<![CDATA[Avira AntiVir Personal - Free Antivirus - nieoficjalny Polski Support - Wszystkie działy]]> http://forum.antivir-polska.info/ Thu, 20 Nov 2008 11:12:38 +0100 MyBB <![CDATA[Avira Premium za złotówki!]]> http://forum.antivir-polska.info/thread-572.html Wed, 19 Nov 2008 09:58:39 +0100 Jurek http://forum.antivir-polska.info/thread-572.html
http://www.dreamsoft.com.pl/product_info...08df8d005f]]>
http://www.dreamsoft.com.pl/product_info...08df8d005f]]> <![CDATA[Jak wyłączyć okienko powitalne w Avirze Premium?]]> http://forum.antivir-polska.info/thread-571.html Wed, 19 Nov 2008 08:45:16 +0100 Pablosss http://forum.antivir-polska.info/thread-571.html

Proszę powiedzcie mi jak można w Avirze Premium wyłączyć okienko powitalne jakie się pojawia podczas uruchamiania programu ? I jeszcze jedna sprawa.


Z góry dzięki za pomoc Smile W zakładce WebGuard/Exceptions jest odznaczony kwadrat przy opcji Archive, a pozostałe dwa są zaznaczone. Czy mam zaznaczyć wszystkie 3 czy odznaczyć wszystkie 3? Sorki za głupie pytanie ale w angielskim jestem ....cienki Smile. Co to da jak zaznacze wszystkie 3 lub jak je odznacze?]]>

Proszę powiedzcie mi jak można w Avirze Premium wyłączyć okienko powitalne jakie się pojawia podczas uruchamiania programu ? I jeszcze jedna sprawa.


Z góry dzięki za pomoc Smile W zakładce WebGuard/Exceptions jest odznaczony kwadrat przy opcji Archive, a pozostałe dwa są zaznaczone. Czy mam zaznaczyć wszystkie 3 czy odznaczyć wszystkie 3? Sorki za głupie pytanie ale w angielskim jestem ....cienki Smile. Co to da jak zaznacze wszystkie 3 lub jak je odznacze?]]> <![CDATA[Moje wnioski z kilkudniowego testowania NAV 2009.]]> http://forum.antivir-polska.info/thread-570.html Tue, 18 Nov 2008 22:20:24 +0100 Pablosss http://forum.antivir-polska.info/thread-570.html

W związku z tym że ów program wzbudza powszechne zainteresowanie, sam postanowiłem go przetestować, a wnioskami i spostrzeżeniami z mojego testu postanowiłem podzielić się z Wami, co niniejszym czynię Smile

Więc od początku:

Proces instalacji:

Instalacja przebiegła szybko i bez najmniejszych problemów. Cały proces trwał mniej więcej minutę ( na oko Smile ). Od razu po instalacji NAV 2009 był gotów do pracy, restart PC nie był konieczny

Wygląd interfejsu:

To oczywiście rzecz gustu, ale jak dla mnie jest on przejrzysty, niemniej jednak pewne opcje są nazwane co najmniej dziwnie Smile

Zasobożerność:

Zacznę od konfiguracji PC na której był zainstalowany NAV 2009, a oto i ona:

Q9450
Gskill F2-8500CL5D-4GBPK
GF 9800GX2
Samsung SpinPoint F1 750 GB (SATA II, 32MB cache, NCQ)
WinXP Pro SP3

Podczas zwykłej pracy, czyli np przeglądanie www, słuchanie mp3 z Winampa program zadowalał się średnio 10MB Ramu, przy czym najmniejsze zauważone zużycie Ramu wyniosło 3MB, a największe 20 MB. Zajętość procesora wyniosła przy tym max 2%.
Podczas skanowania na żądanie zużycie Ramu wahało się od 20 do 70MB, przy czym w większości oscylowało w przedziale 35-45MB. Średnie użycie procesora wynosiło ~ 10% ( najmniej 4, najwięcej, chwilowo 25 % ).

Skuteczność:

I tutaj pełne rozczarowanie z mojej strony niestety. Nie dość że program pozwala na zapisywanie na dysku zainfekowanych plików / archiwów, to jeszcze po zapisaniu ich podczas skanowania z menu kontekstowego nie widzi w nich zagrożenia wcale, lub wykrywa tylko częściowo. Program wyłapuje szkodniki dopiero wtedy gdy

- otworzymy zainfekowane archiwum / plik.
- po otwarciu zainfekowanego archiwum klikniemy na zainfekowany plik.

Zdarzyło mi się również wejść na pewną stronę www, po wejściu na którą od razu instaluje się Trojan Clicker. NAV 2009 nawet nie pisnął że coś się instaluje. Jedynie po chwili zablokował próbę włamania na mój PC, co było dla mnie sygnałem, że coś niedobrego mam na kompie. Uruchomiłem pełne skanowanie i wykrył 2 syfy Smile

Wnioski końcowe:

Program lekki, prosty w obsłudze, lecz przepuszczający wirusy jak sito Smile]]>

W związku z tym że ów program wzbudza powszechne zainteresowanie, sam postanowiłem go przetestować, a wnioskami i spostrzeżeniami z mojego testu postanowiłem podzielić się z Wami, co niniejszym czynię Smile

Więc od początku:

Proces instalacji:

Instalacja przebiegła szybko i bez najmniejszych problemów. Cały proces trwał mniej więcej minutę ( na oko Smile ). Od razu po instalacji NAV 2009 był gotów do pracy, restart PC nie był konieczny

Wygląd interfejsu:

To oczywiście rzecz gustu, ale jak dla mnie jest on przejrzysty, niemniej jednak pewne opcje są nazwane co najmniej dziwnie Smile

Zasobożerność:

Zacznę od konfiguracji PC na której był zainstalowany NAV 2009, a oto i ona:

Q9450
Gskill F2-8500CL5D-4GBPK
GF 9800GX2
Samsung SpinPoint F1 750 GB (SATA II, 32MB cache, NCQ)
WinXP Pro SP3

Podczas zwykłej pracy, czyli np przeglądanie www, słuchanie mp3 z Winampa program zadowalał się średnio 10MB Ramu, przy czym najmniejsze zauważone zużycie Ramu wyniosło 3MB, a największe 20 MB. Zajętość procesora wyniosła przy tym max 2%.
Podczas skanowania na żądanie zużycie Ramu wahało się od 20 do 70MB, przy czym w większości oscylowało w przedziale 35-45MB. Średnie użycie procesora wynosiło ~ 10% ( najmniej 4, najwięcej, chwilowo 25 % ).

Skuteczność:

I tutaj pełne rozczarowanie z mojej strony niestety. Nie dość że program pozwala na zapisywanie na dysku zainfekowanych plików / archiwów, to jeszcze po zapisaniu ich podczas skanowania z menu kontekstowego nie widzi w nich zagrożenia wcale, lub wykrywa tylko częściowo. Program wyłapuje szkodniki dopiero wtedy gdy

- otworzymy zainfekowane archiwum / plik.
- po otwarciu zainfekowanego archiwum klikniemy na zainfekowany plik.

Zdarzyło mi się również wejść na pewną stronę www, po wejściu na którą od razu instaluje się Trojan Clicker. NAV 2009 nawet nie pisnął że coś się instaluje. Jedynie po chwili zablokował próbę włamania na mój PC, co było dla mnie sygnałem, że coś niedobrego mam na kompie. Uruchomiłem pełne skanowanie i wykrył 2 syfy Smile

Wnioski końcowe:

Program lekki, prosty w obsłudze, lecz przepuszczający wirusy jak sito Smile]]> <![CDATA[Anti-Malware, październik]]> http://forum.antivir-polska.info/thread-569.html Mon, 17 Nov 2008 21:41:03 +0100 Jurek http://forum.antivir-polska.info/thread-569.html

http://www.anti-malware-test.com/?q=taxonomy/term/14

1. Dr.Web Anti-Virus 4.44 (100%)
2-3. Kaspersky Anti-Virus 2009 (80%)
2-3. Avast! Professional Edition 4.8 (80%)
4. Agnitum Outpost Antivirus Pro 6.5 (53%)
5. Norton AntiVirus 2009 (53%)
6. Panda Antivirus 2009 (40%)
7. BitDefender Antivirus 2009 (33%)
8. Trend Micro Antivirus plus Antispyware 2008 (33%)
9. McAfee VirusScan 2008 (33%)
10. F-Secure Anti-Virus 2009 (33%)
12. Avira AntiVir PE Premium 8.1 (20%)


Pozostałe testy:

http://forum.antivir-polska.info/thread-564.html]]>

http://www.anti-malware-test.com/?q=taxonomy/term/14

1. Dr.Web Anti-Virus 4.44 (100%)
2-3. Kaspersky Anti-Virus 2009 (80%)
2-3. Avast! Professional Edition 4.8 (80%)
4. Agnitum Outpost Antivirus Pro 6.5 (53%)
5. Norton AntiVirus 2009 (53%)
6. Panda Antivirus 2009 (40%)
7. BitDefender Antivirus 2009 (33%)
8. Trend Micro Antivirus plus Antispyware 2008 (33%)
9. McAfee VirusScan 2008 (33%)
10. F-Secure Anti-Virus 2009 (33%)
12. Avira AntiVir PE Premium 8.1 (20%)


Pozostałe testy:

http://forum.antivir-polska.info/thread-564.html]]> <![CDATA[Nowy wygląd strony głównej]]> http://forum.antivir-polska.info/thread-568.html Sat, 15 Nov 2008 19:32:35 +0100 Jarek http://forum.antivir-polska.info/thread-568.html
Pomyślałem że można by upodobnić stronę głowna do skórki na forum.
Co Wy na to?

Pzdr!]]>
Pomyślałem że można by upodobnić stronę głowna do skórki na forum.
Co Wy na to?

Pzdr!]]> <![CDATA[NORTON AV 2009]]> http://forum.antivir-polska.info/thread-567.html Wed, 12 Nov 2008 17:14:53 +0100 lunaticdreams http://forum.antivir-polska.info/thread-567.html jak z obciążeniem kompa?

jakby ktoś chciał na 90 dni nortony

http://www.symantec.com/home_homeoffice/...?id=lenovo]]> jak z obciążeniem kompa?

jakby ktoś chciał na 90 dni nortony

http://www.symantec.com/home_homeoffice/...?id=lenovo]]> <![CDATA[Dziwny Update error]]> http://forum.antivir-polska.info/thread-566.html Tue, 11 Nov 2008 14:56:12 +0100 MaTiXoN http://forum.antivir-polska.info/thread-566.html
[Obrazek: aviraerrormw6.th.jpg][Obrazek: thpix.gif]

Problem pojawił się jakiś tydzień temu i myślałem że jakieś problemy są z serwerami ale widocznie to coś innego. dziś Zaktualizowałem ręcznie avirke i kiedy znów próbuje zaktualizować automatycznie błąd cały czas się pojawia.

Ma ktoś tak jeszcze? Proszę o pomoc w rozwiązaniu problemu ;/]]>
[Obrazek: aviraerrormw6.th.jpg][Obrazek: thpix.gif]

Problem pojawił się jakiś tydzień temu i myślałem że jakieś problemy są z serwerami ale widocznie to coś innego. dziś Zaktualizowałem ręcznie avirke i kiedy znów próbuje zaktualizować automatycznie błąd cały czas się pojawia.

Ma ktoś tak jeszcze? Proszę o pomoc w rozwiązaniu problemu ;/]]> <![CDATA[avira przegrała z avast i avg]]> http://forum.antivir-polska.info/thread-565.html Sat, 08 Nov 2008 19:50:09 +0100 p!otr@$ http://forum.antivir-polska.info/thread-565.html http://dobreprogramy.pl/index.php?dz=15&...#komentarz

Avast w portalu 6 gwiazdek i Avg, trocge dziwne bo twierdzą ze avast krocej scanuje pliki czy dyskiTongueBig Grin]]> http://dobreprogramy.pl/index.php?dz=15&...#komentarz

Avast w portalu 6 gwiazdek i Avg, trocge dziwne bo twierdzą ze avast krocej scanuje pliki czy dyskiTongueBig Grin]]> <![CDATA[Testy AV 2008]]> http://forum.antivir-polska.info/thread-564.html Fri, 07 Nov 2008 18:34:00 +0100 Jurek http://forum.antivir-polska.info/thread-564.html CHIP Online, marzec

http://blog.chip.de/0-security-blog/maer...-20080310/

Malware
1. AVK (G Data) 99.91%
2. WebWasher-GW 99.85%
3. TrustPort 99.63%
4. AntiVir (Avira) 99.32%
5. Avast! (Alwil) 98.81%
6. Trend Micro 98.72%
7. Sophos 98.10%
8. Ikarus 97.98%
9. Nod32 (Eset) 97.85%
10. Microsoft 97.79%

Adware/spyware
1. WebWasher 99.86%
2. AVK (G Data) 99.85%
3. TrustPort 99.82%
4. AntiVir (Avira)99.15%
5. Sophos 98.83%
6. Ikarus 98.83%
7. BitDefender 98.77%
8. Norton 98.62%
9. AVG 98.58%
10. McAfee 98.56%


ProtectStar Awart, test pakietów

http://www.protectstar-testlab.org/award...er_web.pdf

1. Symantec 94.35%
2. Trend Micro 94.00%
3. Avira 93.80%
4. G DATA 93.25%
5. ESET 92.85%
6. BitDefender 92.25%
7. Microsoft 90.45%
8. F-Secure 90.25%
9. BullGuard 90.25%
10.Kaspersky 90.15%


AV comparatives, maj

http://www.av-comparatives.org/seiten/er...port18.pdf

1. Avira
2. NOD32
3. AVG
4. McAfee
5. Microsoft
6. AVK
7. BitDefender
8. Norman
9. Avast
10. Kaspersky


Virus.gr, czerwiec

http://translate.google.com/translate?hl...rg.mozillaTonguel:official%26hs%3DP9I

1. G DATA 2008 version 18.2.7310.844 - 99,05%
2. F-Secure 2008 version 8.00.103 - 98.75%
3. TrustPort version 2.8.0.1835 - 98.06%
4. Kaspersky version 8.0.0.357 - 97.95%
5. eScan version 9.0.742.1 - 97.44%
6. The Shield 2008 - 97.43% Tarcza w 2008 r. - 97,43%
7. AntiVir Premium - 97,13%
8. Ashampoo version 1.61 - 97.09%
9. Ikarus version 1.0.82 - 96.05%
10. AntiVir version 8.1.00.295 Classic - 95.54%


VirusInfo, sierpień

http://virusinfo.info/index.php?page=testseng

Avira najskuteczniejsza!


Anti-Malware, sierpień

http://66.196.80.202/babelfish/translate...node%2f497

Avira najlepszy wynik!


Virus Bulletin - VB100, sierpień

Trzeba się zarejestrować!

http://www.virusbtn.com/vb100/archive/re...ay=summary

Skuteczność w wykrywaniu trojanów wg. sierpniowego Virus Bulletin (on-demand detection)

G DATA AntiVirus 99,76%
AVG Internet Security 98,47%
Symantec Endpoint Protection 98,29%
Avira Premium 98.27%
ESET NOD32 Antivirus 97,84%
Kaspersky Anti-Virus 96,73%
F-Secure Internet Security 94,66%
McAfee VirusScan 84,52%
ArcaBit ArcaVir 76,12%


AV-comparatives, sierpień

http://www.av-comparatives.org/seiten/er...port19.pdf

1. Avira
2. GDATA
3. Symantec
4. McAfee
5. Avast
6. TrustPort
7. Kaspersky
8. AVG
9. Eset
10. BitDefender


AV-Test.org, wrzesień

http://www.secureblog.info/articles/270.html

Malware
1. GDATA 2009 99.8%
2. Avira 99.8%
3. WebWasher 99.7%
4. Trust Port 99.5%
5. Ikarus 99.5%
6. Avast 99.3%
7. GDATA 2008 99.2%
8. F-Secure 2009 99.2%
9. Norton 2009 98.7%
10. Kaspersky 98.4%

Spyware
1. GDATA 2009 99.8%
2. F-Decure 2009 99.6%
3. WebWasher 99.2
4. GDATA 2008 99.1%
5. Avira 99.0%
6. Ikarus 98.6%
7. F-secure 2008 98.4%
8. Trust Port 98.4%
9. Kaspersky 98.3%
10. Avast 98.3%


Virus Bulletin - VB100, październik

http://www.virusbtn.com/vb100/archive/re...ay=summary

http://tech.wp.pl/kat,1009785,title,Najn...omosc.html

Programy, które nie przeszły testu i nie otrzymały wyróżnienia:

ArcaBit ArcaVir (93 pominięte zagrożenia*, 3 fałszywe alarmy)
Avira AntiVir (1 fałszywy alarm)
CA e Trust (1 pominięte zagrożenie)
F-Secure (1 fałszywy alarm pozytywny)
Kaspersky (1 fałszywy alarm pozytywny)
MicroWorld (1 fałszywy alarm pozytywny)
Quick Heal (1 fałszywy alarm pozytywny)
Redstone (1 pominięte zagrożenie, 1 fałszywy alarm)

* zagrożenia z listy „in the wild”

Programy, które zaliczyły procedurę testową pozytywnie:

Agnitum Outpost
AhnLab
Alwil
AVG (Grisoft)
Eset NOD32
Fortinet FortiClient
Frisk F-PROT
Kingsoft
McAfee VirusScan
Microsoft Forefront
Norman Security Suite
Sophos Endpoint Security
Symantec Endpoint
AEC Trustport Antivirus
VirusBuster Professional


TopTenREVIEWS, październik

http://anti-virus-software-review.toptenreviews.com/

1. BitDefender Antivirus
2. Kaspersky Anti-Virus
3. ESET Nod32
4. AVG Anti-Virus
5. Vipre Antivirus + Antispyware
6. F-Secure Anti-Virus
7. Trend Micro
8. McAfee VirusScan
9. Norton AntiVirus
10. CA Antivirus


SSUpdater.com Anti-Malware test, październik

http://ssupdater.com/modules/Forums/inde...topic=3746

1. a-squared Anti-Malware - 99.12%
2. AntiVir PE Premium - 98.88%
3. Avast! - 98.75%
4. Norton Antivirus - 98.69%
5. Ikarus Virus Utilities - 98.48%
6. Kaspersky Antivirus - 97.83%
7. BitDefender Antivirus-97.79%
8. F-Secure -97.21%
9. Zone Alarm-96.91%
10. Spy Emergency-95.64%


Test darmowych AV na wykrywanie trojanów, adware i dialerów - dobreprogramy.pl, październik

http://dobreprogramy.pl/index.php?dz=8&a...wirusowych

1. avast! 98.71%
2. AVG 96.53%
3. Avira 89.86% (paczka z adware/spyware)
4. ClamWin 78.91%
5. Rising 65.94%
6. PC Tools 38.83%


Test userów antivir-polska, październik

http://forum.antivir-polska.info/thread-541.html

Test na paczce 3732 wirusów:

1. Twister Anti-TrojanVirus 3719
2-3. Avira AntiVir Personal - Free Antivirus 8.1.0.331 3711
2-3. Avira AntiVir Premium 8.1.00.331 3711
4. Ashampoo AntiVirus 1.61 3709
5. avast! 4.8.1229 Home Edition (gruntowny skan) 3708
6. Kaspersky Internet Security 2009 8.0.0.454 3692
7. Rising Antivirus Free Edition 20.56 3691
8. Norton Internet Security 2009 16.0.0.125 3686
9. F-secure 2009 3681
10. Kaspersky Anti-Virus 2009 8.0.0.454 (a.b) 3680


Matousec - test zapór ogniowych i firewalli pakietów antywirusowych

http://www.matousec.com/projects/firewal...esults.php

1. Outpost Firewall Pro 2009 6.5.2355.316.0597 99%
2. Online Armor Personal Firewall 2.1.0.131 98%
3. Comodo Firewall Pro 3.0.22.349 FREE 95%
4. ProSecurity 1.43 93%
5. Privatefirewall 6.0.19.29 90%
6. Online Armor Personal Firewall 2.1.0.131 FREE 89%
7. Kaspersky Internet Security 2009 8.0.0.454 87% 1 miejsce wśród pakietów
8. Netchina S3 2008 3.5.5.1 FREE 86%
9. ZoneAlarm Pro 2009 8.0.020.000 86%
10. PC Tools Firewall Plus 4.0.0.45 FREE 85%
25. Avira Premium Security Suite 8.1.00.206 11%, 8 miejsce wśród pakietów


Ranking pakietów antywirusowych PCMAG, październik

http://www.pcmag.com/article2/0,1895,2333444,00.asp

Anti-Malware, październik

http://www.anti-malware-test.com/?q=taxonomy/term/14

1. Dr.Web Anti-Virus 4.44 (100%)
2-3. Kaspersky Anti-Virus 2009 (80%)
2-3. Avast! Professional Edition 4.8 (80%)
4. Agnitum Outpost Antivirus Pro 6.5 (53%)
5. Norton AntiVirus 2009 (53%)
6. Panda Antivirus 2009 (40%)
7. BitDefender Antivirus 2009 (33%)
8. Trend Micro Antivirus plus Antispyware 2008 (33%)
9. McAfee VirusScan 2008 (33%)
10. F-Secure Anti-Virus 2009 (33%)
12. Avira AntiVir PE Premium 8.1 (20%)]]> CHIP Online, marzec

http://blog.chip.de/0-security-blog/maer...-20080310/

Malware
1. AVK (G Data) 99.91%
2. WebWasher-GW 99.85%
3. TrustPort 99.63%
4. AntiVir (Avira) 99.32%
5. Avast! (Alwil) 98.81%
6. Trend Micro 98.72%
7. Sophos 98.10%
8. Ikarus 97.98%
9. Nod32 (Eset) 97.85%
10. Microsoft 97.79%

Adware/spyware
1. WebWasher 99.86%
2. AVK (G Data) 99.85%
3. TrustPort 99.82%
4. AntiVir (Avira)99.15%
5. Sophos 98.83%
6. Ikarus 98.83%
7. BitDefender 98.77%
8. Norton 98.62%
9. AVG 98.58%
10. McAfee 98.56%


ProtectStar Awart, test pakietów

http://www.protectstar-testlab.org/award...er_web.pdf

1. Symantec 94.35%
2. Trend Micro 94.00%
3. Avira 93.80%
4. G DATA 93.25%
5. ESET 92.85%
6. BitDefender 92.25%
7. Microsoft 90.45%
8. F-Secure 90.25%
9. BullGuard 90.25%
10.Kaspersky 90.15%


AV comparatives, maj

http://www.av-comparatives.org/seiten/er...port18.pdf

1. Avira
2. NOD32
3. AVG
4. McAfee
5. Microsoft
6. AVK
7. BitDefender
8. Norman
9. Avast
10. Kaspersky


Virus.gr, czerwiec

http://translate.google.com/translate?hl...rg.mozillaTonguel:official%26hs%3DP9I

1. G DATA 2008 version 18.2.7310.844 - 99,05%
2. F-Secure 2008 version 8.00.103 - 98.75%
3. TrustPort version 2.8.0.1835 - 98.06%
4. Kaspersky version 8.0.0.357 - 97.95%
5. eScan version 9.0.742.1 - 97.44%
6. The Shield 2008 - 97.43% Tarcza w 2008 r. - 97,43%
7. AntiVir Premium - 97,13%
8. Ashampoo version 1.61 - 97.09%
9. Ikarus version 1.0.82 - 96.05%
10. AntiVir version 8.1.00.295 Classic - 95.54%


VirusInfo, sierpień

http://virusinfo.info/index.php?page=testseng

Avira najskuteczniejsza!


Anti-Malware, sierpień

http://66.196.80.202/babelfish/translate...node%2f497

Avira najlepszy wynik!


Virus Bulletin - VB100, sierpień

Trzeba się zarejestrować!

http://www.virusbtn.com/vb100/archive/re...ay=summary

Skuteczność w wykrywaniu trojanów wg. sierpniowego Virus Bulletin (on-demand detection)

G DATA AntiVirus 99,76%
AVG Internet Security 98,47%
Symantec Endpoint Protection 98,29%
Avira Premium 98.27%
ESET NOD32 Antivirus 97,84%
Kaspersky Anti-Virus 96,73%
F-Secure Internet Security 94,66%
McAfee VirusScan 84,52%
ArcaBit ArcaVir 76,12%


AV-comparatives, sierpień

http://www.av-comparatives.org/seiten/er...port19.pdf

1. Avira
2. GDATA
3. Symantec
4. McAfee
5. Avast
6. TrustPort
7. Kaspersky
8. AVG
9. Eset
10. BitDefender


AV-Test.org, wrzesień

http://www.secureblog.info/articles/270.html

Malware
1. GDATA 2009 99.8%
2. Avira 99.8%
3. WebWasher 99.7%
4. Trust Port 99.5%
5. Ikarus 99.5%
6. Avast 99.3%
7. GDATA 2008 99.2%
8. F-Secure 2009 99.2%
9. Norton 2009 98.7%
10. Kaspersky 98.4%

Spyware
1. GDATA 2009 99.8%
2. F-Decure 2009 99.6%
3. WebWasher 99.2
4. GDATA 2008 99.1%
5. Avira 99.0%
6. Ikarus 98.6%
7. F-secure 2008 98.4%
8. Trust Port 98.4%
9. Kaspersky 98.3%
10. Avast 98.3%


Virus Bulletin - VB100, październik

http://www.virusbtn.com/vb100/archive/re...ay=summary

http://tech.wp.pl/kat,1009785,title,Najn...omosc.html

Programy, które nie przeszły testu i nie otrzymały wyróżnienia:

ArcaBit ArcaVir (93 pominięte zagrożenia*, 3 fałszywe alarmy)
Avira AntiVir (1 fałszywy alarm)
CA e Trust (1 pominięte zagrożenie)
F-Secure (1 fałszywy alarm pozytywny)
Kaspersky (1 fałszywy alarm pozytywny)
MicroWorld (1 fałszywy alarm pozytywny)
Quick Heal (1 fałszywy alarm pozytywny)
Redstone (1 pominięte zagrożenie, 1 fałszywy alarm)

* zagrożenia z listy „in the wild”

Programy, które zaliczyły procedurę testową pozytywnie:

Agnitum Outpost
AhnLab
Alwil
AVG (Grisoft)
Eset NOD32
Fortinet FortiClient
Frisk F-PROT
Kingsoft
McAfee VirusScan
Microsoft Forefront
Norman Security Suite
Sophos Endpoint Security
Symantec Endpoint
AEC Trustport Antivirus
VirusBuster Professional


TopTenREVIEWS, październik

http://anti-virus-software-review.toptenreviews.com/

1. BitDefender Antivirus
2. Kaspersky Anti-Virus
3. ESET Nod32
4. AVG Anti-Virus
5. Vipre Antivirus + Antispyware
6. F-Secure Anti-Virus
7. Trend Micro
8. McAfee VirusScan
9. Norton AntiVirus
10. CA Antivirus


SSUpdater.com Anti-Malware test, październik

http://ssupdater.com/modules/Forums/inde...topic=3746

1. a-squared Anti-Malware - 99.12%
2. AntiVir PE Premium - 98.88%
3. Avast! - 98.75%
4. Norton Antivirus - 98.69%
5. Ikarus Virus Utilities - 98.48%
6. Kaspersky Antivirus - 97.83%
7. BitDefender Antivirus-97.79%
8. F-Secure -97.21%
9. Zone Alarm-96.91%
10. Spy Emergency-95.64%


Test darmowych AV na wykrywanie trojanów, adware i dialerów - dobreprogramy.pl, październik

http://dobreprogramy.pl/index.php?dz=8&a...wirusowych

1. avast! 98.71%
2. AVG 96.53%
3. Avira 89.86% (paczka z adware/spyware)
4. ClamWin 78.91%
5. Rising 65.94%
6. PC Tools 38.83%


Test userów antivir-polska, październik

http://forum.antivir-polska.info/thread-541.html

Test na paczce 3732 wirusów:

1. Twister Anti-TrojanVirus 3719
2-3. Avira AntiVir Personal - Free Antivirus 8.1.0.331 3711
2-3. Avira AntiVir Premium 8.1.00.331 3711
4. Ashampoo AntiVirus 1.61 3709
5. avast! 4.8.1229 Home Edition (gruntowny skan) 3708
6. Kaspersky Internet Security 2009 8.0.0.454 3692
7. Rising Antivirus Free Edition 20.56 3691
8. Norton Internet Security 2009 16.0.0.125 3686
9. F-secure 2009 3681
10. Kaspersky Anti-Virus 2009 8.0.0.454 (a.b) 3680


Matousec - test zapór ogniowych i firewalli pakietów antywirusowych

http://www.matousec.com/projects/firewal...esults.php

1. Outpost Firewall Pro 2009 6.5.2355.316.0597 99%
2. Online Armor Personal Firewall 2.1.0.131 98%
3. Comodo Firewall Pro 3.0.22.349 FREE 95%
4. ProSecurity 1.43 93%
5. Privatefirewall 6.0.19.29 90%
6. Online Armor Personal Firewall 2.1.0.131 FREE 89%
7. Kaspersky Internet Security 2009 8.0.0.454 87% 1 miejsce wśród pakietów
8. Netchina S3 2008 3.5.5.1 FREE 86%
9. ZoneAlarm Pro 2009 8.0.020.000 86%
10. PC Tools Firewall Plus 4.0.0.45 FREE 85%
25. Avira Premium Security Suite 8.1.00.206 11%, 8 miejsce wśród pakietów


Ranking pakietów antywirusowych PCMAG, październik

http://www.pcmag.com/article2/0,1895,2333444,00.asp

Anti-Malware, październik

http://www.anti-malware-test.com/?q=taxonomy/term/14

1. Dr.Web Anti-Virus 4.44 (100%)
2-3. Kaspersky Anti-Virus 2009 (80%)
2-3. Avast! Professional Edition 4.8 (80%)
4. Agnitum Outpost Antivirus Pro 6.5 (53%)
5. Norton AntiVirus 2009 (53%)
6. Panda Antivirus 2009 (40%)
7. BitDefender Antivirus 2009 (33%)
8. Trend Micro Antivirus plus Antispyware 2008 (33%)
9. McAfee VirusScan 2008 (33%)
10. F-Secure Anti-Virus 2009 (33%)
12. Avira AntiVir PE Premium 8.1 (20%)]]> <![CDATA[Nowa paczka wirusów.]]> http://forum.antivir-polska.info/thread-563.html Tue, 04 Nov 2008 20:28:34 +0100 Jurek http://forum.antivir-polska.info/thread-563.html
http://www.megaupload.com/pl/?d=Y0EUC //???//

3 ostatnie znaki dostępne via PM

hasło: hacker]]>
http://www.megaupload.com/pl/?d=Y0EUC //???//

3 ostatnie znaki dostępne via PM

hasło: hacker]]> <![CDATA[Najnowszy test?]]> http://forum.antivir-polska.info/thread-562.html Sat, 01 Nov 2008 18:11:07 +0100 zbycho http://forum.antivir-polska.info/thread-562.html Na tej stronie znalazłem najnowszy test antywirusów.Czy jest rzetelny?Nie wiem.Osobiście traktuję go raczej jako ciekawostkę.]]> Na tej stronie znalazłem najnowszy test antywirusów.Czy jest rzetelny?Nie wiem.Osobiście traktuję go raczej jako ciekawostkę.]]> <![CDATA[Wirus czy fałszywy alarm ?]]> http://forum.antivir-polska.info/thread-561.html Wed, 29 Oct 2008 19:50:12 +0100 Zbysiek http://forum.antivir-polska.info/thread-561.html Avira ustawiona jest aby podczas skanowania usuwała wirusa jak znajdzie i dodać do kwarantanny i on tam jest. Proszę o pomoc Smile]]> Avira ustawiona jest aby podczas skanowania usuwała wirusa jak znajdzie i dodać do kwarantanny i on tam jest. Proszę o pomoc Smile]]> <![CDATA[Serwery zapchane?]]> http://forum.antivir-polska.info/thread-560.html Wed, 29 Oct 2008 16:26:54 +0100 Plati http://forum.antivir-polska.info/thread-560.html <![CDATA[problem z kluczem po formacie]]> http://forum.antivir-polska.info/thread-559.html Wed, 29 Oct 2008 12:41:58 +0100 strawb3rry http://forum.antivir-polska.info/thread-559.html to juz moj drugi klucz zakupiony po uplywie pierwszej icencji lecz juz go mialem zainstalowanego wczesniej,i podobnie jak inni mialem problem z aktualizacja. zrobilem formata i klucz mam niewazny ktory zakupilem. siakies pomysly ? czekam pozdrowienia]]> to juz moj drugi klucz zakupiony po uplywie pierwszej icencji lecz juz go mialem zainstalowanego wczesniej,i podobnie jak inni mialem problem z aktualizacja. zrobilem formata i klucz mam niewazny ktory zakupilem. siakies pomysly ? czekam pozdrowienia]]> <![CDATA[Nowa Avira]]> http://forum.antivir-polska.info/thread-557.html Tue, 28 Oct 2008 10:52:13 +0100 Zbysiek http://forum.antivir-polska.info/thread-557.html http://www.avira.com/en/pages/index.php pojawiła się już chyba nowa wersja Aviry 2009. Czy ktoś już jej używa? Czy jest stabilna?]]> http://www.avira.com/en/pages/index.php pojawiła się już chyba nowa wersja Aviry 2009. Czy ktoś już jej używa? Czy jest stabilna?]]> <![CDATA[Podejrzenie infekcji - ''hidden objects were found'']]> http://forum.antivir-polska.info/thread-556.html Fri, 24 Oct 2008 01:00:37 +0200 Kamiś http://forum.antivir-polska.info/thread-556.html
Podczas ostatniego skanowania Avira wykryła jakiś hidden object, poniżej wycinek z loga:

Starting search for hidden objects.
HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM\autorecover mofs
[INFO] The registry entry is invisible.
'744353' objects were checked, '1' hidden objects were found.

Proszę o sprawdzenie logów i z góry dziękuję za pomoc.

Log z HiJackThis -
Kod:
Logfile of HijackThis v1.99.1
Scan saved at 00:02:51, on 2008-10-24
Platform: Unknown Windows (WinNT 6.00.1905 SP1)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)

Running processes:
c:\Program Files\Bioscrypt\VeriSoft\Bin\AsGHost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RtHDVCpl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Logitech\Gaming Software\LWEMon.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Windows\ehome\ehmsas.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Mozilla Firefox\FireFox 3.0\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Shinigami\Desktop\Download\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: VeriSoft Access Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files\Bioscrypt\VeriSoft\Bin\ItIEAddIn.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll
O3 - Toolbar: Copernic Desktop Search - Home - {968631B6-4729-440D-9BF4-251F5593EC9A} - C:\Program Files\Copernic Desktop Search 2\DesktopSearchBand300000081.dll
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [HP Health Check Scheduler] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe c:\PROGRA~1\BIOSCR~1\VeriSoft\Bin\ASTSVCC.dll,RegisterModule
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Copernic Desktop Search - Home] "C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe" /tray
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~2.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~2.0_0\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O13 - Gopher Prefix:
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs:  
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: DiskMagik Service (DiskMgkS) - RoseCity Software - C:\Program Files\DiskMagik\DiskMgkS.exe
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)

Log z Silent Runners -
Kod:
"Silent Runners.vbs", revision 58, http://www.silentrunners.org/
Operating System: Windows Vista
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"ehTray.exe" = "C:\Windows\ehome\ehTray.exe" [MS]
"Skype" = ""C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized" ["Skype Technologies S.A."]
"Copernic Desktop Search - Home" = ""C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe" /tray" ["Copernic Inc."]
"SpybotSD TeaTimer" = "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" ["Safer Networking Limited"]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"SMSERIAL" = "C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe" ["Motorola Inc."]
"SynTPEnh" = "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" ["Synaptics, Inc."]
"RtHDVCpl" = "RtHDVCpl.exe" ["Realtek Semiconductor"]
"IAAnotif" = "C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe" ["Intel Corporation"]
"QPService" = ""C:\Program Files\HP\QuickPlay\QPService.exe"" ["CyberLink Corp."]
"QlbCtrl" = "C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start"
"HP Health Check Scheduler" = "C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [null data]
"hpWirelessAssistant" = "C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe"
"WAWifiMessage" = "C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe"
"SunJavaUpdateSched" = ""C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"" ["Sun Microsystems, Inc."]
"CognizanceTS" = "rundll32.exe c:\PROGRA~1\BIOSCR~1\VeriSoft\Bin\ASTSVCC.dll,RegisterModule" [MS]
"Adobe Reader Speed Launcher" = ""C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"" ["Adobe Systems Incorporated"]
"SynTPStart" = "C:\Program Files\Synaptics\SynTP\SynTPStart.exe" ["Synaptics, Inc."]
"NvSvc" = "RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart" [MS]
"NvCplDaemon" = "RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup" [MS]
"NvMediaCenter" = "RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit" [MS]
"Kernel and Hardware Abstraction Layer" = "KHALMNPR.EXE" ["Logitech, Inc."]
"Start WingMan Profiler" = "C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui" ["Logitech Inc."]
"avgnt" = ""C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min" ["Avira GmbH"]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{000123B4-9B42-4900-B3F7-F4B073EFC214}\(Default) = "btorbit.com"
  -> {HKLM...CLSID} = "Octh Class"
                   \InProcServer32\(Default) = "C:\Program Files\Orbitdownloader\orbitcth.dll" ["Orbitdownloader.com"]
{02478D38-C3F9-4EFB-9B51-7695ECA05670}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "Yahoo! Toolbar Helper"
                   \InProcServer32\(Default) = "C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll" ["Yahoo! Inc."]
{22BF413B-C6D2-4d91-82A9-A0F997BA588C}\(Default) = "Skype add-on (mastermind)"
  -> {HKLM...CLSID} = "Skype add-on (mastermind)"
                   \InProcServer32\(Default) = "C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll" ["Skype Technologies S.A."]
{53707962-6F74-2D53-2644-206D7942484F}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "Spybot-S&D IE Protection"
                   \InProcServer32\(Default) = "C:\PROGRA~1\SPYBOT~1\SDHelper.dll" ["Safer Networking Limited"]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "SSVHelper Class"
                   \InProcServer32\(Default) = "C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll" ["Sun Microsystems, Inc."]
{DF21F1DB-80C6-11D3-9483-B03D0EC10000}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "VeriSoft Access Manager"
                   \InProcServer32\(Default) = "c:\Program Files\Bioscrypt\VeriSoft\Bin\ItIEAddIn.dll" ["Bioscrypt Inc."]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class"
  -> {HKLM...CLSID} = "DesktopContext Class"
                   \InProcServer32\(Default) = "C:\Windows\system32\nvcpl.dll" ["NVIDIA Corporation"]
"{2F603045-309F-11CF-9774-0020AFD0CFF6}" = "Synaptics Control Panel"
  -> {HKLM...CLSID} = (no title provided)
                   \InProcServer32\(Default) = "C:\Program Files\Synaptics\SynTP\SynTPCpl.dll" ["Synaptics, Inc."]
"{7F67036B-66F1-411A-AD85-759FB9C5B0DB}" = "ShellViewRTF"
  -> {HKLM...CLSID} = "ShellViewRTF"
                   \InProcServer32\(Default) = "C:\Windows\System32\ShellvRTF.dll" ["XSS"]
"{7842554E-6BED-11D2-8CDB-B05550C10000}" = "Monitor"
  -> {HKLM...CLSID} = "Monitor Class"
                   \InProcServer32\(Default) = "C:\Windows\system32\btncopy.dll" ["Broadcom Corporation."]
"{45AC2688-0253-4ED8-97DE-B5370FA7D48A}" = "Shell Extension for Malware scanning"
  -> {HKLM...CLSID} = "Shell Extension for Malware scanning"
                   \InProcServer32\(Default) = "C:\Program Files\Avira\AntiVir PersonalEdition Classic\shlext.dll" ["Avira GmbH"]
"{23170F69-40C1-278A-1000-000100020000}" = "7-Zip Shell Extension"
  -> {HKLM...CLSID} = "7-Zip Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\7-Zip\7-zip.dll" ["Igor Pavlov"]
"{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper"
  -> {HKLM...CLSID} = "NVIDIA CPL Extension"
                   \InProcServer32\(Default) = "C:\Windows\system32\nvcpl.dll" ["NVIDIA Corporation"]
"{8FF88D21-7BD0-11D1-BFB7-00AA00262A11}" = "WinAce Archiver 2.69 Context Menu Shell Extension"
  -> {HKLM...CLSID} = "WinAceContext Menu Extension"
                   \InProcServer32\(Default) = "C:\Program Files\WinAce\arcext.dll" ["e-merge GmbH"]
"{8FF88D25-7BD0-11D1-BFB7-00AA00262A11}" = "WinAce Archiver 2.69 DragDrop Shell Extension"
  -> {HKLM...CLSID} = "WinAceDrag-Drop Extension"
                   \InProcServer32\(Default) = "C:\Program Files\WinAce\arcext.dll" ["e-merge GmbH"]
"{8FF88D27-7BD0-11D1-BFB7-00AA00262A11}" = "WinAce Archiver 2.69 Context Menu Shell Extension"
  -> {HKLM...CLSID} = "WinAceContext Menu (Add) Extension"
                   \InProcServer32\(Default) = "C:\Program Files\WinAce\arcext.dll" ["e-merge GmbH"]
"{8FF88D23-7BD0-11D1-BFB7-00AA00262A11}" = "WinAce Archiver 2.69 Property Sheet Shell Extension"
  -> {HKLM...CLSID} = "WinAceProperty Sheet Extension"
                   \InProcServer32\(Default) = "C:\Program Files\WinAce\arcext.dll" ["e-merge GmbH"]
"{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}" = "OpenOffice.org Column Handler"
  -> {HKLM...CLSID} = (no title provided)
                   \InProcServer32\(Default) = ""C:\Program Files\OpenOffice.org 2.4\program\shlxthdl.dll"" ["Sun Microsystems, Inc."]
"{087B3AE3-E237-4467-B8DB-5A38AB959AC9}" = "OpenOffice.org Infotip Handler"
  -> {HKLM...CLSID} = (no title provided)
                   \InProcServer32\(Default) = ""C:\Program Files\OpenOffice.org 2.4\program\shlxthdl.dll"" ["Sun Microsystems, Inc."]
"{63542C48-9552-494A-84F7-73AA6A7C99C1}" = "OpenOffice.org Property Sheet Handler"
  -> {HKLM...CLSID} = (no title provided)
                   \InProcServer32\(Default) = ""C:\Program Files\OpenOffice.org 2.4\program\shlxthdl.dll"" ["Sun Microsystems, Inc."]
"{3B092F0C-7696-40E3-A80F-68D74DA84210}" = "OpenOffice.org Thumbnail Viewer"
  -> {HKLM...CLSID} = (no title provided)
                   \InProcServer32\(Default) = ""C:\Program Files\OpenOffice.org 2.4\program\shlxthdl.dll"" ["Sun Microsystems, Inc."]
"{DC70C4A5-2044-4c59-B806-DEFB9AE0DF7C}" = "Logitech Setpoint Extension"
  -> {HKLM...CLSID} = "KbLogiExt Class"
                   \InProcServer32\(Default) = "C:\Program Files\Logitech\SetPoint\kbcplext.dll" ["Logitech, Inc."]
"{B9B9F083-2B04-452A-8691-83694AC1037B}" = "Logitech Setpoint Extension"
  -> {HKLM...CLSID} = "LogiExt Class"
                   \InProcServer32\(Default) = "C:\Program Files\Logitech\SetPoint\mcplext.dll" ["Logitech, Inc."]

HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\
{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\(Default) = "OpenOffice.org Column Handler"
  -> {HKLM...CLSID} = (no title provided)
                   \InProcServer32\(Default) = ""C:\Program Files\OpenOffice.org 2.4\program\shlxthdl.dll"" ["Sun Microsystems, Inc."]
{F9DB5320-233E-11D1-9F84-707F02C10627}\(Default) = "PDF Column Info"
  -> {HKLM...CLSID} = "PDF Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll" ["Adobe Systems, Inc."]

HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\
7-Zip\(Default) = "{23170F69-40C1-278A-1000-000100020000}"
  -> {HKLM...CLSID} = "7-Zip Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\7-Zip\7-zip.dll" ["Igor Pavlov"]
Shell Extension for Malware scanning\(Default) = "{45AC2688-0253-4ED8-97DE-B5370FA7D48A}"
  -> {HKLM...CLSID} = "Shell Extension for Malware scanning"
                   \InProcServer32\(Default) = "C:\Program Files\Avira\AntiVir PersonalEdition Classic\shlext.dll" ["Avira GmbH"]
ZFAdd\(Default) = "{8FF88D27-7BD0-11D1-BFB7-00AA00262A11}"
  -> {HKLM...CLSID} = "WinAceContext Menu (Add) Extension"
                   \InProcServer32\(Default) = "C:\Program Files\WinAce\arcext.dll" ["e-merge GmbH"]

HKLM\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\
7-Zip\(Default) = "{23170F69-40C1-278A-1000-000100020000}"
  -> {HKLM...CLSID} = "7-Zip Shell Extension"
                   \InProcServer32\(Default) = "C:\Program Files\7-Zip\7-zip.dll" ["Igor Pavlov"]
ZFAdd\(Default) = "{8FF88D27-7BD0-11D1-BFB7-00AA00262A11}"
  -> {HKLM...CLSID} = "WinAceContext Menu (Add) Extension"
                   \InProcServer32\(Default) = "C:\Program Files\WinAce\arcext.dll" ["e-merge GmbH"]

HKLM\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\
Shell Extension for Malware scanning\(Default) = "{45AC2688-0253-4ED8-97DE-B5370FA7D48A}"
  -> {HKLM...CLSID} = "Shell Extension for Malware scanning"
                   \InProcServer32\(Default) = "C:\Program Files\Avira\AntiVir PersonalEdition Classic\shlext.dll" ["Avira GmbH"]


Group Policies {GPedit.msc branch and setting}:
-----------------------------------------------

Note: detected settings may not have any effect.

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\

"DisableRegistryTools" = (REG_DWORD) dword:0x00000000
{User Configuration|Administrative Templates|System|
Prevent access to registry editing tools}

HKCU\Software\Policies\Microsoft\Windows\System\

"DisableCMD" = (REG_DWORD) dword:0x00000000
{User Configuration|Administrative Templates|System|
Prevent access to the command prompt}

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\

"ConsentPromptBehaviorAdmin" = (REG_DWORD) dword:0x00000002
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
User Account Control: Behavior Of The Elevation Prompt For Administrators In Admin Approval Mode}

"ConsentPromptBehaviorUser" = (REG_DWORD) dword:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
User Account Control: Behavior Of The Elevation Prompt For Standard Users}

"EnableInstallerDetection" = (REG_DWORD) dword:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
User Account Control: Detect Application Installations And Prompt For Elevation}

"EnableLUA" = (REG_DWORD) dword:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
User Account Control: Run All Administrators In Admin Approval Mode}

"EnableSecureUIAPaths" = (REG_DWORD) dword:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
User Account Control: Only elevate UIAccess applications that are installed in secure locations}

"EnableVirtualization" = (REG_DWORD) dword:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
User Account Control: Virtualize file and registry write failures to per-user locations}

"PromptOnSecureDesktop" = (REG_DWORD) dword:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
User Account Control: Switch to the secure desktop when prompting for elevation}

"shutdownwithoutlogon" = (REG_DWORD) dword:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
Shutdown: Allow system to be shut down without having to log on}

"undockwithoutlogon" = (REG_DWORD) dword:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
Devices: Allow undock without having to log on}

"FilterAdministratorToken" = (REG_DWORD) dword:0x00000000
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
User Account Control: Admin Approval Mode for the Built-in Administrator Account}

"EnableUIADesktopToggle" = (REG_DWORD) dword:0x00000000
{unrecognized setting}


Active Desktop and Wallpaper:
-----------------------------

Active Desktop may be disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

Displayed if Active Desktop enabled and wallpaper not set by Group Policy:
HKCU\Software\Microsoft\Internet Explorer\Desktop\General\
"Wallpaper" = "C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg"

Displayed if Active Desktop disabled and wallpaper not set by Group Policy:
HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\Users\Shinigami\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg"


Enabled Screen Saver:
---------------------

HKCU\Control Panel\Desktop\
"SCRNSAVE.EXE" = "C:\Windows\system32\Ribbons.scr" [MS]


Windows Portable Device AutoPlay Handlers
-----------------------------------------

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\

HPAutoplayPSE\
"Provider" = "HP Photosmart Essential 2.0"
"InvokeProgID" = "HpqPSApl.Autoplay"
"InvokeVerb" = "Play"
HKLM\SOFTWARE\Classes\HpqPSApl.Autoplay\shell\Play\DropTarget\CLSID = "{A6873065-D632-4615-A3A9-C5F05EE109C1}"
  -> {HKLM...CLSID} = (no title provided)
                   \LocalServer32\(Default) = "C:\Program Files\HP\Digital Imaging\bin\HpqPsApl.exe" ["Hewlett-Packard"]

LightScribeOnArrivalAP\
"Provider" = "LightScribe Direct Disc Labeling"
"InvokeProgID" = "LightScribe.AutoPlayHandler"
"InvokeVerb" = "LabelLightScribeDisc"
HKLM\SOFTWARE\Classes\LightScribe.AutoPlayHandler\shell\LabelLightScribeDisc\command\(Default) = "C:\Program Files\Common Files\LightScribe\LsLauncher.exe" ["Hewlett-Packard Company"]

MediaCapture9Music\
"Provider" = "Media Import"
"InvokeProgID" = "RoxioMediaCapture9"
"InvokeVerb" = "Audio"
HKLM\SOFTWARE\Classes\RoxioMediaCapture9\shell\Audio\command\(Default) = "C:\Program Files\Roxio\Roxio MyDVD Basic v9\Media Import 9\MediaCapture9.exe -audio %L" ["Sonic Solutions"]

MediaCapture9Photos\
"Provider" = "Media Import"
"InvokeProgID" = "RoxioMediaCapture9"
"InvokeVerb" = "Photo"
HKLM\SOFTWARE\Classes\RoxioMediaCapture9\shell\Photo\command\(Default) = "C:\Program Files\Roxio\Roxio MyDVD Basic v9\Media Import 9\MediaCapture9.exe -photo %L" ["Sonic Solutions"]

MediaCapture9VideoCamera\
"Provider" = "Media Import"
"ProgID" = "Shell.HWEventHandlerShellExecute"
"InitCmdLine" = "C:\Program Files\Roxio\Roxio MyDVD Basic v9\Media Import 9\MediaCapture9.exe"
HKLM\SOFTWARE\Classes\Shell.HWEventHandlerShellExecute\CLSID\(Default) = "{FFB8655F-81B9-4fce-B89C-9A6BA76D13E7}"
  -> {HKLM...CLSID} = "Shell Execute Hardware Event Handler"
                   \LocalServer32\(Default) = "C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {FFB8655F-81B9-4fce-B89C-9A6BA76D13E7}" [MS]

MediaCapture9Videos\
"Provider" = "Media Import"
"InvokeProgID" = "RoxioMediaCapture9"
"InvokeVerb" = "Video"
HKLM\SOFTWARE\Classes\RoxioMediaCapture9\shell\Video\command\(Default) = "C:\Program Files\Roxio\Roxio MyDVD Basic v9\Media Import 9\MediaCapture9.exe -video %L" ["Sonic Solutions"]

QuickPlayDCameraArrival\
"Provider" = "HP QuickPlay"
"InvokeProgID" = "Picture"
"InvokeVerb" = "PlayWithQuickPlay"
HKLM\SOFTWARE\Classes\Picture\shell\PlayWithQuickPlay\Command\(Default) = ""C:\Program Files\HP\QuickPlay\QP.exe" AUTOPLAY DSC "%L"" ["CyberLink Corp."]

QuickPlayDVArrival\
"Provider" = "HP QuickPlay"
"ProgID" = "Shell.HWEventHandlerShellExecute"
"InitCmdLine" = ""C:\Program Files\HP\QuickPlay\QP.exe" DV "%L""
HKLM\SOFTWARE\Classes\Shell.HWEventHandlerShellExecute\CLSID\(Default) = "{FFB8655F-81B9-4fce-B89C-9A6BA76D13E7}"
  -> {HKLM...CLSID} = "Shell Execute Hardware Event Handler"
                   \LocalServer32\(Default) = "C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {FFB8655F-81B9-4fce-B89C-9A6BA76D13E7}" [MS]

QuickPlayMusicFilesArrival\
"Provider" = "HP QuickPlay"
"InvokeProgID" = "MusicFiles"
"InvokeVerb" = "PlayWithQuickPlay"
HKLM\SOFTWARE\Classes\MusicFiles\shell\PlayWithQuickPlay\Command\(Default) = ""C:\Program Files\HP\QuickPlay\QP.exe" AUTOPLAY MUSIC "%L"" ["CyberLink Corp."]

QuickPlayPlayCDAudioOnArrival\
"Provider" = "HP QuickPlay"
"InvokeProgID" = "AudioCD"
"InvokeVerb" = "PlayWithQuickPlay"
HKLM\SOFTWARE\Classes\AudioCD\shell\PlayWithQuickPlay\Command\(Default) = ""C:\Program Files\HP\QuickPlay\QP.exe" AUTOPLAY CD "%L"" ["CyberLink Corp."]

QuickPlayPlayDVDMovieOnArrival\
"Provider" = "HP QuickPlay"
"InvokeProgID" = "DVD"
"InvokeVerb" = "PlayWithQuickPlay"
HKLM\SOFTWARE\Classes\DVD\shell\PlayWithQuickPlay\Command\(Default) = ""C:\Program Files\HP\QuickPlay\QP.exe" AUTOPLAY MOVIE "%L"" ["CyberLink Corp."]

QuickPlayPlayVideoCDMovieOnArrival\
"Provider" = "HP QuickPlay"
"InvokeProgID" = "VCD"
"InvokeVerb" = "PlayWithQuickPlay"
HKLM\SOFTWARE\Classes\VCD\shell\PlayWithQuickPlay\Command\(Default) = ""C:\Program Files\HP\QuickPlay\QP.exe" AUTOPLAY MOVIE "%L"" ["CyberLink Corp."]

QuickPlayVideoFilesArrival\
"Provider" = "HP QuickPlay"
"InvokeProgID" = "VideoFiles"
"InvokeVerb" = "PlayWithQuickPlay"
HKLM\SOFTWARE\Classes\VideoFiles\shell\PlayWithQuickPlay\Command\(Default) = ""C:\Program Files\HP\QuickPlay\QP.exe" AUTOPLAY VIDEO "%L"" ["CyberLink Corp."]

RoxioSCAudioCDTask33\
"Provider" = "Roxio Creator Audio"
"InvokeProgID" = "Roxio.RoxioCentral33"
"InvokeVerb" = "AudioCDTask"
HKLM\SOFTWARE\Classes\Roxio.RoxioCentral33\shell\AudioCDTask\Command\(Default) = ""C:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\Main\Roxio_Central33.exe" /Launch {8E376824-EA6C-4CB7-AA05-A30CB84D359B}" [null data]

RoxioSCCopyCD33\
"Provider" = "Roxio Creator Copy"
"InvokeProgID" = "Roxio.RoxioCentral33"
"InvokeVerb" = "ExactCopyJob"
HKLM\SOFTWARE\Classes\Roxio.RoxioCentral33\shell\ExactCopyJob\Command\(Default) = ""C:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\Main\Roxio_Central33.exe" /Launch {6123D5C0-0B6A-4B67-A692-C0863AB98CDA}" [null data]

RoxioSCCopyDisc33\
"Provider" = "Roxio Creator Copy"
"InvokeProgID" = "Roxio.RoxioCentral33"
"InvokeVerb" = "ExactCopyJob"
HKLM\SOFTWARE\Classes\Roxio.RoxioCentral33\shell\ExactCopyJob\Command\(Default) = ""C:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\Main\Roxio_Central33.exe" /Launch {6123D5C0-0B6A-4B67-A692-C0863AB98CDA}" [null data]

RoxioSCDataProject33\
"Provider" = "Roxio Creator Data"
"InvokeProgID" = "Roxio.RoxioCentral33"
"InvokeVerb" = "DataGuide"
HKLM\SOFTWARE\Classes\Roxio.RoxioCentral33\shell\DataGuide\Command\(Default) = ""C:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\Main\Roxio_Central33.exe" /Launch Data" [null data]

RoxioSCDataTask33\
"Provider" = "Roxio Creator Data"
"InvokeProgID" = "Roxio.RoxioCentral33"
"InvokeVerb" = "DataTask"
HKLM\SOFTWARE\Classes\Roxio.RoxioCentral33\shell\DataTask\Command\(Default) = ""C:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\Main\Roxio_Central33.exe" /Launch {D085B12D-4D9B-49C2-8323-5053831CBD54}" [null data]

WinampMTPHandler\
"Provider" = "Winamp"
"ProgID" = "Shell.HWEventHandlerShellExecute"
"InitCmdLine" = "C:\Program Files\Winamp\winamp.exe"
HKLM\SOFTWARE\Classes\Shell.HWEventHandlerShellExecute\CLSID\(Default) = "{FFB8655F-81B9-4fce-B89C-9A6BA76D13E7}"
  -> {HKLM...CLSID} = "Shell Execute Hardware Event Handler"
                   \LocalServer32\(Default) = "C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {FFB8655F-81B9-4fce-B89C-9A6BA76D13E7}" [MS]

WinampPlayMediaOnArrival\
"Provider" = "Winamp"
"InvokeProgID" = "Winamp.File"
"InvokeVerb" = "Play"
HKLM\SOFTWARE\Classes\Winamp.File\shell\Play\command\(Default) = ""C:\Program Files\Winamp\winamp.exe" "%1"" ["Nullsoft"]
HKLM\SOFTWARE\Classes\Winamp.File\shell\Play\DropTarget\CLSID = "{46986115-84D6-459c-8F95-52DD653E532E}"
  -> {HKLM...CLSID} = (no title provided)
                   \LocalServer32\(Default) = ""C:\Program Files\Winamp\winamp.exe"" ["Nullsoft"]


DESKTOP.INI DLL launch in local fixed drive directories:
--------------------------------------------------------

D:\DESKTOP.INI
[.ShellClassInfo]
CLSID={7f67036b-66f1-411a-ad85-759fb9c5b0db}
  -> {HKLM...CLSID}\InProcServer32\(Default) = "C:\Windows\System32\ShellvRTF.dll" ["XSS"]
D:\$RECYCLE.BIN\DESKTOP.INI -- cannot be opened!

D:\BOOT\DESKTOP.INI
[.ShellClassInfo]
CLSID={7f67036b-66f1-411a-ad85-759fb9c5b0db}
  -> {HKLM...CLSID}\InProcServer32\(Default) = "C:\Windows\System32\ShellvRTF.dll" ["XSS"]

D:\HP\DESKTOP.INI
[.ShellClassInfo]
CLSID={7f67036b-66f1-411a-ad85-759fb9c5b0db}
  -> {HKLM...CLSID}\InProcServer32\(Default) = "C:\Windows\System32\ShellvRTF.dll" ["XSS"]

D:\preload\DESKTOP.INI
[.ShellClassInfo]
CLSID={7f67036b-66f1-411a-ad85-759fb9c5b0db}
  -> {HKLM...CLSID}\InProcServer32\(Default) = "C:\Windows\System32\ShellvRTF.dll" ["XSS"]

D:\SOURCES\DESKTOP.INI
[.ShellClassInfo]
CLSID={7f67036b-66f1-411a-ad85-759fb9c5b0db}
  -> {HKLM...CLSID}\InProcServer32\(Default) = "C:\Windows\System32\ShellvRTF.dll" ["XSS"]

D:\Tools\DESKTOP.INI
[.ShellClassInfo]
CLSID={7f67036b-66f1-411a-ad85-759fb9c5b0db}
  -> {HKLM...CLSID}\InProcServer32\(Default) = "C:\Windows\System32\ShellvRTF.dll" ["XSS"]

D:\WINDOWS\DESKTOP.INI
[.ShellClassInfo]
CLSID={7f67036b-66f1-411a-ad85-759fb9c5b0db}
  -> {HKLM...CLSID}\InProcServer32\(Default) = "C:\Windows\System32\ShellvRTF.dll" ["XSS"]


Startup items in "Shinigami" & "All Users" startup folders:
-----------------------------------------------------------

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
"BTTray" -> shortcut to: "C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe" ["Broadcom Corporation."]
"Logitech SetPoint" -> shortcut to: "C:\Program Files\Logitech\SetPoint\SetPoint.exe" ["Logitech, Inc."]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\system32\NLAapi.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\system32\napinsp.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\system32\pnrpnsp.dll" [MS]
000000000004\LibraryPath = "%SystemRoot%\system32\pnrpnsp.dll" [MS]
000000000005\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000006\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000007\LibraryPath = "%SystemRoot%\system32\wshbth.dll" [MS]
000000000008\LibraryPath = "C:\Program Files\Bonjour\mdnsNSP.dll" ["Apple Inc."]

Transport Service Providers

HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 29


Toolbars, Explorer Bars, Extensions:
------------------------------------

Toolbars

HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\
"{968631B6-4729-440D-9BF4-251F5593EC9A}"
  -> {HKLM...CLSID} = "Copernic Desktop Search - Home"
                   \InProcServer32\(Default) = "C:\Program Files\Copernic Desktop Search 2\DesktopSearchBand300000081.dll" ["Copernic Inc."]
"{C55BBCD6-41AD-48AD-9953-3609C48EACC7}"
  -> {HKLM...CLSID} = "Grab Pro"
                   \InProcServer32\(Default) = "C:\Program Files\Orbitdownloader\GrabPro.dll" [null data]

HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" = (no title provided)
  -> {HKLM...CLSID} = "Yahoo! Toolbar"
                   \InProcServer32\(Default) = "C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll" ["Yahoo! Inc."]
"{C55BBCD6-41AD-48AD-9953-3609C48EACC7}" = (no title provided)
  -> {HKLM...CLSID} = "Grab Pro"
                   \InProcServer32\(Default) = "C:\Program Files\Orbitdownloader\GrabPro.dll" [null data]
"{968631B6-4729-440D-9BF4-251F5593EC9A}" = (no title provided)
  -> {HKLM...CLSID} = "Copernic Desktop Search - Home"
                   \InProcServer32\(Default) = "C:\Program Files\Copernic Desktop Search 2\DesktopSearchBand300000081.dll" ["Copernic Inc."]

Explorer Bars

HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\
{968631B6-4729-440D-9BF4-251F5593EC9A}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "Copernic Desktop Search - Home"
                   \InProcServer32\(Default) = "C:\Program Files\Copernic Desktop Search 2\DesktopSearchBand300000081.dll" ["Copernic Inc."]
{9C3FCA1F-99E3-48F2-A7F4-DD3931B2F99A}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "Copernic Desktop Search - Home"
                   \InProcServer32\(Default) = "C:\Program Files\Copernic Desktop Search 2\DesktopSearchBand300000081.dll" ["Copernic Inc."]

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\
{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\
"MenuText" = "Sun Java Console"
"CLSIDExtension" = "{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}"
  -> {HKCU...CLSID} = "Java Plug-in 1.6.0_07"
                   \InProcServer32\(Default) = "C:\PROGRA~1\Java\JRE16~2.0_0\bin\ssv.dll" ["Sun Microsystems, Inc."]
  -> {HKLM...CLSID} = "Java Plug-in 1.6.0_07"
                   \InProcServer32\(Default) = "C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll" ["Sun Microsystems, Inc."]

{77BF5300-1474-4EC7-9980-D32B190E9B07}\
"ButtonText" = "Skype"
"CLSIDExtension" = "{77BF5300-1474-4EC7-9980-D32B190E9B07}"
  -> {HKLM...CLSID} = "Skype add-on (button)"
                   \InProcServer32\(Default) = "C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll" ["Skype Technologies S.A."]

{CCA281CA-C863-46EF-9331-5C8D4460577F}\
"ButtonText" = "@btrez.dll,-4015"
"MenuText" = "@btrez.dll,-12650"
"Script" = "C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm" [null data]

{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}\
"MenuText" = "Spybot - Search & Destroy Configuration"
"CLSIDExtension" = "{53707962-6F74-2D53-2644-206D7942484F}"
  -> {HKLM...CLSID} = "Spybot-S&D IE Protection"
                   \InProcServer32\(Default) = "C:\PROGRA~1\SPYBOT~1\SDHelper.dll" ["Safer Networking Limited"]


Miscellaneous IE Hijack Points
------------------------------

HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\
<<H>> "{EF99BD32-C1FB-11D2-892F-0090271D4F88}" = (no title provided)
  -> {HKLM...CLSID} = "Yahoo! Toolbar"
                   \InProcServer32\(Default) = "C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll" ["Yahoo! Inc."]


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

Autokonfiguracja sieci WLAN, Wlansvc, "C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted" {"C:\Windows\System32\wlansvc.dll" [MS]}
Avira AntiVir Personal - Free Antivirus Guard, AntiVirService, ""C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe"" ["Avira GmbH"]
Avira AntiVir Personal - Free Antivirus Scheduler, AntiVirScheduler, ""C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe"" ["Avira GmbH"]
Bonjour Service, Bonjour Service, ""C:\Program Files\Bonjour\mDNSResponder.exe"" ["Apple Inc."]
CyberLink Background Capture Service (CBCS), CLCapSvc, ""C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe"" [empty string]
CyberLink Task Scheduler (CTS), CLSched, ""C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe"" [empty string]
DiskMagik Service, DiskMgkS, ""C:\Program Files\DiskMagik\DiskMgkS.exe"" ["RoseCity Software"]
Dostęp do urządzeń interfejsu HID, hidserv, "C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted" {"C:\Windows\system32\hidserv.dll" [MS]}
HP Health Check Service, HP Health Check Service, ""C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe"" [null data]
hpqwmiex, hpqwmiex, "C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe" ["Hewlett-Packard Development Company, L.P."]
Intel(R) Matrix Storage Event Monitor, IAANTMON, "C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe" ["Intel Corporation"]
Izolacja klucza CNG, KeyIso, "C:\Windows\system32\lsass.exe" [MS]
Karta inteligentna, SCardSvr, "C:\Windows\system32\svchost.exe -k LocalService" {"C:\Windows\System32\SCardSvr.dll" [MS]}
LightScribeService Direct Disc Labeling Service, LightScribeService, ""C:\Program Files\Common Files\LightScribe\LSSrvc.exe"" ["Hewlett-Packard Company"]
Local Communication Channel, ASChannel, "C:\Windows\System32\svchost.exe -k Cognizance" {"c:\Program Files\Bioscrypt\VeriSoft\Bin\AsChnl.dll" ["Cognizance Corporation"]}
Logon Session Broker, ASBroker, "C:\Windows\System32\svchost.exe -k Cognizance" {"c:\Program Files\Bioscrypt\VeriSoft\Bin\ASWLNPkg.dll" ["Cognizance Corporation"]}
Protokół uwierzytelniania rozszerzonego (EAP), EapHost, "C:\Windows\System32\svchost.exe -k netsvcs" {"C:\Windows\System32\eapsvc.dll" [MS]}
Usługa obsługi Bluetooth, BthServ, "C:\Windows\system32\svchost.exe -k bthsvcs" {"C:\Windows\System32\bthserv.dll" [MS]}
Usługa Protokół SSTP, SstpSvc, "C:\Windows\system32\svchost.exe -k LocalService" {"C:\Windows\system32\sstpsvc.dll" [MS]}
Windows Driver Foundation — User-mode Driver Framework, wudfsvc, "C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted" {"C:\Windows\System32\WUDFSvc.dll" [MS]}
Windows Image Acquisition (WIA), stisvc, "C:\Windows\system32\svchost.exe -k imgsvc" {"C:\Windows\System32\wiaservc.dll" [MS]}


---------- (launch time: 2008-10-24 00:03:19)
<<H>>: Suspicious data at a browser hijack point.

+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
  launch it from a command prompt or a shortcut with the -all parameter.
+ The search for DESKTOP.INI DLL launch points on all local fixed drives
  took 117 seconds.
---------- (total run time: 173 seconds)
]]>
Podczas ostatniego skanowania Avira wykryła jakiś hidden object, poniżej wycinek z loga:

Starting search for hidden objects.
HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM\autorecover mofs
[INFO] The registry entry is invisible.
'744353' objects were checked, '1' hidden objects were found.

Proszę o sprawdzenie logów i z góry dziękuję za pomoc.

Log z HiJackThis -
Kod:
Logfile of HijackThis v1.99.1
Scan saved at 00:02:51, on 2008-10-24
Platform: Unknown Windows (WinNT 6.00.1905 SP1)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)

Running processes:
c:\Program Files\Bioscrypt\VeriSoft\Bin\AsGHost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RtHDVCpl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Logitech\Gaming Software\LWEMon.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Windows\ehome\ehmsas.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Mozilla Firefox\FireFox 3.0\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Shinigami\Desktop\Download\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: VeriSoft Access Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files\Bioscrypt\VeriSoft\Bin\ItIEAddIn.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll
O3 - Toolbar: Copernic Desktop Search - Home - {968631B6-4729-440D-9BF4-251F5593EC9A} - C:\Program Files\Copernic Desktop Search 2\DesktopSearchBand300000081.dll
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [HP Health Check Scheduler] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe c:\PROGRA~1\BIOSCR~1\VeriSoft\Bin\ASTSVCC.dll,RegisterModule
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Copernic Desktop Search - Home] "C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe" /tray
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~2.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~2.0_0\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O13 - Gopher Prefix:
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs:  
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: DiskMagik Service (DiskMgkS) - RoseCity Software - C:\Program Files\DiskMagik\DiskMgkS.exe
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)

Log z Silent Runners -
Kod:
"Silent Runners.vbs", revision 58, http://www.silentrunners.org/
Operating System: Windows Vista
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"ehTray.exe" = "C:\Windows\ehome\ehTray.exe" [MS]
"Skype" = ""C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized" ["Skype Technologies S.A."]
"Copernic Desktop Search - Home" = ""C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe" /tray" ["Copernic Inc."]
"SpybotSD TeaTimer" = "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" ["Safer Networking Limited"]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"SMSERIAL" = "C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe" ["Motorola Inc."]
"SynTPEnh" = "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" ["Synaptics, Inc."]
"RtHDVCpl" = "RtHDVCpl.exe" ["Realtek Semiconductor"]
"IAAnotif" = "C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe" ["Intel Corporation"]
"QPService" = ""C:\Program Files\HP\QuickPlay\QPService.exe"" ["CyberLink Corp."]
"QlbCtrl" = "C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start"
"HP Health Check Scheduler" = "C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [null data]
"hpWirelessAssistant" = "C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe"
"WAWifiMessage" = "C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe"
"SunJavaUpdateSched" = ""C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"" ["Sun Microsystems, Inc."]
"CognizanceTS" = "rundll32.exe c:\PROGRA~1\BIOSCR~1\VeriSoft\Bin\ASTSVCC.dll,RegisterModule" [MS]
"Adobe Reader Speed Launcher" = ""C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"" ["Adobe Systems Incorporated"]
"SynTPStart" = "C:\Program Files\Synaptics\SynTP\SynTPStart.exe" ["Synaptics, Inc."]
"NvSvc" = "RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart" [MS]
"NvCplDaemon" = "RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup" [MS]
"NvMediaCenter" = "RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit" [MS]
"Kernel and Hardware Abstraction Layer" = "KHALMNPR.EXE" ["Logitech, Inc."]
"Start WingMan Profiler" = "C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui" ["Logitech Inc."]
"avgnt" = ""C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min" ["Avira GmbH"]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{000123B4-9B42-4900-B3F7-F4B073EFC214}\(Default) = "btorbit.com"
  -> {HKLM...CLSID} = "Octh Class"
                   \InProcServer32\(Default) = "C:\Program Files\Orbitdownloader\orbitcth.dll" ["Orbitdownloader.com"]
{02478D38-C3F9-4EFB-9B51-7695ECA05670}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "Yahoo! Toolbar Helper"
                   \InProcServer32\(Default) = "C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll" ["Yahoo! Inc."]
{22BF413B-C6D2-4d91-82A9-A0F997BA588C}\(Default) = "Skype add-on (mastermind)"
  -> {HKLM...CLSID} = "Skype add-on (mastermind)"
                   \InProcServer32\(Default) = "C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll" ["Skype Technologies S.A."]
{53707962-6F74-2D53-2644-206D7942484F}\(Default) = (no title provided)
  -> {HKLM...CLSID} = "Spybot-S&