[Help] Procesor skacze do 100%!

przez **sms216** w 14 Paź 2013, 10:30

[Help] Procesor skacze do 100%!

przez sms216 w 14 Paź 2013, 10:30

Dzieje sie tak gdy włącza się nowa strona w internecie, a nie mówiąć już o tym jak gram w grę.
Załączam loga z combofixa

Kod: Zaznacz wszystko: ComboFix 13-10-13.02 - Natalia 2013-10-14 9:47.1.2 - x86 Microsoft Windows 7 Professional 6.1.7601.1.1250.48.1045.18.3070.2236 [GMT 2:00] Uruchomiony z: c:\users\Natalia\Downloads\ComboFix.exe AV: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} SP: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . . e:\images\_PAlbTN e:\images\_PAlbTN\kamila.jpg_128x96 e:\images\_PAlbTN\kamila.jpg_160x120 e:\images\_PAlbTN\Zdj__cie0400.jpg_128x96 e:\images\_PAlbTN\Zdj__cie0400.jpg_160x120 . . ((((((((((((((((((((((((( Pliki utworzone od 2013-09-14 do 2013-10-14 ))))))))))))))))))))))))))))))) . . 2013-10-14 07:58 . 2013-10-14 07:58 -------- d-----w- c:\users\Natalia\AppData\Local\temp 2013-10-14 07:58 . 2013-10-14 07:58 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-10-12 07:05 . 2013-10-12 07:05 243128 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys 2013-10-12 07:04 . 2013-10-12 07:05 -------- d-----w- c:\program files\a2zLyrics-15 2013-10-12 07:03 . 2013-10-12 07:05 -------- d-----w- c:\program files\DAEMON Tools Lite 2013-10-07 14:47 . 2013-10-07 14:48 -------- d-----w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1 2013-10-07 14:47 . 2013-10-07 14:47 -------- d-----w- c:\program files\iPod 2013-10-07 14:42 . 2013-10-07 14:42 159744 ----a-w- c:\program files\Internet Explorer\Wtyczki\npqtplugin5.dll 2013-10-07 14:42 . 2013-10-07 14:42 159744 ----a-w- c:\program files\Internet Explorer\Wtyczki\npqtplugin4.dll 2013-10-07 14:42 . 2013-10-07 14:42 159744 ----a-w- c:\program files\Internet Explorer\Wtyczki\npqtplugin3.dll 2013-10-07 14:42 . 2013-10-07 14:42 159744 ----a-w- c:\program files\Internet Explorer\Wtyczki\npqtplugin2.dll 2013-10-07 14:42 . 2013-10-07 14:42 159744 ----a-w- c:\program files\Internet Explorer\Wtyczki\npqtplugin.dll 2013-10-07 14:42 . 2013-10-07 14:42 -------- d-----w- c:\program files\QuickTime 2013-09-24 19:07 . 2013-09-24 19:07 -------- d-----w- c:\program files\Common Files\Skype 2013-09-24 19:07 . 2013-09-24 19:07 -------- d-----r- c:\program files\Skype 2013-09-16 12:09 . 2013-09-16 12:09 -------- d-----w- c:\users\Natalia\AppData\Local\ElevatedDiagnostics . . . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-10-12 16:15 . 2013-01-05 17:29 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2013-10-12 16:15 . 2013-01-05 17:29 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2013-09-09 23:34 . 2013-09-09 23:34 22328 ----a-w- c:\windows\system32\drivers\avgidsshimx.sys 2013-09-04 23:43 . 2013-09-04 23:43 39224 ----a-w- c:\windows\system32\drivers\avgrkx86.sys 2013-08-15 15:35 . 2013-08-15 15:35 4608 ----a-w- c:\windows\system32\w95inf32.dll 2013-08-15 15:35 . 2013-08-15 15:35 2272 ----a-w- c:\windows\system32\w95inf16.dll 2013-08-05 01:56 . 2013-09-11 18:13 133056 ----a-w- c:\windows\system32\drivers\ataport.sys 2013-08-02 01:50 . 2013-09-11 18:13 169984 ----a-w- c:\windows\system32\winsrv.dll 2013-08-02 01:49 . 2013-09-11 18:13 293376 ----a-w- c:\windows\system32\KernelBase.dll 2013-08-02 01:48 . 2013-09-11 18:13 5120 ---ha-w- c:\windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 4608 ---ha-w- c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 4096 ---ha-w- c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 4096 ---ha-w- c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 4096 ---ha-w- c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 3584 ---ha-w- c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 3584 ---ha-w- c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 3584 ---ha-w- c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 3584 ---ha-w- c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 3584 ---ha-w- c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 3584 ---ha-w- c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 3072 ---ha-w- c:\windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 3072 ---ha-w- c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 3072 ---ha-w- c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 3072 ---ha-w- c:\windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 3072 ---ha-w- c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 3072 ---ha-w- c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 3072 ---ha-w- c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 3072 ---ha-w- c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 3072 ---ha-w- c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 3072 ---ha-w- c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-08-02 01:48 . 2013-09-11 18:13 3072 ---ha-w- c:\windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-08-02 00:52 . 2013-09-11 18:13 271360 ----a-w- c:\windows\system32\conhost.exe 2013-08-02 00:43 . 2013-09-11 18:13 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-08-02 00:43 . 2013-09-11 18:13 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-08-02 00:43 . 2013-09-11 18:13 3584 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-08-02 00:43 . 2013-09-11 18:13 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-07-25 08:57 . 2013-08-14 11:27 1620992 ----a-w- c:\windows\system32\WMVDECOD.DLL 2013-07-19 23:51 . 2013-07-19 23:51 246072 ----a-w- c:\windows\system32\drivers\avglogx.sys 2013-07-19 23:50 . 2013-07-19 23:50 60216 ----a-w- c:\windows\system32\drivers\avgidshx.sys 2013-07-19 23:50 . 2013-07-19 23:50 208184 ----a-w- c:\windows\system32\drivers\avgidsdriverx.sys 2013-07-19 23:50 . 2013-07-19 23:50 171320 ----a-w- c:\windows\system32\drivers\avgldx86.sys 2013-07-19 01:41 . 2013-08-14 11:27 2048 ----a-w- c:\windows\system32\tzres.dll . . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{11111111-1111-1111-1111-110411391105}] 2013-10-12 07:04 598528 ----a-w- c:\program files\a2zLyrics-15\a2zLyrics-15-bho.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}] 2013-06-27 14:11 579024 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}" . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}] 2013-06-27 14:11 579024 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}" . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}] 2013-06-27 14:11 579024 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}] 2013-06-27 14:11 579024 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}] 2013-06-27 14:11 579024 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}] 2013-06-27 14:11 579024 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Pando Media Booster"="c:\program files\Pando Networks\Media Booster\PMB.exe" [2013-04-01 4288048] "Yontoo Desktop"="c:\users\Natalia\AppData\Roaming\Yontoo\YontooDesktop.exe" [2013-05-01 42784] "Facebook Update"="c:\users\Natalia\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2013-05-19 138096] "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2013-08-01 3673696] "iCloudServices"="c:\program files\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-09-14 59720] "ApplePhotoStreams"="c:\program files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2013-09-15 59720] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016] "AVG_UI"="c:\program files\AVG\AVG2013\avgui.exe" [2013-08-15 4411440] "V0770Mon.exe"="c:\windows\V0770Mon.exe" [2012-06-01 32884] "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720] "HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2010-06-09 49208] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2013-05-01 421888] "iTunesHelper"="d:\program files\iTunes\iTunesHelper.exe" [2013-10-01 152392] . c:\users\Natalia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2006-10-26 98632] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux2"=wdmaud.drv . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite] 2013-08-01 13:13 3673696 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IPLA!] 2013-03-13 16:47 21047208 ----a-w- c:\program files\ipla\ipla.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] 2013-10-01 00:23 152392 ----a-w- d:\program files\iTunes\iTunesHelper.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ooVoo.exe] 2013-02-06 09:09 28469312 ----a-w- c:\program files\ooVoo\ooVoo.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] 2013-05-01 01:59 421888 ----a-w- c:\program files\QuickTime\QTTask.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] 2013-07-25 06:58 20684656 ----a-r- c:\program files\Skype\Phone\Skype.exe . R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-07-25 162672] R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x] R3 mcdevice;mcdevice;c:\windows\system32\DRIVERS\mcdevice.sys [2011-05-19 331072] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224] R3 WatAdminSvc;Usługa Technologie aktywacji systemu Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2013-01-06 1343400] S0 AVGIDSHX;AVGIDSHX;c:\windows\system32\DRIVERS\avgidshx.sys [2013-07-19 60216] S0 Avglogx;AVG Logging Driver;c:\windows\system32\DRIVERS\avglogx.sys [2013-07-19 246072] S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [2013-09-04 39224] S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdriverx.sys [2013-07-19 208184] S1 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys [2013-09-09 22328] S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [2013-07-19 171320] S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [2013-03-21 182072] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-18 176128] S2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2013\avgidsagent.exe [2013-07-04 4939312] S2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2013\avgwdsvc.exe [2013-07-23 283136] S2 Yontoo Desktop Updater;Yontoo Desktop Updater;c:\program files\Yontoo\Y2Desktop.Updater.exe [2013-05-01 23552] S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-10-12 243128] S3 RTL8167;Sterownik Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776] S3 V0770Vid;Live! Cam Sync HD VF0770 Driver;c:\windows\system32\DRIVERS\V0770Vid.sys [2012-06-01 325376] . . [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2013-10-05 13:30 1185744 ----a-w- c:\program files\Google\Chrome\Application\30.0.1599.69\Installer\chrmstp.exe . Zawartość folderu 'Zaplanowane zadania' . 2013-10-14 c:\windows\Tasks\a2zLyrics-15-chromeinstaller.job - c:\program files\a2zLyrics-15\a2zLyrics-15-chromeinstaller.exe [2013-10-12 07:04] . 2013-10-14 c:\windows\Tasks\a2zLyrics-15-codedownloader.job - c:\program files\a2zLyrics-15\a2zLyrics-15-codedownloader.exe [2013-10-12 07:04] . 2013-10-14 c:\windows\Tasks\a2zLyrics-15-enabler.job - c:\program files\a2zLyrics-15\a2zLyrics-15-enabler.exe [2013-10-12 07:04] . 2013-10-14 c:\windows\Tasks\a2zLyrics-15-firefoxinstaller.job - c:\program files\a2zLyrics-15\a2zLyrics-15-firefoxinstaller.exe [2013-10-12 07:04] . 2013-10-14 c:\windows\Tasks\a2zLyrics-15-updater.job - c:\program files\a2zLyrics-15\a2zLyrics-15-updater.exe [2013-10-12 07:05] . 2013-10-14 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-12 16:15] . 2013-10-13 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-738174641-4256900879-461992290-1000Core.job - c:\users\Natalia\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-05-19 16:00] . 2013-10-14 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-738174641-4256900879-461992290-1000UA.job - c:\users\Natalia\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-05-19 16:00] . 2013-10-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2013-01-06 09:10] . 2013-10-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2013-01-06 09:10] . . ------- Skan uzupełniający ------- . uStart Page = hxxp://search.babylon.com/?babsrc=HP_ss_din2g&mntrId=82A3001FD0528D5D&affID=119357&tt=040713_ifrmful&tsp=4934 uInternet Settings,ProxyOverride = *.local IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000 FF - ProfilePath - c:\users\Natalia\AppData\Roaming\Mozilla\Firefox\Profiles\vbm75ov2.default\ . - - - - USUNIĘTO PUSTE WPISY - - - - . MSConfigStartUp-SweetIM - c:\program files\SweetIM\Messenger\SweetIM.exe MSConfigStartUp-Sweetpacks Communicator - c:\program files\SweetIM\Communicator\SweetPacksUpdateManager.exe MSConfigStartUp-VoiceMaster - c:\program files\VoiceMaster\VoiceMaster.exe AddRemove-{20E23A40-38E5-4DD6-B738-BC8097AE66B6}_is1 - e:\program files\FTL\unins000.exe . . . --------------------- ZABLOKOWANE KLUCZE REJESTRU --------------------- . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Czas ukończenia: 2013-10-14 10:08:44 ComboFix-quarantined-files.txt 2013-10-14 08:08 . Przed: 3 381 301 248 bajtów wolnych Po: 3 285 884 928 bajtów wolnych . - - End Of File - - E9030FE4A11D8E1C2FF353D8E64A7E77 A36C5E4F47E84449FF07ED3517B43A31

przez **Pangia** w 14 Paź 2013, 10:59

Re: [Help] Procesor skacze do 100%!

przez Pangia w 14 Paź 2013, 10:59

Po pierwsze primo, nie kojarzę nikogo, kto by Ci tutaj rozczytał ten log w 100% poprawnie.
Po drugie primo, Combofix to nie zabawka, tylko narzędzie automatycznie usuwające wszystkie pliki, które uzna za podejrzane i bardzo łatwo nim zaj♥bać Windowsa. Do kontrolnego sprawdzania masz OTL i Gmera.
Po trzecie secundo, zamiast rozjeżdżać kompa Combofixem lepiej było po prostu sprawdzić, czy na innej przeglądarce dzieje się to samo (nic o tym nie napisałeś, ale chyba to próbowałeś, bo w logu widać jakieś odniesienia do instalatorów Firefoxa i Chrome'a).
Po czwarte primo:

sms216 napisał(a):Dzieje sie tak gdy włącza się nowa strona w internecie, a nie mówiąć już o tym jak gram w grę.

Przy jednordzeniowym procesorze nie jest to nic dziwnego (nie wiem jednak, co masz w kompie, ale pewnie coś lepszego, skoro masz Win 7 Pro).
Po piąte primo, z tego co widzę i tak masz pełno śmieci na kompie, więc nie dziwię się, że coś szwankuje.
Po szóste primo, wiem, że tak się nie wylicza, ale tak mi było wygodnie.

Wnioski:
Zrób logi z OTL (pozaznaczaj przedtem opcje tak jak na tym obrazku - jak tego nie zrobisz, to i tak później będą Ci kazali w ten sposób go ustawić, więc zaoszczędzisz czas robiąc od razu poprawne logi), log z Gmera i idź z nimi na jakieś komputerowe forum (forum.instalki.pl, forum.dobreprogramy.pl, searchengines.pl - coś tego typu)

Proszę państwa, sto pięćdziesiąt kilometrów na godzinę w ciągu kilku sekund, wspaniały wynik. Gdyby w ten sposób można było wypie*dolić z polskiej polityki tych wszystkich śmieci z Okrągłego Stołu, Leszka Millera, byłoby… cudownie i każdemu bym ku*wa kupił po takim Ferrari, byleby w piz*u pojechali tym PROSTO do swojego ukochanego… Izraela. SYJONIŚCI Europy, jedźcie do siebie! Pozdrawiam, Zbigniew Stonoga. Nie jestem antysemitą!

przez **sms216** w 14 Paź 2013, 11:59

Re: [Help] Procesor skacze do 100%!

przez sms216 w 14 Paź 2013, 11:59

Kod: Zaznacz wszystko: OTL logfile created on: 2013-10-14 11:42:46 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Natalia\Downloads Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16721) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 1,92 Gb Available Physical Memory | 64,12% Memory free 6,00 Gb Paging File | 4,36 Gb Available in Paging File | 72,79% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 34,18 Gb Total Space | 3,44 Gb Free Space | 10,05% Space Free | Partition Type: NTFS Drive D: | 58,59 Gb Total Space | 8,71 Gb Free Space | 14,87% Space Free | Partition Type: NTFS Drive E: | 140,10 Gb Total Space | 77,32 Gb Free Space | 55,19% Space Free | Partition Type: NTFS Drive G: | 465,76 Gb Total Space | 270,74 Gb Free Space | 58,13% Space Free | Partition Type: NTFS Computer Name: HOME | User Name: Natalia | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2013-10-14 11:41:24 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Natalia\Downloads\OTL.exe PRC - [2013-10-12 17:47:29 | 001,862,536 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe PRC - [2013-10-07 16:36:24 | 000,274,840 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2013-09-15 14:34:06 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe PRC - [2013-09-14 03:38:54 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe PRC - [2013-09-14 03:27:52 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Internet Services\APSDaemon.exe PRC - [2013-08-15 11:53:50 | 004,411,440 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgui.exe PRC - [2013-07-23 19:09:28 | 000,283,136 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgwdsvc.exe PRC - [2013-07-10 01:33:22 | 000,452,144 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgcsrvx.exe PRC - [2013-07-04 15:53:28 | 000,763,952 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgrsx.exe PRC - [2013-07-04 15:53:26 | 001,117,744 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgnsx.exe PRC - [2013-07-04 15:53:10 | 004,939,312 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgidsagent.exe PRC - [2013-05-11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2013-05-01 06:11:08 | 000,042,784 | ---- | M] (Yontoo LLC) -- C:\Users\Natalia\AppData\Roaming\Yontoo\YontooDesktop.exe PRC - [2013-05-01 06:11:08 | 000,023,552 | ---- | M] (Microsoft) -- C:\Program Files\Yontoo\Y2Desktop.Updater.exe PRC - [2013-04-01 16:59:25 | 004,288,048 | ---- | M] () -- C:\Program Files\Pando Networks\Media Booster\PMB.exe PRC - [2013-03-18 02:38:48 | 000,799,280 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgemcx.exe PRC - [2012-11-23 04:48:41 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2012-06-01 10:22:32 | 000,032,884 | ---- | M] (Creative Technology Ltd.) -- C:\Windows\V0770Mon.exe PRC - [2011-02-25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009-08-18 03:36:36 | 000,348,160 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe PRC - [2009-08-18 03:36:08 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2013-10-14 10:33:19 | 000,013,600 | ---- | M] () -- C:\Users\Natalia\AppData\Roaming\Yontoo\dat\Desktop.OS.Plugin.dll MOD - [2013-10-12 17:47:28 | 016,233,864 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_9_900_117.dll MOD - [2013-10-11 03:32:53 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ef0a534be135cd8f0d99d938d8b1814a\System.Windows.Forms.ni.dll MOD - [2013-10-11 03:32:25 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\29f3ae8d313e62b4daed1107ccd29f9f\System.Configuration.ni.dll MOD - [2013-10-07 16:36:23 | 003,279,768 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2013-09-14 01:51:02 | 000,087,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Internet Services\zlib1.dll MOD - [2013-09-14 01:50:36 | 001,242,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Internet Services\libxml2.dll MOD - [2013-08-15 13:45:04 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll MOD - [2013-08-15 13:44:32 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll MOD - [2013-08-15 13:44:22 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll MOD - [2013-07-22 00:48:15 | 002,052,096 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.dll MOD - [2013-07-22 00:48:15 | 000,425,984 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll MOD - [2013-07-11 03:28:42 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll MOD - [2013-07-03 01:09:05 | 005,283,840 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll MOD - [2013-04-01 16:59:25 | 004,288,048 | ---- | M] () -- C:\Program Files\Pando Networks\Media Booster\PMB.exe MOD - [2012-10-11 22:56:46 | 000,087,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll MOD - [2012-10-11 22:56:22 | 001,242,512 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll MOD - [2012-10-05 12:53:24 | 003,198,976 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll MOD - [2010-11-13 04:39:47 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll MOD - [2010-11-05 03:58:10 | 000,114,688 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll MOD - [2010-11-05 03:58:09 | 000,385,024 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - File not found [Auto | Running] -- C:\Program Files\Yontoo\Y2Desktop.Updater.exe C:\Users\Natalia\AppData\Roaming\Yontoo\YontooDesktop.exe -- (Yontoo Desktop Updater) SRV - [2013-10-12 18:15:51 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013-10-07 16:36:24 | 000,118,680 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2013-07-25 08:52:52 | 000,162,672 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2013-07-23 19:09:28 | 000,283,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2013\avgwdsvc.exe -- (avgwd) SRV - [2013-07-04 15:53:10 | 004,939,312 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2013\avgidsagent.exe -- (AVGIDSAgent) SRV - [2013-05-27 06:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2013-05-11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2013-01-06 16:02:52 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc) SRV - [2009-08-18 03:36:08 | 000,176,128 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility) SRV - [2009-07-14 03:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc) SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009-07-14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Natalia\AppData\Local\Temp\catchme.sys -- (catchme) DRV - [2013-10-12 09:05:45 | 000,243,128 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV - [2013-09-10 01:34:48 | 000,022,328 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgidsshimx.sys -- (AVGIDSShim) DRV - [2013-09-05 01:43:42 | 000,039,224 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avgrkx86.sys -- (Avgrkx86) DRV - [2013-07-20 01:51:00 | 000,246,072 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avglogx.sys -- (Avglogx) DRV - [2013-07-20 01:50:56 | 000,208,184 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\System32\drivers\avgidsdriverx.sys -- (AVGIDSDriver) DRV - [2013-07-20 01:50:56 | 000,060,216 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avgidshx.sys -- (AVGIDSHX) DRV - [2013-07-20 01:50:50 | 000,171,320 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\System32\drivers\avgldx86.sys -- (Avgldx86) DRV - [2013-07-01 01:45:28 | 000,096,568 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avgmfx86.sys -- (Avgmfx86) DRV - [2013-03-21 03:08:24 | 000,182,072 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtdix.sys -- (Avgtdix) DRV - [2012-06-01 10:31:38 | 000,325,376 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\V0770Vid.sys -- (V0770Vid) DRV - [2011-05-19 17:15:56 | 000,331,072 | ---- | M] (ShiningMorning Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mcdevice.sys -- (mcdevice) DRV - [2010-11-20 14:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus) DRV - [2010-11-20 14:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt) DRV - [2010-11-20 14:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc) DRV - [2010-11-20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV - [2010-11-20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb) DRV - [2010-11-20 11:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID) DRV - [2010-11-20 11:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap) DRV - [2009-08-18 04:48:06 | 004,994,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag) DRV - [2009-07-14 01:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\serial.sys -- (Serial) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10025&barid={A652C865-5F4F-11E2-A80C-001FD0528D5D} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_ss_din2g&mntrId=82A3001FD0528D5D&affID=119357&tt=040713_ifrmful&tsp=4934 IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&babsrc=SP_ss_din2g&mntrId=82A3001FD0528D5D&affID=119357&tt=040713_ifrmful&tsp=4934 IE - HKCU\..\SearchScopes\{A02BE3E5-894C-4C6C-9E1B-17F84106D67F}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=48D83446-7E23-449A-8F30-165A0F47C703&apn_sauid=9D6F72B4-697A-4768-AAB8-67182E563F2D IE - HKCU\..\SearchScopes\{B224AA02-F7C8-3A2B-859F-560B80767E4A}: "URL" = http://kl.startnow.com/s/?q={searchTerms}&src=defsearch&provider=&provider_name=yahoo&provider_code=&partner_id=693&product_id=876&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.5.0&install_country=PL&install_date=20130219&user_guid=3949140A1A5543399004E269B867C73E&machine_id=aacd3b46e1028a8c59f9ea1eb576b979&browser=IE&os=win&os_version=6.1-x86-SP1&iesrc={referrer:source} IE - HKCU\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10025&barid={A652C865-5F4F-11E2-A80C-001FD0528D5D} IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledAddons: acec7c99-b789-494a-9cd9-cf2130be4fe2%407837d0b0-c968-42e7-b0ac-b09c864a5978.com:0.92.5 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:24.0 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nexon.net/NxGame: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Natalia\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 24.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 24.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013-08-12 23:28:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Natalia\AppData\Roaming\mozilla\Extensions [2013-05-09 15:33:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Natalia\AppData\Roaming\mozilla\Firefox\Profiles\extensions [2013-10-13 09:57:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Natalia\AppData\Roaming\mozilla\Firefox\Profiles\vbm75ov2.default\extensions [2013-10-13 09:57:13 | 000,000,000 | ---D | M] ("a2zLyrics-15") -- C:\Users\Natalia\AppData\Roaming\mozilla\Firefox\Profiles\vbm75ov2.default\extensions\acec7c99-b789-494a-9cd9-cf2130be4fe2@7837d0b0-c968-42e7-b0ac-b09c864a5978.com [2013-10-14 08:48:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Natalia\AppData\Roaming\mozilla\Firefox\Profiles\vbm75ov2.default\extensions\acec7c99-b789-494a-9cd9-cf2130be4fe2@7837d0b0-c968-42e7-b0ac-b09c864a5978.com\extensionData [2013-10-14 08:48:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Natalia\AppData\Roaming\mozilla\Firefox\Profiles\vbm75ov2.default\extensions\acec7c99-b789-494a-9cd9-cf2130be4fe2@7837d0b0-c968-42e7-b0ac-b09c864a5978.com\extensionData\plugins [2013-10-14 08:48:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Natalia\AppData\Roaming\mozilla\Firefox\Profiles\vbm75ov2.default\extensions\acec7c99-b789-494a-9cd9-cf2130be4fe2@7837d0b0-c968-42e7-b0ac-b09c864a5978.com\extensionData\userCode [2013-04-11 17:54:38 | 000,197,614 | ---- | M] () (No name found) -- C:\Users\Natalia\AppData\Roaming\mozilla\firefox\profiles\extensions\[email protected] [2013-10-07 16:36:18 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2013-10-07 16:36:18 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\[email protected] [2013-10-07 16:36:18 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions [2013-10-07 16:36:24 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}, CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\30.0.1599.69\pdf.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll CHR - plugin: Java(TM) Platform SE 7 U17 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll CHR - plugin: Nexon Game Controller (Enabled) = C:\ProgramData\NexonUS\NGM\npNxGameUS.dll CHR - plugin: Facebook Video Calling Plugin (Enabled) = C:\Users\Natalia\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll CHR - plugin: Java Deployment Toolkit 7.0.170.2 (Enabled) = C:\Windows\system32\npDeployJava1.dll CHR - plugin: iTunes Application Detector (Enabled) = D:\Program Files\iTunes\Mozilla Plugins\npitunes.dll CHR - Extension: Dokumenty Google = C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\ CHR - Extension: Dysk Google = C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: YouTube = C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: Szukaj w Google = C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: a2zLyrics-15 = C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Default\Extensions\loblblopcimdjlmbialgooenabfognaf\1.25.5_0\crossrider CHR - Extension: a2zLyrics-15 = C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Default\Extensions\loblblopcimdjlmbialgooenabfognaf\1.25.5_0\ CHR - Extension: Yontoo = C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc\1.0.3_1\ CHR - Extension: Chrome In-App Payments service = C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\ CHR - Extension: Gmail = C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2013-10-14 10:02:59 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (a2zLyrics-15) - {11111111-1111-1111-1111-110411391105} - C:\Program Files\a2zLyrics-15\a2zLyrics-15-bho.dll (Showpass) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [AVG_UI] C:\Program Files\AVG\AVG2013\avgui.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [V0770Mon.exe] C:\Windows\V0770Mon.exe (Creative Technology Ltd.) O4 - HKCU..\Run: [ApplePhotoStreams] C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.) O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd) O4 - HKCU..\Run: [Facebook Update] C:\Users\Natalia\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.) O4 - HKCU..\Run: [iCloudServices] C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe () O4 - HKCU..\Run: [Yontoo Desktop] C:\Users\Natalia\AppData\Roaming\Yontoo\YontooDesktop.exe (Yontoo LLC) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.100 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D7EB13E3-845F-4C91-B7D4-0EA92EFC2E05}: DhcpNameServer = 192.168.1.100 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2012-01-21 15:19:38 | 000,000,000 | ---D | M] - D:\auto -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2013-10-14 10:08:52 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2013-10-14 10:08:46 | 000,000,000 | ---D | C] -- C:\Windows\temp [2013-10-14 10:08:46 | 000,000,000 | ---D | C] -- C:\Users\Natalia\AppData\Local\temp [2013-10-14 09:45:03 | 000,000,000 | ---D | C] -- C:\ComboFix [2013-10-14 09:43:56 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe [2013-10-14 09:43:56 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe [2013-10-14 09:43:56 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe [2013-10-14 09:40:50 | 000,000,000 | ---D | C] -- C:\Qoobox [2013-10-14 09:40:10 | 000,000,000 | ---D | C] -- C:\Windows\erdnt [2013-10-12 09:05:45 | 000,243,128 | ---- | C] (Disc Soft Ltd) -- C:\Windows\System32\drivers\dtsoftbus01.sys [2013-10-12 09:04:32 | 000,000,000 | ---D | C] -- C:\Program Files\a2zLyrics-15 [2013-10-12 09:04:09 | 000,000,000 | ---D | C] -- C:\Users\Natalia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite [2013-10-12 09:03:54 | 000,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite [2013-10-11 03:06:07 | 002,706,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2013-10-11 03:06:06 | 002,876,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2013-10-11 03:06:05 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2013-10-11 03:06:05 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2013-10-11 03:06:05 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2013-10-11 03:06:04 | 000,493,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2013-10-11 03:06:04 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2013-10-11 03:06:04 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2013-10-11 03:06:04 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2013-10-11 03:06:04 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2013-10-10 06:47:56 | 003,969,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2013-10-10 06:47:56 | 003,914,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2013-10-10 06:47:56 | 000,619,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tdh.dll [2013-10-10 06:47:54 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidclass.sys [2013-10-10 06:47:54 | 000,025,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidparse.sys [2013-10-10 06:47:52 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll [2013-10-10 06:47:51 | 000,434,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scavengeui.dll [2013-10-10 06:47:51 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll [2013-10-10 06:47:51 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll [2013-10-10 06:47:51 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll [2013-10-10 06:47:51 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dciman32.dll [2013-10-10 06:47:48 | 002,348,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2013-10-07 16:49:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud [2013-10-07 16:48:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes [2013-10-07 16:47:54 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2013-10-07 16:47:54 | 000,000,000 | ---D | C] -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1 [2013-10-07 16:42:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime [2013-10-07 16:42:11 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime [2013-10-07 16:36:17 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2013-09-24 21:07:39 | 000,000,000 | R--D | C] -- C:\Program Files\Skype [2013-09-24 21:07:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2013-09-24 21:07:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2013-09-16 14:09:57 | 000,000,000 | ---D | C] -- C:\Users\Natalia\AppData\Local\ElevatedDiagnostics [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2013-10-14 11:27:00 | 000,001,038 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013-10-14 11:25:21 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013-10-14 11:15:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013-10-14 10:40:15 | 000,025,760 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013-10-14 10:40:15 | 000,025,760 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013-10-14 10:39:50 | 000,697,674 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2013-10-14 10:39:50 | 000,615,810 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2013-10-14 10:39:50 | 000,134,784 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2013-10-14 10:39:50 | 000,106,190 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2013-10-14 10:33:13 | 000,001,930 | ---- | M] () -- C:\Windows\tasks\a2zLyrics-15-chromeinstaller.job [2013-10-14 10:33:13 | 000,001,856 | ---- | M] () -- C:\Windows\tasks\a2zLyrics-15-firefoxinstaller.job [2013-10-14 10:33:13 | 000,001,328 | ---- | M] () -- C:\Windows\tasks\a2zLyrics-15-updater.job [2013-10-14 10:33:13 | 000,001,034 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013-10-14 10:33:12 | 000,001,234 | ---- | M] () -- C:\Windows\tasks\a2zLyrics-15-codedownloader.job [2013-10-14 10:33:12 | 000,001,134 | ---- | M] () -- C:\Windows\tasks\a2zLyrics-15-enabler.job [2013-10-14 10:33:00 | 2414,583,808 | -HS- | M] () -- C:\hiberfil.sys [2013-10-14 10:02:59 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts [2013-10-14 09:05:01 | 000,000,936 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-738174641-4256900879-461992290-1000UA.job [2013-10-13 18:05:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-738174641-4256900879-461992290-1000Core.job [2013-10-12 18:15:46 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2013-10-12 18:15:45 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [2013-10-12 09:05:45 | 000,243,128 | ---- | M] (Disc Soft Ltd) -- C:\Windows\System32\drivers\dtsoftbus01.sys [2013-10-12 09:04:09 | 000,001,743 | ---- | M] () -- C:\Users\Natalia\Desktop\DAEMON Tools Lite.lnk [2013-10-12 03:17:39 | 000,414,792 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2013-10-09 20:35:25 | 000,040,154 | ---- | M] () -- C:\Users\Natalia\Desktop\1383734_532401150182310_2113976683_n.jpg [2013-10-07 16:48:12 | 000,001,558 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [2013-10-07 16:42:15 | 000,001,815 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2013-10-07 16:20:21 | 000,006,815 | -HS- | M] () -- C:\Users\Natalia\Desktop\Folder.jpg [2013-10-07 16:20:21 | 000,006,815 | -HS- | M] () -- C:\Users\Natalia\Desktop\AlbumArt_{E5B662DD-E0BB-4CC8-BA86-803F245707AA}_Large.jpg [2013-10-07 16:20:21 | 000,001,970 | -HS- | M] () -- C:\Users\Natalia\Desktop\AlbumArtSmall.jpg [2013-10-07 16:20:21 | 000,001,970 | -HS- | M] () -- C:\Users\Natalia\Desktop\AlbumArt_{E5B662DD-E0BB-4CC8-BA86-803F245707AA}_Small.jpg [2013-10-05 15:34:39 | 000,002,129 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2013-09-24 21:07:39 | 000,002,505 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk [2013-09-23 17:09:14 | 003,368,898 | ---- | M] () -- C:\Users\Natalia\Desktop\IMG_2090.JPG [2013-09-23 17:09:11 | 002,473,257 | ---- | M] () -- C:\Users\Natalia\Desktop\IMG_2091.JPG [2013-09-23 01:28:12 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2013-09-23 01:27:53 | 000,493,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2013-09-23 01:27:49 | 002,876,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2013-09-23 01:27:49 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2013-09-23 01:27:48 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2013-09-23 01:27:48 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2013-09-23 01:27:48 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2013-09-23 01:27:48 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2013-09-21 05:30:24 | 002,706,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2013-09-21 04:39:47 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [color=#E56717]========== Files Created - No Company Name ==========[/color] [2013-10-14 09:43:56 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe [2013-10-14 09:43:56 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe [2013-10-14 09:43:56 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2013-10-14 09:43:56 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2013-10-14 09:43:56 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2013-10-12 09:05:03 | 000,001,328 | ---- | C] () -- C:\Windows\tasks\a2zLyrics-15-updater.job [2013-10-12 09:04:58 | 000,001,134 | ---- | C] () -- C:\Windows\tasks\a2zLyrics-15-enabler.job [2013-10-12 09:04:53 | 000,001,234 | ---- | C] () -- C:\Windows\tasks\a2zLyrics-15-codedownloader.job [2013-10-12 09:04:39 | 000,001,856 | ---- | C] () -- C:\Windows\tasks\a2zLyrics-15-firefoxinstaller.job [2013-10-12 09:04:34 | 000,001,930 | ---- | C] () -- C:\Windows\tasks\a2zLyrics-15-chromeinstaller.job [2013-10-12 09:04:09 | 000,001,743 | ---- | C] () -- C:\Users\Natalia\Desktop\DAEMON Tools Lite.lnk [2013-10-09 20:35:25 | 000,040,154 | ---- | C] () -- C:\Users\Natalia\Desktop\1383734_532401150182310_2113976683_n.jpg [2013-10-07 16:48:12 | 000,001,558 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2013-10-07 16:42:15 | 000,001,815 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2013-10-07 16:20:22 | 000,006,815 | -HS- | C] () -- C:\Users\Natalia\Desktop\Folder.jpg [2013-10-07 16:20:22 | 000,006,815 | -HS- | C] () -- C:\Users\Natalia\Desktop\AlbumArt_{E5B662DD-E0BB-4CC8-BA86-803F245707AA}_Large.jpg [2013-10-07 16:20:22 | 000,001,970 | -HS- | C] () -- C:\Users\Natalia\Desktop\AlbumArtSmall.jpg [2013-10-07 16:20:22 | 000,001,970 | -HS- | C] () -- C:\Users\Natalia\Desktop\AlbumArt_{E5B662DD-E0BB-4CC8-BA86-803F245707AA}_Small.jpg [2013-09-24 21:07:39 | 000,002,505 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk [2013-09-23 17:08:31 | 003,368,898 | ---- | C] () -- C:\Users\Natalia\Desktop\IMG_2090.JPG [2013-09-23 17:08:31 | 002,473,257 | ---- | C] () -- C:\Users\Natalia\Desktop\IMG_2091.JPG [2013-08-15 17:35:03 | 000,010,240 | ---- | C] () -- C:\Windows\System32\vidx16.dll [2013-07-20 00:06:27 | 000,003,584 | ---- | C] () -- C:\Users\Natalia\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2013-07-10 20:54:10 | 000,000,187 | ---- | C] () -- C:\Windows\yttupax.dll [2013-02-19 20:38:21 | 000,178,688 | ---- | C] () -- C:\Windows\System32\unrar.dll [2013-01-07 17:35:37 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe [2013-01-05 18:22:23 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2013-07-26 03:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009-07-14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2013-07-05 17:47:02 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\0D1F1S1C1P0P1C1F1N1C1T1H2UtF1E1I [2013-04-01 14:47:11 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\Altaron [2013-01-05 19:39:47 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\AVG2013 [2013-01-06 11:26:37 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\Babylon [2013-10-12 11:00:27 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\DAEMON Tools Lite [2013-04-21 19:54:27 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\efile.epity2012 [2013-06-15 22:47:12 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\File Scout [2013-10-12 15:19:58 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\GG [2013-07-21 13:14:18 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\ipla [2013-04-01 19:50:58 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\LolClient [2013-05-22 17:06:11 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\Mp3tag [2013-02-12 11:56:58 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\ooVoo Details [2013-02-20 23:06:35 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\PhotoScape [2013-01-08 18:16:25 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\TFP [2013-08-23 23:03:37 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\Tibia [2013-02-19 16:55:43 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\Tibiacast [2013-01-05 19:39:22 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\TuneUp Software [2013-10-13 17:53:06 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\uTorrent [2013-03-03 19:06:20 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\WordToPDF [2013-10-14 10:33:20 | 000,000,000 | ---D | M] -- C:\Users\Natalia\AppData\Roaming\Yontoo [color=#E56717]========== Purity Check ==========[/color] < End of report >

extras :

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2013-10-14 11:42:46 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Natalia\Downloads Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16721) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 1,92 Gb Available Physical Memory | 64,12% Memory free 6,00 Gb Paging File | 4,36 Gb Available in Paging File | 72,79% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 34,18 Gb Total Space | 3,44 Gb Free Space | 10,05% Space Free | Partition Type: NTFS Drive D: | 58,59 Gb Total Space | 8,71 Gb Free Space | 14,87% Space Free | Partition Type: NTFS Drive E: | 140,10 Gb Total Space | 77,32 Gb Free Space | 55,19% Space Free | Partition Type: NTFS Drive G: | 465,76 Gb Total Space | 270,74 Gb Free Space | 58,13% Space Free | Partition Type: NTFS Computer Name: HOME | User Name: Natalia | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) https [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 "FirewallDisableNotify" = 0 "AntiVirusDisableNotify" = 0 "UpdatesDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = Reg Error: Unknown registry data type -- File not found "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0AEB7A37-9FA2-4766-86B6-53401BA39682}" = lport=58734 | protocol=17 | dir=in | name=pando media booster | "{0F4B2BA7-938E-4A79-B17B-FDED48465BE7}" = lport=58734 | protocol=6 | dir=in | name=pando media booster | "{2F9A95EB-F480-4BC7-B0CC-9392C5C1E468}" = lport=58734 | protocol=6 | dir=in | name=pando media booster | "{47403A24-0AB5-4577-AA43-D4B75731063A}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe | "{91B5B2E7-027F-4634-ACBC-2EF5F7EDF142}" = lport=58734 | protocol=17 | dir=in | name=pando media booster | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{023E6B50-107A-4750-ACA7-189EA60903E2}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | "{060D98E6-2D93-41C7-80BF-2022725E2F61}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | "{0B1F1D75-E873-4216-804B-D2CD48DD752B}" = protocol=17 | dir=in | app=c:\program files\hp\hp deskjet 1050 j410 series\bin\usbsetup.exe | "{1003CF02-63C7-4E3A-A9BC-083A892F40B4}" = dir=in | app=c:\users\natalia\appdata\local\facebook\video\skype\facebookvideocalling.exe | "{149B17F3-16DA-45C7-A03B-886E0DBE87B2}" = protocol=17 | dir=in | app=e:\program files\rockstar games\grand theft auto iv\launchgtaiv.exe | "{1BEAE560-02B2-4999-AE7E-7F4386DAE6CA}" = protocol=6 | dir=in | app=c:\program files\hp\hp deskjet 1050 j410 series\bin\usbsetup.exe | "{20C31748-E1EC-420F-B783-08FF338D2677}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | "{307091F6-CB33-4658-970E-633F91E52AA6}" = protocol=6 | dir=in | app=e:\program files\utorrent\utorrent.exe | "{45F3C3D1-A5B4-433F-928E-DC14B75B2D66}" = protocol=17 | dir=in | app=c:\programdata\nexonus\ngm\ngm.exe | "{4B46B75D-AAE1-4F80-967B-B5B30F2CE2C0}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{532B325F-F64F-4C64-8F03-E287910E4ACE}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe | "{5905DB85-892F-4B18-827B-BD25FDD37F6F}" = protocol=17 | dir=in | app=c:\program files\avg\avg2013\avgemcx.exe | "{5C220F67-B69C-4C3E-9B58-EA0AD894739A}" = protocol=6 | dir=in | app=c:\program files\avg\avg2013\avgnsx.exe | "{5DB8DA16-0CAC-4DD0-8724-AFC7FF22C0DE}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | "{60F5DF6A-65DF-40B7-9A0E-7FED4D288FA4}" = protocol=17 | dir=in | app=e:\program files\utorrent\utorrent.exe | "{620742EC-3D9A-4175-8A85-8BD2372EE09E}" = protocol=6 | dir=in | app=c:\program files\avg\avg2013\avgemcx.exe | "{67C389A3-F0F1-49F4-BA30-5D9DFFE1FF9A}" = dir=in | app=d:\program files\itunes\itunes.exe | "{6A9E4C88-3F12-40CE-B666-53F0BC6D3151}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{713445C0-4BAA-4A50-8E9B-6938EB7D8827}" = protocol=17 | dir=in | app=c:\program files\avg\avg2013\avgdiagex.exe | "{763E636B-7188-465A-861C-EC5CE14E2AE2}" = protocol=6 | dir=in | app=c:\windows\system32\msiexec.exe | "{845BBE30-6FBC-44C6-AF17-4AE1C91A850A}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | "{8538F2DB-0BDB-4AFD-A52E-1AB0C3645B47}" = protocol=17 | dir=in | app=c:\program files\avg\avg2013\avgnsx.exe | "{92904460-199E-4C59-9712-EC1E12458C58}" = protocol=6 | dir=in | app=e:\program files\rockstar games\rockstar games social club\rgsclauncher.exe | "{A19F8363-8BBA-4D50-9DA0-C635B38FD5B5}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{AA3F2689-D51A-47E4-9539-086747B5CD18}" = protocol=6 | dir=in | app=e:\program files\rockstar games\grand theft auto iv\launchgtaiv.exe | "{ABE5BE8A-A5DB-442A-A2AE-23B2F06CBB5B}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{B149AC35-2B81-46B6-B33D-2C24897379FD}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | "{B93D402A-40FB-4719-A336-7DFFCD3C0C06}" = protocol=17 | dir=in | app=c:\windows\system32\msiexec.exe | "{BC51898A-4596-4975-8DD0-49C481F34FB1}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | "{BF79FE48-71FA-44EF-B043-13DA235C0386}" = protocol=6 | dir=in | app=c:\program files\avg\avg2013\avgmfapx.exe | "{D9C2DDB8-837B-47A6-B76C-85783A4DF0D8}" = protocol=6 | dir=in | app=c:\programdata\nexonus\ngm\ngm.exe | "{DC590A06-1482-4638-9018-E73BC59EF6D1}" = protocol=6 | dir=in | app=c:\program files\avg\avg2013\avgdiagex.exe | "{DF15D3D5-8B75-49CE-B36F-B2C473CE2111}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{E565803D-3443-4445-AAB1-56ACA35BF5C8}" = protocol=17 | dir=in | app=c:\program files\avg\avg2013\avgmfapx.exe | "{FA07EC2D-CF9B-43BF-9CE1-EBFDBEC46602}" = protocol=17 | dir=in | app=e:\program files\rockstar games\rockstar games social club\rgsclauncher.exe | "TCP Query User{A8E7F0D4-0B32-4652-8B6B-089D8437DE17}C:\program files\oovoo\oovoo.exe" = protocol=6 | dir=in | app=c:\program files\oovoo\oovoo.exe | "TCP Query User{B72C4C07-4919-410E-9AC5-3B04DBFDF122}E:\program files\rockstar games\grand theft auto iv\gtaiv.exe" = protocol=6 | dir=in | app=e:\program files\rockstar games\grand theft auto iv\gtaiv.exe | "UDP Query User{8A392997-8A70-44FB-87B1-132C71A3DB96}E:\program files\rockstar games\grand theft auto iv\gtaiv.exe" = protocol=17 | dir=in | app=e:\program files\rockstar games\grand theft auto iv\gtaiv.exe | "UDP Query User{D56E76A7-8490-43DE-AD13-8AAB88C6330C}C:\program files\oovoo\oovoo.exe" = protocol=17 | dir=in | app=c:\program files\oovoo\oovoo.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0592EF96-69D8-4E4B-9CC9-88F58EA86F01}" = Apple Mobile Device Support "{089EC62B-72C9-490C-94BD-BA6B833A0EB2}}_is1" = e-pity 2012 wersja 4.0 "{08B3869E-D282-424C-9AFC-870E04A4BA14}" = Rockstar Games Social Club "{0C43FE6B-E881-4AFC-B384-4AEBC90047E8}" = SweetPacks bundle uninstaller "{1C8A4EE2-9D97-440F-9D8D-DA19C9657178}" = AVG 2013 "{20C6FF70-690B-4DF7-8F5D-269DD3A7FD23}" = iCloud "{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 17 "{321320E1-0E5A-36CB-9E52-F3B201B8C4D4}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{45E7C481-3EF4-4FCB-AF0B-19F70D618F0C}" = Worms 4 Mayhem "{46F044A5-CE8B-4196-984E-5BD6525E361D}" = Obsługa programów Apple "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.7 "{4E9B398A-8F39-410C-8200-7F5289CD7B02}_is1" = The Sims 3 Ultimate Bundle "{4f94b43a-8a00-4ac4-bb94-269cf24aef97}.sdb" = Dungeon Keeper 2 "{5628829F-3318-4DDA-988D-D301832F1611}" = Singles "{579BA58C-F33D-4970-9953-B94B43768AC3}" = Grand Theft Auto IV "{59E4543A-D49D-4489-B445-473D763C79AF}" = Microsoft Games for Windows - LIVE Redistributable "{5C90D8CF-F12A-41C6-9007-3B651A1F0D78}" = HP Deskjet 1050 J410 series Pomoc "{631E66F3-5BCC-4FF8-9F42-95AF0BFA38B7}" = AVG 2013 "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update "{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour "{889DF117-14D1-44EE-9F31-C5FB5D47F68B}" = Yontoo 2.053 "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007 "{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007 "{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007 "{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007 "{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007 "{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007 "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007 "{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007 "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007 "{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007 "{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007 "{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007 "{90120000-00B2-0409-0000-0000000FF1CE}" = Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs "{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007 "{924C3DC2-8E4E-432E-F973-9A2174A39774}" = saofe isave "{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends "{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster "{A785BBA7-3FB9-4D81-BC35-4A2028915ACB}" = Prey "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.05) "{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}" = HP Update "{B542F9A8-C674-4A45-AE35-CD8A4A3722F1}" = Tibiacast "{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime "{B92C5909-1D37-4C51-8397-A28BB28E5DC3}" = Facebook Video Calling 1.2.0.287 "{C2D4CD4A-AE20-40B3-8726-8ED1C03E8C15}" = Google Drive "{C3CB6DBD-26C8-4EE9-A7DA-E04A7D1225F2}" = HP Deskjet 1050 J410 series Podstawowe oprogramowanie urządzenia "{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}" = Internet Explorer Toolbar 4.6 by SweetPacks "{C41A8F61-0609-4D30-9160-B0CF107F5356}" = FireArc Arcade "{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86 "{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas "{D5ECE81A-02AC-41B1-89AB-0F4D4B958B49}" = HP Deskjet 1050 J410 series Badanie ulepszeń produktu "{E05D82D8-FE70-4228-B073-B0C07FE27595}" = iTunes "{EA2DB6E0-72C5-4ef9-A3A0-E6705F4A6A9E}" = Nexon Game Manager "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}" = ooVoo "a2zLyrics-15" = a2zLyrics-15 "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "AVG" = AVG 2013 "Best Friends Forever_is1" = Best Friends Forever 1.03a "CCleaner" = CCleaner "Creative VF0770" = Live! Cam Sync HD VF0770 Driver (1.00.02.00) "DAEMON Tools Lite" = DAEMON Tools Lite "ENTERPRISE" = Microsoft Office Enterprise 2007 "Google Chrome" = Google Chrome "Gunzodus 9.8 9.80" = Gunzodus 9.8 9.80 "HP Photo Creations" = HP Photo Creations "ipla" = ipla 2.6.2 "KLiteCodecPack_is1" = K-Lite Codec Pack 9.7.5 (Full) "LastFM_is1" = Last.fm Scrobbler 2.1.35 "MapleStory" = MapleStory "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "Mozilla Firefox 24.0 (x86 en-US)" = Mozilla Firefox 24.0 (x86 en-US) "MozillaMaintenanceService" = Mozilla Maintenance Service "Mp3tag" = Mp3tag v2.55a "PIT Format 2012_is1" = PIT Format 2012 "Tibia_is1" = Tibia "Unlocker" = Unlocker 1.9.2 "uTorrent" = µTorrent "WinRAR archiver" = WinRAR 4.20 (32-bitowy) "Worms Armageddon" = Worms Armageddon [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "CCleaner Packages" = CCleaner Packages "GG" = GG "Torch" = Torch [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2013-10-13 07:49:47 | Computer Name = HOME | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: firefox.exe, wersja: 24.0.0.5001, sygnatura czasowa: 0x522fd29f Nazwa modułu powodującego błąd: xul.dll, wersja: 24.0.0.5001, sygnatura czasowa: 0x522fd1a4 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x001b72a8 Identyfikator procesu powodującego błąd: 0x173c Godzina uruchomienia aplikacji powodującej błąd: 0x01cec8083640fe46 Ścieżka aplikacji powodującej błąd: C:\Program Files\Mozilla Firefox\firefox.exe Ścieżka modułu powodującego błąd: C:\Program Files\Mozilla Firefox\xul.dll Identyfikator raportu: 8ef1fe65-33fd-11e3-a6a4-001fd0528d5d Error - 2013-10-13 11:52:20 | Computer Name = HOME | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: mplayer2.exe, wersja: 6.0.2.902, sygnatura czasowa: 0x35ed5db7 Nazwa modułu powodującego błąd: mplayer2.exe, wersja: 6.0.2.902, sygnatura czasowa: 0x35ed5db7 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000075a3 Identyfikator procesu powodującego błąd: 0x1124 Godzina uruchomienia aplikacji powodującej błąd: 0x01cec82c32a74b2c Ścieżka aplikacji powodującej błąd: C:\PROGRA~1\Windows Media Player\mplayer2.exe Ścieżka modułu powodującego błąd: C:\PROGRA~1\Windows Media Player\mplayer2.exe Identyfikator raportu: 712ba820-341f-11e3-a6a4-001fd0528d5d Error - 2013-10-13 11:52:52 | Computer Name = HOME | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: mplayer2.exe, wersja: 6.0.2.902, sygnatura czasowa: 0x35ed5db7 Nazwa modułu powodującego błąd: mplayer2.exe, wersja: 6.0.2.902, sygnatura czasowa: 0x35ed5db7 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000075a3 Identyfikator procesu powodującego błąd: 0x10f8 Godzina uruchomienia aplikacji powodującej błąd: 0x01cec82c4654d667 Ścieżka aplikacji powodującej błąd: C:\PROGRA~1\Windows Media Player\mplayer2.exe Ścieżka modułu powodującego błąd: C:\PROGRA~1\Windows Media Player\mplayer2.exe Identyfikator raportu: 841d846a-341f-11e3-a6a4-001fd0528d5d Error - 2013-10-13 11:53:20 | Computer Name = HOME | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: mplayer2.exe, wersja: 6.0.2.902, sygnatura czasowa: 0x35ed5db7 Nazwa modułu powodującego błąd: mplayer2.exe, wersja: 6.0.2.902, sygnatura czasowa: 0x35ed5db7 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000075a3 Identyfikator procesu powodującego błąd: 0xe24 Godzina uruchomienia aplikacji powodującej błąd: 0x01cec82c5710813e Ścieżka aplikacji powodującej błąd: C:\PROGRA~1\Windows Media Player\mplayer2.exe Ścieżka modułu powodującego błąd: C:\PROGRA~1\Windows Media Player\mplayer2.exe Identyfikator raportu: 94d4d9e1-341f-11e3-a6a4-001fd0528d5d Error - 2013-10-13 11:53:23 | Computer Name = HOME | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: mplayer2.exe, wersja: 6.0.2.902, sygnatura czasowa: 0x35ed5db7 Nazwa modułu powodującego błąd: mplayer2.exe, wersja: 6.0.2.902, sygnatura czasowa: 0x35ed5db7 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000075a3 Identyfikator procesu powodującego błąd: 0x15b8 Godzina uruchomienia aplikacji powodującej błąd: 0x01cec82c58fadcb7 Ścieżka aplikacji powodującej błąd: C:\PROGRA~1\Windows Media Player\mplayer2.exe Ścieżka modułu powodującego błąd: C:\PROGRA~1\Windows Media Player\mplayer2.exe Identyfikator raportu: 96bf355a-341f-11e3-a6a4-001fd0528d5d Error - 2013-10-13 11:54:07 | Computer Name = HOME | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: mplayer2.exe, wersja: 6.0.2.902, sygnatura czasowa: 0x35ed5db7 Nazwa modułu powodującego błąd: mplayer2.exe, wersja: 6.0.2.902, sygnatura czasowa: 0x35ed5db7 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000075a3 Identyfikator procesu powodującego błąd: 0x88c Godzina uruchomienia aplikacji powodującej błąd: 0x01cec82c72ecbf0e Ścieżka aplikacji powodującej błąd: C:\PROGRA~1\Windows Media Player\mplayer2.exe Ścieżka modułu powodującego błąd: C:\PROGRA~1\Windows Media Player\mplayer2.exe Identyfikator raportu: b0b117b1-341f-11e3-a6a4-001fd0528d5d Error - 2013-10-13 11:54:40 | Computer Name = HOME | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: mplayer2.exe, wersja: 6.0.2.902, sygnatura czasowa: 0x35ed5db7 Nazwa modułu powodującego błąd: mplayer2.exe, wersja: 6.0.2.902, sygnatura czasowa: 0x35ed5db7 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x000075a3 Identyfikator procesu powodującego błąd: 0x1690 Godzina uruchomienia aplikacji powodującej błąd: 0x01cec82c86b866d5 Ścieżka aplikacji powodującej błąd: C:\PROGRA~1\Windows Media Player\mplayer2.exe Ścieżka modułu powodującego błąd: C:\PROGRA~1\Windows Media Player\mplayer2.exe Identyfikator raportu: c47cbf78-341f-11e3-a6a4-001fd0528d5d Error - 2013-10-14 05:22:19 | Computer Name = HOME | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: Continuously busy for more than a second Error - 2013-10-14 05:22:19 | Computer Name = HOME | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledEvent 9718 Error - 2013-10-14 05:22:19 | Computer Name = HOME | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledSPRetry 9718 [ System Events ] Error - 2013-07-22 14:31:46 | Computer Name = HOME | Source = atikmdag | ID = 43029 Description = Display is not active Error - 2013-07-22 14:34:02 | Computer Name = HOME | Source = atikmdag | ID = 43029 Description = Display is not active Error - 2013-07-22 14:36:16 | Computer Name = HOME | Source = atikmdag | ID = 43029 Description = Display is not active Error - 2013-07-22 14:38:31 | Computer Name = HOME | Source = atikmdag | ID = 43029 Description = Display is not active Error - 2013-07-22 14:40:46 | Computer Name = HOME | Source = atikmdag | ID = 43029 Description = Display is not active Error - 2013-07-22 14:43:02 | Computer Name = HOME | Source = atikmdag | ID = 43029 Description = Display is not active Error - 2013-07-22 14:45:16 | Computer Name = HOME | Source = atikmdag | ID = 43029 Description = Display is not active Error - 2013-07-22 14:47:31 | Computer Name = HOME | Source = atikmdag | ID = 43029 Description = Display is not active Error - 2013-07-22 14:49:46 | Computer Name = HOME | Source = atikmdag | ID = 43029 Description = Display is not active Error - 2013-07-22 15:39:46 | Computer Name = HOME | Source = volsnap | ID = 393252 Description = Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie można powiększyć magazynu kopii w tle z powodu limitu wprowadzonego przez użytkownika. < End of report >

ps. Nie jestem na swoim komputerze tylko u kuzynki
W menadżerze urządzeń wyświetlają się 2 takie same procesory więc jest chyba 2-rdzeniowy
procek to : Intel core 2 duo CPU 8400 3.00 GHz

przez **Pangia** w 14 Paź 2013, 12:15

Re: [Help] Procesor skacze do 100%!

przez Pangia w 14 Paź 2013, 12:15

Tak, dwurdzeniowy. Nie powinno raczej użycie procka skakać do 100%, co najwyżej do połowy (i tak 99% programów korzysta tylko z głównego rdzenia).
Co do logów to mówiłem: pokaż je ludziom, którzy będą umieli Ci pomóc. Ja ich nie umiem rozczytać (widzę tylko, że masz kupę śmieci w przeglądarkach i nie całkiem aktualną Javę) i o ile pamiętam to nikt tu się w logi nie bawił. Załóż konto na forum Instalek albo Dobrych Programów, tam prędzej znajdziesz kogoś, kto będzie wiedział, co z tym fantem zrobić.

Proszę państwa, sto pięćdziesiąt kilometrów na godzinę w ciągu kilku sekund, wspaniały wynik. Gdyby w ten sposób można było wypie*dolić z polskiej polityki tych wszystkich śmieci z Okrągłego Stołu, Leszka Millera, byłoby… cudownie i każdemu bym ku*wa kupił po takim Ferrari, byleby w piz*u pojechali tym PROSTO do swojego ukochanego… Izraela. SYJONIŚCI Europy, jedźcie do siebie! Pozdrawiam, Zbigniew Stonoga. Nie jestem antysemitą!