amvo.dll , log z combofixa do sprawdzenia

[mateusz455]

WITAM! NIE JESTEM PEWIEN CZY WSZYSTKO PRZEBIEGŁO POPRAWNIE PONIEWAŻ NA KONIEC WYSKOCZYŁO MI OKIENKO ZEBYM POCZEKAŁ JESZCZE CHWILĘ I ŻE ZA PARĘ SEKUND PROGRAM SIĘ SAM ZAMKNIE, CZEKAŁEM JAKIEŚ 10 MINUT I SIĘ NIE WYŁANCZAŁ WIEC SAM GO WYŁĄCZYŁEM.

OTO LOG:

ComboFix 08-04-11.5 - Mateusz 2008-04-12 11:04:47.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.225 [GMT 2:00]
Running from: C:\Documents and Settings\Mateusz\Pulpit\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\myglobalsearch
C:\Program Files\myglobalsearch\bar\1.bin\M9FFXTBR.JAR
C:\Program Files\myglobalsearch\bar\1.bin\M9FFXTBR.MANIFEST
C:\Program Files\myglobalsearch\bar\1.bin\M9NTSTBR.JAR
C:\Program Files\myglobalsearch\bar\1.bin\M9NTSTBR.MANIFEST
C:\Program Files\myglobalsearch\bar\1.bin\M9PLUGIN.DLL
C:\Program Files\myglobalsearch\bar\1.bin\MGSBAR.DLL
C:\Program Files\myglobalsearch\bar\1.bin\NPMYGLSH.DLL
C:\Program Files\myglobalsearch\bar\Cache05CE82
C:\Program Files\myglobalsearch\bar\Cache061937
C:\Program Files\myglobalsearch\bar\Cache063E34.bin
C:\Program Files\myglobalsearch\bar\Cache148C410.bin
C:\Program Files\myglobalsearch\bar\Cache1492683.bin
C:\Program Files\myglobalsearch\bar\Cache\files.ini
C:\Program Files\myglobalsearch\bar\History\search
C:\Program Files\myglobalsearch\bar\Settings\prevcfg.htm
C:\WINNT\system32\amvo.exe

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_IPRIP
-------\Service_Iprip


((((((((((((((((((((((((( Files Created from 2008-03-12 to 2008-04-12 )))))))))))))))))))))))))))))))
.

2008-04-12 11:07 . 2008-04-12 11:07 <DIR> d-------- C:\WINNT\system32\xircom
2008-04-12 11:07 . 2008-04-12 11:07 <DIR> d-------- C:\Program Files\microsoft frontpage
2008-03-29 18:43 . 2008-03-29 18:46 <DIR> d-------- C:\Program Files\Valve
2008-03-19 19:33 . 2008-03-19 19:40 <DIR> d-------- C:\Documents and Settings\Mateusz\Dane aplikacji\SecondLife

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-02 15:00 --------- d-----w C:\Program Files\Java
2008-03-29 16:43 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-03-12 17:37 --------- d-----w C:\Program Files\Opera
2008-02-29 22:13 --------- d-----w C:\Program Files\Gadu-Gadu
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"High Definition Audio Property Page Shortcut"="CHDAudPropShortcut.exe" [2006-02-03 10:43 61952 C:\WINNT\system32\CHDAudPropShortcut.exe]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-09-30 16:09 737370]
"NvCplDaemon"="C:\WINNT\system32\NvCpl.dll" [2005-12-15 11:42 7331840]
"nwiz"="nwiz.exe" [2005-12-15 11:42 1519616 C:\WINNT\system32\nwiz.exe]
"ACU"="C:\Program Files\Atheros\ACU.exe" [2006-04-26 11:37 331776]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 15:00 79224]
"NeroFilterCheck"="C:\WINNT\system32\NeroCheck.exe" [2001-07-09 11:50 155648]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"SMSTray"="C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe" [2007-09-20 08:23 132624]
"Samsung Common SM"="C:\WINNT\Samsung\ComSMMgr\ssmmgr.exe" [2005-07-03 09:20 372736]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 21:24 32768]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINNT\system32\CTFMON.EXE" [2004-08-04 04:44 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nlsf"="cmd.exe" [2004-08-04 04:44 395776 C:\WINNT\system32\cmd.exe]
"tscuninstall"="C:\WINNT\system32\tscupgrd.exe" [2004-08-04 04:33 44544]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^BTTray.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BTTray.lnk
backup=C:\WINNT\pss\BTTray.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2006-09-01 16:57 282624 C:\Program Files\QuickTime\qttask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2005-11-10 13:03 36975 C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WhenUSave]
C:\Program Files\Save\Save.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"btwdins"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\TC PowerPack\\TOTALCMD.EXE"=
"C:\\Program Files\\Gadu-Gadu\\gg.exe"=
"C:\\Program Files\\EA GAMES\\Need for Speed Most Wanted\\speed.exe"=
"C:\\Program Files\\FlashGet\\flashget.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3587:TCP"= 3587:TCP:Grupowanie sieci równorzędnej Windows
"3540:UDP"= 3540:UDP:Protokół rozpoznawania nazw równorzędnych (PNRP)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x);C:\WINNT\system32\drivers\sfsync03.sys [2005-12-06 17:11]
S3 p2pgasvc;Uwierzytelnianie grup sieci równorzędnej;C:\WINNT\system32\svchost.exe [2004-08-04 04:44]
S3 p2pimsvc;Menedżer tożsamości sieci równorzędnej;C:\WINNT\system32\svchost.exe [2004-08-04 04:44]
S3 p2psvc;Sieć równorzędna;C:\WINNT\system32\svchost.exe [2004-08-04 04:44]
S3 PNRPSvc;Protokół PNRP (Peer Name Resolution Protocol);C:\WINNT\system32\svchost.exe [2004-08-04 04:44]
S3 USBSTOR;Sterownik magazynu masowego USB;C:\WINNT\system32\DRIVERS\USBSTOR.SYS [2004-08-03 23:08]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
p2psvc REG_MULTI_SZ p2psvc p2pimsvc p2pgasvc PNRPSvc

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0d6680ec-ee84-11dc-a810-0019d2123e32}]
\Shell\AutoRun\command - b.com
\Shell\explore\Command - b.com
\Shell\open\Command - b.com

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7788a8fe-ccb3-11db-a472-0016366ee7d6}]
\Shell\AutoRun\command - C:\winnt\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe
\Shell\Open(&0)\command - Recycled\ctfmon.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9318a11c-03ba-11dc-a55a-0016366ee7d6}]
\Shell\AutoRun\command - C:\WINNT\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe
\Shell\Open(&0)\command - Recycled\ctfmon.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bf77bf11-f418-11db-a516-0016366ee7d6}]
\Shell\AutoRun\command - yo2mq6.exe
\Shell\explore\Command - yo2mq6.exe
\Shell\open\Command - yo2mq6.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f4d69f6c-7c32-11dc-a691-0019d2123e32}]
\Shell\AutoRun\command - h6o0re.cmd
\Shell\explore\Command - h6o0re.cmd
\Shell\open\Command - h6o0re.cmd

.
Contents of the 'Scheduled Tasks' folder
"2008-03-29 20:20:02 C:\WINNT\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-12 11:08:26
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

[CREAMTEAM]

log nie jest pełny

[mateusz455]

MYŚLĘ ŻE TERAZ SIĘ UDAŁO, LOG POWINIEN BYĆ PEŁNY


ComboFix 08-04-11.5 - Mateusz 2008-04-12 12:26:45.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.245 [GMT 2:00]
Running from: C:\Documents and Settings\Mateusz\Pulpit\ComboFix.exe

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
C:\Program Files\myglobalsearch
C:\Program Files\myglobalsearch\bar\1.bin\M9FFXTBR.JAR
C:\Program Files\myglobalsearch\bar\1.bin\M9FFXTBR.MANIFEST
C:\Program Files\myglobalsearch\bar\1.bin\M9NTSTBR.JAR
C:\Program Files\myglobalsearch\bar\1.bin\M9NTSTBR.MANIFEST
C:\Program Files\myglobalsearch\bar\1.bin\M9PLUGIN.DLL
C:\Program Files\myglobalsearch\bar\1.bin\MGSBAR.DLL
C:\Program Files\myglobalsearch\bar\1.bin\NPMYGLSH.DLL
C:\Program Files\myglobalsearch\bar\Cache\0005CE82
C:\Program Files\myglobalsearch\bar\Cache\00061937
C:\Program Files\myglobalsearch\bar\Cache\00063E34.bin
C:\Program Files\myglobalsearch\bar\Cache\0148C410.bin
C:\Program Files\myglobalsearch\bar\Cache\01492683.bin
C:\Program Files\myglobalsearch\bar\Cache\files.ini
C:\Program Files\myglobalsearch\bar\History\search
C:\Program Files\myglobalsearch\bar\Settings\prevcfg.htm
C:\WINNT\system32\amvo.exe

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_IPRIP
-------\Service_Iprip


((((((((((((((((((((((((( Files Created from 2008-03-12 to 2008-04-12 )))))))))))))))))))))))))))))))
.

2008-04-12 11:07 . 2008-04-12 11:07 <DIR> d-------- C:\WINNT\system32\xircom
2008-04-12 11:07 . 2008-04-12 11:07 <DIR> d-------- C:\Program Files\microsoft frontpage
2008-03-29 18:43 . 2008-03-29 18:46 <DIR> d-------- C:\Program Files\Valve
2008-03-19 19:33 . 2008-03-19 19:40 <DIR> d-------- C:\Documents and Settings\Mateusz\Dane aplikacji\SecondLife

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-02 15:00 --------- d-----w C:\Program Files\Java
2008-03-29 16:43 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-03-20 08:01 1,846,144 ----a-w C:\WINNT\system32\win32k.sys
2008-03-12 17:37 --------- d-----w C:\Program Files\Opera
2008-02-29 22:13 --------- d-----w C:\Program Files\Gadu-Gadu
2008-02-20 06:53 282,624 ----a-w C:\WINNT\system32\gdi32.dll
2008-02-20 05:38 45,568 ----a-w C:\WINNT\system32\dnsrslvr.dll
2008-02-16 09:32 668,672 ----a-w C:\WINNT\system32\wininet.dll
2008-02-08 12:31 43,520 ----a-w C:\WINNT\system32\CmdLineExt03.dll
.

((((((((((((((((((((((((((((( snapshot@2008-04-12_11.09.40.78 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-04-12 09:21:53 16,384 ----atw C:\WINNT\Temp\Perflib_Perfdata_628.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"High Definition Audio Property Page Shortcut"="CHDAudPropShortcut.exe" [2006-02-03 10:43 61952 C:\WINNT\system32\CHDAudPropShortcut.exe]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-09-30 16:09 737370]
"NvCplDaemon"="C:\WINNT\system32\NvCpl.dll" [2005-12-15 11:42 7331840]
"nwiz"="nwiz.exe" [2005-12-15 11:42 1519616 C:\WINNT\system32\nwiz.exe]
"ACU"="C:\Program Files\Atheros\ACU.exe" [2006-04-26 11:37 331776]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 15:00 79224]
"NeroFilterCheck"="C:\WINNT\system32\NeroCheck.exe" [2001-07-09 11:50 155648]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"SMSTray"="C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe" [2007-09-20 08:23 132624]
"Samsung Common SM"="C:\WINNT\Samsung\ComSMMgr\ssmmgr.exe" [2005-07-03 09:20 372736]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 21:24 32768]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINNT\system32\CTFMON.EXE" [2004-08-04 04:44 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nlsf"="cmd.exe" [2004-08-04 04:44 395776 C:\WINNT\system32\cmd.exe]
"tscuninstall"="C:\WINNT\system32\tscupgrd.exe" [2004-08-04 04:33 44544]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^BTTray.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BTTray.lnk
backup=C:\WINNT\pss\BTTray.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2006-09-01 16:57 282624 C:\Program Files\QuickTime\qttask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2005-11-10 13:03 36975 C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WhenUSave]
C:\Program Files\Save\Save.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"btwdins"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\TC PowerPack\\TOTALCMD.EXE"=
"C:\\Program Files\\Gadu-Gadu\\gg.exe"=
"C:\\Program Files\\EA GAMES\\Need for Speed Most Wanted\\speed.exe"=
"C:\\Program Files\\FlashGet\\flashget.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3587:TCP"= 3587:TCP:Grupowanie sieci równorzędnej Windows
"3540:UDP"= 3540:UDP:Protokół rozpoznawania nazw równorzędnych (PNRP)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x);C:\WINNT\system32\drivers\sfsync03.sys [2005-12-06 17:11]
S3 p2pgasvc;Uwierzytelnianie grup sieci równorzędnej;C:\WINNT\system32\svchost.exe [2004-08-04 04:44]
S3 p2pimsvc;Menedżer tożsamości sieci równorzędnej;C:\WINNT\system32\svchost.exe [2004-08-04 04:44]
S3 p2psvc;Sieć równorzędna;C:\WINNT\system32\svchost.exe [2004-08-04 04:44]
S3 PNRPSvc;Protokół PNRP (Peer Name Resolution Protocol);C:\WINNT\system32\svchost.exe [2004-08-04 04:44]
S3 USBSTOR;Sterownik magazynu masowego USB;C:\WINNT\system32\DRIVERS\USBSTOR.SYS [2004-08-03 23:08]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
p2psvc REG_MULTI_SZ p2psvc p2pimsvc p2pgasvc PNRPSvc

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0d6680ec-ee84-11dc-a810-0019d2123e32}]
\Shell\AutoRun\command - b.com
\Shell\explore\Command - b.com
\Shell\open\Command - b.com

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7788a8fe-ccb3-11db-a472-0016366ee7d6}]
\Shell\AutoRun\command - C:\winnt\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe
\Shell\Open(&0)\command - Recycled\ctfmon.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9318a11c-03ba-11dc-a55a-0016366ee7d6}]
\Shell\AutoRun\command - C:\WINNT\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe
\Shell\Open(&0)\command - Recycled\ctfmon.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bf77bf11-f418-11db-a516-0016366ee7d6}]
\Shell\AutoRun\command - yo2mq6.exe
\Shell\explore\Command - yo2mq6.exe
\Shell\open\Command - yo2mq6.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f4d69f6c-7c32-11dc-a691-0019d2123e32}]
\Shell\AutoRun\command - h6o0re.cmd
\Shell\explore\Command - h6o0re.cmd
\Shell\open\Command - h6o0re.cmd

.
Contents of the 'Scheduled Tasks' folder
"2008-03-29 20:20:02 C:\WINNT\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-12 12:28:13
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-04-12 12:28:42
ComboFix-quarantined-files.txt 2008-04-12 10:28:32
Pre-Run: 5,933,932,544 bajtów wolnych
Post-Run: 5,922,811,904 bajtów wolnych
.
2008-04-09 13:55:33 --- E O F ---

[huber2t]

otwórz notatnik i wklej

Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

zapisz jako typ wszystkie pliki i pod nazwą plik.reg

Uruchom ten plik, uruchom ponownie komputer

[mateusz455]

zapisz jako typ wszystkie pliki i pod nazwą plik.reg

Dało by się troszkę jasniej to napisać? Nie jestem za bardzo wtajemniczony w takie rzeczy i nie bardzo wiem co mam dokładnie zrobić
Z góry dziekuje za pomoc.

[huber2t]

Z menu plik wybierasz zapisz jako
nazwa pliku: plik.reg
zapisz jako typ: wszystkie pliki

klikasz zapisz

uruchamisz powstaly plik

restartujesz komputer

[mateusz455]

Chyba się udało dziekuje bardzo za pomoc i pozdrawiam.

Mogę teraz usunąć ten plik kótry miałem zapisać pod nazwą plik.reg? I czy mam usunąć folder Qoobox?

[huber2t]

Mozesz usunąć plik i folder