Explorer.exe problem

**Posty:** 6 · przez **sito** 03 Sty 2009, 18:22

Witam. Mam problem z explorer.exe, wiesza mi sie on i czesto i wtedy nie moge wlaczyc menadzera urzadzen nawet a uzycie procesora wynosi 100%. Wczoraj avast rykryl mi jakies wirusy to je pousuwalem i zrobilem format dysku ale problem wystepuje nadal... Wrzucam swoje logi z combofixa i HJT. z gory dziekuje za pomoc.

HJT:

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:19:21, on 2009-01-03 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\RUNDLL32.EXE C:\WINDOWS\System32\ctfmon.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\system32\imapi.exe C:\WINDOWS\explorer.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [Gadu-Gadu] "D:\Programy\Gadu-Gadu\gg.exe" /tray O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe -- End of file - 2151 bytes

combofix:

Kod: Zaznacz wszystko: ComboFix 09-01-01.02 - asdf 2009-01-03 17:17:09.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.0.1250.1.1045.18.767.627 [GMT 1:00] Uruchomiony z: c:\documents and settings\asdf\Pulpit\ComboFix.exe . ((((((((((((((((((((((((( Pliki utworzone od 2008-12-03 do 2009-01-03 ))))))))))))))))))))))))))))))) . Nie utworzono żadnych nowych plików w tym okresie . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-01-03 15:57 --------- d-----w c:\program files\Trend Micro 2009-01-03 15:21 --------- d-----w c:\documents and settings\asdf\Dane aplikacji\Gadu-Gadu 2009-01-03 14:54 --------- d-----w c:\program files\microsoft frontpage 2009-01-03 14:50 --------- d-----w c:\program files\Usługi online . ((((((((((((((((((((((((((((( snapshot@2009-01-03_17.04.53,76 ))))))))))))))))))))))))))))))))))))))))) . - 2009-01-03 15:39:24 16,384 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat + 2009-01-03 16:14:14 16,384 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat - 2009-01-03 15:39:24 32,768 ----a-w c:\windows\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\index.dat + 2009-01-03 16:14:14 32,768 ----a-w c:\windows\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\index.dat - 2009-01-03 15:39:24 32,768 ----a-w c:\windows\system32\config\systemprofile\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat + 2009-01-03 16:14:14 32,768 ----a-w c:\windows\system32\config\systemprofile\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\System32\ctfmon.exe" [2001-10-26 13312] "MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2001-08-02 1077277] "Gadu-Gadu"="d:\programy\Gadu-Gadu\gg.exe" [2008-03-20 2127296] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\System32\NvCpl.dll" [2008-10-07 13574144] "NvMediaCenter"="c:\windows\System32\NvMcTray.dll" [2008-10-07 86016] "nwiz"="nwiz.exe" [2008-10-07 c:\windows\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2001-10-26 13312] *Newly Created Service* - ALG *Newly Created Service* - IPNAT . . ------- Skan uzupełniający ------- . IE: {{c95fe080-8f5d-11d2-a20b-00aa003c157a} - %SystemRoot%\web\related.htm . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-01-03 17:17:56 Windows 5.1.2600 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- - - - - - - - > 'winlogon.exe'(624) c:\windows\system32\ODBC32.dll - - - - - - - > 'lsass.exe'(680) c:\windows\system32\MSVCIRT.dll c:\windows\System32\dssenh.dll . Czas ukończenia: 2009-01-03 17:18:40 ComboFix-quarantined-files.txt 2009-01-03 16:18:22 Przed: 1,914,535,936 bajtów wolnych Po: 1,908,563,968 bajtów wolnych 69

**Posty:** 18165 · przez **wojtas** 03 Sty 2009, 18:31

to skasuj:

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

**Posty:** 6 · przez **sito** 03 Sty 2009, 18:38

usunalem, ale problem wystepuje nadal

**Posty:** 18165 · przez **wojtas** 03 Sty 2009, 19:01

wejdz do konsoli odzyskiwania

W linii komend wpisz polecenie:

expand X:\i386\explorer.ex_ Y:\Windows\system32\

X- litera napędu z płytką
Y- nazwa partycji gdzie masz zainstalowany system

**Posty:** 6 · przez **sito** 04 Sty 2009, 00:35

zrobilem i dalej ... dam teraz logi gdy mam juz wysztsko poinstalowane

Combofix:

Kod: Zaznacz wszystko: ComboFix 09-01-02.01 - asdf 2009-01-03 23:29:57.3 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.0.1250.1.1045.18.767.442 [GMT 1:00] Uruchomiony z: c:\documents and settings\asdf\Pulpit\ComboFix.exe * Utworzono nowy punkt przywracania . ((((((((((((((((((((((((( Pliki utworzone od 2008-12-03 do 2009-01-03 ))))))))))))))))))))))))))))))) . 2009-01-03 21:36 . 2001-10-26 18:29 1,002,496 --a------ c:\windows\explorer.exe 2009-01-03 21:26 . 2009-01-03 21:40 708 --a------ c:\windows\WINCMD.INI 2009-01-03 21:26 . 2009-01-03 21:26 55 --a------ c:\windows\wcx_ftp.ini 2009-01-03 21:12 . 1999-12-20 18:27 336,896 --a------ c:\windows\unwashop.exe 2009-01-03 20:26 . 2001-10-26 17:29 1,002,496 --a------ c:\windows\system32\explorer.ex_ 2009-01-03 20:05 . 2009-01-03 20:05 <DIR> d-------- c:\windows\system32\LogFiles 2009-01-03 20:05 . 2009-01-03 20:05 <DIR> d-------- c:\documents and settings\LocalService\Dane aplikacji\Xfire 2009-01-03 20:05 . 2009-01-03 20:08 187,536 --a------ c:\windows\system32\PnkBstrB.exe 2009-01-03 20:05 . 2009-01-03 20:08 138,384 --a------ c:\windows\system32\drivers\PnkBstrK.sys 2009-01-03 20:05 . 2009-01-03 20:05 70,968 --a------ c:\windows\system32\PnkBstrA.exe 2009-01-03 19:59 . 2009-01-03 20:02 <DIR> d-------- c:\documents and settings\asdf\Dane aplikacji\teamspeak2 2009-01-03 19:51 . 2009-01-03 20:52 <DIR> d-------- c:\documents and settings\asdf\Dane aplikacji\Xfire 2009-01-03 18:33 . 2003-03-18 21:20 1,060,864 --a------ c:\windows\system32\MFC71.dll 2009-01-03 18:33 . 2003-03-18 20:14 499,712 --a------ c:\windows\system32\MSVCP71.dll 2009-01-03 18:33 . 2003-02-21 04:42 348,160 --a------ c:\windows\system32\MSVCR71.dll 2009-01-03 18:32 . 2009-01-03 18:31 410,984 --a------ c:\windows\system32\deploytk.dll 2009-01-03 18:32 . 2009-01-03 18:31 73,728 --a------ c:\windows\system32\javacpl.cpl 2009-01-03 18:31 . 2009-01-03 18:31 <DIR> d-------- c:\program files\Java 2009-01-03 18:13 . 2009-01-03 18:13 <DIR> d-------- c:\documents and settings\asdf\Dane aplikacji\MetaProducts 2009-01-03 18:11 . 2009-01-03 18:11 0 --a------ c:\windows\nsreg.dat 2009-01-03 17:55 . 2003-06-16 04:05 765,952 -ra------ c:\windows\system\crlds3d.dll 2009-01-03 17:54 . 2009-01-03 17:54 <DIR> d-------- c:\program files\VIA Technologies, Inc 2009-01-03 17:54 . 2003-06-16 04:05 720,896 -ra------ c:\windows\system32\a3d.dll 2009-01-03 17:54 . 1998-10-29 16:45 306,688 --a------ c:\windows\IsUninst.exe 2009-01-03 17:54 . 2001-10-26 17:29 98,304 --a--c--- c:\windows\system32\dllcache\a3d.dll 2009-01-03 17:54 . 2003-07-04 23:14 32,768 --a------ c:\windows\system32\UnAudioNT.dll 2009-01-03 17:53 . 2009-01-03 17:53 984 --a------ c:\windows\system32\d3d8caps.dat . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-01-03 15:57 --------- d-----w c:\program files\Trend Micro 2009-01-03 15:21 --------- d-----w c:\documents and settings\asdf\Dane aplikacji\Gadu-Gadu 2009-01-03 14:54 --------- d-----w c:\program files\microsoft frontpage 2009-01-03 14:50 --------- d-----w c:\program files\Usługi online . ((((((((((((((((((((((((((((( snapshot@2009-01-03_17.04.53,76 ))))))))))))))))))))))))))))))))))))))))) . + 2008-10-04 19:16:46 1,887,080 ----a-w c:\windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe + 2004-07-09 03:26:38 11,392 ----a-w c:\windows\Driver Cache\i386\bdasup.sys + 2004-07-09 03:26:38 16,384 ----a-w c:\windows\Driver Cache\i386\ccdecode.sys + 2002-12-11 23:14:32 130,304 ----a-w c:\windows\Driver Cache\i386\ks.sys + 2002-12-11 23:14:32 4,096 ----a-w c:\windows\Driver Cache\i386\ksuser.dll + 2004-07-09 03:26:38 15,104 ----a-w c:\windows\Driver Cache\i386\mpe.sys + 2004-07-09 03:26:38 52,096 ----a-w c:\windows\Driver Cache\i386\msdv.sys + 2002-12-11 23:14:32 7,424 ----a-w c:\windows\Driver Cache\i386\mskssrv.sys + 2002-12-11 23:14:32 5,248 ----a-w c:\windows\Driver Cache\i386\mspclock.sys + 2001-08-23 04:00:00 4,608 ----a-w c:\windows\Driver Cache\i386\mspqm.sys + 2002-12-11 23:14:32 5,504 ----a-w c:\windows\Driver Cache\i386\mstee.sys + 2004-07-09 03:26:38 16,896 ----a-w c:\windows\Driver Cache\i386\msyuv.dll + 2004-07-09 03:26:38 83,968 ----a-w c:\windows\Driver Cache\i386\nabtsfec.sys + 2004-07-09 03:26:38 10,112 ----a-w c:\windows\Driver Cache\i386\ndisip.sys + 2002-08-29 02:41:00 31,744 ----a-w c:\windows\Driver Cache\i386\pid.dll + 2004-07-09 03:26:40 354,816 ----a-w c:\windows\Driver Cache\i386\psisdecd.dll + 2004-07-09 03:26:40 10,880 ----a-w c:\windows\Driver Cache\i386\slip.sys + 2004-07-09 03:27:28 48,512 ----a-w c:\windows\Driver Cache\i386\stream.sys + 2004-07-09 03:26:40 14,976 ----a-w c:\windows\Driver Cache\i386\streamip.sys + 2002-12-11 23:14:32 4,096 ----a-w c:\windows\Driver Cache\i386\swenum.sys + 2004-07-09 03:26:40 18,688 ----a-w c:\windows\Driver Cache\i386\wstcodec.sys + 2002-12-11 23:14:32 64,512 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\amstream.dll + 2004-07-09 03:27:28 1,201,152 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\d3d8.dll + 2002-12-11 23:14:32 8,192 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\d3d8thk.dll + 2003-05-30 08:00:02 797,184 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\d3dim700.dll + 2004-07-09 03:27:28 292,864 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ddraw.dll + 2002-12-11 23:14:32 24,064 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ddrawex.dll + 2003-05-30 08:00:02 132,608 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\devenum.dll + 2002-12-11 23:14:32 27,136 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmband.dll + 2002-12-11 23:14:32 58,368 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmcompos.dll + 2004-07-09 03:27:28 181,248 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmime.dll + 2002-12-11 23:14:32 33,280 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmloader.dll + 2002-12-11 23:14:32 76,800 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmscript.dll + 2002-12-11 23:14:32 98,816 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmstyle.dll + 2002-12-11 23:14:32 100,864 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmsynth.dll + 2004-07-09 03:27:28 122,880 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmusic.dll + 2002-12-11 23:14:32 28,160 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dplaysvr.exe + 2004-07-09 03:27:28 230,400 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dplayx.dll + 2002-12-11 23:14:32 77,824 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpmodemx.dll + 2002-12-11 23:14:32 3,072 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnaddr.dll + 2002-12-11 23:14:32 723,968 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnet.dll + 2003-03-24 08:00:02 32,768 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnhpast.dll + 2003-03-24 08:00:02 68,096 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnhupnp.dll + 2002-12-11 23:14:32 3,072 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnlobby.dll + 2002-12-11 23:14:32 16,896 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnsvr.exe + 2002-12-11 23:14:32 19,968 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpvacm.dll + 2002-12-11 23:14:32 381,952 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpvoice.dll + 2002-12-11 23:14:32 80,896 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpvsetup.exe + 2002-12-11 23:14:32 112,128 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpvvox.dll + 2004-07-09 03:27:28 79,360 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpwsockx.dll + 2002-12-11 23:14:32 186,880 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsdmo.dll + 2002-12-11 23:14:32 491,520 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsdmoprp.dll + 2004-07-09 03:27:28 381,952 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsound.dll + 2002-12-11 23:14:32 1,294,336 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsound3d.dll + 2002-12-11 23:14:32 18,432 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dswave.dll + 2002-12-11 23:14:32 602,624 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dx7vb.dll + 2003-05-30 08:00:02 1,189,888 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dx8vb.dll + 2004-07-09 03:27:28 974,848 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dxdiag.exe + 2002-12-11 23:14:32 46,592 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dxdllreg.exe + 2002-12-11 23:14:32 18,944 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\encapi.dll + 2002-12-11 23:14:32 130,304 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ks.sys + 2002-12-11 23:14:32 4,096 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ksuser.dll + 2002-12-11 23:14:32 34,304 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mciqtz32.dll + 2002-12-11 23:14:32 13,312 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\msdmo.dll + 2002-12-11 23:14:32 7,424 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mskssrv.sys + 2002-12-11 23:14:32 5,248 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mspclock.sys + 2001-08-23 04:00:00 4,608 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mspqm.sys + 2002-12-11 23:14:32 5,504 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mstee.sys + 2002-12-11 23:14:32 324,096 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mswebdvd.dll + 2002-12-11 23:14:32 173,056 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\qasf.dll + 2002-12-11 23:14:32 257,024 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\qcap.dll + 2004-07-09 03:27:28 316,928 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\qdv.dll + 2004-07-09 03:27:28 470,528 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\qdvd.dll + 2002-12-11 23:14:32 1,798,144 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\qedit.dll + 2002-12-11 23:14:32 733,184 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\qedwipes.dll + 2003-05-30 08:00:02 1,962,496 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\quartz.dll + 2004-07-09 03:27:28 48,512 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\stream.sys + 2002-12-11 23:14:32 4,096 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\swenum.sys + 2004-07-09 03:26:38 11,392 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\bdasup.sys + 2004-07-09 03:26:38 16,384 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\ccdecode.sys + 2004-07-09 03:26:38 15,104 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\mpe.sys + 2004-07-09 03:26:38 1,230,336 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\msvidctl.dll + 2004-07-09 03:26:38 16,896 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\msyuv.dll + 2004-07-09 03:26:38 83,968 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\nabtsfec.sys + 2004-07-09 03:26:38 10,112 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\ndisip.sys + 2004-07-09 03:26:40 354,816 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\psisdecd.dll + 2004-07-09 03:26:40 10,880 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\slip.sys + 2004-07-09 03:26:40 14,976 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\streamip.sys + 2004-07-09 03:26:40 18,688 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\wstcodec.sys + 2004-07-09 03:26:40 47,104 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\wstdecod.dll - 2001-10-26 17:29:26 63,488 ----a-w c:\windows\system32\amstream.dll + 2002-12-11 23:14:32 64,512 ----a-w c:\windows\system32\amstream.dll + 2008-03-29 18:45:49 1,146,232 ----a-w c:\windows\system32\aswBoot.exe + 2008-03-29 18:23:22 95,608 ----a-w c:\windows\system32\AvastSS.scr - 2009-01-03 15:39:24 16,384 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat + 2009-01-03 17:35:53 16,384 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat - 2009-01-03 15:39:24 32,768 ----a-w c:\windows\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\index.dat + 2009-01-03 17:35:53 32,768 ----a-w c:\windows\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\index.dat - 2009-01-03 15:39:24 32,768 ----a-w c:\windows\system32\config\systemprofile\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat + 2009-01-03 17:35:53 32,768 ----a-w c:\windows\system32\config\systemprofile\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat - 2001-10-26 17:29:28 1,181,184 ----a-w c:\windows\system32\d3d8.dll + 2004-07-09 03:27:28 1,201,152 ----a-w c:\windows\system32\d3d8.dll - 2001-10-26 17:29:28 8,192 ----a-w c:\windows\system32\d3d8thk.dll + 2002-12-11 23:14:32 8,192 ----a-w c:\windows\system32\d3d8thk.dll + 2004-07-09 03:27:28 1,703,936 ----a-w c:\windows\system32\d3d9.dll - 2001-10-26 17:29:28 791,040 ----a-w c:\windows\system32\d3dim700.dll + 2003-05-30 08:00:02 797,184 ----a-w c:\windows\system32\d3dim700.dll - 2001-10-26 17:29:28 267,264 ----a-w c:\windows\system32\ddraw.dll + 2004-07-09 03:27:28 292,864 ----a-w c:\windows\system32\ddraw.dll - 2001-10-26 17:29:28 24,064 ----a-w c:\windows\system32\ddrawex.dll + 2002-12-11 23:14:32 24,064 ----a-w c:\windows\system32\ddrawex.dll - 2001-10-26 17:29:28 51,712 ----a-w c:\windows\system32\devenum.dll + 2003-05-30 08:00:02 132,608 ----a-w c:\windows\system32\devenum.dll - 2001-10-26 17:29:28 156,160 ----a-w c:\windows\system32\dinput.dll + 2002-08-29 02:40:00 648,704 ----a-w c:\windows\system32\dinput.dll - 2001-10-26 17:29:28 173,056 ----a-w c:\windows\system32\dinput8.dll + 2002-08-29 02:40:00 667,648 ----a-w c:\windows\system32\dinput8.dll + 2007-05-31 07:44:56 740,442 ----a-w c:\windows\system32\divx.dll + 2001-07-24 00:25:14 122,472 -c--a-w c:\windows\system32\dllcache\aec.sys - 2001-10-26 17:29:26 63,488 -c--a-w c:\windows\system32\dllcache\amstream.dll + 2002-12-11 23:14:32 64,512 -c--a-w c:\windows\system32\dllcache\amstream.dll + 2004-07-09 03:26:38 11,392 -c--a-w c:\windows\system32\dllcache\bdasup.sys + 2004-07-09 03:26:38 16,384 -c--a-w c:\windows\system32\dllcache\ccdecode.sys - 2001-10-26 17:29:28 1,181,184 -c--a-w c:\windows\system32\dllcache\d3d8.dll + 2004-07-09 03:27:28 1,201,152 -c--a-w c:\windows\system32\dllcache\d3d8.dll - 2001-10-26 17:29:28 8,192 -c--a-w c:\windows\system32\dllcache\d3d8thk.dll + 2002-12-11 23:14:32 8,192 -c--a-w c:\windows\system32\dllcache\d3d8thk.dll - 2001-10-26 17:29:28 791,040 -c--a-w c:\windows\system32\dllcache\d3dim700.dll + 2003-05-30 08:00:02 797,184 -c--a-w c:\windows\system32\dllcache\d3dim700.dll - 2001-10-26 17:29:28 267,264 -c--a-w c:\windows\system32\dllcache\ddraw.dll + 2004-07-09 03:27:28 292,864 -c--a-w c:\windows\system32\dllcache\ddraw.dll - 2001-10-26 17:29:28 24,064 -c--a-w c:\windows\system32\dllcache\ddrawex.dll + 2002-12-11 23:14:32 24,064 -c--a-w c:\windows\system32\dllcache\ddrawex.dll - 2001-10-26 17:29:28 51,712 -c--a-w c:\windows\system32\dllcache\devenum.dll + 2003-05-30 08:00:02 132,608 -c--a-w c:\windows\system32\dllcache\devenum.dll - 2001-10-26 17:29:28 156,160 -c--a-w c:\windows\system32\dllcache\dinput.dll + 2002-08-29 02:40:00 648,704 -c--a-w c:\windows\system32\dllcache\dinput.dll - 2001-10-26 17:29:28 173,056 -c--a-w c:\windows\system32\dllcache\dinput8.dll + 2002-08-29 02:40:00 667,648 -c--a-w c:\windows\system32\dllcache\dinput8.dll - 2001-10-26 17:29:28 26,112 -c--a-w c:\windows\system32\dllcache\dmband.dll + 2002-12-11 23:14:32 27,136 -c--a-w c:\windows\system32\dllcache\dmband.dll - 2001-10-26 17:29:28 59,904 -c--a-w c:\windows\system32\dllcache\dmcompos.dll + 2002-12-11 23:14:32 58,368 -c--a-w c:\windows\system32\dllcache\dmcompos.dll - 2001-10-26 17:29:28 172,032 -c--a-w c:\windows\system32\dllcache\dmime.dll + 2004-07-09 03:27:28 181,248 -c--a-w c:\windows\system32\dllcache\dmime.dll - 2001-10-26 17:29:28 31,232 -c--a-w c:\windows\system32\dllcache\dmloader.dll + 2002-12-11 23:14:32 33,280 -c--a-w c:\windows\system32\dllcache\dmloader.dll - 2001-10-26 17:29:28 77,312 -c--a-w c:\windows\system32\dllcache\dmscript.dll + 2002-12-11 23:14:32 76,800 -c--a-w c:\windows\system32\dllcache\dmscript.dll - 2001-10-26 17:29:28 110,080 -c--a-w c:\windows\system32\dllcache\dmstyle.dll + 2002-12-11 23:14:32 98,816 -c--a-w c:\windows\system32\dllcache\dmstyle.dll - 2001-10-26 17:29:28 99,840 -c--a-w c:\windows\system32\dllcache\dmsynth.dll + 2002-12-11 23:14:32 100,864 -c--a-w c:\windows\system32\dllcache\dmsynth.dll - 2001-10-26 17:29:28 94,720 -c--a-w c:\windows\system32\dllcache\dmusic.dll + 2004-07-09 03:27:28 122,880 -c--a-w c:\windows\system32\dllcache\dmusic.dll + 2001-08-17 20:59:58 50,048 -c--a-w c:\windows\system32\dllcache\dmusic.sys - 2001-10-26 17:29:52 26,112 -c--a-w c:\windows\system32\dllcache\dplaysvr.exe + 2002-12-11 23:14:32 28,160 -c--a-w c:\windows\system32\dllcache\dplaysvr.exe - 2001-10-26 17:29:28 212,992 -c--a-w c:\windows\system32\dllcache\dplayx.dll + 2004-07-09 03:27:28 230,400 -c--a-w c:\windows\system32\dllcache\dplayx.dll - 2001-10-26 17:29:28 21,504 -c--a-w c:\windows\system32\dllcache\dpmodemx.dll + 2002-12-11 23:14:32 77,824 -c--a-w c:\windows\system32\dllcache\dpmodemx.dll - 2001-10-26 17:29:28 26,112 -c--a-w c:\windows\system32\dllcache\dpnaddr.dll + 2002-12-11 23:14:32 3,072 -c--a-w c:\windows\system32\dllcache\dpnaddr.dll - 2001-10-26 17:29:28 156,672 -c--a-w c:\windows\system32\dllcache\dpnet.dll + 2002-12-11 23:14:32 723,968 -c--a-w c:\windows\system32\dllcache\dpnet.dll - 2001-10-26 17:29:28 30,208 -c--a-w c:\windows\system32\dllcache\dpnhpast.dll + 2003-03-24 08:00:02 32,768 -c--a-w c:\windows\system32\dllcache\dpnhpast.dll - 2001-10-26 17:29:28 55,808 -c--a-w c:\windows\system32\dllcache\dpnhupnp.dll + 2003-03-24 08:00:02 68,096 -c--a-w c:\windows\system32\dllcache\dpnhupnp.dll - 2001-10-26 17:29:28 38,400 -c--a-w c:\windows\system32\dllcache\dpnlobby.dll + 2002-12-11 23:14:32 3,072 -c--a-w c:\windows\system32\dllcache\dpnlobby.dll - 2001-10-26 17:29:52 18,944 -c--a-w c:\windows\system32\dllcache\dpnsvr.exe + 2002-12-11 23:14:32 16,896 -c--a-w c:\windows\system32\dllcache\dpnsvr.exe - 2001-10-26 17:29:28 24,064 -c--a-w c:\windows\system32\dllcache\dpvacm.dll + 2002-12-11 23:14:32 19,968 -c--a-w c:\windows\system32\dllcache\dpvacm.dll - 2001-10-26 17:29:28 206,848 -c--a-w c:\windows\system32\dllcache\dpvoice.dll + 2002-12-11 23:14:32 381,952 -c--a-w c:\windows\system32\dllcache\dpvoice.dll - 2001-10-26 17:29:52 59,392 -c--a-w c:\windows\system32\dllcache\dpvsetup.exe + 2002-12-11 23:14:32 80,896 -c--a-w c:\windows\system32\dllcache\dpvsetup.exe - 2001-10-26 17:29:28 113,152 -c--a-w c:\windows\system32\dllcache\dpvvox.dll + 2002-12-11 23:14:32 112,128 -c--a-w c:\windows\system32\dllcache\dpvvox.dll - 2001-10-26 17:29:28 50,176 -c--a-w c:\windows\system32\dllcache\dpwsockx.dll + 2004-07-09 03:27:28 79,360 -c--a-w c:\windows\system32\dllcache\dpwsockx.dll + 2001-08-17 21:01:20 57,344 -c--a-w c:\windows\system32\dllcache\drmk.sys + 2001-08-17 21:01:16 2,816 -c--a-w c:\windows\system32\dllcache\drmkaud.sys - 2001-10-26 17:29:28 165,888 -c--a-w c:\windows\system32\dllcache\dsdmo.dll + 2002-12-11 23:14:32 186,880 -c--a-w c:\windows\system32\dllcache\dsdmo.dll - 2001-10-26 17:29:28 67,584 -c--a-w c:\windows\system32\dllcache\dsdmoprp.dll + 2002-12-11 23:14:32 491,520 -c--a-w c:\windows\system32\dllcache\dsdmoprp.dll - 2001-10-26 17:29:28 338,944 -c--a-w c:\windows\system32\dllcache\dsound.dll + 2004-07-09 03:27:28 381,952 -c--a-w c:\windows\system32\dllcache\dsound.dll - 2001-10-26 17:29:28 1,293,824 -c--a-w c:\windows\system32\dllcache\dsound3d.dll + 2002-12-11 23:14:32 1,294,336 -c--a-w c:\windows\system32\dllcache\dsound3d.dll - 2001-10-26 17:29:28 16,896 -c--a-w c:\windows\system32\dllcache\dswave.dll + 2002-12-11 23:14:32 18,432 -c--a-w c:\windows\system32\dllcache\dswave.dll - 2001-10-26 17:29:30 595,456 -c--a-w c:\windows\system32\dllcache\dx7vb.dll + 2002-12-11 23:14:32 602,624 -c--a-w c:\windows\system32\dllcache\dx7vb.dll - 2001-10-26 17:29:30 1,185,792 -c--a-w c:\windows\system32\dllcache\dx8vb.dll + 2003-05-30 08:00:02 1,189,888 -c--a-w c:\windows\system32\dllcache\dx8vb.dll - 2001-08-17 21:53:20 10,496 -c--a-w c:\windows\system32\dllcache\dxapi.sys + 2001-08-23 04:00:00 10,496 -c--a-w c:\windows\system32\dllcache\dxapi.sys - 2001-10-26 17:29:52 786,432 -c--a-w c:\windows\system32\dllcache\dxdiag.exe + 2004-07-09 03:27:28 974,848 -c--a-w c:\windows\system32\dllcache\dxdiag.exe + 2001-08-17 21:00:54 159,232 -c--a-w c:\windows\system32\dllcache\kmixer.sys + 2002-12-11 23:14:32 130,304 -c--a-w c:\windows\system32\dllcache\ks.sys + 2002-12-11 23:14:32 4,096 -c--a-w c:\windows\system32\dllcache\ksuser.dll - 2001-10-26 17:29:34 33,280 -c--a-w c:\windows\system32\dllcache\mciqtz32.dll + 2002-12-11 23:14:32 34,304 -c--a-w c:\windows\system32\dllcache\mciqtz32.dll + 2004-07-09 03:26:38 15,104 -c--a-w c:\windows\system32\dllcache\mpe.sys - 2001-10-26 17:29:36 11,264 -c--a-w c:\windows\system32\dllcache\msdmo.dll + 2002-12-11 23:14:32 13,312 -c--a-w c:\windows\system32\dllcache\msdmo.dll + 2004-07-09 03:26:38 52,096 -c--a-w c:\windows\system32\dllcache\msdv.sys + 2002-12-11 23:14:32 7,424 -c--a-w c:\windows\system32\dllcache\mskssrv.sys + 2002-12-11 23:14:32 5,248 -c--a-w c:\windows\system32\dllcache\mspclock.sys + 2001-08-23 04:00:00 4,608 -c--a-w c:\windows\system32\dllcache\mspqm.sys + 2002-12-11 23:14:32 5,504 -c--a-w c:\windows\system32\dllcache\mstee.sys - 2001-10-26 17:29:36 982,528 -c--a-w c:\windows\system32\dllcache\msvidctl.dll + 2004-07-09 03:26:38 1,230,336 -c--a-w c:\windows\system32\dllcache\msvidctl.dll - 2001-10-26 17:29:36 244,224 -c--a-w c:\windows\system32\dllcache\mswebdvd.dll + 2002-12-11 23:14:32 324,096 -c--a-w c:\windows\system32\dllcache\mswebdvd.dll + 2004-07-09 03:26:38 16,896 -c--a-w c:\windows\system32\dllcache\msyuv.dll + 2004-07-09 03:26:38 83,968 -c--a-w c:\windows\system32\dllcache\nabtsfec.sys + 2004-07-09 03:26:38 10,112 -c--a-w c:\windows\system32\dllcache\ndisip.sys + 2002-08-29 02:41:00 31,744 -c--a-w c:\windows\system32\dllcache\pid.dll + 2001-08-18 05:24:38 135,040 -c--a-w c:\windows\system32\dllcache\portcls.sys + 2004-07-09 03:26:40 354,816 -c--a-w c:\windows\system32\dllcache\psisdecd.dll - 2001-10-26 17:29:40 152,576 -c--a-w c:\windows\system32\dllcache\qasf.dll + 2002-12-11 23:14:32 173,056 -c--a-w c:\windows\system32\dllcache\qasf.dll - 2001-10-26 17:29:40 184,832 -c--a-w c:\windows\system32\dllcache\qcap.dll + 2002-12-11 23:14:32 257,024 -c--a-w c:\windows\system32\dllcache\qcap.dll - 2001-10-26 17:29:40 266,752 -c--a-w c:\windows\system32\dllcache\qdv.dll + 2004-07-09 03:27:28 316,928 -c--a-w c:\windows\system32\dllcache\qdv.dll - 2001-10-26 17:29:40 357,376 -c--a-w c:\windows\system32\dllcache\qdvd.dll + 2004-07-09 03:27:28 470,528 -c--a-w c:\windows\system32\dllcache\qdvd.dll - 2001-10-26 17:29:40 512,512 -c--a-w c:\windows\system32\dllcache\qedit.dll + 2002-12-11 23:14:32 1,798,144 -c--a-w c:\windows\system32\dllcache\qedit.dll - 2001-10-26 17:28:44 734,208 -c--a-w c:\windows\system32\dllcache\qedwipes.dll + 2002-12-11 23:14:32 733,184 -c--a-w c:\windows\system32\dllcache\qedwipes.dll - 2001-10-26 17:29:40 1,139,200 -c--a-w c:\windows\system32\dllcache\quartz.dll + 2003-05-30 08:00:02 1,962,496 -c--a-w c:\windows\system32\dllcache\quartz.dll + 2004-07-09 03:26:40 10,880 -c--a-w c:\windows\system32\dllcache\slip.sys + 2001-08-17 21:00:46 5,632 -c--a-w c:\windows\system32\dllcache\splitter.sys + 2004-07-09 03:27:28 48,512 -c--a-w c:\windows\system32\dllcache\stream.sys + 2004-07-09 03:26:40 14,976 -c--a-w c:\windows\system32\dllcache\streamip.sys + 2002-12-11 23:14:32 4,096 -c--a-w c:\windows\system32\dllcache\swenum.sys + 2001-08-17 21:00:52 54,272 -c--a-w c:\windows\system32\dllcache\swmidi.sys + 2001-08-18 05:24:44 57,472 -c--a-w c:\windows\system32\dllcache\sysaudio.sys + 2001-08-18 05:24:46 79,616 -c--a-w c:\windows\system32\dllcache\wdmaud.sys + 2004-07-09 03:26:40 18,688 -c--a-w c:\windows\system32\dllcache\wstcodec.sys - 2001-10-26 17:29:46 46,592 -c--a-w c:\windows\system32\dllcache\wstdecod.dll + 2004-07-09 03:26:40 47,104 -c--a-w c:\windows\system32\dllcache\wstdecod.dll - 2001-10-26 17:29:28 26,112 ----a-w c:\windows\system32\dmband.dll + 2002-12-11 23:14:32 27,136 ----a-w c:\windows\system32\dmband.dll - 2001-10-26 17:29:28 59,904 ----a-w c:\windows\system32\dmcompos.dll + 2002-12-11 23:14:32 58,368 ----a-w c:\windows\system32\dmcompos.dll - 2001-10-26 17:29:28 172,032 ----a-w c:\windows\system32\dmime.dll + 2004-07-09 03:27:28 181,248 ----a-w c:\windows\system32\dmime.dll - 2001-10-26 17:29:28 31,232 ----a-w c:\windows\system32\dmloader.dll + 2002-12-11 23:14:32 33,280 ----a-w c:\windows\system32\dmloader.dll - 2001-10-26 17:29:28 77,312 ----a-w c:\windows\system32\dmscript.dll + 2002-12-11 23:14:32 76,800 ----a-w c:\windows\system32\dmscript.dll - 2001-10-26 17:29:28 110,080 ----a-w c:\windows\system32\dmstyle.dll + 2002-12-11 23:14:32 98,816 ----a-w c:\windows\system32\dmstyle.dll - 2001-10-26 17:29:28 99,840 ----a-w c:\windows\system32\dmsynth.dll + 2002-12-11 23:14:32 100,864 ----a-w c:\windows\system32\dmsynth.dll - 2001-10-26 17:29:28 94,720 ----a-w c:\windows\system32\dmusic.dll + 2004-07-09 03:27:28 122,880 ----a-w c:\windows\system32\dmusic.dll + 2007-04-23 01:02:36 73,728 ----a-w c:\windows\system32\dpl100.dll - 2001-10-26 17:29:52 26,112 ----a-w c:\windows\system32\dplaysvr.exe + 2002-12-11 23:14:32 28,160 ----a-w c:\windows\system32\dplaysvr.exe - 2001-10-26 17:29:28 212,992 ----a-w c:\windows\system32\dplayx.dll + 2004-07-09 03:27:28 230,400 ----a-w c:\windows\system32\dplayx.dll - 2001-10-26 17:29:28 21,504 ----a-w c:\windows\system32\dpmodemx.dll + 2002-12-11 23:14:32 77,824 ----a-w c:\windows\system32\dpmodemx.dll - 2001-10-26 17:29:28 26,112 ----a-w c:\windows\system32\dpnaddr.dll + 2002-12-11 23:14:32 3,072 ----a-w c:\windows\system32\dpnaddr.dll - 2001-10-26 17:29:28 156,672 ----a-w c:\windows\system32\dpnet.dll + 2002-12-11 23:14:32 723,968 ----a-w c:\windows\system32\dpnet.dll - 2001-10-26 17:29:28 30,208 ----a-w c:\windows\system32\dpnhpast.dll + 2003-03-24 08:00:02 32,768 ----a-w c:\windows\system32\dpnhpast.dll - 2001-10-26 17:29:28 55,808 ----a-w c:\windows\system32\dpnhupnp.dll + 2003-03-24 08:00:02 68,096 ----a-w c:\windows\system32\dpnhupnp.dll - 2001-10-26 17:29:28 38,400 ----a-w c:\windows\system32\dpnlobby.dll + 2002-12-11 23:14:32 3,072 ----a-w c:\windows\system32\dpnlobby.dll - 2001-10-26 17:29:52 18,944 ----a-w c:\windows\system32\dpnsvr.exe + 2002-12-11 23:14:32 16,896 ----a-w c:\windows\system32\dpnsvr.exe - 2001-10-26 17:29:28 24,064 ----a-w c:\windows\system32\dpvacm.dll + 2002-12-11 23:14:32 19,968 ----a-w c:\windows\system32\dpvacm.dll - 2001-10-26 17:29:28 206,848 ----a-w c:\windows\system32\dpvoice.dll + 2002-12-11 23:14:32 381,952 ----a-w c:\windows\system32\dpvoice.dll - 2001-10-26 17:29:52 59,392 ----a-w c:\windows\system32\dpvsetup.exe + 2002-12-11 23:14:32 80,896 ----a-w c:\windows\system32\dpvsetup.exe - 2001-10-26 17:29:28 113,152 ----a-w c:\windows\system32\dpvvox.dll + 2002-12-11 23:14:32 112,128 ----a-w c:\windows\system32\dpvvox.dll - 2001-10-26 17:29:28 50,176 ----a-w c:\windows\system32\dpwsockx.dll + 2004-07-09 03:27:28 79,360 ----a-w c:\windows\system32\dpwsockx.dll + 2008-03-29 18:26:52 26,944 ----a-w c:\windows\system32\drivers\aavmker4.sys + 2001-07-24 00:25:14 122,472 ----a-w c:\windows\system32\drivers\aec.sys + 2008-01-17 16:34:01 93,264 ----a-w c:\windows\system32\drivers\aswmon.sys + 2008-03-29 18:35:21 94,544 ----a-w c:\windows\system32\drivers\aswmon2.sys + 2008-03-29 18:29:08 23,152 ----a-w c:\windows\system32\drivers\aswRdr.sys + 2008-03-29 18:31:34 75,856 ----a-w c:\windows\system32\drivers\aswSP.sys + 2008-03-29 18:27:33 42,912 ----a-w c:\windows\system32\drivers\aswTdi.sys + 2004-07-09 03:26:38 11,392 ----a-w c:\windows\system32\drivers\bdasup.sys + 2004-07-09 03:26:38 16,384 ----a-w c:\windows\system32\drivers\ccdecode.sys + 2001-08-17 20:59:58 50,048 ----a-w c:\windows\system32\drivers\DMusic.sys + 2001-08-17 21:01:20 57,344 ----a-w c:\windows\system32\drivers\drmk.sys + 2001-08-17 21:01:16 2,816 ----a-w c:\windows\system32\drivers\drmkaud.sys - 2001-08-17 21:53:20 10,496 ----a-w c:\windows\system32\drivers\dxapi.sys + 2001-08-23 04:00:00 10,496 ----a-w c:\windows\system32\drivers\dxapi.sys + 2001-08-17 21:00:54 159,232 ----a-w c:\windows\system32\drivers\kmixer.sys - 2001-10-26 18:03:24 134,144 ----a-w c:\windows\system32\drivers\ks.sys + 2002-12-11 23:14:32 130,304 ----a-w c:\windows\system32\drivers\ks.sys + 2004-07-09 03:26:38 15,104 ----a-w c:\windows\system32\drivers\mpe.sys + 2004-07-09 03:26:38 52,096 ----a-w c:\windows\system32\drivers\msdv.sys + 2002-12-11 23:14:32 7,424 ----a-w c:\windows\system32\drivers\mskssrv.sys + 2002-12-11 23:14:32 5,248 ----a-w c:\windows\system32\drivers\mspclock.sys + 2001-08-23 04:00:00 4,608 ----a-w c:\windows\system32\drivers\mspqm.sys + 2002-12-11 23:14:32 5,504 ----a-w c:\windows\system32\drivers\mstee.sys + 2004-07-09 03:26:38 83,968 ----a-w c:\windows\system32\drivers\nabtsfec.sys + 2004-07-09 03:26:38 10,112 ----a-w c:\windows\system32\drivers\ndisip.sys + 2001-08-18 05:24:38 135,040 ----a-w c:\windows\system32\drivers\portcls.sys + 2004-07-09 03:26:40 10,880 ----a-w c:\windows\system32\drivers\slip.sys + 2001-08-17 21:00:46 5,632 ----a-w c:\windows\system32\drivers\splitter.sys - 2001-10-26 18:03:24 42,752 ----a-w c:\windows\system32\drivers\stream.sys + 2004-07-09 03:27:28 48,512 ----a-w c:\windows\system32\drivers\stream.sys + 2004-07-09 03:26:40 14,976 ----a-w c:\windows\system32\drivers\streamip.sys - 2001-10-26 18:03:24 3,840 ----a-w c:\windows\system32\drivers\swenum.sys + 2002-12-11 23:14:32 4,096 ----a-w c:\windows\system32\drivers\swenum.sys + 2001-08-17 21:00:52 54,272 ----a-w c:\windows\system32\drivers\swmidi.sys + 2001-08-18 05:24:44 57,472 ----a-w c:\windows\system32\drivers\sysaudio.sys + 2003-06-16 03:05:40 369,920 ----a-r c:\windows\system32\drivers\viaudios.sys + 2001-08-18 05:24:46 79,616 ----a-w c:\windows\system32\drivers\wdmaud.sys + 2004-07-09 03:26:40 18,688 ----a-w c:\windows\system32\drivers\wstcodec.sys - 2001-10-26 17:29:28 165,888 ----a-w c:\windows\system32\dsdmo.dll + 2002-12-11 23:14:32 186,880 ----a-w c:\windows\system32\dsdmo.dll - 2001-10-26 17:29:28 67,584 ----a-w c:\windows\system32\dsdmoprp.dll + 2002-12-11 23:14:32 491,520 ----a-w c:\windows\system32\dsdmoprp.dll - 2001-10-26 17:29:28 338,944 ----a-w c:\windows\system32\dsound.dll + 2004-07-09 03:27:28 381,952 ----a-w c:\windows\system32\dsound.dll - 2001-10-26 17:29:28 1,293,824 ----a-w c:\windows\system32\dsound3d.dll + 2002-12-11 23:14:32 1,294,336 ----a-w c:\windows\system32\dsound3d.dll - 2001-10-26 17:29:28 16,896 ----a-w c:\windows\system32\dswave.dll + 2002-12-11 23:14:32 18,432 ----a-w c:\windows\system32\dswave.dll - 2001-10-26 17:29:30 595,456 ----a-w c:\windows\system32\dx7vb.dll + 2002-12-11 23:14:32 602,624 ----a-w c:\windows\system32\dx7vb.dll - 2001-10-26 17:29:30 1,185,792 ----a-w c:\windows\system32\dx8vb.dll + 2003-05-30 08:00:02 1,189,888 ----a-w c:\windows\system32\dx8vb.dll - 2001-10-26 17:29:52 786,432 ----a-w c:\windows\system32\dxdiag.exe + 2004-07-09 03:27:28 974,848 ----a-w c:\windows\system32\dxdiag.exe + 2004-07-09 03:27:28 1,769,472 ----a-w c:\windows\system32\dxdiagn.dll + 2002-12-11 23:14:32 46,592 ----a-w c:\windows\system32\dxdllreg.exe + 2002-12-11 23:14:32 18,944 ----a-w c:\windows\system32\encapi.dll + 2007-06-03 13:31:28 10,752 ----a-w c:\windows\system32\ff_vfw.dll + 2009-01-03 17:31:59 144,792 ----a-w c:\windows\system32\java.exe + 2009-01-03 17:31:59 144,792 ----a-w c:\windows\system32\javaw.exe + 2009-01-03 17:31:59 148,888 ----a-w c:\windows\system32\javaws.exe + 2002-12-11 23:14:32 4,096 ----a-w c:\windows\system32\ksuser.dll + 2008-10-05 03:16:26 235,936 ----a-r c:\windows\system32\Macromed\Flash\FlashUtil10a.exe + 2008-10-05 03:24:02 3,695,008 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32.dll + 2008-10-05 03:24:04 235,936 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe + 2009-01-03 18:57:50 89,102 ----a-w c:\windows\system32\Macromed\Flash\uninstall_activeX.exe + 2009-01-03 17:21:42 84,661 ----a-w c:\windows\system32\Macromed\Flash\uninstall_plugin.exe - 2001-10-26 17:29:34 33,280 ----a-w c:\windows\system32\mciqtz32.dll + 2002-12-11 23:14:32 34,304 ----a-w c:\windows\system32\mciqtz32.dll - 2001-10-26 17:29:36 11,264 ----a-w c:\windows\system32\msdmo.dll + 2002-12-11 23:14:32 13,312 ----a-w c:\windows\system32\msdmo.dll - 2001-10-26 17:29:36 982,528 ----a-w c:\windows\system32\msvidctl.dll + 2004-07-09 03:26:38 1,230,336 ----a-w c:\windows\system32\msvidctl.dll - 2001-10-26 17:29:36 244,224 ----a-w c:\windows\system32\mswebdvd.dll + 2002-12-11 23:14:32 324,096 ----a-w c:\windows\system32\mswebdvd.dll - 2001-10-26 18:03:24 16,384 ----a-w c:\windows\system32\msyuv.dll + 2004-07-09 03:26:38 16,896 ----a-w c:\windows\system32\msyuv.dll - 2009-01-03 15:02:18 40,128 ----a-w c:\windows\system32\perfc009.dat + 2009-01-03 16:18:30 40,128 ----a-w c:\windows\system32\perfc009.dat - 2009-01-03 15:02:18 49,712 ----a-w c:\windows\system32\perfc015.dat + 2009-01-03 16:18:30 49,712 ----a-w c:\windows\system32\perfc015.dat - 2009-01-03 15:02:18 311,740 ----a-w c:\windows\system32\perfh009.dat + 2009-01-03 16:18:30 311,740 ----a-w c:\windows\system32\perfh009.dat - 2009-01-03 15:02:18 355,830 ----a-w c:\windows\system32\perfh015.dat + 2009-01-03 16:18:30 355,830 ----a-w c:\windows\system32\perfh015.dat - 2001-10-26 18:03:24 31,744 ----a-w c:\windows\system32\pid.dll + 2002-08-29 02:41:00 31,744 ----a-w c:\windows\system32\pid.dll + 2008-04-28 03:00:00 278,528 ----a-w c:\windows\system32\pncrt.dll + 2008-04-28 03:00:00 6,656 ----a-w c:\windows\system32\pndx5016.dll + 2008-04-28 03:00:00 5,632 ----a-w c:\windows\system32\pndx5032.dll + 2004-07-09 03:26:40 354,816 ----a-w c:\windows\system32\psisdecd.dll - 2001-10-26 17:29:40 152,576 ----a-w c:\windows\system32\qasf.dll + 2002-12-11 23:14:32 173,056 ----a-w c:\windows\system32\qasf.dll - 2001-10-26 17:29:40 184,832 ----a-w c:\windows\system32\qcap.dll + 2002-12-11 23:14:32 257,024 ----a-w c:\windows\system32\qcap.dll - 2001-10-26 17:29:40 266,752 ----a-w c:\windows\system32\qdv.dll + 2004-07-09 03:27:28 316,928 ----a-w c:\windows\system32\qdv.dll - 2001-10-26 17:29:40 357,376 ----a-w c:\windows\system32\qdvd.dll + 2004-07-09 03:27:28 470,528 ----a-w c:\windows\system32\qdvd.dll - 2001-10-26 17:29:40 512,512 ----a-w c:\windows\system32\qedit.dll + 2002-12-11 23:14:32 1,798,144 ----a-w c:\windows\system32\qedit.dll - 2001-10-26 17:28:44 734,208 ----a-w c:\windows\system32\qedwipes.dll + 2002-12-11 23:14:32 733,184 ----a-w c:\windows\system32\qedwipes.dll + 2007-04-23 01:15:30 3,596,288 ----a-w c:\windows\system32\qt-dx331.dll - 2001-10-26 17:29:40 1,139,200 ----a-w c:\windows\system32\quartz.dll + 2003-05-30 08:00:02 1,962,496 ----a-w c:\windows\system32\quartz.dll + 2008-04-28 03:00:00 185,944 ----a-w c:\windows\system32\rmoc3260.dll - 2001-10-26 18:03:24 22,016 ----a-w c:\windows\system32\wdmaud.drv + 2001-10-26 16:30:10 22,016 ----a-w c:\windows\system32\wdmaud.drv - 2001-10-26 17:29:46 46,592 ----a-w c:\windows\system32\wstdecod.dll + 2004-07-09 03:26:40 47,104 ----a-w c:\windows\system32\wstdecod.dll + 2007-04-28 13:54:36 593,920 ----a-w c:\windows\system32\xvidcore.dll + 2006-11-01 13:54:30 180,224 ----a-w c:\windows\system32\xvidvfw.dll + 2004-01-25 17:18:44 217,088 ----a-w c:\windows\system32\yv12vfw.dll + 2009-01-03 22:24:05 16,384 ----atw c:\windows\temp\Perflib_Perfdata_5fc.dat + 2009-01-03 17:35:57 16,384 ----atw c:\windows\temp\Perflib_Perfdata_b8.dat . -- Migawka wyzerowana -- . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\System32\ctfmon.exe" [2001-10-26 13312] "MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2001-08-02 1077277] "Gadu-Gadu"="d:\programy\Gadu-Gadu\gg.exe" [2008-03-20 2127296] "Washerop"="d:\programy\Washer-OP\washerop.exe" [2000-04-10 712192] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\System32\NvCpl.dll" [2008-10-07 13574144] "NvMediaCenter"="c:\windows\System32\NvMcTray.dll" [2008-10-07 86016] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-01-03 136600] "avast!"="d:\programy\Avast4\ashDisp.exe" [2008-03-29 79224] "nwiz"="nwiz.exe" [2008-10-07 c:\windows\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2001-10-26 13312] R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-01-03 75856] . . ------- Skan uzupełniający ------- . IE: Pobierz &Wszystko używając Mass Downloader'a - d:\programy\Mass Downloader\Add_All.htm IE: Pobierz używając &Mass Downloader'a - d:\programy\Mass Downloader\Add_Url.htm FF - ProfilePath - c:\documents and settings\asdf\Dane aplikacji\Mozilla\Firefox\Profiles\nc6xfu5q.default\ FF - plugin: d:\programy\Opera\program\plugins\npdsplay.dll FF - plugin: d:\programy\Opera\program\plugins\npwmsdrm.dll FF - plugin: d:\programy\Real Alternative\browser\plugins\nppl3260.dll FF - plugin: d:\programy\Real Alternative\browser\plugins\nprpjplug.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-01-03 23:31:09 Windows 5.1.2600 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- - - - - - - - > 'winlogon.exe'(628) c:\windows\system32\ODBC32.dll - - - - - - - > 'lsass.exe'(684) c:\windows\System32\dssenh.dll . Czas ukończenia: 2009-01-03 23:31:59 ComboFix-quarantined-files.txt 2009-01-03 22:31:52 ComboFix2.txt 2009-01-03 16:18:41 Przed: 1 753 350 144 bajtów wolnych Po: 1,747,075,072 bajtów wolnych 513

HJT:

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:32:47, on 2009-01-03 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe d:\Programy\Avast4\aswUpdSv.exe d:\Programy\Avast4\ashServ.exe C:\WINDOWS\System32\RUNDLL32.EXE C:\Program Files\Java\jre6\bin\jusched.exe D:\Programy\Avast4\ashDisp.exe C:\WINDOWS\System32\ctfmon.exe D:\Programy\Washer-OP\washerop.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\PnkBstrA.exe C:\WINDOWS\System32\PnkBstrB.exe d:\Programy\Avast4\ashWebSv.exe d:\Programy\Avast4\ashMaiSv.exe C:\WINDOWS\System32\wbem\wmiapsrv.exe C:\WINDOWS\system32\notepad.exe C:\WINDOWS\explorer.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: IECatcher Class - {B930BA63-9E5A-11D3-A288-0000E80E2EDE} - D:\Programy\MASSDO~1\MDHELPER.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [avast!] d:\Programy\Avast4\ashDisp.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [Gadu-Gadu] "D:\Programy\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [Washerop] d:\Programy\Washer-OP\washerop.exe /0 O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Pobierz &Wszystko używając Mass Downloader'a - D:\Programy\Mass Downloader\Add_All.htm O8 - Extra context menu item: Pobierz używając &Mass Downloader'a - D:\Programy\Mass Downloader\Add_Url.htm O9 - Extra button: Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - D:\Programy\Mass Downloader\massdown.exe O9 - Extra 'Tools' menuitem: &Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - D:\Programy\Mass Downloader\massdown.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - d:\Programy\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - d:\Programy\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - d:\Programy\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - d:\Programy\Avast4\ashWebSv.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\System32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\System32\PnkBstrB.exe -- End of file - 4145 bytes

Dodano Dzisiaj, 23:47:
poszukalem tez co na innych forach o tym i znalazlem w dzeinniku taki powtarzajacy sie blad systemu: Service Control Menager

**Posty:** 18165 · przez **wojtas** 04 Sty 2009, 12:07

wejdz do konsoli odzyskiwania i wpisz

expand X:\i386\explorer.ex_ C:\WINDOWS\

a jak nie działa

expand X:\i386\explorer.ex_ C:\WINDOWS\explorer.exe

X - literka Twojego napedu..

i reset kompa

**Posty:** 6 · przez **sito** 04 Sty 2009, 16:48

wydluzylo to tylko czas dzialania ale nadal sie wiesza ...

**Posty:** 18165 · przez **wojtas** 04 Sty 2009, 16:51

to wykonaj to bo juz nic wiecej do głowy mi nie przychodzi:

1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp

oraz skasuj folder C:\Qoobox
2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
5.Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

i tym:

FixIEDef.

**Posty:** 6 · przez **sito** 04 Sty 2009, 23:03

wojtas napisał(a):wejdz do konsoli odzyskiwania

W linii komend wpisz polecenie:

expand X:\i386\explorer.ex_ Y:\Windows\system32\

X- litera napędu z płytką
Y- nazwa partycji gdzie masz zainstalowany system

raporty pokazuja ze wyszstko ok...

powtorzylem to i avast wykryl mi explorer.exe w tym folderze jako wirus (cos na r nazwy nie pamietam)

**Posty:** 8001 · przez **Okocza** 04 Sty 2009, 23:05

sito napisał(a):i avast wykryl mi explorer.exe w tym folderze jako wirus

a przeskanuj ten plik na www.virustotal.com i daj raport.

**Posty:** 6 · przez **sito** 04 Sty 2009, 23:18

0/38 wiec nie wiem co jest ....

Dodano Dzisiaj, 22:38:
jutro podlacze inny dysk pod kompa zainstaluje windowsa i zobacze czy bedzie na nim prolem tez wystepowal ...

**Posty:** 8 · przez **desire** 05 Sty 2009, 22:06

Dodano Dzisiaj, 23:47:
poszukalem tez co na innych forach o tym i znalazlem w dzeinniku taki powtarzajacy sie blad systemu: Service Control Menager

Wybaczcie że się wtrącam ale u mnie występuje to samo i nie chca mi sie niektore programy wlaczac.
Jak ktos bylby mily i napisal mi na PW co z tym zrobic pls.