i problem z gg

**Posty:** 352 · przez **Sety** 10 Kwi 2007, 16:42

GG nie chce mi się włączyć ... klikam 2 razy i nic , czekałem nawet 15 min i tez nic , reinstalacja nie pomogła , pozatym komputer zaczął dziwnie wolno chodzić , daje LOG

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 16:30:22, on 2007-04-10 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\system32\lsasss.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\devldr32.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\WINDOWS\system32\wpabaln.exe C:\Documents and Settings\Safas\Pulpit\hijackthis.com R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [Lexmark_X79-55] C:\WINDOWS\system32\lsasss.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O20 - AppInit_DLLs: O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

**Posty:** 3117 · przez **Sylwek 17** 10 Kwi 2007, 16:49

Witam

A po reinstalacji przeczyściles rejestr i usunołeś katalogi z document and setting?

Ps.Tak na moje oko log jest ucięty,ale nieznam sie na tym.

**Posty:** 352 · przez **Sety** 10 Kwi 2007, 16:59

Sylwek 17 napisał(a):Witam

A po reinstalacji przeczyściles rejestr i usunołeś katalogi z document and setting?

Ps.Tak na moje oko log jest ucięty,ale nieznam sie na tym.

Tak zrobiłem to :

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 16:48:57, on 2007-04-10 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\system32\lsasss.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\devldr32.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\WINDOWS\system32\wpabaln.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Documents and Settings\Safas\Pulpit\hijackthis.com R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [Lexmark_X79-55] C:\WINDOWS\system32\lsasss.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O20 - AppInit_DLLs: O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

wygenerowało mi się tylko to...

**Posty:** 1425 · przez **Mały22222** 10 Kwi 2007, 17:06

Log jest cały ale trzeba cos usunąc
Wyłączasz przywracanie systemu i wchodzisz w tryb awaryjny, uruchamiasz hijackthis i usuwasz te wpisy:

C:\WINDOWS\system32\lsasss.exe

O4 - HKLM\..\Run: [Lexmark_X79-55] C:\WINDOWS\system32\lsasss.exe

O20 - AppInit_DLLs:

plik pogrubiony z dysku do kosza jak jeszcze zostanną
po tym nowy log z hijacka i sillenta

Autor postu otrzymał pochwałę

**Posty:** 352 · przez **Sety** 10 Kwi 2007, 17:38

Kod: Zaznacz wszystko: An unexpected error has occurred at procedure: modBackup_MakeBackup(sItem=O20 - AppInit_DLLs: ) Error #5 - Invalid procedure call or argument Please email me at merijn@spywareinfo.com, reporting the following: * What you were trying to fix when the error occurred, if applicable * How you can reproduce the error * A complete HijackThis scan log, if possible Windows version: Windows NT 5.01.2600 MSIE version: 6.0.2900.2180 HijackThis version: 1.99.1 This message has been copied to your clipboard. Click OK to continue the rest of the scan.

Wyskakuje mi to gdy chcę usunąć to :

Kod: Zaznacz wszystko: O20 - AppInit_DLLs:

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 17:25:52, on 2007-04-10 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\devldr32.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\Safas\Pulpit\hijackthis.com C:\WINDOWS\system32\wpabaln.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx (file missing) O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [Lexmark_X79-55] C:\WINDOWS\system32\lsasss.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

Kod: Zaznacz wszystko: "Silent Runners.vbs", revision R50, http://www.silentrunners.org/ Operating System: Windows XP SP2 Output limited to non-default values, except where indicated by "{++}" Startup items buried in registry: --------------------------------- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++} "CTFMON.EXE" = "C:\WINDOWS\system32\ctfmon.exe" [null data] "MSMSGS" = ""C:\Program Files\Messenger\msmsgs.exe" /background" [MS] HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++} "NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup" [MS] "nwiz" = "nwiz.exe /install" ["NVIDIA Corporation"] "NvMediaCenter" = "RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit" [MS] "QuickTime Task" = ""C:\Program Files\QuickTime\qttask.exe" -atboottime" [file not found] "DAEMON Tools" = ""C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033" [null data] "Lexmark_X79-55" = "C:\WINDOWS\system32\lsasss.exe" [file not found] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided) -> {HKLM...CLSID} = "AcroIEHlprObj Class" \InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx" [file not found] HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ "{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania" -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania" \InProcServer32\(Default) = "deskpan.dll" [file not found] "{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu" -> {HKLM...CLSID} = "HyperTerminal Icon Ext" \InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."] "{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class" -> {HKLM...CLSID} = "DesktopContext Class" \InProcServer32\(Default) = "C:\WINDOWS\system32\nvcpl.dll" ["NVIDIA Corporation"] "{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper" -> {HKLM...CLSID} = "NVIDIA CPL Extension" \InProcServer32\(Default) = "C:\WINDOWS\system32\nvcpl.dll" ["NVIDIA Corporation"] "{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer" -> {HKLM...CLSID} = "Desktop Explorer" \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu" -> {HKLM...CLSID} = "nView Desktop Context Menu" \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{0006F045-0000-0000-C000-000000000046}" = "Microsoft Outlook Custom Icon Handler" -> {HKLM...CLSID} = "Rozszerzenie ikon plików programu Outlook" \InProcServer32\(Default) = "C:\PROGRA~1\Microsoft Office\Office\OLKFSTUB.DLL" [MS] "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\ WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\ WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] Group Policies {policy setting}: -------------------------------- Note: detected settings may not have any effect. HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\ "NoLowDiskSpaceChecks" = (REG_DWORD) hex:0x00000001 {unrecognized setting} HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\ "shutdownwithoutlogon" = (REG_DWORD) hex:0x00000001 {Shutdown: Allow system to be shut down without having to log on} "undockwithoutlogon" = (REG_DWORD) hex:0x00000001 {Devices: Allow undock without having to log on} Active Desktop and Wallpaper: ----------------------------- Active Desktop may be disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState Displayed if Active Desktop enabled and wallpaper not set by Group Policy: HKCU\Software\Microsoft\Internet Explorer\Desktop\General\ "Wallpaper" = "C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp" Displayed if Active Desktop disabled and wallpaper not set by Group Policy: HKCU\Control Panel\Desktop\ "Wallpaper" = "C:\Documents and Settings\Safas\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp" Enabled Screen Saver: --------------------- HKCU\Control Panel\Desktop\ "SCRNSAVE.EXE" = "C:\WINDOWS\System32\logon.scr" [MS] Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] 000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS] 000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] Transport Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: %SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 13 %SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05 Toolbars, Explorer Bars, Extensions: ------------------------------------ Extensions (Tools menu items, main toolbar menu buttons) HKLM\Software\Microsoft\Internet Explorer\Extensions\ {FB5F1910-F110-11D2-BB9E-00C04F795683}\ "ButtonText" = "Messenger" "MenuText" = "Windows Messenger" "Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS] Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ NVIDIA Display Driver Service, NVSvc, "C:\WINDOWS\system32\nvsvc32.exe" ["NVIDIA Corporation"] Print Monitors: --------------- HKLM\System\CurrentControlSet\Control\Print\Monitors\ HP CLJ1600 LM\Driver = "ZLHP1600.DLL" ["Zenographics, Inc."] ---------- + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + The search for DESKTOP.INI DLL launch points on all local fixed drives took 11 seconds. ---------- (total run time: 34 seconds)

A gg nadal niee chodzi;/

**Posty:** 18165 · przez **wojtas** 10 Kwi 2007, 18:38

kasujesz wpis:

O4 - HKLM\..\Run: [Lexmark_X79-55] C:\WINDOWS\system32\lsasss.exe

i pokaz log z comboscana:

http://forum.programosy.pl/dodatkowe-narzedzia-do-usuwania-i-ochrony-vt42021.html

**Posty:** 352 · przez **Sety** 10 Kwi 2007, 18:50

Kod: Zaznacz wszystko: ComboScan v20070306.20 run by Safas on 2007-04-10 at 18:36:48 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- HijackThis (run as Safas.exe) ----------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 18:37:21, on 2007-04-10 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\devldr32.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\wpabaln.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Documents and Settings\Safas\Pulpit\Call of Duty 2\CoD2MP_s.exe C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe C:\Documents and Settings\Safas\Pulpit\comboscan.exe C:\DOCUME~1\Safas\Pulpit\Safas.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx (file missing) O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [Lexmark_X79-55] C:\WINDOWS\system32\lsasss.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe -- Files created between 2007-03-10 and 2007-04-10 ----------------------------- 2007-04-10 17:26:38 0 d-------- C:\!KillBox 2007-04-10 13:33:54 0 d-------- C:\WINDOWS\system32\bak 2007-04-10 13:32:55 0 d-------- C:\Program Files\CRS-MegaDev 2007-04-06 16:05:56 43520 --a------ C:\WINDOWS\system32\CmdLineExt03.dll 2007-04-06 14:57:19 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll 2007-04-06 14:47:14 0 d-------- C:\Program Files\KONAMI 2007-04-05 14:07:58 0 d-------- C:\Program Files\THQ 2007-04-04 14:36:47 17480 --a------ C:\WINDOWS\system32\drivers\hamachi.sys 2007-04-04 14:36:46 0 d-------- C:\Program Files\Hamachi 2007-03-31 17:06:52 0 d-------- C:\Program Files\Teamspeak2_RC2 2007-03-31 12:00:14 0 d-------- C:\WINDOWS\ShellNew 2007-03-31 11:57:14 749568 -ra------ C:\WINDOWS\system32\agi1600.dll 2007-03-31 11:57:13 28672 -ra------ C:\WINDOWS\system32\IMF32.DLL 2007-03-31 11:57:12 1789952 -ra------ C:\WINDOWS\system32\zhp1600r.dll 2007-03-31 11:57:11 86016 -ra------ C:\WINDOWS\system32\ZSPOOL.DLL 2007-03-31 11:57:11 286720 -ra------ C:\WINDOWS\system32\zshp1600.exe 2007-03-31 11:57:11 28672 -ra------ C:\WINDOWS\system32\zlm.dll 2007-03-31 11:57:11 86016 -ra------ C:\WINDOWS\system32\zlhp1600.dll 2007-03-31 11:57:11 241664 -ra------ C:\WINDOWS\system32\zhhp1600.exe 2007-03-31 11:57:10 24576 -ra------ C:\WINDOWS\system32\ZTAG32.DLL 2007-03-31 11:57:10 114688 -ra------ C:\WINDOWS\system32\VSHP1600.dll 2007-03-31 11:57:10 155648 -ra------ C:\WINDOWS\system32\HP1600IR.dll 2007-03-31 11:57:08 0 d-------- C:\Program Files\Hewlett-Packard 2007-03-31 11:57:07 0 d--h----- C:\Program Files\Zenographics 2007-03-31 11:41:54 25856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys 2007-03-31 10:01:36 0 d-------- C:\Program Files\Activision 2007-03-31 10:00:21 0 d--hs---- C:\WINDOWS\ftpcache 2007-03-30 22:18:29 0 d------c- C:\WINDOWS\system32\DRVSTORE 2007-03-30 22:10:36 0 d-------- C:\Program Files\Mu-cade 2007-03-30 22:10:22 0 d-------- C:\Program Files\Gunroar 2007-03-30 22:05:33 283648 --a------ C:\WINDOWS\uninst.exe 2007-03-30 19:57:18 0 d-------- C:\Program Files\Enlight Software 2007-03-30 19:50:56 0 d-------- C:\Program Files\EA SPORTS 2007-03-30 19:47:14 0 d-------- C:\Program Files\DAEMON Tools 2007-03-30 19:46:02 639224 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2007-03-30 19:38:42 0 d-------- C:\Program Files\Mozilla Firefox 2007-03-30 18:02:55 6400 --a------ C:\WINDOWS\system32\drivers\splitter.sys 2007-03-30 18:02:54 142464 --a------ C:\WINDOWS\system32\drivers\aec.sys 2007-03-30 18:02:53 2944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys 2007-03-30 18:02:52 4992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys 2007-03-30 18:02:48 54272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys 2007-03-30 18:02:46 52864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys 2007-03-30 18:02:45 7552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys 2007-03-30 18:02:43 82944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys 2007-03-30 18:02:42 171776 --a------ C:\WINDOWS\system32\drivers\kmixer.sys 2007-03-30 18:02:40 5376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2007-03-30 18:02:39 60800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys 2007-03-30 18:02:36 3072 --a------ C:\WINDOWS\system32\drivers\audstub.sys 2007-03-30 18:02:02 58624 --a------ C:\WINDOWS\system32\drivers\redbook.sys 2007-03-30 18:01:30 10624 --a------ C:\WINDOWS\system32\drivers\gameenum.sys 2007-03-30 18:01:30 3712 --a------ C:\WINDOWS\system32\drivers\ctljystk.sys 2007-03-30 18:01:25 51200 --a------ C:\WINDOWS\system32\sfman32.dll 2007-03-30 18:01:25 36480 --a------ C:\WINDOWS\system32\drivers\sfmanm.sys 2007-03-30 18:01:23 495616 --a------ C:\WINDOWS\system32\sblfx.dll 2007-03-30 18:01:23 283904 --a------ C:\WINDOWS\system32\drivers\emu10k1m.sys 2007-03-30 18:01:23 24064 --a------ C:\WINDOWS\system32\devldr32.exe 2007-03-30 18:01:23 256512 --a------ C:\WINDOWS\system32\devcon32.dll 2007-03-30 18:01:23 4096 --a------ C:\WINDOWS\system32\ctwdm32.dll 2007-03-30 18:01:22 6912 --a------ C:\WINDOWS\system32\drivers\ctlfacem.sys 2007-03-30 18:01:21 4096 --a------ C:\WINDOWS\system32\ksuser.dll 2007-03-30 18:01:21 145792 --a------ C:\WINDOWS\system32\drivers\portcls.sys 2007-03-30 18:01:21 60288 --a------ C:\WINDOWS\system32\drivers\drmk.sys 2007-03-30 18:00:54 77312 --a------ C:\WINDOWS\system32\usbui.dll 2007-03-30 17:59:00 0 d--hs---- C:\WINDOWS\Installer<INSTAL~1> 2007-03-30 17:58:59 0 d-------- C:\Program Files\Common Files\ODBC 2007-03-30 17:58:57 0 d-------- C:\Program Files\Common Files\SpeechEngines<SPEECH~1> 2007-03-30 17:58:56 0 dr------- C:\Program Files<PROGRA~1> 2007-03-30 17:58:53 6144 -ra------ C:\WINDOWS\system32\kbdtuq.dll 2007-03-30 17:58:53 6144 -ra------ C:\WINDOWS\system32\kbdtuf.dll 2007-03-30 17:58:53 5632 -ra------ C:\WINDOWS\system32\kbdazel.dll 2007-03-30 17:58:52 5632 -ra------ C:\WINDOWS\system32\kbdmon.dll 2007-03-30 17:58:52 5632 -ra------ C:\WINDOWS\system32\kbdkyr.dll 2007-03-30 17:58:50 8192 -ra------ C:\WINDOWS\system32\kbdhept.dll 2007-03-30 17:58:50 6656 -ra------ C:\WINDOWS\system32\kbdhela3.dll 2007-03-30 17:58:50 6144 -ra------ C:\WINDOWS\system32\kbdhela2.dll 2007-03-30 17:58:50 5632 -ra------ C:\WINDOWS\system32\kbdhe319.dll 2007-03-30 17:58:50 5632 -ra------ C:\WINDOWS\system32\kbdhe220.dll 2007-03-30 17:58:50 5632 -ra------ C:\WINDOWS\system32\kbdhe.dll 2007-03-30 17:58:50 6144 -ra------ C:\WINDOWS\system32\kbdgkl.dll 2007-03-30 17:58:49 6144 -ra------ C:\WINDOWS\system32\kbdlv1.dll 2007-03-30 17:58:49 6144 -ra------ C:\WINDOWS\system32\kbdlv.dll 2007-03-30 17:58:49 5632 -ra------ C:\WINDOWS\system32\kbdlt1.dll 2007-03-30 17:58:49 5632 -ra------ C:\WINDOWS\system32\kbdlt.dll 2007-03-30 17:58:49 6144 -ra------ C:\WINDOWS\system32\kbdest.dll 2007-03-30 17:58:47 6656 --a------ C:\WINDOWS\system32\kbdsl1.dll 2007-03-30 17:58:47 6656 --a------ C:\WINDOWS\system32\kbdsl.dll 2007-03-30 17:58:47 5632 --a------ C:\WINDOWS\system32\kbdro.dll 2007-03-30 17:58:46 6656 --a------ C:\WINDOWS\system32\kbdycl.dll 2007-03-30 17:58:46 5632 --a------ C:\WINDOWS\system32\kbdhu1.dll 2007-03-30 17:58:46 6656 --a------ C:\WINDOWS\system32\kbdhu.dll 2007-03-30 17:58:46 6656 --a------ C:\WINDOWS\system32\kbdcz2.dll 2007-03-30 17:58:46 6656 --a------ C:\WINDOWS\system32\kbdcz1.dll 2007-03-30 17:58:46 7168 --a------ C:\WINDOWS\system32\kbdcz.dll 2007-03-30 17:58:46 6656 --a------ C:\WINDOWS\system32\kbdcr.dll 2007-03-30 17:58:46 6656 --a------ C:\WINDOWS\system32\KBDAL.DLL 2007-03-30 17:58:46 13312 --a------ C:\WINDOWS\system32\irclass.dll 2007-03-30 17:58:46 176157 --a------ C:\WINDOWS\system32\dgrpsetu.dll 2007-03-30 17:58:45 24661 --a------ C:\WINDOWS\system32\spxcoins.dll 2007-03-30 17:58:45 103424 --a------ C:\WINDOWS\system32\EqnClass.Dll 2007-03-30 17:58:45 85532 --a------ C:\WINDOWS\system32\dgsetup.dll 2007-03-30 17:58:45 9168 --a------ C:\WINDOWS\system\VER.DLL 2007-03-30 17:58:45 19200 --a------ C:\WINDOWS\system\TAPI.DLL 2007-03-30 17:58:45 5120 --a------ C:\WINDOWS\system\SHELL.DLL 2007-03-30 17:58:45 24064 --a------ C:\WINDOWS\system\OLESVR.DLL 2007-03-30 17:58:45 83456 --a------ C:\WINDOWS\system\OLECLI.DLL 2007-03-30 17:58:44 15360 --a------ C:\WINDOWS\TASKMAN.EXE 2007-03-30 17:58:44 127008 --a------ C:\WINDOWS\system\MSVIDEO.DLL 2007-03-30 17:58:44 9936 --a------ C:\WINDOWS\system\LZEXPAND.DLL 2007-03-30 17:58:44 33376 --a------ C:\WINDOWS\system\COMMDLG.DLL 2007-03-30 17:58:44 109488 --a------ C:\WINDOWS\system\AVIFILE.DLL 2007-03-30 17:58:44 70096 --a------ C:\WINDOWS\system\AVICAP.DLL 2007-03-30 17:58:43 11264 --a------ C:\WINDOWS\system32\drivers\irenum.sys 2007-03-30 17:58:43 8704 --a------ C:\WINDOWS\system32\batt.dll 2007-03-30 17:58:43 69552 --a------ C:\WINDOWS\system\MMSYSTEM.DLL 2007-03-30 17:58:43 70144 --a------ C:\WINDOWS\NOTEPAD.EXE 2007-03-30 17:58:42 75776 --a------ C:\WINDOWS\system32\storprop.dll 2007-03-30 17:58:24 0 d-------- C:\WINDOWS\system32\CatRoot2 2007-03-30 17:58:24 0 d-------- C:\WINDOWS\system32\CatRoot 2007-03-30 17:57:59 0 d-------- C:\Documents and Settings<DOCUME~1> 2007-03-30 17:57:58 0 d--hs---- C:\System Volume Information<SYSTEM~1> 2007-03-30 17:52:00 0 d-------- C:\WINDOWS 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\WinSxS 2007-03-30 17:52:00 0 dr------- C:\WINDOWS\Web 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\twain_32 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\wins 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\wbem 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\usmt 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\spool 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\ShellExt 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\Setup 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\ras 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\oobe 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\npp 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\mui 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\inetsrv 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\IME 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\icsxml 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\ias 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\export 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\drivers 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\drivers\etc 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\drivers\disdn 2007-03-30 17:52:00 0 dr-hs--c- C:\WINDOWS\system32\dllcache 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\dhcp 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\config 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\3com_dmi 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\3076 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\2052 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\1054 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\1045 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\1042 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\1041 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\1037 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\1033 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\1031 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\1028 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system32\1025 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\system 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\security 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\Resources<RESOUR~1> 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\repair 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\Provisioning<PROVIS~1> 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\PeerNet 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\pchealth 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\mui 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\msapps 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\msagent 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\Media 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\java 2007-03-30 17:52:00 0 d--h----- C:\WINDOWS\inf 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\ime 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\Help 2007-03-30 17:52:00 0 dr--s---- C:\WINDOWS\Fonts 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\Driver Cache<DRIVER~1> 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\Debug 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\Cursors 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\Connection Wizard<CONNEC~1> 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\Config 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\AppPatch 2007-03-30 17:52:00 0 d-------- C:\WINDOWS\addins 2007-03-30 16:43:54 335 --a------ C:\WINDOWS\nsreg.dat 2007-03-30 16:43:45 16709 --a------ C:\WINDOWS\mozver.dat 2007-03-30 16:43:33 0 d-------- C:\Program Files\mozilla.org 2007-03-30 16:36:52 0 d-------- C:\NVIDIA 2007-03-30 16:22:27 0 d-------- C:\WINDOWS\pss 2007-03-30 16:17:43 0 d-------- C:\WINDOWS\Profiles 2007-03-30 16:17:42 0 d-------- C:\WINDOWS\system32\Adobe 2007-03-30 16:17:42 0 d-------- C:\Program Files\Common Files\Adobe 2007-03-30 16:17:10 306688 --a------ C:\WINDOWS\IsUninst.exe 2007-03-30 16:16:43 0 d-------- C:\Program Files\Gadu-Gadu<GADU-G~1> 2007-03-30 16:16:33 43008 --a------ C:\WINDOWS\system32\drivers\AmdK8.sys 2007-03-30 16:16:33 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1> 2007-03-30 16:16:33 0 d-------- C:\Program Files\AMD 2007-03-30 16:16:02 208896 --a------ C:\WINDOWS\system32\nvudisp.exe 2007-03-30 16:16:02 0 d-------- C:\WINDOWS\nview 2007-03-30 16:15:00 202240 -ra------ C:\WINDOWS\system32\fdco1ins.dll 2007-03-30 16:15:00 202240 -ra------ C:\WINDOWS\system32\fdco1.dll 2007-03-30 16:15:00 34048 -ra------ C:\WINDOWS\system32\drivers\NVENETFD.sys 2007-03-30 16:14:58 208896 --a------ C:\WINDOWS\system32\nvunrm.exe 2007-03-30 16:14:58 33280 -ra------ C:\WINDOWS\system32\nvconrm.dll 2007-03-30 16:14:58 100480 -ra------ C:\WINDOWS\system32\drivers\nvtcp.sys 2007-03-30 16:14:58 221824 -ra------ C:\WINDOWS\system32\drivers\nvsnpu.sys 2007-03-30 16:14:58 9728 -ra------ C:\WINDOWS\system32\bdco1ins.dll 2007-03-30 16:14:58 9728 -ra------ C:\WINDOWS\system32\bdco1.dll 2007-03-30 16:14:58 0 d-------- C:\WINDOWS\NV18761884.TMP<NV1876~1.TMP> 2007-03-30 16:14:57 301312 -ra------ C:\WINDOWS\system32\drivers\nvnrm.sys 2007-03-30 16:14:57 12928 -ra------ C:\WINDOWS\system32\drivers\nvnetbus.sys 2007-03-30 16:14:56 208896 --a------ C:\WINDOWS\system32\nvusmb.exe 2007-03-30 16:14:56 208896 --a------ C:\WINDOWS\system32\NVUNINST.EXE 2007-03-30 16:14:35 0 d-------- C:\WINDOWS\system32\ReinstallBackups<REINST~1> 2007-03-30 16:14:18 0 d-------- C:\Program Files\Common Files\InstallShield<INSTAL~1> 2007-03-30 16:14:08 5824 --a------ C:\WINDOWS\system32\drivers\ASUSHWIO.SYS 2007-03-30 16:13:02 0 d-------- C:\WINDOWS\SoftwareDistribution<SOFTWA~1> 2007-03-30 16:13:01 0 d-------- C:\WINDOWS\Prefetch 2007-03-30 16:09:50 0 d-------- C:\WINDOWS\system32\xircom 2007-03-30 16:09:50 0 d-------- C:\Program Files\microsoft frontpage<MICROS~1> 2007-03-30 16:09:42 0 -rahs---- C:\MSDOS.SYS 2007-03-30 16:09:42 0 -rahs---- C:\IO.SYS 2007-03-30 16:09:42 0 --a------ C:\CONFIG.SYS 2007-03-30 16:09:42 0 --a------ C:\AUTOEXEC.BAT 2007-03-30 16:09:25 112128 --a------ C:\WINDOWS\system32\mapi32.dll 2007-03-30 16:08:47 0 dr------- C:\WINDOWS\Offline Web Pages<OFFLIN~1> 2007-03-30 16:08:47 0 d---s---- C:\WINDOWS\Downloaded Program Files<DOWNLO~1> 2007-03-30 16:08:39 0 d--h----- C:\Program Files\WindowsUpdate<WINDOW~3> 2007-03-30 16:08:36 0 d-------- C:\Program Files\Usługi online<USUGIO~1> 2007-03-30 16:08:23 0 d-------- C:\WINDOWS\system32\DirectX 2007-03-30 16:08:08 11264 --a------ C:\WINDOWS\system32\atrace.dll 2007-03-30 16:08:01 12288 --a------ C:\WINDOWS\system32\nmevtmsg.dll 2007-03-30 16:08:00 67584 --a------ C:\WINDOWS\system32\acctres.dll 2007-03-30 16:07:57 0 d---s---- C:\WINDOWS\Tasks 2007-03-30 16:07:57 16384 --a------ C:\WINDOWS\system32\icfgnt5.dll 2007-03-30 16:07:57 0 d-------- C:\Program Files\Common Files\MSSoap 2007-03-30 16:07:54 0 d-------- C:\WINDOWS\srchasst 2007-03-30 16:07:53 0 d-------- C:\WINDOWS\system32\Macromed 2007-03-30 16:07:51 120320 --a------ C:\WINDOWS\system32\wuweb.dll 2007-03-30 16:07:51 113664 --a------ C:\WINDOWS\system32\wucltui.dll 2007-03-30 16:07:51 6656 --a------ C:\WINDOWS\system32\wuauserv.dll 2007-03-30 16:07:51 184320 --a------ C:\WINDOWS\system32\wuaueng1.dll 2007-03-30 16:07:50 36864 --a------ C:\WINDOWS\system32\wups.dll 2007-03-30 16:07:50 1134592 --a------ C:\WINDOWS\system32\wuaueng.dll 2007-03-30 16:07:50 168960 --a------ C:\WINDOWS\system32\wuauclt1.exe 2007-03-30 16:07:50 112128 --a------ C:\WINDOWS\system32\wuauclt.exe 2007-03-30 16:07:50 431616 --a------ C:\WINDOWS\system32\wuapi.dll 2007-03-30 16:07:50 18944 --a------ C:\WINDOWS\system32\qmgrprxy.dll 2007-03-30 16:07:50 382464 --a------ C:\WINDOWS\system32\qmgr.dll 2007-03-30 16:07:50 7168 --a------ C:\WINDOWS\system32\bitsprx3.dll 2007-03-30 16:07:50 8192 --a------ C:\WINDOWS\system32\bitsprx2.dll 2007-03-30 16:07:47 0 d-------- C:\Program Files\Movie Maker<MOVIEM~1> 2007-03-30 16:07:44 45568 --a------ C:\WINDOWS\system32\safrslv.dll 2007-03-30 16:07:44 29696 --a------ C:\WINDOWS\system32\safrdm.dll 2007-03-30 16:07:44 43520 --a------ C:\WINDOWS\system32\safrcdlg.dll 2007-03-30 16:07:44 43520 --a------ C:\WINDOWS\system32\racpldlg.dll 2007-03-30 16:07:41 171008 --a------ C:\WINDOWS\system32\srsvc.dll 2007-03-30 16:07:41 240128 --a------ C:\WINDOWS\system32\srrstr.dll 2007-03-30 16:07:41 0 d-------- C:\WINDOWS\system32\Restore 2007-03-30 16:07:41 22528 --a------ C:\WINDOWS\system32\fltMc.exe 2007-03-30 16:07:41 16896 --a------ C:\WINDOWS\system32\fltlib.dll 2007-03-30 16:07:41 124800 --a------ C:\WINDOWS\system32\drivers\fltMgr.sys 2007-03-30 16:07:40 67584 --a------ C:\WINDOWS\system32\srclient.dll 2007-03-30 16:07:40 28672 --a------ C:\WINDOWS\system32\nmmkcert.dll 2007-03-30 16:07:40 32768 --a------ C:\WINDOWS\system32\mnmsrvc.exe 2007-03-30 16:07:40 34560 --a------ C:\WINDOWS\system32\mnmdd.dll 2007-03-30 16:07:40 32768 --a------ C:\WINDOWS\system32\isrdbg32.dll 2007-03-30 16:07:40 81920 --a------ C:\WINDOWS\system32\ils.dll 2007-03-30 16:07:40 73472 --a------ C:\WINDOWS\system32\drivers\sr.sys 2007-03-30 16:07:39 69632 --a------ C:\WINDOWS\system32\msconf.dll 2007-03-30 16:07:37 105984 --a------ C:\WINDOWS\system32\msoert2.dll 2007-03-30 16:07:37 252928 --a------ C:\WINDOWS\system32\msoeacct.dll 2007-03-30 16:07:37 49664 --a------ C:\WINDOWS\system32\inetres.dll 2007-03-30 16:07:36 678400 --a------ C:\WINDOWS\system32\inetcomm.dll 2007-03-30 16:07:35 192000 --a------ C:\WINDOWS\system32\schedsvc.dll 2007-03-30 16:07:35 12288 --a------ C:\WINDOWS\system32\mstinit.exe 2007-03-30 16:07:35 278528 --a------ C:\WINDOWS\system32\mstask.dll 2007-03-30 16:07:34 86016 --a------ C:\WINDOWS\system32\isign32.dll 2007-03-30 16:07:34 278528 --a------ C:\WINDOWS\system32\inetcfg.dll 2007-03-30 16:07:34 65536 --a------ C:\WINDOWS\system32\icwphbk.dll 2007-03-30 16:07:34 73728 --a------ C:\WINDOWS\system32\icwdial.dll 2007-03-30 16:07:27 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat<EMPTYR~1.DAT> 2007-03-30 16:07:14 0 d-------- C:\WINDOWS\Registration<REGIST~1> 2007-03-30 16:06:45 0 d-------- C:\Program Files\Messenger<MESSEN~1> 2007-03-30 16:06:42 5632 --a------ C:\WINDOWS\system32\write.exe 2007-03-30 16:06:42 0 d-------- C:\Program Files\MSN Gaming Zone<MSNGAM~1> 2007-03-30 16:06:35 35328 --a------ C:\WINDOWS\system32\winchat.exe 2007-03-30 16:06:35 139264 --a------ C:\WINDOWS\system32\sndvol32.exe 2007-03-30 16:06:35 44544 --a------ C:\WINDOWS\system32\hticons.dll 2007-03-30 16:06:35 73216 --a------ C:\WINDOWS\system32\avwav.dll 2007-03-30 16:06:35 231424 --a------ C:\WINDOWS\system32\avtapi.dll 2007-03-30 16:06:35 16384 --a------ C:\WINDOWS\system32\avmeter.dll 2007-03-30 16:06:30 605696 --a------ C:\WINDOWS\system32\getuname.dll 2007-03-30 16:06:29 119808 --a------ C:\WINDOWS\system32\winmine.exe 2007-03-30 16:06:29 57344 --a------ C:\WINDOWS\system32\sol.exe 2007-03-30 16:06:29 128000 --a------ C:\WINDOWS\system32\mshearts.exe 2007-03-30 16:06:29 80896 --a------ C:\WINDOWS\system32\charmap.exe 2007-03-30 16:06:29 115200 --a------ C:\WINDOWS\system32\calc.exe 2007-03-30 16:06:28 1225 --a------ C:\WINDOWS\system32\usrlogon.cmd 2007-03-30 16:06:28 17920 --a------ C:\WINDOWS\system32\tsshutdn.exe 2007-03-30 16:06:28 16384 --a------ C:\WINDOWS\system32\tskill.exe 2007-03-30 16:06:28 15360 --a------ C:\WINDOWS\system32\tsdiscon.exe 2007-03-30 16:06:28 15360 --a------ C:\WINDOWS\system32\tscon.exe 2007-03-30 16:06:28 15360 --a------ C:\WINDOWS\system32\shadow.exe 2007-03-30 16:06:28 16384 --a------ C:\WINDOWS\system32\rwinsta.exe 2007-03-30 16:06:28 9728 --a------ C:\WINDOWS\system32\reset.exe 2007-03-30 16:06:28 33792 --a------ C:\WINDOWS\system32\regini.exe 2007-03-30 16:06:28 4608 --a------ C:\WINDOWS\system32\rdpcfgex.dll 2007-03-30 16:06:28 22528 --a------ C:\WINDOWS\system32\qwinsta.exe 2007-03-30 16:06:28 17408 --a------ C:\WINDOWS\system32\qappsrv.exe 2007-03-30 16:06:28 22528 --a------ C:\WINDOWS\system32\msg.exe 2007-03-30 16:06:28 55808 --a------ C:\WINDOWS\system32\freecell.exe 2007-03-30 16:06:27 25088 --a------ C:\WINDOWS\system32\mtxlegih.dll 2007-03-30 16:06:27 4096 --a------ C:\WINDOWS\system32\mtxex.dll 2007-03-30 16:06:27 20480 --a------ C:\WINDOWS\system32\mtxdm.dll 2007-03-30 16:06:27 15872 --a------ C:\WINDOWS\system32\logoff.exe 2007-03-30 16:06:27 5120 --a------ C:\WINDOWS\system32\dcomcnfg.exe 2007-03-30 16:06:27 15872 --a------ C:\WINDOWS\system32\cdmodem.dll 2007-03-30 16:06:26 54272 --a------ C:\WINDOWS\system32\stclient.dll 2007-03-30 16:06:26 147456 --a------ C:\WINDOWS\system32\comsnap.dll 2007-03-30 16:06:26 82432 --a------ C:\WINDOWS\system32\comrepl.dll 2007-03-30 16:06:26 25600 --a------ C:\WINDOWS\system32\comaddin.dll 2007-03-30 16:06:22 132608 --a------ C:\WINDOWS\system32\sndrec32.exe 2007-03-30 16:06:22 124928 --a------ C:\WINDOWS\system32\mplay32.exe 2007-03-30 16:06:22 187904 --a------ C:\WINDOWS\system32\accwiz.exe 2007-03-30 16:06:21 539136 --a------ C:\WINDOWS\system32\spider.exe 2007-03-30 16:06:21 345088 --a------ C:\WINDOWS\system32\mspaint.exe 2007-03-30 16:06:21 349696 --a------ C:\WINDOWS\system32\hypertrm.dll 2007-03-30 16:06:21 103424 --a------ C:\WINDOWS\system32\clipbrd.exe 2007-03-30 16:06:21 0 d-------- C:\Program Files\Windows NT<WINDOW~1> 2007-03-30 16:06:20 94720 --a------ C:\WINDOWS\system32\tscfgwmi.dll 2007-03-30 16:06:20 60928 --a------ C:\WINDOWS\system32\remotepg.dll 2007-03-30 16:06:20 67072 --a------ C:\WINDOWS\system32\rdshost.exe 2007-03-30 16:06:20 13824 --a------ C:\WINDOWS\system32\rdsaddin.exe 2007-03-30 16:06:20 655360 --a------ C:\WINDOWS\system32\mstscax.dll 2007-03-30 16:06:20 408576 --a------ C:\WINDOWS\system32\mstsc.exe 2007-03-30 16:06:20 21896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys 2007-03-30 16:06:20 12040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys 2007-03-30 16:06:20 139400 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys 2007-03-30 16:06:19 44544 --a------ C:\WINDOWS\system32\tscupgrd.exe 2007-03-30 16:06:19 296448 --a------ C:\WINDOWS\system32\termsrv.dll 2007-03-30 16:06:19 141824 --a------ C:\WINDOWS\system32\sessmgr.exe 2007-03-30 16:06:19 87176 --a------ C:\WINDOWS\system32\rdpwsx.dll 2007-03-30 16:06:19 19968 --a------ C:\WINDOWS\system32\rdpsnd.dll 2007-03-30 16:06:19 62464 --a------ C:\WINDOWS\system32\rdpclip.exe 2007-03-30 16:06:19 147968 --a------ C:\WINDOWS\system32\rdchost.dll 2007-03-30 16:06:19 20992 --a------ C:\WINDOWS\system32\qprocess.exe 2007-03-30 16:06:19 161280 --a------ C:\WINDOWS\system32\msdtcuiu.dll 2007-03-30 16:06:19 0 d-------- C:\WINDOWS\system32\MsDtc 2007-03-30 16:06:19 11264 --a------ C:\WINDOWS\system32\icaapi.dll 2007-03-30 16:06:19 38912 --a------ C:\WINDOWS\system32\cfgbkend.dll 2007-03-30 16:06:18 11776 --a------ C:\WINDOWS\system32\xolehlp.dll 2007-03-30 16:06:18 90112 --a------ C:\WINDOWS\system32\mtxoci.dll 2007-03-30 16:06:18 949248 --a------ C:\WINDOWS\system32\msdtctm.dll 2007-03-30 16:06:18 425472 --a------ C:\WINDOWS\system32\msdtcprx.dll 2007-03-30 16:06:18 58880 --a------ C:\WINDOWS\system32\msdtclog.dll 2007-03-30 16:06:18 6144 --a------ C:\WINDOWS\system32\msdtc.exe 2007-03-30 16:06:17 1251840 --a------ C:\WINDOWS\system32\comsvcs.dll 2007-03-30 16:06:17 0 d-------- C:\WINDOWS\system32\Com 2007-03-30 16:06:17 62464 --a------ C:\WINDOWS\system32\colbact.dll 2007-03-30 16:06:17 110080 --a------ C:\WINDOWS\system32\clbcatex.dll 2007-03-30 16:06:17 628224 --a------ C:\WINDOWS\system32\catsrvut.dll 2007-03-30 16:06:17 85504 --a------ C:\WINDOWS\system32\catsrvps.dll 2007-03-30 16:06:17 229888 --a------ C:\WINDOWS\system32\catsrv.dll 2007-03-30 16:06:16 540160 --a------ C:\WINDOWS\system32\comuid.dll 2007-03-30 16:06:16 501248 --a------ C:\WINDOWS\system32\clbcatq.dll 2007-03-30 16:06:11 56320 --a------ C:\WINDOWS\system32\servdeps.dll 2007-03-30 16:06:10 17920 --a------ C:\WINDOWS\system32\mmfutil.dll 2007-03-30 16:06:10 58880 --a------ C:\WINDOWS\system32\licwmi.dll 2007-03-30 16:06:10 187904 --a------ C:\WINDOWS\system32\cmprops.dll 2007-03-30 16:06:07 196864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys 2007-03-30 16:06:06 40840 --a------ C:\WINDOWS\system32\drivers\termdd.sys -- Find3M Report --------------------------------------------------------------- 2007-04-10 13:32:44 37886 --a------ C:\WINDOWS\system32\ctfmon.exe 2007-04-10 10:56:50 0 d-------- C:\Documents and Settings\Safas\Dane aplikacji\Hamachi 2007-04-09 22:21:42 0 d-------- C:\Documents and Settings\Safas\Dane aplikacji\temp 2007-04-06 14:26:11 0 d---s---- C:\Documents and Settings\Safas\Dane aplikacji\Microsoft<MICROS~1> 2007-04-05 16:54:40 0 d-------- C:\Documents and Settings\Safas\Dane aplikacji\teamspeak2 2007-03-31 11:59:06 0 d-------- C:\Documents and Settings\Safas\Dane aplikacji\Microsoft Web Folders 2007-03-30 19:38:45 0 d-------- C:\Documents and Settings\Safas\Dane aplikacji\Mozilla 2007-03-30 17:58:35 62 --ahs---- C:\Documents and Settings\Safas\Dane aplikacji\desktop.ini 2007-03-30 16:43:53 0 d-------- C:\Documents and Settings\Safas\Dane aplikacji\Talkback 2007-03-30 16:42:32 355830 --a------ C:\WINDOWS\system32\perfh015.dat 2007-03-30 16:42:32 49712 --a------ C:\WINDOWS\system32\perfc015.dat 2007-03-30 16:19:11 0 d-------- C:\Documents and Settings\Safas\Dane aplikacji\Macromedia<MACROM~1> 2007-03-30 16:17:42 0 d-------- C:\Documents and Settings\Safas\Dane aplikacji\InterTrust<INTERT~1> 2007-03-30 16:17:42 0 d-------- C:\Documents and Settings\Safas\Dane aplikacji\Adobe 2007-03-30 16:13:39 0 d-------- C:\Documents and Settings\Safas\Dane aplikacji\Identities<IDENTI~1> -- Registry Dump --------------------------------------------------------------- [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe" "MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background" "Gadu-Gadu"="\"C:\\Program Files\\Gadu-Gadu\\gg.exe\" /tray" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup" "nwiz"="nwiz.exe /install" "NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit" "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime" "DAEMON Tools"="\"C:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033" "Lexmark_X79-55"="C:\\WINDOWS\\system32\\lsasss.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI] "NoChange"="1" "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS] "Installed"="1" [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoLowDiskSpaceChecks"=dword:00000001 [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] HTTPFilter REG_MULTI_SZ HTTPFilter\0\0 LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ DnsCache\0\0 DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 termsvcs REG_MULTI_SZ TermService\0\0 -- End of ComboScan: finished at 2007-04-10 at 18:39:03 ------------------------

**Posty:** 18165 · przez **wojtas** 10 Kwi 2007, 19:01

skasuj:

O4 - HKLM\..\Run: [Lexmark_X79-55] C:\WINDOWS\system32\lsasss.exe

w logu nic nie ma

**Posty:** 352 · przez **Sety** 11 Kwi 2007, 13:16

wojtas19162 napisał(a):skasuj:

O4 - HKLM\..\Run: [Lexmark_X79-55] C:\WINDOWS\system32\lsasss.exe

w logu nic nie ma

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 13:05:24, on 2007-04-11 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\devldr32.exe C:\WINDOWS\system32\wuauclt.exe c:\program files\internet explorer\iexplore.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Gadu-Gadu\gg.exe C:\Documents and Settings\Safas\Pulpit\hijackthis.com O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

Już wszystko OK ! Dzięki za pomoc!PS: GG chodzi. + for all

i problem z gg

i problem z GG

Kto jest na forum