Problem z v9.Log OTL

[wid]

Witam.Proszę o sprawdzenie logów.Za nic nie idzie usunąć tego cholerstwa z IE

Dostępne tylko dla zarejestrowanych użytkowników

Dostępne tylko dla zarejestrowanych użytkowników

[kominekl]

"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"Veetle TV" = Veetle TV

To zbędne oprogramowanie. Pierwsze to zbędny pasek narzędziowy, a drugie to wtyczka ala vShare. Odinstaluj to oprogramowanie.

SRV - [2011/05/21 06:01:00 | 002,214,504 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2008/01/21 04:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [CarboniteSetupLite] C:\Program Files\Packard Bell\Carbonite\CarboniteSetupLitePBPreInstaller.exe (Carbonite, Inc.)
O4 - HKLM..\Run: [Google Quick Search Box] C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe (Google Inc.)
O4 - HKLM..\Run: [Launch LCDMon] C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe (Logitech Inc.)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [Onet.pl AutoUpdate] C:\Program Files\Common Files\Onet.pl\AutoUpdate.exe (Onet.pl)
O4 - HKLM..\Run: [OODefragTray] C:\Windows\System32\oodtray.exe (O&O Software GmbH)
O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE (Power Software Ltd)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-467254925-1194682291-1123341809-1000..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKU\S-1-5-21-467254925-1194682291-1123341809-1000..\Run: [GameXN] C:\ProgramData\GameXN\GameXNGO.exe (EasyBits Software AS)
O4 - HKU\S-1-5-21-467254925-1194682291-1123341809-1000..\Run: [GameXN (news)] C:\ProgramData\GameXN\GameXNGO.exe (EasyBits Software AS)
O4 - HKU\S-1-5-21-467254925-1194682291-1123341809-1000..\Run: [GameXN (update)] C:\ProgramData\GameXN\GameXNGO.exe (EasyBits Software AS)
O4 - HKU\S-1-5-21-467254925-1194682291-1123341809-1000..\Run: [Philips Intelligent Agent] C:\Program Files\Philips\Intelligent Agent\Philips Intelligent Agent.exe (Philips Consumer Electronics)
O4 - HKU\S-1-5-21-467254925-1194682291-1123341809-1001..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - Startup: C:\Users\grajur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Outil de notification de cadeaux MSN.lnk = C:\Users\grajur\AppData\Roaming\Microsoft\Outil de notification de cadeaux MSN\msnotif.exe (Microsoft Corporation)

To zbędne wpisy w autostarcie. Wejdź w START - > URUCHOM -> Msconfig -> Usługi -> odznacz usługę -> Windows Defender i NVIDIA Update. Resztę usunę skryptem.

Logi.

Uruchom OTL -> w oknie Własne opcje skanowania/skrypt wklej:

:OTL

DRV - File not found [Kernel | On_Demand | Unknown] -- -- (aarzmt02)
IE - HKLM\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW
IE - HKU\S-1-5-21-467254925-1194682291-1123341809-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = Dostępne tylko dla zarejestrowanych użytkowników
IE - HKU\S-1-5-21-467254925-1194682291-1123341809-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKU\S-1-5-21-467254925-1194682291-1123341809-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Dostępne tylko dla zarejestrowanych użytkowników
IE - HKU\S-1-5-21-467254925-1194682291-1123341809-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-467254925-1194682291-1123341809-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Dostępne tylko dla zarejestrowanych użytkowników
IE - HKU\S-1-5-21-467254925-1194682291-1123341809-1000\..\URLSearchHook: {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} - No CLSID value found
IE - HKU\S-1-5-21-467254925-1194682291-1123341809-1000\..\SearchScopes,DefaultScope = {CE9C53E3-CF67-4DEA-90A7-50CB00732A5C}
IE - HKU\S-1-5-21-467254925-1194682291-1123341809-1000\..\SearchScopes\{0633EE93-1111-472f-A0FF-E1416B8B2EAA}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&sa=Search&cx=partner-pub-3546861938806019:fn51rv5o9ne&cof=FORID%3A10&ie=UTF-8&hl=fr
IE - HKU\S-1-5-21-467254925-1194682291-1123341809-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-467254925-1194682291-1123341809-1000\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW
IE - HKU\S-1-5-21-467254925-1194682291-1123341809-1000\..\SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}
IE - HKU\S-1-5-21-467254925-1194682291-1123341809-1000\..\SearchScopes\{9D5BD211-422C-4164-9298-BB4186A30F31}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&mkt=fr-FR&form=MKTIE9
IE - HKU\S-1-5-21-467254925-1194682291-1123341809-1000\..\SearchScopes\{CE9C53E3-CF67-4DEA-90A7-50CB00732A5C}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GGLL_fr
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.19: C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
[2010/08/03 08:50:08 | 000,000,615 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pucuy.xml
[2012/05/23 21:57:51 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{265C1EF1-627B-444B-A352-204B6EEA271C}
[2012/05/23 21:57:39 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{5B32E53F-B011-4321-A59B-C1833B7E63E1}
[2012/05/23 09:57:14 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{40B1B804-6BDA-467A-B4E9-E52475861047}
[2012/05/23 09:57:03 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{71A5E246-718A-46EE-AF48-2928F33F21FD}
[2012/05/22 21:56:37 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{E4E7260E-DA3D-4FAC-B368-2B3FC7670520}
[2012/05/22 21:56:25 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{9863D123-D36E-4611-B3B3-7E85362A0066}
[2012/05/22 09:55:56 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{DCE1E6D2-9FD7-45F1-BA35-B5947C64605F}
[2012/05/22 09:55:37 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{AB00FFD2-9F5E-4790-85E3-0F269600082A}
[2012/05/21 20:04:48 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{4B178046-73B3-441C-A362-663024D4B31B}
[2012/05/21 20:04:32 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{AB1AA8D2-F6A7-434C-8C15-6A6595DF681C}
[2012/05/21 12:32:52 | 000,000,000 | ---D | C] -- C:\Program Files\Veetle
[2012/05/21 07:15:54 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{68058700-1118-4636-BCC9-10E6C0398788}
[2012/05/21 07:15:36 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{131DC959-324D-4009-B60B-74D95F933D46}
[2012/05/20 14:51:00 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{044F3B32-CBA4-485E-996B-8C47C4986EF4}
[2012/05/20 14:50:48 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{BFBFE5DB-3117-4F8D-8B9C-6A6EA7D94935}
[2012/05/20 13:54:51 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{3FAE6ED7-EBF0-4C1A-AEA3-3791962606A4}
[2012/05/20 13:54:30 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{FED4BEC8-BC7E-4CBB-8E46-150850DE06B4}
[2012/05/20 12:55:29 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{F4557E71-56C2-4326-83CA-14A676E4B786}
[2012/05/20 08:05:21 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{A1ECCB27-C9C7-4EDC-9603-EBA6241FED80}
[2012/05/20 08:05:01 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{3F9E0629-0853-40B3-9818-5196234AF8CE}
[2012/05/19 23:46:33 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{443CB236-2F62-4D75-8978-E76A16741F33}
[2012/05/19 23:46:21 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{89C8353B-E16D-4C64-A1F0-FBDC08D059A6}
[2012/05/19 20:50:57 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{CBF3BDA8-420F-4C16-B97B-5C807D85CAFC}
[2012/05/19 20:50:35 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{D22534BE-1DAE-4F71-A0AA-7784B617B040}
[2012/05/19 20:12:07 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{E9D480BB-1CF2-41E5-9436-D224027652A3}
[2012/05/19 20:11:46 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{260B9B4A-8610-4372-89B9-0BE758D73A80}
[2012/05/19 16:33:30 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{2B6C6F2C-6EE6-4844-A7C1-629FB5817B26}
[2012/05/19 16:33:16 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{3B93EDA3-2DFF-4FC8-BC1D-4A92796C0871}
[2012/05/19 14:40:13 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{4A2D11A9-79BD-4A76-A7E9-1E595C089181}
[2012/05/19 14:39:53 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{64378D75-5E97-4A56-A73B-EC947A72CD82}
[2012/05/19 08:50:45 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{47D4D725-CBC0-4A4B-A248-55E0AF488E95}
[2012/05/19 08:50:31 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{61EDA3CC-4B50-489D-A0BB-37B89C1C3B41}
[2012/05/19 08:05:29 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{371F95B5-B5F3-4D98-9752-B14E52164E37}
[2012/05/19 08:05:17 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{D8B1AE64-0467-44C9-A14E-67480A3E9148}
[2012/05/18 08:32:08 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{73735706-77DD-4FBB-BCD3-98312C0FC7A5}
[2012/05/18 08:31:44 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{B1217CE2-08E5-40E1-BBDF-B160DDB7943E}
[2012/05/17 21:34:20 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{CD357595-28DB-4874-96EE-0C917A8DD170}
[2012/05/17 21:34:08 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{86F3E591-2D69-4471-99AA-0A88ABCAB9B7}
[2012/05/17 20:33:28 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{58BA3913-C882-4200-A2C3-C456ED6FA5A7}
[2012/05/17 20:33:12 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{D91F7C4F-CF68-4984-A3EA-CAB7375E7126}
[2012/05/17 10:29:18 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{28B85831-DB9E-4BF3-92C1-1B09E0C0DBB8}
[2012/05/17 10:29:07 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{940B3458-20AA-4409-B09B-049B051389A2}
[2012/05/16 17:48:01 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{17771B7A-C4D1-4931-93ED-404D9FE2AE77}
[2012/05/16 17:47:50 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{297C6994-CC7A-48C1-AC67-4BFC2F49BE32}
[2012/05/16 14:06:03 | 000,000,000 | ---D | C] -- C:\Program Files\Conduit
[2012/05/16 14:02:21 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\Conduit
[2012/05/14 16:59:30 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{F4C0FE9B-C7B4-4941-BF1C-77C74BA420CE}
[2012/05/14 16:59:18 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{0329CC15-B8C8-4A37-848C-E0E7AD32F238}
[2012/05/13 22:01:42 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{0CC8BF86-FC10-4C32-BE46-2680A1C9BFCD}
[2012/05/13 22:01:31 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{1AD92E74-F53E-4F6A-BC39-E352333AB3E1}
[2012/05/13 16:59:52 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{25D9863D-7272-4FAE-B011-42784D94599E}
[2012/05/13 16:59:39 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{84361D69-1BEF-4A56-9C07-AAFE85E92844}
[2012/05/12 16:02:32 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{EBF2C0CA-357E-4C5E-9374-44691948765F}
[2012/05/12 16:02:21 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{8A64F4F6-8650-46EE-8379-BCCDBDA139FB}
[2012/05/11 15:32:10 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{D053F551-E8C6-44EB-BAED-FD836FE0EB5E}
[2012/05/11 15:31:51 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{EB30CA84-C4FB-453B-AF00-94DE8A1F188D}
[2012/05/10 15:44:46 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{4861A9E0-F61A-43CF-8837-9F340110D831}
[2012/05/10 15:44:35 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{BA4E58F5-C83D-4880-9A65-30B15839AAC6}
[2012/05/10 15:08:38 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{FA9CD8BB-0EEF-4954-8B18-96C8C741B46E}
[2012/05/10 15:08:20 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{9C7EFC74-DC35-4B94-8221-EC2511DB3281}
[2012/05/09 19:04:41 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{0022610D-153A-4A28-BC93-05A1395FF659}
[2012/05/09 19:04:21 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{E1979748-5D17-46EF-9F3F-E182880703B3}
[2012/05/09 07:50:42 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{BC0CC0D4-6CE1-4ECC-8C29-2CC277FC70C2}
[2012/05/09 07:50:20 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{194BD4A5-0EDF-4155-931C-77E55BE43B65}
[2012/05/07 07:18:44 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{70FF22C1-2ADE-4EB1-9E17-9BAE712BFA90}
[2012/05/07 07:18:23 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{38D0778A-BDCD-43B7-BCFA-E7C7B83D2CFC}
[2012/05/06 17:00:56 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{A1898AB6-28E7-4755-904A-D5EF27ED601F}
[2012/05/06 17:00:37 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{54AFB4B1-E73D-438D-A9FD-4211B52B873E}
[2012/05/05 13:45:58 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{88CA2C88-37E3-4744-983E-21FFB9E62C3A}
[2012/05/05 13:45:39 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{55345B2B-1BC5-40BB-8504-F1BFF9E2B74C}
[2012/05/04 15:53:24 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{4504F1E3-00B5-436B-B580-42BE09E06284}
[2012/05/04 15:53:05 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{76027C4B-D98B-479C-94CD-6CBC54933266}
[2012/05/03 15:58:03 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{421ED639-FE35-41EC-9A69-DB88428FB4D4}
[2012/05/03 15:57:43 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{B45E4C32-4DD7-499B-ABD0-7373CA18128A}
[2012/05/02 07:37:24 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{BACF0E31-4FBB-4273-8CB3-547DCCC361C5}
[2012/05/02 07:36:58 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{18DE4DDE-C095-4E24-97F2-736D73469F27}
[2012/05/01 07:04:57 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{A4DA225B-8DD9-4CFE-8CAA-E4C59188809E}
[2012/05/01 07:04:37 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{B59C52B9-914A-4AC5-9450-9EEA7E420A24}
[2012/04/30 13:57:09 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{B30DB6E5-0147-4A75-A946-4C5B02FC06DD}
[2012/04/30 13:56:53 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{B46E17A2-AAE4-42F7-9B31-9A33335C0065}
[2012/04/29 17:23:41 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{9E4588A5-DB46-4240-A850-6C9F42713CCD}
[2012/04/29 17:23:25 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{8657F4F0-7575-49B3-96ED-C29950092D97}
[2012/04/28 14:25:20 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{B711B4B5-1245-4A81-A18D-E3E36EEC0BE4}
[2012/04/28 14:25:06 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{784B939D-0DA9-4352-A8E6-EDFA646C5D80}
[2012/04/27 15:25:11 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{F5D4E9B4-FC8B-4550-B103-65F69170A21E}
[2012/04/27 15:24:47 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{1B7D719A-3625-40F3-B8B8-D9E4F3DA7C4F}
[2012/04/26 16:03:13 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{3165FEAE-A9C4-402C-8D27-500BA1AC4E7E}
[2012/04/26 16:03:01 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{7DBC8448-2F92-4E36-B115-9B10EB86382E}
[2012/04/26 15:52:22 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{BBEA1DE9-6AC0-4A4E-AFE8-F93DA3AC4E69}
[2012/04/26 15:51:58 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{0A4AF7B0-F5D2-44EE-B7E2-73E7F411E3F6}
[2012/04/25 14:58:01 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{0C5FF022-8614-4432-B565-A1F75E626670}
[2012/04/25 14:57:47 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{48DCC847-4316-4087-83B3-B85A6F8E3BF0}
[2012/04/25 07:40:52 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{367A5408-6CA9-456A-A844-F2790CBA7D08}
[2012/04/25 07:40:33 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{5535E5FD-3BFF-4B09-94CA-A158EF22FAB2}
[2012/04/24 06:20:06 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{128023EC-E308-4B7D-BA1F-8FC9B4498F31}
[2012/04/24 06:19:55 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{C0C21A67-D535-4A03-A650-AD99A9D564B2}
[2012/04/24 00:17:55 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{B44F6108-C70C-4FA9-B40F-D90C8813069A}
[2012/04/24 00:17:35 | 000,000,000 | ---D | C] -- C:\Users\grajur\AppData\Local\{48775C14-1BCA-4000-B626-B93CEE8EBACD}
@Alternate Data Stream - 64 bytes -> C:\Users\grajur\.gstreamer-0.10\Documents\SANY0155.MP4:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\grajur\.gstreamer-0.10\Documents\MVI_1586.AVI:TOC.WMV
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:22446EB0
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:DFC5A2B2

:Files
C:\Program Files\Google\Update
C:\Windows\tasks\*.job
C:\Windows\tasks\SA.DAT
C:\Users\grajur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Outil de notification de cadeaux MSN.lnk

:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ArcSoft Connection Service"=-
"CarboniteSetupLite"=-
"Google Quick Search Box"=-
"Launch LCDMon"=-
"NeroFilterCheck"=-
"Onet.pl AutoUpdate"=-
"OODefragTray"=--
"PWRISOVM.EXE"=-
"RtHDVCpl"=-
"TkBellExe"=-
"Windows Defender"=-
[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]
"WindowsWelcomeCenter"=-
"WindowsWelcomeCenter"=-
[HKEY_USERS\S-1-5-21-467254925-1194682291-1123341809-1000\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=-
"GameXN"=-
"GameXN (news)"=-
"GameXN (update)"=-
"Philips Intelligent Agent"=-
[HKEY_USERS\S-1-5-21-467254925-1194682291-1123341809-1001\Software\Microsoft\Windows\CurrentVersion\Run]
"WindowsWelcomeCenter"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

:Commands
[emptyflash]
[clearallrestorepoints]
[emptytemp]

Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie podajesz nowe logi z OTL + log z TDSSKiller -> http://www.hotfix.pl/instrukcja-obslugi ... r-a341.htm.