marinos Napisano Sierpień 13, 2010 Zgłoś Share Napisano Sierpień 13, 2010 Dawno nie uzywalem napedu DVD, wczoraj wrzucilem plytke i pojawia mi sie komunikat "Odmowa dostepu". Na innych plytach to samo. Wrzucilem rozne obrazy plyty na Daemona i rowniez jest "Odmowa dostepu". ZASILACZ: OCZ ModXStream Pro 500W PROCESOR: AMD Athlon II X4 620 BOX 2,6Ghz PŁYTA GŁÓWNA: Asus M4A77TD Pro PAMIĘĆ: DDR3 2x2GB PC10600 1333MHz Kingston CL9 DYSK: Samsung 500GB 7200 16MB HD502HJ KARTA GRAFICZNA: Radeon HD4890 PowerColor 1GB NAPĘDY: LG GH-22LS50 DODATKI: Cooler na procesor Scythe Mugen II, SYSTEM OPERACYJNY: Microsoft Windows 7 Home Premium PL 64-bit OEM Fota: http://zapodaj.net/ba6e3fc7ff79.png.html Link do komentarza Udostępnij na innych stronach More sharing options...
Sevard Napisano Sierpień 13, 2010 Zgłoś Share Napisano Sierpień 13, 2010 Możliwych przyczyn może być kilka. 1. Jeśli bawiłeś się politykami uprawnień, to może to być przyczyną, ale trudno mi powiedzieć co zostało przestawione. 2. Jeśli masz taką możliwość, to sprawdź czy to samo dzieje się na innym koncie użytkownika, bo może to oznaczać uszkodzenie ustawień Twojego konta. 3. Sprawdź czy na komputerze nie masz jakiegoś szkodliwego oprogramowania. Przeskanuj system programem Malwarebytes' Anti-Malware. Jeśli on coś znajdzie, to wklej na forum log ze skanowania. 4. Przyczyną może być również oprogramowanie emulujące napędy. Najpierw możesz spróbować je wyłączyć za pomocą programu DeFogger. Jeśli to nie pomoże, usuń najpierw samo oprogramowanie emulujące, a następnie usuń sterownik SPDT przy pomocy programu, który znajdziesz tu. Link do komentarza Udostępnij na innych stronach More sharing options...
marinos Napisano Sierpień 13, 2010 Autor Zgłoś Share Napisano Sierpień 13, 2010 Przy uprawnieniach nic nie grzebalem, konto uzytkownika mam tylko jedno. Malwarebytes nic nie znalazl, wylaczenie oprogramowania emulujacego rowniez nic nie dalo. Usunalem Deamona, teraz z dysku E zrobil mi sie dysk lokalny. http://zapodaj.net/148ba9728cab.png.html A po wrzuceniu plyty jest tak: http://zapodaj.net/95b20b19ffb3.png.html Jeszcze mi sie cos przypomnialo. Pare tygodni temu po jednej aktualizacji Windows zablokowalo mi dostep do Internetu (radiowka). Przywrocilem system do stanu sprzed aktualizacji i internet dzialal. Teraz tez ostatnio byly jakies aktualizacje, ale internet mi dziala. Nie wiem czy to ma jakis wplyw. Link do komentarza Udostępnij na innych stronach More sharing options...
Sevard Napisano Sierpień 13, 2010 Zgłoś Share Napisano Sierpień 13, 2010 Czy poza deinstalacją Daemona usunąłeś również sterownik SPDT? Jeśli nie, to to zrób, a jeśli tak, to możesz jeszcze spróbować przeinstalować sterowniki od napędu w menedżerze urządzeń. Link do komentarza Udostępnij na innych stronach More sharing options...
marinos Napisano Sierpień 13, 2010 Autor Zgłoś Share Napisano Sierpień 13, 2010 Tak, usunalem SPDT, przeinstalowalem rowniez sterowniki. Dodatkowo wczoraj i dzisiaj gdzies od godziny 18.00 mam co parenascie minut blue screeny. Link do komentarza Udostępnij na innych stronach More sharing options...
marinos Napisano Sierpień 14, 2010 Autor Zgłoś Share Napisano Sierpień 14, 2010 Naped mam oznaczony jako dysk lokalny, a tak byc chyba nie powinno. Dodatkowo wczoraj od godziny 18 co parenascie minut mialem restarty systemu, albo blue screeny. Link do komentarza Udostępnij na innych stronach More sharing options...
Sevard Napisano Sierpień 14, 2010 Zgłoś Share Napisano Sierpień 14, 2010 Co masz na tych blue screenach? Daj logi z OTL wygenerowane na domyślnych ustawieniach. Link do komentarza Udostępnij na innych stronach More sharing options...
marinos Napisano Sierpień 14, 2010 Autor Zgłoś Share Napisano Sierpień 14, 2010 OTL logfile created on: 2010-08-14 17:39:07 - Run 1 OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\user\Desktop 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 61,00% Memory free 8,00 Gb Paging File | 6,00 Gb Available in Paging File | 77,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 100,03 Gb Total Space | 68,67 Gb Free Space | 68,65% Space Free | Partition Type: NTFS Drive D: | 365,63 Gb Total Space | 51,23 Gb Free Space | 14,01% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: USER-KOMPUTER Current User Name: user Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard ========== Processes (SafeList) ========== PRC - [2010-08-14 17:36:02 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\user\Desktop\OTL.exe PRC - [2010-08-09 15:27:06 | 000,836,464 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe PRC - [2010-07-08 15:48:16 | 000,684,032 | ---- | M] () -- D:\Poker\Betclick Poker\poker.exe PRC - [2010-07-08 15:48:16 | 000,016,896 | ---- | M] () -- D:\Poker\Betclick Poker\browserhost.exe PRC - [2010-07-07 09:17:02 | 000,151,552 | ---- | M] () -- C:\Windows\KMService.exe PRC - [2010-07-07 09:17:02 | 000,008,192 | ---- | M] () -- C:\Windows\SysWOW64\srvany.exe PRC - [2010-02-13 18:47:54 | 000,066,872 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2009-11-25 01:51:40 | 000,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe PRC - [2009-11-25 01:51:35 | 000,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe PRC - [2009-11-25 01:51:21 | 000,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe PRC - [2009-11-25 01:48:48 | 000,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe PRC - [2009-11-25 01:43:56 | 000,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe PRC - [2009-06-04 16:10:56 | 005,777,408 | ---- | M] () -- C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe ========== Modules (SafeList) ========== MOD - [2010-08-14 17:36:02 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\user\Desktop\OTL.exe MOD - [2009-07-14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2009-07-14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - File not found [Auto | Running] -- C:\Windows\SysNative\PnkBstrA.exe -- (PnkBstrA) SRV:64bit: - File not found [Auto | Running] -- C:\Windows\SysNative\srvany.exe -- (KMService) SRV:64bit: - [2010-03-25 10:41:00 | 051,456,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service) SRV:64bit: - [2010-01-09 21:20:56 | 000,174,440 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose64) SRV:64bit: - [2009-11-25 01:51:35 | 000,138,680 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus) SRV:64bit: - [2009-11-25 01:51:21 | 000,254,040 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner) SRV:64bit: - [2009-11-25 01:48:48 | 000,352,920 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner) SRV:64bit: - [2009-11-25 01:43:56 | 000,018,752 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv) SRV:64bit: - [2009-08-18 03:36:20 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:64bit: - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:64bit: - [2009-07-14 03:41:08 | 000,451,072 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\inetsrv\iisw3adm.dll -- (WAS) SRV:64bit: - [2009-07-14 03:41:08 | 000,451,072 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\inetsrv\iisw3adm.dll -- (W3SVC) SRV:64bit: - [2009-07-14 03:40:01 | 000,065,536 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\inetsrv\apphostsvc.dll -- (AppHostSvc) SRV - [2010-07-07 09:17:02 | 000,008,192 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\srvany.exe -- (KMService) SRV - [2010-03-18 14:27:14 | 000,138,576 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_64) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010-02-13 18:47:54 | 000,066,872 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2009-07-14 03:15:31 | 000,396,288 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS) SRV - [2009-07-14 03:15:31 | 000,396,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (W3SVC) SRV - [2009-07-14 03:14:53 | 000,061,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc) ========== Driver Services (SafeList) ========== DRV:64bit: - [2010-02-17 15:15:23 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:64bit: - [2009-11-25 01:50:05 | 000,022,096 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk) DRV:64bit: - [2009-11-25 01:49:56 | 000,065,616 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:64bit: - [2009-08-18 04:48:48 | 006,037,504 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:64bit: - [2009-07-24 15:49:00 | 000,119,312 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService) DRV:64bit: - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009-06-20 04:09:57 | 001,394,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:64bit: - [2009-06-10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:64bit: - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009-06-02 10:55:20 | 001,207,808 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService) DRV:64bit: - [2009-05-22 16:52:30 | 000,215,040 | ---- | M] (Realtek ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:64bit: - [2009-05-14 03:26:24 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor) DRV:64bit: - [2009-05-05 06:30:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie) AMD PCI Express (3GIO) DRV:64bit: - [2009-03-27 02:23:54 | 000,019,432 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz132_x64.sys -- (cpuz132) DRV - [2007-02-07 20:27:46 | 000,014,104 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | Boot | Running] -- C:\Windows\SysWOW64\speedfan.sys -- (speedfan) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-02-14 20:48:15 | 000,000,000 | ---D | M] O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - D:\Free Download Manager\iefdm2.dll () O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found O4:64bit: - HKLM..\Run: [bCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] D:\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD) O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software) O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA) O4 - HKLM..\Run: [startCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKCU..\Run: [DAEMON Tools Lite] D:\DAEMON Tools Lite\DTLite.exe File not found O4 - HKCU..\Run: [DU Meter] D:\DU Meter\DUMeter.exe File not found O4 - HKCU..\Run: [spyEmergency] C:\Program Files\NETGATE\Spy Emergency\SpyEmergency.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:64bit: - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) O8:64bit: - Extra context menu item: Pobierz plik wideo we Free Download Manager - D:\Free Download Manager\dlfvideo.htm () O8:64bit: - Extra context menu item: Pobierz w Free Download Manager - D:\Free Download Manager\dllink.htm () O8:64bit: - Extra context menu item: Pobierz wszystkie pliki w Free Download Manager - D:\Free Download Manager\dlall.htm () O8:64bit: - Extra context menu item: Pobierz zaznaczone w Free Download Manager - D:\Free Download Manager\dlselected.htm () O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Pobierz plik wideo we Free Download Manager - D:\Free Download Manager\dlfvideo.htm () O8 - Extra context menu item: Pobierz w Free Download Manager - D:\Free Download Manager\dllink.htm () O8 - Extra context menu item: Pobierz wszystkie pliki w Free Download Manager - D:\Free Download Manager\dlall.htm () O8 - Extra context menu item: Pobierz zaznaczone w Free Download Manager - D:\Free Download Manager\dlselected.htm () O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - D:\Poker\PokerStars\PokerStarsUpdate.exe (PokerStars) O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Poker\PartyGaming\PartyPoker\RunApp.exe () O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Poker\PartyGaming\PartyPoker\RunApp.exe () O9 - Extra Button: Pokaż lub ukryj HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O28:64bit: - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{3a1fdc7b-1719-11df-b894-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{3a1fdc7b-1719-11df-b894-806e6f6e6963}\Shell\AutoRun\command - "" = E:\autorun.exe -- File not found O33 - MountPoints2\{ab16aa80-1bc6-11df-9807-a9b45e633cd1}\Shell - "" = AutoRun O33 - MountPoints2\{ab16aa80-1bc6-11df-9807-a9b45e633cd1}\Shell\AutoRun\command - "" = F:\autorun.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010-08-14 17:35:56 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Users\user\Desktop\OTL.exe [2010-08-14 12:14:33 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Local\ElevatedDiagnostics [2010-08-14 11:44:43 | 000,000,000 | ---D | C] -- C:\Users\user\Documents\Pliki programu Outlook [2010-08-13 17:25:47 | 000,000,000 | ---D | C] -- C:\Users\user\Documents\Real Deal Poker [2010-08-13 13:26:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Toolbar [2010-08-13 13:25:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite [2010-08-13 12:18:35 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Roaming\Malwarebytes [2010-08-13 12:18:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2010-08-13 12:18:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010-08-13 11:28:31 | 000,000,000 | ---D | C] -- C:\Users\user\Nowy folder [2010-08-12 22:11:03 | 000,000,000 | ---D | C] -- C:\32788R22FWJFW [2010-08-12 15:42:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy [2010-07-30 15:22:05 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Roaming\HpUpdate [2010-07-30 15:21:36 | 000,000,000 | ---D | C] -- C:\Windows\Hewlett-Packard [2010-07-29 09:41:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe [2010-07-29 09:39:19 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Roaming\VeniceLobby.B5CA23157793C8EB7433EADB0451A1FE7E88A7DF.1 [2010-07-22 18:53:38 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Roaming\Mozilla-Cache [2010-07-22 18:53:37 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Roaming\Mozilla [2010-07-21 15:07:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SpeedFan [2010-07-18 15:11:15 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Local\cache [2010-07-18 15:10:21 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Roaming\Gadu-Gadu 10 [2010-07-18 15:09:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Gadu-Gadu 10 [2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010-08-14 17:41:04 | 002,621,440 | -HS- | M] () -- C:\Users\user\ntuser.dat [2010-08-14 17:36:02 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\user\Desktop\OTL.exe [2010-08-14 11:31:28 | 000,019,904 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010-08-14 11:31:28 | 000,019,904 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010-08-14 11:29:53 | 001,651,844 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010-08-14 11:29:53 | 000,737,826 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2010-08-14 11:29:53 | 000,650,790 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010-08-14 11:29:53 | 000,149,568 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2010-08-14 11:29:53 | 000,116,594 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010-08-14 11:24:16 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010-08-14 11:24:02 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-08-14 11:23:55 | 3220,525,056 | -HS- | M] () -- C:\hiberfil.sys [2010-08-14 08:35:24 | 003,666,435 | -H-- | M] () -- C:\Users\user\AppData\Local\IconCache.db [2010-08-13 20:51:16 | 000,000,833 | ---- | M] () -- C:\Users\Public\Desktop\Opera.lnk [2010-08-13 20:46:18 | 451,665,361 | ---- | M] () -- C:\Windows\MEMORY.DMP [2010-08-13 20:24:56 | 000,524,288 | -HS- | M] () -- C:\Users\user\ntuser.dat{1ab35c88-a707-11df-a78f-f56ebb8265d2}.TMContainer00000000000000000002.regtrans-ms [2010-08-13 20:24:56 | 000,524,288 | -HS- | M] () -- C:\Users\user\ntuser.dat{1ab35c88-a707-11df-a78f-f56ebb8265d2}.TMContainer00000000000000000001.regtrans-ms [2010-08-13 20:24:56 | 000,065,536 | -HS- | M] () -- C:\Users\user\ntuser.dat{1ab35c88-a707-11df-a78f-f56ebb8265d2}.TM.blf [2010-08-13 17:29:29 | 000,350,169 | ---- | M] () -- C:\Users\user\Desktop\MU.jpg [2010-08-13 17:25:34 | 000,321,248 | ---- | M] () -- C:\Users\user\Desktop\dysk.jpg [2010-08-13 14:24:22 | 000,000,017 | ---- | M] () -- C:\Users\user\AppData\Local\resmon.resmoncfg [2010-08-13 12:36:45 | 001,085,060 | ---- | M] () -- C:\Users\user\Desktop\DVD.png [2010-08-13 12:35:22 | 000,253,991 | ---- | M] () -- C:\Users\user\Desktop\E.png [2010-08-12 19:30:17 | 001,157,201 | ---- | M] () -- C:\Users\user\Desktop\Bez tytułu.png [2010-08-12 15:16:32 | 000,524,288 | -HS- | M] () -- C:\Users\user\ntuser.dat{2621fb07-a611-11df-a487-b7e7d0a5b6df}.TMContainer00000000000000000002.regtrans-ms [2010-08-12 15:16:32 | 000,524,288 | -HS- | M] () -- C:\Users\user\ntuser.dat{2621fb07-a611-11df-a487-b7e7d0a5b6df}.TMContainer00000000000000000001.regtrans-ms [2010-08-12 15:16:32 | 000,065,536 | -HS- | M] () -- C:\Users\user\ntuser.dat{2621fb07-a611-11df-a487-b7e7d0a5b6df}.TM.blf [2010-08-12 15:05:17 | 000,524,288 | -HS- | M] () -- C:\Users\user\ntuser.dat{ba7f7732-a60f-11df-b0a6-ca0f6d2177de}.TMContainer00000000000000000002.regtrans-ms [2010-08-12 15:05:17 | 000,524,288 | -HS- | M] () -- C:\Users\user\ntuser.dat{ba7f7732-a60f-11df-b0a6-ca0f6d2177de}.TMContainer00000000000000000001.regtrans-ms [2010-08-12 15:05:17 | 000,065,536 | -HS- | M] () -- C:\Users\user\ntuser.dat{ba7f7732-a60f-11df-b0a6-ca0f6d2177de}.TM.blf [2010-08-06 12:10:58 | 000,182,272 | ---- | M] () -- C:\Users\user\Desktop\Agnieszka Trojnacka_CV (2).doc [2010-08-06 11:49:40 | 000,029,696 | ---- | M] () -- C:\Users\user\Desktop\list motywacyjny.doc [2010-08-06 11:49:20 | 000,029,696 | ---- | M] () -- C:\Users\user\Desktop\Agnieszka Trojnacka_list motywacyjny -.doc [2010-08-06 11:06:08 | 000,029,184 | ---- | M] () -- C:\Users\user\Desktop\Agnieszka Trojnacka_list motywacyjny.doc [2010-07-30 14:58:26 | 000,010,079 | ---- | M] () -- C:\Users\user\Desktop\jabulani-treningowa.jpg [2010-07-30 14:33:45 | 000,024,576 | ---- | M] () -- C:\Users\user\cv.doc [2010-07-28 19:17:26 | 000,021,767 | ---- | M] () -- C:\Users\user\Desktop\Agis.jpg [2010-07-28 19:11:41 | 000,231,481 | ---- | M] () -- C:\Users\user\Desktop\DSC00004.JPG [2010-07-25 22:07:20 | 000,160,024 | ---- | M] () -- C:\Users\user\Desktop\Agnieszka Trojnacka_CV.docx [2010-07-21 16:46:03 | 000,002,432 | ---- | M] () -- C:\Users\user\AppData\Local\TempEy3092.html [2010-07-21 16:45:29 | 000,002,432 | ---- | M] () -- C:\Users\user\AppData\Local\Templn3332.html [2010-07-21 15:07:57 | 000,001,011 | ---- | M] () -- C:\Users\user\Desktop\SpeedFan.lnk [2010-07-21 15:07:57 | 000,000,045 | ---- | M] () -- C:\Windows\SysWow64\initdebug.nfo [2010-07-21 00:43:26 | 000,002,432 | ---- | M] () -- C:\Users\user\AppData\Local\TempKW3752.html [2010-07-21 00:43:23 | 000,002,432 | ---- | M] () -- C:\Users\user\AppData\Local\TempQw3752.html [2010-07-20 18:51:19 | 000,002,432 | ---- | M] () -- C:\Users\user\AppData\Local\TempcD7668.html [2010-07-20 11:54:41 | 000,088,666 | ---- | M] () -- C:\Users\user\Desktop\Plastyka IV.pdf [2010-07-19 11:06:15 | 000,002,432 | ---- | M] () -- C:\Users\user\AppData\Local\TempgN5280.html [2010-07-18 15:40:13 | 000,002,432 | ---- | M] () -- C:\Users\user\AppData\Local\Tempyb7628.html [2010-07-17 21:48:35 | 000,437,760 | ---- | M] () -- C:\Users\user\Desktop\liga czerwiec 2010.xls [2010-07-16 14:37:44 | 000,276,778 | ---- | M] () -- C:\Users\user\Desktop\DSC00003.JPG [2010-07-16 13:36:30 | 000,524,288 | -HS- | M] () -- C:\Users\user\ntuser.dat{24f74858-90c9-11df-816d-fa1337b53dcd}.TMContainer00000000000000000002.regtrans-ms [2010-07-16 13:36:30 | 000,524,288 | -HS- | M] () -- C:\Users\user\ntuser.dat{24f74858-90c9-11df-816d-fa1337b53dcd}.TMContainer00000000000000000001.regtrans-ms [2010-07-16 13:36:30 | 000,065,536 | -HS- | M] () -- C:\Users\user\ntuser.dat{24f74858-90c9-11df-816d-fa1337b53dcd}.TM.blf [2010-07-16 11:28:04 | 000,524,288 | -HS- | M] () -- C:\Users\user\ntuser.dat{346f9d3f-90bb-11df-aca0-d67d8daa29c5}.TMContainer00000000000000000002.regtrans-ms [2010-07-16 11:28:04 | 000,524,288 | -HS- | M] () -- C:\Users\user\ntuser.dat{346f9d3f-90bb-11df-aca0-d67d8daa29c5}.TMContainer00000000000000000001.regtrans-ms [2010-07-16 11:28:04 | 000,065,536 | -HS- | M] () -- C:\Users\user\ntuser.dat{346f9d3f-90bb-11df-aca0-d67d8daa29c5}.TM.blf [2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] ========== Files Created - No Company Name ========== [2010-08-13 20:24:56 | 000,524,288 | -HS- | C] () -- C:\Users\user\ntuser.dat{1ab35c88-a707-11df-a78f-f56ebb8265d2}.TMContainer00000000000000000002.regtrans-ms [2010-08-13 20:24:56 | 000,524,288 | -HS- | C] () -- C:\Users\user\ntuser.dat{1ab35c88-a707-11df-a78f-f56ebb8265d2}.TMContainer00000000000000000001.regtrans-ms [2010-08-13 20:24:56 | 000,065,536 | -HS- | C] () -- C:\Users\user\ntuser.dat{1ab35c88-a707-11df-a78f-f56ebb8265d2}.TM.blf [2010-08-13 17:29:29 | 000,350,169 | ---- | C] () -- C:\Users\user\Desktop\MU.jpg [2010-08-13 17:25:34 | 000,321,248 | ---- | C] () -- C:\Users\user\Desktop\dysk.jpg [2010-08-13 14:24:22 | 000,000,017 | ---- | C] () -- C:\Users\user\AppData\Local\resmon.resmoncfg [2010-08-13 12:36:45 | 001,085,060 | ---- | C] () -- C:\Users\user\Desktop\DVD.png [2010-08-13 12:35:22 | 000,253,991 | ---- | C] () -- C:\Users\user\Desktop\E.png [2010-08-12 19:25:21 | 001,157,201 | ---- | C] () -- C:\Users\user\Desktop\Bez tytułu.png [2010-08-12 15:09:11 | 000,524,288 | -HS- | C] () -- C:\Users\user\ntuser.dat{2621fb07-a611-11df-a487-b7e7d0a5b6df}.TMContainer00000000000000000002.regtrans-ms [2010-08-12 15:09:11 | 000,524,288 | -HS- | C] () -- C:\Users\user\ntuser.dat{2621fb07-a611-11df-a487-b7e7d0a5b6df}.TMContainer00000000000000000001.regtrans-ms [2010-08-12 15:09:11 | 000,065,536 | -HS- | C] () -- C:\Users\user\ntuser.dat{2621fb07-a611-11df-a487-b7e7d0a5b6df}.TM.blf [2010-08-12 14:57:39 | 000,524,288 | -HS- | C] () -- C:\Users\user\ntuser.dat{ba7f7732-a60f-11df-b0a6-ca0f6d2177de}.TMContainer00000000000000000002.regtrans-ms [2010-08-12 14:57:39 | 000,524,288 | -HS- | C] () -- C:\Users\user\ntuser.dat{ba7f7732-a60f-11df-b0a6-ca0f6d2177de}.TMContainer00000000000000000001.regtrans-ms [2010-08-12 14:57:39 | 000,065,536 | -HS- | C] () -- C:\Users\user\ntuser.dat{ba7f7732-a60f-11df-b0a6-ca0f6d2177de}.TM.blf [2010-08-06 11:49:40 | 000,029,696 | ---- | C] () -- C:\Users\user\Desktop\list motywacyjny.doc [2010-08-03 13:51:13 | 000,160,024 | ---- | C] () -- C:\Users\user\Desktop\Agnieszka Trojnacka_CV.docx [2010-07-30 14:58:26 | 000,010,079 | ---- | C] () -- C:\Users\user\Desktop\jabulani-treningowa.jpg [2010-07-28 19:13:21 | 000,021,767 | ---- | C] () -- C:\Users\user\Desktop\Agis.jpg [2010-07-21 16:45:34 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempEy3092.html [2010-07-21 16:44:08 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Templn3332.html [2010-07-21 15:07:57 | 000,001,011 | ---- | C] () -- C:\Users\user\Desktop\SpeedFan.lnk [2010-07-21 00:18:57 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempKW3752.html [2010-07-21 00:16:00 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempQw3752.html [2010-07-20 18:34:41 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempcD7668.html [2010-07-20 11:54:41 | 000,088,666 | ---- | C] () -- C:\Users\user\Desktop\Plastyka IV.pdf [2010-07-19 11:02:53 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\TempgN5280.html [2010-07-18 21:03:53 | 000,045,568 | -HS- | C] () -- C:\Users\user\Thumbs.db [2010-07-18 15:11:15 | 000,002,432 | ---- | C] () -- C:\Users\user\AppData\Local\Tempyb7628.html [2010-07-16 14:36:37 | 000,276,778 | ---- | C] () -- C:\Users\user\Desktop\DSC00003.JPG [2010-07-16 14:36:37 | 000,231,481 | ---- | C] () -- C:\Users\user\Desktop\DSC00004.JPG [2010-07-16 13:03:49 | 000,524,288 | -HS- | C] () -- C:\Users\user\ntuser.dat{24f74858-90c9-11df-816d-fa1337b53dcd}.TMContainer00000000000000000002.regtrans-ms [2010-07-16 13:03:48 | 000,524,288 | -HS- | C] () -- C:\Users\user\ntuser.dat{24f74858-90c9-11df-816d-fa1337b53dcd}.TMContainer00000000000000000001.regtrans-ms [2010-07-16 13:03:48 | 000,065,536 | -HS- | C] () -- C:\Users\user\ntuser.dat{24f74858-90c9-11df-816d-fa1337b53dcd}.TM.blf [2010-07-16 11:23:45 | 000,524,288 | -HS- | C] () -- C:\Users\user\ntuser.dat{346f9d3f-90bb-11df-aca0-d67d8daa29c5}.TMContainer00000000000000000002.regtrans-ms [2010-07-16 11:23:45 | 000,524,288 | -HS- | C] () -- C:\Users\user\ntuser.dat{346f9d3f-90bb-11df-aca0-d67d8daa29c5}.TMContainer00000000000000000001.regtrans-ms [2010-07-16 11:23:45 | 000,065,536 | -HS- | C] () -- C:\Users\user\ntuser.dat{346f9d3f-90bb-11df-aca0-d67d8daa29c5}.TM.blf [2010-03-24 11:22:47 | 001,569,672 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2010-03-11 15:57:14 | 000,000,120 | ---- | C] () -- C:\Windows\disney.ini [2010-02-11 16:31:45 | 000,024,576 | R--- | C] () -- C:\Windows\SysWow64\AsIO.dll [2010-02-11 16:31:45 | 000,014,392 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys [2010-02-11 16:31:42 | 000,011,832 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp64.sys [2010-02-11 16:31:42 | 000,010,216 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp32.sys [2010-02-11 16:28:03 | 000,001,746 | ---- | C] () -- C:\Windows\Language_trs.ini [2010-02-11 16:28:00 | 000,024,956 | ---- | C] () -- C:\Windows\Ascd_tmp.ini [2009-11-06 11:58:04 | 000,178,975 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009-04-02 14:30:14 | 000,010,296 | ---- | C] () -- C:\Windows\SysWow64\drivers\ASUSHWIO.SYS < End of report > I jeszcze plik Extras byl. OTL Extras logfile created on: 2010-08-14 17:39:07 - Run 1 OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\user\Desktop 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 61,00% Memory free 8,00 Gb Paging File | 6,00 Gb Available in Paging File | 77,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 100,03 Gb Total Space | 68,67 Gb Free Space | 68,65% Space Free | Partition Type: NTFS Drive D: | 365,63 Gb Total Space | 51,23 Gb Free Space | 14,01% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: USER-KOMPUTER Current User Name: user Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard ========== Extra Registry (SafeList) ========== ========== File Associations ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html[@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software) ========== Shell Spawning ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* File not found cmdfile [open] -- "%1" %* File not found comfile [open] -- "%1" %* File not found exefile [open] -- "%1" %* File not found helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found http [open] -- "C:\Program Files (x86)\Opera\opera.exe" (Opera Software) https [open] -- "C:\Program Files (x86)\Opera\opera.exe" (Opera Software) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* File not found regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" File not found scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S File not found txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" http [open] -- "C:\Program Files (x86)\Opera\opera.exe" (Opera Software) https [open] -- "C:\Program Files (x86)\Opera\opera.exe" (Opera Software) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 ========== Authorized Applications List ========== ========== HKEY_LOCAL_MACHINE Uninstall List ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1" = Media Player Classic - Home Cinema v. 1.3.1249.0 "{4328291B-3859-2C09-D2AB-11AA45B5FA26}" = ATI Catalyst Install Manager "{44D68614-4CE3-E73C-C37B-EB86D440C6B0}" = ccc-utility64 "{55D55008-E5F6-47D6-B16F-B2A40D4D145F}" = 64 Bit HP CIO Components Installer "{7A98574D-B3EA-2A5C-CF11-02EF1D1DB500}" = ATI AVIVO64 Codecs "{90140000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2010 "{90140000-0015-0415-1000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2010 "{90140000-0016-0415-1000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2010 "{90140000-0018-0415-1000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2010 "{90140000-0019-0415-1000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2010 "{90140000-001A-0415-1000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2010 "{90140000-001B-0415-1000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2010 "{90140000-001F-0407-1000-0000000FF1CE}" = Microsoft Office Proof (German) 2010 "{90140000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proof (English) 2010 "{90140000-001F-0415-1000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2010 "{90140000-002C-0415-1000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2010 "{90140000-0043-0000-1000-0000000FF1CE}" = Microsoft Office Office 32-bit Components 2010 "{90140000-0043-0415-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (Polish) 2010 "{90140000-0044-0415-1000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2010 "{90140000-006E-0415-1000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2010 "{90140000-00A1-0415-1000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2010 "{90140000-00BA-0415-1000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2010 "{CDBF8C2D-04B0-4F9B-9AE1-7422F7F0EC94}" = HP Deskjet F2400 All-In-One Driver Software 13.0 Rel .6 "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "CPUID CPU-Z_is1" = CPUID CPU-Z 1.53.1 "HP Imaging Device Functions" = HP Imaging Device Functions 13.0 "HP Print Projects" = HP Print Projects 1.0 "HP Smart Web Printing" = HP Smart Web Printing 4.5 "HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0 "HPExtendedCapabilities" = HP Customer Participation Program 13.0 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Office14.PROPLUS" = Microsoft Office Professional Plus 2010 "Shop for HP Supplies" = Shop for HP Supplies "WinRAR archiver" = Archiwizator WinRAR [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}" = Microsoft Games for Windows - LIVE Redistributable "{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}" = hpWLPGInstaller "{0A9C9BD5-8588-40D4-8A1A-860E3D2ED6EE}" = NBA 2K10 "{0C792BB5-5B82-CDA0-6244-C785EEDD2547}" = CCC Help Japanese "{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan "{10591DD4-8302-5EBC-91B5-D74563D33C15}" = CCC Help Norwegian "{14CF012F-6CDF-56E0-3461-0950D1536125}" = CCC Help Czech "{15DE85E4-17E4-A68B-CECE-CE93AD9EF037}" = CCC Help Greek "{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F55CD48-E84D-AC4D-8A97-70073943AEBC}" = CCC Help Hungarian "{1FCAD262-FF72-3B35-3B96-7970FA1E71B8}" = Catalyst Control Center Core Implementation "{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform "{21A2F5EE-1DC5-488A-BE7E-E526F8C61488}" = DeviceDiscovery "{28971D68-1781-FF8F-A29A-C30D9D474F86}" = CCC Help German "{28AEBAC9-66B3-53CB-DAB0-92B665E68784}" = CCC Help Thai "{29098F98-D533-AE5F-925A-D2CAA07EE309}" = CCC Help Swedish "{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}" = Microsoft Games for Windows - LIVE "{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm "{30E230F7-000C-5FF7-B8D5-743952FC8036}" = CCC Help Portuguese "{351D5F9B-4971-3069-370F-4C150F9FE7CB}" = Catalyst Control Center InstallProxy "{37C99A9A-DC51-4BAA-5AAF-5F7E382A2F55}" = CCC Help Korean "{396CE7FD-94E4-F454-DB02-599FBB323F89}" = CCC Help Danish "{406FB8A4-F539-48A9-809C-F94706F9C9F6}_is1" = S.T.A.L.K.E.R. - Zew Prypeci [v1.6.01] "{42E2EEB2-D48E-4A47-B181-32ECA031D93B}" = DJ_AIO_06_F2400_SW_Min "{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg "{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter "{4ABCCAA5-468D-4668-9C19-78F0D775F4C9}" = Hitman - Krwawa Forsa "{4CC1A849-80D4-8463-F579-D025A47172FB}" = CCC Help Polish "{4F45FB95-7BC3-C2AB-1013-DC957868616A}" = CCC Help Finnish "{54194F60-988C-4D03-B922-C2B00EFDA39A}" = NVIDIA PhysX "{5454083B-1308-4485-BF17-111000028701}" = Grand Theft Auto: Episodes from Liberty City "{5454083B-1308-4485-BF17-111000028702}" = Grand Theft Auto: Episodes from Liberty City "{5454083B-1308-4485-BF17-111000028703}" = Grand Theft Auto: Episodes from Liberty City "{5454083B-1308-4485-BF17-111000028704}" = Grand Theft Auto: Episodes from Liberty City "{5454083B-1308-4485-BF17-111000038701}" = Grand Theft Auto: Episodes from Liberty City "{5454083B-1308-4485-BF17-111000038702}" = Grand Theft Auto: Episodes from Liberty City "{61B8B2F9-D8DA-4B24-89A9-DB09F38A4899}" = Grand Theft Auto: Episodes From Liberty City "{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2 "{68A10D12-0D0F-4212-BDE6-D87FAD32A8FA}" = SmartWebPrinting "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply "{6B9815F1-E0B1-01D7-D0D3-7AAADDD2FE87}" = Catalyst Control Center Graphics Light "{6BAA71B6-8F43-4C72-931A-3354ABB0258A}" = F2400 "{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox "{6D32C637-6149-CED1-A9F6-330607532674}" = Catalyst Control Center Graphics Full New "{6D8DDB4A-C263-40DE-BA16-AFDAD159D59A}" = Tom Clancy's Splinter Cell Conviction "{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update "{70858C67-8761-4444-895A-0A8B2E9E144E}" = Opera 10.61 "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{7308D4D7-25E4-EC49-1D07-27AE51F50126}" = CCC Help Italian "{7C11154F-3539-4CB5-979D-EF7913473E53}" = Prince of Persia "{7DCFAD2E-2DF9-5AB4-8AF7-225B5E53DACC}" = Venice Lobby "{81EFDD8D-CE79-7C0E-EA26-8E8968B29506}" = CCC Help English "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8136 8168 8169 Ethernet Driver "{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8AC93C10-A817-E0B1-7214-87C186DDE1C9}" = CCC Help Chinese Traditional "{8CFA9151-6404-409A-AF22-4632D04582FD}" = Assassin's Creed "{8F66047B-1AF3-40D9-80D7-106E2EDC2C2A}" = EPU-4 Engine "{8F769654-32F6-3A18-8E7E-35A31446EE47}" = Catalyst Control Center HydraVision Full "{922E8525-AC7E-4294-ACAA-43712D4423C0}" = Adobe Flash Player 10 ActiveX "{9901E703-D169-7139-1EA3-11AA788D09E6}" = EA Download Manager UI "{9B63540D-D942-4C38-B42E-A48AE0145970}" = Virtua Tennis 2009 "{9FD6F1A8-5550-46AF-8509-271DF0E768B5}" = Dual-Core Optimizer "{A1A22AD5-CF10-374B-DA23-077B6826288E}" = CCC Help Dutch "{A1A9A33E-F1E5-FBF4-8D72-E90BEAC7108A}" = HydraVision "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable "{AB91D67A-6CE4-8E06-B3A2-BC1B5F812670}" = CCC Help French "{ABAD283C-0F52-C7EE-4287-9350CA233862}" = Catalyst Control Center Graphics Previews Common "{AC08BBA0-96B9-431A-A7D0-D8598E493775}" = RESIDENT EVIL 5 "{AC76BA86-7AD7-1045-7B44-A93000000001}" = Adobe Reader 9.3.3 - Polish "{AE8705FB-E13C-40A9-8A2D-68D6733FBFC2}" = Status "{AEDBD563-24BB-4EE3-8366-A654DAC2D988}" = Mirror's Edge? "{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR "{BC1664AB-77A4-425B-9739-4E68C9EF1D3C}" = Brothers in Arms Road to Hill 30 "{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations "{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant "{C58979C6-C75E-D003-1DA4-83267880FA4C}" = Catalyst Control Center Graphics Previews Vista "{C75CDBA2-3C86-481e-BD10-BDDA758F9DFF}" = hpPrintProjects "{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CF929EEB-CE39-4F06-B1BF-F51FC617A2B2}" = Catalyst Control Center - Branding "{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.3.22 Game "{D92D1ED8-71B6-6CE4-62FE-0444605CFFE1}" = CCC Help Turkish "{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}" = TrayApp "{E645C441-5D08-5AA2-C841-7F245C65BE9F}" = Catalyst Control Center Localization All "{E6DED140-000F-177B-F917-8C65BDB7BE6E}" = ccc-core-static "{EB484E7E-B9A3-FC7A-6739-BDFA6F349884}" = Catalyst Control Center Graphics Full Existing "{F0A421DB-030E-40DE-A3E6-EC340B1074BC}" = DiRT2 "{F2835483-37F2-4123-B4FE-0E77D58447F2}" = Far Cry 2 "{F2B5A2A7-2DF9-4361-8BD5-362714528B51}" = NHL? 09 "{F8DA5AAA-0F37-AB50-EA2E-9D38680CFF75}" = CCC Help Russian "{FAF26102-09D7-4C58-AB01-0D59A2E517CA}" = Copy "{FEC732C4-2B93-8DAA-7E09-38FBE6E5562B}" = CCC Help Chinese Standard "{FF5A6B87-F8AF-C1D0-3D6D-1BF055210508}" = CCC Help Spanish "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "{FFF4949A-3B77-452C-BC5E-F49C8FBA99CF}_is1" = Fifa 2010 "Adobe AIR" = Adobe AIR "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "ARMA 2 Operation Arrowhead" = ARMA 2 Operation Arrowhead Uninstall "avast!" = avast! Antivirus "BattlEye" = BattlEye Uninstall "Betclick Poker" = Betclick Poker "Cake Poker(uninstall)" = Cake Poker "com.ea.Vault.919CACB699904AC5D41B606703500DD39747C02D.1" = EA Download Manager UI "Deluxe Ski Jump 3_is1" = Deluxe Ski Jump 3 v1.4.0 "EA Download Manager" = EA Download Manager "Everest Poker" = Everest Poker (Remove Only) "Football Manager 2010" = Football Manager 2010 "Free Download Manager_is1" = Free Download Manager 3.0 "HD Tune_is1" = HD Tune 2.55 "InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platforma Menedżera urządzeń "ipla" = ipla 2.1.5 "Just Cause 2_is1" = Just Cause 2 "OpenAL" = OpenAL "OPoker.com" = OPoker.com "Pacific Poker" = Pacific Poker "ParadiseCasino" = ParadiseCasino "ParadisePoker" = ParadisePoker "PartyPoker" = PartyPoker "Poker Heaven" = Poker Heaven "Poker Hour Network" = Poker Hour Network "Pokerkings" = Pokerkings "PokerStars" = PokerStars "PunkBusterSvc" = PunkBuster Services "segapoker" = SEGA Poker "Sniper Ghost Warrior_is1" = Sniper Ghost Warrior "SpeedFan" = SpeedFan (remove only) "VeniceLobby.B5CA23157793C8EB7433EADB0451A1FE7E88A7DF.1" = Venice Lobby ========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "bet365poker" = Poker at bet365 "Betfred Poker" = Betfred Poker "Centrebet Poker" = Centrebet Poker "Chilipoker" = Chilipoker "Expekt Poker" = Expekt Poker "myBet Poker" = myBet Poker "RealDealPoker_2_0" = Real Deal Poker ========== Last 10 Event Log Errors ========== [ Antivirus Events ] Error - 2010-03-22 07:29:18 | Computer Name = user-Komputer | Source = avast! | ID = 33554522 Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of C:\Windows\System32\UIAutomationCore.dll failed, 0000A413. Error - 2010-03-22 07:29:19 | Computer Name = user-Komputer | Source = avast! | ID = 33554522 Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7600.16385_none_655452efe0fb810b\DrUpdate.dll failed, 0000A413. Error - 2010-03-22 07:29:19 | Computer Name = user-Komputer | Source = avast! | ID = 33554522 Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of C:\Windows\System32\srclient.dll failed, 0000A413. Error - 2010-03-22 07:29:19 | Computer Name = user-Komputer | Source = avast! | ID = 33554522 Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of C:\Windows\System32\msimg32.dll failed, 0000A413. Error - 2010-03-22 07:29:19 | Computer Name = user-Komputer | Source = avast! | ID = 33554522 Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of C:\Windows\System32\spp.dll failed, 0000A413. Error - 2010-03-22 07:29:19 | Computer Name = user-Komputer | Source = avast! | ID = 33554522 Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7600.16385_none_655452efe0fb810b\wrpint.dll failed, 0000A413. Error - 2010-03-22 07:29:19 | Computer Name = user-Komputer | Source = avast! | ID = 33554522 Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of C:\Windows\System32\sxsstore.dll failed, 0000A413. Error - 2010-03-22 07:29:19 | Computer Name = user-Komputer | Source = avast! | ID = 33554522 Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of C:\Windows\System32\sqmapi.dll failed, 0000A413. Error - 2010-03-22 07:29:19 | Computer Name = user-Komputer | Source = avast! | ID = 33554522 Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of C:\Windows\servicing\CbsApi.dll failed, 0000A413. Error - 2010-03-22 07:29:19 | Computer Name = user-Komputer | Source = avast! | ID = 33554522 Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of C:\Windows\servicing\CbsApi.dll failed, 0000A413. ========== Last 10 Event Log Errors ========== Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt! < End of report > Link do komentarza Udostępnij na innych stronach More sharing options...
Sevard Napisano Sierpień 14, 2010 Zgłoś Share Napisano Sierpień 14, 2010 Daemon Tools nie został dokładnie usunięty. Sterownik spdt.sys nadal jest ładowany, więc nie był ruszany. No, ale nic z tego co widzę sporo błędów jest generowanych przez Avasta (jakby to była jakaś nowość) i to on może być przyczyną. Możesz go usunąć, co w sumie nie zmieni stopnia ochrony Twojego kompa, ale być może rozwiąże problem. I ponawiam pytanie - co jest napisane na BSODach. Wystarczy mi co widnieje po słowie STOP oraz nazwy plików, które mogą wystąpić na końcu ekranu. Jeśli BSOD szybko znika, to zrób co następuje: Kliknij prawym przyciskiem na Komputer (w menu start), wybierz właściwości, przejdź do zakładki "Zaawansowane ustawienia systemu", kliknij "Zaawansowane", teraz "Uruchamianie i odzyskiwanie" i w "ustawienia" odznaczasz opcję "Automatycznie uruchom ponownie". Link do komentarza Udostępnij na innych stronach More sharing options...
marinos Napisano Sierpień 14, 2010 Autor Zgłoś Share Napisano Sierpień 14, 2010 Daemona i SPDT usunalem dokladnie, ale nic nie pomoglo i zainstalowalem ponownie. Potem przywrocilem system do stanu sprzed aktualizacji Windows. Daemona tez mi cofnelo, stad pewnie jakies pozostalosci po nim. Kodow bledow na razie nie podam, bo jak na razie jeszcze BSODow nie mialem, ale pewnie niedlugo beda. Link do komentarza Udostępnij na innych stronach More sharing options...
marinos Napisano Sierpień 15, 2010 Autor Zgłoś Share Napisano Sierpień 15, 2010 Mialem przed chwila BSODa. Podpis problemu: Nazwa zdarzenia problemu: BlueScreen Wersja systemu operacyjnego: 6.1.7600.2.0.0.768.3 Identyfikator ustawień regionalnych: 1045 Dodatkowe informacje o problemie: BCCode: 7f BCP1: 0000000000000008 BCP2: 0000000080050031 BCP3: 00000000000006F8 BCP4: FFFFF80003890572 OS Version: 6_1_7600 Service Pack: 0_0 Product: 768_1 Pliki pomagające opisać problem: C:\Windows\Minidump\081510-18033-01.dmp C:\Users\user\AppData\Local\Temp\WER-51324-0.sysdata.xml Przeczytaj w trybie online nasze zasady zachowania poufności informacji: http://go.microsoft.com/fwlink/?linkid=104...mp;clcid=0x0415 Jeśli zasady zachowania poufności informacji w trybie online nie są dostępne, przeczytaj nasze zasady zachowania poufności informacji w trybie offline: C:\Windows\system32\pl-PL\erofflps.txt Link do komentarza Udostępnij na innych stronach More sharing options...
Sevard Napisano Sierpień 15, 2010 Zgłoś Share Napisano Sierpień 15, 2010 Ok, czyli jest źle. Jeśli BSOD wyskoczy raz jeszcze, to sprawdź, czy będzie taki sam. Ten błąd może się wiązać z błędem sprzętowym, lub uszkodzeniem sterownika trybu jądra. Podstawowe pytanie, czy coś podkręcałeś? Jeśli chodzi o problemy sprzętowe, to tu winny może być procesor, pamięć, lub płyta główna. Pamięć sprawdź programem Memtest86+ (test powinien trwać minimum 3 godziny, lub do pierwszego błędu). Procesor możesz sprawdzić programem OCCT. Wybierz test CPU:OCCT i potem z listy Auto(1h), po zakończeniu testu zostaną wygenerowane wykresy, wrzuć je na forum. Jeśli podczas testu wyskoczy BSOD, to daj znać. Jeśli chodzi o stronę programową, to może to oznaczać problem z plikami systemowymi, lub oprogramowaniem zabezpieczającym. Rzadziej ze sterownikami, choć i tak warto spróbować przeinstalować co się da. Włóż do napędu płytę z Windowsem, w takim przypadku warto spróbować użyć opcji naprawy systemu. Warto też sprawdzić czy nie ma jakichś przydatnych informacji w pliku .dmp, ale tu musisz trochę poczekać, bo nie wiem jak wygląda analizowanie małych zrzutów w Viście x64. Link do komentarza Udostępnij na innych stronach More sharing options...
marinos Napisano Sierpień 16, 2010 Autor Zgłoś Share Napisano Sierpień 16, 2010 Praktycznie za kazdym razem BSOD jest inny. Dodatkowe informacje o problemie: BCCode: 3b BCP1: 00000000C0000005 BCP2: FFFFF80002C31F8A BCP3: FFFFF880039FEFC0 BCP4: 0000000000000000 Wczoraj byl jeszcze o kodzie 01. Zaraz zrobie te testy. Plyty z Windowsem do napedu nie wloze, bo mam Odmowe dostepu. Link do komentarza Udostępnij na innych stronach More sharing options...
DominikGAMERS Napisano Sierpień 16, 2010 Zgłoś Share Napisano Sierpień 16, 2010 Przecież odmowę dostępu masz tylko w Windowsie, ustaw butowalną płytę i daj napraw system ... Link do komentarza Udostępnij na innych stronach More sharing options...
marinos Napisano Sierpień 16, 2010 Autor Zgłoś Share Napisano Sierpień 16, 2010 Zapomnialem napisac, ze nic nie podkrecalem Link do komentarza Udostępnij na innych stronach More sharing options...
marinos Napisano Sierpień 16, 2010 Autor Zgłoś Share Napisano Sierpień 16, 2010 Dziwna sprawa, od rana mialem ze 20 BSODow. Gdzies od 1.5 godziny nie mam zadnego, komp chodzi stabilnie. Zrobilem test OCCT, doszedl do konca i chyba nie ma zadnych bledow. Link do komentarza Udostępnij na innych stronach More sharing options...
Sevard Napisano Sierpień 16, 2010 Zgłoś Share Napisano Sierpień 16, 2010 Więc tak: 1. Sprawdź pamięć i napisz czy były jakieś błędy. 2. Podaj odczyty S.M.A.R.T. dysku (poradnik). Skoro w pierwszym teście OCCT wykrył błąd, to coś jest nie tak jak być powinno. Najprawdopodobniej oznacza to niestety uszkodzenie procesora, choć teoretycznie również pamięć oraz magistrala mogą coś mieszać. Link do komentarza Udostępnij na innych stronach More sharing options...
marinos Napisano Sierpień 17, 2010 Autor Zgłoś Share Napisano Sierpień 17, 2010 Memtest nie wykryl bledow, z dyskiem tez chyba ok. Link do komentarza Udostępnij na innych stronach More sharing options...
marinos Napisano Sierpień 18, 2010 Autor Zgłoś Share Napisano Sierpień 18, 2010 Z tymi BSODami dam sobie spokoj, tym bardziej, ze ostatnio jest ich mniej. W przyszlym tygodniu oddam do serwisu. A jesli chodzi o te problemy z odmowa dostepu, to powodem chyba jest plik autorun.inf. SZukalem w necie i przechodzi on podobno z pendriva, pare pendrivow w kompie ostatnio goscilo. Nie wiem jednak jak to usunac. Combofix na Windows 7 64 bitowym nie chce ruszyc. Jest jaka inna metoda? Link do komentarza Udostępnij na innych stronach More sharing options...
Sevard Napisano Sierpień 18, 2010 Zgłoś Share Napisano Sierpień 18, 2010 Na dysku nie masz żadnego pliku autorun.inf, na pendrivie nie wiem, bo nie widzę. Jeśli jest taki plik na płycie, to i tak go nie ruszysz i może on być przydatny. Możesz spróbować czegoś takiego: Uruchom OTL i pole Własne opcje skanowania/skrypt wklej to co poniżej: :Processes killallprocesses :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] :Commands [emptyflash] [emptytemp] [reboot] i kliknij Wykonaj skrypt. Wrzuć na forum log z tej operacji. Link do komentarza Udostępnij na innych stronach More sharing options...
marinos Napisano Sierpień 18, 2010 Autor Zgłoś Share Napisano Sierpień 18, 2010 Jak wpisze autorun w Start-wyszukiwanie to mi to znajduje All processes killed ========== PROCESSES ========== ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\ deleted successfully. ========== COMMANDS ========== [EMPTYFLASH] User: All Users User: Default ->Flash cache emptied: 56504 bytes User: Default User ->Flash cache emptied: 0 bytes User: Public User: user ->Flash cache emptied: 62996 bytes Total Flash Files Cleaned = 0,00 mb [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Public User: user ->Temp folder emptied: 991738897 bytes ->Temporary Internet Files folder emptied: 23183603 bytes ->Opera cache emptied: 20630156 bytes ->Flash cache emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 1619120 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 825806 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50534 bytes RecycleBin emptied: 8762386 bytes Total Files Cleaned = 998,00 mb OTL by OldTimer - Version 3.2.9.1 log created on 08182010_213442 Files\Folders moved on Reboot... C:\Users\user\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. Registry entries deleted on Reboot... Link do komentarza Udostępnij na innych stronach More sharing options...
Sevard Napisano Sierpień 18, 2010 Zgłoś Share Napisano Sierpień 18, 2010 Znajduje, ale na CD/DVD, co jest normalne, ponieważ jest to plik, który zarządza autostartem, więc wiele płyt z tego korzysta. Nie zawsze musi to być niebezpieczne. Zresetuj kompa i zobacz, czy teraz wszystko działa. Zobacz też, czy masz dostęp do płyty z pomocą Total Comandera, czy czegoś podobnego. Link do komentarza Udostępnij na innych stronach More sharing options...
marinos Napisano Sierpień 19, 2010 Autor Zgłoś Share Napisano Sierpień 19, 2010 Dalej to samo. Przy probie dostepu za pomoca Total Commandera mam na poczatku komunikat "Dostep do pliku zabroniony" i do wyboru OK albo Jako Administrator. Jak klikne ta druga opcje to wyswietla mi sie zawartosc plyty. Link do komentarza Udostępnij na innych stronach More sharing options...
marinos Napisano Sierpień 24, 2010 Autor Zgłoś Share Napisano Sierpień 24, 2010 Dzieki Sevard za pomoc, probowalem jeszcze cos sam zdzialac, ale nic z tego. Dzisiaj siegnalem po najbardziej drastyczne i niezawodne rozwiazanie, czyli format i problem rozwiazany. Link do komentarza Udostępnij na innych stronach More sharing options...
Sevard Napisano Sierpień 24, 2010 Zgłoś Share Napisano Sierpień 24, 2010 Problem rozwiązany, więc temat zamykam.W razie potrzeby otwarcia tematu, proszę o kontakt przez PW. Link do komentarza Udostępnij na innych stronach More sharing options...