problem z zabezpieczeniami

**Posty:** 8694 · przez **Red** 15 Lip 2006, 14:31

prosze masz z mojego kompa :

http://rapidshare.de/files/25906119/SmitfraudFix.zip.html

**Posty:** 298 · przez **MK89** 15 Lip 2006, 15:11

nadal nic...

Ciągle ten sam problem

Oto raport z SmithfraudFix :

Kod: Zaznacz wszystko: SmitFraudFix v2.70 Scan done at 14:55:00,07, 2006-07-15 Run from C:\Documents and Settings\Matson\Pulpit\SmitfraudFix OS: Microsoft Windows XP [Wersja 5.1.2600] - Windows_NT Fix ran in normal mode Before SmitFraudFix !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll Killing process Generic Renos Fix GenericRenosFix by S!Ri Deleting infected files Problem while deleting C:\WINDOWS\system32\ld???.tmp Problem while deleting C:\WINDOWS\system32\ld????.tmp Problem while deleting C:\WINDOWS\system32\regperf.exe Problem while deleting C:\WINDOWS\system32\stdole3.tlb C:\WINDOWS\system32\1024\ Deleted Deleting Temp Files Registry Cleaning Registry Cleaning done. After SmitFraudFix !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll Reboot C:\WINDOWS\system32\ld???.tmp Deleted C:\WINDOWS\system32\regperf.exe Deleted C:\WINDOWS\system32\stdole3.tlb Deleted End

**Posty:** 8694 · przez **Red** 15 Lip 2006, 15:15

zrob restart kompa i daj mi jeszcze log z SmithfraudFix ale z opcji 1

i zrob jeszcze to co napisałem z >>przywracaniem systemu włacz i wyłacz

**Posty:** 298 · przez **MK89** 15 Lip 2006, 15:30

Kod: Zaznacz wszystko: SmitFraudFix v2.70 Scan done at 15:23:02,18, 2006-07-15 Run from C:\Documents and Settings\Matson\Pulpit\SmitfraudFix OS: Microsoft Windows XP [Wersja 5.1.2600] - Windows_NT Fix ran in normal mode C:\ C:\WINDOWS C:\WINDOWS\system C:\WINDOWS\Web C:\WINDOWS\system32 C:\WINDOWS\system32\1024\ FOUND ! C:\Documents and Settings\Matson\Application Data Start Menu C:\DOCUME~1\MATSON\ULUBIONE Desktop C:\Program Files Corrupted keys Desktop Components Sharedtaskscheduler !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll Scanning wininet.dll infection End

[ Dodano: Dzisiaj o 15:39 ]
nadal strona bankowa nie działa...

**Posty:** 8694 · przez **Red** 15 Lip 2006, 15:44

otwierasz notatnik windowsa i wklejasz w nim to co ponizej:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run]
"wininet.dll"=-
"ishost.exe"=-

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\run]
"{C0A0FB77-03EA-1045-1221-000321010030}"=-

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"FriendlyName"=""
"Source"=""
"SubscribedURL"=""

w notatniku u góry>>>plik zapisz jako>>>Zmienić rozszerzenie z TXT na Wszystkie pliki *.* >>> Zapisać pod nazwą FIX.REG

Klikasz dwa razy na powstały plik fix i dodajesz go do rejestru....

**Posty:** 298 · przez **MK89** 15 Lip 2006, 15:52

okey wszystko zrobiłem jak napisałeś...ale nadal bankowa nadal nic ciągle to samo...

**Posty:** 8694 · przez **Red** 15 Lip 2006, 15:54

daj wiec nowy raport z ComboFix zobaczymy zmiany

**Posty:** 298 · przez **MK89** 15 Lip 2006, 15:57

Kod: Zaznacz wszystko: Start Time= 2006-07-15 15:52:29,19 Running from: C:\Documents and Settings\Matson\Pulpit QuickScan did not find any signs of infected files (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2006-07-14 22:15:58 ( .D... ) "C:\Documents and Settings\Matson\Dane aplikacji\Opera" 2006-07-14 22:15:28 ( .D... ) "C:\Program Files\Opera" 2006-07-12 20:13:26 ( .D... ) "C:\Program Files\CM Rev MBI SE" 2006-07-12 20:00:32 ( .D... ) "C:\Documents and Settings\Matson\Dane aplikacji\Mozilla" 2006-07-12 20:00:30 ( .D... ) "C:\Program Files\Mozilla Firefox" 2006-07-12 13:27:54 ( .D... ) "C:\Program Files\TClock" 2006-07-07 11:34:16 ( .D... ) "C:\Program Files\Common Files\{C0A0FB77-03EA-1045-1221-000321010030}" 2006-07-07 11:21:44 ( .D... ) "C:\Documents and Settings\Matson\Dane aplikacji\Ahead" 2006-07-07 11:17:22 ( .D... ) "C:\Program Files\Nero" 2006-07-07 11:17:22 ( .D... ) "C:\Program Files\Common Files\Ahead" 2006-07-05 15:28:58 ( .D... ) "C:\Program Files\GanymedeNet" 2006-07-05 00:37:24 ( .D... ) "C:\Documents and Settings\Matson\Dane aplikacji\Skype" 2006-07-05 00:37:00 ( .D... ) "C:\Program Files\Skype" 2006-06-21 17:00:36 ( .D... ) "C:\Program Files\Anti-Blaxx" 2006-06-16 11:17:18 ( .D... ) "C:\Program Files\EA SPORTS" 2006-06-16 11:07:04 ( .D... ) "C:\Program Files\PowerISO" 2006-06-16 09:25:16 ( .D... ) "C:\Documents and Settings\Matson\Dane aplikacji\AdobeUM" 2006-06-16 09:24:32 ( .D... ) "C:\Documents and Settings\Matson\Dane aplikacji\Adobe" 2006-06-16 09:20:28 ( .D... ) "C:\Program Files\Common Files\Adobe" 2006-06-16 09:13:42 ( .D... ) "C:\Program Files\Adobe" 2006-06-15 22:42:18 ( .D... ) "C:\Documents and Settings\Matson\Dane aplikacji\Macromedia" 2006-06-15 21:27:34 ( .D... ) "C:\Program Files\BearShare" 2006-06-12 19:34:50 ( .D... ) "C:\Program Files\New Star Soccer 3" 2006-06-12 16:38:56 ( .D... ) "C:\Program Files\Alcohol Soft" 2006-06-12 16:21:48 ( .D... ) "C:\Documents and Settings\Matson\Dane aplikacji\Identities" 2006-06-12 16:21:26 ( .DS.. ) "C:\Documents and Settings\Matson\Dane aplikacji\Microsoft" 2006-06-12 15:40:50 62 ( A.SH. ) "C:\Documents and Settings\Matson\Dane aplikacji\desktop.ini" 2006-06-11 22:56:16 ( .D... ) "C:\Program Files\Windows" 2006-06-11 22:56:16 ( .D... ) "C:\Program Files\Common Files\InetGet" 2006-06-08 17:16:10 ( .D... ) "C:\Program Files\MSN" 2006-06-07 16:18:18 ( .D... ) "C:\Program Files\Common Files\EasyInfo" 2006-06-04 11:05:14 ( .D... ) "C:\Program Files\Common Files\Invictus" 2006-05-19 15:26:54 148480 ( A.... ) "C:\WINDOWS\system32\dnsapi.dll" 2006-05-19 15:26:54 111104 ( A.... ) "C:\WINDOWS\system32\dhcpcsvc.dll" 2006-05-19 15:26:54 95744 ( A.... ) "C:\WINDOWS\system32\iphlpapi.dll" (((((((((((((((((((((((((((((((((((((( Files Created - Last 30days ))))))))))))))))))))))))))))))))))))))))))) 2006-07-14 20:57 133˙746˙688 C:\hiberfil.sys 2006-07-04 12:10 201˙326˙592 C:\pagefile.sys 2006-06-13 03:01 22˙752 C:\WINDOWS\system32\spupdsvc.exe 2006-06-12 16:03 112˙128 C:\WINDOWS\system32\mapi32.dll 2006-06-12 15:57 86˙016 C:\WINDOWS\system32\isign32.dll 2006-06-12 15:57 81˙920 C:\WINDOWS\system32\ils.dll 2006-06-12 15:57 8˙192 C:\WINDOWS\system32\bitsprx2.dll 2006-06-12 15:57 73˙728 C:\WINDOWS\system32\icwdial.dll 2006-06-12 15:57 7˙168 C:\WINDOWS\system32\bitsprx3.dll 2006-06-12 15:57 69˙632 C:\WINDOWS\system32\msconf.dll 2006-06-12 15:57 679˙424 C:\WINDOWS\system32\inetcomm.dll 2006-06-12 15:57 67˙584 C:\WINDOWS\system32\srclient.dll 2006-06-12 15:57 67˙584 C:\WINDOWS\system32\acctres.dll 2006-06-12 15:57 65˙536 C:\WINDOWS\system32\icwphbk.dll 2006-06-12 15:57 6˙656 C:\WINDOWS\system32\wuauserv.dll 2006-06-12 15:57 49˙664 C:\WINDOWS\system32\inetres.dll 2006-06-12 15:57 466˙200 C:\WINDOWS\system32\wuapi.dll 2006-06-12 15:57 45˙568 C:\WINDOWS\system32\safrslv.dll 2006-06-12 15:57 43˙520 C:\WINDOWS\system32\safrcdlg.dll 2006-06-12 15:57 43˙520 C:\WINDOWS\system32\racpldlg.dll 2006-06-12 15:57 41˙240 C:\WINDOWS\system32\wups.dll 2006-06-12 15:57 382˙464 C:\WINDOWS\system32\qmgr.dll 2006-06-12 15:57 34˙560 C:\WINDOWS\system32\mnmdd.dll 2006-06-12 15:57 32˙768 C:\WINDOWS\system32\mnmsrvc.exe 2006-06-12 15:57 32˙768 C:\WINDOWS\system32\isrdbg32.dll 2006-06-12 15:57 29˙696 C:\WINDOWS\system32\safrdm.dll 2006-06-12 15:57 28˙672 C:\WINDOWS\system32\nmmkcert.dll 2006-06-12 15:57 278˙528 C:\WINDOWS\system32\mstask.dll 2006-06-12 15:57 278˙528 C:\WINDOWS\system32\inetcfg.dll 2006-06-12 15:57 252˙928 C:\WINDOWS\system32\msoeacct.dll 2006-06-12 15:57 240˙128 C:\WINDOWS\system32\srrstr.dll 2006-06-12 15:57 22˙528 C:\WINDOWS\system32\fltMc.exe 2006-06-12 15:57 195˙352 C:\WINDOWS\system32\wuaueng1.dll 2006-06-12 15:57 192˙000 C:\WINDOWS\system32\schedsvc.dll 2006-06-12 15:57 18˙944 C:\WINDOWS\system32\qmgrprxy.dll 2006-06-12 15:57 175˙384 C:\WINDOWS\system32\wuauclt1.exe 2006-06-12 15:57 173˙536 C:\WINDOWS\system32\wuweb.dll 2006-06-12 15:57 171˙008 C:\WINDOWS\system32\srsvc.dll 2006-06-12 15:57 16˙896 C:\WINDOWS\system32\fltlib.dll 2006-06-12 15:57 16˙384 C:\WINDOWS\system32\icfgnt5.dll 2006-06-12 15:57 128˙280 C:\WINDOWS\system32\wucltui.dll 2006-06-12 15:57 125˙208 C:\WINDOWS\system32\wuauclt.exe 2006-06-12 15:57 12˙288 C:\WINDOWS\system32\nmevtmsg.dll 2006-06-12 15:57 12˙288 C:\WINDOWS\system32\mstinit.exe 2006-06-12 15:57 11˙264 C:\WINDOWS\system32\atrace.dll 2006-06-12 15:57 105˙984 C:\WINDOWS\system32\msoert2.dll 2006-06-12 15:57 1˙343˙768 C:\WINDOWS\system32\wuaueng.dll 2006-06-12 15:53 97˙792 C:\WINDOWS\system32\comrepl.dll 2006-06-12 15:53 956˙416 C:\WINDOWS\system32\msdtctm.dll 2006-06-12 15:53 94˙720 C:\WINDOWS\system32\tscfgwmi.dll 2006-06-12 15:53 91˙136 C:\WINDOWS\system32\mtxoci.dll 2006-06-12 15:53 9˙728 C:\WINDOWS\system32\reset.exe 2006-06-12 15:53 87˙176 C:\WINDOWS\system32\rdpwsx.dll 2006-06-12 15:53 85˙504 C:\WINDOWS\system32\catsrvps.dll 2006-06-12 15:53 80˙896 C:\WINDOWS\system32\charmap.exe 2006-06-12 15:53 73˙216 C:\WINDOWS\system32\avwav.dll 2006-06-12 15:53 67˙072 C:\WINDOWS\system32\rdshost.exe 2006-06-12 15:53 655˙360 C:\WINDOWS\system32\mstscax.dll 2006-06-12 15:53 625˙152 C:\WINDOWS\system32\catsrvut.dll 2006-06-12 15:53 62˙464 C:\WINDOWS\system32\rdpclip.exe 2006-06-12 15:53 605˙696 C:\WINDOWS\system32\getuname.dll 2006-06-12 15:53 60˙928 C:\WINDOWS\system32\remotepg.dll 2006-06-12 15:53 60˙416 C:\WINDOWS\system32\colbact.dll 2006-06-12 15:53 6˙144 C:\WINDOWS\system32\msdtc.exe 2006-06-12 15:53 58˙880 C:\WINDOWS\system32\msdtclog.dll 2006-06-12 15:53 57˙344 C:\WINDOWS\system32\sol.exe 2006-06-12 15:53 56˙320 C:\WINDOWS\system32\servdeps.dll 2006-06-12 15:53 55˙808 C:\WINDOWS\system32\freecell.exe 2006-06-12 15:53 540˙160 C:\WINDOWS\system32\comuid.dll 2006-06-12 15:53 54˙272 C:\WINDOWS\system32\stclient.dll 2006-06-12 15:53 539˙136 C:\WINDOWS\system32\spider.exe 2006-06-12 15:53 5˙632 C:\WINDOWS\system32\write.exe 2006-06-12 15:53 5˙120 C:\WINDOWS\system32\dcomcnfg.exe 2006-06-12 15:53 498˙688 C:\WINDOWS\system32\clbcatq.dll 2006-06-12 15:53 44˙544 C:\WINDOWS\system32\tscupgrd.exe 2006-06-12 15:53 44˙544 C:\WINDOWS\system32\hticons.dll 2006-06-12 15:53 426˙496 C:\WINDOWS\system32\msdtcprx.dll 2006-06-12 15:53 408˙576 C:\WINDOWS\system32\mstsc.exe 2006-06-12 15:53 4˙608 C:\WINDOWS\system32\rdpcfgex.dll 2006-06-12 15:53 4˙096 C:\WINDOWS\system32\mtxex.dll 2006-06-12 15:53 38˙912 C:\WINDOWS\system32\cfgbkend.dll 2006-06-12 15:53 351˙744 C:\WINDOWS\system32\hypertrm.dll 2006-06-12 15:53 35˙328 C:\WINDOWS\system32\winchat.exe 2006-06-12 15:53 345˙088 C:\WINDOWS\system32\mspaint.exe 2006-06-12 15:53 33˙792 C:\WINDOWS\system32\regini.exe 2006-06-12 15:53 296˙448 C:\WINDOWS\system32\termsrv.dll 2006-06-12 15:53 25˙600 C:\WINDOWS\system32\comaddin.dll 2006-06-12 15:53 25˙088 C:\WINDOWS\system32\mtxlegih.dll 2006-06-12 15:53 231˙424 C:\WINDOWS\system32\avtapi.dll 2006-06-12 15:53 225˙792 C:\WINDOWS\system32\catsrv.dll 2006-06-12 15:53 22˙528 C:\WINDOWS\system32\qwinsta.exe 2006-06-12 15:53 22˙528 C:\WINDOWS\system32\msg.exe 2006-06-12 15:53 20˙992 C:\WINDOWS\system32\qprocess.exe 2006-06-12 15:53 20˙480 C:\WINDOWS\system32\mtxdm.dll 2006-06-12 15:53 19˙968 C:\WINDOWS\system32\rdpsnd.dll 2006-06-12 15:53 187˙904 C:\WINDOWS\system32\accwiz.exe 2006-06-12 15:53 17˙920 C:\WINDOWS\system32\tsshutdn.exe 2006-06-12 15:53 17˙408 C:\WINDOWS\system32\qappsrv.exe 2006-06-12 15:53 161˙280 C:\WINDOWS\system32\msdtcuiu.dll 2006-06-12 15:53 16˙384 C:\WINDOWS\system32\tskill.exe 2006-06-12 15:53 16˙384 C:\WINDOWS\system32\rwinsta.exe 2006-06-12 15:53 16˙384 C:\WINDOWS\system32\avmeter.dll 2006-06-12 15:53 15˙872 C:\WINDOWS\system32\logoff.exe 2006-06-12 15:53 15˙872 C:\WINDOWS\system32\cdmodem.dll 2006-06-12 15:53 15˙360 C:\WINDOWS\system32\tsdiscon.exe 2006-06-12 15:53 15˙360 C:\WINDOWS\system32\tscon.exe 2006-06-12 15:53 15˙360 C:\WINDOWS\system32\shadow.exe 2006-06-12 15:53 147˙968 C:\WINDOWS\system32\rdchost.dll 2006-06-12 15:53 147˙456 C:\WINDOWS\system32\comsnap.dll 2006-06-12 15:53 141˙824 C:\WINDOWS\system32\sessmgr.exe 2006-06-12 15:53 139˙264 C:\WINDOWS\system32\sndvol32.exe 2006-06-12 15:53 132˙608 C:\WINDOWS\system32\sndrec32.exe 2006-06-12 15:53 13˙824 C:\WINDOWS\system32\rdsaddin.exe 2006-06-12 15:53 128˙000 C:\WINDOWS\system32\mshearts.exe 2006-06-12 15:53 124˙928 C:\WINDOWS\system32\mplay32.exe 2006-06-12 15:53 119˙808 C:\WINDOWS\system32\winmine.exe 2006-06-12 15:53 115˙200 C:\WINDOWS\system32\calc.exe 2006-06-12 15:53 110˙080 C:\WINDOWS\system32\clbcatex.dll 2006-06-12 15:53 11˙776 C:\WINDOWS\system32\xolehlp.dll 2006-06-12 15:53 11˙264 C:\WINDOWS\system32\icaapi.dll 2006-06-12 15:53 103˙424 C:\WINDOWS\system32\clipbrd.exe 2006-06-12 15:53 1˙267˙200 C:\WINDOWS\system32\comsvcs.dll 2006-06-12 15:53 1˙225 C:\WINDOWS\system32\usrlogon.cmd 2006-06-12 15:52 58˙880 C:\WINDOWS\system32\licwmi.dll 2006-06-12 15:52 187˙904 C:\WINDOWS\system32\cmprops.dll 2006-06-12 15:52 17˙920 C:\WINDOWS\system32\mmfutil.dll 2006-06-12 15:44 4˙274˙816 C:\WINDOWS\system32\nv4_disp.dll 2006-06-12 15:44 4˙096 C:\WINDOWS\system32\ksuser.dll 2006-06-12 15:43 77˙312 C:\WINDOWS\system32\usbui.dll 2006-06-12 15:41 85˙532 C:\WINDOWS\system32\dgsetup.dll 2006-06-12 15:41 8˙704 C:\WINDOWS\system32\batt.dll 2006-06-12 15:41 8˙192 C:\WINDOWS\system32\kbdhept.dll 2006-06-12 15:41 75˙776 C:\WINDOWS\system32\storprop.dll 2006-06-12 15:41 70˙144 C:\WINDOWS\NOTEPAD.EXE 2006-06-12 15:41 7˙168 C:\WINDOWS\system32\kbdcz.dll 2006-06-12 15:41 6˙656 C:\WINDOWS\system32\kbdycl.dll 2006-06-12 15:41 6˙656 C:\WINDOWS\system32\kbdsl1.dll 2006-06-12 15:41 6˙656 C:\WINDOWS\system32\kbdsl.dll 2006-06-12 15:41 6˙656 C:\WINDOWS\system32\kbdhu.dll 2006-06-12 15:41 6˙656 C:\WINDOWS\system32\kbdhela3.dll 2006-06-12 15:41 6˙656 C:\WINDOWS\system32\kbdcz2.dll 2006-06-12 15:41 6˙656 C:\WINDOWS\system32\kbdcz1.dll 2006-06-12 15:41 6˙656 C:\WINDOWS\system32\kbdcr.dll 2006-06-12 15:41 6˙656 C:\WINDOWS\system32\KBDAL.DLL 2006-06-12 15:41 6˙144 C:\WINDOWS\system32\kbdtuq.dll 2006-06-12 15:41 6˙144 C:\WINDOWS\system32\kbdtuf.dll 2006-06-12 15:41 6˙144 C:\WINDOWS\system32\kbdlv1.dll 2006-06-12 15:41 6˙144 C:\WINDOWS\system32\kbdlv.dll 2006-06-12 15:41 6˙144 C:\WINDOWS\system32\kbdhela2.dll 2006-06-12 15:41 6˙144 C:\WINDOWS\system32\kbdgkl.dll 2006-06-12 15:41 6˙144 C:\WINDOWS\system32\kbdest.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdycc.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbduzb.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdur.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdtat.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdru1.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdru.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdro.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdmon.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdlt1.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdlt.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdkyr.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdkaz.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdhu1.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdhe319.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdhe220.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdhe.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdbu.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdblr.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdazel.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdaze.dll 2006-06-12 15:41 24˙661 C:\WINDOWS\system32\spxcoins.dll 2006-06-12 15:41 176˙157 C:\WINDOWS\system32\dgrpsetu.dll 2006-06-12 15:41 15˙360 C:\WINDOWS\TASKMAN.EXE 2006-06-12 15:41 13˙312 C:\WINDOWS\system32\irclass.dll 2006-06-12 15:41 103˙424 C:\WINDOWS\system32\EqnClass.Dll (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries are not shown [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "Anti-Blaxx Manager"="C:\\Program Files\\Anti-Blaxx\\Anti-Blaxx.exe" "NeroFilterCheck"="C:\\Program Files\\Common Files\\Ahead\\Lib\\NeroCheck.exe" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "Gadu-Gadu"="\"C:\\Program Files\\Gadu-Gadu\\gg.exe\" /tray" "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="\"C:\\Program Files\\Common Files\\Ahead\\Lib\\NMBgMonitor.exe\"" "Skype"="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized" "TClock.exe"="C:\\Program Files\\TClock\\tclock_install.exe" [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components] "DeskHtmlVersion"=dword:00000110 "DeskHtmlMinorVersion"=dword:00000005 "Settings"=dword:00000001 "GeneralFlags"=dword:00000001 [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0] "FriendlyName"="" "Source"="" "SubscribedURL"="" [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE" [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Moduł wstępnego ładowania interfejsu Browseui" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Demon buforu kategorii składników" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"="" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Start^Programy^Autostart^Adobe Reader Speed Launch.lnk] "path"="C:\\Documents and Settings\\All Users.WINDOWS\\Menu Start\\Programy\\Autostart\\Adobe Reader Speed Launch.lnk" "backup"="C:\\WINDOWS\\pss\\Adobe Reader Speed Launch.lnkCommon Startup" "location"="Common Startup" "command"="C:\\PROGRA~1\\Adobe\\ACROBA~1.0\\Reader\\READER~1.EXE " "item"="Adobe Reader Speed Launch" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BearShare] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="BearShare" "hkey"="HKLM" "command"="\"C:\\Program Files\\BearShare\\BearShare.exe\" /pause" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="ctfmon" "hkey"="HKCU" "command"="C:\\WINDOWS\\system32\\ctfmon.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="PWRISOVM" "hkey"="HKLM" "command"="C:\\Program Files\\PowerISO\\PWRISOVM.EXE" "inimapping"="0" Contents of the 'Scheduled Tasks' folder Completion time: 2006-07-15 15:52:50,05 ComboFix ver 06.07.15 - This logfile is located at C:\ComboFix.txt ComboFix.2006-07-15.155229.txt

**Posty:** 8694 · przez **Red** 15 Lip 2006, 16:08

pozostaje jeszcze do zrobienia jeden fix:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"TClock.exe"=-

w notatniku u góry>>>plik zapisz jako>>>Zmienić rozszerzenie z TXT na Wszystkie pliki *.* >>> Zapisać pod nazwą FIX.REG

Klikasz dwa razy na powstały plik fix i dodajesz go do rejestru....

sprawdz po restarcie i daj log kontrolnie z combofixa

**Posty:** 298 · przez **MK89** 15 Lip 2006, 16:15

z Combofix'a to opcja 1 czy 2?!

**Posty:** 8694 · przez **Red** 15 Lip 2006, 16:18

nie mowimy o smitraudfix

**Posty:** 298 · przez **MK89** 15 Lip 2006, 16:25

Kod: Zaznacz wszystko: Start Time= 2006-07-15 16:20:48,77 Running from: C:\Documents and Settings\Matson\Pulpit QuickScan did not find any signs of infected files (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2006-07-14 22:15:58 ( .D... ) "C:\Documents and Settings\Matson\Dane aplikacji\Opera" 2006-07-14 22:15:28 ( .D... ) "C:\Program Files\Opera" 2006-07-12 20:13:26 ( .D... ) "C:\Program Files\CM Rev MBI SE" 2006-07-12 20:00:32 ( .D... ) "C:\Documents and Settings\Matson\Dane aplikacji\Mozilla" 2006-07-12 20:00:30 ( .D... ) "C:\Program Files\Mozilla Firefox" 2006-07-12 13:27:54 ( .D... ) "C:\Program Files\TClock" 2006-07-07 11:34:16 ( .D... ) "C:\Program Files\Common Files\{C0A0FB77-03EA-1045-1221-000321010030}" 2006-07-07 11:21:44 ( .D... ) "C:\Documents and Settings\Matson\Dane aplikacji\Ahead" 2006-07-07 11:17:22 ( .D... ) "C:\Program Files\Nero" 2006-07-07 11:17:22 ( .D... ) "C:\Program Files\Common Files\Ahead" 2006-07-05 15:28:58 ( .D... ) "C:\Program Files\GanymedeNet" 2006-07-05 00:37:24 ( .D... ) "C:\Documents and Settings\Matson\Dane aplikacji\Skype" 2006-07-05 00:37:00 ( .D... ) "C:\Program Files\Skype" 2006-06-21 17:00:36 ( .D... ) "C:\Program Files\Anti-Blaxx" 2006-06-16 11:17:18 ( .D... ) "C:\Program Files\EA SPORTS" 2006-06-16 11:07:04 ( .D... ) "C:\Program Files\PowerISO" 2006-06-16 09:25:16 ( .D... ) "C:\Documents and Settings\Matson\Dane aplikacji\AdobeUM" 2006-06-16 09:24:32 ( .D... ) "C:\Documents and Settings\Matson\Dane aplikacji\Adobe" 2006-06-16 09:20:28 ( .D... ) "C:\Program Files\Common Files\Adobe" 2006-06-16 09:13:42 ( .D... ) "C:\Program Files\Adobe" 2006-06-15 22:42:18 ( .D... ) "C:\Documents and Settings\Matson\Dane aplikacji\Macromedia" 2006-06-15 21:27:34 ( .D... ) "C:\Program Files\BearShare" 2006-06-12 19:34:50 ( .D... ) "C:\Program Files\New Star Soccer 3" 2006-06-12 16:38:56 ( .D... ) "C:\Program Files\Alcohol Soft" 2006-06-12 16:21:48 ( .D... ) "C:\Documents and Settings\Matson\Dane aplikacji\Identities" 2006-06-12 16:21:26 ( .DS.. ) "C:\Documents and Settings\Matson\Dane aplikacji\Microsoft" 2006-06-12 15:40:50 62 ( A.SH. ) "C:\Documents and Settings\Matson\Dane aplikacji\desktop.ini" 2006-06-11 22:56:16 ( .D... ) "C:\Program Files\Windows" 2006-06-11 22:56:16 ( .D... ) "C:\Program Files\Common Files\InetGet" 2006-06-08 17:16:10 ( .D... ) "C:\Program Files\MSN" 2006-06-07 16:18:18 ( .D... ) "C:\Program Files\Common Files\EasyInfo" 2006-06-04 11:05:14 ( .D... ) "C:\Program Files\Common Files\Invictus" 2006-05-19 15:26:54 148480 ( A.... ) "C:\WINDOWS\system32\dnsapi.dll" 2006-05-19 15:26:54 111104 ( A.... ) "C:\WINDOWS\system32\dhcpcsvc.dll" 2006-05-19 15:26:54 95744 ( A.... ) "C:\WINDOWS\system32\iphlpapi.dll" (((((((((((((((((((((((((((((((((((((( Files Created - Last 30days ))))))))))))))))))))))))))))))))))))))))))) 2006-07-14 20:57 133˙746˙688 C:\hiberfil.sys 2006-07-04 12:10 201˙326˙592 C:\pagefile.sys 2006-06-13 03:01 22˙752 C:\WINDOWS\system32\spupdsvc.exe 2006-06-12 16:03 112˙128 C:\WINDOWS\system32\mapi32.dll 2006-06-12 15:57 86˙016 C:\WINDOWS\system32\isign32.dll 2006-06-12 15:57 81˙920 C:\WINDOWS\system32\ils.dll 2006-06-12 15:57 8˙192 C:\WINDOWS\system32\bitsprx2.dll 2006-06-12 15:57 73˙728 C:\WINDOWS\system32\icwdial.dll 2006-06-12 15:57 7˙168 C:\WINDOWS\system32\bitsprx3.dll 2006-06-12 15:57 69˙632 C:\WINDOWS\system32\msconf.dll 2006-06-12 15:57 679˙424 C:\WINDOWS\system32\inetcomm.dll 2006-06-12 15:57 67˙584 C:\WINDOWS\system32\srclient.dll 2006-06-12 15:57 67˙584 C:\WINDOWS\system32\acctres.dll 2006-06-12 15:57 65˙536 C:\WINDOWS\system32\icwphbk.dll 2006-06-12 15:57 6˙656 C:\WINDOWS\system32\wuauserv.dll 2006-06-12 15:57 49˙664 C:\WINDOWS\system32\inetres.dll 2006-06-12 15:57 466˙200 C:\WINDOWS\system32\wuapi.dll 2006-06-12 15:57 45˙568 C:\WINDOWS\system32\safrslv.dll 2006-06-12 15:57 43˙520 C:\WINDOWS\system32\safrcdlg.dll 2006-06-12 15:57 43˙520 C:\WINDOWS\system32\racpldlg.dll 2006-06-12 15:57 41˙240 C:\WINDOWS\system32\wups.dll 2006-06-12 15:57 382˙464 C:\WINDOWS\system32\qmgr.dll 2006-06-12 15:57 34˙560 C:\WINDOWS\system32\mnmdd.dll 2006-06-12 15:57 32˙768 C:\WINDOWS\system32\mnmsrvc.exe 2006-06-12 15:57 32˙768 C:\WINDOWS\system32\isrdbg32.dll 2006-06-12 15:57 29˙696 C:\WINDOWS\system32\safrdm.dll 2006-06-12 15:57 28˙672 C:\WINDOWS\system32\nmmkcert.dll 2006-06-12 15:57 278˙528 C:\WINDOWS\system32\mstask.dll 2006-06-12 15:57 278˙528 C:\WINDOWS\system32\inetcfg.dll 2006-06-12 15:57 252˙928 C:\WINDOWS\system32\msoeacct.dll 2006-06-12 15:57 240˙128 C:\WINDOWS\system32\srrstr.dll 2006-06-12 15:57 22˙528 C:\WINDOWS\system32\fltMc.exe 2006-06-12 15:57 195˙352 C:\WINDOWS\system32\wuaueng1.dll 2006-06-12 15:57 192˙000 C:\WINDOWS\system32\schedsvc.dll 2006-06-12 15:57 18˙944 C:\WINDOWS\system32\qmgrprxy.dll 2006-06-12 15:57 175˙384 C:\WINDOWS\system32\wuauclt1.exe 2006-06-12 15:57 173˙536 C:\WINDOWS\system32\wuweb.dll 2006-06-12 15:57 171˙008 C:\WINDOWS\system32\srsvc.dll 2006-06-12 15:57 16˙896 C:\WINDOWS\system32\fltlib.dll 2006-06-12 15:57 16˙384 C:\WINDOWS\system32\icfgnt5.dll 2006-06-12 15:57 128˙280 C:\WINDOWS\system32\wucltui.dll 2006-06-12 15:57 125˙208 C:\WINDOWS\system32\wuauclt.exe 2006-06-12 15:57 12˙288 C:\WINDOWS\system32\nmevtmsg.dll 2006-06-12 15:57 12˙288 C:\WINDOWS\system32\mstinit.exe 2006-06-12 15:57 11˙264 C:\WINDOWS\system32\atrace.dll 2006-06-12 15:57 105˙984 C:\WINDOWS\system32\msoert2.dll 2006-06-12 15:57 1˙343˙768 C:\WINDOWS\system32\wuaueng.dll 2006-06-12 15:53 97˙792 C:\WINDOWS\system32\comrepl.dll 2006-06-12 15:53 956˙416 C:\WINDOWS\system32\msdtctm.dll 2006-06-12 15:53 94˙720 C:\WINDOWS\system32\tscfgwmi.dll 2006-06-12 15:53 91˙136 C:\WINDOWS\system32\mtxoci.dll 2006-06-12 15:53 9˙728 C:\WINDOWS\system32\reset.exe 2006-06-12 15:53 87˙176 C:\WINDOWS\system32\rdpwsx.dll 2006-06-12 15:53 85˙504 C:\WINDOWS\system32\catsrvps.dll 2006-06-12 15:53 80˙896 C:\WINDOWS\system32\charmap.exe 2006-06-12 15:53 73˙216 C:\WINDOWS\system32\avwav.dll 2006-06-12 15:53 67˙072 C:\WINDOWS\system32\rdshost.exe 2006-06-12 15:53 655˙360 C:\WINDOWS\system32\mstscax.dll 2006-06-12 15:53 625˙152 C:\WINDOWS\system32\catsrvut.dll 2006-06-12 15:53 62˙464 C:\WINDOWS\system32\rdpclip.exe 2006-06-12 15:53 605˙696 C:\WINDOWS\system32\getuname.dll 2006-06-12 15:53 60˙928 C:\WINDOWS\system32\remotepg.dll 2006-06-12 15:53 60˙416 C:\WINDOWS\system32\colbact.dll 2006-06-12 15:53 6˙144 C:\WINDOWS\system32\msdtc.exe 2006-06-12 15:53 58˙880 C:\WINDOWS\system32\msdtclog.dll 2006-06-12 15:53 57˙344 C:\WINDOWS\system32\sol.exe 2006-06-12 15:53 56˙320 C:\WINDOWS\system32\servdeps.dll 2006-06-12 15:53 55˙808 C:\WINDOWS\system32\freecell.exe 2006-06-12 15:53 540˙160 C:\WINDOWS\system32\comuid.dll 2006-06-12 15:53 54˙272 C:\WINDOWS\system32\stclient.dll 2006-06-12 15:53 539˙136 C:\WINDOWS\system32\spider.exe 2006-06-12 15:53 5˙632 C:\WINDOWS\system32\write.exe 2006-06-12 15:53 5˙120 C:\WINDOWS\system32\dcomcnfg.exe 2006-06-12 15:53 498˙688 C:\WINDOWS\system32\clbcatq.dll 2006-06-12 15:53 44˙544 C:\WINDOWS\system32\tscupgrd.exe 2006-06-12 15:53 44˙544 C:\WINDOWS\system32\hticons.dll 2006-06-12 15:53 426˙496 C:\WINDOWS\system32\msdtcprx.dll 2006-06-12 15:53 408˙576 C:\WINDOWS\system32\mstsc.exe 2006-06-12 15:53 4˙608 C:\WINDOWS\system32\rdpcfgex.dll 2006-06-12 15:53 4˙096 C:\WINDOWS\system32\mtxex.dll 2006-06-12 15:53 38˙912 C:\WINDOWS\system32\cfgbkend.dll 2006-06-12 15:53 351˙744 C:\WINDOWS\system32\hypertrm.dll 2006-06-12 15:53 35˙328 C:\WINDOWS\system32\winchat.exe 2006-06-12 15:53 345˙088 C:\WINDOWS\system32\mspaint.exe 2006-06-12 15:53 33˙792 C:\WINDOWS\system32\regini.exe 2006-06-12 15:53 296˙448 C:\WINDOWS\system32\termsrv.dll 2006-06-12 15:53 25˙600 C:\WINDOWS\system32\comaddin.dll 2006-06-12 15:53 25˙088 C:\WINDOWS\system32\mtxlegih.dll 2006-06-12 15:53 231˙424 C:\WINDOWS\system32\avtapi.dll 2006-06-12 15:53 225˙792 C:\WINDOWS\system32\catsrv.dll 2006-06-12 15:53 22˙528 C:\WINDOWS\system32\qwinsta.exe 2006-06-12 15:53 22˙528 C:\WINDOWS\system32\msg.exe 2006-06-12 15:53 20˙992 C:\WINDOWS\system32\qprocess.exe 2006-06-12 15:53 20˙480 C:\WINDOWS\system32\mtxdm.dll 2006-06-12 15:53 19˙968 C:\WINDOWS\system32\rdpsnd.dll 2006-06-12 15:53 187˙904 C:\WINDOWS\system32\accwiz.exe 2006-06-12 15:53 17˙920 C:\WINDOWS\system32\tsshutdn.exe 2006-06-12 15:53 17˙408 C:\WINDOWS\system32\qappsrv.exe 2006-06-12 15:53 161˙280 C:\WINDOWS\system32\msdtcuiu.dll 2006-06-12 15:53 16˙384 C:\WINDOWS\system32\tskill.exe 2006-06-12 15:53 16˙384 C:\WINDOWS\system32\rwinsta.exe 2006-06-12 15:53 16˙384 C:\WINDOWS\system32\avmeter.dll 2006-06-12 15:53 15˙872 C:\WINDOWS\system32\logoff.exe 2006-06-12 15:53 15˙872 C:\WINDOWS\system32\cdmodem.dll 2006-06-12 15:53 15˙360 C:\WINDOWS\system32\tsdiscon.exe 2006-06-12 15:53 15˙360 C:\WINDOWS\system32\tscon.exe 2006-06-12 15:53 15˙360 C:\WINDOWS\system32\shadow.exe 2006-06-12 15:53 147˙968 C:\WINDOWS\system32\rdchost.dll 2006-06-12 15:53 147˙456 C:\WINDOWS\system32\comsnap.dll 2006-06-12 15:53 141˙824 C:\WINDOWS\system32\sessmgr.exe 2006-06-12 15:53 139˙264 C:\WINDOWS\system32\sndvol32.exe 2006-06-12 15:53 132˙608 C:\WINDOWS\system32\sndrec32.exe 2006-06-12 15:53 13˙824 C:\WINDOWS\system32\rdsaddin.exe 2006-06-12 15:53 128˙000 C:\WINDOWS\system32\mshearts.exe 2006-06-12 15:53 124˙928 C:\WINDOWS\system32\mplay32.exe 2006-06-12 15:53 119˙808 C:\WINDOWS\system32\winmine.exe 2006-06-12 15:53 115˙200 C:\WINDOWS\system32\calc.exe 2006-06-12 15:53 110˙080 C:\WINDOWS\system32\clbcatex.dll 2006-06-12 15:53 11˙776 C:\WINDOWS\system32\xolehlp.dll 2006-06-12 15:53 11˙264 C:\WINDOWS\system32\icaapi.dll 2006-06-12 15:53 103˙424 C:\WINDOWS\system32\clipbrd.exe 2006-06-12 15:53 1˙267˙200 C:\WINDOWS\system32\comsvcs.dll 2006-06-12 15:53 1˙225 C:\WINDOWS\system32\usrlogon.cmd 2006-06-12 15:52 58˙880 C:\WINDOWS\system32\licwmi.dll 2006-06-12 15:52 187˙904 C:\WINDOWS\system32\cmprops.dll 2006-06-12 15:52 17˙920 C:\WINDOWS\system32\mmfutil.dll 2006-06-12 15:44 4˙274˙816 C:\WINDOWS\system32\nv4_disp.dll 2006-06-12 15:44 4˙096 C:\WINDOWS\system32\ksuser.dll 2006-06-12 15:43 77˙312 C:\WINDOWS\system32\usbui.dll 2006-06-12 15:41 85˙532 C:\WINDOWS\system32\dgsetup.dll 2006-06-12 15:41 8˙704 C:\WINDOWS\system32\batt.dll 2006-06-12 15:41 8˙192 C:\WINDOWS\system32\kbdhept.dll 2006-06-12 15:41 75˙776 C:\WINDOWS\system32\storprop.dll 2006-06-12 15:41 70˙144 C:\WINDOWS\NOTEPAD.EXE 2006-06-12 15:41 7˙168 C:\WINDOWS\system32\kbdcz.dll 2006-06-12 15:41 6˙656 C:\WINDOWS\system32\kbdycl.dll 2006-06-12 15:41 6˙656 C:\WINDOWS\system32\kbdsl1.dll 2006-06-12 15:41 6˙656 C:\WINDOWS\system32\kbdsl.dll 2006-06-12 15:41 6˙656 C:\WINDOWS\system32\kbdhu.dll 2006-06-12 15:41 6˙656 C:\WINDOWS\system32\kbdhela3.dll 2006-06-12 15:41 6˙656 C:\WINDOWS\system32\kbdcz2.dll 2006-06-12 15:41 6˙656 C:\WINDOWS\system32\kbdcz1.dll 2006-06-12 15:41 6˙656 C:\WINDOWS\system32\kbdcr.dll 2006-06-12 15:41 6˙656 C:\WINDOWS\system32\KBDAL.DLL 2006-06-12 15:41 6˙144 C:\WINDOWS\system32\kbdtuq.dll 2006-06-12 15:41 6˙144 C:\WINDOWS\system32\kbdtuf.dll 2006-06-12 15:41 6˙144 C:\WINDOWS\system32\kbdlv1.dll 2006-06-12 15:41 6˙144 C:\WINDOWS\system32\kbdlv.dll 2006-06-12 15:41 6˙144 C:\WINDOWS\system32\kbdhela2.dll 2006-06-12 15:41 6˙144 C:\WINDOWS\system32\kbdgkl.dll 2006-06-12 15:41 6˙144 C:\WINDOWS\system32\kbdest.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdycc.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbduzb.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdur.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdtat.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdru1.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdru.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdro.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdmon.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdlt1.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdlt.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdkyr.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdkaz.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdhu1.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdhe319.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdhe220.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdhe.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdbu.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdblr.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdazel.dll 2006-06-12 15:41 5˙632 C:\WINDOWS\system32\kbdaze.dll 2006-06-12 15:41 24˙661 C:\WINDOWS\system32\spxcoins.dll 2006-06-12 15:41 176˙157 C:\WINDOWS\system32\dgrpsetu.dll 2006-06-12 15:41 15˙360 C:\WINDOWS\TASKMAN.EXE 2006-06-12 15:41 13˙312 C:\WINDOWS\system32\irclass.dll 2006-06-12 15:41 103˙424 C:\WINDOWS\system32\EqnClass.Dll (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries are not shown [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "Anti-Blaxx Manager"="C:\\Program Files\\Anti-Blaxx\\Anti-Blaxx.exe" "NeroFilterCheck"="C:\\Program Files\\Common Files\\Ahead\\Lib\\NeroCheck.exe" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "Gadu-Gadu"="\"C:\\Program Files\\Gadu-Gadu\\gg.exe\" /tray" "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="\"C:\\Program Files\\Common Files\\Ahead\\Lib\\NMBgMonitor.exe\"" "Skype"="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized" [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components] "DeskHtmlVersion"=dword:00000110 "DeskHtmlMinorVersion"=dword:00000005 "Settings"=dword:00000001 "GeneralFlags"=dword:00000001 [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0] "FriendlyName"="" "Source"="" "SubscribedURL"="" "Position"=hex:00,00,00,00,00,00,00,00,01,00,00,00,dc,00,00,00,d2,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "CurrentState"=hex:00,00,00,00 [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE" [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Moduł wstępnego ładowania interfejsu Browseui" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Demon buforu kategorii składników" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"="" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Start^Programy^Autostart^Adobe Reader Speed Launch.lnk] "path"="C:\\Documents and Settings\\All Users.WINDOWS\\Menu Start\\Programy\\Autostart\\Adobe Reader Speed Launch.lnk" "backup"="C:\\WINDOWS\\pss\\Adobe Reader Speed Launch.lnkCommon Startup" "location"="Common Startup" "command"="C:\\PROGRA~1\\Adobe\\ACROBA~1.0\\Reader\\READER~1.EXE " "item"="Adobe Reader Speed Launch" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BearShare] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="BearShare" "hkey"="HKLM" "command"="\"C:\\Program Files\\BearShare\\BearShare.exe\" /pause" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="ctfmon" "hkey"="HKCU" "command"="C:\\WINDOWS\\system32\\ctfmon.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="PWRISOVM" "hkey"="HKLM" "command"="C:\\Program Files\\PowerISO\\PWRISOVM.EXE" "inimapping"="0" Contents of the 'Scheduled Tasks' folder Completion time: 2006-07-15 16:21:10,14 ComboFix ver 06.07.15 - This logfile is located at C:\ComboFix.txt ComboFix.2006-07-15.155229.txt ComboFix.2006-07-15.162048.txt

PS. Sorka pomieszało już mi się wszystko

**Posty:** 8694 · przez **Red** 15 Lip 2006, 16:40

nic wiecej nie widzę :roll:

**Posty:** 298 · przez **MK89** 15 Lip 2006, 16:44

hmm...ale nadal nic...mam nadzieję, że już nie mam żadnych wirusów,ale teraz muszę sobie poradzić z tym najważniejszym problemem...

**Posty:** 8694 · przez **Red** 15 Lip 2006, 17:04

W logach jest czysto ,wiec pozostaje techniczne dopracowanie tego problemu

**Posty:** 298 · przez **MK89** 15 Lip 2006, 17:15

czyli jak technicznie?? sorki ale za bardzo sie na tym nie znam

problem z zabezpieczeniami

Kto jest na forum