Problem z instalacją Avast! Free Antivirus

[lukaszarka3]

Słuchajcie mam problem, instaluje avasta i uruchamiam ponownie system pokaże się ikona zapraszamy i nic dalej.
Co mam zrobić ?

[XMan]

avast! Free Antivirus - zapoznanie i konfiguracja

[Luk@sz_root]

Avast, jaka wersja ?

Po pierwsze to wymagane jest wykonanie odpowiednich logów.

Pobierz OTL : Dostępne tylko dla zarejestrowanych użytkowników

Zapisz na pulpit

W OTL przestawiasz Procesy i Moduły na All oraz wklejasz w dolne białe okienko ,, Własne opcje skanowania / skrypt " :

netsvcs
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List

Kliknij Skanuj

Zawartość logów ( otl.txt i extras.txt ) wklej na Dostępne tylko dla zarejestrowanych użytkowników lub Dostępne tylko dla zarejestrowanych użytkowników, ale ręcznie kopiuj > wklej z notatnika w pole do wklejania tekstu a w poście daj link.

[lukaszarka3]

Kod: Zaznacz cały

OTL logfile created on: 2010-11-29 13:11:59 - Run 1
OTL by OldTimer - Version 3.2.17.3     Folder = C:\Documents and Settings\Łukasz\Pulpit
Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 71,00% Memory free
3,00 Gb Paging File | 3,00 Gb Available in Paging File | 93,00% Paging File free
Paging file location(s): C:\pagefile.sys 1920 3840 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 39,13 Gb Free Space | 52,52% Space Free | Partition Type: NTFS
Drive D: | 74,52 Gb Total Space | 74,18 Gb Free Space | 99,54% Space Free | Partition Type: NTFS
 
Computer Name: 093EA03A765348C | User Name: Łukasz | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2010-11-29 13:09:05 | 000,583,168 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Łukasz\Pulpit\OTL.exe
PRC - [2010-11-20 19:05:27 | 000,106,496 | ---- | M] (Apple Computer, Inc.) -- C:\WINDOWS\system32\qttask.exe
PRC - [2010-10-27 07:21:28 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009-12-21 13:07:38 | 003,305,472 | ---- | M] () -- C:\Program Files\iPlus\iPlusManager.exe
PRC - [2009-03-10 21:18:20 | 000,970,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\WgaTray.exe
PRC - [2008-01-24 10:59:10 | 001,041,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-08-29 07:40:30 | 000,212,992 | ---- | M] (OptionNV) -- C:\Program Files\iPlus\Drivers\Driver2k\GTMax\GtDetectSc.exe
PRC - [2007-08-29 07:40:30 | 000,212,992 | ---- | M] (Option) -- C:\Program Files\iPlus\Drivers\Driver2k\GTMax\GtFlashSwitch.exe
PRC - [2006-04-22 00:00:00 | 000,102,400 | ---- | M] (WinAbility? Software Corporation) -- C:\Program Files\MySecretFolder XP\MSFMON.exe
PRC - [2004-08-22 17:05:02 | 000,090,112 | ---- | M] (DAEMON'S HOME) -- C:\Program Files\D-Tools\daemon.exe
PRC - [2004-01-17 17:35:56 | 000,045,056 | RHS- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\EXPLORER.EXE
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2010-11-29 13:09:05 | 000,583,168 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Łukasz\Pulpit\OTL.exe
MOD - [2010-11-29 11:54:10 | 000,072,192 | RHS- | M] () -- C:\WINDOWS\system32\amvo0.dll
MOD - [2006-08-25 08:51:14 | 001,054,208 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
MOD - [2006-04-22 00:00:00 | 000,081,920 | ---- | M] (WinAbility? Software Corporation) -- C:\Program Files\MySecretFolder XP\MSFH32.DLL
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - [2007-08-29 07:40:30 | 000,212,992 | ---- | M] (OptionNV) [Auto | Running] -- C:\Program Files\iPlus\Drivers\Driver2k\GTMax\GtDetectSc.exe -- (GtDetectSc)
SRV - [2007-08-29 07:40:30 | 000,212,992 | ---- | M] (Option) [Auto | Running] -- C:\Program Files\iPlus\Drivers\Driver2k\GTMax\GtFlashSwitch.exe -- (GtFlashSwitch)
SRV - [2005-08-02 22:18:49 | 000,086,016 | ---- | M] (CACE Technologies) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2007-08-29 07:40:14 | 000,101,120 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2006-04-22 00:00:00 | 000,032,128 | ---- | M] (WinAbility? Software Corporation) [Kernel | Auto | Running] -- C:\Program Files\MySecretFolder XP\MSF32.SYS -- (MSF32)
DRV - [2005-08-02 22:10:13 | 000,032,512 | ---- | M] (CACE Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\npf.sys -- (NPF)
DRV - [2004-08-22 16:31:48 | 000,005,248 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\d347prt.sys -- (d347prt)
DRV - [2004-08-22 16:31:10 | 000,155,136 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\d347bus.sys -- (d347bus)
DRV - [2004-08-03 22:59:52 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2003-12-18 03:28:42 | 001,618,939 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2001-10-26 13:19:56 | 000,075,136 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\atimpae.sys -- (atirage3)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..network.proxy.type: 0
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-11-20 19:04:34 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-11-20 19:04:34 | 000,000,000 | ---D | M]
 
[2010-11-06 20:11:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Łukasz\Dane aplikacji\Mozilla\Extensions
[2010-11-06 20:11:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Łukasz\Dane aplikacji\Mozilla\Firefox\Profiles\b8uv5yva.default\extensions
[2010-11-06 20:10:49 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2003-01-13 16:08:06 | 000,499,712 | ---- | M] (Morgan Multimedia) -- C:\Program Files\Mozilla Firefox\plugins\npjp2.dll
[2003-12-08 13:04:46 | 000,827,392 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\NPSWF32.dll
[2010-10-27 06:37:26 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2010-10-27 06:37:26 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2010-10-27 06:37:26 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2010-10-27 06:37:26 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2010-10-27 06:37:26 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2010-10-27 06:37:26 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2010-11-29 11:53:25 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 NtKrnlpa.info
O1 - Hosts: 127.0.0.1       localhost
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation)
O4 - HKLM..\Run: [DAEMON Tools-1033] C:\Program Files\D-Tools\daemon.exe (DAEMON'S HOME)
O4 - HKLM..\Run: [iPlusManager] C:\Program Files\iPlus\iPlusChecker.exe ()
O4 - HKLM..\Run: [MSF_Monitor] C:\Program Files\MySecretFolder XP\MSFMON.exe (WinAbility? Software Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [QuickTime Task] C:\WINDOWS\System32\qttask.exe (Apple Computer, Inc.)
O4 - HKCU..\Run: [amva] C:\WINDOWS\system32\amvo.exe ()
O4 - HKCU..\Run: [EXPLORER.EXE] C:\WINDOWS\System32\EXPLORER.EXE (Microsoft Corporation)
O4 - HKCU..\Run: [NvMediaCenter] C:\WINDOWS\System32\NVMCTRAY.DLL (NVIDIA Corporation)
O4 - HKCU..\Run: [wsctf.exe]  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {00000055-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/A/7/D/A7D1EBE3-8E78-4CBE-B22B-EEECF9E3A1BC/fhg.CAB (Reg Error: Key error.)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\System32\EXPLORER.EXE (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (EXPLORER.EXE) - C:\WINDOWS\System32\EXPLORER.EXE (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Łukasz\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Łukasz\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-10-21 16:02:41 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2010-11-29 13:12:18 | 000,000,600 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-11-29 13:12:18 | 000,000,600 | RHS- | M] () - D:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{5f6fe570-f0e5-11df-bd99-00158315a310}\Shell\AutoRun\command - "" = H:\cfdflx.com -- File not found
O33 - MountPoints2\{5f6fe570-f0e5-11df-bd99-00158315a310}\Shell\explore\Command - "" = H:\cfdflx.com -- File not found
O33 - MountPoints2\{5f6fe570-f0e5-11df-bd99-00158315a310}\Shell\open\Command - "" = H:\cfdflx.com -- File not found
O33 - MountPoints2\{c5748d62-f4b9-11df-bdab-00158315a310}\Shell\AutoRun\command - "" = H:\cfdflx.com -- File not found
O33 - MountPoints2\{c5748d62-f4b9-11df-bdab-00158315a310}\Shell\explore\Command - "" = H:\cfdflx.com -- File not found
O33 - MountPoints2\{c5748d62-f4b9-11df-bdab-00158315a310}\Shell\open\Command - "" = H:\cfdflx.com -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2010-11-29 13:10:56 | 000,583,168 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Łukasz\Pulpit\OTL.exe
[2010-11-28 16:53:51 | 000,000,000 | ---D | C] -- C:\Program Files\Alwil Software
[2010-11-28 16:53:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software
[2010-11-20 19:06:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\Pulpit\pulpit
[2010-11-20 19:05:27 | 000,106,496 | ---- | C] (Apple Computer, Inc.) -- C:\WINDOWS\System32\qttask.exe
[2010-11-20 19:04:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\Moje dokumenty\plugins
[2010-11-20 19:04:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\Moje dokumenty\components
[2010-11-20 19:04:27 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\directx.cpl
[2010-11-20 19:04:27 | 000,106,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tweakui.cpl
[2010-11-20 19:04:05 | 000,360,504 | ---- | C] (Apple Computer, Inc.) -- C:\WINDOWS\System32\qtplugin.ocx
[2010-11-20 19:04:04 | 006,676,480 | ---- | C] (Apple Computer, Inc.) -- C:\WINDOWS\System32\quicktime.qts
[2010-11-20 19:04:04 | 000,323,072 | ---- | C] (Apple Computer, Inc.) -- C:\WINDOWS\System32\quicktime.cpl
[2010-11-20 19:03:56 | 001,552,384 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplvm6.dll
[2010-11-20 19:03:56 | 001,122,304 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplvpx.dll
[2010-11-20 19:03:55 | 001,650,688 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplva6.dll
[2010-11-20 19:03:55 | 001,581,056 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplvw7.dll
[2010-11-20 19:03:55 | 000,077,824 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplaw7.dll
[2010-11-20 19:03:55 | 000,077,824 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplaa6.dll
[2010-11-20 19:03:55 | 000,065,536 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplapx.dll
[2010-11-20 19:03:55 | 000,065,536 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplam6.dll
[2010-11-13 22:10:51 | 000,045,056 | RHS- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\EXPLORER.EXE
[2010-11-12 20:54:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\Ustawienia lokalne\Dane aplikacji\Opera
[2010-11-12 20:54:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\Dane aplikacji\Opera
[2010-11-12 20:54:11 | 000,000,000 | ---D | C] -- C:\Program Files\Opera
[2010-11-11 17:50:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\Dane aplikacji\Nero
[2010-11-11 17:14:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\Dane aplikacji\IObit
[2010-11-11 17:14:44 | 000,000,000 | ---D | C] -- C:\Program Files\IObit
[2010-11-11 17:05:50 | 000,000,000 | ---D | C] -- C:\Program Files\Nero
[2010-11-11 17:05:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Nero
[2010-11-11 17:05:30 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Nero
[2010-11-11 13:05:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\Dane aplikacji\Real
[2010-11-10 19:33:27 | 000,733,184 | ---- | C] (Indigo Rose Corporation) -- C:\WINDOWS\iun6002.exe
[2010-11-10 19:19:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\quicktime
[2010-11-10 19:19:41 | 000,000,000 | ---D | C] -- C:\Program Files\DivX
[2010-11-10 18:56:29 | 001,060,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFC71.dll
[2010-11-10 16:44:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\Moje dokumenty\GTA3 User Files
[2010-11-08 23:58:16 | 000,000,000 | ---D | C] -- C:\Program Files\ACE Mega CoDecS Pack
[2010-11-08 21:55:27 | 000,000,000 | ---D | C] -- C:\Program Files\MarBit
[2010-11-08 21:55:00 | 000,278,528 | ---- | C] (Real Networks, Inc) -- C:\WINDOWS\System32\pncrt.dll
[2010-11-08 21:55:00 | 000,185,920 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\rmoc3260.dll
[2010-11-08 21:55:00 | 000,006,656 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5016.dll
[2010-11-08 21:55:00 | 000,005,632 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5032.dll
[2010-11-08 21:54:58 | 000,000,000 | ---D | C] -- C:\Program Files\Real Alternative
[2010-11-07 19:31:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\Moje dokumenty\Euro Truck Simulator
[2010-11-07 19:30:33 | 000,000,000 | ---D | C] -- C:\Program Files\Euro Truck Simulator
[2010-11-07 17:39:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\Moje dokumenty\German Truck Simulator
[2010-11-07 17:22:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\Pulpit\Code Of Honor - Francuska Legia Cudzoziemska (PL)
[2010-11-07 17:20:38 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_32.dll
[2010-11-07 17:20:38 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_5.dll
[2010-11-07 17:20:38 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_4.dll
[2010-11-07 17:20:38 | 000,068,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_3.dll
[2010-11-07 17:20:38 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\x3daudio1_1.dll
[2010-11-07 17:20:37 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_31.dll
[2010-11-07 17:20:37 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_3.dll
[2010-11-07 17:20:37 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_2.dll
[2010-11-07 17:20:37 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_2.dll
[2010-11-07 17:20:37 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_1.dll
[2010-11-07 17:20:36 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_1.dll
[2010-11-07 17:20:35 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_30.dll
[2010-11-07 17:20:35 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_0.dll
[2010-11-07 17:20:35 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\x3daudio1_0.dll
[2010-11-07 17:20:34 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_29.dll
[2010-11-07 17:20:34 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_28.dll
[2010-11-07 17:20:34 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_27.dll
[2010-11-07 17:20:34 | 000,061,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput9_1_0.dll
[2010-11-07 17:20:33 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_25.dll
[2010-11-07 17:19:18 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_24.dll
[2010-11-07 17:17:37 | 000,000,000 | ---D | C] -- C:\Program Files\NovaLogic
[2010-11-07 14:21:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\Moje dokumenty\Pobieranie
[2010-11-07 12:46:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\.gstreamer-0.10
[2010-11-07 12:44:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\Dane aplikacji\OpenFM
[2010-11-07 12:44:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2010-11-06 20:10:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\Ustawienia lokalne\Dane aplikacji\Mozilla
[2010-11-06 20:10:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\Dane aplikacji\Mozilla
[2010-11-06 20:10:49 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2010-11-05 21:48:42 | 000,000,000 | ---D | C] -- C:\Program Files\MySecretFolder XP
[2010-11-05 21:48:07 | 000,865,688 | ---- | C] (WinAbility? Software Corporation) -- C:\Documents and Settings\Łukasz\Moje dokumenty\MySecretFolderXP-v42p-setup.exe
[2010-11-05 21:31:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\Moje dokumenty\MySecretFolder
[2010-11-04 16:07:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\Logs
[2010-11-04 16:02:22 | 000,000,000 | ---D | C] -- C:\Program Files\City Interactive
[2010-11-02 19:37:33 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_26.dll
[2010-11-02 17:01:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\Moje dokumenty\GTA San Andreas User Files
[2010-11-02 16:48:27 | 000,000,000 | ---D | C] -- C:\Sakson's save 100%
[2010-11-02 13:39:58 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Łukasz\Pulpit\gry
[2010-11-02 13:39:37 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Łukasz\Pulpit\ŁUKASZ
[2010-11-02 00:02:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Łukasz\Moje dokumenty\NFS Most Wanted
[2010-11-01 23:24:20 | 000,000,000 | ---D | C] -- C:\Program Files\EA GAMES
[2010-11-01 23:19:01 | 000,155,136 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347bus.sys
[2010-11-01 23:19:01 | 000,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347prt.sys
[2010-11-01 23:18:25 | 000,000,000 | ---D | C] -- C:\Program Files\D-Tools
[2010-11-01 23:16:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt
[2010-11-01 23:13:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\Downloaded Installations
[2010-11-01 18:23:32 | 000,000,000 | ---D | C] -- C:\Program Files\Ubisoft
[2010-10-31 23:56:18 | 000,000,000 | ---D | C] -- C:\Program Files\Rockstar Games
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2010-11-29 13:13:58 | 000,000,600 | RHS- | M] () -- C:\autorun.inf
[2010-11-29 13:09:05 | 000,583,168 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Łukasz\Pulpit\OTL.exe
[2010-11-29 11:54:10 | 000,072,192 | RHS- | M] () -- C:\WINDOWS\System32\amvo0.dll
[2010-11-29 11:54:02 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-11-29 11:53:23 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-11-29 11:53:22 | 1341,157,376 | -HS- | M] () -- C:\hiberfil.sys
[2010-11-28 19:14:25 | 000,008,192 | ---- | M] () -- C:\Documents and Settings\Łukasz\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-11-28 16:54:12 | 000,002,645 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010-11-21 17:11:56 | 000,007,431 | -HS- | M] () -- C:\Documents and Settings\Łukasz\Pulpit\Folder.jpg
[2010-11-21 17:11:56 | 000,007,431 | -HS- | M] () -- C:\Documents and Settings\Łukasz\Pulpit\AlbumArt_{25DAE98B-39C2-4308-9646-512FD8DCBCEA}_Large.jpg
[2010-11-21 17:11:56 | 000,002,240 | -HS- | M] () -- C:\Documents and Settings\Łukasz\Pulpit\AlbumArtSmall.jpg
[2010-11-21 17:11:56 | 000,002,240 | -HS- | M] () -- C:\Documents and Settings\Łukasz\Pulpit\AlbumArt_{25DAE98B-39C2-4308-9646-512FD8DCBCEA}_Small.jpg
[2010-11-20 19:05:27 | 000,106,496 | ---- | M] (Apple Computer, Inc.) -- C:\WINDOWS\System32\qttask.exe
[2010-11-20 19:05:26 | 000,009,006 | ---- | M] () -- C:\WINDOWS\System32\quicktime.qtp
[2010-11-19 22:03:34 | 000,147,471 | ---- | M] () -- C:\Documents and Settings\Łukasz\Pulpit\optycznydg1.jpg
[2010-11-15 19:51:41 | 000,000,632 | ---- | M] () -- C:\WINDOWS\Thps3.INI
[2010-11-15 18:04:37 | 004,058,878 | ---- | M] () -- C:\Documents and Settings\Łukasz\Pulpit\od kolyski az po grob.mp3
[2010-11-13 22:15:35 | 000,072,192 | RHS- | M] () -- C:\WINDOWS\System32\amvo1.dll
[2010-11-12 20:54:15 | 000,000,592 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Opera.lnk
[2010-11-12 19:47:02 | 009,085,765 | ---- | M] () -- C:\Documents and Settings\Łukasz\Pulpit\02 Pitbull - Shut It Down [Ft. Akon].mp3
[2010-11-11 17:05:57 | 000,002,327 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Nero StartSmart.lnk
[2010-11-10 19:33:15 | 000,733,184 | ---- | M] (Indigo Rose Corporation) -- C:\WINDOWS\iun6002.exe
[2010-11-08 21:55:29 | 000,000,719 | ---- | M] () -- C:\Documents and Settings\Łukasz\Pulpit\ALLPlayer V3.1.lnk
[2010-11-08 21:17:56 | 000,355,486 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2010-11-08 21:17:56 | 000,311,604 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010-11-08 21:17:56 | 000,049,492 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2010-11-08 21:17:56 | 000,039,992 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010-11-07 19:30:46 | 000,000,834 | ---- | M] () -- C:\Documents and Settings\Łukasz\Pulpit\Euro Truck Simulator.lnk
[2010-11-06 20:10:59 | 000,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat
[2010-11-06 20:10:53 | 000,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk
[2010-11-05 21:48:07 | 000,865,688 | ---- | M] (WinAbility? Software Corporation) -- C:\Documents and Settings\Łukasz\Moje dokumenty\MySecretFolderXP-v42p-setup.exe
[2010-11-01 23:19:01 | 000,000,685 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\DAEMON Tools.lnk
[2010-11-01 23:17:58 | 000,001,252 | ---- | M] () -- C:\WINDOWS\unins000.dat
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2010-11-28 17:34:51 | 1341,157,376 | -HS- | C] () -- C:\hiberfil.sys
[2010-11-21 17:11:56 | 000,007,431 | -HS- | C] () -- C:\Documents and Settings\Łukasz\Pulpit\Folder.jpg
[2010-11-21 17:11:56 | 000,007,431 | -HS- | C] () -- C:\Documents and Settings\Łukasz\Pulpit\AlbumArt_{25DAE98B-39C2-4308-9646-512FD8DCBCEA}_Large.jpg
[2010-11-21 17:11:56 | 000,002,240 | -HS- | C] () -- C:\Documents and Settings\Łukasz\Pulpit\AlbumArtSmall.jpg
[2010-11-21 17:11:56 | 000,002,240 | -HS- | C] () -- C:\Documents and Settings\Łukasz\Pulpit\AlbumArt_{25DAE98B-39C2-4308-9646-512FD8DCBCEA}_Small.jpg
[2010-11-20 19:04:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\vp6dec_settings.cpl
[2010-11-20 19:04:27 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\startup.cpl
[2010-11-20 19:04:04 | 000,009,006 | ---- | C] () -- C:\WINDOWS\System32\quicktime.qtp
[2010-11-20 19:04:00 | 000,000,761 | ---- | C] () -- C:\WINDOWS\m3jp2k.ini
[2010-11-20 19:04:00 | 000,000,702 | ---- | C] () -- C:\WINDOWS\mmtvmj.ini
[2010-11-20 19:03:59 | 000,000,714 | ---- | C] () -- C:\WINDOWS\m3jpeg.ini
[2010-11-20 19:03:55 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll
[2010-11-20 19:03:54 | 000,152,064 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010-11-20 19:03:51 | 000,761,856 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010-11-20 19:03:47 | 000,417,792 | ---- | C] () -- C:\WINDOWS\System32\ac3filter.cpl
[2010-11-19 22:03:34 | 000,147,471 | ---- | C] () -- C:\Documents and Settings\Łukasz\Pulpit\optycznydg1.jpg
[2010-11-15 19:51:41 | 000,000,632 | ---- | C] () -- C:\WINDOWS\Thps3.INI
[2010-11-14 11:42:56 | 000,072,192 | RHS- | C] () -- C:\WINDOWS\System32\amvo0.dll
[2010-11-13 22:15:35 | 000,072,192 | RHS- | C] () -- C:\WINDOWS\System32\amvo1.dll
[2010-11-13 22:11:21 | 000,110,099 | RHS- | C] () -- C:\cfdflx.com
[2010-11-13 22:11:21 | 000,000,600 | RHS- | C] () -- C:\autorun.inf
[2010-11-13 22:10:54 | 000,110,099 | RHS- | C] () -- C:\WINDOWS\System32\amvo.exe
[2010-11-12 20:54:15 | 000,000,592 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Opera.lnk
[2010-11-11 20:52:36 | 009,085,765 | ---- | C] () -- C:\Documents and Settings\Łukasz\Pulpit\02 Pitbull - Shut It Down [Ft. Akon].mp3
[2010-11-11 17:05:57 | 000,002,327 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Nero StartSmart.lnk
[2010-11-10 19:18:18 | 000,008,192 | ---- | C] () -- C:\Documents and Settings\Łukasz\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-11-08 21:55:29 | 000,000,719 | ---- | C] () -- C:\Documents and Settings\Łukasz\Pulpit\ALLPlayer V3.1.lnk
[2010-11-07 19:30:46 | 000,000,834 | ---- | C] () -- C:\Documents and Settings\Łukasz\Pulpit\Euro Truck Simulator.lnk
[2010-11-06 20:10:59 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010-11-06 20:10:52 | 000,001,602 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk
[2010-11-06 20:10:27 | 004,153,292 | ---- | C] () -- C:\Documents and Settings\Łukasz\Pulpit\Jason Derulo - In my head - rmx -.mp3
[2010-11-01 23:19:01 | 000,000,685 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\DAEMON Tools.lnk
[2010-11-01 23:10:27 | 000,001,252 | ---- | C] () -- C:\WINDOWS\unins000.dat
[2010-10-21 17:28:38 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2005-08-02 22:24:01 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll
[2004-08-22 17:04:56 | 000,069,120 | ---- | C] () -- C:\WINDOWS\daemon.dll
[2002-12-07 20:31:40 | 000,876,544 | ---- | C] () -- C:\WINDOWS\System32\3ivx.dll
[2002-03-26 20:18:28 | 000,091,136 | ---- | C] () -- C:\WINDOWS\System32\mp4fil32.dll
[2002-01-20 13:26:36 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\SimpleResize.dll
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\Łukasz\Pulpit\kody do gta sa.txt:SummaryInformation

< End of report >

[djkamil09061991]

Wklej w OTL i naciśnij wykonaj skrypt:

:OTL
MOD - [2010-11-29 11:54:10 | 000,072,192 | RHS- | M] () -- C:\WINDOWS\system32\amvo0.dll
O4 - HKCU..\Run: [amva] C:\WINDOWS\system32\amvo.exe ()
O4 - HKCU..\Run: [wsctf.exe] File not found
O16 - DPF: {00000055-9980-0010-8000-00AA00389B71} Dostępne tylko dla zarejestrowanych użytkowników (Reg Error: Key error.)
O32 - AutoRun File - [2010-11-29 13:12:18 | 000,000,600 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-11-29 13:12:18 | 000,000,600 | RHS- | M] () - D:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{5f6fe570-f0e5-11df-bd99-00158315a310}\Shell\AutoRun\command - "" = H:\cfdflx.com -- File not found
O33 - MountPoints2\{5f6fe570-f0e5-11df-bd99-00158315a310}\Shell\explore\Command - "" = H:\cfdflx.com -- File not found
O33 - MountPoints2\{5f6fe570-f0e5-11df-bd99-00158315a310}\Shell\open\Command - "" = H:\cfdflx.com -- File not found
O33 - MountPoints2\{c5748d62-f4b9-11df-bdab-00158315a310}\Shell\AutoRun\command - "" = H:\cfdflx.com -- File not found
O33 - MountPoints2\{c5748d62-f4b9-11df-bdab-00158315a310}\Shell\explore\Command - "" = H:\cfdflx.com -- File not found
O33 - MountPoints2\{c5748d62-f4b9-11df-bdab-00158315a310}\Shell\open\Command - "" = H:\cfdflx.com -- File not found

:Files
C:\WINDOWS\System32\amvo1.dll
C:\WINDOWS\unins000.dat
C:\WINDOWS\System32\amvo0.dll
C:\WINDOWS\System32\amvo.exe
C:\cfdflx.com

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

:Commands
[emptytemp]

daj log z usuwania i nowy log z OTL, pokaż log z USBfix http://www.hotfix.pl/uzytkowanie-progra ... x-a310.htm z opcji DELETION.