problem z pobraniem aktualizacji

[Yan66]

Kiedy próbuje połączyć się z Windows Update,wyskakuje [Numer błędu:0x8DDD0004] oprócz tego nie mogę pobrać aktualizacji z Norton Update

[wojtas]

daj log z combofixa oraz z hijacka:
wg. opisu
http://forum.programosy.pl/hijackthis-amp-silent-runners-gtobsuga-i-umieszczanie-vt9452.html

w tagach code lub quote

[Yan66]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:27, on 2007-10-28
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HPQ\IAM\bin\asghost.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\SAGEM WiFi manager\WLANUTL.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\YAN.PC279572096019\Moje dokumenty\PROGRAMY\hijackthis.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hp.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.hp.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://192.168.1.1/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: HP Credential Manager for ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\HPQ\IAM\Bin\ItIeAddIN.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\HPQ\IAM\Bin\AsTsVcc.dll,RegisterModule
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Program sieciowy dla SAGEM Wi-Fi 11g USB adapter.lnk = ?
O8 - Extra context menu item: Wyślij do interfejsu &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1193590484836
O20 - Winlogon Notify: OneCard - C:\Program Files\HPQ\IAM\Bin\AsWlnPkg.dll
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Usługa Auto-Protect programu Norton AntiVirus (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Usługa Norton Protection Center (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: PC Angel (PCA) - SoftThinks - C:\WINDOWS\SMINST\PCAngel.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 7475 bytes

[ Dodano: Dzisiaj o 22:47 ]

ComboFix 07-10-28.2 - YAN 2007-10-28 22:43:50.3 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1250.1.1045.18.667 [GMT 1:00]
Running from: C:\Documents and Settings\YAN.PC279572096019\Moje dokumenty\PROGRAMY\ComboFix.exe
.

((((((((((((((((((((((((( Files Created from 2007-09-28 to 2007-10-28 )))))))))))))))))))))))))))))))
.

2007-10-28 21:29 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-10-28 20:34 <DIR> d-------- C:\WINDOWS\pss
2007-10-28 18:44 43,352 --a------ C:\WINDOWS\system32\wups2.dll
2007-10-27 23:52 60 --a------ C:\WINDOWS\system32\SYSDRV.DAT
2007-10-27 23:51 <DIR> d-------- C:\WINDOWS\i386
2007-10-27 15:47 143,360 --a------ C:\WINDOWS\system32\igfxres.dll
2007-10-27 15:45 <DIR> d-------- C:\Program Files\Intel
2007-10-27 15:35 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2007-10-27 15:35 32,768 --------- C:\WINDOWS\biwlandrvxpver.dll
2007-10-27 15:34 <DIR> d-------- C:\WINDOWS\tiinst
2007-10-27 15:34 <DIR> d-------- C:\Program Files\Broadcom
2007-10-27 15:33 <DIR> d-------- C:\WINDOWS\Options
2007-10-27 15:33 68,096 --------- C:\WINDOWS\system32\agrsmdel.exe
2007-10-27 15:33 9,728 --------- C:\WINDOWS\HPModemVersion.dll
2007-10-27 15:23 <DIR> d---s---- C:\Documents and Settings\YAN.PC279572096019\UserData
2007-10-27 15:22 <DIR> d--h----- C:\WINDOWS\PIF
2007-10-27 15:06 <DIR> d-------- C:\Program Files\SAGEM WiFi manager
2007-10-27 15:06 <DIR> d-------- C:\Program Files\SAGEM
2007-10-27 15:06 31,744 --a------ C:\WINDOWS\system32\drivers\ZDPSp50a64.sys
2007-10-27 15:06 29,184 --a------ C:\WINDOWS\system32\drivers\BRGSp50a64.sys
2007-10-27 15:06 20,608 --a------ C:\WINDOWS\system32\drivers\BRGSp50.sys
2007-10-27 15:06 17,664 --a------ C:\WINDOWS\system32\drivers\ZDPSp50.sys
2007-10-27 15:05 493,440 --a------ C:\WINDOWS\system32\drivers\WlanBZ64.SYS
2007-10-27 15:05 402,432 --a------ C:\WINDOWS\system32\drivers\WlanBZXP.sys
2007-10-27 15:04 114,688 --a------ C:\WINDOWS\system32\WLANUTL.dll
2007-10-27 15:04 61,440 --a------ C:\WINDOWS\system32\W32N50.dll
2007-10-27 14:59 <DIR> d-------- C:\Program Files\WIDCOMM
2007-10-27 14:58 <DIR> d-------- C:\Program Files\Google
2007-10-27 14:57 <DIR> d-------- C:\Program Files\InterVideo
2007-10-27 14:57 <DIR> d-------- C:\Documents and Settings\YAN~1~PC2\USTAWI~1
2007-10-27 14:57 204,800 --a------ C:\WINDOWS\system32\IVIresizeW7.dll
2007-10-27 14:57 200,704 --a------ C:\WINDOWS\system32\IVIresizeA6.dll
2007-10-27 14:57 192,512 --a------ C:\WINDOWS\system32\IVIresizeP6.dll
2007-10-27 14:57 192,512 --a------ C:\WINDOWS\system32\IVIresizeM6.dll
2007-10-27 14:57 188,416 --a------ C:\WINDOWS\system32\IVIresizePX.dll
2007-10-27 14:57 20,480 --a------ C:\WINDOWS\system32\IVIresize.dll
2007-10-27 14:56 <DIR> d--h----- C:\Documents and Settings\YAN.PC279572096019\Ustawienia lokalne
2007-10-27 14:56 <DIR> dr------- C:\Documents and Settings\YAN.PC279572096019\Ulubione
2007-10-27 14:56 <DIR> d--h----- C:\Documents and Settings\YAN.PC279572096019\Szablony
2007-10-27 14:56 <DIR> d-------- C:\Documents and Settings\YAN.PC279572096019\Pulpit
2007-10-27 14:56 <DIR> dr------- C:\Documents and Settings\YAN.PC279572096019\Moje dokumenty
2007-10-27 14:56 <DIR> dr------- C:\Documents and Settings\YAN.PC279572096019\Menu Start
2007-10-27 14:56 <DIR> d-------- C:\Documents and Settings\YAN.PC279572096019\Dane aplikacji\Symantec
2007-10-27 14:56 <DIR> d-------- C:\Documents and Settings\YAN.PC279572096019\Dane aplikacji\SampleView
2007-10-27 14:56 <DIR> dr-h----- C:\Documents and Settings\YAN.PC279572096019\Dane aplikacji
2007-10-27 14:55 <DIR> d-------- C:\Program Files\Skróty programów

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-10-28 16:27 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2007-10-27 22:36 --------- d-----w C:\Program Files\Windows Media Connect
2007-10-27 22:36 --------- d-----w C:\Program Files\Usługi online
2007-10-27 22:36 --------- d-----w C:\Program Files\Synaptics
2007-10-27 22:36 --------- d-----w C:\Program Files\Symantec
2007-10-27 22:35 --------- d-----w C:\Program Files\Sonic
2007-10-27 22:35 --------- d-----w C:\Program Files\Norton Internet Security
2007-10-27 22:34 --------- d-----w C:\Program Files\microsoft frontpage
2007-10-27 22:34 --------- d-----w C:\Program Files\Java
2007-10-27 22:34 --------- d-----w C:\Program Files\Hp
2007-10-27 22:34 --------- d-----w C:\Program Files\Hewlett-Packard
2007-10-27 22:34 --------- d-----w C:\Program Files\Fingerprint Sensor
2007-10-27 22:34 --------- d-----w C:\Program Files\Common Files\TiVo Shared
2007-10-27 22:33 --------- d-----w C:\Program Files\Common Files\SureThing Shared
2007-10-27 22:33 --------- d-----w C:\Program Files\Common Files\Sonic Shared
2007-10-27 22:33 --------- d-----w C:\Program Files\Common Files\LightScribe
2007-10-27 22:33 --------- d-----w C:\Program Files\Common Files\Java
2007-10-27 22:33 --------- d-----w C:\Program Files\Common Files\InstallShield
2007-10-27 22:33 --------- d-----w C:\Program Files\Common Files\Adobe
2007-10-27 22:33 --------- d-----w C:\Program Files\Analog Devices
2007-10-27 22:31 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Symantec
2007-10-27 22:31 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\InstallShield
2007-10-27 22:31 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\hpqLog
2007-10-27 14:40 --------- d-----w C:\Program Files\HPQ
2007-10-27 14:35 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-10-27 14:32 1,814 --sha-r C:\WINDOWS\system32\drivers\103C_HP_NTBK_HP Compaq nx7400 (EY508ES#AKD)_YN_0U_QCNU634154R_E410312241_46_I30A2_SHP_VKBC Version 40.17_B68YGU Ver. F.0A_T061218_WXH2_L415_M1016_J80_7Intel_8T2250_91.73_#071027_N14E4170C_(EY508ES#AKD)_XMOBILE_CN10.MRK
2007-07-30 18:19 92,504 ----a-w C:\WINDOWS\system32\dllcache\cdm.dll
2007-07-30 18:19 92,504 ----a-w C:\WINDOWS\system32\cdm.dll
2007-07-30 18:19 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll
2007-07-30 18:19 549,720 ----a-w C:\WINDOWS\system32\dllcache\wuapi.dll
2007-07-30 18:19 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe
2007-07-30 18:19 53,080 ----a-w C:\WINDOWS\system32\dllcache\wuauclt.exe
2007-07-30 18:19 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll
2007-07-30 18:19 325,976 ----a-w C:\WINDOWS\system32\dllcache\wucltui.dll
2007-07-30 18:19 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll
2007-07-30 18:19 203,096 ----a-w C:\WINDOWS\system32\dllcache\wuweb.dll
2007-07-30 18:19 1,712,984 ----a-w C:\WINDOWS\system32\wuaueng.dll
2007-07-30 18:19 1,712,984 ----a-w C:\WINDOWS\system32\dllcache\wuaueng.dll
2007-07-30 18:18 33,624 ----a-w C:\WINDOWS\system32\wups.dll
2007-07-30 18:18 33,624 ----a-w C:\WINDOWS\system32\dllcache\wups.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" [2005-05-06 13:06]
"DLA"="C:\WINDOWS\System32\DLA\DLACTRLW.EXE" [2005-08-31 04:20]
"ccApp"="c:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2005-09-17 00:27]
"CognizanceTS"="C:\PROGRA~1\HPQ\IAM\Bin\AsTsVcc.dll" [2003-12-22 19:12]
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 09:11]
"AGRSMMSG"="AGRSMMSG.exe" [2005-12-12 14:00 C:\WINDOWS\AGRSMMSG.exe]
"MSConfig"="C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe" [2004-08-04 09:00]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2007-10-28 17:03]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
Program sieciowy dla SAGEM Wi-Fi 11g USB adapter.lnk - C:\Program Files\SAGEM WiFi manager\WLANUTL.exe [2007-10-27 15:06:30]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OneCard]
C:\Program Files\HPQ\IAM\Bin\AsWlnPkg.dll 2005-07-25 19:41 40960 C:\Program Files\HPQ\IAM\Bin\AsWlnPkg.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Notification Packages"= scecli AsWlnPkg

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^BTTray.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BTTray.lnk
backup=C:\WINDOWS\pss\BTTray.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^DVD Check.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\DVD Check.lnk
backup=C:\WINDOWS\pss\DVD Check.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cpqset]
C:\Program Files\HPQ\Default Settings\cpqset.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpWirelessAssistant]
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxhkcmd]
C:\WINDOWS\system32\hkcmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxpers]
C:\WINDOWS\system32\igfxpers.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxtray]
C:\WINDOWS\system32\igfxtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PTHOSTTR]
C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl]
%ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Recguard]
C:\WINDOWS\Sminst\Recguard.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Reminder]
C:\WINDOWS\Creator\Remind_XP.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Scheduler]
C:\WINDOWS\SMINST\Scheduler.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WatchDog]
C:\Program Files\InterVideo\DVD Check\DVDCheck.exe

R2 ASChannel;Local Communication Channel;C:\WINDOWS\System32\svchost.exe -k Cognizance
R3 AEAudioService;AEAudio Service;C:\WINDOWS\system32\drivers\AEAudio.sys
R3 SG762_XP;SAGEM 802.11g XG762 1211B Driver;C:\WINDOWS\system32\DRIVERS\WlanBZXP.sys
S3 ZDCndis5;ZDCndis5 Protocol Driver;\??\C:\WINDOWS\system32\ZDCndis5.SYS
S3 ZDPNDIS5;ZDPNDIS5 NDIS Protocol Driver;\??\C:\WINDOWS\system32\ZDPNDIS5.SYS

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Cognizance ASChannel

*Newly Created Service* - COMHOST
.
Contents of the 'Scheduled Tasks' folder
"2007-10-27 14:16:07 C:\WINDOWS\Tasks\Norton AntiVirus - Uruchom pełne skanowanie systemu - YAN.job"
- c:\PROGRA~1\NORTON~1\NORTON~1\Navw32.exe
"2007-10-28 20:31:04 C:\WINDOWS\Tasks\Symantec NetDetect.job"
.
**************************************************************************

catchme 0.3.1239 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-28 22:44:53
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-10-28 22:45:10
C:\ComboFix2.txt ... 2007-10-28 22:36
.
--- E O F ---

[wojtas]

nic w logu nie widac