proszę o sprawdzenie loga- problem z internetem

**Posty:** 6 · przez **justyna19xxx** 06 Gru 2007, 21:39

Witam,

Od jakiegoś czasu mam ogromny problem z internetem. Pozornie łącze się z nim ale w mega powolnym tempie ( żeby nie powiedzieć w żółwim) do tego stopnia, iż mogę wyjść na spacer, wrócić, wypić kawę i dopiero mam wczytaną stronę ( ja wiem że ruch to zdrowie, ale bez przesady ) a czasami i nie . Sama probowałam naprawić problem wszelkimi znanymi mi sposobami , ale bez skutku, a w każdym razie bez zmian na lepsze. Cóż jestem tylko blondynką

dlatego zwracam się do specjalistów. Pomóżcie proszę, nie chce się uzależnić od melisy, ale przy tym komputerze bez 5 filiżanek prawidłowo egzystować się nie da

Logfile of HijackThis v1.99.1
Scan saved at 20:38:58, on 2007-12-06
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\winnt\System32\smss.exe
C:\winnt\system32\winlogon.exe
C:\winnt\system32\services.exe
C:\winnt\system32\lsass.exe
C:\winnt\system32\Ati2evxx.exe
C:\winnt\system32\svchost.exe
C:\winnt\System32\svchost.exe
C:\winnt\system32\Ati2evxx.exe
C:\winnt\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\winnt\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\winnt\system32\svchost.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\winnt\system32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\winnt\SOUNDMAN.EXE
C:\Program Files\Terminator\Quick TV\Scheduled.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Program Files\Archivarius 3000\Archivarius3000.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\winnt\VMSnap3.EXE
C:\winnt\Domino.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\winnt\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Gadu-Gadu\gg.exe
D:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Terminator\TV7131 Utilities\P3XRCtl.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Documents and Settings\J A B O L\Moje dokumenty\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.bearshare.com/sidebar.html?src=ssb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.bearshare.com/sidebar.html?src=ssb
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbSha0.dll
R3 - URLSearchHook: (no name) - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Flashget Catch Url Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL
O2 - BHO: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbSha0.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: gFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll
O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL
O3 - Toolbar: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbSha0.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [nTrayFw] C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINNT\UpdReg.EXE
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\winnt\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [Quick TV Agent] C:\Program Files\Terminator\Quick TV\Scheduled.exe
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [Archivarius 3000] C:\Program Files\Archivarius 3000\Archivarius3000.exe -AutoStart
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\wianmpa.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [VMSnap3] C:\winnt\VMSnap3.EXE
O4 - HKLM\..\Run: [Domino] C:\winnt\Domino.EXE
O4 - HKLM\..\Run: [BigDog303] C:\winnt\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
O4 - HKLM\..\Run: [Onet.pl AutoUpdate] "C:\Program Files\Common Files\Onet.pl\NewAutoUpdate.exe" /updateexetsr
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\winnt\system32\ctfmon.exe
O4 - HKCU\..\Run: [Creative MediaSource Go] "C:\Program Files\Creative\MediaSource\Go\CTCMSGo.exe" /SCB
O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [DAEMON Tools] "D:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Startup: Inforganizer.lnk = C:\Program Files\Inforganizer\Terminarz_Infor.exe
O4 - Global Startup: TV Remote Control.lnk = C:\Program Files\Terminator\TV7131 Utilities\P3XRCtl.exe
O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: &Ściągnij przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: &Ściągnij wszystko przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://mppv2flash3.valueactive.com/UniBet/FlashAX.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{32577BB6-18A4-4F76-9574-8756EB755707}: NameServer = 192.168.0.1,213.199.225.10
O17 - HKLM\System\CS1\Services\Tcpip\..\{32577BB6-18A4-4F76-9574-8756EB755707}: NameServer = 192.168.0.1,213.199.225.10
O17 - HKLM\System\CS2\Services\Tcpip\..\{32577BB6-18A4-4F76-9574-8756EB755707}: NameServer = 192.168.0.1,213.199.225.10
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\winnt\system32\WPDShServiceObj.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\winnt\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINNT\system32\ati2sgag.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: Webcam Corp. Service Starter - Unknown owner - C:\Program Files\Webcam\Webcam123\dogsvc.exe (file missing)

**Posty:** 18165 · przez **wojtas** 06 Gru 2007, 21:56

Wykonaj to co jest podane w tym temacie

zastosuj:

smitfraudfix z opcji 2

Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu SDFix wrzuc zawartość pliku Report.txt + log z hijacka oraz z combofixa (tylko przed uzyciem combo zmien date w komputerze np. na 15.11.2007 zeby byla wczesniejsza niz dzisiejsza data)

**Posty:** 6 · przez **justyna19xxx** 06 Gru 2007, 23:30

Hm... dziękuję Ci ślicznie, jest tylko jeden mały problem a może i nawet nie taki mały - nie mogę ściągnąć SDFixa ba, nawet wczytać tego linka którego podałeś nie mogę. Nie otwiera mi się

Ratuj cybernetyczny wybawco

**Posty:** 3854 · przez **Dzi@dek** 07 Gru 2007, 00:02

http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
skopiuj i wklej do przeglądarki

**Posty:** 6 · przez **justyna19xxx** 07 Gru 2007, 19:20

Dobra, zrobiłam tak jak kazałeś, a w każdym bądź razie tak mi się wydaję. Sytuacja w tej chwili prezentuje się tak :

ComboFix 07-12-07.3 - J A B O L 2007-12-01 17:51:03.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.485 [GMT 1:00]
Running from: C:\Documents and Settings\J A B O L\Pulpit\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\J A B O L\Dane aplikacji\ShoppingReport
C:\Documents and Settings\J A B O L\Dane aplikacji\ShoppingReport\cs\Config.xml
C:\Documents and Settings\J A B O L\Dane aplikacji\ShoppingReport\cs\db\Aliases.dbs
C:\Documents and Settings\J A B O L\Dane aplikacji\ShoppingReport\cs\db\Sites.dbs
C:\Documents and Settings\J A B O L\Dane aplikacji\ShoppingReport\cs\dwld\WhiteList.xip
C:\Documents and Settings\J A B O L\Dane aplikacji\ShoppingReport\cs\report\aggr_storage.xml
C:\Documents and Settings\J A B O L\Dane aplikacji\ShoppingReport\cs\report\send_storage.xml
C:\Documents and Settings\J A B O L\Dane aplikacji\ShoppingReport\cs\res2\WhiteList.dbs
C:\Program Files\myglobalsearch
C:\Program Files\myglobalsearch\bar\1.bin\M9FFXTBR.JAR
C:\Program Files\myglobalsearch\bar\1.bin\M9FFXTBR.MANIFEST
C:\Program Files\myglobalsearch\bar\1.bin\M9NTSTBR.JAR
C:\Program Files\myglobalsearch\bar\1.bin\M9NTSTBR.MANIFEST
C:\Program Files\myglobalsearch\bar\1.bin\M9PLUGIN.DLL
C:\Program Files\myglobalsearch\bar\1.bin\MGSBAR.DLL
C:\Program Files\myglobalsearch\bar\1.bin\NPMYGLSH.DLL
C:\Program Files\myglobalsearch\bar\Cache\0030012F.bin
C:\Program Files\myglobalsearch\bar\Cache\003003FE.bin
C:\Program Files\myglobalsearch\bar\Cache\00303668.bin
C:\Program Files\myglobalsearch\bar\Cache\015F63FE
C:\Program Files\myglobalsearch\bar\Cache\files.ini
C:\Program Files\myglobalsearch\bar\History\search
C:\Program Files\myglobalsearch\bar\Settings\prevcfg.htm
C:\Program Files\ShoppingReport
C:\Program Files\ShoppingReport\Uninst.exe

.
((((((((((((((((((((((((( Files Created from 2007-11-07 to 2007-12-07 )))))))))))))))))))))))))))))))
.

2007-12-07 17:37 . 2007-07-30 19:19 38,232 --a------ C:\WINNT\system32\wucltui.dll.mui
2007-12-07 17:37 . 2007-07-30 19:20 30,040 --a------ C:\WINNT\system32\wuaucpl.cpl.mui
2007-12-07 17:37 . 2007-07-30 19:20 30,040 --a------ C:\WINNT\system32\wuapi.dll.mui
2007-12-07 17:37 . 2007-07-30 19:18 21,336 --a------ C:\WINNT\system32\wuaueng.dll.mui
2007-12-07 17:12 . 2007-12-07 17:12 <DIR> d-------- C:\WINNT\system32\xircom
2007-12-07 17:12 . 2007-12-07 17:12 <DIR> d-------- C:\Program Files\microsoft frontpage
2007-12-07 17:08 . 2007-12-07 17:08 <DIR> d-------- C:\WINNT\ERUNT
2007-12-06 22:08 . 2007-12-06 22:09 <DIR> d-------- C:\Documents and Settings\J A B O L\SmitfraudFix
2007-12-06 21:54 . 2007-09-05 23:22 289,144 --a------ C:\WINNT\system32\VCCLSID.exe
2007-12-06 21:54 . 2006-04-27 16:49 288,417 --a------ C:\WINNT\system32\SrchSTS.exe
2007-12-06 21:54 . 2003-06-05 20:13 53,248 --a------ C:\WINNT\system32\Process.exe
2007-12-06 21:54 . 2004-07-31 17:50 51,200 --a------ C:\WINNT\system32\dumphive.exe
2007-12-06 21:54 . 2007-10-03 23:36 25,600 --a------ C:\WINNT\system32\WS2Fix.exe
2007-12-05 22:11 . 2007-12-05 22:11 <DIR> d-------- C:\Program Files\Avira
2007-12-05 22:11 . 2007-12-05 22:11 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Avira
2007-12-05 21:41 . 2007-12-05 23:18 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab
2007-12-05 21:40 . 2007-12-05 21:40 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files
2007-12-01 13:19 . 2007-12-01 13:19 <DIR> d-------- C:\Documents and Settings\J A B O L\Dane aplikacji\Sports Interactive
2007-11-30 15:06 . 2007-11-30 15:06 <DIR> d-------- C:\Program Files\Alcohol Soft
2007-11-30 14:39 . 2007-11-30 14:39 19,968 --a------ C:\Nowy Dokument programu Microsoft Word.doc
2007-11-29 16:40 . 2007-11-29 16:43 <DIR> d--h----- C:\Program Files\Zero G Registry
2007-11-29 16:40 . 2007-11-29 16:40 <DIR> d--h----- C:\Documents and Settings\J A B O L\InstallAnywhere
2007-11-21 19:21 . 2007-11-21 19:21 <DIR> d-------- C:\WINNT\Sun
2007-11-21 19:19 . 2007-09-24 23:31 69,632 --a------ C:\WINNT\system32\javacpl.cpl
2007-11-21 19:16 . 2007-11-21 19:16 <DIR> d-------- C:\Program Files\Common Files\Java
2007-11-21 19:00 . 2007-11-21 19:00 <DIR> d-------- C:\Program Files\Onet
2007-11-21 19:00 . 2007-11-21 19:00 <DIR> d-------- C:\Program Files\Common Files\Onet.pl
2007-11-21 19:00 . 2007-11-21 19:00 <DIR> d-------- C:\Documents and Settings\J A B O L\Dane aplikacji\Kamerzysta
2007-11-21 19:00 . 2007-11-21 19:00 <DIR> d-------- C:\Documents and Settings\J A B O L\Dane aplikacji\Czat
2007-11-21 19:00 . 2007-11-21 19:00 <DIR> d-------- C:\Documents and Settings\J A B O L\Dane aplikacji\AutoUpdate
2007-11-21 17:21 . 2007-11-21 17:21 <DIR> d-------- C:\WINNT\EffectResources
2007-11-14 08:38 . 2007-11-14 08:38 <DIR> d-------- C:\Program Files\Audacity
2007-11-08 21:08 . 2007-11-08 21:08 <DIR> d-------- C:\WINNT\system32\URTTEMP
2007-11-08 20:34 . 2007-11-08 20:34 <DIR> d-------- C:\WINNT\San Andreas Mod Installer

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-07 16:52 --------- d-----w C:\Program Files\FlashGet
2007-12-07 16:48 --------- d-----w C:\Documents and Settings\J A B O L\Dane aplikacji\Skype
2007-11-30 14:02 685,816 ----a-w C:\winnt\system32\drivers\sptd.sys
2007-11-26 13:56 --------- d-----w C:\Program Files\BearShare
2007-11-21 18:19 --------- d-----w C:\Program Files\Java
2007-11-21 16:21 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-11-16 14:52 --------- d-----w C:\Program Files\Share_Accelerator_MM
2007-11-02 09:23 --------- d-----w C:\Program Files\Call of Duty
2007-11-01 16:25 --------- d-----w C:\Program Files\QuickTime
2007-11-01 16:25 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer
2007-11-01 16:24 --------- d-----w C:\Program Files\Apple Software Update
2007-11-01 16:24 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Apple
2007-10-28 08:22 --------- d-----w C:\Program Files\Winamp
2007-10-28 08:21 --------- d-----w C:\Program Files\Winamp Toolbar
2007-10-28 08:21 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar
2007-10-23 19:18 --------- d-----w C:\Program Files\GIMPshop
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
2007-10-04 21:06 1135968 --a------ C:\Program Files\Winamp Toolbar\winamptb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= C:\Program Files\Winamp Toolbar\winamptb.dll [2007-10-04 21:06 1135968]

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= C:\Program Files\Winamp Toolbar\winamptb.dll [2007-10-04 21:06 1135968]

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\winnt\system32\ctfmon.exe" [2004-08-04 01:44]
"Creative MediaSource Go"="C:\Program Files\Creative\MediaSource\Go\CTCMSGo.exe" []
"Creative Detector"="C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" []
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" [2005-10-28 16:25]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-08-04 00:55]
"Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-05-10 15:36]
"DAEMON Tools"="D:\Program Files\DAEMON Tools\daemon.exe" [2007-04-03 23:29]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-07-02 16:10]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nTrayFw"="C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe" [2005-02-07 08:16]
"UpdReg"="C:\WINNT\UpdReg.EXE" []
"P17Helper"="Rundll32 P17.dll" []
"NeroFilterCheck"="C:\WINNT\system32\NeroCheck.exe" [2001-07-09 10:50]
"HP Software Update"="C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe" [2002-12-17 10:40]
"HPDJ Taskbar Utility"="C:\winnt\system32\spool\drivers\w32x86\3\hpztsb08.exe" [2003-03-11 11:08]
"DeviceDiscovery"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe" [2002-12-02 19:56]
"SoundMan"="SOUNDMAN.EXE" [2006-08-03 04:12 C:\WINNT\soundman.exe]
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-05-10 10:12]
"Quick TV Agent"="C:\Program Files\Terminator\Quick TV\Scheduled.exe" [2004-10-11 09:46]
"BearShare"="C:\Program Files\BearShare\BearShare.exe" []
"Archivarius 3000"="C:\Program Files\Archivarius 3000\Archivarius3000.exe" [2007-05-17 15:00]
"Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2007-05-28 09:14]
"WinampAgent"="C:\Program Files\Winamp\wianmpa.exe" []
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-06-29 06:24]
"VMSnap3"="C:\winnt\VMSnap3.EXE" [2006-08-30 03:58]
"Domino"="C:\winnt\Domino.EXE" [2006-06-28 10:54]
"BigDog303"="C:\winnt\VM303_STI.exe" []
"Onet.pl AutoUpdate"="C:\Program Files\Common Files\Onet.pl\NewAutoUpdate.exe" []
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2007-12-05 22:14]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINNT\system32\CTFMON.EXE" [2004-08-04 01:44]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nlsf"="cmd.exe" [2004-08-04 01:44 C:\WINNT\system32\cmd.exe]
"tscuninstall"="C:\winnt\system32\tscupgrd.exe" [2004-08-04 01:33]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
TV Remote Control.lnk - C:\Program Files\Terminator\TV7131 Utilities\P3XRCtl.exe [2007-04-29 11:48:25]

R3 Cap713x;Philips Cap713x Video Capture;C:\winnt\system32\DRIVERS\Cap713x.sys
R3 vmfilter303;vmfilter303;C:\winnt\system32\drivers\vmfilter303.sys
R3 ZSMC303;A4 TECH PC Camera H;C:\winnt\system32\Drivers\usbVM303.sys
S2 713xTVCard;SAA7131 TV Card;C:\winnt\system32\DRIVERS\SAA713x.sys
S3 P17;Sound Blaster Audigy;C:\winnt\system32\drivers\P17.sys
S3 s115bus;Sony Ericsson Device 115 driver (WDM);C:\winnt\system32\DRIVERS\s115bus.sys
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter;C:\winnt\system32\DRIVERS\s115mdfl.sys
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver;C:\winnt\system32\DRIVERS\s115mdm.sys
S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM);C:\winnt\system32\DRIVERS\s115mgmt.sys
S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface;C:\winnt\system32\DRIVERS\s115obex.sys
S3 s125bus;Sony Ericsson Device 125 driver (WDM);C:\winnt\system32\DRIVERS\s125bus.sys
S3 s125mdfl;Sony Ericsson Device 125 USB WMC Modem Filter;C:\winnt\system32\DRIVERS\s125mdfl.sys
S3 s125mdm;Sony Ericsson Device 125 USB WMC Modem Driver;C:\winnt\system32\DRIVERS\s125mdm.sys
S3 s125mgmt;Sony Ericsson Device 125 USB WMC Device Management Drivers (WDM);C:\winnt\system32\DRIVERS\s125mgmt.sys
S3 s125obex;Sony Ericsson Device 125 USB WMC OBEX Interface;C:\winnt\system32\DRIVERS\s125obex.sys
S3 Webcam Corp. Service Starter;Webcam Corp. Service Starter;C:\Program Files\Webcam\Webcam123\dogsvc.exe

.
Contents of the 'Scheduled Tasks' folder
"2007-11-14 07:44:01 C:\winnt\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1318 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-07 18:03:22
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-12-07 18:04:50 - machine was rebooted
.
--- E O F ---

SDFix: Version 1.117

Run by J A B O L on 2007-12-07 at 17:09

Microsoft Windows XP [Wersja 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:

Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...

Normal Mode:
Checking Files:

No Trojan Files Found

Removing Temp Files...

ADS Check:

C:\winnt
No streams found.

C:\winnt\system32
No streams found.

C:\winnt\system32\svchost.exe
No streams found.

C:\winnt\system32\ntoskrnl.exe
No streams found.

Final Check:

catchme 0.3.1262.1 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-07 17:15:41
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:f9ff5d38
"s2"=dword:2e4a4ec3
"h0"=dword:00000002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000001
"ujdew"=hex:2b,60,82,de,d9,e9,fb,67,15,ab,de,b6,29,65,8f,3e,a1,bf,d9,2b,a2,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:d5,7c,3e,0a,ed,27,85,fd,f4,0d,ba,df,a1,85,58,ae,69,b4,e4,7c,08,..
"p0"="D:\Program Files\DAEMON Tools\"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,6d,0e,32,88,ea,1c,83,a8,f5,87,80,88,fb,ea,b8,f2,93,..
"khjeh"=hex:63,1b,29,d9,71,20,98,0e,27,3f,e1,d4,d5,fe,aa,e9,84,15,c7,ad,cf,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:d5,c8,31,f4,40,bd,68,b9,39,91,98,6d,4a,3c,0f,c0,0b,a9,6d,4e,c6,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000001
"ujdew"=hex:2b,60,82,de,d9,e9,fb,67,15,ab,de,b6,29,65,8f,3e,a1,bf,d9,2b,a2,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:d5,7c,3e,0a,ed,27,85,fd,f4,0d,ba,df,a1,85,58,ae,69,b4,e4,7c,08,..
"p0"="D:\Program Files\DAEMON Tools\"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,6d,0e,32,88,ea,1c,83,a8,f5,87,80,88,fb,ea,b8,f2,93,..
"khjeh"=hex:63,1b,29,d9,71,20,98,0e,27,3f,e1,d4,d5,fe,aa,e9,84,15,c7,ad,cf,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:d5,c8,31,f4,40,bd,68,b9,39,91,98,6d,4a,3c,0f,c0,0b,a9,6d,4e,c6,..

scanning hidden registry entries ...

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\A\1\5\1c]
"Order"=hex:08,00,00,00,02,00,00,00,b8,01,00,00,01,00,00,00,04,00,00,00,8c,..

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0

Remaining Services:
------------------

Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Gadu-Gadu\\gg.exe"="C:\\Program Files\\Gadu-Gadu\\gg.exe:*:Enabled:Gadu-Gadu - program gˆ˘wny"
"F:\\zdc\\zDCPlusPlus.exe"="F:\\zdc\\zDCPlusPlus.exe:*:Enabled:zDC++"
"C:\\Program Files\\FlashFXP\\FlashFXP.exe"="C:\\Program Files\\FlashFXP\\FlashFXP.exe:*:Enabled:FlashFXP v3"
"F:\\G R Y\\Neverwinter Nights 2\\nwn2main.exe"="F:\\G R Y\\Neverwinter Nights 2\\nwn2main.exe:*:Enabled:Neverwinter Nights 2 Main"
"F:\\G R Y\\Neverwinter Nights 2\\nwn2main_amdxp.exe"="F:\\G R Y\\Neverwinter Nights 2\\nwn2main_amdxp.exe:*:Enabled:Neverwinter Nights 2 AMD"
"F:\\G R Y\\Neverwinter Nights 2\\nwupdate.exe"="F:\\G R Y\\Neverwinter Nights 2\\nwupdate.exe:*:Enabled:Neverwinter Nights 2 Updater"
"F:\\G R Y\\Neverwinter Nights 2\\nwn2server.exe"="F:\\G R Y\\Neverwinter Nights 2\\nwn2server.exe:*:Enabled:Neverwinter Nights 2 Server"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\Opera\\Opera.exe"="C:\\Program Files\\Opera\\Opera.exe:*:Enabled:Opera Internet Browser"
"F:\\G R Y\\quake4\\Quake4Ded.exe"="F:\\G R Y\\quake4\\Quake4Ded.exe:*:Enabled:Quake 4"
"C:\\Program Files\\FlashGet\\flashget.exe"="C:\\Program Files\\FlashGet\\flashget.exe:*:Enabled:Flashget"
"C:\\Program Files\\BearShare Applications\\BearShare\\BearShare.exe"="C:\\Program Files\\BearShare Applications\\BearShare\\BearShare.exe:*:Enabled:BearShare"
"E:\\Test Drive Unlimited\\TestDriveUnlimited.exe"="E:\\Test Drive Unlimited\\TestDriveUnlimited.exe:*:Enabled:Test Drive Unlimited"
"D:\\Program Files\\BearShare\\BearShare.exe"="D:\\Program Files\\BearShare\\BearShare.exe:*:Enabled:BearShare"
"C:\\Program Files\\BearShare\\BearShare.exe"="C:\\Program Files\\BearShare\\BearShare.exe:*:Enabled:BearShare"
"K:\\Filmy\\Programy\\BearShare.exe"="K:\\Filmy\\Programy\\BearShare.exe:*:Enabled:BearShare"
"C:\\Program Files\\Winamp Remote\\bin\\Orb.exe"="C:\\Program Files\\Winamp Remote\\bin\\Orb.exe:*:Enabled:Orb"
"C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe:*:Enabled:OrbTray"
"C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe:*:Enabled:Orb Stream Client"
"J:\\Program Files\\Call of Duty\\CoDMP.exe"="J:\\Program Files\\Call of Duty\\CoDMP.exe:*:Enabled:CoDMP"
"C:\\Program Files\\Sports Interactive\\Football Manager 2008\\fm.exe"="C:\\Program Files\\Sports Interactive\\Football Manager 2008\\fm.exe:*:Disabled:Football Manager 2008"
"J:\\Program Files\\Sports Interactive\\Football Manager 2008\\fm.exe"="J:\\Program Files\\Sports Interactive\\Football Manager 2008\\fm.exe:*:Enabled:Football Manager 2008"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\FlashFXP\\FlashFXP.exe"="C:\\Program Files\\FlashFXP\\FlashFXP.exe:*:Enabled:FlashFXP v3"

Remaining Files:
---------------

Files with Hidden Attributes:

Mon 23 Jul 2007 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Thu 8 Nov 2007 0 A..H. --- "C:\Documents and Settings\J A B O L\Pulpit\dotnetfx.exe"
Tue 23 Oct 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp"
Thu 29 Nov 2007 1,301 ...HR --- "C:\Documents and Settings\J A B O L\Dane aplikacji\SecuROM\UserData\securom_v7_01.bak"
Wed 19 Mar 1997 10,752 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\HARCTUR\~WRL0005.tmp"
Wed 19 Mar 1997 10,752 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\HARCTUR\~WRL2624.tmp"
Mon 10 Apr 2006 46,247 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\NOWE FORMULARZE\~WRL1625.tmp"
Fri 24 Mar 2006 36,210 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\NOWE FORMULARZE\~WRL2183.tmp"
Fri 1 Dec 2006 35,328 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\PA-GI\~WRL0517.tmp"
Mon 27 Nov 2006 342,016 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\PA-GI\~WRL0562.tmp"
Wed 15 Dec 2004 36,864 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\POZWY\~WRL0337.tmp"
Wed 15 Dec 2004 36,864 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\POZWY\~WRL1479.tmp"
Wed 19 Mar 1997 10,752 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\POZWY\~WRL1609.tmp"
Mon 31 Oct 2005 1,038,336 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\POZWY\~WRL2100.tmp"
Tue 24 Oct 2006 111,104 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\P.W.S.Z\~WRL0002.tmp"
Wed 26 Jul 2006 43,520 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\P.W.S.Z\~WRL2236.tmp"
Wed 5 Apr 2006 374,784 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\RODZINNE\~WRL2214.tmp"
Mon 29 May 2006 643,072 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\Rŕ˝NE\~WRL2858.tmp"
Mon 18 Apr 2005 1,325,056 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\Starostwo\~WRL0005.tmp"
Tue 8 Apr 2003 25,600 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\Starostwo\~WRL1785.tmp"
Fri 25 Apr 2003 30,208 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\Starostwo\~WRL1898.tmp"
Fri 25 Apr 2003 28,160 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\Starostwo\~WRL1954.tmp"
Fri 25 Apr 2003 28,672 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\Starostwo\~WRL1985.tmp"
Tue 8 Apr 2003 32,768 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\Starostwo\~WRL2307.tmp"
Fri 25 Apr 2003 27,136 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\Starostwo\~WRL4070.tmp"
Wed 19 Mar 1997 10,752 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\TITAN LUX\~WRL0002.tmp"
Wed 19 Mar 1997 10,752 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\UrzĄd Miasta\~WRL2073.tmp"
Tue 1 Aug 2006 21,504 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\Wezwania\~WRL2568.tmp"
Tue 3 Jan 2006 0 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\KOMORNIK\wezwania przedegzekucyjne\~WRL0001.tmp"
Mon 29 May 2006 1,001,472 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\KOMORNIK\wnioski o egzekucj©\~WRL0556.tmp"
Fri 26 May 2006 33,280 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\KOMORNIK\wnioski o egzekucj©\~WRL2279.tmp"
Thu 2 Nov 2006 140,400 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\K.R.S\Rejestracje - KRS\Q-LINK\~WRL0737.tmp"
Wed 19 Mar 1997 10,752 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\K.R.S\Rejestracje - KRS\VIX AUTOMATION\~WRL0520.tmp"
Thu 3 Nov 2005 92,563 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\K.R.S\Rejestracje - KRS\VIX AUTOMATION\~WRL2564.tmp"
Wed 19 Mar 1997 10,752 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\K.R.S\Rejestracje - KRS\VIX AUTOMATION\~WRL2566.tmp"
Thu 3 Nov 2005 148,454 A..H. --- "C:\Documents and Settings\J A B O L\Moje dokumenty\pisma\K.R.S\Rejestracje - KRS\VIX AUTOMATION\~WRL3437.tmp"

Finished!

Logfile of HijackThis v1.99.1
Scan saved at 18:16:43, on 2007-12-07
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\winnt\System32\smss.exe
C:\winnt\system32\winlogon.exe
C:\winnt\system32\services.exe
C:\winnt\system32\lsass.exe
C:\winnt\system32\Ati2evxx.exe
C:\winnt\system32\svchost.exe
C:\winnt\System32\svchost.exe
C:\winnt\system32\Ati2evxx.exe
C:\winnt\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\winnt\Explorer.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\winnt\system32\svchost.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\winnt\system32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\winnt\SOUNDMAN.EXE
C:\Program Files\Terminator\Quick TV\Scheduled.exe
C:\Program Files\Archivarius 3000\Archivarius3000.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\winnt\VMSnap3.EXE
C:\winnt\Domino.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\winnt\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Gadu-Gadu\gg.exe
D:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Terminator\TV7131 Utilities\P3XRCtl.exe
C:\winnt\system32\wuauclt.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\J A B O L\Moje dokumenty\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbSha0.dll
R3 - URLSearchHook: (no name) - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Flashget Catch Url Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbSha0.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: gFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll
O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (file missing)
O3 - Toolbar: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbSha0.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [nTrayFw] C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINNT\UpdReg.EXE
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\winnt\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [Quick TV Agent] C:\Program Files\Terminator\Quick TV\Scheduled.exe
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [Archivarius 3000] C:\Program Files\Archivarius 3000\Archivarius3000.exe -AutoStart
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\wianmpa.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [VMSnap3] C:\winnt\VMSnap3.EXE
O4 - HKLM\..\Run: [Domino] C:\winnt\Domino.EXE
O4 - HKLM\..\Run: [BigDog303] C:\winnt\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
O4 - HKLM\..\Run: [Onet.pl AutoUpdate] "C:\Program Files\Common Files\Onet.pl\NewAutoUpdate.exe" /updateexetsr
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\winnt\system32\ctfmon.exe
O4 - HKCU\..\Run: [Creative MediaSource Go] "C:\Program Files\Creative\MediaSource\Go\CTCMSGo.exe" /SCB
O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [DAEMON Tools] "D:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Startup: Inforganizer.lnk = C:\Program Files\Inforganizer\Terminarz_Infor.exe
O4 - Global Startup: TV Remote Control.lnk = C:\Program Files\Terminator\TV7131 Utilities\P3XRCtl.exe
O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: &Ściągnij przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: &Ściągnij wszystko przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://mppv2flash3.valueactive.com/UniBet/FlashAX.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{32577BB6-18A4-4F76-9574-8756EB755707}: NameServer = 192.168.0.1,213.199.225.10
O17 - HKLM\System\CS1\Services\Tcpip\..\{32577BB6-18A4-4F76-9574-8756EB755707}: NameServer = 192.168.0.1,213.199.225.10
O17 - HKLM\System\CS2\Services\Tcpip\..\{32577BB6-18A4-4F76-9574-8756EB755707}: NameServer = 192.168.0.1,213.199.225.10
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\winnt\system32\WPDShServiceObj.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\winnt\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINNT\system32\ati2sgag.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: Webcam Corp. Service Starter - Unknown owner - C:\Program Files\Webcam\Webcam123\dogsvc.exe (file missing)

Heh... mam nadzieję, że zrobiłam i zamieściłam wszystko jak należy. Czekam na dalsze instrukcję mistrzu

**Posty:** 18165 · przez **wojtas** 07 Gru 2007, 20:15

znasz ta aplikacje:

O4 - HKLM\..\Run: [Archivarius 3000] C:\Program Files\Archivarius 3000\Archivarius3000.exe -AutoStart

skasuj te wpisy w hijacku:

R3 - URLSearchHook: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbSha0.dll
R3 - URLSearchHook: (no name) - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} - (no file)
O2 - BHO: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbSha0.dll
O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (file missing)
O3 - Toolbar: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbSha0.dll

Otworz notatnik i wklej w nim to:

Folder::
C:\Program Files\Share_Accelerator_MM

Plik >>> zapisz jako CFScript.txt .Plik przeciągnij i upuść na ikonę ComboFixa (tak jak tu ) . Potwierdz >>> zresetuje sie komputer

(jeśli pojawi się pytanie "1 or 2" - to wpisz 1 i naciśnij ENTER). Rozpocznie się proces usuwania
Potem nowy log z hijacka oraz combofixa

**Posty:** 2691 · przez **Z@K** 07 Gru 2007, 20:18

wojtas19162 napisał(a):O4 - HKLM\..\Run: [Archivarius 3000] C:\Program Files\Archivarius 3000\Archivarius3000.exe -AutoStart

nie znam

**Posty:** 3854 · przez **Dzi@dek** 07 Gru 2007, 20:29

Z@K
To nie Twój log.

**Posty:** 6 · przez **justyna19xxx** 07 Gru 2007, 21:30

ComboFix 07-12-07.3 - J A B O L 2007-12-01 20:23:46.4 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.518 [GMT 1:00]
Running from: C:\Documents and Settings\J A B O L\Pulpit\ComboFix.exe
.

((((((((((((((((((((((((( Files Created from 2007-11-07 to 2007-12-07 )))))))))))))))))))))))))))))))
.

2007-12-07 17:37 . 2007-07-30 19:19 38,232 --a------ C:\WINNT\system32\wucltui.dll.mui
2007-12-07 17:37 . 2007-07-30 19:20 30,040 --a------ C:\WINNT\system32\wuaucpl.cpl.mui
2007-12-07 17:37 . 2007-07-30 19:20 30,040 --a------ C:\WINNT\system32\wuapi.dll.mui
2007-12-07 17:37 . 2007-07-30 19:18 21,336 --a------ C:\WINNT\system32\wuaueng.dll.mui
2007-12-07 17:12 . 2007-12-07 17:12 <DIR> d-------- C:\WINNT\system32\xircom
2007-12-07 17:12 . 2007-12-07 17:12 <DIR> d-------- C:\Program Files\microsoft frontpage
2007-12-07 17:08 . 2007-12-07 17:08 <DIR> d-------- C:\WINNT\ERUNT
2007-12-06 22:08 . 2007-12-06 22:09 <DIR> d-------- C:\Documents and Settings\J A B O L\SmitfraudFix
2007-12-06 21:54 . 2007-09-05 23:22 289,144 --a------ C:\WINNT\system32\VCCLSID.exe
2007-12-06 21:54 . 2006-04-27 16:49 288,417 --a------ C:\WINNT\system32\SrchSTS.exe
2007-12-06 21:54 . 2003-06-05 20:13 53,248 --a------ C:\WINNT\system32\Process.exe
2007-12-06 21:54 . 2004-07-31 17:50 51,200 --a------ C:\WINNT\system32\dumphive.exe
2007-12-06 21:54 . 2007-10-03 23:36 25,600 --a------ C:\WINNT\system32\WS2Fix.exe
2007-12-05 22:11 . 2007-12-05 22:11 <DIR> d-------- C:\Program Files\Avira
2007-12-05 22:11 . 2007-12-05 22:11 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Avira
2007-12-05 21:41 . 2007-12-05 23:18 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab
2007-12-05 21:40 . 2007-12-05 21:40 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files
2007-12-01 13:19 . 2007-12-01 13:19 <DIR> d-------- C:\Documents and Settings\J A B O L\Dane aplikacji\Sports Interactive
2007-11-30 15:06 . 2007-11-30 15:06 <DIR> d-------- C:\Program Files\Alcohol Soft
2007-11-30 14:39 . 2007-11-30 14:39 19,968 --a------ C:\Nowy Dokument programu Microsoft Word.doc
2007-11-29 16:40 . 2007-11-29 16:43 <DIR> d--h----- C:\Program Files\Zero G Registry
2007-11-29 16:40 . 2007-11-29 16:40 <DIR> d--h----- C:\Documents and Settings\J A B O L\InstallAnywhere
2007-11-21 19:21 . 2007-11-21 19:21 <DIR> d-------- C:\WINNT\Sun
2007-11-21 19:19 . 2007-09-24 23:31 69,632 --a------ C:\WINNT\system32\javacpl.cpl
2007-11-21 19:16 . 2007-11-21 19:16 <DIR> d-------- C:\Program Files\Common Files\Java
2007-11-21 19:00 . 2007-11-21 19:00 <DIR> d-------- C:\Program Files\Onet
2007-11-21 19:00 . 2007-11-21 19:00 <DIR> d-------- C:\Program Files\Common Files\Onet.pl
2007-11-21 19:00 . 2007-11-21 19:00 <DIR> d-------- C:\Documents and Settings\J A B O L\Dane aplikacji\Kamerzysta
2007-11-21 19:00 . 2007-11-21 19:00 <DIR> d-------- C:\Documents and Settings\J A B O L\Dane aplikacji\Czat
2007-11-21 19:00 . 2007-11-21 19:00 <DIR> d-------- C:\Documents and Settings\J A B O L\Dane aplikacji\AutoUpdate
2007-11-21 17:21 . 2007-11-21 17:21 <DIR> d-------- C:\WINNT\EffectResources
2007-11-14 08:38 . 2007-11-14 08:38 <DIR> d-------- C:\Program Files\Audacity
2007-11-08 21:08 . 2007-11-08 21:08 <DIR> d-------- C:\WINNT\system32\URTTEMP
2007-11-08 20:34 . 2007-11-08 20:34 <DIR> d-------- C:\WINNT\San Andreas Mod Installer

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-07 19:20 --------- d-----w C:\Documents and Settings\J A B O L\Dane aplikacji\Skype
2007-12-07 19:11 --------- d-----w C:\Program Files\FlashGet
2007-12-07 18:55 --------- d-----w C:\Program Files\Share_Accelerator_MM
2007-11-30 14:02 685,816 ----a-w C:\winnt\system32\drivers\sptd.sys
2007-11-26 13:56 --------- d-----w C:\Program Files\BearShare
2007-11-21 18:19 --------- d-----w C:\Program Files\Java
2007-11-21 16:21 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-11-02 09:23 --------- d-----w C:\Program Files\Call of Duty
2007-11-01 16:25 --------- d-----w C:\Program Files\QuickTime
2007-11-01 16:25 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer
2007-11-01 16:24 --------- d-----w C:\Program Files\Apple Software Update
2007-11-01 16:24 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Apple
2007-11-01 13:50 98,304 ----a-w C:\winnt\system32\CmdLineExt.dll
2007-10-28 08:22 --------- d-----w C:\Program Files\Winamp
2007-10-28 08:21 --------- d-----w C:\Program Files\Winamp Toolbar
2007-10-28 08:21 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar
2007-10-23 19:18 --------- d-----w C:\Program Files\GIMPshop
2007-10-22 02:39 267,272 ----a-w C:\winnt\system32\xactengine2_10.dll
2007-10-22 02:37 17,928 ----a-w C:\winnt\system32\X3DAudio1_2.dll
2007-10-12 14:14 3,734,536 ----a-w C:\winnt\system32\d3dx9_36.dll
2007-10-12 14:14 1,374,232 ----a-w C:\winnt\system32\D3DCompiler_36.dll
2007-10-02 08:56 444,776 ----a-w C:\winnt\system32\d3dx10_36.dll
.

((((((((((((((((((((((((((((( snapshot@2007-12-07_18.03.55.43 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-12-07 18:13:37 10,808 ----a-w C:\winnt\SoftwareDistribution\EventCache\{77A021F2-031B-4C39-B5B1-F5E36DD5BECD}.bin
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
2007-10-04 21:06 1135968 --a------ C:\Program Files\Winamp Toolbar\winamptb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= C:\Program Files\Winamp Toolbar\winamptb.dll [2007-10-04 21:06 1135968]

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= C:\Program Files\Winamp Toolbar\winamptb.dll [2007-10-04 21:06 1135968]

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\winnt\system32\ctfmon.exe" [2004-08-04 01:44]
"Creative MediaSource Go"="C:\Program Files\Creative\MediaSource\Go\CTCMSGo.exe" []
"Creative Detector"="C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" []
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" [2005-10-28 16:25]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-08-04 00:55]
"Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-05-10 15:36]
"DAEMON Tools"="D:\Program Files\DAEMON Tools\daemon.exe" [2007-04-03 23:29]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-07-02 16:10]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nTrayFw"="C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe" [2005-02-07 08:16]
"UpdReg"="C:\WINNT\UpdReg.EXE" []
"P17Helper"="Rundll32 P17.dll" []
"NeroFilterCheck"="C:\WINNT\system32\NeroCheck.exe" [2001-07-09 10:50]
"HP Software Update"="C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe" [2002-12-17 10:40]
"HPDJ Taskbar Utility"="C:\winnt\system32\spool\drivers\w32x86\3\hpztsb08.exe" [2003-03-11 11:08]
"DeviceDiscovery"="C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe" [2002-12-02 19:56]
"SoundMan"="SOUNDMAN.EXE" [2006-08-03 04:12 C:\WINNT\soundman.exe]
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-05-10 10:12]
"Quick TV Agent"="C:\Program Files\Terminator\Quick TV\Scheduled.exe" [2004-10-11 09:46]
"BearShare"="C:\Program Files\BearShare\BearShare.exe" []
"Archivarius 3000"="C:\Program Files\Archivarius 3000\Archivarius3000.exe" [2007-05-17 15:00]
"Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2007-05-28 09:14]
"WinampAgent"="C:\Program Files\Winamp\wianmpa.exe" []
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-06-29 06:24]
"VMSnap3"="C:\winnt\VMSnap3.EXE" [2006-08-30 03:58]
"Domino"="C:\winnt\Domino.EXE" [2006-06-28 10:54]
"BigDog303"="C:\winnt\VM303_STI.exe" []
"Onet.pl AutoUpdate"="C:\Program Files\Common Files\Onet.pl\NewAutoUpdate.exe" []
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2007-12-05 22:14]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINNT\system32\CTFMON.EXE" [2004-08-04 01:44]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nlsf"="cmd.exe" [2004-08-04 01:44 C:\WINNT\system32\cmd.exe]
"tscuninstall"="C:\winnt\system32\tscupgrd.exe" [2004-08-04 01:33]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
TV Remote Control.lnk - C:\Program Files\Terminator\TV7131 Utilities\P3XRCtl.exe [2007-04-29 11:48:25]

R3 Cap713x;Philips Cap713x Video Capture;C:\winnt\system32\DRIVERS\Cap713x.sys
R3 vmfilter303;vmfilter303;C:\winnt\system32\drivers\vmfilter303.sys
R3 ZSMC303;A4 TECH PC Camera H;C:\winnt\system32\Drivers\usbVM303.sys
S2 713xTVCard;SAA7131 TV Card;C:\winnt\system32\DRIVERS\SAA713x.sys
S3 P17;Sound Blaster Audigy;C:\winnt\system32\drivers\P17.sys
S3 s115bus;Sony Ericsson Device 115 driver (WDM);C:\winnt\system32\DRIVERS\s115bus.sys
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter;C:\winnt\system32\DRIVERS\s115mdfl.sys
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver;C:\winnt\system32\DRIVERS\s115mdm.sys
S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM);C:\winnt\system32\DRIVERS\s115mgmt.sys
S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface;C:\winnt\system32\DRIVERS\s115obex.sys
S3 s125bus;Sony Ericsson Device 125 driver (WDM);C:\winnt\system32\DRIVERS\s125bus.sys
S3 s125mdfl;Sony Ericsson Device 125 USB WMC Modem Filter;C:\winnt\system32\DRIVERS\s125mdfl.sys
S3 s125mdm;Sony Ericsson Device 125 USB WMC Modem Driver;C:\winnt\system32\DRIVERS\s125mdm.sys
S3 s125mgmt;Sony Ericsson Device 125 USB WMC Device Management Drivers (WDM);C:\winnt\system32\DRIVERS\s125mgmt.sys
S3 s125obex;Sony Ericsson Device 125 USB WMC OBEX Interface;C:\winnt\system32\DRIVERS\s125obex.sys
S3 Webcam Corp. Service Starter;Webcam Corp. Service Starter;C:\Program Files\Webcam\Webcam123\dogsvc.exe

.
Contents of the 'Scheduled Tasks' folder
"2007-11-14 07:44:01 C:\winnt\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1318 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-07 20:24:55
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-12-07 20:25:26
C:\ComboFix2.txt ... 2007-12-07 20:08
C:\ComboFix3.txt ... 2007-12-07 20:05
.
--- E O F ---

Logfile of HijackThis v1.99.1
Scan saved at 20:26:06, on 2007-12-07
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\winnt\System32\smss.exe
C:\winnt\system32\winlogon.exe
C:\winnt\system32\services.exe
C:\winnt\system32\lsass.exe
C:\winnt\system32\Ati2evxx.exe
C:\winnt\system32\svchost.exe
C:\winnt\System32\svchost.exe
C:\winnt\system32\Ati2evxx.exe
C:\winnt\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\winnt\system32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\winnt\SOUNDMAN.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\winnt\system32\svchost.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Program Files\Terminator\Quick TV\Scheduled.exe
C:\Program Files\Archivarius 3000\Archivarius3000.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\winnt\VMSnap3.EXE
C:\winnt\Domino.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\winnt\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Gadu-Gadu\gg.exe
D:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Terminator\TV7131 Utilities\P3XRCtl.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\winnt\system32\wuauclt.exe
C:\winnt\explorer.exe
C:\Documents and Settings\J A B O L\Moje dokumenty\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Flashget Catch Url Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: gFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [nTrayFw] C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINNT\UpdReg.EXE
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\winnt\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [Quick TV Agent] C:\Program Files\Terminator\Quick TV\Scheduled.exe
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [Archivarius 3000] C:\Program Files\Archivarius 3000\Archivarius3000.exe -AutoStart
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\wianmpa.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [VMSnap3] C:\winnt\VMSnap3.EXE
O4 - HKLM\..\Run: [Domino] C:\winnt\Domino.EXE
O4 - HKLM\..\Run: [BigDog303] C:\winnt\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
O4 - HKLM\..\Run: [Onet.pl AutoUpdate] "C:\Program Files\Common Files\Onet.pl\NewAutoUpdate.exe" /updateexetsr
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\winnt\system32\ctfmon.exe
O4 - HKCU\..\Run: [Creative MediaSource Go] "C:\Program Files\Creative\MediaSource\Go\CTCMSGo.exe" /SCB
O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [DAEMON Tools] "D:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Startup: Inforganizer.lnk = C:\Program Files\Inforganizer\Terminarz_Infor.exe
O4 - Global Startup: TV Remote Control.lnk = C:\Program Files\Terminator\TV7131 Utilities\P3XRCtl.exe
O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: &Ściągnij przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: &Ściągnij wszystko przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nvappfilter.dll
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://mppv2flash3.valueactive.com/UniBet/FlashAX.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{32577BB6-18A4-4F76-9574-8756EB755707}: NameServer = 192.168.0.1,213.199.225.10
O17 - HKLM\System\CS1\Services\Tcpip\..\{32577BB6-18A4-4F76-9574-8756EB755707}: NameServer = 192.168.0.1,213.199.225.10
O17 - HKLM\System\CS2\Services\Tcpip\..\{32577BB6-18A4-4F76-9574-8756EB755707}: NameServer = 192.168.0.1,213.199.225.10
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\winnt\system32\WPDShServiceObj.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\winnt\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINNT\system32\ati2sgag.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: Webcam Corp. Service Starter - Unknown owner - C:\Program Files\Webcam\Webcam123\dogsvc.exe (file missing)

A co do tej aplikacji to nie jestem ci w stanie powiedzieć, bo nie mam pojęcia co to

Zapewne jest to owoc jednego z idiotycznych pomysłów mojego brata. Chętnie to skasuje o ile później komputer sam nie wyskoczy mi przez okno w desperackim akcie ucieczki od mojej skromnej osoby :twisted:

**Posty:** 3854 · przez **Dzi@dek** 07 Gru 2007, 21:47

Jeśli nie znasz - odinstaluj w dodaj/usuń programy.

Start-uruchom-msconfig [enter]
Przejdź do zakładki uruchamianie i odznacz zbędne programy z autostartu.
Restart.
Powinno być lepiej.

**Posty:** 6 · przez **justyna19xxx** 08 Gru 2007, 09:13

powinno i jest zdecydowanie lepiej

Choć poniektóre strony nadal wczytują się bardzo powoli (pewnie to moje super mega szybkie łącze) to i tak poprawa jest znacząca, co cieszy mnie niezmiernie :lol:

Dziękuję ślicznie , uratowaliście kolejną niewiastę z opresji

Macie u mnie po dużym piwie ( wojtas19162 zgłoś się jak będziesz miał już dowód

)

Respekt

**Posty:** 3854 · przez **Dzi@dek** 08 Gru 2007, 10:34

Zrób tak:
Pobierz narzędzie ATF Cleaner
zaznacz w zakładce main oraz firefox - select all i kliknij Empty Select.

Następnie Start :arrow:

Programy

Akcesoria

Narzędzia systemowe :arrow:

Defragmentator Dysków i zrób defragmentację.

**Posty:** 6 · przez **justyna19xxx** 09 Gru 2007, 13:03

więc tak, zrobiłam wszystko co napisałeś ale nadal najbardziej interesujące mnie strony otwierają sie zaskakująco wolno ( złośliwość losu) dodam, że inne śmigają bardzo szybciutko. chodzi mi przede wszystkim o jeden portal na którym odbywają się licytacje, niestety połowa zdjęć się nie ładuje

Pewnie coś zepsułam sciana

.Poza tym poprawa znacząca, co jest zdecydowanie Twoją zasługą- o mistrzu chwała Ci

Dzięki wielkie

buziak w nosek

**Posty:** 3854 · przez **Dzi@dek** 09 Gru 2007, 15:04

sprawdź swoje łącze - jeśli parametry nie odbiegają od tych co powinny powodem może byc problem ze stroną
http://numion.com/YourSpeed3/Run.php?QuickStart=SelectDefaults
wykonaj test 2-3 razy.

proszę o sprawdzenie loga- problem z internetem

Proszę o sprawdzenie loga- Problem z internetem

Kto jest na forum