co to za procesy? czy poprawne?

[serenity15]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:12:37, on 2008-05-16
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\AutoConnect\AutoConnect.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Winamp\winamp.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Opera\Opera.exe
G:\hijackthis.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Statystyki dla ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{6587FA0D-4449-4493-BFE9-8C29A0E6F5A3}: NameServer = 194.204.152.34 217.98.63.164
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 6530 bytes

Wkleiłem sobie ten log na stronke:
http://www.hijackthis.de/

i mam takie cos


do jest dobre czy złe?

[Paxo202]

http://forum.programosy.pl/przeczytaj-zanim-wstawisz-logi-na-forum-vt93842.html

Poczytaj sobie i opisz dokładnie co dzieje Ci się z komputerem.

[serenity15]

combofix

ComboFix 08-05-15.3 - Administrator 2008-05-16 17:20:24.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1250.1.1045.18.2633 [GMT 2:00]
Running from: G:\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2008-04-16 to 2008-05-16 )))))))))))))))))))))))))))))))
.

2008-05-16 11:08 . 2008-05-16 11:08 69 --a--c--- C:\WINDOWS\NeroDigital.ini
2008-05-16 11:07 . 2008-05-16 11:07 <DIR> d----c--- C:\Documents and Settings\Administrator\Dane aplikacji\Media Player Classic
2008-05-16 10:04 . 2008-05-16 10:04 <DIR> d----c--- C:\Documents and Settings\Administrator\Moje dokumenty
2008-05-16 09:48 . 2008-05-16 09:48 <DIR> d----c--- C:\Program Files\jv16 PowerTools 2008
2008-05-16 08:34 . 2008-05-16 08:34 <DIR> d----c--- C:\Documents and Settings\All Users\Dane aplikacji\FLEXnet
2008-05-16 08:27 . 2008-05-16 08:34 <DIR> d----c--- C:\Program Files\Common Files\Adobe
2008-05-15 21:38 . 2008-05-15 21:38 <DIR> d----c--- C:\WINDOWS\Sun
2008-05-02 19:27 . 2008-05-02 19:27 <DIR> d----c--- C:\Program Files\MegauploadToolbar
2008-05-02 19:27 . 2008-05-16 11:01 <DIR> d----c--- C:\Documents and Settings\Administrator\Dane aplikacji\MegauploadToolbar
2008-05-02 15:10 . 2008-05-02 15:11 <DIR> d----c--- C:\Program Files\GameSpot
2008-05-02 15:10 . 2008-05-02 15:10 <DIR> d----c--- C:\Documents and Settings\All Users\temp
2008-05-02 15:10 . 2008-05-02 15:10 <DIR> d----c--- C:\Documents and Settings\All Users\Gamespot
2008-05-02 14:10 . 2007-04-04 18:55 261,480 --a--c--- C:\WINDOWS\system32\xactengine2_7.dll
2008-05-02 13:25 . 2008-05-02 13:25 <DIR> dr-h-c--- C:\Documents and Settings\Administrator\Dane aplikacji\SecuROM
2008-05-02 13:25 . 2008-05-02 13:25 107,888 --a--c--- C:\WINDOWS\system32\CmdLineExt.dll
2008-05-02 11:26 . 2008-05-02 11:36 <DIR> d----c--- C:\Documents and Settings\Administrator\Dane aplikacji\GetRightToGo
2008-05-02 10:30 . 2007-03-12 16:42 3,495,784 --a--c--- C:\WINDOWS\system32\d3dx9_33.dll
2008-05-02 10:30 . 2007-03-12 16:42 1,123,696 --a--c--- C:\WINDOWS\system32\D3DCompiler_33.dll
2008-05-02 10:30 . 2007-03-15 16:57 443,752 --a--c--- C:\WINDOWS\system32\d3dx10_33.dll
2008-05-02 10:27 . 2008-05-02 10:27 <DIR> d--hsc--- C:\WINDOWS\ftpcache
2008-05-01 12:14 . 2008-05-01 14:13 <DIR> d--hsc--- C:\Boot
2008-05-01 12:14 . 2008-01-21 04:49 333,203 -rahs---- C:\bootmgr
2008-05-01 11:30 . 2008-05-01 11:30 171,136 -rahsc--- C:\grldr
2008-05-01 11:27 . 2008-05-01 13:24 <DIR> d--hsc--- C:\$RECYCLE.BIN
2008-04-30 21:11 . 2008-04-30 21:11 <DIR> d----c--- C:\WINDOWS\VirtualEar
2008-04-30 21:11 . 2008-04-30 21:11 <DIR> d----c--- C:\Program Files\Analog Devices
2008-04-30 21:11 . 2001-09-11 14:20 1,285,632 --a--c--- C:\WINDOWS\system32\SMMedia.dll
2008-04-30 21:11 . 2001-10-04 14:50 991,232 --a--c--- C:\WINDOWS\system32\virtear.dll
2008-04-30 21:11 . 2001-09-19 12:47 765,952 --a--c--- C:\WINDOWS\system\crlds3d.dll
2008-04-30 21:11 . 2004-09-14 12:55 88,960 --a--c--- C:\WINDOWS\system32\drivers\MidiSyn.sys
2008-04-30 21:11 . 2003-08-19 18:36 65,536 --a--c--- C:\WINDOWS\system32\Audio3d.dll
2008-04-30 21:11 . 2004-12-08 16:16 49,152 --a--c--- C:\WINDOWS\system32\DSndUp.exe
2008-04-30 21:11 . 2002-04-17 14:05 45,056 --a--c--- C:\WINDOWS\system32\CleanUp.exe
2008-04-30 21:11 . 2001-09-11 14:20 30,208 --a--c--- C:\WINDOWS\system32\wdmioctl.dll
2008-04-30 21:08 . 2008-04-30 21:08 <DIR> d----c--- C:\Program Files\Common Files\InstallShield
2008-04-30 21:02 . 2006-10-26 19:56 32,592 --a--c--- C:\WINDOWS\system32\msonpmon.dll
2008-04-30 21:01 . 2008-04-30 21:01 <DIR> d----c--- C:\Program Files\Microsoft Works
2008-04-30 21:00 . 2008-04-30 21:00 <DIR> d----c--- C:\Program Files\Microsoft.NET
2008-04-30 20:58 . 2008-04-30 20:58 <DIR> d----c--- C:\Program Files\Microsoft Visual Studio 8
2008-04-30 20:57 . 2008-04-30 20:57 <DIR> d----c--- C:\WINDOWS\SHELLNEW
2008-04-30 20:57 . 2008-04-30 21:06 <DIR> d----c--- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help
2008-04-30 20:30 . 2008-04-30 20:36 96,645 --a--c--- C:\WINDOWS\system32\drivers\klin.dat
2008-04-30 20:30 . 2008-04-30 20:36 87,941 --a--c--- C:\WINDOWS\system32\drivers\klick.dat
2008-04-30 20:29 . 2008-04-30 20:29 <DIR> d----c--- C:\Program Files\Kaspersky Lab
2008-04-30 20:29 . 2008-05-15 19:02 <DIR> d----c--- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab
2008-04-30 20:29 . 2008-05-16 17:22 9,924,128 --ahsc--- C:\WINDOWS\system32\drivers\fidbox.dat
2008-04-30 20:29 . 2008-05-16 17:22 200,992 --ahsc--- C:\WINDOWS\system32\drivers\fidbox2.dat
2008-04-30 20:29 . 2008-05-16 09:22 142,964 --ahsc--- C:\WINDOWS\system32\drivers\fidbox.idx
2008-04-30 20:29 . 2008-05-16 09:22 22,028 --ahsc--- C:\WINDOWS\system32\drivers\fidbox2.idx
2008-04-30 19:21 . 2008-04-30 19:21 716,272 --a--c--- C:\WINDOWS\system32\drivers\sptd.sys
2008-04-30 17:59 . 2008-04-30 17:59 505,128 --a--c--- C:\WINDOWS\system32\msvcp71.dll
2008-04-30 17:59 . 2008-04-30 17:59 29,480 --a--c--- C:\WINDOWS\system32\msxml3a.dll
2008-04-30 17:55 . 2008-04-30 17:55 <DIR> d----c--- C:\Program Files\InterVideo
2008-04-30 17:55 . 2008-04-30 17:55 <DIR> d----c--- C:\Program Files\Common Files\Protexis
2008-04-30 17:55 . 2008-04-30 17:55 <DIR> d----c--- C:\Program Files\Common Files\InterVideo
2008-04-30 17:55 . 2008-04-30 17:55 <DIR> d----c--- C:\Documents and Settings\All Users\Dane aplikacji\Corel
2008-04-30 17:55 . 2005-09-20 17:27 10,368 --a--c--- C:\WINDOWS\system32\drivers\iviaspi.sys
2008-04-30 17:54 . 2008-04-30 17:54 <DIR> d----c--- C:\Program Files\Corel
2008-04-30 17:43 . 2008-04-30 17:43 <DIR> d----c--- C:\Documents and Settings\Administrator\Dane aplikacji\Corel
2008-04-30 17:43 . 2008-05-04 00:30 5,642 --ahsc--- C:\Documents and Settings\All Users\Dane aplikacji\KGyGaAvL.sys
2008-04-30 17:43 . 2008-04-30 17:55 168 -r-hsc--- C:\Documents and Settings\All Users\Dane aplikacji\4844DB46C6.sys
2008-04-30 17:42 . 2008-04-30 21:11 <DIR> d--h-c--- C:\Program Files\InstallShield Installation Information
2008-04-30 17:37 . 2008-04-30 17:37 <DIR> d----c--- C:\Program Files\Webteh
2008-04-30 17:37 . 2008-05-15 21:46 <DIR> d----c--- C:\Documents and Settings\Administrator\Dane aplikacji\BSplayer PRO
2008-04-30 17:28 . 2008-04-30 17:28 <DIR> d----c--- C:\Program Files\K-Lite Codec Pack
2008-04-30 17:28 . 2008-03-21 22:30 3,596,288 --a--c--- C:\WINDOWS\system32\qt-dx331.dll
2008-04-30 17:14 . 2008-04-30 17:14 <DIR> d----c--- C:\Program Files\Opera
2008-04-30 17:06 . 2008-05-16 10:50 <DIR> d----c--- C:\Program Files\AutoConnect
2008-04-30 17:05 . 2008-04-30 17:05 <DIR> d----c--- C:\WINDOWS\system32\InsFiles
2008-04-25 16:09 . 2008-04-25 16:09 1,571,840 --a--c--- C:\WINDOWS\system32\sfcfiles.dll
2008-04-25 16:09 . 2008-04-25 16:09 999,936 --a--c--- C:\WINDOWS\system32\syssetup.dll
2008-04-25 16:07 . 2008-04-25 16:07 2,603,008 --a------ C:\WINDOWS\system32\wpdshext.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-16 15:08 --------- dc----w C:\Documents and Settings\Administrator\Dane aplikacji\uTorrent
2008-05-16 08:56 --------- dc----w C:\Program Files\eMule
2008-04-30 20:37 --------- dc----w C:\Program Files\NAPI-PROJEKT
2008-04-30 19:00 --------- dc----w C:\Program Files\MSBuild
2008-04-30 16:49 --------- dc----w C:\Program Files\Reference Assemblies
2008-04-30 16:24 --------- dc----w C:\Program Files\BitComet
2008-04-30 16:23 --------- dc----w C:\Program Files\uTorrent
2008-04-30 16:16 --------- dc----w C:\Program Files\Java
2008-04-30 16:16 --------- dc----w C:\Documents and Settings\Administrator\Dane aplikacji\Gadu-Gadu
2008-04-30 16:15 --------- dc----w C:\Program Files\Common Files\Java
2008-04-30 16:14 --------- dc----w C:\Program Files\Gadu-Gadu
2008-04-30 16:13 --------- dc----w C:\Documents and Settings\Administrator\Dane aplikacji\Winamp
2008-04-30 16:11 --------- dc----w C:\Program Files\Winamp
2008-04-30 16:10 --------- dc----w C:\Program Files\NeroInstall.bak
2008-04-30 16:09 --------- dc----w C:\Documents and Settings\Administrator\Dane aplikacji\Nero
2008-04-30 16:08 --------- dc----w C:\Program Files\Common Files\Nero
2008-04-30 16:07 --------- dc----w C:\Program Files\Nero
2008-04-30 16:07 --------- dc----w C:\Documents and Settings\All Users\Dane aplikacji\Nero
2008-04-30 16:03 --------- dc----w C:\Documents and Settings\All Users\Dane aplikacji\Office Genuine Advantage
2008-04-30 16:01 --------- dc----w C:\Documents and Settings\All Users\Dane aplikacji\CyberLink
2008-04-30 16:00 --------- dc----w C:\Program Files\CyberLink
2008-04-30 16:00 --------- dc----w C:\Program Files\Common Files\CyberLink
2008-04-30 16:00 --------- dc----w C:\Documents and Settings\Administrator\Dane aplikacji\CyberLink
2008-04-30 15:59 353,576 -c--a-w C:\WINDOWS\system32\msvcr71.dll
2008-04-30 14:38 --------- dc----w C:\Program Files\microsoft frontpage
2008-04-30 14:36 --------- dc----w C:\Program Files\Usługi online
2008-04-30 14:34 --------- dc----w C:\Program Files\Windows Media Connect 2
2008-04-25 14:07 991,744 -c--a-w C:\WINDOWS\system32\drmv2clt.dll
2008-04-14 23:16 1,804 -c--a-w C:\WINDOWS\system32\Dcache.bin
2008-04-14 22:56 332,288 -c--a-w C:\WINDOWS\system32\netsetup.exe
2008-04-14 22:52 92,424 -c--a-w C:\WINDOWS\system32\rdpdd.dll
2008-04-14 22:52 87,176 -c--a-w C:\WINDOWS\system32\rdpwsx.dll
2008-04-14 22:52 299,520 -c--a-w C:\WINDOWS\system32\drmclien.dll
2008-04-14 22:52 21,896 -c--a-w C:\WINDOWS\system32\drivers\tdtcp.sys
2008-04-14 22:52 139,656 -c--a-w C:\WINDOWS\system32\drivers\rdpwd.sys
2008-04-14 22:52 12,168 -c--a-w C:\WINDOWS\system32\tsddd.dll
2008-04-14 22:52 12,040 -c--a-w C:\WINDOWS\system32\drivers\tdpipe.sys
2008-04-14 22:50 997,888 ----a-w C:\WINDOWS\system32\setupapi.dll
2008-04-14 22:49 98,304 -c--a-w C:\WINDOWS\system32\actxprxy.dll
2008-04-14 22:48 5,632 ----a-w C:\WINDOWS\system32\wmi.dll
2008-04-14 22:48 1,449,472 -c--a-w C:\WINDOWS\system32\winntbbu.dll
2008-04-14 22:47 57,375 -c--a-w C:\WINDOWS\system32\odbcji32.dll
2008-04-14 22:47 103,424 -c--a-w C:\WINDOWS\system32\dpcdll.dll
2008-04-14 22:43 4,126 -c--a-w C:\WINDOWS\system32\msdxmlc.dll
2008-04-14 22:42 3,584 -c--a-w C:\WINDOWS\system32\msafd.dll
2008-04-14 22:36 3,584 -c--a-w C:\WINDOWS\system32\icmp.dll
2008-04-14 22:35 9,344 ----a-w C:\WINDOWS\system32\framebuf.dll
2008-04-14 22:35 569,856 -c--a-w C:\WINDOWS\system32\gpedit.dll
2008-04-14 22:33 3,072 -c--a-w C:\WINDOWS\system32\dpnlobby.dll
2008-04-14 22:33 3,072 -c--a-w C:\WINDOWS\system32\dpnaddr.dll
2008-04-14 22:33 24,064 -c--a-w C:\WINDOWS\system32\pidgen.dll
2008-04-14 22:31 16,896 -c--a-w C:\WINDOWS\system32\cfgmgr32.dll
2008-04-14 22:30 285,696 -c--a-w C:\WINDOWS\system32\atmfd.dll
2008-04-14 22:04 73,472 -c--a-w C:\WINDOWS\system32\drivers\sr.sys
2008-04-14 22:03 68,608 -c--a-w C:\WINDOWS\system32\drivers\pci.sys
2008-04-14 22:03 120,320 -c--a-w C:\WINDOWS\system32\drivers\pcmcia.sys
2008-04-14 21:59 2,146,816 -c--a-w C:\WINDOWS\system32\ntoskrnl.exe
2008-04-14 21:55 4,096 -c--a-w C:\WINDOWS\system32\dsprpres.dll
2008-04-14 21:52 89,600 -c--a-w C:\WINDOWS\system32\msxml6r.dll
2008-04-14 21:52 800,000 -c--a-w C:\WINDOWS\system32\drivers\dmboot.sys
2008-04-14 21:52 153,856 -c--a-w C:\WINDOWS\system32\drivers\dmio.sys
2008-04-14 21:50 80,896 -c--a-w C:\WINDOWS\system32\msshavmsg.dll
2008-04-14 21:50 24,960 -c--a-w C:\WINDOWS\system32\drivers\kbdclass.sys
2008-04-14 21:48 37,632 -c--a-w C:\WINDOWS\system32\drivers\isapnp.sys
2008-04-14 21:46 5,504 -c--a-w C:\WINDOWS\system32\drivers\intelide.sys
2008-04-14 21:46 40,448 -c--a-w C:\WINDOWS\system32\drivers\intelppm.sys
2008-04-14 21:45 49,664 -c--a-w C:\WINDOWS\system32\inetres.dll
2008-04-14 21:43 563,200 ----a-w C:\WINDOWS\system32\shdoclc.dll
2008-04-14 21:41 65,280 -c--a-w C:\WINDOWS\system32\drivers\serial.sys
2008-04-14 21:41 53,248 -c--a-w C:\WINDOWS\system32\drivers\i8042prt.sys
2008-04-14 21:37 10,240 -c--a-w C:\WINDOWS\system32\gpkrsrc.dll
2008-04-14 21:35 67,584 ----a-w C:\WINDOWS\system32\browselc.dll
2008-04-14 21:35 58,880 -c--a-w C:\WINDOWS\system32\drivers\redbook.sys
2008-04-14 21:35 1,845,888 ----a-w C:\WINDOWS\system32\win32k.sys
2008-04-14 21:33 44,672 -c--a-w C:\WINDOWS\system32\drivers\fips.sys
2008-04-14 21:31 52,864 -c--a-w C:\WINDOWS\system32\drivers\volsnap.sys
2008-04-14 21:24 69,552 -c--a-w C:\WINDOWS\system32\mmsystem.dll
2008-04-14 21:24 188,544 -c--a-w C:\WINDOWS\system32\drivers\acpi.sys
2008-04-14 20:52 40,840 -c--a-w C:\WINDOWS\system32\drivers\termdd.sys
2008-04-14 20:51 294,912 -c--a-w C:\WINDOWS\system32\msh263.drv
2008-04-14 20:51 23,552 -c--a-w C:\WINDOWS\system32\wdmaud.drv
2008-04-14 20:50 4,096 -c--a-w C:\WINDOWS\system32\ksuser.dll
2008-04-14 00:58 175,744 -c--a-w C:\WINDOWS\system32\drivers\rdbss.sys
2008-04-14 00:51 162,816 -c--a-w C:\WINDOWS\system32\drivers\netbt.sys
2008-04-14 00:50 91,520 -c--a-w C:\WINDOWS\system32\drivers\ndiswan.sys
2008-04-14 00:50 361,344 -c--a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-04-14 00:50 182,656 -c--a-w C:\WINDOWS\system32\drivers\ndis.sys
2008-04-14 00:49 75,264 -c--a-w C:\WINDOWS\system32\drivers\ipsec.sys
2008-04-14 00:49 51,328 -c--a-w C:\WINDOWS\system32\drivers\rasl2tp.sys
2008-04-14 00:49 48,384 -c--a-w C:\WINDOWS\system32\drivers\raspptp.sys
2008-04-14 00:49 138,112 -c--a-w C:\WINDOWS\system32\drivers\afd.sys
2008-04-14 00:47 456,576 -c--a-w C:\WINDOWS\system32\drivers\mrxsmb.sys
2008-04-14 00:47 105,344 -c--a-w C:\WINDOWS\system32\drivers\mup.sys
2008-04-14 00:46 49,536 -c--a-w C:\WINDOWS\system32\drivers\classpnp.sys
2008-04-14 00:45 574,976 -c--a-w C:\WINDOWS\system32\drivers\ntfs.sys
2008-04-14 00:45 334,848 -c--a-w C:\WINDOWS\system32\drivers\srv.sys
2008-04-14 00:44 63,744 -c--a-w C:\WINDOWS\system32\drivers\cdfs.sys
2008-04-14 00:44 143,744 -c--a-w C:\WINDOWS\system32\drivers\fastfat.sys
2008-04-14 00:30 225,664 -c--a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-04-14 00:30 19,072 -c--a-w C:\WINDOWS\system32\drivers\tdi.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AutoConnect"="C:\Program Files\AutoConnect\AutoConnect.exe" [2004-08-28 20:27 295424]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-15 00:51 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-07-20 15:07 7110656]
"nwiz"="nwiz.exe" [2005-07-20 15:07 1519616 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2005-07-20 15:07 86016]
"AdslTaskBar"="stmctrl.dll" [2006-06-02 11:01 151552 C:\WINDOWS\system32\stmctrl.dll]
"SoundMAXPnP"="C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 09:11 1388544]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-15 00:51 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="regsvr32 /s /n /i:U shell32" []

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.YV12"= yv12vfw.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"H:\\Company of Heroes\\RelicCOH.exe"=

R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};C:\Program Files\CyberLink\PowerDVD8\000.fcl [2008-02-01 17:24]
R2 PSI_SVC_2;Protexis Licensing V2;"C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe" [2007-07-24 11:15]
R2 regi;regi;C:\WINDOWS\system32\drivers\regi.sys [2007-04-17 20:09]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\DRIVERS\klim5.sys [2007-12-13 13:28]
R3 Stmatm;ATM/ADSL miniport;C:\WINDOWS\system32\DRIVERS\stmatm.sys [2003-08-12 14:51]
R3 TaurusUsb;ADSL Modem USB Service;C:\WINDOWS\system32\DRIVERS\torususb.sys [2006-05-25 15:28]

.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-16 17:22:12
Windows 5.1.2600 Dodatek Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}]
"ImagePath"="\??\C:\Program Files\CyberLink\PowerDVD8\000.fcl"
.
Completion time: 2008-05-16 17:23:30
ComboFix-quarantined-files.txt 2008-05-16 15:23:27

Pre-Run: 4,292,153,344 bajtów wolnych
Post-Run: 4,297,400,320 bajtów wolnych

247

Z komputerem nic sie nie dzieje ale zastanawiają mnie co to za procesy które zaznaczyłem bo chyba nie neostrada...

[Okocza]

Z komputerem nic sie nie dzieje

na forum nie ma prewencji a te procesy to usługi sieciowe

[wojtas]

nie posługuj się tą stronką:

http://www.hijackthis.de/

czasami każe usuwać dobre wpisy lub omija syf