Brak płynności plików video.

[adaminh]

Witam!
W ostatnim czasie filmy video źle odtwarzają się na moim komputerze. Oglądanie filmów na YouTube przypomina pokaz slajdów. Czy jest to spowodowane infekcją? Proszę o sprawdzenie logów.

OTL: Dostępne tylko dla zarejestrowanych użytkowników
Extras: Dostępne tylko dla zarejestrowanych użytkowników

[kominekl]

"{0AD3A51E-8A39-41B0-A35B-C21BD13087E8}" = BrowseToSave
"{5f6460bd-391e-43ce-bcf3-130ef02f8cb2}_is1" = VshareComplete
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{C1C6816E-CBB3-A748-85F9-A8B47B68985B}" = conotiNuetosave
"{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}" = SearchNewTab
"Veetle TV" = Veetle TV
"vShare.tv plugin" = vShare.tv plugin 1.0
"SP_b0285714" = Search Assistant WebSearch 1.74
"StartNow Toolbar" = StartNow Toolbar
"SP_09b71135" = ContinueToSave 1.74
"SP_0b98f1bc" = EasyLife Search 1.74
"PIT Format 2011_is1" = PIT Format 2011
"Pity 2009_is1" = Pity 2009
"Pity Format 2010_is1" = Pity Format 2010
"PITy 2012_is1" = PITy 2012
"OptimizerPro" = OptimizerPro
"Optimizer Pro_is1" = Optimizer Pro v3.0
"MozillaMaintenanceService" = Mozilla Maintenance Service
"McAfee Security Scan" = McAfee Security Scan Plus
"EasylifeGadget Updater" =

Odinstaluj.

Proxy.

Dostępne tylko dla zarejestrowanych użytkowników.

Combofix.

Pobierz Dostępne tylko dla zarejestrowanych użytkowników na Pulpit (nie uruchamiaj!). Następnie wejdź w START -> URUCHOM -> i wklej tam:

"C:\Documents and Settings\Agata\Pulpit\Combofix.exe" /uninstall

Następnie uruchom OTL -> w oknie Własne opcje skanowania/skrypt wklej:

:OTL

DRV - [2012-07-23 08:58:11 | 000,031,744 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - File not found [Kernel | On_Demand | Stopped] -- E:\GarenaPlus\Garena Plus\Room\safedrv.sys -- (GGSAFERDriver)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Agata\USTAWI~1\Temp\TRLB5.tmp -- (GarenaPEngine)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ComboFix\CFcatchme.sys -- (CFcatchme)
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Dostępne tylko dla zarejestrowanych użytkowników
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Dostępne tylko dla zarejestrowanych użytkowników
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = Dostępne tylko dla zarejestrowanych użytkowników
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "WebSearch"
FF - prefs.js..browser.search.defaultenginename,S: "WebSearch"
FF - prefs.js..browser.search.defaulturl: "http://websearch.searchrocket.info/?pid=377&r=2013/05/24&hid=1280093185&lg=EN&cc=PL&unqvl=16&l=1&q="
FF - prefs.js..browser.search.order.1: "WebSearch"
FF - prefs.js..browser.search.order.1,S: "WebSearch"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.selectedEngine,S: "WebSearch"
FF - prefs.js..extensions.enabledItems: firefox@red-cog.com:2.8
FF - prefs.js..extensions.enabledItems: mil@toolbar:1.0.0
FF - prefs.js..extensions.enabledItems: vshare@toolbar:1.0.0
FF - prefs.js..keyword.URL: "http://websearch.searchrocket.info/?pid=377&r=2013/05/24&hid=1280093185&lg=EN&cc=PL&unqvl=16&l=1&q="
FF - prefs.js..network.proxy.autoconfig_url: "http://wpad.lukman.pl/wpad.dat"
FF - prefs.js..network.proxy.backup.ftp: "82.200.225.194"
FF - prefs.js..network.proxy.backup.ftp_port: 3128
FF - prefs.js..network.proxy.backup.socks: "82.200.225.194"
FF - prefs.js..network.proxy.backup.socks_port: 3128
FF - prefs.js..network.proxy.backup.ssl: "82.200.225.194"
FF - prefs.js..network.proxy.backup.ssl_port: 3128
FF - prefs.js..network.proxy.ftp: "46.98.72.128"
FF - prefs.js..network.proxy.ftp_port: 54321
FF - prefs.js..network.proxy.http: "46.98.72.128"
FF - prefs.js..network.proxy.http_port: 54321
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: "46.98.72.128"
FF - prefs.js..network.proxy.socks_port: 54321
FF - prefs.js..network.proxy.ssl: "46.98.72.128"
FF - prefs.js..network.proxy.ssl_port: 54321
FF - prefs.js..network.proxy.type: 2
[2011-08-08 19:24:29 | 000,000,000 | ---D | M] (VshareComplete - Speed up your search with your personal search suggestions tool) -- C:\Documents and Settings\Agata\Dane aplikacji\Mozilla\Firefox\Profiles\nu3ht60w.default\extensions\{4ac04d99-3f4b-4ec5-bd2d-216d59822f8a}
[2013-07-19 10:48:21 | 000,000,000 | ---D | M] (StartNow Toolbar) -- C:\Documents and Settings\Agata\Dane aplikacji\Mozilla\Firefox\Profiles\nu3ht60w.default\extensions\{5911488E-9D1E-40ec-8CBB-06B231CC153F}
[2012-05-09 16:34:00 | 000,000,000 | ---D | M] (mediaplayerconnectivity) -- C:\Documents and Settings\Agata\Dane aplikacji\Mozilla\Firefox\Profiles\nu3ht60w.default\extensions\{84b24861-62f6-364b-eba5-2e5e2061d7e6}
[2013-07-24 14:30:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\Mozilla\Firefox\Profiles\nu3ht60w.default\extensions\b47wb2.u@rvjj-sqtqhrfz.edu
[2012-07-23 20:56:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\Mozilla\Firefox\Profiles\nu3ht60w.default\extensions\euauue@vjmbi.org
[2010-08-13 18:52:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\Mozilla\Firefox\Profiles\nu3ht60w.default\extensions\mil@toolbar
[2012-07-24 07:32:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\Mozilla\Firefox\Profiles\nu3ht60w.default\extensions\o4eik@pyiidsmb.co.uk
[2013-07-24 14:30:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\Mozilla\Firefox\Profiles\nu3ht60w.default\extensions\yiy1iuiu@qcgldv.com
[2011-07-28 01:09:17 | 000,002,573 | ---- | M] () -- C:\Documents and Settings\Agata\Dane aplikacji\Mozilla\Firefox\Profiles\nu3ht60w.default\searchplugins\askcom.xml
[2011-02-12 02:51:21 | 000,002,059 | ---- | M] () -- C:\Documents and Settings\Agata\Dane aplikacji\Mozilla\Firefox\Profiles\nu3ht60w.default\searchplugins\daemon-search.xml
[2012-07-28 09:38:38 | 000,000,581 | ---- | M] () -- C:\Documents and Settings\Agata\Dane aplikacji\Mozilla\Firefox\Profiles\nu3ht60w.default\searchplugins\EasyLife.xml
[2011-08-08 19:24:17 | 000,000,792 | ---- | M] () -- C:\Documents and Settings\Agata\Dane aplikacji\Mozilla\Firefox\Profiles\nu3ht60w.default\searchplugins\startsear.xml
[2013-07-24 14:31:11 | 000,007,847 | ---- | M] () -- C:\Documents and Settings\Agata\Dane aplikacji\Mozilla\Firefox\Profiles\nu3ht60w.default\searchplugins\WebSearch.xml
[2013-07-19 10:48:13 | 000,001,388 | ---- | M] () -- C:\Documents and Settings\Agata\Dane aplikacji\Mozilla\Firefox\Profiles\nu3ht60w.default\searchplugins\yahoo-zugo.xml
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Zaufane witryny)
O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Zaufane witryny)
O15 - HKCU\..Trusted Domains: soe.com ([]* in Zaufane witryny)
O15 - HKCU\..Trusted Domains: sony.com ([]* in Zaufane witryny)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} Dostępne tylko dla zarejestrowanych użytkowników (Java Plug-in 10.21.2)
O20 - AppInit_DLLs: (c:\progra~1\contin~1\sprote~1.dll) - c:\Program Files\ContinueToSave\sprotector.dll ()
O20 - AppInit_DLLs: (c:\progra~1\websea~1\sprote~1.dll) - c:\Program Files\WebSearch\sprotector.dll ()
[2013-07-24 14:45:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Agata\Dane aplikacji\Optimizer Pro
[2013-07-24 14:30:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\SearchNewTab
[2013-07-24 14:29:07 | 000,000,000 | ---D | C] -- C:\Program Files\ContinueToSave
[2013-07-24 14:28:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\conotiNuetosave
[2013-07-20 03:04:02 | 016,940,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Pulpit\install_flash_player_ax.exe
[2013-07-19 10:53:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\McAfee Security Scan
[2013-07-19 10:53:41 | 000,000,000 | ---D | C] -- C:\Program Files\McAfee Security Scan
[2013-07-19 10:48:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Agata\Dane aplikacji\StartNow Toolbar
[2013-07-19 10:48:13 | 000,000,000 | ---D | C] -- C:\Program Files\StartNow Toolbar
[2013-07-24 11:00:06 | 000,000,522 | ---- | M] () -- C:\hpfr3420.xml
[2012-07-23 00:25:28 | 000,000,004 | ---- | C] () -- C:\Documents and Settings\Agata\Dane aplikacji\skype.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zyadeizbstq.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yruogei.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yft.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yeqc.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xhliavnncf.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xhepiahgu.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xei.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xabxrnwognq.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wmaeoulj.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vwx.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vtccpjjxhbl.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vpymgh.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vhgdwwy.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ugh.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\uaqqwmjt.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tubh.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tjerrruiu.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tgysztaa.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\skjqlknoa.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rvitifkhda.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qzegqoobxiy.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qpghwlpi.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qnretzig.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pvsbacopgo.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pefaimbebk.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\okbzdweogsf.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ocduhsoaeky.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\netcd.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mxdvmytw.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mlfml.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ldna.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kblu.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kaddzumq.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jxqxva.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ggjxmqh.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gbx.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fyvyvw.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fnyj.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\err.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\cqbt.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\cntaml.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\cfclssx.ini
[2012-06-27 05:27:43 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\aclcvmx.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zzmbkjttcv.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zhbezzk.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zbu.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ywcotf.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yqwnxmuqkr.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ynbpico.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\yfddtyco.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ybcwdcj.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xrjmwls.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xratz.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xnrwoffi.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xbwudob.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wztapis.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wvpmojcpagc.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wvmaql.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wuienx.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wtkvqxla.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\wjd.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vexcv.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\uuknvmo.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\uhgxcxne.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tttpgilubhz.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tmksiwyo.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\tcu.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\swrosmstc.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\surl.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\sthnpbr.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rzuc.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\rnni.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rnaxcorvnpm.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rmkgnn.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\riffaw.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rifbww.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qqqewpfdl.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\qgqkumwr.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qbdvroefxtf.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\psxulyb.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pqjjgvrcrr.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pplmagu.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pedcjlq.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ousspnt.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\oofsbkfk.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\olcfhmx.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\oicryjbsxhd.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ogn.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ogknbwh.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mpuqpwyjjoe.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mhymnl.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mhefcltipun.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mbpbf.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lwcnbd.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lnm.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lmkwvtfa.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\liif.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\lhlcj.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\knk.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jvanbm.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jscxtijpp.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jecbuzopv.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ixrmyzmuf.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ivz.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\itshnv.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\isnvgwxvzx.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\imisiwl.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ilppyukvb.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ikvd.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\iduxw.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ict.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ibqvywo.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\htubwk.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hqwxnfwmq.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hgu.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gzswrdxw.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gxiglgpq.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gswxesatox.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\giemuzl.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gecrm.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\gcgii.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\fmlgoxxnn.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\fas.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ezafudvoiyt.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\epuzw.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\egskehx.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\edsljcdivuy.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\ecisfvuhpa.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dxrnzku.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dqajfj.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dkfd.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\djzobvavx.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\detwvkklv.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\defhdp.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\civwzqm.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\byoqvakieh.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\bxqecmpfn.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\betjex.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\azuxhafgo.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ayyyufnvi.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\arembuqqlhl.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\apluecjxljh.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\akjgqsepny.ini
[2012-06-27 05:27:42 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ajfm.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\zmulmsalvp.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xhxj.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\xbeumyws.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\vuzy.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ujupkolaxz.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\udixx.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\srt.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\slfzi.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\sjzadmi.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\rpz.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\qqqt.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pjtdqi.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\phcioojd.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\pclkwlz.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\otorwgb.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ooaomuyhvz.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ntpp.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\narceunvfsr.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\mwzhlh.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\maynwlp.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kkrk.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\kjvzwobzke.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jvpytddxshm.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\jazdltqdat.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hxokmtz.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hrfumedgw.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\hiushfclfla.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ghdvcccqxcv.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\eewo.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\eesejbzog.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dmuuqmc.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dgckkqqq.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\dfswulgomz.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\ctxnogspj.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\cbqynozbpo.ini
[2012-06-27 05:27:41 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\auemdu.ini
[2011-07-28 16:44:37 | 000,051,186 | -H-- | C] () -- C:\Documents and Settings\Agata\Dane aplikacji\room_v3.dat
[2004-08-03 19:43:48 | 000,131,072 | -HS- | C] () -- C:\Documents and Settings\Agata\Dane aplikacji\skype.dat
[2012-07-23 19:49:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\.freeciv
[2009-06-28 13:05:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\BITS
[2009-06-28 13:18:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\CometNetwork
[2010-01-24 10:03:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\Cool Record Edit Pro
[2012-07-17 00:21:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\DAEMON Tools Lite
[2012-07-17 00:21:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\DAEMON Tools Pro
[2011-07-28 12:11:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\Eltima Software
[2009-06-28 09:13:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\FileZilla
[2009-05-29 07:23:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\fltk.org
[2012-07-09 16:39:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\GanymedeNet
[2010-03-12 12:13:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\GHISLER
[2012-07-25 11:25:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\Grupa IMAGE
[2009-12-02 13:12:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\id Software
[2012-07-04 14:24:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\ipla
[2012-07-01 18:41:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\Leadertech
[2010-02-16 08:03:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\Moyea
[2011-07-18 12:57:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\OpenFM
[2013-07-24 14:45:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\Optimizer Pro
[2011-07-24 09:55:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\PC Suite
[2011-01-24 07:27:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\PhotoScape
[2009-12-22 09:30:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\Samsung
[2012-07-23 20:42:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\SendSpace
[2008-01-28 12:18:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\Shareaza
[2012-07-04 14:24:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\Sony Online Entertainment
[2012-07-24 14:26:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\Sports Interactive
[2013-07-19 10:48:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\StartNow Toolbar
[2008-01-23 16:01:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\Tenebril
[2011-02-20 21:01:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\Thinstall
[2011-08-08 19:24:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\VshareComplete
[2012-07-04 14:24:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agata\Dane aplikacji\XnView
[2013-07-24 14:30:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\BetterSoft
[2012-07-28 20:43:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Braouwse2save
[2012-07-28 20:43:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Broowise2suavve
[2013-07-24 14:28:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\conotiNuetosave
[2012-07-02 12:11:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2009-06-28 05:29:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FlashFXP
[2012-07-23 00:43:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\GarenaMessenger
[2013-07-24 14:30:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\InstallMate
[2012-05-12 03:05:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla
[2012-07-28 05:05:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2011-07-24 09:52:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite
[2012-07-28 09:43:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PITy
[2010-07-10 19:29:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PMB Files
[2011-06-25 23:26:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RDRM
[2013-07-24 14:30:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SearchNewTab
[2012-07-23 20:56:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SoftSafe
[2009-10-19 14:35:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sports Interactive
[2013-07-24 14:49:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:373E1720

:Files
C:\WINDOWS\tasks\*.*
C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma Loader.lnk
C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\hp psc 1000 series.lnk
C:\ComboFix

:Reg
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C3F3165C-74D3-6FDB-3274-14FDA8698CFA}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_48c708f2]

:Commands
[clearallrestorepoints]
[emptytemp]

Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie podaj log z Dostępne tylko dla zarejestrowanych użytkowników (z opcji Delete) + log z TDSSKiller + nowe logi z OTL.

[adaminh]

Raport z usuwania: Dostępne tylko dla zarejestrowanych użytkowników
Raport z ADW: Dostępne tylko dla zarejestrowanych użytkowników
Raport z TDS: Dostępne tylko dla zarejestrowanych użytkowników
OTL: Dostępne tylko dla zarejestrowanych użytkowników
Extras: Dostępne tylko dla zarejestrowanych użytkowników

[kominekl]

ADWCleaner.

Naciśnij w ADWCleaner przycisk Odinstaluj.

Avast.

Masz bardzo przestarzałą wersję. Odinstaluj Go za pomocą Dostępne tylko dla zarejestrowanych użytkowników. Następnie zainstaluj Dostępne tylko dla zarejestrowanych użytkowników wersję.

Logi.

Uruchom OTL -> w oknie Własne opcje skanowania/skrypt wklej:

:OTL

O2 - BHO: (Braouwse2save) - {9FD7BA7E-96FE-C603-744E-4A5866C6F7A6} - C:\Documents and Settings\All Users\Dane aplikacji\Braouwse2save\513afbcd4490d.dll File not found

:Files
RECYCLER /alldrives
C:\WINDOWS\tasks\*.*

:Commands
[clearallrestorepoints]
[emptytemp]

Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie podaj log z Autoruns.