Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia

Całe forum

Przeszukaj

Całe forum

Użytkownicy

Tryb drzewa \| Tryb normalny Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia
pypciu Wdrażany Liczba postów: 25	Post: #1 Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia Witam! Mam problem z windowsem od 2 tygodni co jakiś czas. Zawiesza się na parę sekund co chwila i odwiesza na parę sekund. Niestety przywracanie systemu pomaga tylko na jakiś czas, z resztą mam bardzo "młode" punkt przywracania, które już mogą obejmować usterkę. Wczoraj wieczorem już nie dało się pracować ka kompie. Dzisiaj z kolei jest ok, ale wiem, że za jakiś czas znowu zaczną się zawieszki. Proszę o pomoc, wklejam logo z HijackThis, mam nadzieje że dobrze: Kod: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 10: 43: 00, on 2012-07-31 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Unable to get Internet Explorer version! Boot mode: Normal Running processes: C: \Program Files (x86)\ASRock Utility\IES\AsrIes.exe C: \Users\Pusz\Local Settings\Apps\F.lux\flux.exe C: \Program Files (x86)\RadeonPro\RadeonPro.exe C: \Program Files (x86)\Innovative Solutions\DriverMax\drivermax.exe C: \Program Files (x86)\KatMouse\KatMouse.exe C: \Program Files (x86)\AVG\AVG2012\avgtray.exe C: \Program Files (x86)\AVG Secure Search\vprot.exe C: \Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C: \Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe C: \Program Files (x86)\Mozilla Firefox\firefox.exe C: \Program Files (x86)\Mozilla Firefox\plugin-container.exe C: \Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_268.exe C: \Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_268.exe C: \Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http: //go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http: //home.sweetim.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG: system.ini: UserInit=userinit.exe, O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C: \Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C: \Program Files (x86)\AVG\AVG2012\avgssie.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C: \PROGRA~2\Microsoft Office\Office14\GROOVEEX.DLL O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C: \Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C: \Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C: \Program Files (x86)\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C: \PROGRA~2\Microsoft Office\Office14\URLREDIR.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C: \Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C: \Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C: \Program Files (x86)\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll O4 - HKLM\..\Run: [VIAJDS] C: \Program Files (x86)\VIA\VIAudioi\HDADeck\VIAJDS.exe O4 - HKLM\..\Run: [AVG_TRAY] "C: \Program Files (x86)\AVG\AVG2012\avgtray.exe" O4 - HKLM\..\Run: [HDAudDeck] C: \Program Files (x86)\VIA\VIAudioi\HDADeck\HDeck.exe 1 O4 - HKLM\..\Run: [vProt] "C: \Program Files (x86)\AVG Secure Search\vprot.exe" O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C: \Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray O4 - HKLM\..\Run: [StartCCC] "C: \Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C: \Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml O4 - HKCU\..\Run: [F.lux] "C: \Users\Pusz\Local Settings\Apps\F.lux\flux.exe" /noshow O4 - HKCU\..\Run: [RadeonPro] "C: \Program Files (x86)\RadeonPro\RadeonPro.exe" O4 - HKCU\..\Run: [DriverMax] "C: \Program Files (x86)\Innovative Solutions\DriverMax\drivermax.exe" -agent O4 - HKCU\..\Run: [DriverMax_RESTART] "C: \Program Files (x86)\Innovative Solutions\DriverMax\drivermax.exe" -RESTART O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C: \Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe" O4 - HKCU\..\RunOnce: [Flags] O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C: \Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C: \Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\RunOnce: [adaware] reg.exe delete "HKCU\Software\AppDataLow\Software\adaware" /f (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\RunOnce: [adaware] reg.exe delete "HKCU\Software\AppDataLow\Software\adaware" /f (User 'Default user') O4 - Startup: KatMouse.lnk = C: \Program Files (x86)\KatMouse\KatMouse.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res: //C: \Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res: //C: \PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: E&xport to Microsoft Excel - res: //C: \PROGRA~2\Microsoft Office\Office14\EXCEL.EXE/3000 O8 - Extra context menu item: Se&nd to OneNote - res: //C: \PROGRA~2\Microsoft Office\Office14\ONBttnIE.dll/105 O9 - Extra button: @C: \Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C: \Windows\WindowsMobile\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C: \Windows\WindowsMobile\INetRepl.dll O9 - Extra 'Tools' menuitem: @C: \Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C: \Windows\WindowsMobile\INetRepl.dll O9 - Extra button: Pokaż lub ukryj HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C: \Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O10 - Unknown file in Winsock LSP: c: \program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c: \program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O17 - HKLM\System\CCS\Services\Tcpip\..\{B421F2EC-F5E5-4625-ABBA-4DA02E3123D6}: NameServer = 95.158.95.95,95.158.95.96 O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C: \Program Files (x86)\AVG\AVG2012\avgpp.dll O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C: \Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\11.1.0\ViProtocol.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C: \Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C: \Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C: \Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C: \Windows\system32\atiesrxx.exe (file missing) O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C: \Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe O23 - Service: AODService - Unknown owner - C: \Program Files (x86)\AMD\OverDrive\AODAssist.exe O23 - Service: Zapora AVG (avgfws) - AVG Technologies CZ, s.r.o. - C: \Program Files (x86)\AVG\AVG2012\avgfws.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C: \Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C: \Program Files (x86)\AVG\AVG2012\avgwdsvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C: \Windows\System32\lsass.exe (file missing) O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) - MAGIX AG - C: \Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C: \Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe O23 - Service: Google Updater Service (gusvc) - Google - C: \Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C: \Windows\system32\lsass.exe (file missing) O23 - Service: KMService - Unknown owner - C: \Windows\system32\srvany.exe O23 - Service: MBAMService - Malwarebytes Corporation - C: \Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C: \Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C: \Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C: \Windows\system32\lsass.exe (file missing) O23 - Service: NitroPDFReaderDriverCreatorReadSpool2 (NitroReaderDriverReadSpool2) - Nitro PDF Software - C: \Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe O23 - Service: PnkBstrA - Unknown owner - C: \Windows\system32\PnkBstrA.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C: \Windows\system32\lsass.exe (file missing) O23 - Service: RadeonPro Support Service - Mr. John aka japamd - C: \Program Files (x86)\RadeonPro\RadeonProSupport.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C: \Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C: \Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C: \Windows\System32\snmptrap.exe (file missing) O23 - Service: Soluto PCGenome Core Service (SolutoService) - Soluto - C: \Program Files\Soluto\SolutoService.exe O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C: \Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C: \Windows\system32\sppsvc.exe (file missing) O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C: \Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C: \Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C: \Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C: \Windows\System32\vds.exe (file missing) O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C: \Windows\system32\viakaraokesrv.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C: \Windows\system32\vssvc.exe (file missing) O23 - Service: vToolbarUpdater11.1.0 - Unknown owner - C: \Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C: \Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C: \Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C: \Windows\system32\wbem\WmiApSrv.exe (file missing) -- End of file - 11900 bytes Konfiguracja: Win7 Ultimate 64 AMD Athlon II x4 630 HDD SAMSUNG DH103SI 1TB Radeon HD 4850 1GB 8GB DDR III Kingstone'a (1600MHz) Dzięki za jakąkolwiek pomoc! Notatka została dodana 31.07.2012 10:36. Ostatnia edycja dokonana 31.07.2012 10:36 przez peciaq: Logi łapiemy w znaczniki [CODE]. Wątek przenoszę do poddziału Logi w dziale Bezpieczeństwo Windows 7. 31.07.2012 09:51
Podziękowania od:

Illidan Ekspert Liczba postów: 1.024	Post: #2 RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia Logi wykonane dobrze,mimo wszystko poprosiłbym jeszcze o logo z programu "OTL",a to dlatego że jest to program bardziej precyzyjny i szczegółowy niż "HijackThis".W programie "HijackThis" zaznacz następujące logi: Kod: R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http: //home.sweetim.com O4 - HKCU\..\RunOnce: [Flags] O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C: \Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C: \Windows\system32\atiesrxx.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C: \Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C: \Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C: \Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C: \Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C: \Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C: \Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C: \Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C: \Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C: \Windows\System32\vds.exe (file missing) O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C: \Windows\system32\viakaraokesrv.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C: \Windows\system32\vssvc.exe (file missing) O23 - Service: vToolbarUpdater11.1.0 - Unknown owner - C: \Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C: \Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C: \Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C: \Windows\system32\wbem\WmiApSrv.exe (file missing) Po czym naciśnij "Fix Checked".Potem przeskanuj system programem "Malwaresbytes Anti -Malware" i jeśli zostanie coś znalezione to usuń infekcję.Po tej akcji podaj logi z "OTL". (Ten post był ostatnio modyfikowany: 01.08.2012 01:35 przez Illidan.) 01.08.2012 01:32
Podziękowania od:	pypciu

pypciu Wdrażany Liczba postów: 25	Post: #3 RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia Dzięki za odpowiedz, zrobiłem tak jak mówiłeś i zapodaję logi z programu OTL: Kod: OTL logfile created on: 2012-08-02 00: 30: 44 - Run 1 OTL by OldTimer - Version 3.2.55.0 Folder = C: \Users\Pusz\Desktop 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 \| Country: Polska \| Language: PLK \| Date Format: yyyy-MM-dd 8,00 Gb Total Physical Memory \| 5,73 Gb Available Physical Memory \| 71,65% Memory free 31,99 Gb Paging File \| 28,71 Gb Available in Paging File \| 89,75% Paging File free Paging file location(s): [Binary data over 100 bytes] %SystemDrive% = C: \| %SystemRoot% = C: \Windows \| %ProgramFiles% = C: \Program Files (x86) Drive C: \| 247,92 Gb Total Space \| 196,52 Gb Free Space \| 79,27% Space Free \| Partition Type: NTFS Drive D: \| 341,70 Gb Total Space \| 18,46 Gb Free Space \| 5,40% Space Free \| Partition Type: NTFS Drive E: \| 341,80 Gb Total Space \| 23,71 Gb Free Space \| 6,94% Space Free \| Partition Type: NTFS Drive G: \| 1,37 Gb Total Space \| 0,00 Gb Free Space \| 0,00% Space Free \| Partition Type: CDFS Drive I: \| 596,02 Gb Total Space \| 514,35 Gb Free Space \| 86,30% Space Free \| Partition Type: FAT32 Computer Name: PUSZ-PC \| User Name: Pusz \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: Current user \| Include 64bit Scans Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-08-02 00: 09: 57 \| 000,597,504 \| ---- \| M] (OldTimer Tools) -- C: \Users\Pusz\Desktop\OTL.exe PRC - [2012-08-01 11: 48: 33 \| 000,917,984 \| ---- \| M] (Mozilla Corporation) -- C: \Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2012-07-31 11: 49: 37 \| 001,536,712 \| ---- \| M] (Adobe Systems, Inc.) -- C: \Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_268.exe PRC - [2012-06-27 11: 58: 22 \| 000,655,944 \| ---- \| M] (Malwarebytes Corporation) -- C: \Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2012-06-27 11: 58: 22 \| 000,462,920 \| ---- \| M] (Malwarebytes Corporation) -- C: \Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe PRC - [2012-06-19 18: 46: 36 \| 011,324,352 \| ---- \| M] (Innovative Solutions) -- C: \Program Files (x86)\Innovative Solutions\DriverMax\drivermax.exe PRC - [2012-06-12 17: 31: 08 \| 001,104,440 \| ---- \| M] () -- C: \Program Files (x86)\AVG Secure Search\vprot.exe PRC - [2012-06-12 17: 31: 08 \| 000,935,480 \| ---- \| M] () -- C: \Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe PRC - [2012-04-17 17: 19: 40 \| 003,671,872 \| ---- \| M] (DT Soft Ltd) -- C: \Program Files (x86)\DAEMON Tools Lite\DTLite.exe PRC - [2012-01-29 17: 22: 26 \| 000,075,136 \| ---- \| M] () -- C: \Windows\SysWOW64\PnkBstrA.exe PRC - [2012-01-24 18: 24: 26 \| 002,416,480 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C: \Program Files (x86)\AVG\AVG2012\avgtray.exe PRC - [2011-11-23 03: 36: 24 \| 002,391,832 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C: \Program Files (x86)\AVG\AVG2012\avgfws.exe PRC - [2011-10-12 07: 25: 22 \| 004,433,248 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C: \Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe PRC - [2011-08-02 07: 09: 08 \| 000,192,776 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C: \Program Files (x86)\AVG\AVG2012\avgwdsvc.exe PRC - [2011-07-13 08: 33: 08 \| 004,615,064 \| ---- \| M] (Almico Software (www.almico.com)) -- C: \Program Files (x86)\SpeedFan\speedfan.exe PRC - [2011-02-10 02: 00: 16 \| 000,012,800 \| ---- \| M] (Mr. John aka japamd) -- C: \Program Files (x86)\RadeonPro\RadeonProSupport.exe PRC - [2011-02-10 02: 00: 14 \| 001,832,448 \| ---- \| M] (Mr. John aka japamd) -- C: \Program Files (x86)\RadeonPro\RadeonPro.exe PRC - [2010-11-20 14: 17: 41 \| 001,174,016 \| ---- \| M] (Microsoft Corporation) -- C: \Program Files (x86)\Windows Sidebar\sidebar.exe PRC - [2010-06-04 12: 13: 00 \| 007,989,768 \| ---- \| M] (ASRock Incorporation) -- C: \Program Files (x86)\ASRock Utility\IES\AsrIes.exe PRC - [2007-05-30 14: 14: 22 \| 000,050,688 \| ---- \| M] () -- C: \Program Files (x86)\KatMouse\KatMouse.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-08-01 22: 34: 43 \| 000,192,512 \| ---- \| M] () -- C: \Users\Pusz\AppData\Local\Temp\sfamcc00001.dll MOD - [2012-08-01 22: 34: 43 \| 000,172,032 \| ---- \| M] () -- C: \Users\Pusz\AppData\Local\Temp\sfareca00001.dll MOD - [2012-08-01 11: 48: 33 \| 002,249,696 \| ---- \| M] () -- C: \Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2012-07-31 11: 49: 37 \| 009,465,032 \| ---- \| M] () -- C: \Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_268.dll MOD - [2012-06-14 18: 13: 14 \| 000,008,648 \| ---- \| M] () -- C: \Program Files (x86)\Innovative Solutions\DriverMax\sync.dll MOD - [2012-06-13 17: 43: 19 \| 000,212,992 \| ---- \| M] () -- C: \Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\69ca4a43ba14b66689715ad62aed70e6\System.ServiceProcess.ni.dll MOD - [2012-06-13 17: 43: 13 \| 011,833,344 \| ---- \| M] () -- C: \Windows\assembly\NativeImages_v2.0.50727_32\System.Web\a501b7960f6c6e2e39162b83f3303aaa\System.Web.ni.dll MOD - [2012-06-13 17: 42: 52 \| 012,436,480 \| ---- \| M] () -- C: \Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll MOD - [2012-06-13 17: 42: 46 \| 001,591,808 \| ---- \| M] () -- C: \Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll MOD - [2012-06-12 17: 31: 09 \| 000,132,664 \| ---- \| M] () -- C: \Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.1.0\SiteSafety.dll MOD - [2012-06-12 17: 31: 08 \| 001,104,440 \| ---- \| M] () -- C: \Program Files (x86)\AVG Secure Search\vprot.exe MOD - [2012-05-10 01: 13: 51 \| 001,051,136 \| ---- \| M] () -- C: \Windows\assembly\NativeImages_v2.0.50727_32\System.Management\9b2f17fb61b7197f2a04108f5d1a1cc6\System.Management.ni.dll MOD - [2012-05-10 01: 11: 10 \| 000,771,584 \| ---- \| M] () -- C: \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\03dee80574f4ec770b6f77ca030ded6c\System.Runtime.Remoting.ni.dll MOD - [2012-05-10 01: 10: 40 \| 000,025,600 \| ---- \| M] () -- C: \Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\2ec98ab0193d64e95b7d09d094deed97\Accessibility.ni.dll MOD - [2012-05-10 01: 10: 31 \| 003,347,968 \| ---- \| M] () -- C: \Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\46fce56db7685a586d3eeb7c373e3c1c\WindowsBase.ni.dll MOD - [2012-05-10 01: 10: 27 \| 005,452,800 \| ---- \| M] () -- C: \Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll MOD - [2012-05-10 01: 10: 23 \| 007,967,232 \| ---- \| M] () -- C: \Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll MOD - [2012-05-10 01: 10: 19 \| 011,492,864 \| ---- \| M] () -- C: \Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll MOD - [2011-03-17 01: 11: 16 \| 004,297,568 \| ---- \| M] () -- C: \PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf MOD - [2010-11-13 04: 03: 59 \| 000,425,984 \| ---- \| M] () -- C: \Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_pl_b77a5c561934e089\System.Windows.Forms.resources.dll MOD - [2010-11-13 04: 03: 49 \| 000,311,296 \| ---- \| M] () -- C: \Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll MOD - [2010-11-06 13: 31: 36 \| 001,132,032 \| ---- \| M] () -- C: \Program Files (x86)\RadeonPro\V8.Net.dll MOD - [2010-10-20 16: 45: 26 \| 008,801,120 \| ---- \| M] () -- C: \PROGRA~2\Microsoft Office\Office14\1033\GrooveIntlResource.dll MOD - [2009-06-10 15: 10: 44 \| 000,032,768 \| ---- \| M] () -- C: \Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_pl_b77a5c561934e089\System.Runtime.Remoting.resources.dll MOD - [2008-12-30 18: 23: 28 \| 000,214,528 \| ---- \| M] () -- C: \Program Files (x86)\KatMouse\KatMouseH.dll MOD - [2007-06-22 16: 48: 58 \| 000,044,032 \| ---- \| M] () -- C: \Program Files (x86)\KatMouse\KatMouseS.dll MOD - [2007-05-30 14: 14: 22 \| 000,050,688 \| ---- \| M] () -- C: \Program Files (x86)\KatMouse\KatMouse.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV: [b]64bit: [/b] - [2012-05-25 01: 07: 32 \| 000,236,544 \| ---- \| M] (AMD) [Auto \| Running] -- C: \Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV: [b]64bit: [/b] - [2012-04-24 17: 32: 38 \| 000,584,224 \| ---- \| M] (Soluto) [Auto \| Stopped] -- C: \Program Files\Soluto\SolutoService.exe -- (SolutoService) SRV: [b]64bit: [/b] - [2012-04-05 13: 08: 24 \| 000,035,648 \| ---- \| M] (TuneUp Software) [Auto \| Running] -- C: \Windows\SysNative\uxtuneup.dll -- (UxTuneUp) SRV: [b]64bit: [/b] - [2012-03-12 17: 07: 56 \| 000,204,792 \| ---- \| M] (Nitro PDF Software) [Auto \| Running] -- C: \Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe -- (NitroReaderDriverReadSpool2) SRV: [b]64bit: [/b] - [2012-02-17 20: 56: 20 \| 000,027,760 \| ---- \| M] (VIA Technologies, Inc.) [Auto \| Running] -- C: \Windows\SysNative\ViakaraokeSrv.exe -- (VIAKaraokeService) SRV: [b]64bit: [/b] - [2011-12-05 23: 15: 08 \| 000,361,984 \| ---- \| M] (Advanced Micro Devices, Inc.) [Auto \| Running] -- C: \Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service) SRV: [b]64bit: [/b] - [2011-06-29 17: 25: 12 \| 003,246,920 \| ---- \| M] (O&O Software GmbH) [Auto \| Running] -- C: \Program Files\OO Software\Defrag\oodag.exe -- (OODefragAgent) SRV: [b]64bit: [/b] - [2009-07-14 03: 41: 27 \| 001,011,712 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C: \Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV: [b]64bit: [/b] - [2009-07-14 03: 40: 01 \| 000,193,536 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C: \Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2012-08-01 11: 48: 33 \| 000,114,144 \| ---- \| M] (Mozilla Foundation) [On_Demand \| Stopped] -- C: \Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-07-31 11: 49: 37 \| 000,250,056 \| ---- \| M] (Adobe Systems Incorporated) [On_Demand \| Stopped] -- C: \Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012-06-27 11: 58: 22 \| 000,655,944 \| ---- \| M] (Malwarebytes Corporation) [Auto \| Running] -- C: \Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2012-06-12 17: 31: 08 \| 000,935,480 \| ---- \| M] () [Auto \| Running] -- C: \Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe -- (vToolbarUpdater11.1.0) SRV - [2012-04-05 13: 08: 34 \| 002,143,552 \| ---- \| M] (TuneUp Software) [Auto \| Running] -- C: \Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc) SRV - [2012-04-05 13: 08: 24 \| 000,028,992 \| ---- \| M] (TuneUp Software) [Auto \| Running] -- C: \Windows\SysWOW64\uxtuneup.dll -- (UxTuneUp) SRV - [2012-01-29 17: 22: 26 \| 000,075,136 \| ---- \| M] () [Auto \| Running] -- C: \Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2011-11-23 03: 36: 24 \| 002,391,832 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [Auto \| Running] -- C: \Program Files (x86)\AVG\AVG2012\avgfws.exe -- (avgfws) SRV - [2011-10-12 07: 25: 22 \| 004,433,248 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [Auto \| Running] -- C: \Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe -- (AVGIDSAgent) SRV - [2011-08-02 07: 09: 08 \| 000,192,776 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [Auto \| Running] -- C: \Program Files (x86)\AVG\AVG2012\avgwdsvc.exe -- (avgwd) SRV - [2011-03-01 23: 17: 54 \| 000,008,192 \| ---- \| M] () [Auto \| Stopped] -- C: \Windows\SysWOW64\srvany.exe -- (KMService) SRV - [2011-02-10 02: 00: 16 \| 000,012,800 \| ---- \| M] (Mr. John aka japamd) [Auto \| Running] -- C: \Program Files (x86)\RadeonPro\RadeonProSupport.exe -- (RadeonPro Support Service) SRV - [2010-03-18 14: 16: 28 \| 000,130,384 \| ---- \| M] (Microsoft Corporation) [Auto \| Stopped] -- C: \Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-09-20 12: 55: 20 \| 001,037,824 \| ---- \| M] (Hewlett-Packard Co.) [On_Demand \| Running] -- C: \Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC) SRV - [2009-06-10 23: 23: 09 \| 000,066,384 \| ---- \| M] (Microsoft Corporation) [Disabled \| Stopped] -- C: \Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009-05-05 05: 45: 50 \| 000,124,256 \| ---- \| M] () [Auto \| Stopped] -- C: \Program Files (x86)\AMD\OverDrive\AODAssist.exe -- (AODService) SRV - [2007-05-31 17: 11: 54 \| 000,443,784 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C: \Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007-05-31 17: 11: 46 \| 000,225,672 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C: \Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV: [b]64bit: [/b] - [2012-08-01 23: 32: 16 \| 000,283,200 \| ---- \| M] (DT Soft Ltd) [Kernel \| System \| Running] -- C: \Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV: [b]64bit: [/b] - [2012-06-27 11: 58: 24 \| 000,024,904 \| ---- \| M] (Malwarebytes Corporation) [File_System \| On_Demand \| Running] -- C: \Windows\SysNative\drivers\mbam.sys -- (MBAMProtector) DRV: [b]64bit: [/b] - [2012-05-25 22: 23: 14 \| 000,438,376 \| ---- \| M] (Realtek Semiconductor Corporation ) [Kernel \| On_Demand \| Running] -- C: \Windows\SysNative\drivers\Rtenic64.sys -- (RTLE8023x64) DRV: [b]64bit: [/b] - [2012-05-25 01: 27: 42 \| 011,175,424 \| ---- \| M] (Advanced Micro Devices, Inc.) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV: [b]64bit: [/b] - [2012-05-25 01: 27: 42 \| 011,175,424 \| ---- \| M] (Advanced Micro Devices, Inc.) [Kernel \| On_Demand \| Running] -- C: \Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV: [b]64bit: [/b] - [2012-05-24 23: 54: 34 \| 000,343,040 \| ---- \| M] (Advanced Micro Devices, Inc.) [Kernel \| On_Demand \| Running] -- C: \Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV: [b]64bit: [/b] - [2012-05-16 08: 22: 10 \| 000,678,544 \| ---- \| M] (Realtek ) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\Rt630x64.sys -- (RTL8168) DRV: [b]64bit: [/b] - [2012-04-24 17: 13: 24 \| 000,054,728 \| ---- \| M] (Soluto LTD.) [File_System \| Boot \| Stopped] -- C: \Windows\SysNative\drivers\Soluto.sys -- (Soluto) DRV: [b]64bit: [/b] - [2012-04-10 07: 40: 58 \| 000,082,560 \| ---- \| M] (Advanced Micro Devices) [Kernel \| Boot \| Running] -- C: \Windows\SysNative\drivers\amd_sata.sys -- (amd_sata) DRV: [b]64bit: [/b] - [2012-04-10 07: 40: 58 \| 000,042,624 \| ---- \| M] (Advanced Micro Devices) [Kernel \| Boot \| Running] -- C: \Windows\SysNative\drivers\amd_xata.sys -- (amd_xata) DRV: [b]64bit: [/b] - [2012-03-16 16: 02: 54 \| 000,685,672 \| ---- \| M] (Realtek ) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV: [b]64bit: [/b] - [2012-03-01 08: 46: 16 \| 000,023,408 \| ---- \| M] (Microsoft Corporation) [Recognizer \| Boot \| Unknown] -- C: \Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV: [b]64bit: [/b] - [2012-01-19 22: 33: 40 \| 000,530,488 \| ---- \| M] () [Kernel \| Boot \| Running] -- C: \Windows\SysNative\drivers\sptd.sys -- (sptd) DRV: [b]64bit: [/b] - [2011-12-29 13: 37: 44 \| 000,035,120 \| ---- \| M] (COMPAL ELECTRONIC INC.) [Kernel \| Boot \| Running] -- C: \Windows\SysNative\drivers\LPCFilter.sys -- (LPCFilter) DRV: [b]64bit: [/b] - [2011-12-17 16: 43: 28 \| 000,011,904 \| ---- \| M] (Advanced Micro Devices Inc.) [Kernel \| Boot \| Running] -- C: \Windows\SysNative\drivers\amdide64.sys -- (amdide64) DRV: [b]64bit: [/b] - [2011-12-08 06: 22: 38 \| 000,203,320 \| ---- \| M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\ssudserd.sys -- (ssudserd) DRV: [b]64bit: [/b] - [2011-12-08 06: 22: 38 \| 000,203,320 \| ---- \| M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm) DRV: [b]64bit: [/b] - [2011-12-08 06: 22: 38 \| 000,098,616 \| ---- \| M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus) DRV: [b]64bit: [/b] - [2011-10-27 03: 25: 56 \| 000,161,280 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\sscemdm.sys -- (sscemdm) DRV: [b]64bit: [/b] - [2011-10-27 03: 25: 56 \| 000,129,024 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\ssceserd.sys -- (ssceserd) DRV: [b]64bit: [/b] - [2011-10-27 03: 25: 56 \| 000,127,488 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\sscebus.sys -- (sscebus) DRV: [b]64bit: [/b] - [2011-10-27 03: 25: 56 \| 000,018,944 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\sscemdfl.sys -- (sscemdfl) DRV: [b]64bit: [/b] - [2011-10-20 11: 24: 06 \| 000,157,696 \| ---- \| M] (Matrox Graphics Inc.) [Kernel \| Boot \| Running] -- C: \Windows\SysNative\drivers\MxEFUF64.sys -- (MxEFUF) DRV: [b]64bit: [/b] - [2011-10-17 19: 40: 50 \| 000,093,712 \| ---- \| M] (Advanced Micro Devices) [Kernel \| On_Demand \| Running] -- C: \Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService) DRV: [b]64bit: [/b] - [2011-10-07 07: 23: 46 \| 000,283,728 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [Kernel \| System \| Running] -- C: \Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64) DRV: [b]64bit: [/b] - [2011-09-13 07: 30: 08 \| 000,037,456 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [File_System \| Boot \| Running] -- C: \Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64) DRV: [b]64bit: [/b] - [2011-08-08 07: 08: 58 \| 000,046,672 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [File_System \| System \| Running] -- C: \Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64) DRV: [b]64bit: [/b] - [2011-07-11 02: 14: 36 \| 000,375,376 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [Kernel \| System \| Running] -- C: \Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia) DRV: [b]64bit: [/b] - [2011-07-11 02: 14: 08 \| 000,029,776 \| ---- \| M] (AVG Technologies CZ, s.r.o. ) [Kernel \| On_Demand \| Running] -- C: \Windows\SysNative\drivers\AVGIDSFilter.sys -- (AVGIDSFilter) DRV: [b]64bit: [/b] - [2011-07-11 02: 14: 06 \| 000,120,400 \| ---- \| M] (AVG Technologies CZ, s.r.o. ) [Kernel \| On_Demand \| Running] -- C: \Windows\SysNative\drivers\AVGIDSDriver.sys -- (AVGIDSDriver) DRV: [b]64bit: [/b] - [2011-07-11 02: 14: 06 \| 000,026,704 \| ---- \| M] (AVG Technologies CZ, s.r.o. ) [Kernel \| Boot \| Running] -- C: \Windows\SysNative\drivers\AVGIDSEH.sys -- (AVGIDSEH) DRV: [b]64bit: [/b] - [2011-06-24 07: 31: 02 \| 000,055,424 \| ---- \| M] (Advanced Micro Devices) [Kernel \| Auto \| Running] -- C: \Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.01) DRV: [b]64bit: [/b] - [2011-05-23 02: 03: 28 \| 000,048,992 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [Kernel \| System \| Running] -- C: \Windows\SysNative\drivers\avgfwd6a.sys -- (Avgfwfd) DRV: [b]64bit: [/b] - [2011-01-15 18: 21: 04 \| 000,036,352 \| ---- \| M] (Elaborate Bytes AG) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\VClone.sys -- (VClone) DRV: [b]64bit: [/b] - [2010-11-20 15: 33: 35 \| 000,078,720 \| ---- \| M] (Hewlett-Packard Company) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV: [b]64bit: [/b] - [2010-11-20 13: 07: 05 \| 000,059,392 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV: [b]64bit: [/b] - [2010-11-20 13: 03: 42 \| 000,020,992 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV: [b]64bit: [/b] - [2010-11-06 23: 24: 34 \| 000,024,176 \| ---- \| M] () [Kernel \| On_Demand \| Stopped] -- C: \Program Files\PeerBlock\pbfilter.sys -- (pbfilter) DRV: [b]64bit: [/b] - [2010-10-25 11: 10: 22 \| 000,020,552 \| ---- \| M] (Devguru Co., Ltd) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\dgderdrv.sys -- (dgderdrv) DRV: [b]64bit: [/b] - [2010-07-01 19: 11: 24 \| 000,012,352 \| ---- \| M] () [Kernel \| "Start" not found. \| Unknown] -- C: \Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5) DRV: [b]64bit: [/b] - [2010-05-06 05: 21: 46 \| 000,125,456 \| ---- \| M] (ATI Technologies, Inc.) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService) DRV: [b]64bit: [/b] - [2010-02-18 09: 18: 24 \| 000,046,136 \| ---- \| M] (Advanced Micro Devices) [Kernel \| On_Demand \| Running] -- C: \Windows\SysNative\drivers\amdiox64.sys -- (amdiox64) DRV: [b]64bit: [/b] - [2009-10-07 11: 13: 34 \| 000,070,200 \| ---- \| M] (Advanced Micro Devices) [Kernel \| Boot \| Running] -- C: \Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV: [b]64bit: [/b] - [2009-10-07 11: 13: 34 \| 000,028,728 \| ---- \| M] (Advanced Micro Devices) [Kernel \| Boot \| Running] -- C: \Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV: [b]64bit: [/b] - [2009-09-01 16: 29: 56 \| 000,157,712 \| ---- \| M] (Kaspersky Lab) [Kernel \| System \| Running] -- C: \Windows\SysNative\drivers\kl1.sys -- (kl1) DRV: [b]64bit: [/b] - [2009-07-14 03: 52: 20 \| 000,194,128 \| ---- \| M] (AMD Technologies Inc.) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV: [b]64bit: [/b] - [2009-07-14 03: 48: 04 \| 000,065,600 \| ---- \| M] (LSI Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV: [b]64bit: [/b] - [2009-07-14 03: 45: 55 \| 000,024,656 \| ---- \| M] (Promise Technology) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV: [b]64bit: [/b] - [2009-07-14 02: 09: 02 \| 000,120,320 \| ---- \| M] (Microsoft Corporation) [Kernel \| Auto \| Running] -- C: \Windows\SysNative\drivers\irda.sys -- (irda) DRV: [b]64bit: [/b] - [2009-06-10 22: 34: 33 \| 003,286,016 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV: [b]64bit: [/b] - [2009-06-10 22: 34: 28 \| 000,468,480 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV: [b]64bit: [/b] - [2009-06-10 22: 34: 23 \| 000,270,848 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV: [b]64bit: [/b] - [2009-06-10 22: 31: 59 \| 000,031,232 \| ---- \| M] (Hauppauge Computer Works, Inc.) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV: [b]64bit: [/b] - [2009-04-08 19: 44: 58 \| 000,232,464 \| ---- \| M] (Advanced Micro Devices, Inc) [Kernel \| Boot \| Running] -- C: \Windows\SysNative\drivers\ahcix64s.sys -- (ahcix64s) DRV: [b]64bit: [/b] - [2008-12-19 05: 43: 30 \| 001,120,768 \| ---- \| M] (VIA Technologies, Inc.) [Kernel \| On_Demand \| Running] -- C: \Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService) DRV: [b]64bit: [/b] - [2008-02-14 08: 12: 00 \| 001,854,976 \| ---- \| M] (Creative Technology Ltd.) [Kernel \| On_Demand \| Running] -- C: \Windows\SysNative\drivers\monfilt.sys -- (monfilt) DRV: [b]64bit: [/b] - [2008-01-19 06: 36: 12 \| 000,027,648 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Running] -- C: \Windows\SysNative\drivers\irsir.sys -- (irsir) DRV: [b]64bit: [/b] - [2007-06-19 07: 50: 54 \| 000,143,400 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\s816mdm.sys -- (s816mdm) DRV: [b]64bit: [/b] - [2007-06-19 07: 50: 54 \| 000,124,968 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\s816mgmt.sys -- (s816mgmt) DRV: [b]64bit: [/b] - [2007-06-19 07: 50: 54 \| 000,121,896 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\s816obex.sys -- (s816obex) DRV: [b]64bit: [/b] - [2007-06-19 07: 50: 48 \| 000,018,472 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\s816mdfl.sys -- (s816mdfl) DRV: [b]64bit: [/b] - [2007-06-19 07: 50: 46 \| 000,107,048 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\s816bus.sys -- (s816bus) DRV: [b]64bit: [/b] - [2007-04-03 14: 57: 40 \| 000,130,824 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\s116unic.sys -- (s116unic) DRV: [b]64bit: [/b] - [2007-04-03 14: 57: 38 \| 000,031,496 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\s116nd5.sys -- (s116nd5) DRV: [b]64bit: [/b] - [2007-04-03 13: 57: 40 \| 000,123,656 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\s116obex.sys -- (s116obex) DRV: [b]64bit: [/b] - [2007-04-03 13: 57: 38 \| 000,126,216 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\s116mgmt.sys -- (s116mgmt) DRV: [b]64bit: [/b] - [2007-04-03 13: 57: 36 \| 000,144,648 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\s116mdm.sys -- (s116mdm) DRV: [b]64bit: [/b] - [2007-04-03 13: 57: 36 \| 000,019,720 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\s116mdfl.sys -- (s116mdfl) DRV: [b]64bit: [/b] - [2007-04-03 13: 57: 34 \| 000,108,296 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysNative\drivers\s116bus.sys -- (s116bus) DRV - [2011-11-08 22: 25: 24 \| 000,011,856 \| ---- \| M] (TuneUp Software) [Kernel \| On_Demand \| Running] -- C: \Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv) DRV - [2011-02-05 16: 00: 18 \| 000,021,712 \| ---- \| M] (Phoenix Technologies) [Kernel \| On_Demand \| Stopped] -- C: \Windows\SysWOW64\drivers\DrvAgent64.SYS -- (DrvAgent64) DRV - [2010-10-25 11: 03: 52 \| 000,016,392 \| ---- \| M] (Teruten Inc) [File_System \| On_Demand \| Stopped] -- C: \Windows\SysWOW64\drivers\TFsExDisk.Sys -- (TFsExDisk) DRV - [2009-07-14 03: 19: 10 \| 000,019,008 \| ---- \| M] (Microsoft Corporation) [File_System \| On_Demand \| Stopped] -- C: \Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE: [b]64bit: [/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE: [b]64bit: [/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http: //www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http: //www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http: //www.msn.com/ IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http: //www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http: //isearch.avg.com/search?cid={5445E9E2-9937-4FDB-844D-E42375B08F1E}&mid=e52a6837447347d1a107d16c64e053cb-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=en&ds=gm011&pr=sa&d=2012-03-26 21: 24: 58&v=10.2.0.3&sap=dsp&q={searchTerms} IE - HKCU\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http: //www.daemon-search.com/search/web?q={searchTerms} IE - HKCU\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http: //search.sweetim.com/search.asp?src=6&q={searchTerms} IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "about: home" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}: 1.3.2 FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru: 9.0.0.736 FF - prefs.js..extensions.enabledItems: smartwebprinting@hp.com: 4.51 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}: 6.0.20 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}: 6.0.22 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}: 6.0.23 FF - prefs.js..extensions.enabledItems: 2020Player@2020Technologies.com: 4.5.4.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}: 6.0.24 FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}: 2.0 FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: 5.5 FF - prefs.js..keyword.URL: "http: //www.google.pl/search?hl=pl&q=" FF: [b]64bit: [/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C: \Windows\system32\Macromed\Flash\NPSWF64_11_3_300_268.dll File not found FF: [b]64bit: [/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.0: C: \Windows\system32\npDeployJava1.dll (Oracle Corporation) FF: [b]64bit: [/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.0: C: \Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF: [b]64bit: [/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF: [b]64bit: [/b] - HKLM\Software\MozillaPlugins\[url=http: //windows7forum.pl/microsoft-33418-u]Microsoft[/url].com/NpCtrl,version=1.0: c: \Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF: [b]64bit: [/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C: \PROGRA~1\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C: \Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_268.dll () FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C: \Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.1.0\\npsitesafety.dll () FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C: \Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@idsoftware.com/QuakeLive: C: \ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C: \Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C: \Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\[url=http: //windows7forum.pl/microsoft-33418-u]Microsoft[/url].com/NpCtrl,version=1.0: c: \Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C: \PROGRA~2\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C: \PROGRA~2\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nitropdf.com/NitroPDF: C: \Program Files (x86)\Nitro PDF\Reader 2\npnitromozilla.dll ( ) FF - HKLM\Software\MozillaPlugins\@vividas.com/npVividasPlayer: C: \Program Files (x86)\Vividas\Player\npVividasPlayer.dll ( ) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C: \Users\Pusz\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C: \Users\Pusz\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C: \Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-03-23 17: 24: 32 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C: \Program Files (x86)\AVG\AVG2012\Firefox4\ [2012-02-09 16: 38: 11 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C: \ProgramData\AVG Secure Search\11.1.0.7\ [2012-06-12 17: 31: 12 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: C: \Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2012-05-03 10: 13: 04 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Components: C: \Program Files (x86)\Mozilla Firefox\components [2012-08-01 19: 34: 39 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Plugins: C: \Program Files (x86)\Mozilla Firefox\plugins [2012-08-01 19: 34: 39 \| 000,000,000 \| ---D \| M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C: \Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-03-23 17: 24: 32 \| 000,000,000 \| ---D \| M] [2012-03-21 13: 12: 04 \| 000,000,000 \| ---D \| M] (No name found) -- C: \Users\Pusz\AppData\Roaming\mozilla\Extensions [2012-03-21 13: 12: 04 \| 000,000,000 \| ---D \| M] (No name found) -- C: \Users\Pusz\AppData\Roaming\mozilla\Extensions\prism@developer.mozilla.org [2012-07-31 11: 08: 03 \| 000,000,000 \| ---D \| M] (No name found) -- C: \Users\Pusz\AppData\Roaming\mozilla\Firefox\Profiles\awbtheky.default\extensions [2011-01-26 15: 22: 08 \| 000,000,000 \| ---D \| M] (20-20 3D Viewer) -- C: \Users\Pusz\AppData\Roaming\mozilla\Firefox\Profiles\awbtheky.default\extensions\2020Player@2020Technologies.com [2012-05-17 18: 28: 43 \| 000,000,000 \| ---D \| M] (ProxTube - Unblock YouTube) -- C: \Users\Pusz\AppData\Roaming\mozilla\Firefox\Profiles\awbtheky.default\extensions\ich@maltegoetz.de [2011-12-21 12: 31: 33 \| 000,000,000 \| ---D \| M] (Open in Private Browsing Mode) -- C: \Users\Pusz\AppData\Roaming\mozilla\Firefox\Profiles\awbtheky.default\extensions\jid1-0FHdJAAQ7Nb73Q@jetpack [2012-07-31 11: 09: 33 \| 000,000,000 \| ---D \| M] (rein) -- C: \Users\Pusz\AppData\Roaming\mozilla\Firefox\Profiles\awbtheky.default\extensions\rein@notiz.jp [2010-08-20 01: 17: 07 \| 000,002,059 \| ---- \| M] () -- C: \Users\Pusz\AppData\Roaming\Mozilla\Firefox\Profiles\awbtheky.default\searchplugins\daemon-search.xml [2012-03-12 21: 53: 17 \| 000,000,000 \| ---D \| M] (No name found) -- C: \Program Files (x86)\mozilla firefox\extensions [2010-03-11 19: 06: 38 \| 000,000,000 \| ---D \| M] (Kaspersky URL Advisor) -- C: \Program Files (x86)\mozilla firefox\extensions\linkfilter@kaspersky.ru [2012-08-01 11: 48: 34 \| 000,000,000 \| ---D \| M] (No name found) -- C: \Program Files (x86)\mozilla firefox\distribution\extensions [2012-05-31 06: 44: 40 \| 000,505,801 \| ---- \| M] () (No name found) -- C: \USERS\PUSZ\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AWBTHEKY.DEFAULT\EXTENSIONS\{1280606B-2510-4FE0-97EF-9B5A22EAFE30}.XPI [2011-04-06 18: 37: 12 \| 000,079,135 \| ---- \| M] () (No name found) -- C: \USERS\PUSZ\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AWBTHEKY.DEFAULT\EXTENSIONS\{1A2D0EC4-75F5-4C91-89C4-3656F6E44B68}.XPI [2012-07-25 08: 28: 44 \| 000,276,167 \| ---- \| M] () (No name found) -- C: \USERS\PUSZ\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AWBTHEKY.DEFAULT\EXTENSIONS\{64161300-E22B-11DB-8314-0800200C9A66}.XPI [2012-07-10 23: 00: 14 \| 000,177,357 \| ---- \| M] () (No name found) -- C: \USERS\PUSZ\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AWBTHEKY.DEFAULT\EXTENSIONS\{C36177C0-224A-11DA-8CD6-0800200C9A91}.XPI [2012-04-03 21: 22: 40 \| 000,140,964 \| ---- \| M] () (No name found) -- C: \USERS\PUSZ\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AWBTHEKY.DEFAULT\EXTENSIONS\FIREGESTURES@XULDEV.ORG.XPI [2012-04-13 20: 17: 32 \| 000,049,306 \| ---- \| M] () (No name found) -- C: \USERS\PUSZ\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AWBTHEKY.DEFAULT\EXTENSIONS\MP4DOWNLOADER@JEFF.NET.XPI [2012-03-23 19: 46: 36 \| 001,184,804 \| ---- \| M] () (No name found) -- C: \USERS\PUSZ\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AWBTHEKY.DEFAULT\EXTENSIONS\TESTPILOT@LABS.MOZILLA.COM.XPI [2012-07-25 08: 28: 44 \| 000,234,654 \| ---- \| M] () (No name found) -- C: \USERS\PUSZ\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\AWBTHEKY.DEFAULT\EXTENSIONS\THUMBNAILZOOM@DADLER.GITHUB.COM.XPI [2012-08-01 11: 48: 34 \| 000,266,720 \| ---- \| M] (Mozilla Foundation) -- C: \Program Files (x86)\mozilla firefox\components\browsercomps.dll [2010-11-30 16: 11: 52 \| 000,012,800 \| ---- \| M] (Nullsoft, Inc.) -- C: \Program Files (x86)\mozilla firefox\plugins\npwachk.dll [2011-11-10 22: 35: 18 \| 000,002,105 \| ---- \| M] () -- C: \Program Files (x86)\mozilla firefox\searchplugins\adawaretb.xml [2012-08-01 11: 48: 31 \| 000,002,767 \| ---- \| M] () -- C: \Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2012-07-10 23: 28: 12 \| 000,003,769 \| ---- \| M] () -- C: \Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml [2012-08-01 11: 48: 31 \| 000,001,406 \| ---- \| M] () -- C: \Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2012-08-01 11: 48: 31 \| 000,000,917 \| ---- \| M] () -- C: \Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2012-08-01 11: 48: 31 \| 000,000,858 \| ---- \| M] () -- C: \Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2012-08-01 11: 48: 31 \| 000,001,183 \| ---- \| M] () -- C: \Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-08-01 11: 48: 31 \| 000,001,683 \| ---- \| M] () -- C: \Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http: //home.sweetim.com/ CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google: baseURL}search?{google: RLZ}{google: acceptedSuggestion}{google: originalQueryForSuggestion}{google: searchFieldtrialParameter}{google: instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google: baseSuggestURL}search?{google: searchFieldtrialParameter}{google: instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - homepage: http: //home.sweetim.com/ CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C: \Users\Pusz\AppData\Local\Google\Chrome\Application\19.0.1084.52\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C: \Users\Pusz\AppData\Local\Google\Chrome\Application\19.0.1084.52\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C: \Users\Pusz\AppData\Local\Google\Chrome\Application\19.0.1084.52\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C: \Windows\SysWOW64\Macromed\Flash\NPSWF32.dll CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = C: \Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U29 (Enabled) = C: \Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Winamp Application Detector (Enabled) = C: \Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll CHR - plugin: DivX Web Player (Enabled) = C: \Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll CHR - plugin: Picasa (Enabled) = C: \Program Files (x86)\Google\Picasa3\npPicasa3.dll CHR - plugin: Vividas Player Plugin (Enabled) = C: \Program Files (x86)\Vividas\Player\npVividasPlayer.dll CHR - plugin: QUAKE LIVE (Enabled) = C: \ProgramData\id Software\QuakeLive\npquakezero.dll CHR - plugin: Google Update (Enabled) = C: \Users\Pusz\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll CHR - plugin: Silverlight Plug-In (Enabled) = c: \Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: YouTube = C: \Users\Pusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Szukaj w Google = C: \Users\Pusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: Freemake Video Converter = C: \Users\Pusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj\1.0.0_0\ CHR - Extension: AVG Safe Search = C: \Users\Pusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1901_0\ CHR - Extension: Gmail = C: \Users\Pusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2011-12-24 17: 34: 57 \| 000,001,240 \| ---- \| M]) - C: \Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2: [b]64bit: [/b] - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C: \Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.) O2: [b]64bit: [/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C: \Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2: [b]64bit: [/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C: \Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C: \Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C: \PROGRA~2\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C: \Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation) O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C: \Program Files (x86)\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll () O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C: \PROGRA~2\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C: \Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation) O3: [b]64bit: [/b] - HKLM\..\Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C: \Program Files (x86)\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll () O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O4 - HKLM..\Run: [APSDaemon] C: \Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [AVG_TRAY] C: \Program Files (x86)\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C: \Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [StartCCC] C: \Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [VIAJDS] C: \Program Files (x86)\VIA\VIAudioi\HDADeck\VIAJDS.exe (TODO: <Company name>) O4 - HKLM..\Run: [vProt] C: \Program Files (x86)\AVG Secure Search\vprot.exe () O4 - HKCU..\Run: [DAEMON Tools Lite] C: \Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKCU..\Run: [DriverMax] C: \Program Files (x86)\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions) O4 - HKCU..\Run: [DriverMax_RESTART] C: \Program Files (x86)\Innovative Solutions\DriverMax\drivermax.exe (Innovative Solutions) O4 - HKCU..\Run: [F.lux] C: \Users\Pusz\Local Settings\Apps\F.lux\flux.exe () O4 - HKCU..\Run: [RadeonPro] C: \Program Files (x86)\RadeonPro\RadeonPro.exe (Mr. John aka japamd) O4 - Startup: C: \Users\Pusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\KatMouse.lnk = C: \Program Files (x86)\KatMouse\KatMouse.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8: [b]64bit: [/b] - Extra context menu item: Add to Google Photos Screensa&ver - res: //C: \Windows\system32\GPhotos.scr/200 File not found O8: [b]64bit: [/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res: //C: \PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found O8: [b]64bit: [/b] - Extra context menu item: E&xport to Microsoft Excel - res: //C: \PROGRA~2\Microsoft Office\Office14\EXCEL.EXE/3000 File not found O8: [b]64bit: [/b] - Extra context menu item: Se&nd to OneNote - res: //C: \PROGRA~2\Microsoft Office\Office14\ONBttnIE.dll/105 File not found O8 - Extra context menu item: Add to Google Photos Screensa&ver - C: \Windows\SysWow64\GPhotos.scr (Google Inc.) O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res: //C: \PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: E&xport to Microsoft Excel - res: //C: \PROGRA~2\Microsoft Office\Office14\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Se&nd to OneNote - res: //C: \PROGRA~2\Microsoft Office\Office14\ONBttnIE.dll/105 File not found O9 - Extra Button: @C: \Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C: \Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C: \Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C: \Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O13[b]64bit: [/b] - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B421F2EC-F5E5-4625-ABBA-4DA02E3123D6}: NameServer = 95.158.95.95,95.158.95.96 O18: [b]64bit: [/b] - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C: \Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.) O18: [b]64bit: [/b] - Protocol\Handler\ms-help - No CLSID value found O18: [b]64bit: [/b] - Protocol\Handler\viprotocol - No CLSID value found O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C: \Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C: \Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\11.1.0\ViProtocol.dll () O20: [b]64bit: [/b] - HKLM Winlogon: Shell - (explorer.exe) - C: \Windows\explorer.exe (Microsoft Corporation) O20: [b]64bit: [/b] - HKLM Winlogon: UserInit - (C: \Windows\system32\userinit.exe) - C: \Windows\SysNative\userinit.exe (Microsoft Corporation) O20: [b]64bit: [/b] - HKLM Winlogon: UserInit - (C: \Program Files\Soluto\soluto.exe /userinit) - C: \Program Files\Soluto\soluto.exe (Soluto) O20: [b]64bit: [/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C: \Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20: [b]64bit: [/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C: \Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C: \Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21: [b]64bit: [/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O22: [b]64bit: [/b] - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C: \Program Files (x86)\Stardock\Fences\FencesMenu64.dll (Stardock) O27: [b]64bit: [/b] - HKLM IFEO\excel.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27: [b]64bit: [/b] - HKLM IFEO\groove.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27: [b]64bit: [/b] - HKLM IFEO\infopath.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27: [b]64bit: [/b] - HKLM IFEO\misc.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27: [b]64bit: [/b] - HKLM IFEO\msaccess.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27: [b]64bit: [/b] - HKLM IFEO\msoxmled.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27: [b]64bit: [/b] - HKLM IFEO\mspub.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27: [b]64bit: [/b] - HKLM IFEO\mstore.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27: [b]64bit: [/b] - HKLM IFEO\ois.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27: [b]64bit: [/b] - HKLM IFEO\onenote.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27: [b]64bit: [/b] - HKLM IFEO\outlook.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27: [b]64bit: [/b] - HKLM IFEO\powerpnt.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27: [b]64bit: [/b] - HKLM IFEO\setup.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27: [b]64bit: [/b] - HKLM IFEO\Winword.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\excel.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\groove.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\infopath.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\misc.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\msaccess.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\msoxmled.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\mspub.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\mstore.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\ois.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\onenote.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\outlook.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\powerpnt.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\setup.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\Winword.exe: Debugger - C: \Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe (TuneUp Software) O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C: \PROGRA~2\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2012-07-27 23: 50: 03 \| 000,000,115 \| R--- \| M] () - G: \autorun.inf -- [ CDFS ] O33 - MountPoints2\{2b028388-fdef-11df-b80c-00252204ba38}\Shell - "" = AutoRun O33 - MountPoints2\{2b028388-fdef-11df-b80c-00252204ba38}\Shell\AutoRun\command - "" = H: \LaunchU3.exe -a O33 - MountPoints2\{4ebc14fe-e131-11df-885e-00252204ba38}\Shell - "" = AutoRun O33 - MountPoints2\{4ebc14fe-e131-11df-885e-00252204ba38}\Shell\AutoRun\command - "" = G: \autorun.exe O33 - MountPoints2\{cc429a75-103a-11df-8b80-00252204ba38}\Shell - "" = AutoRun O33 - MountPoints2\{cc429a75-103a-11df-8b80-00252204ba38}\Shell\AutoRun\command - "" = G: \Autoplay.exe O33 - MountPoints2\{f63422a1-4fd7-11e1-9197-00252204ba38}\Shell - "" = AutoRun O33 - MountPoints2\{f63422a1-4fd7-11e1-9197-00252204ba38}\Shell\AutoRun\command - "" = J: \LaunchU3.exe -a O33 - MountPoints2\H\Shell - "" = AutoRun O33 - MountPoints2\H\Shell\AutoRun\command - "" = H: \autorun.exe O34 - HKLM BootExecute: (autocheck autochk ) O34 - HKLM BootExecute: (OODBS) O34 - HKLM BootExecute: (C: \PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart) O35: [b]64bit: [/b] - HKLM\..comfile [open] -- "%1" % O35: [b]64bit: [/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37: [b]64bit: [/b] - HKLM\...com [@ = comfile] -- "%1" %* O37: [b]64bit: [/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv: UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv: ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) Malwerbytes nie znalazł nic, tak samo jak AVG. Czekam na pomoc i dzięki! (Log podzieliłem na dwa posty) Kod: [2012-08-02 00: 09: 57 \| 000,597,504 \| ---- \| C] (OldTimer Tools) -- C: \Users\Pusz\Desktop\OTL.exe [2012-08-01 23: 46: 21 \| 000,000,000 \| ---D \| C] -- C: \Users\Pusz\Documents\Activision [2012-08-01 23: 32: 37 \| 000,000,000 \| ---D \| C] -- C: \ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite [2012-08-01 23: 32: 16 \| 000,283,200 \| ---- \| C] (DT Soft Ltd) -- C: \Windows\SysNative\drivers\dtsoftbus01.sys [2012-08-01 23: 32: 07 \| 000,000,000 \| ---D \| C] -- C: \Program Files (x86)\DAEMON Tools Lite [2012-08-01 19: 34: 33 \| 000,000,000 \| ---D \| C] -- C: \ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime [2012-08-01 19: 34: 27 \| 000,000,000 \| ---D \| C] -- C: \Program Files (x86)\QuickTime [2012-08-01 19: 34: 27 \| 000,000,000 \| ---D \| C] -- C: \ProgramData\Apple Computer [2012-08-01 19: 33: 49 \| 000,000,000 \| ---D \| C] -- C: \Program Files (x86)\Common Files\Apple [2012-08-01 19: 33: 43 \| 000,000,000 \| ---D \| C] -- C: \Users\Pusz\AppData\Local\Apple [2012-08-01 19: 33: 42 \| 000,000,000 \| ---D \| C] -- C: \Program Files (x86)\Apple Software Update [2012-08-01 19: 33: 42 \| 000,000,000 \| ---D \| C] -- C: \ProgramData\Apple [2012-08-01 19: 31: 37 \| 039,483,256 \| ---- \| C] (Apple Inc.) -- C: \Users\Pusz\Desktop\QuickTimeInstaller.exe [2012-08-01 11: 56: 58 \| 000,514,560 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysWow64\qdvd.dll [2012-08-01 11: 56: 58 \| 000,366,592 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysNative\qdvd.dll [2012-07-31 17: 01: 32 \| 000,000,000 \| ---D \| C] -- C: \Users\Pusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis [2012-07-31 11: 40: 06 \| 000,000,000 \| ---D \| C] -- C: \Users\Pusz\AppData\Roaming\Canneverbe Limited [2012-07-31 11: 40: 06 \| 000,000,000 \| ---D \| C] -- C: \ProgramData\Canneverbe Limited [2012-07-31 11: 39: 55 \| 000,000,000 \| ---D \| C] -- C: \Program Files\CDBurnerXP [2012-07-31 11: 26: 27 \| 005,659,648 \| ---- \| C] (Canneverbe Limited ) -- C: \Users\Pusz\Desktop\cdbxp_setup_4.4.1.3243_x64.exe [2012-07-31 11: 18: 37 \| 003,907,920 \| ---- \| C] (Piriform Ltd) -- C: \Users\Pusz\Desktop\ccsetup321.exe [2012-07-31 10: 42: 29 \| 000,000,000 \| ---D \| C] -- C: \Program Files (x86)\Trend Micro [2012-07-30 19: 03: 32 \| 000,000,000 \| ---D \| C] -- C: \Users\Pusz\Desktop\Nowy folder [2012-07-26 22: 31: 18 \| 000,000,000 \| ---D \| C] -- C: \Program Files (x86)\Common Files\MAGIX Services [2012-07-26 17: 40: 59 \| 000,000,000 \| ---D \| C] -- C: \Program Files\K-Lite Codec Pack x64 [2012-07-25 09: 51: 12 \| 000,000,000 \| ---D \| C] -- C: \Users\Pusz\AppData\Roaming\MAGIX [2012-07-25 09: 50: 58 \| 000,000,000 \| ---D \| C] -- C: \ProgramData\mufin [2012-07-25 09: 50: 58 \| 000,000,000 \| ---D \| C] -- C: \Program Files (x86)\mufin [2012-07-25 09: 50: 50 \| 000,000,000 \| ---D \| C] -- C: \ProgramData\MAGIX [2012-07-25 08: 58: 14 \| 000,000,000 \| ---D \| C] -- C: \ProgramData\ATI [2012-07-25 08: 58: 12 \| 000,000,000 \| ---D \| C] -- C: \Program Files (x86)\AMD AVT [2012-07-23 23: 25: 27 \| 000,000,000 \| ---D \| C] -- C: \Windows\SysNative\temp [2012-07-23 23: 25: 27 \| 000,000,000 \| ---D \| C] -- C: \ProgramData\PassMark [2012-07-23 23: 25: 26 \| 000,000,000 \| ---D \| C] -- C: \Users\Pusz\Documents\PassMark [2012-07-23 23: 25: 26 \| 000,000,000 \| ---D \| C] -- C: \Program Files\BurnInTest [2012-07-16 19: 49: 06 \| 000,000,000 \| ---D \| C] -- C: \ProgramData\OO Software [2012-07-16 19: 49: 03 \| 000,000,000 \| ---D \| C] -- C: \Program Files (x86)\OO Software [2012-07-16 19: 46: 25 \| 000,000,000 \| ---D \| C] -- C: \Users\Pusz\AppData\Local\O&O [2012-07-11 15: 40: 30 \| 000,237,056 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysNative\url.dll [2012-07-11 15: 40: 30 \| 000,231,936 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysWow64\url.dll [2012-07-11 15: 40: 30 \| 000,096,768 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysNative\mshtmled.dll [2012-07-11 15: 40: 30 \| 000,073,216 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysWow64\mshtmled.dll [2012-07-11 15: 40: 29 \| 000,248,320 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysNative\ieui.dll [2012-07-11 15: 40: 29 \| 000,176,640 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysWow64\ieui.dll [2012-07-11 15: 40: 29 \| 000,173,056 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysNative\ieUnatt.exe [2012-07-11 15: 40: 29 \| 000,142,848 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysWow64\ieUnatt.exe [2012-07-11 15: 40: 28 \| 001,494,528 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysNative\inetcpl.cpl [2012-07-11 15: 40: 28 \| 001,427,968 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysWow64\inetcpl.cpl [2012-07-11 15: 40: 27 \| 002,311,680 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysNative\jscript9.dll [2012-07-11 15: 40: 27 \| 000,818,688 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysNative\jscript.dll [2012-07-11 15: 40: 27 \| 000,716,800 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysWow64\jscript.dll [2012-07-11 15: 39: 08 \| 000,307,200 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysNative\ncrypt.dll [2012-07-11 15: 39: 08 \| 000,002,048 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysWow64\msxml3r.dll [2012-07-11 15: 39: 08 \| 000,002,048 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysNative\msxml3r.dll [2012-07-11 15: 39: 06 \| 001,133,568 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysNative\cdosys.dll [2012-07-11 15: 39: 06 \| 000,805,376 \| ---- \| C] (Microsoft Corporation) -- C: \Windows\SysWow64\cdosys.dll [2012-07-05 18: 40: 06 \| 000,000,000 \| ---D \| C] -- C: \Users\Pusz\AppData\Roaming\Comodo [2012-07-04 16: 05: 59 \| 000,000,000 \| ---D \| C] -- C: \Users\Pusz\AppData\Local\Comodo [2012-07-04 16: 05: 50 \| 000,000,000 \| ---D \| C] -- C: \Program Files (x86)\Comodo [2012-07-04 00: 03: 00 \| 000,955,840 \| ---- \| C] (Oracle Corporation) -- C: \Windows\SysNative\npDeployJava1.dll [2012-07-04 00: 03: 00 \| 000,839,096 \| ---- \| C] (Oracle Corporation) -- C: \Windows\SysNative\deployJava1.dll [2012-07-04 00: 03: 00 \| 000,268,720 \| ---- \| C] (Oracle Corporation) -- C: \Windows\SysNative\javaws.exe [2012-07-04 00: 02: 51 \| 000,189,360 \| ---- \| C] (Oracle Corporation) -- C: \Windows\SysNative\javaw.exe [2012-07-04 00: 02: 51 \| 000,188,840 \| ---- \| C] (Oracle Corporation) -- C: \Windows\SysNative\java.exe [2012-07-04 00: 02: 44 \| 000,000,000 \| ---D \| C] -- C: \Program Files\Java [2012-07-03 23: 59: 05 \| 021,869,488 \| ---- \| C] (Oracle Corporation) -- C: \Users\Pusz\Desktop\jre-7u5-windows-x64.exe [2012-07-03 23: 57: 21 \| 000,000,000 \| ---D \| C] -- C: \Program Files (x86)\Common Files\Java [2012-07-03 23: 56: 49 \| 000,227,720 \| ---- \| C] (Oracle Corporation) -- C: \Windows\SysWow64\javaws.exe [2012-07-03 23: 56: 42 \| 000,174,064 \| ---- \| C] (Oracle Corporation) -- C: \Windows\SysWow64\javaw.exe [2012-07-03 23: 56: 42 \| 000,174,064 \| ---- \| C] (Oracle Corporation) -- C: \Windows\SysWow64\java.exe [2012-07-03 23: 56: 34 \| 000,000,000 \| ---D \| C] -- C: \Program Files (x86)\Java [2012-07-03 23: 54: 52 \| 000,894,448 \| ---- \| C] (Oracle Corporation) -- C: \Users\Pusz\Desktop\jxpiinstall.exe [2012-07-03 23: 46: 17 \| 003,889,704 \| ---- \| C] (Piriform Ltd) -- C: \Users\Pusz\Desktop\ccsetup320.exe [2012-07-03 22: 59: 29 \| 029,467,048 \| ---- \| C] (COMODO) -- C: \Users\Pusz\Desktop\DragonSetup.exe [2012-07-03 20: 10: 58 \| 000,000,000 \| ---D \| C] -- C: \ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2012-07-03 20: 10: 58 \| 000,000,000 \| ---D \| C] -- C: \Program Files (x86)\MALWAREBYTES ANTI-MALWARE [2012-07-03 20: 10: 57 \| 000,024,904 \| ---- \| C] (Malwarebytes Corporation) -- C: \Windows\SysNative\drivers\mbam.sys [2012-07-03 20: 10: 57 \| 000,000,000 \| ---D \| C] -- C: \Program Files (x86)\Malwarebytes' Anti-Malware [2012-07-03 19: 55: 07 \| 000,000,000 \| ---D \| C] -- C: \Users\Pusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller [1 C: \Windows\.tmp files -> C: \Windows\.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-08-02 00: 09: 57 \| 000,597,504 \| ---- \| M] (OldTimer Tools) -- C: \Users\Pusz\Desktop\OTL.exe [2012-08-01 23: 49: 00 \| 000,000,930 \| ---- \| M] () -- C: \Windows\tasks\Adobe Flash Player Updater.job [2012-08-01 23: 44: 19 \| 000,000,697 \| ---- \| M] () -- C: \Users\Pusz\Desktop\prototype2.exe — skrót.lnk [2012-08-01 23: 32: 41 \| 000,001,958 \| ---- \| M] () -- C: \Users\Public\Desktop\DAEMON Tools Lite.lnk [2012-08-01 23: 32: 16 \| 000,283,200 \| ---- \| M] (DT Soft Ltd) -- C: \Windows\SysNative\drivers\dtsoftbus01.sys [2012-08-01 23: 17: 01 \| 000,001,209 \| ---- \| M] () -- C: \Users\Pusz\Application Data\Microsoft\Internet Explorer\Quick Launch\GOM Player.lnk [2012-08-01 23: 17: 01 \| 000,001,185 \| ---- \| M] () -- C: \Users\Public\Desktop\GOM Player.lnk [2012-08-01 19: 38: 11 \| 000,014,192 \| -H-- \| M] () -- C: \Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012-08-01 19: 38: 11 \| 000,014,192 \| -H-- \| M] () -- C: \Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012-08-01 19: 32: 12 \| 039,483,256 \| ---- \| M] (Apple Inc.) -- C: \Users\Pusz\Desktop\QuickTimeInstaller.exe [2012-08-01 15: 09: 53 \| 102,697,338 \| ---- \| M] () -- C: \Windows\SysNative\drivers\AVG\incavi.avm [2012-08-01 14: 49: 25 \| 000,067,584 \| --S- \| M] () -- C: \Windows\bootstat.dat [2012-08-01 14: 49: 22 \| 2146,148,351 \| -HS- \| M] () -- C: \hiberfil.sys [2012-08-01 14: 49: 19 \| 000,897,028 \| ---- \| M] () -- C: \Windows\SysNative\oodbs.lor [2012-07-31 17: 01: 32 \| 000,003,003 \| ---- \| M] () -- C: \Users\Pusz\Desktop\HiJackThis.lnk [2012-07-31 17: 00: 50 \| 001,402,880 \| ---- \| M] () -- C: \Users\Pusz\Desktop\HiJackThis.msi [2012-07-31 11: 49: 37 \| 000,426,184 \| ---- \| M] (Adobe Systems Incorporated) -- C: \Windows\SysWow64\FlashPlayerApp.exe [2012-07-31 11: 49: 37 \| 000,070,344 \| ---- \| M] (Adobe Systems Incorporated) -- C: \Windows\SysWow64\FlashPlayerCPLApp.cpl [2012-07-31 11: 39: 56 \| 000,001,750 \| ---- \| M] () -- C: \Users\Public\Desktop\CDBurnerXP.lnk [2012-07-31 11: 26: 31 \| 005,659,648 \| ---- \| M] (Canneverbe Limited ) -- C: \Users\Pusz\Desktop\cdbxp_setup_4.4.1.3243_x64.exe [2012-07-31 11: 19: 11 \| 000,000,824 \| ---- \| M] () -- C: \Users\Public\Desktop\CCleaner.lnk [2012-07-31 11: 18: 38 \| 003,907,920 \| ---- \| M] (Piriform Ltd) -- C: \Users\Pusz\Desktop\ccsetup321.exe [2012-07-23 23: 24: 02 \| 000,069,043 \| ---- \| M] () -- C: \Users\Pusz\Desktop\memtest86+-4.20.iso.zip [2012-07-11 15: 46: 41 \| 000,441,648 \| ---- \| M] () -- C: \Windows\SysNative\FNTCACHE.DAT [2012-07-08 11: 37: 17 \| 000,767,072 \| ---- \| M] () -- C: \Users\Pusz\Desktop\green 038.jpg [2012-07-04 00: 02: 45 \| 000,955,840 \| ---- \| M] (Oracle Corporation) -- C: \Windows\SysNative\npDeployJava1.dll [2012-07-04 00: 02: 45 \| 000,839,096 \| ---- \| M] (Oracle Corporation) -- C: \Windows\SysNative\deployJava1.dll [2012-07-04 00: 02: 45 \| 000,268,720 \| ---- \| M] (Oracle Corporation) -- C: \Windows\SysNative\javaws.exe [2012-07-04 00: 02: 45 \| 000,189,360 \| ---- \| M] (Oracle Corporation) -- C: \Windows\SysNative\javaw.exe [2012-07-04 00: 02: 45 \| 000,188,840 \| ---- \| M] (Oracle Corporation) -- C: \Windows\SysNative\java.exe [2012-07-03 23: 59: 18 \| 021,869,488 \| ---- \| M] (Oracle Corporation) -- C: \Users\Pusz\Desktop\jre-7u5-windows-x64.exe [2012-07-03 23: 56: 36 \| 000,174,064 \| ---- \| M] (Oracle Corp (Ten post był ostatnio modyfikowany: 02.08.2012 00:01 przez pypciu.) 01.08.2012 23:41
Podziękowania od:

Illidan Ekspert Liczba postów: 1.024	Post: #4 RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia W "OTL" w pole "Własne opcje skanowania/skrypt" wklej poniższą zawartość po czym "Wykonaj skrypt": Kod: : OTL IE: [b]64bit: [/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847} IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233} IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http: //isearch.avg.com/search?cid={5445E9E2-9937-4FDB-844D-E42375B08F1E}&mid=e52 a6837447347d1a107d16c64e053cb-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=en&d s=gm011&pr=sa&d=2 012-03-26 21: 24: 58&v=10.2.0.3&sap=dsp&q={searchTerms} IE - HKCU\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http: //www.daemon-search.com/search/web?q={searchTerms} IE - HKCU\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http: //search.sweetim.com/search.asp?src=6&q={searchTerms} FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found CHR - homepage: http: //home.sweetim.com/ O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O8: [b]64bit: [/b] - Extra context menu item: Add to Google Photos Screensa&ver - res: //C: \Windows\system32\GPhotos.scr/200 File not found O8: [b]64bit: [/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res: //C: \PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found O8: [b]64bit: [/b] - Extra context menu item: E&xport to Microsoft Excel - res: //C: \PROGRA~2\Microsoft Office\Office14\EXCEL.EXE/3000 File not found O8: [b]64bit: [/b] - Extra context menu item: Se&nd to OneNote - res: //C: \PROGRA~2\Microsoft Office\Office14\ONBttnIE.dll/105 File not found O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res: //C: \PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: E&xport to Microsoft Excel - res: //C: \PROGRA~2\Microsoft Office\Office14\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Se&nd to OneNote - res: //C: \PROGRA~2\Microsoft Office\Office14\ONBttnIE.dll/105 File not found O18: [b]64bit: [/b] - Protocol\Handler\ms-help - No CLSID value found O18: [b]64bit: [/b] - Protocol\Handler\viprotocol - No CLSID value found O20: [b]64bit: [/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21: [b]64bit: [/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 : Commands [emptytemp] A gdzie zawartość drugiego loga "Extras"?Po wykonaniu skryptu pokaż raport z usuwania który pokaże Ci się po ponownym uruchomieniu komputera. (Ten post był ostatnio modyfikowany: 02.08.2012 03:20 przez Illidan.) 02.08.2012 03:20
Podziękowania od:	pypciu

Deron User systemu Liczba postów: 281	Post: #5 RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia Miałem podobny problem, a ustąpił po wymianie jednej kości RAM-u na inną. Teoria bez praktyki jest martwa, praktyka bez teorii - głupia. Włodzimierz Ilicz Uljanow (Lenin) 02.08.2012 05:20
Podziękowania od:

pypciu Wdrażany Liczba postów: 25	Post: #6 RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia Skrypt z OLT po ponownym rozruchu kompa: Kod: All processes killed ========== OTL ========== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope\| /E : value set successfully! HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope\| /E : value set successfully! HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope\| /E : value set successfully! Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully. Use Chrome's Settings page to change the HomePage. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&ksportuj do programu Microsoft Excel\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&xport to Microsoft Excel\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Se&nd to OneNote\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet: /pagefile deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun\|DWORD: 1 /E : value set successfully! ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes Zastanawiałem się na początku, czy to nie problem z pamięcią, ale chyba wtedy żadne przywracanie systemu by nie pomagało? Narazie 3 dzień i jest ok. Wczoraj chwilową zawieszkę system załapał i się uspokoił. Jak sprawdzam użycie procesora i pamięci w menadżerze, to w czasie tych właśnie problemów nic nie skacze do góry i wygląda normalnie. 02.08.2012 12:09
Podziękowania od:

Illidan Ekspert Liczba postów: 1.024	Post: #7 RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia Raport z usuwania "ok".Nadal czekam na log "Extras".Przeskanuj system tez gruntownie jeszcze "Malwaresbytes Anti- Malware" i jak coś znajdzie usuń.Posprzątaj też i zoptymalizuj system "CCleaner" lub "SlimCleaner".Program "SlimCleaner" ma opcję rekomendacji,wiec łatwo możesz dzięki temu wyłączyć zbędne obciążające programy i usługi systemu.Zaktualizuj też wszystkie sterowniki w komputerze, pościągaj je ze stron producentów podzespołów komputera ,lub skorzystaj z darmowego programu "SlimDrivers".Po tych zabiegach zobacz czy jest poprawa.Pamięć RAM możesz sprawdzić jak chcesz programem "MemTest86+". 02.08.2012 18:31
Podziękowania od:	pypciu

Deron User systemu Liczba postów: 281	Post: #8 RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia Program MemTest86 nic nie daje. U mnie wskazywał, że kości są ok, a jednak "gryzły" się i to obie Kingstona. Teoria bez praktyki jest martwa, praktyka bez teorii - głupia. Włodzimierz Ilicz Uljanow (Lenin) 02.08.2012 20:47
Podziękowania od:

Illidan Ekspert Liczba postów: 1.024	Post: #9 RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia Deron ,to że kości się gryzły to nie znaczy ze są uszkodzone,jeśli testowałeś je pojedynczo to program nie mógł tego wykryć że nie współpracowały z sobą,Zależy jak test przeprowadzałeś,mi na przykład sypnęło błędami dopiero przy 6 cyklu.Program dobrze wykrywa nie pasujące kości do siebie,czy do płyty głównej jeśli testujesz je razem.Zawsze można też użyć "Diagnostyki pamięci RAM" w systemie Windows 7,ustawić tam test cykliczny i po paru godzinach zobaczyć wyniki :-). 02.08.2012 21:16
Podziękowania od:	pypciu

pypciu Wdrażany Liczba postów: 25	Post: #10 RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia Log z Extras: Kod: OTL Extras logfile created on: 2012-08-02 00: 30: 44 - Run 1 OTL by OldTimer - Version 3.2.55.0 Folder = C: \Users\Pusz\Desktop 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 \| Country: Polska \| Language: PLK \| Date Format: yyyy-MM-dd 8,00 Gb Total Physical Memory \| 5,73 Gb Available Physical Memory \| 71,65% Memory free 31,99 Gb Paging File \| 28,71 Gb Available in Paging File \| 89,75% Paging File free Paging file location(s): [Binary data over 100 bytes] %SystemDrive% = C: \| %SystemRoot% = C: \Windows \| %ProgramFiles% = C: \Program Files (x86) Drive C: \| 247,92 Gb Total Space \| 196,52 Gb Free Space \| 79,27% Space Free \| Partition Type: NTFS Drive D: \| 341,70 Gb Total Space \| 18,46 Gb Free Space \| 5,40% Space Free \| Partition Type: NTFS Drive E: \| 341,80 Gb Total Space \| 23,71 Gb Free Space \| 6,94% Space Free \| Partition Type: NTFS Drive G: \| 1,37 Gb Total Space \| 0,00 Gb Free Space \| 0,00% Space Free \| Partition Type: CDFS Drive I: \| 596,02 Gb Total Space \| 514,35 Gb Free Space \| 86,30% Space Free \| Partition Type: FAT32 Computer Name: PUSZ-PC \| User Name: Pusz \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: Current user \| Include 64bit Scans Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit: [/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html[@ = Opera.HTML] -- C: \Program Files\Opera x64\Opera.exe (Opera Software) .url[@ = InternetShortcut] -- C: \Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C: \Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = Opera.HTML] -- C: \Program Files\Opera x64\Opera.exe (Opera Software) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C: \Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit: [/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- Reg Error: Key error. htmlfile [opennew] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" http [open] -- "C: \Program Files\Opera x64\Opera.exe" "%1" (Opera Software) https [open] -- "C: \Program Files\Opera x64\Opera.exe" "%1" (Opera Software) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C: \Windows\System32\rundll32.exe" "C: \Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C: \Windows\System32\rundll32.exe" "C: \Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [napiprojekt] -- "C: \Program Files (x86)\NAPI-PROJEKT\napisy.exe" "%1" () Directory [napiprojekt0] -- "C: \Program Files (x86)\NAPI-PROJEKT\napisy.exe" "%1" -pobierz_ang () Directory [Winamp.Bookmark] -- "C: \Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C: \Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C: \Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- Reg Error: Key error. CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Key error. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- Reg Error: Key error. htmlfile [opennew] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" http [open] -- "C: \Program Files\Opera x64\Opera.exe" "%1" (Opera Software) https [open] -- "C: \Program Files\Opera x64\Opera.exe" "%1" (Opera Software) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [napiprojekt] -- "C: \Program Files (x86)\NAPI-PROJEKT\napisy.exe" "%1" () Directory [napiprojekt0] -- "C: \Program Files (x86)\NAPI-PROJEKT\napisy.exe" "%1" -pobierz_ang () Directory [Winamp.Bookmark] -- "C: \Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C: \Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C: \Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- Reg Error: Key error. CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Key error. [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit: [/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 0 [b]64bit: [/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit: [/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C: \Program Files (x86)\Preme for Windows 7\preme.exe" = C: \Program Files (x86)\Preme for Windows 7\preme.exe: : Enabled: Preme for Windows 7 "C: \Program Files (x86)\Preme for Windows 7\preme.exe" = C: \Program Files (x86)\Preme for Windows 7\preme.exe: : Enabled: Preme for Windows 7 [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{3329870A-1D08-45F0-9A74-D3F2A23E07A9}" = lport=6004 \| protocol=17 \| dir=in \| app=c: \program files (x86)\microsoft office\office14\outlook.exe \| "{6BB1AAA1-7C5B-49D5-A6AA-5BD9BEADF32C}" = lport=808 \| protocol=6 \| dir=in \| svc=nettcpactivator \| app=c: \windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe \| [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0313FD37-95AD-48FF-B053-C8AAE80D1EF7}" = protocol=17 \| dir=out \| svc=rapimgr \| app=%systemroot%\system32\svchost.exe \| "{04DD20ED-29DD-49AC-AA28-0CA590E444B1}" = protocol=17 \| dir=out \| svc=wcescomm \| app=%systemroot%\system32\svchost.exe \| "{05BFAD07-0697-49C2-84A2-07F8D3AEB417}" = protocol=17 \| dir=in \| app=c: \program files\opera x64\pluginwrapper\opera_plugin_wrapper.exe \| "{0B8B2844-5F2F-4258-85F4-339FF23197C5}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hpqpsapp.exe \| "{114B103F-FD36-452A-BBCD-448C0AE19C00}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hpqgplgtupl.exe \| "{15937B8F-85D2-4783-8701-23040999D718}" = protocol=17 \| dir=in \| app=c: \program files (x86)\microsoft office\office14\groove.exe \| "{17F1AB71-BF8C-4869-AA1A-02F6B0D46863}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hposfx08.exe \| "{25B31D8D-6142-4909-B4D8-F99F2031E921}" = protocol=6 \| dir=in \| app=c: \windows\syswow64\pnkbstrb.exe \| "{272E9388-71EB-421B-A46D-3834006FCA6A}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hpqsudi.exe \| "{27B1E058-577A-4589-A98A-BC3883715846}" = dir=in \| app=c: \program files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe \| "{2DC62D67-F7BB-4C0A-9262-ADDDD8F9C73B}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hpqtra08.exe \| "{2E00C5C3-BD6B-4B45-99F8-38EB4A57C263}" = protocol=17 \| dir=in \| app=d: \gry - zainstalowane\max payne 3\playmaxpayne3.exe \| "{2FC9AB7F-B3AA-4148-A718-4AD68374DEA8}" = protocol=17 \| dir=in \| app=c: \program files (x86)\avg\avg2012\avgmfapx.exe \| "{3656D778-11B2-4A7C-B4E6-2AEF3F7C8C5B}" = protocol=6 \| dir=out \| svc=rapimgr \| app=%systemroot%\system32\svchost.exe \| "{370A85CF-FD57-4C81-B44E-E38D6E287C05}" = protocol=17 \| dir=in \| app=c: \windows\syswow64\muzapp.exe \| "{3CBCBB1B-BD47-4F48-AF1D-DBE4C999F745}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hpqcopy2.exe \| "{43AFD52E-8ACC-4A5A-9665-4A1DB99AD21B}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hpoews01.exe \| "{49B3DB88-71EB-4866-863C-B461B52FEE6F}" = protocol=6 \| dir=in \| app=c: \windows\syswow64\pnkbstra.exe \| "{519BF640-7AB6-426C-9F19-218615527981}" = protocol=17 \| dir=in \| app=c: \program files (x86)\avg\avg2012\avgemca.exe \| "{55B38137-94D8-45D6-B2BC-5D150BF2DAB2}" = protocol=6 \| dir=in \| app=c: \program files (x86)\avg\avg2012\avgemca.exe \| "{562D508B-246A-4612-BB84-1E0C03D0E8BC}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hpfccopy.exe \| "{564F720F-A4A4-4BC4-82B6-095A85FB2605}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hpqusgm.exe \| "{56CE5A3C-571B-427F-B3D7-3FF58C92767C}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hpqfxt08.exe \| "{595FB129-2799-47F9-85E5-C0BA97CDADAB}" = protocol=17 \| dir=in \| app=c: \program files\soluto\solutoservice.exe \| "{5A7E1F37-A7A1-49CD-847B-F47F5A3C236C}" = protocol=17 \| dir=in \| app=c: \program files (x86)\avg\avg2012\avgdiagex.exe \| "{65BA28CE-85F5-48DF-87E6-050C825DCC47}" = protocol=17 \| dir=in \| app=c: \program files (x86)\opera\opera.exe \| "{672AABFE-3DA3-46CA-A18E-4B96F4D74E03}" = protocol=17 \| dir=in \| app=c: \program files\opera x64\opera.exe \| "{7E4EC3EB-63CC-4673-BD79-56861C204E43}" = protocol=6 \| dir=in \| app=c: \program files\soluto\solutoupdateservice.exe \| "{8330CD1E-BBC6-4310-A76E-01F4AA498DFB}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hpofxm08.exe \| "{87A2CC97-485A-498D-976B-4182B9DF9B54}" = protocol=6 \| dir=in \| app=c: \windows\syswow64\muzapp.exe \| "{8D013FB2-6E5A-4544-A976-BFF04B7DFDB1}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hpiscnapp.exe \| "{8E769F2A-BC0E-40B8-8654-2D5765B294E2}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hpzwiz01.exe \| "{8F6F3B65-52F7-4FE2-94A1-DA2B24C368D6}" = protocol=6 \| dir=in \| app=c: \program files\soluto\solutoconsole.exe \| "{9210B887-B153-4B89-9584-17A3F28B706A}" = protocol=6 \| dir=in \| app=c: \program files (x86)\opera\pluginwrapper\opera_plugin_wrapper.exe \| "{9627F727-E1B3-48BC-ADCB-DA5BF403F5FD}" = protocol=17 \| dir=in \| app=c: \program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe \| "{994EEDBB-54D0-4FE3-9921-21B8EBC6312C}" = dir=in \| app=c: \program files (x86)\common files\apple\apple application support\webkit2webprocess.exe \| "{9D2065EF-8CC3-49F1-9F41-41F155954C5F}" = protocol=17 \| dir=in \| app=c: \program files (x86)\utorrent\utorrent.exe \| "{9D4A862A-0515-4B07-9865-EA029B12FCC6}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hpqkygrp.exe \| "{9D86D4E6-3613-4E72-8B7F-3FAD70972C51}" = protocol=17 \| dir=in \| app=c: \program files\soluto\solutoconsole.exe \| "{A168DE69-36B8-4F2E-A38E-2A718F19AC37}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hpqste08.exe \| "{A3BE8129-1F8E-4F4A-A7F5-70A9D2561E35}" = protocol=6 \| dir=in \| app=c: \program files\opera x64\opera.exe \| "{A3F432B3-A0F3-4D5A-9861-F375A19E6CC9}" = protocol=17 \| dir=in \| app=c: \windows\syswow64\pnkbstrb.exe \| "{A5580E18-C9F1-4125-BC8D-F3F08CAF3051}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hpqusgh.exe \| "{A74AD66D-5C23-42DF-986F-228043A96023}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hposid01.exe \| "{B0D79BF7-B37D-4407-8D29-EA917FA34370}" = dir=in \| app=c: \program files (x86)\hp\hp software update\hpwucli.exe \| "{B0DD0004-30CF-400F-BC68-25C33CD75692}" = protocol=6 \| dir=in \| app=c: \program files\opera x64\pluginwrapper\opera_plugin_wrapper.exe \| "{B581D36D-B757-481F-BEDA-9EBBBA298C90}" = protocol=6 \| dir=in \| app=d: \gry - zainstalowane\max payne 3\playmaxpayne3.exe \| "{BA0BD686-FAB9-4DAD-A2F0-D6015A7593B8}" = protocol=17 \| dir=in \| app=c: \program files (x86)\opera\pluginwrapper\opera_plugin_wrapper.exe \| "{BA43CCA8-282B-4BA0-B55B-8138E030E901}" = protocol=6 \| dir=in \| app=c: \program files (x86)\utorrent\utorrent.exe \| "{C0DCF92D-053C-49E3-AF5D-646A8CD5A34F}" = protocol=17 \| dir=in \| app=c: \program files\opera x64\pluginwrapper\opera_plugin_wrapper_32.exe \| "{C7257204-9A52-4D25-985F-3728D8B61764}" = protocol=17 \| dir=in \| app=c: \program files (x86)\avg\avg2012\avgnsa.exe \| "{CC85F318-E51C-4AFC-9CE2-7ED1EE9B4FFA}" = protocol=6 \| dir=in \| app=c: \program files (x86)\microsoft office\office14\groove.exe \| "{CFE3CC3C-DECC-4DCA-A5DF-DF4B2EF41837}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hpofxs08.exe \| "{D29ACB25-ACB3-44B6-AE98-97E521BC1F7B}" = protocol=6 \| dir=in \| app=c: \program files\soluto\solutoservice.exe \| "{D36D98F6-48B1-4056-B91C-DEA28118D34C}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hpqgpc01.exe \| "{D96F91D0-3BD5-4A91-95C1-685338E14A79}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hpqnrs08.exe \| "{DCB67CD2-D68A-4703-84DF-EE5A36AD7F43}" = protocol=6 \| dir=in \| app=c: \program files (x86)\avg\avg2012\avgdiagex.exe \| "{DE608EEB-DCD0-48CE-9692-F5B0A77BF5B6}" = protocol=17 \| dir=in \| app=c: \windows\syswow64\pnkbstra.exe \| "{DEE9297B-2C51-4202-8BEE-52CEBFBEA51F}" = protocol=6 \| dir=in \| app=c: \program files\opera x64\pluginwrapper\opera_plugin_wrapper_32.exe \| "{E2C8832E-FB9F-442F-BB4D-B5877E12B498}" = protocol=17 \| dir=in \| app=c: \program files\soluto\solutoupdateservice.exe \| "{E3D48053-064E-48FB-B067-C63782CDE87A}" = protocol=6 \| dir=in \| app=c: \program files (x86)\avg\avg2012\avgmfapx.exe \| "{E3F6C5A2-111B-4AA4-8589-B4BEFD8179B5}" = protocol=6 \| dir=in \| app=c: \program files\soluto\soluto.exe \| "{E72B05C6-CB6A-4825-A613-4FF7FF2ACC3D}" = protocol=6 \| dir=in \| app=c: \program files (x86)\avg\avg2012\avgnsa.exe \| "{EF0497CB-797C-43D8-B186-269CF68E7441}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\smart web printing\smartwebprintexe.exe \| "{EF9C33BF-D5A4-48BD-B1BF-9B20ACAE1745}" = protocol=6 \| dir=in \| svc=wcescomm \| app=%systemroot%\system32\svchost.exe \| "{EFFE6776-0DCC-40EA-B613-4C7E84E4F049}" = dir=in \| app=c: \program files (x86)\hp\digital imaging\bin\hpqpse.exe \| "{F8137496-4490-4D03-BE43-524612121650}" = protocol=6 \| dir=out \| svc=wcescomm \| app=%systemroot%\system32\svchost.exe \| "{F8D70712-7917-44E7-9A35-A72BF276B51E}" = protocol=6 \| dir=in \| app=c: \program files (x86)\opera\opera.exe \| "{FB1A2835-1BBD-41E5-8EA0-FD2FFD5FBB3A}" = protocol=6 \| dir=in \| app=c: \program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe \| "{FCCB8B5A-E8A6-4A01-A6E5-BDB57C48A52E}" = protocol=17 \| dir=in \| app=c: \program files\soluto\soluto.exe \| [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{012C87CF-282E-4142-84F8-DCDD07F54182}" = Soluto "{015C5B35-B678-451C-9AEE-821E8D69621C}_is1" = PeerBlock 1.1 (r518) "{05EFBF37-0E52-4579-875C-7EEF0DFB4FCB}" = Network64 "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{10CD364B-FFCC-48BE-B469-B9622A033075}" = Fences "{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition) "{26A24AE4-039D-4CA4-87B4-2F86417005FF}" = Java(TM) 7 Update 5 (64-bit) "{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 "{3C8159DD-1890-4625-A5B2-E3D8D78D4486}" = AVG 2012 "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime "{5149C938-5BBE-4E14-8F40-C33FB11C2156}" = Nitro Reader 2 "{55D55008-E5F6-47D6-B16F-B2A40D4D145F}" = 64 Bit HP CIO Components Installer "{5EA12CF3-8162-47F6-ACAF-45AD03EFB08F}" = Adobe PDF iFilter 9 for 64-bit platforms "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}" = Windows Mobile Device Center "{7A98574D-B3EA-2A5C-CF11-02EF1D1DB500}" = ATI AVIVO64 Codecs "{7D088FD6-67B8-4186-947C-5FB4CC7227B5}" = O&O Defrag Professional "{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended "{8E5DA9A6-7A9F-3A6F-BC5C-D6CBCA6A29C7}" = Microsoft .NET Framework 4 Extended PLK Language Pack "{8F110B6A-60A2-4542-BB19-AD6234E2969D}" = SAMSUNG Moblie USB Driver "{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010 "{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010 "{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010 "{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant "{9E3B2120-0BD8-9865-0387-E9BAC2A53AD3}" = ccc-utility64 "{A49402DD-2781-3782-B0CF-52BDA349E3F3}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 "{ABE286AE-C65D-B7DE-C8D1-DF79584169B4}" = AMD Fuel "{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64) "{B61ED343-0B14-4241-999C-490CB1A20DA4}" = HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B "{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 "{BE882A12-5A45-3DFF-9FD0-306DE65EB8A5}" = AMD Catalyst Install Manager "{C9608300-11F5-11E0-A64B-0013D3D69929}" = MSVCRT Redists "{D050583D-5CEC-47B1-88AA-8B328CAA8621}" = AVG 2012 "{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones "{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 "{EF393943-0CCE-9CD9-6181-96DF4E4428EF}" = AMD Media Foundation Decoders "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "{F809FFB5-6F9B-AFDE-6048-5D9E95A85505}" = AMD Drag and Drop Transcoding "AVG" = AVG 2012 "CCleaner" = CCleaner "CPUID CPU-Z_is1" = CPUID CPU-Z 1.59 "DriverAgent.exe" = DriverAgent by eSupport.com "HP Imaging Device Functions" = HP Imaging Device Functions 13.0 "HP Photosmart Essential" = HP Photosmart Essential 3.5 "HP Smart Web Printing" = HP Smart Web Printing 4.51 "HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0 "HPExtendedCapabilities" = HP Customer Participation Program 13.0 "HPOCR" = OCR Software by I.R.I.S. 13.0 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended "Opera 12.00.1467" = Opera 12.00 "Shop for HP Supplies" = Shop for HP Supplies "Speccy" = Speccy "Unlocker" = Unlocker 1.9.1-x64 "WinRAR archiver" = WinRAR 4.01 (64-bitowy) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 "{0D97F8D1-2102-53D2-5633-C992D6086801}" = CCC Help Chinese Traditional "{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime "{0EA00EA7-42C0-ED9C-9110-2C04B8EDBA66}" = CCC Help Italian "{0EB86B70-91FF-39BF-633C-785DF2218CC6}" = CCC Help French "{0EF5BEA9-B9D3-46d7-8958-FB69A0BAEACC}" = Status "{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan "{104066F4-5897-4067-85D3-4C88B67CCF75}" = AIO_Scan "{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1 "{1686C07D-C2BB-A8B2-C5ED-32C4EE1A3E62}" = CCC Help Spanish "{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch "{18B6A9F8-25BC-5978-6B42-A50FA2CABC18}" = CCC Help English "{1AA94747-3BF6-4237-9E1A-7B3067738FE1}" = Max Payne 3 "{1D301950-EA2F-4882-9AA0-49467756842A}" = SweetIM for Messenger 3.3 "{1EC71BFB-01A3-4239-B6AF-B1AE656B15C0}" = TrayApp "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{20AEA7B1-6155-44A2-B58E-430F2C9F4ABD}" = AMD OverDrive "{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform "{23BE4DF2-293D-4077-82F4-1FD8C269277C}" = TuneUp Utilities Language Pack (en-US) "{26A24AE4-039D-4CA4-87B4-2F83217005FF}" = Java(TM) 7 Update 5 "{298C6691-46B2-2065-0DD7-1E7B3B669A47}" = CCC Help Finnish "{2E87F4AB-99BF-421C-AF7B-365A9C08549A}" = F300 "{2ECA81CA-D932-4AD3-AD59-BF5CCF099C83}" = Catalyst Control Center - Branding "{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm "{2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}" = Visual C++ 8.0 Runtime Setup Package (x64) "{2FF8C687-DB7D-4adc-A5DC-57983EC25046}" = DeviceDiscovery "{32364CEA-7855-4A3C-B674-53D8E9B97936}" = TuneUp Utilities 2012 "{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup "{3C92B2E6-380D-4fef-B4DF-4A3B4B669771}" = Copy "{400C5445-1AE8-1A41-CAC6-AB114341F65D}" = CCC Help Swedish "{40719211-D09A-11DF-BA30-0013D3D69929}" = MSVCRT Redists "{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg "{440B915A-0C85-45DB-92AE-75AE14704A64}" = Fax "{448B1C6D-02C2-7681-66B2-624E58B25375}" = CCC Help Turkish "{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis "{46EB9D45-FC1A-2635-1693-176E6FA1C672}" = CCC Help Portuguese "{48F95CE7-69D9-4967-81F7-D763CABFBD53}" = Debugging Tools for Windows (x86) "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter "{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace "{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{5E6D6161-5509-4f55-9372-1E01792F843A}" = F300_Help "{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2 "{651F43AA-3F06-9277-6F1B-8E8155017463}" = CCC Help Polish "{681B698F-C997-42C3-B184-B489C6CA24C9}" = HPPhotoSmartDiscLabelContent1 "{68DE32E1-292B-6A02-6A53-935BFAE70C99}" = CCC Help Chinese Standard "{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply "{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox "{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies "{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™ "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update "{818212BA-7F8C-DDF9-64BE-F6D0B6F46D29}" = CCC Help German "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{84F4542C-ED64-28AC-49B3-1A9BAB395AB4}" = CCC Help Hungarian "{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 "{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher "{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010 "{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010 "{90140000-0015-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010 "{90140000-0016-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010 "{90140000-0018-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010 "{90140000-0019-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010 "{90140000-001A-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010 "{90140000-001B-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010 "{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010 "{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010 "{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUS_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-002A-0409-1000-0000000FF1CE}_Office14.PROPLUS_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010 "{90140000-002C-0409-0000-0000000FF1CE}_Office14.PROPLUS_{7CA93DF4-8902-449E-A42E-4C5923CFBDE3}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010 "{90140000-0044-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010 "{90140000-006E-0409-0000-0000000FF1CE}_Office14.PROPLUS_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010 "{90140000-00A1-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010 "{90140000-00BA-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010 "{90140000-0115-0409-0000-0000000FF1CE}_Office14.PROPLUS_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-0116-0409-1000-0000000FF1CE}_Office14.PROPLUS_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1) "{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010 "{90140000-0117-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1) "{915726DF-7891-444A-AA03-0DF1D64F561A}" = L.A. Noire "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9B362566-EC1B-4700-BB9C-EC661BDE2175}" = DocProc "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9C41195F-11B3-8EEC-6634-7183BE6CB1B1}" = CCC Help Japanese "{9E1BAB75-EB78-440D-94C0-A3857BE2E733}" = System Requirements Lab "{9F6B13E2-B93F-4203-9BD4-5DC18C9F9DEB}" = AIO_CDB_Software "{A1A9A33E-F1E5-FBF4-8D72-E90BEAC7108A}" = HydraVision "{A33A89D0-2F48-FD1C-A243-9073EE0592E0}" = Catalyst Control Center InstallProxy "{A66FB6C7-B689-AFD5-21BA-7CAF8E44E6E6}" = Catalyst Control Center Graphics Previews Common "{A95A76C9-6F65-477E-83A0-9F884B6DC21B}" = TuneUp Utilities Language Pack (en-US) "{AE136F7F-7DC6-600F-9DF9-BFA0DF516135}" = Catalyst Control Center Localization All "{B42A6552-1A83-4D79-9137-AB0C9036249A}" = Quake Live Mozilla Plugin "{B4CF00AE-2622-7BC6-24EC-4E5A0A8C9135}" = CCC Help Czech "{BAE1C0A8-634D-CFF1-0E0C-893092427D34}" = CCC Help Danish "{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations "{C2DEC505-79A9-E952-32B0-31B67B83E231}" = CCC Help Korean "{C2FB14FB-DF6B-287D-BDC3-C7BEC86F539E}" = AMD VISION Engine Control Center "{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant "{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CCEFAE22-4D01-0084-D1CA-AC14AA743A97}" = CCC Help Greek "{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.3.22 Game "{D642E38E-0D24-486C-9A2D-E316DD696F4B}" = Microsoft XML Parser "{D79113E7-274C-470B-BD46-01B10219DF6A}" = HPPhotosmartEssential "{DC635845-46D3-404B-BCB1-FC4A91091AFA}" = SmartWebPrinting "{DE460826-5E72-2357-154F-E376F9926008}" = CCC Help Norwegian "{E21FFD29-D231-3BD3-6941-15710E44BED4}" = CCC Help Dutch "{E3E313C7-0AE2-7F44-52E8-528D4EDC74B2}" = CCC Help Thai "{E7112940-5F8E-4918-B9FE-251F2F8DC81F}" = AIO_CDB_ProductContext "{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support "{F07A6316-3EF3-4F36-87BA-5C0FD2AFBE68}" = SanDisk ® Media Manager "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable "{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729) "{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01 "{F6AC5364-2FB7-437a-811A-D645F22AA6AC}" = F300Trb "{F9835182-794B-4F24-902A-E2CA9D43380F}" = NVIDIA PhysX "{F9929777-7B6E-F53D-3105-1C06E5120CA1}" = CCC Help Russian "{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}" = Visual Studio 2008 x64 Redistributables "{FE3997D3-6B56-4AC4-A99C-9DDFC45359BF}" = TuneUp Utilities Language Pack (en-US) "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "AIDA64 Extreme Edition_is1" = AIDA64 Extreme Edition v1.50 "Alan Wake_is1" = Alan Wake "ASRock IES_is1" = ASRock IES v2.0.84 "AVG Secure Search" = AVG Security Toolbar "CrystalDiskInfo_is1" = CrystalDiskInfo 4.3.0a "DAEMON Tools Lite" = DAEMON Tools Lite "DMX5_is1" = DriverMax 6 "Fences" = Fences "foobar2000" = foobar2000 v1.1.11 "Freemake Video Converter_is1" = Freemake Video Converter wersja 3.0.2 "Gadu-Gadu 10" = Gadu-Gadu 10 "GoldWave v5.67" = GoldWave v5.67 "GOM Player" = GOM Player "InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platforma Menedżera urządzeń "InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies "IrfanView" = IrfanView (remove only) "KatMouse" = KatMouse (remove only) "KLiteCodecPack_is1" = K-Lite Codec Pack 7.7.0 (Full) "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware wersja 1.62.0.1100 "Mozilla Firefox 15.0 (x86 pl)" = Mozilla Firefox 15.0 (x86 pl) "MozillaMaintenanceService" = Mozilla Maintenance Service "MyFreeCodec" = MyFreeCodec "NapiProjekt_is1" = NapiProjekt (2.0.0.2151) "NirSoft BlueScreenView" = NirSoft BlueScreenView "Odkurzacz 12.6_is1" = Odkurzacz 12.6 "Office14.PROPLUS" = Microsoft Office Professional Plus 2010 "OpenAL" = OpenAL "Opera 12.00.1467" = Opera 12.00 "Picasa 3" = Picasa 3 "PunkBusterSvc" = PunkBuster Services "RadeonPro_is1" = RadeonPro 1.0 (Build 1.1.0.6) "Revo Uninstaller" = Revo Uninstaller 1.94 "Rockstar Games Social Club" = Rockstar Games Social Club "Saints Row The Third_is1" = Saints Row The Third "SpeedFan" = SpeedFan (remove only) "Totalcmd" = Total Commander (Remove or Repair) "TuneUp Utilities 2012" = TuneUp Utilities 2012 "uTorrent" = µTorrent "Vividas Player Plugin_is1" = Vividas Player Plugin v4.1 "Winamp" = Winamp [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Flux" = F.lux "Google Chrome" = Google Chrome "MyFreeCodec" = MyFreeCodec "Winamp Detect" = Winamp Detector Plug-in [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2011-05-12 11: 59: 34 \| Computer Name = Pusz-PC \| Source = SideBySide \| ID = 16842832 Description = Nie można wygenerować kontekstu aktywacji dla „C: \Program Files (x86)\Nero\Nero8\Nero PhotoSnap\PhotoSnapViewer.exe”. Błąd w pliku manifestu lub w pliku zasad „” w wierszu . Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C: \Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Składnik 2: C: \Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error - 2011-05-12 12: 01: 08 \| Computer Name = Pusz-PC \| Source = SideBySide \| ID = 16842785 Description = Nie można wygenerować kontekstu aktywacji dla "c: \program files (x86)\innovative solutions\drivermax\DPInst\ia64\dpinst.exe". Nie można odnaleźć zestawu zależnego Microsoft.Windows.Common-Controls,language="",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error - 2011-05-14 15: 06: 38 \| Computer Name = Pusz-PC \| Source = SideBySide \| ID = 16842832 Description = Nie można wygenerować kontekstu aktywacji dla „C: \Program Files (x86)\Nero\Nero8\Nero Toolkit\DiscSpeed.exe”. Błąd w pliku manifestu lub w pliku zasad „” w wierszu . Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C: \Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Składnik 2: C: \Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error - 2011-05-14 15: 06: 40 \| Computer Name = Pusz-PC \| Source = SideBySide \| ID = 16842832 Description = Nie można wygenerować kontekstu aktywacji dla „C: \Program Files (x86)\Nero\Nero8\Nero PhotoSnap\PhotoSnap.exe”. Błąd w pliku manifestu lub w pliku zasad „” w wierszu . Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C: \Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Składnik 2: C: \Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error - 2011-05-14 15: 06: 40 \| Computer Name = Pusz-PC \| Source = SideBySide \| ID = 16842832 Description = Nie można wygenerować kontekstu aktywacji dla „C: \Program Files (x86)\Nero\Nero8\Nero PhotoSnap\PhotoSnapViewer.exe”. Błąd w pliku manifestu lub w pliku zasad „” w wierszu . Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C: \Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Składnik 2: C: \Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error - 2011-05-14 15: 08: 39 \| Computer Name = Pusz-PC \| Source = SideBySide \| ID = 16842785 Description = Nie można wygenerować kontekstu aktywacji dla "c: \program files (x86)\innovative solutions\drivermax\DPInst\ia64\dpinst.exe". Nie można odnaleźć zestawu zależnego Microsoft.Windows.Common-Controls,language="",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. Error - 2011-05-16 06: 23: 37 \| Computer Name = Pusz-PC \| Source = SideBySide \| ID = 16842832 Description = Nie można wygenerować kontekstu aktywacji dla „C: \Program Files (x86)\Nero\Nero8\Nero Toolkit\DiscSpeed.exe”. Błąd w pliku manifestu lub w pliku zasad „” w wierszu . Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C: \Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Składnik 2: C: \Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error - 2011-05-16 06: 23: 38 \| Computer Name = Pusz-PC \| Source = SideBySide \| ID = 16842832 Description = Nie można wygenerować kontekstu aktywacji dla „C: \Program Files (x86)\Nero\Nero8\Nero PhotoSnap\PhotoSnap.exe”. Błąd w pliku manifestu lub w pliku zasad „” w wierszu . Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C: \Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Składnik 2: C: \Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error - 2011-05-16 06: 23: 38 \| Computer Name = Pusz-PC \| Source = SideBySide \| ID = 16842832 Description = Nie można wygenerować kontekstu aktywacji dla „C: \Program Files (x86)\Nero\Nero8\Nero PhotoSnap\PhotoSnapViewer.exe”. Błąd w pliku manifestu lub w pliku zasad „” w wierszu . Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C: \Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Składnik 2: C: \Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error - 2011-05-16 06: 25: 14 \| Computer Name = Pusz-PC \| Source = SideBySide \| ID = 16842785 Description = Nie można wygenerować kontekstu aktywacji dla "c: \program files (x86)\innovative solutions\drivermax\DPInst\ia64\dpinst.exe". Nie można odnaleźć zestawu zależnego Microsoft.Windows.Common-Controls,language="*",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0". Użyj narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę. [ System Events ] Error - 2012-07-30 15: 52: 59 \| Computer Name = Pusz-PC \| Source = Service Control Manager \| ID = 7043 Description = Usługa Windows Update nie została poprawnie zamknięta po odebraniu kodu sterującego przed zamknięciem. Error - 2012-07-30 15: 54: 33 \| Computer Name = Pusz-PC \| Source = Service Control Manager \| ID = 7000 Description = Nie można uruchomić usługi AODDriver4.1 z powodu następującego błędu: %%2 Error - 2012-07-30 16: 17: 19 \| Computer Name = Pusz-PC \| Source = VDS Basic Provider \| ID = 33554433 Description = Error - 2012-07-30 17: 18: 13 \| Computer Name = Pusz-PC \| Source = EventLog \| ID = 6008 Description = Poprzednie zamknięcie systemu przy 23: 16: 18 na ?2012-?07-?30 było nieoczekiwane. Error - 2012-07-30 17: 18: 18 \| Computer Name = Pusz-PC \| Source = Service Control Manager \| ID = 7000 Description = Nie można uruchomić usługi AODDriver4.1 z powodu następującego błędu: %%2 Error - 2012-07-31 04: 05: 58 \| Computer Name = Pusz-PC \| Source = Service Control Manager \| ID = 7000 Description = Nie można uruchomić usługi AODDriver4.1 z powodu następującego błędu: %%2 Error - 2012-07-31 05: 04: 24 \| Computer Name = Pusz-PC \| Source = VDS Basic Provider \| ID = 33554433 Description = Error - 2012-07-31 06: 37: 08 \| Computer Name = Pusz-PC \| Source = VDS Basic Provider \| ID = 33554433 Description = Error - 2012-07-31 08: 30: 31 \| Computer Name = Pusz-PC \| Source = volsnap \| ID = 393229 Description = Kopia w tle woluminu D: nie może powiększyć magazynu kopii w tle na woluminie D: . Error - 2012-07-31 08: 31: 21 \| Computer Name = Pusz-PC \| Source = volsnap \| ID = 393251 Description = Wykonywanie kopii w tle woluminu D: zostało przerwane, ponieważ nie można powiększyć magazynu kopii w tle. < End of report > Programem Malwarebytes posługuję się na codzień i regularnie skanuję. Wszystko jest ok, nic nie znalazł, tak samo jak AVG. CCleanerem też bawię się co jakiś czas, skanuję rejestr i usuwam śmieci, czasem też używam Odkurzacza. Do aktualizacji sterowników używałem DriverMax, ale spróbuję z tym nowym SlimDrivers. Sterowniki, prócz najnowszych do karty sieciowej mam zaktualizowane Pytanie co do programu Memtest86+: http://www.stahurski.fora.pl/bootowalny-...in,18.html Zgodnie z tą instrukcją próbowałem przeprowadzić ten test, natomiast zupełnie nie wiem jak edytować ten plik syslinux.cfg. W biosie ustawiam botowanie jak trzeba, odpala mi się obraz z pendrive'a, ale na ekranie wyświetla mi sie napis "Press [TAB] to edit options" oraz pod spodem "Automatis bot in 10 seconds" z czego nic się nie zmienia, ja nie moge nic zrobić, test nie dochodzi do skutku. Sądzę, że źle edytuję ten plik w notatniku, z resztą z tego co widzę tutorial jest oparty na XP... Pozdrawiam! PS. Jak do tej pory wszystko działa ok już dłuższy czas. Dzięki Illidan za pomoc, chyba coś się ustabilizowało bo tych paru manewrach. Diagnostyka pamięci w siódemce nie wykazała błędów. Jeżeli masz bądź macie jeszcze jakieś wskazówki co do loga z Extras, to z chęcią przeczytam i się zastosuję! (Ten post był ostatnio modyfikowany: 03.08.2012 16:08 przez pypciu.) 03.08.2012 15:10
Podziękowania od:

Illidan Ekspert Liczba postów: 1.024	Post: #11 RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia Co do "Memtest86+" to pobierz wersje na "Pendrive",nie przerabiaj wersję "ISO" :-).Na tej stronie ją znajdziesz.Ale jak diagnostyka pamięci systemu Windows nie wykazała błędów to możesz raczej pominąć diagnostykę "Memtest",chodź uważam że nie zaszkodzi ją przeprowadzić.A co do logu "Extras" to już do niczego się nie stosuj,tylko zamieść mi go do wglądu,masz go pewnie na pulpicie,czy w innym katalogu gdzie jest program "OTL" obok logu "OTL.txt":-). Jeśli wszystko jest już "ok" to uruchom "OTL" raz jeszcze i uruchom opcję "Sprzątanie",usunie to program wraz z jego kwarantanną. EDIT.Przepraszam!!Teraz widzę że zamieściłeś ten log "Extras".Na starość ślepnę...Już przeglądam go... (Ten post był ostatnio modyfikowany: 03.08.2012 23:39 przez Illidan.) 03.08.2012 23:36
Podziękowania od:

Illidan Ekspert Liczba postów: 1.024	Post: #12 RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia Co do logu "Extras" to masz tam jakiś konflikt z programem "Drivermax" i "'Nero 8".Co do "DriverMax" to radze usunąć skoro masz "SlimDriver" teraz,moim zdaniem jest lepszy,ale to tylko moje zdanie;-).Nero tez bym usunął dedykowanym de-instalatorem td tego celu ze strony Nero i i zainstalował coś darmowego lżejszego,jak "CDBurnerXP" itp..No i kończy Ci się miejsce na dysku "D" na kopię zapasową systemu, wyłącz tą usługę jak nie masz miejsca,lub aktywuj ją ręcznie tylko kiedy chcesz ją wykonać,albo opróżnij miejsce na dysku, przenosząc stare kopie lub usuwając je. Mogę Ci też polecić alternatywę na Kopie Windows,jeśli chcesz,wydaje mi się że narzędzie jest lepsze.,ale to jak będziesz chciał. Jeśli chodzi o resztę to już w zasadzie wszystko.Jak jest już "OK" to możesz włączyć "OTL" i w nim uruchomić opcję "Sprzątanie". usunie to program i jego kwarantannę. (Ten post był ostatnio modyfikowany: 04.08.2012 14:52 przez Illidan.) 04.08.2012 14:49
Podziękowania od:

Podobne wątki
Wątek:	Autor	Odpowiedzi:	Wyświetleń:	Ostatni post
Logi do sprawdzenia (nie działają niektóre strony internetowe)	crusio	0	1.725	23.04.2015 20:28 Ostatni post: crusio
svchost.exe oraz logi do sprawdzenia	D3jvid	3	2.377	18.04.2015 22:20 Ostatni post: Illidan
Komputer muli, bardzo wolny start Windows 7, logi do sprawdzenia.	kotletowygrajek	0	1.897	18.11.2014 09:05 Ostatni post: kotletowygrajek
Windows powolny start, logi do sprawdzenia	Jareq41	11	3.073	26.04.2014 23:13 Ostatni post: Illidan
Prośba o sprawdzenie logów z HijackThis	8element	1	1.564	19.01.2013 17:33 Ostatni post: Illidan
Prośba o sprawdzenie loga hijackthis	zakwas	3	1.889	05.11.2012 12:30 Ostatni post: peciaq

« Starszy wątek | Nowszy wątek »

Autor: pypciu
Temat został oceniony na 0 w skali 1-5 gwiazdek.
Zebrano 2 głosów.

Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia

Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia

Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia

RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia

RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia

RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia

RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia

RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia

RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia

RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia

RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia

RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia

RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia

RE: Windows 7 x64 Ultimate zacina się co 2 dni: log z HijackThis do sprawdzenia