24 Wrz 2011, 20:11
24 Wrz 2011, 20:23
:OTL
CHR - plugin: Babylon Chrome Plugin (Enabled) = C:\Documents and Settings\Czarek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\BabylonChromePI.dll
CHR - Extension: Babylon Chrome OCR = C:\Documents and Settings\Czarek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
CHR - default_search_provider: Smart PC Customized Web Search (Enabled)
CHR - default_search_provider: search_url = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1638664
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKU\S-1-5-21-1935655697-776561741-682003330-1004..\Run: [{5BA55971-CEED-4B24-1881-62421922C292}] "C:\Documents and Settings\Czarek\Dane aplikacji\Koyv\quda.exe" File not found
O4 - HKU\S-1-5-21-1935655697-776561741-682003330-1004..\Run: [BitTorrent DNA] ; "C:\Program Files\DNA\btdna.exe" File not found
O4 - HKU\S-1-5-21-1935655697-776561741-682003330-1004..\Run: [Gadu-Gadu 10] "C:\Program Files\Gadu-Gadu 10\gg.exe" File not found
O4 - HKU\S-1-5-21-1935655697-776561741-682003330-1004..\Run: [Skype] ; "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized File not found
O4 - Startup: C:\Documents and Settings\Czarek\Menu Start\Programy\Autostart\Picture Motion Browser Media Check Tool.lnk = File not found
O8 - Extra context menu item: Subskrybuj w MoneyRss - Reg Error: Value error. File not found
O33 - MountPoints2\{c1c5e884-8a4d-11de-b703-001966b4570d}\Shell\AutoRun\command - "" = G:\9u.exe
O33 - MountPoints2\{c1c5e884-8a4d-11de-b703-001966b4570d}\Shell\open\Command - "" = G:\9u.exe
O33 - MountPoints2\{f433a454-5d00-11df-b949-001966b4570d}\Shell\AutoRun\command - "" = H:\dhrhyje.bat
O33 - MountPoints2\{f433a454-5d00-11df-b949-001966b4570d}\Shell\open\Command - "" = H:\dhrhyje.bat
[2011-09-24 18:57:25 | 000,000,972 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2011-09-24 19:10:01 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011-09-22 09:10:00 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011-09-19 12:36:01 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
:Files
C:\Documents and Settings\Czarek\Menu Start\Programy\Autostart\OpenOffice.ux.pl 3.2.lnk
C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Przyspieszenie uruchomienia programu AutoCAD.lnk
C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Metacafe.lnk
:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=-
"Babylon Client"=-
"BabylonToolbar"=-
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IPLA!"=-
:Commands
[clearallrestorepoints]
[emptytemp]
25 Wrz 2011, 21:54
25 Wrz 2011, 22:00
:OTL
CHR - default_search_provider: Smart PC Customized Web Search (Enabled)
CHR - default_search_provider: search_url = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1638664
CHR - plugin: Babylon Chrome Plugin (Enabled) = C:\Documents and Settings\Czarek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\BabylonChromePI.dll
O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - No CLSID value found.
[2011-09-25 21:06:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Czarek\Ustawienia lokalne\Dane aplikacji\IncrediMail_MediaBar_2
[2011-09-19 12:36:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\IncrediMail_MediaBar_2
[2010-12-07 10:24:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Czarek\Dane aplikacji\BabylonToolbar
:Files
C:\Program Files\ConduitEngine
26 Wrz 2011, 00:27
26 Wrz 2011, 21:05
:OTL
IE - HKU\S-1-5-21-1935655697-776561741-682003330-1004\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
CHR - default_search_provider: Smart PC Customized Web Search (Enabled)
CHR - default_search_provider: search_url = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1638664
CHR - plugin: Babylon Chrome Plugin (Enabled) = C:\Documents and Settings\Czarek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\BabylonChromePI.dll
O8 - Extra context menu item: Translate this web page with Babylon - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.)
O8 - Extra context menu item: Translate with Babylon - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.)
O9 - Extra Button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.)
O9 - Extra 'Tools' menuitem : Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.)
[2011-09-25 23:02:21 | 000,000,972 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2011-09-10 08:59:46 | 000,000,000 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
@Alternate Data Stream - 117 bytesC:\Documents and Settings\All Users\Dane aplikacji\TEMP:ECF5194F
@Alternate Data Stream - 116 bytesC:\Documents and Settings\All Users\Dane aplikacji\TEMP:D1B5B4F1
:Files
C:\WINDOWS\PEV.exe
C:\WINDOWS\sed.exe
C:\WINDOWS\grep.exe
C:\WINDOWS\zip.exe
:Commands
[clearallrestorepoints]
[emptytemp]
26 Wrz 2011, 21:32
OdinstalujBabylon
:OTL
CHR - default_search_provider: Smart PC Customized Web Search (Enabled)
CHR - default_search_provider: search_url = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1638664
Java(TM) 6 Update 15
J2SE Runtime Environment 5.0 Update 9
Java(TM) SE Runtime Environment 6 Update 1
27 Wrz 2011, 01:20
27 Wrz 2011, 16:09
27 Wrz 2011, 17:26
Dlaczego zalecasz odinstalowanie... słownika.
28 Wrz 2011, 21:06