\WINDOWS\system32\DRIVERS\ss_mdm.sys [2007-05-02 109704] S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ssm_bus.sys [2007-05-02 83592] S3 ssm_mdfl;SAMSUNG Mobile USB Modem II 1.0 Filter; C:\WINDOWS\system32\DRIVERS\ssm_mdfl.sys [2007-05-02 15112] S3 ssm_mdm;SAMSUNG Mobile USB Modem II 1.0 Drivers; C:\WINDOWS\system32\DRIVERS\ssm_mdm.sys [2007-05-02 109704] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360] S3 TBPanel;TBPanel; C:\WINDOWS\system32\drivers\TBPanel.sys [2007-03-16 12256] S3 usbprint;Klasa PRINTER USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856] S3 USBSTOR;Sterownik magazynu masowego USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496] S3 WSTCODEC;Kodery-dekodery teletekstu w standardzie światowym; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328] S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AVP;Kaspersky Internet Security; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [2009-07-03 303376] R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-09-03 153376] R2 KMWDSERVICE;Keyboard And Mouse Communication Service; C:\Program Files\Multimedia Keyboard Driver\V5\KMWDSrv.exe [2007-05-08 2179072] R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120] R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-06-10 168004] S2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104] S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096] -----------------EOF----------------- [/code]
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.