Komputer został zablokowany Ukash

[slaweekk]

witam prosze o pomoc

mam problem jak wielu uzytkownikow.
zlapalem wirusa ktory blokuje komputer i nakazuje zaplate ukashem celem odblokowania.
odpalilem otl, oczywiscie nieumiejetnie.

przesylam log

 

Spoiler

OTL logfile created on: 2012-07-09 20:53:00 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\user\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

1 013,00 Mb Total Physical Memory | 820,00 Mb Available Physical Memory | 81,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 95,00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 78,20 Gb Total Space | 66,49 Gb Free Space | 85,02% Space Free | Partition Type: NTFS
Drive D: | 70,85 Gb Total Space | 57,24 Gb Free Space | 80,79% Space Free | Partition Type: NTFS

Computer Name: HQPC0077 | User Name: user | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012-07-09 16:30:52 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\user\Pulpit\OTL_3.2.17.3.exe
PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe


========== Modules (SafeList) ==========

MOD - [2012-07-09 16:30:52 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\user\Pulpit\OTL_3.2.17.3.exe


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- -- (HWDeviceService.exe)
SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - File not found [Auto | Stopped] -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2012-07-07 19:58:48 | 000,224,096 | ---- | M] () [Auto | Stopped] -- C:\Program Files\T-Mobile\InternetManager_H\UpdateDog\ouc.exe -- (Internet Manager. RunOuc)
SRV - [2012-06-30 08:58:10 | 000,257,224 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2011-08-30 18:18:30 | 002,358,656 | ---- | M] (TeamViewer GmbH) [Auto | Stopped] -- C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6)
SRV - [2011-08-10 22:52:54 | 000,138,760 | R--- | M] (Symantec Corporation) [Unknown | Stopped] -- C:\Program Files\Norton Safe Web Lite\Engine\2.0.0.16\ccSvcHst.exe -- (NSL)
SRV - [2010-01-15 14:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2004-11-30 15:28:44 | 000,094,208 | ---- | M] (Gemplus) [Auto | Stopped] -- C:\Program Files\Gemplus\GemSafe Libraries User\BIN\GCardSrvNT.exe -- (GemSAFE Card Server)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\Drivers\SSPORT.sys -- (SSPORT)
DRV - File not found [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\Drivers\DgiVecp.sys -- (DgiVecp)
DRV - [2012-07-07 19:58:53 | 000,194,816 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2012-07-07 19:58:53 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - [2012-07-07 19:58:53 | 000,090,368 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ew_jucdcacm.sys -- (huawei_cdcacm)
DRV - [2012-07-07 19:58:53 | 000,073,216 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ew_jubusenum.sys -- (huawei_enumerator)
DRV - [2012-07-07 19:58:53 | 000,064,384 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ew_jucdcecm.sys -- (huawei_cdcecm)
DRV - [2012-07-07 19:58:53 | 000,026,624 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ew_juextctrl.sys -- (huawei_ext_ctrl)
DRV - [2012-07-07 19:58:53 | 000,024,192 | ---- | M] (Bytemobile, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpipBM.sys -- (tcpipBM)
DRV - [2012-07-07 19:58:53 | 000,013,184 | ---- | M] (Bytemobile, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\BMLoad.sys -- (BMLoad)
DRV - [2012-07-07 19:58:53 | 000,011,136 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ew_usbenumfilter.sys -- (ew_usbenumfilter)
DRV - [2012-07-07 19:58:53 | 000,007,552 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewfiltertdidriver.sys -- (filtertdidriver)
DRV - [2011-08-09 01:38:11 | 000,132,744 | R--- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\NST\0200000.010\ccSetx86.sys -- (ccSet_NST)
DRV - [2011-01-12 11:42:16 | 000,013,304 | ---- | M] (TeamViewer GmbH) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TVMonitor.sys -- (MonitorFunction)
DRV - [2010-12-13 13:15:52 | 000,441,760 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\timntr.sys -- (timounter)
DRV - [2010-12-13 13:15:52 | 000,044,384 | ---- | M] (Acronis) [File_System | Auto | Stopped] -- C:\WINDOWS\system32\drivers\tifsfilt.sys -- (tifsfilter)
DRV - [2010-05-07 19:54:42 | 006,037,536 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2009-11-18 08:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2009-11-18 08:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2009-04-24 03:22:16 | 000,141,568 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2008-04-15 14:00:00 | 000,144,384 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008-04-14 01:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) Sterownik audio USB (WDM)
DRV - [2008-04-13 23:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C)
DRV - [2008-02-15 13:12:06 | 005,854,752 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\igxpmp32.sys -- (ialm)
DRV - [2002-10-04 12:21:18 | 000,061,776 | ---- | M] (Gemplus) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\GTwinUSB.sys -- (GTwinUSB)
DRV - [2001-12-04 16:03:20 | 000,053,568 | ---- | M] (Gemplus) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\gemusb.sys -- (GEMPC430)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========



IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-436374069-1292428093-1417001333-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.pl/
IE - HKU\S-1-5-21-436374069-1292428093-1417001333-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Firefox\extensions\\{203FB6B2-2E1E-4474-863B-4C483ECCE78E}: C:\Documents and Settings\All Users\Dane aplikacji\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2.0.0.16\coFFNST\ [2012-07-09 18:49:55 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\ff-bmboc@bytemobile.com: C:\Program Files\T-Mobile\InternetManager_H\OCx32\addon [2012-07-07 19:59:05 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

[2011-04-05 12:44:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Extensions
[2011-04-05 12:44:23 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}

O1 HOSTS File: ([2012-07-09 14:43:29 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.)
O2 - BHO: (IncrediMail MediaBar 2 Toolbar) - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\prxtbInc0.dll (Conduit Ltd.)
O2 - BHO: (Norton Safe Web Lite BHO) - {F0DA78E9-6B60-42fb-BC26-EF2CFB8C8FF3} - C:\Program Files\Norton Safe Web Lite\Engine\2.0.0.16\CoIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Norton Safe Web Lite) - {30CEEEA2-3742-40e4-85DD-812BF1CBB83D} - C:\Program Files\Norton Safe Web Lite\Engine\2.0.0.16\CoIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (IncrediMail MediaBar 2 Toolbar) - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\prxtbInc0.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-436374069-1292428093-1417001333-1005\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKU\S-1-5-21-436374069-1292428093-1417001333-1005\..\Toolbar\WebBrowser: (Norton Safe Web Lite) - {30CEEEA2-3742-40E4-85DD-812BF1CBB83D} - C:\Program Files\Norton Safe Web Lite\Engine\2.0.0.16\CoIEPlg.dll (Symantec Corporation)
O3 - HKU\S-1-5-21-436374069-1292428093-1417001333-1005\..\Toolbar\WebBrowser: (IncrediMail MediaBar 2 Toolbar) - {D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} - C:\Program Files\IncrediMail_MediaBar_2\prxtbInc0.dll (Conduit Ltd.)
O4 - HKLM..\Run: [gemstrmw] C:\WINDOWS\System32\gemstrmw.exe (Gemplus)
O4 - HKLM..\Run: [RegTool] C:\Program Files\Gemplus\GemSafe Libraries User\BIN\RegTool.exe (Gemplus)
O4 - HKLM..\Run: [sqlncli] C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\2575\sqlncli.exe ()
O4 - HKU\S-1-5-21-436374069-1292428093-1417001333-1005..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-436374069-1292428093-1417001333-1005\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-436374069-1292428093-1417001333-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-436374069-1292428093-1417001333-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-436374069-1292428093-1417001333-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Pobierz z &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm ()
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macr...director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} hxxp://83.238.171.14...sCamControl.cab (CamImage Class)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_20)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.2
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-12-13 12:45:31 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012-07-09 18:14:33 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2012-07-09 17:23:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2012-07-09 17:02:33 | 000,000,000 | ---D | C] -- C:\_OTL
[2012-07-09 17:01:31 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\user\Pulpit\OTL_3.2.17.3.exe
[2012-07-09 14:49:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution
[2012-07-09 14:38:51 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2012-07-09 14:36:42 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2012-07-09 14:36:42 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2012-07-09 14:36:42 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2012-07-09 14:36:42 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2012-07-09 14:36:28 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012-07-09 14:36:22 | 000,000,000 | R--D | C] -- C:\Documents and Settings\user\Moje dokumenty\Moje wideo
[2012-07-09 14:34:43 | 004,573,972 | R--- | C] (Swearware) -- C:\Documents and Settings\user\Pulpit\ComboFix.exe
[2012-07-09 14:28:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt
[2012-07-09 14:21:36 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC
[2012-07-09 13:08:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Dane aplikacji\hellomoto
[2012-07-08 16:17:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Pulpit\UMOWY LIPIEC 2012
[2012-07-08 14:14:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Pulpit\aneksy
[2012-07-07 19:59:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Internet Manager
[2012-07-07 19:59:20 | 001,112,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfcoinstaller01007.dll
[2012-07-07 19:59:20 | 001,112,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WdfCoInstaller01007.dll
[2012-07-07 19:59:20 | 000,090,368 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ew_jucdcacm.sys
[2012-07-07 19:59:20 | 000,073,216 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ew_jubusenum.sys
[2012-07-07 19:59:20 | 000,064,384 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ew_jucdcecm.sys
[2012-07-07 19:59:20 | 000,026,624 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ew_juextctrl.sys
[2012-07-07 19:59:19 | 000,861,696 | ---- | C] (DiBcom SA) -- C:\WINDOWS\System32\drivers\mod7700.sys
[2012-07-07 19:59:19 | 000,235,392 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbnet.sys
[2012-07-07 19:59:19 | 000,194,816 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbmdm.sys
[2012-07-07 19:59:19 | 000,102,784 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ew_hwusbdev.sys
[2012-07-07 19:59:19 | 000,025,856 | ---- | C] (Huawei Tech. Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewdcsc.sys
[2012-07-07 19:59:19 | 000,019,200 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ew_hwupgrade.sys
[2012-07-07 19:59:19 | 000,011,136 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ew_usbenumfilter.sys
[2012-07-07 19:59:15 | 000,007,552 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewfiltertdidriver.sys
[2012-07-07 19:59:09 | 000,724,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bmutil.dll
[2012-07-07 19:59:09 | 000,480,384 | ---- | C] (Bytemobile, Inc.) -- C:\WINDOWS\System32\bmnet.dll
[2012-07-07 19:59:09 | 000,308,352 | ---- | C] (Bytemobile, Inc.) -- C:\WINDOWS\System32\bminstall.dll
[2012-07-07 19:59:09 | 000,132,224 | ---- | C] (Bytemobile, Inc.) -- C:\WINDOWS\System32\bmdumpd.bin
[2012-07-07 19:59:09 | 000,024,192 | ---- | C] (Bytemobile, Inc.) -- C:\WINDOWS\System32\drivers\tcpipBM.sys
[2012-07-07 19:59:09 | 000,013,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sporder.dll
[2012-07-07 19:59:09 | 000,013,184 | ---- | C] (Bytemobile, Inc.) -- C:\WINDOWS\System32\drivers\BMLoad.sys
[2012-07-07 19:59:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Dane aplikacji\T-Mobile
[2012-07-07 19:58:41 | 000,000,000 | ---D | C] -- C:\Program Files\T-Mobile
[2012-07-06 10:03:19 | 000,000,000 | ---D | C] -- C:\vendor
[2012-07-03 09:00:32 | 000,000,000 | ---D | C] -- C:\elemis pico

========== Files - Modified Within 30 Days ==========

[2012-07-09 20:05:41 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-07-09 18:49:53 | 000,001,028 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012-07-09 17:57:15 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012-07-09 16:30:52 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\user\Pulpit\OTL_3.2.17.3.exe
[2012-07-09 16:22:00 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012-07-09 14:43:29 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2012-07-09 14:38:54 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2012-07-09 14:34:43 | 004,573,972 | R--- | M] (Swearware) -- C:\Documents and Settings\user\Pulpit\ComboFix.exe
[2012-07-09 14:12:06 | 000,000,420 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{93839603-CBCD-42B7-9B0F-50D71F2A9856}.job
[2012-07-09 14:09:32 | 000,008,777 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\akcesoria.odt
[2012-07-09 12:31:10 | 000,009,886 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\zzz.ods
[2012-07-09 12:11:52 | 000,010,077 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\ZAM.ods
[2012-07-09 11:44:54 | 000,016,253 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\wartości kontraktów.ods
[2012-07-09 11:30:59 | 000,013,312 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Kalkulator do procentów - Lipiec 2012.xls
[2012-07-09 11:07:30 | 000,023,190 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\GRAFIKI.ods
[2012-07-09 09:11:05 | 003,932,214 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\bez tytułu.bmp
[2012-07-09 09:01:44 | 000,027,312 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Rozliczenie planów mar.ods
[2012-07-08 20:05:34 | 000,000,438 | -H-- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for user.job
[2012-07-08 15:53:07 | 000,263,659 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\RMUA KULIK KATARZYNA 001.jpg
[2012-07-07 20:00:44 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ew_juextctrl_01007.Wdf
[2012-07-07 20:00:42 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ew_jucdcecm_01007.Wdf
[2012-07-07 20:00:37 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf
[2012-07-07 19:59:39 | 000,000,894 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Internet Manager.lnk
[2012-07-07 19:59:24 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
[2012-07-07 19:58:54 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbccid.sys
[2012-07-07 19:58:53 | 001,112,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfcoinstaller01007.dll
[2012-07-07 19:58:53 | 001,112,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\WdfCoInstaller01007.dll
[2012-07-07 19:58:53 | 000,861,696 | ---- | M] (DiBcom SA) -- C:\WINDOWS\System32\drivers\mod7700.sys
[2012-07-07 19:58:53 | 000,235,392 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbnet.sys
[2012-07-07 19:58:53 | 000,194,816 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbmdm.sys
[2012-07-07 19:58:53 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ew_hwusbdev.sys
[2012-07-07 19:58:53 | 000,090,368 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ew_jucdcacm.sys
[2012-07-07 19:58:53 | 000,073,216 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ew_jubusenum.sys
[2012-07-07 19:58:53 | 000,064,384 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ew_jucdcecm.sys
[2012-07-07 19:58:53 | 000,026,624 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ew_juextctrl.sys
[2012-07-07 19:58:53 | 000,025,856 | ---- | M] (Huawei Tech. Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewdcsc.sys
[2012-07-07 19:58:53 | 000,024,192 | ---- | M] (Bytemobile, Inc.) -- C:\WINDOWS\System32\drivers\tcpipBM.sys
[2012-07-07 19:58:53 | 000,019,200 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ew_hwupgrade.sys
[2012-07-07 19:58:53 | 000,013,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\sporder.dll
[2012-07-07 19:58:53 | 000,013,184 | ---- | M] (Bytemobile, Inc.) -- C:\WINDOWS\System32\drivers\BMLoad.sys
[2012-07-07 19:58:53 | 000,011,136 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ew_usbenumfilter.sys
[2012-07-07 19:58:53 | 000,007,552 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewfiltertdidriver.sys
[2012-07-07 19:58:50 | 000,724,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\bmutil.dll
[2012-07-07 19:58:50 | 000,480,384 | ---- | M] (Bytemobile, Inc.) -- C:\WINDOWS\System32\bmnet.dll
[2012-07-07 19:58:49 | 000,308,352 | ---- | M] (Bytemobile, Inc.) -- C:\WINDOWS\System32\bminstall.dll
[2012-07-07 19:58:44 | 000,132,224 | ---- | M] (Bytemobile, Inc.) -- C:\WINDOWS\System32\bmdumpd.bin
[2012-07-07 09:20:40 | 000,001,374 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-07-06 17:14:30 | 000,030,771 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Instrukcja+kalkulatora.pdf
[2012-07-06 10:13:23 | 000,000,494 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Skrót do vendor.lnk
[2012-07-06 10:03:45 | 000,004,466 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2012-07-05 16:44:33 | 000,008,777 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\hasła.odt
[2012-07-05 14:01:44 | 000,108,032 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Spis_towarów - MAXKOM DO SK PARTNER.xls
[2012-07-04 20:34:18 | 000,267,138 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Sniffer.zip
[2012-07-04 12:47:54 | 000,074,756 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Cennik Prowizyjny (Agenci) obowiązujący od 01.07.2012.odt
[2012-07-03 11:06:43 | 000,020,812 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Kalulator do procentów.ods
[2012-07-03 09:59:00 | 003,704,832 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\2012_07_03_Katalog gadżetów AG_FR.xls
[2012-07-02 12:38:03 | 000,010,915 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\HLR.ods
[2012-06-30 14:19:46 | 000,013,024 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\INWENTARYZACJA.odt
[2012-06-30 09:26:48 | 000,001,813 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
[2012-06-30 08:58:09 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012-06-30 08:58:09 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012-06-28 13:50:03 | 000,017,929 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\umowa kasi.odt
[2012-06-22 14:53:22 | 000,026,112 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Metryka_Kontrolna APS_2012_D0506_00143_II.xls
[2012-06-17 19:44:42 | 000,016,573 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Wyniki APS D0506.00XXX.ods

========== Files Created - No Company Name ==========

[2012-07-09 14:38:54 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2012-07-09 14:38:51 | 000,262,400 | RHS- | C] () -- C:\cmldr
[2012-07-09 14:36:42 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2012-07-09 14:36:42 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2012-07-09 14:36:42 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2012-07-09 14:36:42 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2012-07-09 14:36:42 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2012-07-09 12:24:38 | 000,008,777 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\akcesoria.odt
[2012-07-09 12:05:05 | 000,010,077 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\ZAM.ods
[2012-07-09 10:40:49 | 003,704,832 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\2012_07_03_Katalog gadżetów AG_FR.xls
[2012-07-09 09:11:04 | 003,932,214 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\bez tytułu.bmp
[2012-07-08 15:52:51 | 000,263,659 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\RMUA KULIK KATARZYNA 001.jpg
[2012-07-07 20:00:44 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ew_juextctrl_01007.Wdf
[2012-07-07 20:00:42 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ew_jucdcecm_01007.Wdf
[2012-07-07 20:00:37 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf
[2012-07-07 19:59:39 | 000,000,894 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Internet Manager.lnk
[2012-07-07 19:59:24 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
[2012-07-07 12:01:45 | 000,013,312 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Kalkulator do procentów - Lipiec 2012.xls
[2012-07-07 09:46:04 | 000,009,886 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\zzz.ods
[2012-07-06 10:13:23 | 000,000,494 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Skrót do vendor.lnk
[2012-07-05 16:39:13 | 000,008,777 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\hasła.odt
[2012-07-04 20:34:16 | 000,267,138 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Sniffer.zip
[2012-07-04 12:47:53 | 000,074,756 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Cennik Prowizyjny (Agenci) obowiązujący od 01.07.2012.odt
[2012-07-03 15:36:55 | 000,000,507 | ---- | C] () -- C:\WINDOWS\policy.ppc
[2012-07-02 12:38:03 | 000,010,915 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\HLR.ods
[2012-07-02 12:15:45 | 000,108,032 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Spis_towarów - MAXKOM DO SK PARTNER.xls
[2012-06-30 14:19:46 | 000,013,024 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\INWENTARYZACJA.odt
[2012-06-11 09:37:50 | 000,001,813 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
[2011-09-16 11:16:07 | 000,012,288 | ---- | C] () -- C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-08-31 14:53:06 | 000,190,291 | ---- | C] () -- C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Optimizer.txt
[2011-04-05 13:05:13 | 000,022,723 | ---- | C] () -- C:\WINDOWS\System32\sss1ml3.dll
[2011-03-04 16:06:44 | 000,000,152 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2011-01-31 23:27:37 | 000,172,128 | ---- | C] () -- C:\WINDOWS\_isusr32.dll
[2011-01-31 23:27:27 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\_isusr2k.dll
[2010-12-13 13:31:14 | 000,004,466 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010-12-13 13:13:34 | 000,003,407 | ---- | C] () -- C:\WINDOWS\WINCMD.INI
[2010-12-13 12:56:34 | 000,000,129 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010-12-13 12:55:39 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\ThermalServiceLibrary.dll
[2010-12-13 12:55:39 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\FiskalParserDll.dll
[2010-12-13 12:51:52 | 001,399,880 | ---- | C] () -- C:\WINDOWS\System32\igklg450.dll
[2010-12-13 12:51:51 | 001,843,784 | ---- | C] () -- C:\WINDOWS\System32\igklg400.dll
[2010-12-13 12:51:51 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4926.dll
[2010-12-13 12:51:51 | 000,104,636 | ---- | C] () -- C:\WINDOWS\System32\igmedcompkrn.dll
[2010-12-13 12:50:44 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll

========== LOP Check ==========

[2010-12-13 13:16:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Acronis
[2012-07-07 20:00:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DatacardService
[2010-12-13 13:01:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET
[2011-09-30 09:08:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IM
[2011-09-30 09:07:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IncrediMail
[2012-07-07 19:59:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Internet Manager
[2012-03-14 12:40:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PMB Files
[2010-12-13 13:17:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Acronis
[2011-09-01 15:59:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\BitSpirit
[2011-09-26 14:38:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\blueconnect
[2011-07-13 15:07:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\HCM Updater
[2012-07-09 13:08:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\hellomoto
[2011-04-05 12:57:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\OpenOffice.org
[2011-09-30 08:51:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Sharp
[2012-07-07 19:59:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\T-Mobile
[2011-09-22 11:48:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\TeamViewer
[2011-04-05 12:44:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Thunderbird
[2012-07-09 14:12:06 | 000,000,420 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{93839603-CBCD-42B7-9B0F-50D71F2A9856}.job

========== Purity Check ==========


< End of report >

 

 

 

z gory dziekuje za pomoc.

Slawek

[Landuss]

Logi wstawiaj opcją ZAŁĄCZNIKI na forum a nie do posta (ukrywam do spoilera). Kolejna uwaga - zabrakło drugiego loga z OTL - extras. Nie miałeś zaznaczonej opcji Rejestr - skan dodatkowy na "Użyj filtrowania". Zrób tak w następnym poście.

 

1. Uruchom OTL i w oknie Własne opcje skanowania/Skrypt wklej następujący tekst:

 

:OTL
SRV - File not found [Auto | Stopped] -- -- (HWDeviceService.exe)
SRV - File not found [Auto | Stopped] -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
DRV - File not found [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\Drivers\SSPORT.sys -- (SSPORT)
DRV - File not found [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\Drivers\DgiVecp.sys -- (DgiVecp)
O4 - HKLM..\Run: [sqlncli] C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\2575\sqlncli.exe ()
 
:Files
C:\Documents and Settings\user\Dane aplikacji\hellomoto
C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\2575
 
:Commands
[emptytemp]

 

Adnotacja dla innych czytających: skrypt unikatowy - dopasowany tylko i wyłącznie pod ten system, proszę nie stosować na swoich systemach.

 

Kliknij w Wykonaj skrypt. Zatwierdź restart komputera.

 

2. Wejdź w panel usuwania programów i odinstaluj: Conduit Engine / IncrediMail MediaBar 2 Toolbar

 

3. Uruchom AdwCleaner z opcji Delete

 

4. Uruchamiasz OTL ponownie, tym razem wywołujesz opcję Skanuj. Pokazujesz nowe logi z OTL.

 

Edytowane 17 Sierpnia 2018 przez picasso
27.08.2012 - Temat zostaje zamknięty z powodu braku odpowiedzi. //picasso