Skocz do zawartości

Niemiec

Stały użytkownik
  • Postów

    11141
  • Dołączył

  • Ostatnia wizyta

  • Wygrane w rankingu

    5

Treść opublikowana przez Niemiec

  1. Ty to jeszcze masz gaz ;) ja robie 90% najazdu w pieknym, niezakorkowanym, nie posiadajacym swiatel i czerwonej fali ;) Olsztynie i astrolot przy moich trasach miejskich trasach pali mi srednio 11l, ale nie biadole tylko leje, bo pali ile musi. moze za ta kase (8k 2 lata temu) mialbym inne auto, moze wieksze, wygodniejsze, bardziej "prestizowe", ale auto mi sluzy do przemieszczania sie z ptk A do B i do wozenia szpeju na lotniko, ktory po zaladowaniu do kufra potraja wartosc auta. do tego mam fajne wyposazenie jak na 14 letnie auto (klima, abs, elektryka, 2pp) i zerowo awaryjnosc, przez dwa lata i 20kkm pekla mi tylko linka do licznika, ktora kosztowala chyba 19pln :D jak bym nie musial wozic sprzetu na lotnisko to pewnie nawet bym nie mial wozu, bo na codzien nie potrzebuje, a na wakacje taniej byloby go wypozyczyc. ostatnio mialem okazje pojezdzic toche E34 (2.0 z vanosem) znajomego i nie powiem, ze jest zle, bo ten obejmujacy kokpit fajny jest, dzwiek R6 takze, ale osiagi mimo 150KM vs 100 nie robia wrazenia, spalanie robi, ale negatywne, bo zeby jezdzic dynamicznie to trzeba krecic. wyposazenie auta poza szyberdachem i skora (porazka w aucie bz klimy) jest zerowe. fajnie sie jezdzi, daje radosc jak tyl ucieka, ale widocznosc w lusterkach jest zerowa. astry na niego bym nie zamienil, bo jak poszaleje na trasie to astra spali 7,5 a beta przy spokojnej 8.5 a roznicy w osiagach mimo takiej roznicy w mocy nie widze. no i jeszcze taki detal jak OC, ja place 420pln rocznie a znajomek za bete 850 ;) wiec przestan wciskac wszystkim prawie pelnoletnie bmw jako panaceum. fajne auto, ale dla mnie nie oferuje nic poza fajnie uslizgujacym sie tylem, co pewnie i tak po dluzszym obcowaniu by mi sie znudzilo.
  2. jest, jak nie ma ceny minimalnej to KT znika przy zlozeniu pierwszej oferty.
  3. Niemiec

    Auto Do 60k

    kontynujac OT moze po prostu dal za malo oleju lub gaznik sie rozregulowal? ja tak mialem jak membrana sie zawiesila i dawal zbyt bogata mieszanke i palil ok 6l/h. moje solo (210ccm 14-17KM) to tez dwusow i tez lata tylko dobrze na pb95, przepalil juz jego ze 200l "nestle" zmieszanego z husqurna full syntetic i dalej zyje a ladowania w terenie przygodnym tylko raz wyniknely z kwestii paliwa a wlasciwie tego, ze go zabraklo (zawieszona membrana) ;) ten raven pali wiecej niz moj naped, bo u mnie spalanie zamyka sie w 3-3,5l/h a startowej mam ok. 115kg :P
  4. Niemiec

    Auto Do 60k

    a u nas wlasnie na shellu mieli chrzczona rope :lol: ja jezdze i latam na neste pb95 i problemow nie mam ;)
  5. a nie znam takiej fabrycznej ;)
  6. 1200 16V z punto tez wrzucali do sejow a z tego co pamietam to wchodzi bez przerobek w miejsce 1.1
  7. kiedys sie nim interesowalem i o ile w zakupie jest wzglednie tani to czesci wg. ktoregos forum uzytkownikow fiacika juz takie tanie nie sa a i bezawaryjny to on nie jest.
  8. drazni mnie jedna rzecz. jak jest jeden pas do skretu w lewo w pozniej 2 lub 3 to wg.przepisow moge zajac dowolny z nich, ale inni kierowcy jakos tego nie rozumieja. wielokrotnie mialem sytuacje ze kierownik jadace przede mna zajmowal lewy a ja zjezdzalem na prawy a potem jak bylem w polowie jego wysokosci to przypominal sobie, ze powinien zjechac na prawo i panika jak slyszy klakson, bo pojawia sie auto z nikad. az mnie czasami korci, zeby nie trabic bo lewe przednie nadkole przydaloby sie zrobic, ale zal mi tych ciot, ktore sa juz wystarczajaco zagubione zmiana biegow, bo patrzenie w lusterka to sztuka magiczna. normalnie czary, jedzie za mna auto na pasie do skretu w lewo, a chwile potem go nie ma a za 2 sek jak chce zjechac na prawo odzywa sie klakson z za swiatow.
  9. kiepsko widac, ale na pokrywie ma napisane 560SEC AMG ;)
  10. do myszy byly stery od windy a do pada sa od synapticsa. wywalilem sprzet w menagerze, restart, winda zainstalowala drivery ponownie i dziala bez problemow.
  11. problem chyba rozwiazany. pomogla... reinstalacja sterow od myszy i pada 8O
  12. takie objawy sa przy pracy na zasilaniu z sieci. chlodzenie nie wlacza sie czesto. jedyne peryferia jakie sa podpinane to pendrive. teraz mam odpalony menager zadan i FF i po paru chwilach juz nie moglem przelaczyc sie miedzy oknami za pomoca myszky, z alt+tab poszlo. FF z onetem zabiera 90mb ram a przy przelaczeniu sie na niego uzycie procka skacze do 20-50%.
  13. z ta gwara to pojechales :P to nie naped paralotniowy, ze zaraz po wplacie kasy producent ci mowi, ze penis ci w zad i martw sie sam (a naped kosztuje tyle co FF od N) i ze nawet jak posypalo sie z jego winy to jest to twoja wina ;).jakis rok temu wyslalem do serwisu nikona s"loik" od d40, bo padl w nim AF. nie mialem ani dowodu zakupu ani podbitych kart gw a caly sprzet i tak mial grubo ponad rok i chlopaki zrobili to w ramah gwarancji. jedyny babol jaki walneli to, ze sprzet odeslali na adres firmy z ktorej go wysylalem kurierem a nie na adres ktory podalem jako korespondencyjny. no i to ze babka z nikon polska dzonila czemu karty gwarancyjne sa czyste i nie ma dowodu zakupu, po poleceniu sprawdzenia zgloszenia gwarancyjnego spasowala z dalszymi pytaniami i powiedziala, ze przystepuja do naprawy.
  14. a wartosc dla write error data wynosi odpowiednio: 100;100;60;12970;*****
  15. na poczatku rezydent spybot zabieral ok 100-120mb ram, ale mocno procka nie obciazal, podobnie do rezydenta adaware. dr.web.cureit znalazl trojan.costam.140 w oprogramowaniu od sony ericssona, ale to nie pomoglo. firefox zaraz po uruchomieniu wciaga 70mb ram i potrafi zajac 60% procka. dosc czesto nie ma zadnej reakcji na mysz czy TP, ale wystaczy przelaczyc alt+tab miedzy oknami i ozywa.
  16. Niemiec

    Auto Do 35tys

    na moje to nie ta klasa aut ;) octa to odpowiednik bory a nie paska. a wracajac do octavii to z tylu faktycznie jest malo miejsca a w liftbcku dodatkowo nisko schodzi dach.
  17. lapek zachowuje sie w dziwny sposob, bo w czasie przegladania stron jakby przymieral na chwile, nie dalo sie klikc linkow, przy przegladaniu folderow dzieje sie tak samo, nie mozna przelaczac sie miedzy oknami czy tez otwierac plikow, po krotszej lub dluzszej chwili sie to naprawia na jakis czas, dzieje sie tak przy uzyciu myszi i touchpada » Naciśnij aby pokazać/ukryć tekst oznaczony jako spoiler « - combo ComboFix 09-08-25.05 - Marek 2009-08-26 17:36.5.1 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.3.1250.48.1045.18.1023.642 [GMT 2:00] Uruchomiony z: c:\documents and settings\Marek\Pulpit\123\ComboFix.exe AV: avast! antivirus 4.8.1351 [VPS 090826-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D} FW: ArcaFirewall 2007 *enabled* {B640009B-6FF6-4CA7-9CE8-7DA160B95A5B} UWAGA - TEN KOMPUTER NIE MA ZAINSTALOWANEJ KONSOLI ODZYSKIWANIA !! . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\BM21150afd.txt c:\windows\BM21150afd.xml c:\windows\Installer\27566f.msp c:\windows\Installer\3d7e3.msp c:\windows\system32\nerocheck.exe . ((((((((((((((((((((((((( Pliki utworzone od 2009-07-26 do 2009-08-26 ))))))))))))))))))))))))))))))) . 2009-08-26 14:49 . 2009-08-26 14:49 -------- d-----w- C:\SDFix 2009-08-10 21:21 . 2009-08-10 21:38 -------- d-----w- c:\program files\SkanerOnline 2009-08-10 20:16 . 2009-08-26 15:29 -------- d-----w- c:\program files\Spybot - Search & Destroy 2009-08-09 21:37 . 2009-08-09 21:37 -------- d-----w- c:\program files\ESET 2009-08-09 18:14 . 2009-08-24 14:06 -------- d-----w- c:\program files\Panda Security 2009-08-09 17:03 . 2009-08-09 17:03 -------- d-----w- c:\documents and settings\Marek\Ustawienia lokalne\Dane aplikacji\Opera 2009-08-09 17:03 . 2009-08-09 17:10 -------- d-----w- c:\program files\Opera . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-08-26 15:41 . 2006-09-07 15:26 -------- d-----w- c:\program files\Eraser 2009-08-26 15:20 . 2008-07-04 11:18 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Spybot - Search & Destroy 2009-08-26 15:19 . 2008-09-22 14:03 -------- d-----w- c:\program files\Lavasoft 2009-08-18 17:19 . 2009-04-02 11:39 -------- d-----w- c:\documents and settings\Marek\Dane aplikacji\skypePM 2009-08-17 20:00 . 2004-09-20 08:26 67496 ----a-w- c:\windows\system32\perfc015.dat 2009-08-17 20:00 . 2004-09-20 08:26 436560 ----a-w- c:\windows\system32\perfh015.dat 2009-08-17 16:10 . 2008-09-12 16:11 1279456 ----a-w- c:\windows\system32\aswBoot.exe 2009-08-17 16:06 . 2008-09-12 16:12 93392 ----a-w- c:\windows\system32\drivers\aswmon.sys 2009-08-17 16:06 . 2008-09-12 16:12 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys 2009-08-17 16:05 . 2008-09-12 16:12 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys 2009-08-17 16:05 . 2008-09-12 16:12 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys 2009-08-17 16:04 . 2008-09-12 16:13 51376 ----a-w- c:\windows\system32\drivers\aswTdi.sys 2009-08-17 16:04 . 2008-09-12 16:14 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys 2009-08-17 16:03 . 2008-09-12 16:13 26944 ----a-w- c:\windows\system32\drivers\aavmker4.sys 2009-08-17 16:02 . 2008-09-12 16:13 97480 ----a-w- c:\windows\system32\AvastSS.scr 2009-08-16 19:30 . 2007-10-04 17:46 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Microsoft Help 2009-08-16 13:16 . 2006-10-15 19:13 -------- d-----w- c:\documents and settings\Marek\Dane aplikacji\Skype 2009-08-09 18:04 . 2009-07-19 16:03 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Norton 2009-08-09 18:04 . 2009-03-06 22:11 -------- d-----w- c:\program files\Norton Security Scan 2009-08-09 18:04 . 2006-07-13 21:32 -------- d-----w- c:\program files\Common Files\Symantec Shared 2009-08-05 09:01 . 2004-08-04 08:00 205312 ----a-w- c:\windows\system32\mswebdvd.dll 2009-07-31 17:18 . 2008-11-29 10:47 -------- d-----w- c:\program files\Microsoft Silverlight 2009-07-19 16:03 . 2009-07-19 16:03 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Symantec 2009-07-19 16:03 . 2009-07-19 16:03 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\NortonInstaller 2009-07-17 19:04 . 2004-08-04 08:00 58880 ----a-w- c:\windows\system32\atl.dll 2009-07-16 16:34 . 2009-07-16 16:11 -------- d-----w- c:\program files\Xvid 2009-07-16 16:29 . 2009-07-16 16:27 -------- d-----w- c:\program files\YouTube Video Downloader 2009-07-14 13:47 . 2008-10-04 11:11 -------- d-----w- c:\program files\Odkurzacz 2009-07-13 21:43 . 2004-08-04 08:00 286208 ----a-w- c:\windows\system32\wmpdxm.dll 2009-07-05 16:56 . 2006-08-06 08:54 107888 ----a-w- c:\windows\system32\CmdLineExt.dll 2009-06-29 15:59 . 2004-08-04 08:00 827392 ----a-w- c:\windows\system32\wininet.dll 2009-06-29 15:59 . 2004-08-04 08:00 78336 ----a-w- c:\windows\system32\ieencode.dll 2009-06-29 15:59 . 2004-08-04 08:00 17408 ----a-w- c:\windows\system32\corpol.dll 2009-06-16 14:40 . 2004-08-04 08:00 119808 ----a-w- c:\windows\system32\t2embed.dll 2009-06-16 14:40 . 2004-08-04 08:00 81920 ----a-w- c:\windows\system32\fontsub.dll 2009-06-15 10:45 . 2004-08-04 08:00 78336 ----a-w- c:\windows\system32\telnet.exe 2009-06-10 14:15 . 2004-08-04 08:00 84992 ----a-w- c:\windows\system32\avifil32.dll 2009-06-10 07:22 . 2004-08-04 08:00 2066432 ----a-w- c:\windows\system32\mstscax.dll 2009-06-10 06:16 . 2004-08-04 08:00 132096 ----a-w- c:\windows\system32\wkssvc.dll 2009-06-03 19:11 . 2004-08-04 08:00 1294848 ----a-w- c:\windows\system32\quartz.dll 2004-07-22 08:51 . 2004-07-22 08:51 3432656 -c--a-w- c:\program files\ManagedDX.CAB 2004-07-19 20:58 . 2004-07-19 20:58 1156363 -c--a-w- c:\program files\BDANT.cab 2004-07-19 20:53 . 2004-07-19 20:53 976020 -c--a-w- c:\program files\BDAXP.cab 2004-07-16 12:30 . 2004-07-16 12:30 3858 -c--a-w- c:\program files\directx redist.txt 2004-07-09 12:17 . 2004-07-09 12:17 13265040 -c--a-w- c:\program files\dxnt.cab 2004-07-09 07:13 . 2004-07-09 07:13 15493481 -c--a-w- c:\program files\DirectX.cab 2004-07-09 07:13 . 2004-07-09 07:13 703080 -c--a-w- c:\program files\BDA.cab 2004-07-09 02:08 . 2004-07-09 02:08 472576 -c--a-w- c:\program files\dxsetup.exe 2004-07-09 02:08 . 2004-07-09 02:08 2242560 -c--a-w- c:\program files\dsetup32.dll 2004-07-09 01:03 . 2004-07-09 01:03 62976 -c--a-w- c:\program files\DSETUP.dll 2003-08-05 12:25 . 2006-09-07 15:25 194 -c--a-w- c:\program files\EraserSetup.asc 2003-08-05 12:24 . 2006-09-07 15:25 2833921 -c--a-w- c:\program files\EraserSetup.exe 2003-08-05 12:23 . 2006-09-07 15:25 4600 -c--a-w- c:\program files\History.txt 2003-07-25 08:33 . 2006-09-07 15:25 6159 -c--a-w- c:\program files\README.txt 2002-01-07 03:30 . 2006-09-07 15:25 18351 -c--a-w- c:\program files\COPYING.txt . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Eraser"="c:\program files\Eraser\eraser.exe" [2003-07-25 536576] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\lib\NMBgMonitor.exe" [2005-09-03 94208] "Odkurzacz-MCD"="c:\program files\Odkurzacz\odk_mcd.exe" [2008-08-16 264704] "H/PC Connection Agent"="d:\palmtop\wcescomm.exe" [2005-11-15 1204224] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2006-11-23 487424] "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-08-17 81000] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OneCard] 2004-11-10 00:19 38912 ----a-w- c:\program files\HPQ\IAM\Bin\AsWlnPkg.dll [HKLM\~\startupfolder\C:^Documents and Settings^Marek^Menu Start^Programy^Autostart^Registration Heroes of Might & Magic 5 - Hammers of Fate.LNK] path=c:\documents and settings\Marek\Menu Start\Programy\Autostart\Registration Heroes of Might & Magic 5 - Hammers of Fate.LNK backup=c:\windows\pss\Registration Heroes of Might & Magic 5 - Hammers of Fate.LNKStartup [HKLM\~\startupfolder\C:^Documents and Settings^Marek^Menu Start^Programy^Autostart^Registration Heroes of Might & Magic 5.LNK] path=c:\documents and settings\Marek\Menu Start\Programy\Autostart\Registration Heroes of Might & Magic 5.LNK backup=c:\windows\pss\Registration Heroes of Might & Magic 5.LNKStartup [HKEY_LOCAL_MACHINE\software\microsoft\security center] "UpdatesDisableNotify"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\U.S. Robotics\\EasyConfigurator\\EasyConfigurator.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"= "d:\\Gry Filipa\\Age of Empires III\\age3x.exe"= "d:\\Gry Filipa\\Bitwa\\game.dat"= "d:\palmtop\rapimgr.exe"= d:\palmtop\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager "d:\palmtop\wcescomm.exe"= d:\palmtop\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager "d:\palmtop\WCESMgr.exe"= d:\palmtop\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application "d:\\Gry Filipa\\Twierdza 2\\game.dat"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015 "1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016 "500:UDP"= 500:UDP:@xpsp2res.dll,-22017 "26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-09-12 114768] R2 ASChannel;Local Communication Channel;c:\windows\System32\svchost.exe -k Cognizance [2004-08-04 14336] R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2008-09-12 20560] R3 GTIPCI21;GTIPCI21;c:\windows\system32\drivers\gtipci21.sys [2004-05-03 80384] S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys --> c:\windows\system32\DRIVERS\Lbd.sys [?] S2 Harmonogram automatycznej usługi LiveUpdate;Harmonogram automatycznej usługi LiveUpdate;"c:\program files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" --> c:\program files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [?] S3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [2004-09-02 32640] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] Cognizance REG_MULTI_SZ ASChannel . Zawartość folderu 'Zaplanowane zadania' . - - - - USUNIĘTO PUSTE WPISY - - - - BHO-{8E8CFC90-2FD9-4860-BE6D-F915BF40195F} - (no file) Notify-hgGaxxvw - hgGaxxvw.dll . ------- Skan uzupełniający ------- . uStart Page = hxxp://www.onet.pl/ uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 uSearchURL,(Default) = hxxp://www.speedapps.com/search.htm IE: E&ksport do programu Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 Trusted Zone: com.pl\mks Trusted Zone: com.pl\skaner.mks Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll FF - ProfilePath - c:\documents and settings\Marek\Dane aplikacji\Mozilla\Firefox\Profiles\afrtkx8v.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.onet.pl/ FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll ---- FIREFOX - SPOSÓB POSTĘPOWANIA ---- c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false); c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200); c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess"); c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120); c:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1); c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1); c:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072); c:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true); c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true); c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35"); c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35"); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~"); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror"); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json"); . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-08-26 17:43 Windows 5.1.2600 Dodatek Service Pack 3 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . --------------------- ZABLOKOWANE KLUCZE REJESTRU --------------------- [HKEY_USERS\S-1-5-21-1551280451-623542701-2012417785-1006\Software\Microsoft\SystemCertificates\AddressBook*] @Allowed: (Read) (RestrictedCode) @Allowed: (Read) (RestrictedCode) . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- - - - - - - - > 'winlogon.exe'(776) c:\windows\system32\Ati2evxx.dll c:\program files\HPQ\IAM\Bin\AsWlnPkg.dll - - - - - - - > 'explorer.exe'(2960) c:\windows\system32\WININET.dll c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . ------------------------ Pozostałe uruchomione procesy ------------------------ . c:\windows\system32\ati2evxx.exe c:\program files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe c:\windows\system32\ati2evxx.exe c:\program files\Alwil Software\Avast4\aswUpdSv.exe c:\program files\Alwil Software\Avast4\ashServ.exe c:\windows\system32\scardsvr.exe c:\program files\Java\jre6\bin\jqs.exe c:\program files\Analog Devices\SoundMAX\SMAgent.exe c:\program files\Alwil Software\Avast4\ashMaiSv.exe c:\program files\Alwil Software\Avast4\ashWebSv.exe d:\palmtop\rapimgr.exe c:\windows\system32\wbem\wmiapsrv.exe . ************************************************************************** . Czas ukończenia: 2009-08-26 17:48 - komputer został uruchomiony ponownie ComboFix-quarantined-files.txt 2009-08-26 15:48 ComboFix2.txt 2008-08-21 11:36 Przed: 768 466 944 bajtów wolnych Po: 637 202 432 bajtów wolnych 255 --- E O F --- 2009-08-26 15:28 » Naciśnij aby pokazać/ukryć tekst oznaczony jako spoiler « - hijack Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 18:16:42, on 2009-08-26 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16876) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Eraser\eraser.exe C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe D:\Palmtop\wcescomm.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe D:\Palmtop\rapimgr.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\explorer.exe C:\Program Files\Common Files\Teleca Shared\Generic.exe C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe C:\WINDOWS\System32\svchost.exe C:\Documents and Settings\Marek\Pulpit\123\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.speedapps.com/search.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: HP Credential Manager for ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\HPQ\IAM\Bin\ItIeAddIN.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKCU\..\Run: [Eraser] C:\Program Files\Eraser\eraser.exe -hide O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [Odkurzacz-MCD] C:\Program Files\Odkurzacz\odk_mcd.exe O4 - HKCU\..\Run: [H/PC Connection Agent] "D:\Palmtop\wcescomm.exe" O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - D:\Palmtop\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\Palmtop\INetRepl.dll O9 - Extra 'Tools' menuitem: Utwórz łącze Ulubione dla urządzenia przenośnego... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\Palmtop\INetRepl.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com O15 - Trusted Zone: http://mks.com.pl O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1174480013328 O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: OneCard - C:\Program Files\HPQ\IAM\Bin\AsWlnPkg.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Harmonogram automatycznej usługi LiveUpdate - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing) O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- End of file - 6951 bytes » Naciśnij aby pokazać/ukryć tekst oznaczony jako spoiler « - silent "Silent Runners.vbs", revision 59, http://www.silentrunners.org/ Operating System: Windows XP Output limited to non-default values, except where indicated by "{++}" Startup items buried in registry: --------------------------------- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++} "Eraser" = "C:\Program Files\Eraser\eraser.exe -hide" ["-"] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}" = ""C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"" ["Nero AG"] "Odkurzacz-MCD" = "C:\Program Files\Odkurzacz\odk_mcd.exe" ["Franmo Software"] "H/PC Connection Agent" = ""D:\Palmtop\wcescomm.exe"" [MS] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++} "Sony Ericsson PC Suite" = ""C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions" [null data] "avast!" = "C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" ["ALWIL Software"] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided) -> {HKLM...CLSID} = "AcroIEHlprObj Class" \InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"] {DBC80044-A445-435b-BC74-9C25C1C588A9}\(Default) = (no title provided) -> {HKLM...CLSID} = "Java Plug-In 2 SSV Helper" \InProcServer32\(Default) = "C:\Program Files\Java\jre6\bin\jp2ssv.dll" ["Sun Microsystems, Inc."] {DF21F1DB-80C6-11D3-9483-B03D0EC10000}\(Default) = "HP Credential Manager for ProtectTools" -> {HKLM...CLSID} = "HP Credential Manager for ProtectTools" \InProcServer32\(Default) = "C:\Program Files\HPQ\IAM\Bin\ItIeAddIN.dll" ["Cognizance Corporation"] {E7E6F031-17CE-4C07-BC86-EABFE594F69C}\(Default) = "JQSIEStartDetectorImpl" -> {HKLM...CLSID} = "JQSIEStartDetectorImpl Class" \InProcServer32\(Default) = "C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll" ["Sun Microsystems, Inc."] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ "{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania" -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania" \InProcServer32\(Default) = "deskpan.dll" [file not found] "{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu" -> {HKLM...CLSID} = "HyperTerminal Icon Ext" \InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."] "{2F603045-309F-11CF-9774-0020AFD0CFF6}" = "Synaptics Control Panel" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\Program Files\Synaptics\SynTP\SynTPCpl.dll" ["Synaptics, Inc."] "{666C78C1-A9B6-4AB4-94ED-DC238C81E925}" = "Document Manager" -> {HKLM...CLSID} = "Document Manager (Shell Extension)" \InProcServer32\(Default) = "C:\Program Files\HPQ\IAM\Bin\SFSShell.dll" ["Cognizance Corporation"] "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] "{A4D78B20-6E05-1069-8758-4E73FD83DEAD}" = "QCopy" -> {HKLM...CLSID} = "QCopy" \InProcServer32\(Default) = "dropcpyr.dll" [null data] "{8BE13461-936F-11D1-A87D-444553540000}" = "Eraser Shell Extension" -> {HKLM...CLSID} = "Eraser Shell Extension" \InProcServer32\(Default) = "C:\PROGRA~1\Eraser\erasext.dll" ["-"] "{D7824897-C8DC-49b4-B790-30F7ED16A5FD}" = "ArcaVir Shell Extension" -> {HKLM...CLSID} = "ArcaVir Shell Extension" \InProcServer32\(Default) = "C:\Program Files\ArcaBit\arcavir\avshell.dll" [file not found] "{B327765E-D724-4347-8B16-78AE18552FC3}" = "NeroDigitalIconHandler" -> {HKLM...CLSID} = "NeroDigitalIconHandler Class" \InProcServer32\(Default) = "C:\Program Files\Common Files\Ahead\Lib\NeroDigitalExt.dll" ["Nero AG"] "{7F1CF152-04F8-453A-B34C-E609530A9DC8}" = "NeroDigitalPropSheetHandler" -> {HKLM...CLSID} = "NeroDigitalPropSheetHandler Class" \InProcServer32\(Default) = "C:\Program Files\Common Files\Ahead\Lib\NeroDigitalExt.dll" ["Nero AG"] "{03DAACC5-10BA-4E3E-9D54-2A569F6B4B87}" = "Sony Ericsson File Manager" -> {HKLM...CLSID} = "Sony Ericsson File Manager" \InProcServer32\(Default) = "C:\Program Files\Sony Ericsson\Mobile2\File Manager\FM.dll" ["Popwire AB"] "{738D66C6-0149-4D40-84E4-A7BB2D0CE949}" = "Sony Ericsson File Manager" -> {HKLM...CLSID} = "Sony Ericsson File Manager" \InProcServer32\(Default) = "C:\Program Files\Sony Ericsson\Mobile2\File Manager\FM.dll" ["Popwire AB"] "{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97}" = "Microsoft Office Thumbnail Handler" -> {HKLM...CLSID} = "Microsoft Office Thumbnail Handler" \InProcServer32\(Default) = "C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll" [MS] "{993BE281-6695-4BA5-8A2A-7AACBFAAB69E}" = "Microsoft Office Metadata Handler" -> {HKLM...CLSID} = "Microsoft Office Metadata Handler" \InProcServer32\(Default) = "C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll" [MS] "{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\Program Files\Microsoft Office\Office12\msohevi.dll" [MS] "{472083B0-C522-11CF-8763-00608CC02F24}" = "avast" -> {HKLM...CLSID} = "avast" \InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"] "{49BF5420-FA7F-11cf-8011-00A0C90A8F78}" = "Mobile Device" -> {HKLM...CLSID} = "Urządzenie przenośne" \InProcServer32\(Default) = "D:\Palmtop\Wcesview.dll" [MS] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ "WPDShServiceObj" = "{AAA288BA-9A4C-45B0-95D7-94D524869DB5}" -> {HKLM...CLSID} = "WPDShServiceObj Class" \InProcServer32\(Default) = "C:\WINDOWS\system32\WPDShServiceObj.dll" [MS] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ <<!>> AtiExtEvent\DLLName = "Ati2evxx.dll" ["ATI Technologies Inc."] <<!>> OneCard\DLLName = "C:\Program Files\HPQ\IAM\Bin\AsWlnPkg.dll" ["Cognizance Corporation"] HKLM\SOFTWARE\Classes\PROTOCOLS\Filter\ <<!>> text/xml\CLSID = "{807563E5-5146-11D5-A672-00B0D022E945}" -> {HKLM...CLSID} = "Microsoft Office InfoPath XML Mime Filter" \InProcServer32\(Default) = "C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL" [MS] HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\ {7D4D6379-F301-4311-BEBA-E26EB0561882}\(Default) = "NeroDigitalExt.NeroDigitalColumnHandler" -> {HKLM...CLSID} = "NeroDigitalColumnHandler Class" \InProcServer32\(Default) = "C:\Program Files\Common Files\Ahead\Lib\NeroDigitalExt.dll" ["Nero AG"] HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\ ArcaVirShell\(Default) = "{D7824897-C8DC-49b4-B790-30F7ED16A5FD}" -> {HKLM...CLSID} = "ArcaVir Shell Extension" \InProcServer32\(Default) = "C:\Program Files\ArcaBit\arcavir\avshell.dll" [file not found] avast\(Default) = "{472083B0-C522-11CF-8763-00608CC02F24}" -> {HKLM...CLSID} = "avast" \InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"] Document Manager\(Default) = "{666C78C1-A9B6-4AB4-94ED-DC238C81E925}" -> {HKLM...CLSID} = "Document Manager (Shell Extension)" \InProcServer32\(Default) = "C:\Program Files\HPQ\IAM\Bin\SFSShell.dll" ["Cognizance Corporation"] Erasext\(Default) = "{8BE13461-936F-11D1-A87D-444553540000}" -> {HKLM...CLSID} = "Eraser Shell Extension" \InProcServer32\(Default) = "C:\PROGRA~1\Eraser\erasext.dll" ["-"] LavasoftShellExt\(Default) = "{DCE027F7-16A4-4BEE-9BE7-74F80EE3738F}" -> {HKLM...CLSID} = "Lavasoft Shell Extension" \InProcServer32\(Default) = "C:\Program Files\Lavasoft\Ad-Aware\ShellExt.dll" [file not found] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] HKLM\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\ Document Manager\(Default) = "{666C78C1-A9B6-4AB4-94ED-DC238C81E925}" -> {HKLM...CLSID} = "Document Manager (Shell Extension)" \InProcServer32\(Default) = "C:\Program Files\HPQ\IAM\Bin\SFSShell.dll" ["Cognizance Corporation"] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] HKLM\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\ ArcaVirShell\(Default) = "{D7824897-C8DC-49b4-B790-30F7ED16A5FD}" -> {HKLM...CLSID} = "ArcaVir Shell Extension" \InProcServer32\(Default) = "C:\Program Files\ArcaBit\arcavir\avshell.dll" [file not found] avast\(Default) = "{472083B0-C522-11CF-8763-00608CC02F24}" -> {HKLM...CLSID} = "avast" \InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"] Erasext\(Default) = "{8BE13461-936F-11D1-A87D-444553540000}" -> {HKLM...CLSID} = "Eraser Shell Extension" \InProcServer32\(Default) = "C:\PROGRA~1\Eraser\erasext.dll" ["-"] LavasoftShellExt\(Default) = "{DCE027F7-16A4-4BEE-9BE7-74F80EE3738F}" -> {HKLM...CLSID} = "Lavasoft Shell Extension" \InProcServer32\(Default) = "C:\Program Files\Lavasoft\Ad-Aware\ShellExt.dll" [file not found] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] Default executables: -------------------- <<!>> HKLM\SOFTWARE\Classes\.com\(Default) = "ComFile" Group Policies {policy setting}: -------------------------------- Note: detected settings may not have any effect. HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\ "NoDrives" = (REG_DWORD) dword:0x00000000 {unrecognized setting} HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ "NoDrives" = (REG_DWORD) dword:0x00000000 {unrecognized setting} "HonorAutoRunSetting" = (REG_DWORD) dword:0x00000001 {unrecognized setting} "NoCDBurning" = (REG_DWORD) dword:0x00000000 {unrecognized setting} "NoViewContextMenu " = (REG_DWORD) dword:0x00000000 {unrecognized setting} HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\ "HomePage " = (REG_DWORD) dword:0x00000000 {Disable changing home page settings} HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ "shutdownwithoutlogon" = (REG_DWORD) dword:0x00000001 {Shutdown: Allow system to be shut down without having to log on} "undockwithoutlogon" = (REG_DWORD) dword:0x00000001 {Devices: Allow undock without having to log on} "DisableRegistryTools" = (REG_DWORD) dword:0x00000000 {unrecognized setting} Active Desktop and Wallpaper: ----------------------------- Active Desktop may be disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState Displayed if Active Desktop enabled and wallpaper not set by Group Policy: HKCU\Software\Microsoft\Internet Explorer\Desktop\General\ "Wallpaper" = "C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Wallpaper1.bmp" Displayed if Active Desktop disabled and wallpaper not set by Group Policy: HKCU\Control Panel\Desktop\ "Wallpaper" = "C:\Documents and Settings\Marek\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp" Windows Portable Device AutoPlay Handlers ----------------------------------------- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ DVDDecrypterPlayDVDMovieOnArrival\ "Provider" = "DVD Decrypter" "InvokeProgID" = "DVDDecrypter" "InvokeVerb" = "PlayDVDMovieOnArrival_Decrypt" HKLM\SOFTWARE\Classes\DVDDecrypter\shell\PlayDVDMovieOnArrival_Decrypt\Command\(Default) = ""E:\Program Files\DVD Decrypter\DVDDecrypter.exe" /MODE READ /SOURCE "%1"" ["LIGHTNING UK!"] IviDVDEventHandler\ "Provider" = "InterVideo WinDVD" "InvokeProgID" = "Ivi.MediaFile" "InvokeVerb" = "play" HKLM\SOFTWARE\Classes\Ivi.MediaFile\shell\play\command\(Default) = ""C:\Program Files\InterVideo\WinDVD\WinDVD.exe" %1" ["InterVideo Inc."] IviVideoCDHandler\ "Provider" = "InterVideo WinDVD" "InvokeProgID" = "Ivi.MediaFile" "InvokeVerb" = "play" HKLM\SOFTWARE\Classes\Ivi.MediaFile\shell\play\command\(Default) = ""C:\Program Files\InterVideo\WinDVD\WinDVD.exe" %1" ["InterVideo Inc."] MMJBAutoplayBURNERPLUS\ "Provider" = "MUSICMATCH Burner Plus" "InvokeProgID" = "MMJB.BURN" "InvokeVerb" = "Burn" HKLM\SOFTWARE\Classes\MMJB.BURN\shell\Burn\Command\(Default) = ""C:\Program Files\Musicmatch\Musicmatch Jukebox\mmfwlaunch.exe""-mmjb"" ["Musicmatch, Inc."] MMJBPlayCDAudioOnArrival\ "Provider" = "Musicmatch Jukebox" "InvokeProgID" = "MMJB.AUDIOCD" "InvokeVerb" = "Play" HKLM\SOFTWARE\Classes\MMJB.AUDIOCD\shell\Play\command\(Default) = ""C:\Program Files\Musicmatch\Musicmatch Jukebox\mmjblaunch.exe" /AudioCD "%1"" ["Musicmatch, Inc."] MMJBPlayMediaOnArrival\ "Provider" = "Musicmatch Jukebox" "InvokeProgID" = "MMJB.MMJB" "InvokeVerb" = "Play" HKLM\SOFTWARE\Classes\MMJB.MMJB\shell\Play\command\(Default) = ""C:\Program Files\Musicmatch\Musicmatch Jukebox\mmjblaunch.exe" "%1"" ["Musicmatch, Inc."] MPCPlayCDAudioOnArrival\ "Provider" = "Media Player Classi" "InvokeProgID" = "MPC.CDAudio" "InvokeVerb" = "play" HKLM\SOFTWARE\Classes\MPC.CDAudio\shell\play\command\(Default) = ""C:\Program Files\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" %L /cd" ["Gabest"] MPCPlayDVDMovieOnArrival\ "Provider" = "Media Player Classic" "InvokeProgID" = "MPC.DVDMovie" "InvokeVerb" = "play" HKLM\SOFTWARE\Classes\MPC.DVDMovie\shell\play\command\(Default) = ""C:\Program Files\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" %L /dvd" ["Gabest"] MSPlayCDAudioOnArrival\ "Provider" = "ALLPlayer" "InvokeProgID" = "AllPlayerFile" "InvokeVerb" = "play" HKLM\SOFTWARE\Classes\AllPlayerFile\shell\play\command\(Default) = ""C:\Program Files\MarBit\ALLPlayer\ALLPlayer.exe" "%1"" ["MarBit"] MSWPDShellNamespaceHandler\ "Provider" = "@%SystemRoot%\System32\WPDShextRes.dll,-501" "CLSID" = "{A55803CC-4D53-404c-8557-FD63DBA95D24}" "InitCmdLine" = " " -> {HKLM...CLSID} = "WPDShextAutoplay" \LocalServer32\(Default) = "C:\WINDOWS\system32\WPDShextAutoplay.exe" [MS] NeroAutoPlay7CDAudio\ "Provider" = "Nero SoundTrax" "InvokeProgID" = "Nero.AutoPlay3" "InvokeVerb" = "HandleCDBurningOnArrival_CDAudio" HKLM\SOFTWARE\Classes\Nero.AutoPlay3\shell\HandleCDBurningOnArrival_CDAudio\command\(Default) = "C:\Program Files\Nero\Nero 7\Nero SoundTrax\SoundTrax.exe /" ["Nero AG"] NeroAutoPlay7CopyCD\ "Provider" = "Nero Burning ROM" "InvokeProgID" = "Nero.AutoPlay3" "InvokeVerb" = "PlayMusicFilesOnArrival_CopyCD" HKLM\SOFTWARE\Classes\Nero.AutoPlay3\shell\PlayMusicFilesOnArrival_CopyCD\command\(Default) = "C:\Program Files\Nero\Nero 7\Core\nero.exe /Dialog:DiscCopy /Drive:%L" ["Nero AG"] NeroAutoPlay7PlayAudioCD\ "Provider" = "Nero SoundTrax" "InvokeProgID" = "Nero.AutoPlay3" "InvokeVerb" = "PlayCDAudioOnArrival_PlayAudioCD" HKLM\SOFTWARE\Classes\Nero.AutoPlay3\shell\PlayCDAudioOnArrival_PlayAudioCD\command\(Default) = "C:\Program Files\Nero\Nero 7\Nero SoundTrax\SoundTrax.exe /Play /Drive:%L" ["Nero AG"] Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] 000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS] 000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] Transport Service Providers HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: %SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 20 %SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05 Toolbars, Explorer Bars, Extensions: ------------------------------------ Toolbars HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ "{F2CF5485-4E02-4F68-819C-B92DE9277049}" -> {HKLM...CLSID} = "&Links" \InProcServer32\(Default) = "C:\WINDOWS\system32\ieframe.dll" [MS] Explorer Bars HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\ HKLM\SOFTWARE\Classes\CLSID\{FF059E31-CC5A-4E2E-BF3B-96E929D65503}\(Default) = "&Poszukaj" Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar] InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL" [MS] Extensions (Tools menu items, main toolbar menu buttons) HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\ {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F}\ "ButtonText" = "Create Mobile Favorite" "CLSIDExtension" = "{2EAF5BB0-070F-11D3-9307-00C04FAE2D4F}" -> {HKLM...CLSID} = "Create Mobile Favorite" \InProcServer32\(Default) = "D:\Palmtop\INetRepl.dll" [MS] {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F}\ "MenuText" = "Utwórz łącze Ulubione dla urządzenia przenośnego..." "CLSIDExtension" = "{2EAF5BB0-070F-11D3-9307-00C04FAE2D4F}" -> {HKLM...CLSID} = "Create Mobile Favorite" \InProcServer32\(Default) = "D:\Palmtop\INetRepl.dll" [MS] {92780B25-18CC-41C8-B9BE-3C9C571A8263}\ "ButtonText" = "Research" {E2E2DD38-D088-4134-82B7-F2BA38496583}\ "MenuText" = "@xpsp3res.dll,-20001" "Exec" = "%windir%\Network Diagnostic\xpnetdiag.exe" [MS] {FB5F1910-F110-11D2-BB9E-00C04F795683}\ "ButtonText" = "Messenger" "MenuText" = "Windows Messenger" "Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS] Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ Ati HotKey Poller, Ati HotKey Poller, "C:\WINDOWS\system32\Ati2evxx.exe" ["ATI Technologies Inc."] avast! Antivirus, avast! Antivirus, ""C:\Program Files\Alwil Software\Avast4\ashServ.exe"" ["ALWIL Software"] avast! iAVS4 Control Service, aswUpdSv, ""C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"" ["ALWIL Software"] avast! Mail Scanner, avast! Mail Scanner, ""C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service" ["ALWIL Software"] avast! Web Scanner, avast! Web Scanner, ""C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service" ["ALWIL Software"] Java Quick Starter, JavaQuickStarterService, ""C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf"" ["Sun Microsystems, Inc."] Karta wydajności WMI, WmiApSrv, "C:\WINDOWS\system32\wbem\wmiapsrv.exe" [MS] Local Communication Channel, ASChannel, "C:\WINDOWS\System32\svchost.exe -k Cognizance" {"C:\Program Files\HPQ\IAM\Bin\ASChnl.dll" ["Cognizance Corporation"]} SoundMAX Agent Service, SoundMAX Agent Service (default), "C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe" ["Analog Devices, Inc."] Symantec Core LC, Symantec Core LC, ""C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe"" ["Symantec Corporation"] Windows Driver Foundation - User-mode Driver Framework, WudfSvc, "C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup" {"C:\WINDOWS\System32\WUDFSvc.dll" [MS]} Print Monitors: --------------- HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors\ HP Master Monitor\Driver = "HPBMMON.DLL" ["Hewlett-Packard"] HP Mobile Printing Monitor\Driver = "HPMPMW.DLL" ["Hewlett-Packard"] ---------- (launch time: 2009-08-26 18:19:42) <<!>>: Suspicious data at a malware launch point. + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + The search for DESKTOP.INI DLL launch points on all local fixed drives took 26 seconds. ---------- (total run time: 61 seconds)
  18. http://www.flagpoleexpress.co.uk/images/countryflags.jpg jak dobrze zapytasz google to pewnie znajdziesz wiecej i w innej formie ;)
  19. Niemiec

    Wolfenstein (2009)

    moze nie sama gra, ale towarzyszaca muzyka buduje klimat grozy podobnie sie czulem ogladajac film "zapowiedz", bojazliwy nie jestem, ale ciarki po plecach przechodzily zwlaszcza z dzwiekiem przestrzennym.
  20. Niemiec

    Top Gear

    na finalgear.com masz torrenty z biezacymi odcinkami a takze paczki z sezonami archiwalnymi i idzie to bardzo przyzwoicie jak na publiczne trackery. do tego poza oryginalnym tg jest 5th gear, tg australia i tg ruskie, ale tego ostatniego nie ogladalem z powodu traumy zwiazanej z tym jezykiem;)
  21. Niemiec

    Wolfenstein (2009)

    nie jest zle, sprzet z siga bez zadnego oc, detale max i pelna plynnosc, gra sie tez nawet przyjemnie. rozwalka az milo. troche przecudowali z woalem, ale uzywam tylko do przechodzenia przez sciany ;) ogolnie nie jest zle choc przy wolfie 3d na i386 spedzilem duzo wiecej czasu niz przy tym spedze.
  22. a ma ktos moze dzialajacy komplet pt. xfi gamer i expert? jakie macie stery do dzwieku, tunera i ktorego pvr, bo mi po ktoryms updeacie sterow do xfi nie dziala dzwiek z tumera. nie wazne co ustawie w panelu windy, pvr czy control center i tak nie mam dzwieku. tuner od jakiegos czasu robi za zapchaj_pci ;) a za cholere nie pamietam na jakich sterach od xfi dzialalo, bo stery i pvr do tunera mialem z plyty.
  23. mam dokladnie to samo i zonglerka sterownikami i pvr'em nie pomogaga.
  24. od kwietnia mam wrt54gc v3 i nie mam na co marudzic. w tym czasie chyba tylko dwa razy nie mogl pobrac ip z modemu, ale bylo to z winy providera (vectra) a tak robi co do niego nalezy. podpiete do niego mam 2 stacjonarki przez lan i dwa lapy przez wifi. na 80m mieszkanie zasieg starcza, zero problemow z zasiegiem.
  25. Niemiec

    Auto Do 35tys

    nie przesadzaj z ta ogromnoscia. 500l to ma astra f w sedanie i kombiaku.
×
×
  • Dodaj nową pozycję...