Error markfun_load_nt_driver & 2 zagrożenia z bit comet

**Posty:** 8 · przez **bartosz121** 24 Lis 2008, 00:59

Nie znam pewnych komunikatów i nie wiem jak się dowiedzieć co to oznacza, jak by mi ktoś mógł poradzić jak to sprawdzać .Mam od początku posiadania komputera prawie rok taki komunikat który wyskakuje od razu po włączeniu komputera tzn.jak uruchamia się pulpit wyskakuje coś takiego w ramce ( Error Mark Fun_load_NT_Driver ) ....czy ktoś może mi wyjaśnić jak tego się pozbyć mam program easy tune i płytę gigabyte podejrzewam że komunikat jest związany z płytą lub tym programem ale nie jestem pewny proszę o poradę...
mój komputer to ;

Intel core2duo E6320 1,86 GHz
2 razy 1024 MB DDR-2 PC800 Kingston i 2 razy 512 MB Kingston dual chanell
WD Caviar 250 GB Sata-2 16MB Cache
Gigabyte GA-965P-DS3
Galaxy 7900GS Super 256 DDR3
ATX TRACER XENO 400W 12CM+PFC

zmieniłem także program antywirusowy z AVG na NOD 32 i wykrył mi zagrożenia związane z bit Comet poprzedni program nie wykrył zagrożeń wstawiam loga z noda i proszę o sprawdzenie i poradę..

Kod: Zaznacz wszystko: Scan Log Version of virus signature database: 2945 (20080313) Date: 2008-11-23 Time: 23:12:19 Scanned disks, folders and files: Operating memory;A:\Boot sector;A:\;C:\Boot sector;C:\;D:\Boot sector;D:\;E:\Boot sector;E:\;F:\Boot sector;F:\;G:\Boot sector;G:\;H:\Boot sector;H:\;I:\Boot sector;I:\;J:\Boot sector;J:\;K:\Boot sector;K:\;L:\Boot sector;L:\ Boot sector of disk A: - error opening [4] A:\ - error opening [4] D:\gitara\tabulatury\tab zbiór 3\Taby\Hendrix Jimi\Little Wing Lesson Tab.mht » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\Led Zeppelin\Led Zeppelin Tablature - Indexed by Album.mht » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\Led Zeppelin\bbc_sessions\Stairway to heaven.mht » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\Lessons\warmup exercises.tab » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\Santana\Santana - black magic woman tab.mht » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\01 - Pouncake.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\01 - Return of the Warlord.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\03 - Spanked.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\04 - Amsterdam.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\04 - Cabo.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\04 - Runaround.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\10 - 316.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\aceleb.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\acquiesce.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\angie.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\daysleeper.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\foxy lady tab.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\from me to you.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\fromdespair.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\gimme shelter.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\going home.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\halleluj.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\Helpless.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\honky tonk women.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\in the gallery.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\killrocknroll.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\loving cup.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\news.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\ohgeorge.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\planet of new orleans.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\private investigations.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\threesun.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\threnody.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\twisting by the pool.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\walk of life.txt » MIME - is OK (internal scanning not performed) D:\gitara\tabulatury\tab zbiór 3\Taby\_Unsorted Text\whenicomearound.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\Hendrix Jimi\Little Wing Lesson Tab.mht » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\Led Zeppelin\bbc_sessions\Stairway to heaven.mht » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\Led Zeppelin\Led Zeppelin Tablature - Indexed by Album.mht » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\Lessons\warmup exercises.tab » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\Santana\Santana - black magic woman tab.mht » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\01 - Pouncake.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\01 - Return of the Warlord.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\03 - Spanked.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\04 - Amsterdam.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\04 - Cabo.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\04 - Runaround.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\10 - 316.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\aceleb.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\acquiesce.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\angie.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\daysleeper.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\foxy lady tab.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\from me to you.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\fromdespair.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\gimme shelter.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\going home.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\halleluj.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\Helpless.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\honky tonk women.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\in the gallery.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\killrocknroll.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\loving cup.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\news.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\ohgeorge.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\planet of new orleans.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\private investigations.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\threesun.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\threnody.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\twisting by the pool.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\walk of life.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Guitar Pro Tabs.rar » RAR » Taby\_Unsorted Text\whenicomearound.txt » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » brushtip_corel_01_001.pspscr » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » double_const.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test__locale.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_bigaddrspace.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_bigmem.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_bufio.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_cgi.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_codecs.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_contains.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_deque.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_dis.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_extcall.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_format.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_funcattrs.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_future3.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_gc.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_import.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_linuxaudiodev.p.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_locale.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_long_future.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_mmap.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_mutants.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_new.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_nis.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_normalization.p.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_ossaudiodev.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_quopri.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_scope.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_softspace.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_sort.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_sqlite.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_struct.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_sunaudiodev.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_symtable.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_time.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_uuid.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_wave.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_wsgiref.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » testtar.tar.0160FC08_F3D9_4869_9D41_C611C16F42D5 » TAR » test/test/test/test/test/test/test/test/test/test/test/test/test/test/test/test/test/test/test/test/ - archive damaged E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_numbers.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_loading.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_keeprefs.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_init.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_cast.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_buffers.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_bitfields.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_varsize_struct..0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_repr.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_random_things.p.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_python_api.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » test_prototypes.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » searchdialogbase.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » searchdialog.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » scrolledlist.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » replacedialog.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » percolator.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » outputwindow.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » multistatusbar.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » idlehistory.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » windowlist.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » widgetredirector.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » schema.py.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_09.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_08.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_07.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_06.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_05.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_04.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_03.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_02.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_01.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_44.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_43.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_42.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_41.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_40.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_39.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_38.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_37.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_36.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_35.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_34.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_31.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_30.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_29.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_28.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_27.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_26.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_25.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_24.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_23.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_22.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_21.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_20.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_18.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_17.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_16.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_15.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_14.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_13.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_12a.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_12.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_11.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Corel Paint Shop Pro Photo X2 v12.01 [PL] [Full]\Corel Paint Shop Pro Photo X2 v12.01\Data1.cab » CAB » msg_10.txt.0160FC08_F3D9_4869_9D41_C611C16F42D5 » MIME - is OK (internal scanning not performed) E:\multimedialne\Odwrocic Przeznaczenie-NewDVD\op-NewDVD.part001.rar » RAR » - next archive volume not found E:\użytkowe\Office 2007 PL - rar\o2k7p.part1.rar » RAR » - next archive volume not found E:\użytkowe\Office 2007 PL - rar\o2k7p.part2.rar » RAR » - next archive volume not found E:\użytkowe\Office 2007 PL - rar\o2k7p.part3.rar » RAR » - next archive volume not found E:\użytkowe\Office 2007 PL - rar\o2k7p.part4.rar » RAR » - next archive volume not found E:\użytkowe\Office 2007 PL - rar\o2k7p.part5.rar » RAR » - next archive volume not found E:\użytkowe\Office 2007 PL - rar\o2k7p.part6.rar » RAR » - next archive volume not found E:\użytkowe\Office 2007 PL - rar\o2k7p.part7.rar » RAR » - next archive volume not found E:\użytkowe\Office 2007 PL - rar\Enterprise.WW\EnterWW.cab » CAB » PROCESS_LIBRARY.FDT » MIME - is OK (internal scanning not performed) E:\użytkowe\Office 2007 PL - rar\Enterprise.WW\EnterWW.cab » CAB » HIRING_REQUISITION_CUSTOMIZED.FDT » MIME - is OK (internal scanning not performed) E:\użytkowe\Office 2007 PL - rar\Enterprise.WW\EnterWW.cab » CAB » HARDWARE_TRACKER.FDT » MIME - is OK (internal scanning not performed) E:\użytkowe\Office 2007 PL - rar\Enterprise.WW\EnterWW.cab » CAB » HIRING_REQUISITION.FDT » MIME - is OK (internal scanning not performed) E:\użytkowe\Office 2007 PL - rar\Enterprise.WW\EnterWW.cab » CAB » CUSTOMER_SUPPORT.FDT » MIME - is OK (internal scanning not performed) E:\użytkowe\Office 2007 PL - rar\Enterprise.WW\EnterWW.cab » CAB » TRACK_ISSUES.FDT » MIME - is OK (internal scanning not performed) E:\użytkowe\Office 2007 PL - rar\Enterprise.WW\EnterWW.cab » CAB » STATUS_REPORT.FDT » MIME - is OK (internal scanning not performed) E:\użytkowe\Office 2007 PL - rar\Enterprise.WW\EnterWW.cab » CAB » POLICIES.FDT » MIME - is OK (internal scanning not performed) F:\pagefile.sys - error opening [4] F:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy\Recovery\FraudXPAntivirus.zip » ZIP » sbRecovery.reg - error - password-protected file F:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy\Recovery\FraudXPAntivirus.zip » ZIP » sbRecovery.ini - error - password-protected file F:\Documents and Settings\Bartek\NTUSER.DAT - error opening [4] F:\Documents and Settings\Bartek\ntuser.dat.LOG - error opening [4] F:\Documents and Settings\Bartek\Dane aplikacji\Mozilla\Firefox\Profiles\5kllfmfa.default\parent.lock - error opening [4] F:\Documents and Settings\Bartek\Dane aplikacji\Mozilla\Firefox\Profiles\5kllfmfa.default\places.sqlite-journal - error opening [4] F:\Documents and Settings\Bartek\Moje dokumenty\My PSP Files\Wzorce\Preset_MeshWarping_ Ostatnio zastosowane.PspScript » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\BitComet_1.06_setup.exe » NSIS » BitComet.exe » PECompact v2.xx - probably unknown NewHeur_PE virus [7] F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\BitComet_1.06_setup.exe » NSIS » passport_info_en_us.mht » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\BitComet_1.06_setup.exe » NSIS » passport_info_zh_cn.mht » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\BitComet_1.06_setup.exe » NSIS » passport_login_en_us.mht » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\BitComet_1.06_setup.exe » NSIS » passport_login_zh_cn.mht » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\AVI_ReComp_1.4.3_Setup.exe » NSIS » AVIReComp.exe » PECompact v2.xx - unpack error F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\AVI_ReComp_1.4.3_Setup.exe » NSIS » MediaInfo.dll » PECompact v2.xx - unpack error F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\AVI_ReComp_1.4.3_Setup.exe » NSIS » AVIReCompShell.exe » PECompact v2.xx - unpack error F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\AVI_ReComp_1.4.3_Setup.exe » NSIS » VobSub_2.23.exe » NSIS - bad archive F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » visitor.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » MultiStatusBar.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » OutputWindow.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » Percolator.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » ReplaceDialog.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » ScrolledList.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » SearchDialog.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » SearchDialogBase.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » WidgetRedirector.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » WindowList.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » whatsound.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » double_const.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_bufio.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_cgi.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_codecs.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_contains.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_dis.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_extcall.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_format.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_funcattrs.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_future3.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_gc.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_gzip.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_import.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_linuxaudiodev.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_locale.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_long.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_long_future.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_marshal.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_mmap.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_mutants.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_new.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_nis.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_normalization.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_ossaudiodev.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_quopri.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_regex.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_scope.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_softspace.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_sort.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_struct.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_structseq.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_sunaudiodev.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_symtable.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_time.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_timing.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_tokenize.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_unpack.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_urllib2.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_wave.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » test_xreadline.py » MIME - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\OOo_2.4.1_Win32Intel_install_wJRE_pl.exe » NSIS » openoffice.org-pyuno.cab » CAB » testtar.tar » TAR » - archive damaged F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\SetupAnyDVD6462.exe » NSIS - bad archive F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\instalki\SVGView.exe » GZIP » - archive damaged F:\Documents and Settings\Bartek\Ustawienia lokalne\Dane aplikacji\Identities\{6EE7F501-71E8-405B-B1C4-EF0216187EED}\Microsoft\Outlook Express\Skrzynka odbiorcza.dbx » DBX - is OK (internal scanning not performed) F:\Documents and Settings\Bartek\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat - error opening [4] F:\Documents and Settings\Bartek\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat.LOG - error opening [4] F:\Documents and Settings\LocalService\NTUSER.DAT - error opening [4] F:\Documents and Settings\LocalService\ntuser.dat.LOG - error opening [4] F:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat - error opening [4] F:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat.LOG - error opening [4] F:\Documents and Settings\NetworkService\NTUSER.DAT - error opening [4] F:\Documents and Settings\NetworkService\ntuser.dat.LOG - error opening [4] F:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat - error opening [4] F:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat.LOG - error opening [4] F:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-F\EnterWW.cab » CAB » PROCESS_LIBRARY.FDT » MIME - is OK (internal scanning not performed) F:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-F\EnterWW.cab » CAB » HIRING_REQUISITION_CUSTOMIZED.FDT » MIME - is OK (internal scanning not performed) F:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-F\EnterWW.cab » CAB » HARDWARE_TRACKER.FDT » MIME - is OK (internal scanning not performed) F:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-F\EnterWW.cab » CAB » HIRING_REQUISITION.FDT » MIME - is OK (internal scanning not performed) F:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-F\EnterWW.cab » CAB » CUSTOMER_SUPPORT.FDT » MIME - is OK (internal scanning not performed) F:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-F\EnterWW.cab » CAB » TRACK_ISSUES.FDT » MIME - is OK (internal scanning not performed) F:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-F\EnterWW.cab » CAB » STATUS_REPORT.FDT » MIME - is OK (internal scanning not performed) F:\MSOCache\All Users\{90120000-0030-0000-0000-0000000FF1CE}-F\EnterWW.cab » CAB » POLICIES.FDT » MIME - is OK (internal scanning not performed) F:\Program Files\Ahead\Nero\Eula_esp.txt » MIME - is OK (internal scanning not performed) F:\Program Files\Ahead\Nero\Eula_fra.txt » MIME - is OK (internal scanning not performed) F:\Program Files\Ahead\Nero\Eula_ita.txt » MIME - is OK (internal scanning not performed) F:\Program Files\Ahead\Nero\Eula_ptg.txt » MIME - is OK (internal scanning not performed) F:\Program Files\Ahead\Nero\CDI\CDI_VCD.CFG » MIME - is OK (internal scanning not performed) F:\Program Files\AVI ReComp\AVIReComp.exe » PECompact v2.xx - unpack error F:\Program Files\AVI ReComp\AVIReCompShell.exe » PECompact v2.xx - unpack error F:\Program Files\AVI ReComp\MediaInfo.dll » PECompact v2.xx - unpack error F:\Program Files\BitComet\BitComet.exe » PECompact v2.xx - probably unknown NewHeur_PE virus [7] F:\Program Files\BitComet\fav\passport_info_en_us.mht » MIME - is OK (internal scanning not performed) F:\Program Files\BitComet\fav\passport_info_zh_cn.mht » MIME - is OK (internal scanning not performed) F:\Program Files\BitComet\fav\passport_info_zh_tw.mht » MIME - is OK (internal scanning not performed) F:\Program Files\BitComet\fav\passport_login_en_us.mht » MIME - is OK (internal scanning not performed) F:\Program Files\BitComet\fav\passport_login_zh_cn.mht » MIME - is OK (internal scanning not performed) F:\Program Files\BitComet\fav\passport_login_zh_tw.mht » MIME - is OK (internal scanning not performed) F:\Program Files\Common Files\Java\Update\Base Images\jre1.6.0.b105\core3.zip » ZIP » lib/deploy/ffjcext.zip » ZIP » {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}/chrome.manifest » MIME - is OK (internal scanning not performed) F:\Program Files\Common Files\Java\Update\Base Images\jre1.6.0.b105\core3.zip » ZIP » lib/resources.jar » ZIP » com/sun/org/apache/xerces/internal/impl/msg/XIncludeMessages.properties » MIME - is OK (internal scanning not performed) F:\Program Files\Common Files\Java\Update\Base Images\jre1.6.0.b105\core3.zip » ZIP » lib/resources.jar » ZIP » com/sun/xml/internal/fastinfoset/resources/ResourceBundle.properties » MIME - is OK (internal scanning not performed) F:\Program Files\Common Files\Java\Update\Base Images\jre1.6.0.b105\core3.zip » ZIP » lib/resources.jar » ZIP » javax/xml/bind/Messages.properties » MIME - is OK (internal scanning not performed) F:\Program Files\Common Files\LightScribe\Content\Getting Started.mht » MIME - is OK (internal scanning not performed) F:\Program Files\Gabest\VobSub\uninstall.exe » NSIS - bad archive F:\Program Files\Java\jre1.6.0_04\lib\resources.jar » ZIP » com/sun/org/apache/xerces/internal/impl/msg/XIncludeMessages.properties » MIME - is OK (internal scanning not performed) F:\Program Files\Java\jre1.6.0_04\lib\resources.jar » ZIP » com/sun/xml/internal/fastinfoset/resources/ResourceBundle.properties » MIME - is OK (internal scanning not performed) F:\Program Files\Java\jre1.6.0_04\lib\resources.jar » ZIP » javax/xml/bind/Messages.properties » MIME - is OK (internal scanning not performed) F:\Program Files\Java\jre1.6.0_04\lib\deploy\ffjcext.zip » ZIP » {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}/chrome.manifest » MIME - is OK (internal scanning not performed) F:\Program Files\Java\jre1.6.0_07\lib\resources.jar » ZIP » com/sun/org/apache/xerces/internal/impl/msg/XIncludeMessages.properties » MIME - is OK (internal scanning not performed) F:\Program Files\Java\jre1.6.0_07\lib\resources.jar » ZIP » com/sun/xml/internal/fastinfoset/resources/ResourceBundle.properties » MIME - is OK (internal scanning not performed) F:\Program Files\Java\jre1.6.0_07\lib\resources.jar » ZIP » javax/xml/bind/Messages.properties » MIME - is OK (internal scanning not performed) F:\Program Files\Java\jre1.6.0_07\lib\deploy\ffjcext.zip » ZIP » {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}/chrome.manifest » MIME - is OK (internal scanning not performed) F:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Customer Support.fdt » MIME - is OK (internal scanning not performed) F:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Hardware Tracker.fdt » MIME - is OK (internal scanning not performed) F:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Hiring Requisition - Customized.fdt » MIME - is OK (internal scanning not performed) F:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Hiring Requisition.fdt » MIME - is OK (internal scanning not performed) F:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\POLICIES.FDT » MIME - is OK (internal scanning not performed) F:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Process Library.fdt » MIME - is OK (internal scanning not performed) F:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Status Report.fdt » MIME - is OK (internal scanning not performed) F:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Track Issues.fdt » MIME - is OK (internal scanning not performed) F:\Program Files\Mozilla Firefox\chrome\browser.manifest » MIME - is OK (internal scanning not performed) F:\Program Files\Mozilla Firefox\chrome\comm.manifest » MIME - is OK (internal scanning not performed) F:\Program Files\Mozilla Firefox\chrome\pippki.manifest » MIME - is OK (internal scanning not performed) F:\Program Files\Mozilla Firefox\chrome\reporter.manifest » MIME - is OK (internal scanning not performed) F:\Program Files\Mozilla Firefox\chrome\toolkit.manifest » MIME - is OK (internal scanning not performed) F:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\chrome.manifest » MIME - is OK (internal scanning not performed) F:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\chrome.manifest » MIME - is OK (internal scanning not performed) F:\programy Bartek\ACE Mega CoDecS Pack\BSPlayer\doc\cmdline.txt » MIME - is OK (internal scanning not performed) F:\WINDOWS\system32\config\default - error opening [4] F:\WINDOWS\system32\config\default.LOG - error opening [4] F:\WINDOWS\system32\config\SAM - error opening [4] F:\WINDOWS\system32\config\SAM.LOG - error opening [4] F:\WINDOWS\system32\config\SECURITY - error opening [4] F:\WINDOWS\system32\config\SECURITY.LOG - error opening [4] F:\WINDOWS\system32\config\software - error opening [4] F:\WINDOWS\system32\config\software.LOG - error opening [4] F:\WINDOWS\system32\config\system - error opening [4] F:\WINDOWS\system32\config\system.LOG - error opening [4] F:\WINDOWS\system32\drivers\sptd.sys - error opening [4] G:\ - error opening [4] H:\ - error opening [4] I:\ - error opening [4] J:\ - error opening [4] K:\ - error opening [4] L:\ - error opening [4] Number of scanned objects: 520791 Number of threats found: 2 Time of completion: 23:38:27 Total scanning time: 1568 sec (00:26:08) Notes: [4] Object cannot be opened. It may be in use by another application or operating system. [7] Object is probably infected with an unknown virus.

jako pliki zagrożone wykrył

F:\Documents and Settings\Bartek\Pulpit\nieużywane skróty pulpitu\BitComet_1.06_setup.exe » NSIS » BitComet.exe » PECompact v2.xx - probably unknown NewHeur_PE virus [7]

a także.....

F:\Program Files\BitComet\BitComet.exe » PECompact v2.xx - probably unknown NewHeur_PE virus [7]

dziękujęz góry za pomoc i zainteresowanie.

**Posty:** 18165 · przez **wojtas** 24 Lis 2008, 19:04

Wykonaj to co jest podane w tym temacie

Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu C:\SDFix wrzuc zawartość pliku Report.txt + log z combofixa oraz daj loga z hijacka

**Posty:** 8 · przez **bartosz121** 25 Lis 2008, 00:18

Zrobiłem tak jak kazałeś porty zablokowane a oto log z combofixa ;

Kod: Zaznacz wszystko: ComboFix 08-11-23.02 - Bartek 2008-11-24 23:10:28.3 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.3.1250.1.1045.18.2613 [GMT 1:00] Uruchomiony z: f:\documents and settings\Bartek\Pulpit\ComboFix.exe * Utworzono nowy punkt przywracania * Resident AV is active . /wow section - STAGE 41 ((((((((((((((((((((((((( Pliki utworzone od 2008-10-24 do 2008-11-24 ))))))))))))))))))))))))))))))) . 2008-11-24 22:51 . 2008-11-24 22:51 580,096 --a--c--- f:\windows\system32\dllcache\user32.dll 2008-11-23 23:09 . 2008-01-07 14:29 352 --ah----- f:\windows\nod32fixtemdono.reg 2008-11-23 22:58 . 2008-11-23 22:58 <DIR> d-------- f:\program files\ESET 2008-11-23 22:58 . 2008-11-23 22:58 <DIR> d-------- f:\documents and settings\All Users\Dane aplikacji\ESET 2008-11-23 22:56 . 2008-11-23 22:56 <DIR> d-------- f:\program files\%temp& 2008-11-23 22:50 . 2008-11-23 22:50 <DIR> d-------- f:\documents and settings\All Users\Dane aplikacji\Avg8 2008-11-22 12:26 . 2008-11-24 22:50 <DIR> d-------- f:\windows\ERUNT 2008-11-22 12:26 . 2008-11-22 12:26 <DIR> d-------- F:\ERDNT 2008-11-22 12:26 . 2008-11-22 12:26 <DIR> d-------- F:\!FixIEDef 2008-11-19 03:42 . 2008-11-22 11:26 <DIR> d-------- f:\program files\WinUAE 2008-11-19 03:21 . 2008-11-19 03:21 <DIR> d-------- f:\program files\Commander 2008-11-19 03:03 . 2008-11-19 03:04 <DIR> d-------- F:\DOS 2008-11-19 01:31 . 2008-11-19 01:31 <DIR> d-------- f:\program files\Trend Micro 2008-11-18 18:58 . 2008-11-24 00:06 <DIR> d-------- f:\program files\BitComet 2008-11-18 18:16 . 2008-11-19 03:30 <DIR> d-------- f:\program files\DOSBox-0.63 2008-11-13 03:00 . 2008-11-13 03:01 1,393 --a------ f:\windows\imsins.BAK 2008-11-12 14:43 . 2008-10-24 12:21 455,296 -----c--- f:\windows\system32\dllcache\mrxsmb.sys 2008-11-12 14:42 . 2008-09-04 18:17 1,106,944 -----c--- f:\windows\system32\dllcache\msxml3.dll 2008-11-08 01:45 . 2008-11-08 01:46 <DIR> d---s---- f:\program files\Xfire 2008-11-08 01:45 . 2008-11-08 01:45 <DIR> d-------- f:\documents and settings\Bartek\Dane aplikacji\Xfire 2008-11-08 01:45 . 2008-11-08 01:45 271,360 --a------ f:\windows\system32\drivers\atksgt.sys 2008-11-08 01:45 . 2008-11-08 01:45 18,048 --a------ f:\windows\system32\drivers\lirsgt.sys 2008-11-07 13:34 . 2008-11-07 13:34 <DIR> d-------- f:\program files\Ashampoo 2008-11-02 00:56 . 2008-05-08 02:03 453,632 --a------ f:\windows\system32\SetACL.ocx . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-11-24 22:09 --------- d-----w f:\program files\lg_fwupdate 2008-11-18 14:28 --------- d-----w f:\documents and settings\Bartek\Dane aplikacji\uTorrent 2008-11-13 02:03 --------- d-----w f:\documents and settings\All Users\Dane aplikacji\Microsoft Help 2008-11-08 00:39 --------- d--h--w f:\program files\InstallShield Installation Information 2008-11-07 21:54 --------- d-----w f:\program files\Spybot - Search & Destroy 2008-11-07 21:54 --------- d-----w f:\program files\Guitar FX BOX 2.6 2008-11-07 21:54 --------- d-----w f:\documents and settings\Bartek\Dane aplikacji\LimeWire 2008-11-07 12:27 --------- d-----w f:\program files\OpenOffice.org 2.4 2008-11-07 12:27 --------- d-----w f:\documents and settings\All Users\Dane aplikacji\Spybot - Search & Destroy 2008-11-07 12:24 --------- d-----w f:\program files\Techland 2008-11-07 12:21 --------- d-----w f:\program files\SlySoft 2008-11-06 23:26 2,516 --sha-w f:\windows\system32\KGyGaAvL.sys 2008-11-05 11:07 --------- d-----w f:\documents and settings\Bartek\Dane aplikacji\OpenOffice.org2 2008-11-04 21:52 --------- d-----w f:\documents and settings\All Users\Dane aplikacji\FRISK Software 2008-10-24 11:21 455,296 ----a-w f:\windows\system32\drivers\mrxsmb.sys 2008-10-16 13:13 202,776 ----a-w f:\windows\system32\wuweb.dll 2008-10-16 13:13 1,809,944 ----a-w f:\windows\system32\wuaueng.dll 2008-10-16 13:12 561,688 ----a-w f:\windows\system32\wuapi.dll 2008-10-16 13:12 323,608 ----a-w f:\windows\system32\wucltui.dll 2008-10-16 13:09 92,696 ----a-w f:\windows\system32\cdm.dll 2008-10-16 13:09 51,224 ----a-w f:\windows\system32\wuauclt.exe 2008-10-16 13:09 43,544 ----a-w f:\windows\system32\wups2.dll 2008-10-16 13:08 34,328 ----a-w f:\windows\system32\wups.dll 2008-10-16 13:06 268,648 ----a-w f:\windows\system32\mucltui.dll 2008-10-16 13:06 208,744 ----a-w f:\windows\system32\muweb.dll 2008-10-06 08:12 --------- d-----w f:\documents and settings\Bartek\Dane aplikacji\Corel 2008-10-06 08:09 --------- d-----w f:\documents and settings\All Users\Dane aplikacji\Corel 2008-10-05 10:48 --------- d-----w f:\program files\Sony 2008-09-30 15:43 1,286,152 ----a-w f:\windows\system32\msxml4.dll 2008-09-15 15:27 1,846,656 ----a-w f:\windows\system32\win32k.sys 2008-09-10 01:15 1,307,648 ------w f:\windows\system32\msxml6.dll 2008-09-04 17:17 1,106,944 ----a-w f:\windows\system32\msxml3.dll 2008-08-28 15:51 47,360 ----a-w f:\documents and settings\Bartek\Dane aplikacji\pcouffin.sys 2008-08-26 08:27 826,368 ----a-w f:\windows\system32\wininet.dll 2004-10-01 13:00 40,960 ----a-w f:\program files\Uninstall_CDS.exe 2008-08-22 10:56 32,768 --sha-w f:\windows\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\MSHist012008082220080823\index.dat . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="f:\windows\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "JMB36X IDE Setup"="f:\windows\JM\JMInsIDE.exe" [2006-10-31 36864] "36X Raid Configurer"="f:\windows\system32\JMRaidSetup.exe" [2006-11-17 1953792] "NvCplDaemon"="f:\windows\system32\NvCpl.dll" [2006-08-11 7630848] "NvMediaCenter"="f:\windows\system32\NvMcTray.dll" [2006-08-11 86016] "WinFast Schedule"="f:\program files\WinFast\WFTVFM\WFWIZ.exe" [2006-07-07 348160] "LGODDFU"="f:\program files\lg_fwupdate\fwupdate.exe" [2005-04-12 229376] "HP Software Update"="f:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-03-11 49152] "EasyTuneV"="f:\program files\Gigabyte\ET5\ETcall.exe" [2007-01-04 24576] "SunJavaUpdateSched"="f:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784] "GrooveMonitor"="f:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648] "egui"="f:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2008-03-13 1443072] "SkyTel"="SkyTel.EXE" [2006-12-12 f:\windows\SkyTel.exe] "RTHDCPL"="RTHDCPL.EXE" [2006-12-12 f:\windows\RTHDCPL.EXE] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="f:\windows\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoResolveTrack"= 1 (0x1) "NoFileAssociate"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.iac2"= f:\progra~2\ACEMEG~1\SystemS\Intel\iac25_32.ax "vidc.avrn"= f:\progra~2\ACEMEG~1\SystemS\AVIDAV~1.DLL "vidc.advj"= f:\progra~2\ACEMEG~1\SystemS\AVIDAV~1.DLL "vidc.mszh"= f:\progra~2\ACEMEG~1\SystemS\avimszh.dll "vidc.zlib"= f:\progra~2\ACEMEG~1\SystemS\avizlib.dll "vidc.cscd"= f:\progra~2\ACEMEG~1\SystemS\camcodec.dll "vidc.cvid"= f:\progra~2\ACEMEG~1\SystemS\iccvid.dll "msacm.trspch"= f:\progra~2\ACEMEG~1\SystemS\tssoft32.acm "vidc.em2v"= f:\progra~2\ACEMEG~1\SystemS\etxcodec.dll "vidc.mkvc"= f:\progra~2\ACEMEG~1\SystemS\kmvidc32.dll "vidc.hfyu"= f:\progra~2\ACEMEG~1\SystemS\huffyuv.dll "msacm.lameacm"= f:\progra~2\ACEMEG~1\SystemS\lameacm.acm "msacm.lhacm"= f:\progra~2\ACEMEG~1\SystemS\lhacm.acm "msacm.l3acm"= f:\progra~2\ACEMEG~1\SystemS\l3codecp.acm "vidc.sjpg"= f:\progra~2\ACEMEG~1\SystemS\pmjpeg32.dll "vidc.dmb2"= f:\progra~2\ACEMEG~1\SystemS\pmjpeg32.dll "vidc.gepj"= f:\progra~2\ACEMEG~1\SystemS\pmjpeg32.dll "vidc.qpeg"= f:\progra~2\ACEMEG~1\SystemS\Qpeg32.dll "vidc.q1.0"= f:\progra~2\ACEMEG~1\SystemS\Qpeg32.dll "msacm.sl_anet"= f:\progra~2\ACEMEG~1\SystemS\sl_anet.acm "vidc.tscc"= f:\progra~2\ACEMEG~1\SystemS\tsccvid.dll "vidc.vifp"= f:\progra~2\ACEMEG~1\SystemS\vfcodec.dll "vidc.wrpr"= f:\progra~2\ACEMEG~1\SystemS\aviwrap.dll "vidc.wnv1"= f:\progra~2\ACEMEG~1\SystemS\wnvplay1.dll "vidc.3ivx"= f:\progra~2\ACEMEG~1\SystemS\3ivx\3IVXVF~1.DLL "vidc.3iv0"= f:\progra~2\ACEMEG~1\SystemS\3ivx\3IVXVF~1.DLL "vidc.3iv1"= f:\progra~2\ACEMEG~1\SystemS\3ivx\3IVXVF~1.DLL "vidc.3iv2"= f:\progra~2\ACEMEG~1\SystemS\3ivx\3IVXVF~1.DLL "vidc.3ivd"= f:\progra~2\ACEMEG~1\SystemS\3ivx\3IVXVF~1.DLL "vidc.advs"= f:\progra~2\ACEMEG~1\SystemS\Adaptec\Dvc.dll "vidc.aflc"= f:\progra~2\ACEMEG~1\SystemS\Autodesk\FLCCOD~1.DLL "vidc.afli"= f:\progra~2\ACEMEG~1\SystemS\Autodesk\FLCCOD~1.DLL "vidc.aasc"= f:\progra~2\ACEMEG~1\SystemS\Autodesk\Aasc32.dll "vidc.aas4"= f:\progra~2\ACEMEG~1\SystemS\Autodesk\Aasc32.dll "vidc.asv1"= f:\progra~2\ACEMEG~1\SystemS\ASUS\asusasv1.dll "vidc.asv2"= f:\progra~2\ACEMEG~1\SystemS\ASUS\asusasv2.dll "vidc.asvx"= f:\progra~2\ACEMEG~1\SystemS\ASUS\asusasv2.dll "vidc.vcr1"= f:\progra~2\ACEMEG~1\SystemS\ATI\ativcr1.dll "vidc.vcr2"= f:\progra~2\ACEMEG~1\SystemS\ATI\ativcr2.dll "vidc.yv12"= f:\progra~2\ACEMEG~1\SystemS\ATI\atiyuv12.DLL "vidc.mwv1"= f:\progra~2\ACEMEG~1\SystemS\Aware\icmw_32.dll "vidc.bt20"= f:\progra~2\ACEMEG~1\SystemS\BROOKT~1\btvvc32.drv "vidc.y41p"= f:\progra~2\ACEMEG~1\SystemS\BROOKT~1\btvvc32.drv "msacm.pcdv"= f:\progra~2\ACEMEG~1\SystemS\Canopus\pcdv.acm "vidc.cdvc"= f:\progra~2\ACEMEG~1\SystemS\Canopus\CSCCDVC.DLL "vidc.ddvc"= f:\progra~2\ACEMEG~1\SystemS\Canopus\CSCdvsd.DLL "vidc.png1"= f:\progra~2\ACEMEG~1\SystemS\Core\COREPN~1.DLL "msacm.CoreFLAC_ACM"= f:\progra~2\ACEMEG~1\SystemS\Core\COREFL~1.ACM "vidc.davc"= f:\progra~2\ACEMEG~1\SystemS\dicas\davcvfw.dll "vidc.div3"= f:\progra~2\ACEMEG~1\SystemS\DivX\DivXc32.dll "vidc.div5"= f:\progra~2\ACEMEG~1\SystemS\DivX\DivXc32.dll "vidc.mpg3"= f:\progra~2\ACEMEG~1\SystemS\DivX\DivXc32.dll "vidc.div4"= f:\progra~2\ACEMEG~1\SystemS\DivX\DivXc32f.dll "vidc.div6"= f:\progra~2\ACEMEG~1\SystemS\DivX\DivXc32f.dll "vidc.ap41"= f:\progra~2\ACEMEG~1\SystemS\DivX\DivXc32f.dll "vidc.dvx4"= f:\progra~2\ACEMEG~1\SystemS\DivX\divx4.dll "vidc.divx"= f:\progra~2\ACEMEG~1\SystemS\DivX\DivX520.dll "msacm.divxa32"= msaud32_divx.acm "vidc.frwd"= f:\progra~2\ACEMEG~1\SystemS\Forward\frwd.dll "vidc.frwt"= f:\progra~2\ACEMEG~1\SystemS\Forward\frwd.dll "vidc.frwa"= f:\progra~2\ACEMEG~1\SystemS\Forward\frwt.dll "vidc.frwu"= f:\progra~2\ACEMEG~1\SystemS\Forward\frwu.dll "vidc.glzw"= f:\progra~2\ACEMEG~1\SystemS\Gabest\GLZW.dll "vidc.gpeg"= f:\progra~2\ACEMEG~1\SystemS\Gabest\GPEG.dll "vidc.i263"= f:\progra~2\ACEMEG~1\SystemS\Intel\i263_32.drv "vidc.iv30"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir32_32.dll "vidc.iv31"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir32_32.dll "vidc.iv32"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir32_32.dll "vidc.iv33"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir32_32.dll "vidc.iv34"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir32_32.dll "vidc.iv35"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir32_32.dll "vidc.iv36"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir32_32.dll "vidc.iv37"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir32_32.dll "vidc.iv38"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir32_32.dll "vidc.iv39"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir32_32.dll "vidc.iv40"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir41_32.dll "vidc.iv41"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir41_32.dll "vidc.iv42"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir41_32.dll "vidc.iv43"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir41_32.dll "vidc.iv44"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir41_32.dll "vidc.iv45"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir41_32.dll "vidc.iv46"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir41_32.dll "vidc.iv47"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir41_32.dll "vidc.iv48"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir41_32.dll "vidc.iv49"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir41_32.dll "vidc.iv50"= f:\progra~2\ACEMEG~1\SystemS\Intel\ir50_32.dll "vidc.iyuv"= f:\progra~2\ACEMEG~1\SystemS\Intel\iyuv_32.dll "vidc.yvu9"= f:\progra~2\ACEMEG~1\SystemS\Intel\Iyvu9_32.dll "vidc.ir21"= f:\progra~2\ACEMEG~1\SystemS\Intel\IR21_R.DLL "vidc.rt21"= f:\progra~2\ACEMEG~1\SystemS\Intel\IR21_R.DLL "msacm.imc"= f:\progra~2\ACEMEG~1\SystemS\Intel\IMC32.ACM "vidc.lead"= f:\progra~2\ACEMEG~1\SystemS\LEAD\LCODCCMP.DLL "vidc.dvsd"= f:\progra~2\ACEMEG~1\SystemS\MAINCO~1\MCDVD_32.DLL "vidc.dvc"= f:\progra~2\ACEMEG~1\SystemS\MAINCO~1\MCDVD_32.DLL "vidc.dvcs"= f:\progra~2\ACEMEG~1\SystemS\MAINCO~1\MCDVD_32.DLL "vidc.dcmj"= f:\progra~2\ACEMEG~1\SystemS\MAINCO~1\MCMJPG32.DLL "vidc.avi1"= f:\progra~2\ACEMEG~1\SystemS\MAINCO~1\MCMJPG32.DLL "vidc.avi2"= f:\progra~2\ACEMEG~1\SystemS\MAINCO~1\MCMJPG32.DLL "vidc.dv25"= f:\progra~2\ACEMEG~1\SystemS\Matrox\DigiVCap.dll "vidc.dv50"= f:\progra~2\ACEMEG~1\SystemS\Matrox\DigiVCap.dll "vidc.msmc"= f:\progra~2\ACEMEG~1\SystemS\Matrox\DigiVCap.dll "vidc.mmjp"= f:\progra~2\ACEMEG~1\SystemS\Matrox\DigiVCap.dll "vidc.mtx1"= f:\progra~2\ACEMEG~1\SystemS\Matrox\DigiVCap.dll "vidc.mtx2"= f:\progra~2\ACEMEG~1\SystemS\Matrox\DigiVCap.dll "vidc.mtx3"= f:\progra~2\ACEMEG~1\SystemS\Matrox\DigiVCap.dll "vidc.mtx4"= f:\progra~2\ACEMEG~1\SystemS\Matrox\DigiVCap.dll "vidc.mtx5"= f:\progra~2\ACEMEG~1\SystemS\Matrox\DigiVCap.dll "vidc.mtx6"= f:\progra~2\ACEMEG~1\SystemS\Matrox\DigiVCap.dll "vidc.mtx7"= f:\progra~2\ACEMEG~1\SystemS\Matrox\DigiVCap.dll "vidc.mtx8"= f:\progra~2\ACEMEG~1\SystemS\Matrox\DigiVCap.dll "vidc.mtx9"= f:\progra~2\ACEMEG~1\SystemS\Matrox\DigiVCap.dll "vidc.mmes"= f:\progra~2\ACEMEG~1\SystemS\Matrox\DigiVCap.dll "msacm.msadpcm"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\msadp32.acm "msacm.imaadpcm"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\imaadp32.acm "msacm.msg711"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\msg711.acm "msacm.msg723"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\msg723.acm "msacm.msgsm610"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\msgsm32.acm "vidc.m261"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\msh261.drv "vidc.m263"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\msh263.drv "vidc.i420"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\msh263.drv "vidc.mrle"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\msrle32.dll "vidc.uyvy"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\msyuv.dll "vidc.yvyu"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\msyuv.dll "vidc.msvc"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\msvidc32.dll "vidc.cram"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\msvidc32.dll "vidc.mpg4"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\mpg4c32.dll "vidc.mp41"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\mpg4c32.dll "vidc.mp42"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\mpg4c32.dll "vidc.mp43"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\mpg4c32.dll "vidc.mp4s"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\mpg4c32.dll "vidc.mp4v"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\mpg4c32.dll "vidc.wmv3"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\WMV9VCM.dll "msacm.msaudio1"= f:\progra~2\ACEMEG~1\SystemS\MICROS~1\msaud32.acm "vidc.vixl"= f:\progra~2\ACEMEG~1\SystemS\Miro\miroxl32.dll "vidc.nt00"= f:\progra~2\ACEMEG~1\SystemS\Newtek\ntcodec.dll "msacm.vorbis"= f:\progra~2\ACEMEG~1\SystemS\OGG\vorbis.acm "vidc.vp30"= f:\progra~2\ACEMEG~1\SystemS\ON2TEC~1\vp31vfw.dll "vidc.vp31"= f:\progra~2\ACEMEG~1\SystemS\ON2TEC~1\vp31vfw.dll "vidc.vp60"= f:\progra~2\ACEMEG~1\SystemS\ON2TEC~1\vp6vfw.dll "vidc.vp61"= f:\progra~2\ACEMEG~1\SystemS\ON2TEC~1\vp6vfw.dll "vidc.pdvc"= f:\progra~2\ACEMEG~1\SystemS\PANASO~1\idvcodec.dll "vidc.ipdv"= f:\progra~2\ACEMEG~1\SystemS\PANASO~1\idvcodec.dll "vidc.pvw2"= f:\progra~2\ACEMEG~1\SystemS\Pegasus\pvwv220.dll "vidc.pimj"= f:\progra~2\ACEMEG~1\SystemS\Pegasus\pvljpg20.dll "vidc.mjpx"= f:\progra~2\ACEMEG~1\SystemS\Pegasus\pvmjpg21.dll "vidc.miro"= f:\progra~2\ACEMEG~1\SystemS\Pinnacle\MIRODV~1.DLL "vidc.dcap"= f:\progra~2\ACEMEG~1\SystemS\Pinnacle\MIRODV~1.DLL "vidc.mjpa"= f:\progra~2\ACEMEG~1\SystemS\Pinnacle\RTMJPG~1.DLL "vidc.gpjm"= f:\progra~2\ACEMEG~1\SystemS\Pinnacle\RTMJPG~1.DLL "vidc.pim1"= f:\progra~2\ACEMEG~1\SystemS\Pinnacle\pclepim1.dll "msacm.qmpeg"= f:\progra~2\ACEMEG~1\SystemS\QDesign\qmpeg.acm "vidc.rmp4"= f:\progra~2\ACEMEG~1\SystemS\REALMA~1\rmp4.dll "vidc.rud0"= f:\progra~2\ACEMEG~1\SystemS\Rududu\rududu.dll "msacm.at3"= f:\progra~2\ACEMEG~1\SystemS\SONY\atrac3.acm "vidc.sony"= f:\progra~2\ACEMEG~1\SystemS\SONY\sonydv.dll "vidc.dvcp"= f:\progra~2\ACEMEG~1\SystemS\SONY\sonydv.dll "vidc.s422"= f:\progra~2\ACEMEG~1\SystemS\Tekram\tekyuv.dll "vidc.t420"= f:\progra~2\ACEMEG~1\SystemS\Toshiba\tsbyuv.dll "vidc.y411"= f:\progra~2\ACEMEG~1\SystemS\Toshiba\tsbyuv.dll "vidc.vssv"= f:\progra~2\ACEMEG~1\SystemS\VANGUA~1\vsscodec.dll "msacm.voxacm160"= f:\progra~2\ACEMEG~1\SystemS\VoxWare\vct3216.acm "vidc.xvid"= f:\progra~2\ACEMEG~1\SystemS\XviD\xvidvfw.dll [HKLM\~\startupfolder\F:^Documents and Settings^All Users^Menu Start^Programy^Autostart^HP Digital Imaging Monitor.lnk] path=f:\documents and settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk backup=f:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup [HKLM\~\startupfolder\F:^Documents and Settings^Bartek^Menu Start^Programy^Autostart^OpenOffice.org 2.4.lnk] path=f:\documents and settings\Bartek\Menu Start\Programy\Autostart\OpenOffice.org 2.4.lnk backup=f:\windows\pss\OpenOffice.org 2.4.lnkStartup [HKLM\~\startupfolder\F:^Documents and Settings^Bartek^Menu Start^Programy^Autostart^Picture Motion Browser Media Check Tool.lnk] path=f:\documents and settings\Bartek\Menu Start\Programy\Autostart\Picture Motion Browser Media Check Tool.lnk backup=f:\windows\pss\Picture Motion Browser Media Check Tool.lnkStartup [HKLM\~\startupfolder\F:^Documents and Settings^Bartek^Menu Start^Programy^Autostart^RocketDock.lnk] path=f:\documents and settings\Bartek\Menu Start\Programy\Autostart\RocketDock.lnk backup=f:\windows\pss\RocketDock.lnkStartup [HKLM\~\startupfolder\F:^Documents and Settings^Bartek^Menu Start^Programy^Autostart^Xfire.lnk] path=f:\documents and settings\Bartek\Menu Start\Programy\Autostart\Xfire.lnk backup=f:\windows\pss\Xfire.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a------ 2008-06-12 01:38 34672 f:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier] --a------ 2008-07-22 19:42 116040 f:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite] --a------ 2008-08-08 13:11 490952 f:\programy bartek\damon tools\DAEMON Tools Lite\daemon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD] --------- 2006-11-02 07:55 1397760 f:\program files\Ahead\InCD\InCD.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] --a------ 2008-07-30 09:47 289064 f:\program files\iTunes\iTunesHelper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] --a------ 2001-07-09 09:50 155648 f:\windows\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] --a------ 2008-05-27 09:50 413696 f:\program files\QuickTime\QTTask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl] --a------ 2004-11-02 19:24 32768 f:\programy bartek\PowerDVD\PDVDServ.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] --a------ 2006-08-11 14:43 1519616 f:\windows\system32\nwiz.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "f:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "f:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "f:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "f:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "f:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "f:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"= "f:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "f:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "f:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"= "f:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"= "c:\\emule\\emule.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "f:\\Program Files\\iTunes\\iTunes.exe"= "f:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"= "f:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"= "f:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "25541:TCP"= 25541:TCP:BitComet 25541 TCP "25541:UDP"= 25541:UDP:BitComet 25541 UDP R1 epfwtdir;epfwtdir;f:\windows\system32\DRIVERS\epfwtdir.sys [2008-03-13 33800] R3 WFIOCTL;WFIOCTL;\??\f:\program files\WinFast\WFTVFM\WFIOCTL.SYS [2008-08-21 9446] S3 PSI;PSI;f:\windows\system32\DRIVERS\psi_mf.sys [2008-06-16 7808] S3 SunkFilt6;Alcor Micro Corp - 6360;\??\f:\windows\System32\Drivers\sunkfilt6.sys [] S3 SunkFilt62;Alcor Micro Corp - 6362;\??\f:\windows\System32\Drivers\sunkfilt62.sys [] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{88e51e8b-6ef0-11dd-8970-806d6172696f}] \Shell\AutoRun\command - K:\Run.exe . Zawartość folderu 'Zaplanowane zadania' 2008-08-31 f:\windows\Tasks\AppleSoftwareUpdate.job - f:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 16:57] . . ------- Skan uzupełniający ------- . FireFox -: Profile - f:\documents and settings\Bartek\Dane aplikacji\Mozilla\Firefox\Profiles\5kllfmfa.default\ FF -: plugin - f:\program files\iTunes\Mozilla Plugins\npitunes.dll FF -: plugin - f:\program files\Mozilla Firefox\plugins\npqtplugin8.dll FF -: plugin - f:\program files\QuickTime\Plugins\npqtplugin8.dll FF -: plugin - f:\programy bartek\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nppl3260.dll FF -: plugin - f:\programy bartek\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nprpjplug.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-11-24 23:11:02 Windows 5.1.2600 Dodatek Service Pack 3 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- - - - - - - - > 'lsass.exe'(760) f:\windows\system32\scecli.dll . Czas ukończenia: 2008-11-24 23:11:27 ComboFix-quarantined-files.txt 2008-11-24 22:11:15 Przed: 52 307 333 120 bajtów wolnych Po: 52,306,501,632 bajtów wolnych 360 --- E O F --- 2008-11-13 02:03:01

a także z Hjthings;

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:05:44, on 2008-11-24 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16735) Boot mode: Normal Running processes: F:\WINDOWS\System32\smss.exe F:\WINDOWS\system32\winlogon.exe F:\WINDOWS\system32\services.exe F:\WINDOWS\system32\lsass.exe F:\WINDOWS\system32\svchost.exe F:\WINDOWS\System32\svchost.exe F:\Program Files\Ahead\InCD\InCDsrv.exe F:\WINDOWS\system32\spoolsv.exe F:\WINDOWS\Explorer.EXE F:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe F:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe F:\WINDOWS\system32\svchost.exe F:\Program Files\Common Files\LightScribe\LSSrvc.exe F:\WINDOWS\System32\svchost.exe F:\WINDOWS\system32\nvsvc32.exe F:\WINDOWS\System32\svchost.exe F:\WINDOWS\system32\PSIService.exe F:\WINDOWS\system32\svchost.exe F:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe F:\WINDOWS\RTHDCPL.EXE F:\WINDOWS\system32\RUNDLL32.EXE F:\Program Files\WinFast\WFTVFM\WFWIZ.exe F:\Program Files\lg_fwupdate\fwupdate.exe F:\Program Files\HP\HP Software Update\HPWuSchd2.exe F:\Program Files\Java\jre1.6.0_07\bin\jusched.exe F:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe F:\Program Files\Gigabyte\ET5\GUI.exe F:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe F:\WINDOWS\system32\ctfmon.exe F:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - F:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - F:\Program Files\HP\Smart Web Printing\hpswp_framework.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - F:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - F:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - E:\avg\antywirusowe\avgssie.dll (file missing) O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - F:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [JMB36X IDE Setup] F:\WINDOWS\JM\JMInsIDE.exe O4 - HKLM\..\Run: [36X Raid Configurer] F:\WINDOWS\system32\JMRaidSetup.exe boot O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE F:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [WinFast Schedule] F:\Program Files\WinFast\WFTVFM\WFWIZ.exe O4 - HKLM\..\Run: [LGODDFU] "F:\Program Files\lg_fwupdate\fwupdate.exe" O4 - HKLM\..\Run: [HP Software Update] F:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [EasyTuneV] F:\Program Files\Gigabyte\ET5\ETcall.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "F:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" O4 - HKLM\..\Run: [GrooveMonitor] "F:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [egui] "F:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://F:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Pobierz wszystkie VIdeo za pomocą BitComet - res://F:\Program Files\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - res://F:\Program Files\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: Pobierz za pomocą BitComet - res://F:\Program Files\BitComet\BitComet.exe/AddLink.htm O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - F:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - F:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - F:\programy Bartek\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - F:\programy Bartek\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra button: Kolekcja wycinków HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - F:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Zaznaczanie HP Smart - {700259D7-1666-479a-93B1-3250410481E8} - F:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://F:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing) O12 - Plugin for .spop: F:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - F:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O23 - Service: Apple Mobile Device - Apple Inc. - F:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - F:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - F:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - F:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: Usługa iPod (iPod Service) - Apple Inc. - F:\Program Files\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - F:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\system32\nvsvc32.exe O23 - Service: ProtexisLicensing - Unknown owner - F:\WINDOWS\system32\PSIService.exe O23 - Service: stllssvr - MicroVision Development, Inc. - F:\Program Files\Common Files\SureThing Shared\stllssvr.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - F:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- End of file - 8229 bytes

i SDFix log;

Kod: Zaznacz wszystko: [b]SDFix: Version 1.240 [/b] Run by Bartek on 2008-11-24 at 22:51 Microsoft Windows XP [Wersja 5.1.2600] Running From: F:\Documents and Settings\Bartek\Pulpit\SDFix [b]Checking Services [/b]: Restoring Default Security Values Restoring Default Hosts File Rebooting [b]Checking Files [/b]: No Trojan Files Found Removing Temp Files [b]ADS Check [/b]: [b]Final Check [/b]: catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-11-24 22:57:49 Windows 5.1.2600 Dodatek Service Pack 3 NTFS scanning hidden processes ... scanning hidden services & system hive ... [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\ESENT] "EventMessageFile"=str(2):"f:\windows\system32\ESENT.dll" "CategoryMessageFile"=str(2):"f:\windows\system32\ESENT.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg] "s1"=dword:2df9c43f "s2"=dword:110480d0 "h0"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="F:\programy Bartek\damon tools\DAEMON Tools Lite\" "h0"=dword:00000000 "khjeh"=hex:72,e7,83,51,43,3a,d9,59,a4,bb,5e,fe,cd,07,98,91,07,b6,9f,50,1e,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,1b,c7,40,51,11,e6,38,be,5f,0b,f8,2c,fd,75,0d,52,0d,.. "khjeh"=hex:6e,c8,30,ce,ae,b5,15,59,82,f5,16,af,50,ce,55,18,6e,44,11,46,35,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:fe,18,d0,69,3b,c4,8d,d7,60,89,0e,75,e9,0b,f5,84,8b,4c,2a,d6,57,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="F:\programy Bartek\damon tools\DAEMON Tools Lite\" "h0"=dword:00000000 "khjeh"=hex:5b,60,c0,2d,9b,27,dd,07,97,4c,23,ff,bc,ae,aa,7c,02,9c,a2,82,1a,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,1b,c7,40,51,11,e6,38,be,5f,0b,f8,2c,fd,75,0d,52,0d,.. "khjeh"=hex:6e,c8,30,ce,ae,b5,15,59,82,f5,16,af,50,ce,55,18,6e,44,11,46,35,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:ee,81,13,17,01,98,1a,05,f5,95,f3,bf,21,8f,6f,40,9a,c5,ca,72,bc,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="F:\programy Bartek\damon tools\DAEMON Tools Lite\" "h0"=dword:00000000 "khjeh"=hex:72,e7,83,51,43,3a,d9,59,a4,bb,5e,fe,cd,07,98,91,07,b6,9f,50,1e,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,1b,c7,40,51,11,e6,38,be,5f,0b,f8,2c,fd,75,0d,52,0d,.. "khjeh"=hex:6e,c8,30,ce,ae,b5,15,59,82,f5,16,af,50,ce,55,18,6e,44,11,46,35,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:fe,18,d0,69,3b,c4,8d,d7,60,89,0e,75,e9,0b,f5,84,8b,4c,2a,d6,57,.. scanning hidden registry entries ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 [b]Remaining Services [/b]: Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "F:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"="F:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe:*:Enabled:hpqtra08.exe" "F:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"="F:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe:*:Enabled:hpqste08.exe" "F:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"="F:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe:*:Enabled:hpofxm08.exe" "F:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"="F:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe:*:Enabled:hposfx08.exe" "F:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"="F:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe:*:Enabled:hposid01.exe" "F:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"="F:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe:*:Enabled:hpqscnvw.exe" "F:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"="F:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe:*:Enabled:hpqkygrp.exe" "F:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"="F:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe:*:Enabled:hpzwiz01.exe" "F:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"="F:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe:*:Enabled:hpoews01.exe" "F:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"="F:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe:*:Enabled:hpqnrs08.exe" "C:\\emule\\emule.exe"="C:\\emule\\emule.exe:*:Enabled:eMule" "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "F:\\Program Files\\iTunes\\iTunes.exe"="F:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes" "F:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="F:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook" "F:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"="F:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE:*:Enabled:Microsoft Office Groove" "F:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"="F:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" [b]Remaining Files [/b]: [b]Files with Hidden Attributes [/b]: Mon 7 Jan 2008 352 A..H. --- "F:\WINDOWS\nod32fixtemdono.reg" Fri 7 Nov 2008 88 ..SHR --- "F:\WINDOWS\system32\068FE7AAEC.sys" Fri 7 Nov 2008 2,516 A.SH. --- "F:\WINDOWS\system32\KGyGaAvL.sys" [b]Finished![/b]

proszę o pomoc i z góry dziękuję ..... :wink:

**Posty:** 18165 · przez **wojtas** 25 Lis 2008, 18:13

1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp

oraz skasuj folder C:\Qoobox
2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
5.Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

i tym:

FixIEDef.