Proszę o sprawdzenie Loga

winmgrd.exe Usuń ten plik Killboxem, albo w awaryjnym.

Otwórz notatnik i wklej:

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices]
"SYSTEM"=

Zmień na wszystkie pliki i zapisz jako plik fix.reg Poprzez dwuklik dodaj do rejestru.

Możesz mi podac dokładną ścieżkę do tego pliku bo nie moze usunąć KillBox. A tego do rejestru nie może dodac bo plik nie jest skryptem rejestru ?!

Pobierz The Avenger->uruchom te narzędzie w trybie awaryjnym->zaznacz opcję Input script manually i kliknij na lupkę z prawej strony->w okienku, które się otworzy wklejasz:

Files to delete:

C:\WINDOWS\system32\winmgrd.exe

Registry values to delete:

"HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices" | "SYSTEM"

Po wklejeniu kliknij na Done, a następnie zielone światełko.Na komunikat który się wyświetli odpowiedz OK(restart).

Następnie nowy log z ComboFix.

Tylko skąd go pobrać ?;/ Nic nie ma

Jest Google The Avenger

Nie no będzie format Komp świruje... Co chwile mi znika pulpit Po tym zabiegu w awaryjnym wszystko tak jakby od nowa było... GG od nowa.. Mozilla stronki ...


ComboFix

ComboFix 07-06-3B - Running from: "D:\I)@W!I)\Internetowe\"


((((((((((((((((((((((((( Files Created from 2007-07-08 to 2007-08-08 )))))))))))))))))))))))))))))))


2007-08-08 12:45 <DIR> d-------- C:\avenger
2007-08-05 14:30 <DIR> d-------- C:\DOCUME~1\MJKOMP~1\DANEAP~1\Help
2007-07-22 19:59 <DIR> d-------- C:\Program Files\Headshot Player
2007-07-22 13:43 <DIR> d-------- C:\Program Files\Ganymede
2007-07-22 11:31 <DIR> d-------- C:\Program Files\Lavalys
2007-07-20 20:04 <DIR> d-------- C:\Program Files\Odkurzacz
2007-07-20 12:15 <DIR> d-------- C:\Program Files\SpeedFan
2007-07-16 18:31 <DIR> d-------- C:\DOCUME~1\ADMINI~1\DANEAP~1\ATI
2007-07-16 18:30 786,432 --ah----- C:\DOCUME~1\ADMINI~1\NTUSER.DAT
2007-07-16 18:30 <DIR> dr-h----- C:\DOCUME~1\ADMINI~1\Dane aplikacji
2007-07-16 18:30 <DIR> dr------- C:\DOCUME~1\ADMINI~1\Menu Start
2007-07-16 18:30 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\Ustawienia lokalne
2007-07-16 18:30 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\Szablony
2007-07-16 18:30 <DIR> d---s---- C:\DOCUME~1\ADMINI~1\Ulubione
2007-07-16 18:30 <DIR> d---s---- C:\DOCUME~1\ADMINI~1\Moje dokumenty
2007-07-16 18:30 <DIR> d-------- C:\DOCUME~1\ADMINI~1\Pulpit
2007-07-14 17:04 <DIR> d-------- C:\DOCUME~1\MJKOMP~1\DANEAP~1\Jetico Personal Firewall
2007-07-14 12:04 <DIR> d-------- C:\DOCUME~1\MJKOMP~1\DANEAP~1\Ahead
2007-07-14 12:03 <DIR> d-------- C:\Program Files\Nero
2007-07-14 12:03 <DIR> d-------- C:\Program Files\Common Files\Ahead
2007-07-14 10:56 <DIR> d-------- C:\DOCUME~1\MJKOMP~1\DANEAP~1\AdobeUM
2007-07-14 10:54 <DIR> d-------- C:\WINDOWS\Cache
2007-07-13 21:37 <DIR> d-------- C:\WINDOWS\Downloaded Installations
2007-07-13 21:29 <DIR> d-------- C:\Program Files\foobar2000
2007-07-13 21:29 <DIR> d-------- C:\DOCUME~1\MJKOMP~1\DANEAP~1\foobar2000
2007-07-13 21:11 2,789,468 --a------ C:\WINDOWS\system32\libmmd.dll
2007-07-13 18:40 98,304 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2007-07-13 12:07 <DIR> d-------- C:\WINDOWS\system32\ActiveScan
2007-07-11 10:03 63,334 --a------ C:\WINDOWS\BricoPackUninst.cmd
2007-07-11 10:03 203,776 --a------ C:\WINDOWS\system32\uxtheme.dll
2007-07-11 10:01 944,640 --a------ C:\WINDOWS\explorer.exe
2007-07-11 10:01 886,272 --a------ C:\WINDOWS\system32\zipfldr.dll
2007-07-11 10:01 88,064 --a------ C:\WINDOWS\system32\ahui.exe
2007-07-11 10:01 868,864 --a------ C:\WINDOWS\system32\wiaacmgr.exe
2007-07-11 10:01 83,968 --a------ C:\WINDOWS\system32\mydocs.dll
2007-07-11 10:01 78,848 --a------ C:\WINDOWS\system32\cabview.dll
2007-07-11 10:01 764,928 --a------ C:\WINDOWS\system32\WINNTBBU.DLL
2007-07-11 10:01 752,640 --a------ C:\WINDOWS\system32\wiashext.dll
2007-07-11 10:01 710,144 --a------ C:\WINDOWS\system32\printui.dll
2007-07-11 10:01 69,632 --a------ C:\WINDOWS\system32\console.dll
2007-07-11 10:01 679,936 --a------ C:\WINDOWS\system32\shdoclc.dll
2007-07-11 10:01 6,120 --a------ C:\WINDOWS\BricoPackFoldersDelete.cmd
2007-07-11 10:01 54,272 --a------ C:\WINDOWS\system32\narrator.exe
2007-07-11 10:01 529,920 --a------ C:\WINDOWS\system32\mstscax.dll
2007-07-11 10:01 5,640,704 --a------ C:\WINDOWS\system32\logonui.exe
2007-07-11 10:01 439,296 --a------ C:\WINDOWS\system32\mspaint.exe
2007-07-11 10:01 424,960 --a------ C:\WINDOWS\system32\cmdial32.dll
2007-07-11 10:01 409,600 --a------ C:\WINDOWS\system32\cmd.exe
2007-07-11 10:01 404,992 --a------ C:\WINDOWS\system32\newdev.dll
2007-07-11 10:01 400,384 --a------ C:\WINDOWS\system32\keymgr.dll
2007-07-11 10:01 389,120 --a------ C:\WINDOWS\system32\themeui.dll
2007-07-11 10:01 379,392 --a------ C:\WINDOWS\system32\moricons.dll
2007-07-11 10:01 372,736 --a------ C:\WINDOWS\system32\fontext.dll
2007-07-11 10:01 300,032 --a------ C:\WINDOWS\system32\mstask.dll
2007-07-11 10:01 3,127,296 --a------ C:\WINDOWS\system32\logon.scr
2007-07-11 10:01 288,256 --a------ C:\WINDOWS\system32\inetcplc.dll
2007-07-11 10:01 277,504 --a------ C:\WINDOWS\system32\winsrv.dll
2007-07-11 10:01 27,136 --a------ C:\WINDOWS\system32\batmeter.dll
2007-07-11 10:01 227,328 --a------ C:\WINDOWS\system32\ntshrui.dll
2007-07-11 10:01 215,040 --a------ C:\WINDOWS\regedit.exe
2007-07-11 10:01 2,041,856 --a------ C:\WINDOWS\system32\netshell.dll
2007-07-11 10:01 187,904 --a------ C:\WINDOWS\system32\credui.dll
2007-07-11 10:01 180,224 --a------ C:\WINDOWS\system32\sysocmgr.exe
2007-07-11 10:01 178,688 --a------ C:\WINDOWS\system32\taskmgr.exe
2007-07-11 10:01 174,080 --a------ C:\WINDOWS\system32\sndrec32.exe
2007-07-11 10:01 153,088 --a------ C:\WINDOWS\system32\hotplug.dll
2007-07-11 10:01 153,088 --a------ C:\WINDOWS\notepad.exe
2007-07-11 10:01 152,576 --a------ C:\WINDOWS\system32\sndvol32.exe
2007-07-11 10:01 144,896 --a------ C:\WINDOWS\system32\netid.dll
2007-07-11 10:01 143,872 --a------ C:\WINDOWS\system32\stobject.dll
2007-07-11 10:01 129,024 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-07-11 10:01 118,272 --a------ C:\WINDOWS\system32\calc.exe
2007-07-11 10:01 106,496 --a------ C:\WINDOWS\system32\cleanmgr.exe
2007-07-11 10:01 1,771,008 --a------ C:\WINDOWS\system32\shimgvw.dll
2007-07-11 10:01 1,220,096 --a------ C:\WINDOWS\system32\rasdlg.dll
2007-07-11 10:01 1,191,424 --a------ C:\WINDOWS\system32\syssetup.dll
2007-07-11 10:01 1,079,296 --a------ C:\WINDOWS\system32\msgina.dll
2007-07-11 10:00 <DIR> d-------- C:\WINDOWS\BricoPacks
2007-07-11 09:57 223,128 --a------ C:\WINDOWS\system32\drivers\dtscsi.sys
2007-07-11 09:57 <DIR> d-------- C:\Program Files\DAEMON Tools
2007-07-11 09:54 89,984 --a------ C:\WINDOWS\system32\drivers\sptd7069.sys
2007-07-11 09:54 642,560 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2007-07-10 10:59 <DIR> d---s---- C:\Program Files\Xfire
2007-07-10 10:59 <DIR> d-------- C:\DOCUME~1\MJKOMP~1\DANEAP~1\Xfire
2007-07-08 21:02 327,168 --a------ C:\WINDOWS\IsUn0415.exe
2007-07-08 21:01 <DIR> d-------- C:\Program Files\Hewlett-Packard
2007-07-08 20:19 <DIR> d-------- C:\WINDOWS\ShellNew
2007-07-08 10:13 <DIR> d-------- C:\Program Files\uTorrent
2007-07-08 10:13 <DIR> d-------- C:\DOCUME~1\MJKOMP~1\DANEAP~1\uTorrent


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-08-07 17:46:06 -------- d--h--w C:\Program Files\WindowsUpdate
2007-08-07 15:03:02 5,757 ----a-w C:\WINDOWS\mozver.dat
2007-08-06 08:23:51 -------- d--h--w C:\Program Files\InstallShield Installation Information
2007-08-04 18:21:50 -------- d-----w C:\Program Files\Gadu-Gadu
2007-07-20 18:14:14 -------- d-----w C:\Program Files\Movie Maker
2007-07-20 18:14:14 -------- d-----w C:\Program Files\BitComet
2007-07-16 16:30:59 -------- d-----w C:\Program Files\Messenger
2007-06-30 19:59:32 -------- d-----w C:\Program Files\eMule
2007-06-29 08:10:07 -------- d-----w C:\Program Files\BearShare
2007-06-29 08:09:50 -------- d-----w C:\Program Files\MyGlobalSearch
2007-06-28 16:27:08 107,134 ----a-w C:\WINDOWS\UninstallFirefox.exe
2007-06-26 16:35:47 -------- d-----w C:\DOCUME~1\MJKOMP~1\DANEAP~1\ATI
2007-06-22 14:05:34 -------- d-----w C:\Program Files\SubEdit-Player
2007-06-21 11:47:21 163,644 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
2007-06-21 11:13:22 -------- d-----w C:\Program Files\ffdshow
2007-06-18 18:11:19 -------- d-----w C:\Program Files\TechSmith
2007-06-18 18:10:04 -------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2007-06-18 09:32:49 -------- d-----w C:\Program Files\The All-Seeing Eye
2007-06-15 12:19:04 4 ----a-w C:\WINDOWS\system32\proc1795523372.bin
2007-06-15 12:19:04 -------- d-----w C:\DOCUME~1\MJKOMP~1\DANEAP~1\GanymedeNet
2007-06-15 10:55:40 -------- d-----w C:\Program Files\Common Files\ODBC
2007-06-15 10:55:35 -------- d-----w C:\Program Files\Common Files\SpeechEngines
2007-06-15 10:39:49 0 ----a-w C:\WINDOWS\nsreg.dat
2007-06-15 10:39:48 -------- d-----w C:\DOCUME~1\MJKOMP~1\DANEAP~1\Talkback
2007-06-15 10:33:57 67,078 ----a-w C:\WINDOWS\system32\perfc015.dat
2007-06-15 10:33:57 435,978 ----a-w C:\WINDOWS\system32\perfh015.dat
2007-06-15 10:29:22 -------- d-----w C:\Program Files\ATI Technologies
2007-06-15 10:29:08 -------- d-----w C:\Program Files\Common Files\InstallShield
2007-06-15 10:19:32 -------- d-----w C:\Program Files\Realtek Sound Manager
2007-06-15 10:19:32 -------- d-----w C:\Program Files\AvRack
2007-06-15 10:13:00 -------- d-----w C:\Program Files\WLAN
2007-06-15 10:06:34 -------- d-----w C:\Program Files\microsoft frontpage
2007-06-15 10:06:12 0 --sha-r C:\MSDOS.SYS
2007-06-15 10:06:12 0 --sha-r C:\IO.SYS
2007-06-15 10:06:12 0 ----a-w C:\CONFIG.SYS
2007-06-15 10:06:12 0 ----a-w C:\AUTOEXEC.BAT
2007-06-15 10:05:03 -------- d-----w C:\Program Files\Usługi online
2007-06-15 10:03:24 -------- d-----w C:\Program Files\Common Files\MSSoap
2007-06-15 10:02:56 21,856 ----a-w C:\WINDOWS\system32\emptyregdb.dat
2007-06-15 10:02:23 -------- d-----w C:\Program Files\MSN Gaming Zone
2007-06-15 10:02:22 -------- d-----w C:\Program Files\Windows NT
2007-06-13 19:25:36 339,968 ----a-w C:\WINDOWS\system32\ATIDEMGX.dll
2007-06-13 19:24:32 268,288 ----a-w C:\WINDOWS\system32\ati2dvag.dll
2007-06-13 19:24:13 2,155,520 ----a-w C:\WINDOWS\system32\drivers\ati2mtag.sys
2007-06-13 19:23:23 307,200 ----a-w C:\WINDOWS\system32\atiiiexx.dll
2007-06-13 19:17:37 139,264 ----a-w C:\WINDOWS\system32\atipdlxx.dll
2007-06-13 19:17:26 118,784 ----a-w C:\WINDOWS\system32\Oemdspif.dll
2007-06-13 19:17:18 26,112 ----a-w C:\WINDOWS\system32\Ati2mdxx.exe
2007-06-13 19:17:12 42,496 ----a-w C:\WINDOWS\system32\ati2edxx.dll
2007-06-13 19:16:59 118,784 ----a-w C:\WINDOWS\system32\ati2evxx.dll
2007-06-13 19:15:39 483,328 ----a-w C:\WINDOWS\system32\ati2evxx.exe
2007-06-13 19:14:51 53,248 ----a-w C:\WINDOWS\system32\ATIDDC.DLL
2007-06-13 19:10:33 8,097,792 ----a-w C:\WINDOWS\system32\atioglx2.dll
2007-06-13 19:07:26 2,922,208 ----a-w C:\WINDOWS\system32\ati3duag.dll
2007-06-13 18:57:21 1,512,960 ----a-w C:\WINDOWS\system32\ativvaxx.dll
2007-06-13 18:57:04 972,072 ----a-w C:\WINDOWS\system32\ativva6x.dat
2007-06-13 18:57:04 3,107,788 ----a-w C:\WINDOWS\system32\ativvaxx.dat
2007-06-13 18:57:04 3,107,788 ----a-w C:\WINDOWS\system32\ativva5x.dat
2007-06-13 18:46:28 5,431,296 ----a-w C:\WINDOWS\system32\atioglxx.dll
2007-06-13 18:43:53 262,144 ----a-w C:\WINDOWS\system32\atikvmag.dll
2007-06-13 18:42:29 17,408 ----a-w C:\WINDOWS\system32\atitvo32.dll
2007-06-13 18:41:06 50,176 ----a-w C:\WINDOWS\system32\atiok3x2.dll
2007-06-13 18:36:45 368,640 ----a-w C:\WINDOWS\system32\ati2cqag.dll
2007-06-13 12:29:00 520,192 ------w C:\WINDOWS\system32\ati2sgag.exe


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{00C6482D-C502-44C8-8409-FCE54AD9C208}=C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll [2007-05-01 11:11]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll [2003-11-03 14:17]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [2007-03-14 03:43]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2003-01-10 05:39 C:\WINDOWS\SOUNDMAN.EXE]
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-06 01:07]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-15 13:26]
"avgnt"="C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" [2007-04-02 10:35]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"HP Software Update"="C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe" [2002-12-17 11:40]
"DeviceDiscovery"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe" [2002-12-02 20:56]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\ctfmon.exe" [2001-10-26 19:29]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2001-08-02 07:14]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" [2005-11-24 15:38]
"Odkurzacz-MCD"="C:\Program Files\Odkurzacz\odk_mcd.exe" [2007-05-03 10:02]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll" [2007-05-30 14:29]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AVG Anti-Spyware Driver]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AVG Anti-Spyware Guard]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BearShare]
"C:\Program Files\BearShare\BearShare.exe" /pause

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
"C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
"C:\Program Files\Messenger\msmsgs.exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\System32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
"C:\Program Files\Winamp\Winampa.exe"

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost *netsvcs*


**************************************************************************

catchme 0.3.692 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-08-08 12:50:05
Windows 5.1.2600 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-08-08 12:50:44
C:\ComboFix2.txt ... 2007-06-26 18:57

--- E O F ---

C:\WINDOWS\system32\drivers\sptd7069.sys

Wydaje mi się, że plik pochodzi od Daemona, lecz przeskanuj go na http://virustotal.com i podaj wynik skanowania.

Skanowania ? Ja mam tylko Wyślij plik a jak to zrobie to mam 0 bytes size received / Se ha recibido un archivo vacio

Wyślij plik i uzbrój się w cierpliwość. Plik powinien zostać przeskanowany.

tylko nie zaznaczaj opcji na dole, bo chyba obecnie są niedostępne
u mnie nie było strony gdy zaznaczyłem (pa próbe) SSL i nie dystrybuuj pliku

Kod:

Logfile of HijackThis v1.99.1
Scan saved at 16:09:58, on 2007-08-17
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Media Player Classic\mplayerc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
D:\I)@W!I)\Internetowe\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

Kosmetyczny fix. Reszta czysta.