komp mi wariuje

**Posty:** 165 · przez **qweasdzxc** 02 Sty 2008, 16:42

Witam. Ostatnio dzieje sie cos dziwnego z moim kompem... gdy wyjezdzalem na swieta komputer chodzil normalnie. Wlaczal sie 30 sek i takze tyle wylaczal i jego stan byl swietny. Dzisiaj przyjechalem o go wlaczylem (a wlasciwie wczoraj) i chodzi jakby mial 128 ram

Nic sie na nim nie da robic. Skanowalem system NOD32 z aktualna baza wirusow i nic nie wykrył

Uzycie proca zawsze bylo ok 5% teraz jest to 15-30% !!! Tak samo z pamiecia wirtualna!!! Zawsze bylo ok 200 teraz siega 350 MB !!! Zamieszczam loga do sprawdzenia.

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:37:02, on 2008-01-02 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16574) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Eset\nod32kui.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe D:\Microsoft Office\Office12\GrooveMonitor.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Common Files\Teleca Shared\Generic.exe C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe D:\Mozilla Firefox\firefox.exe D:\Winamp\winamp.exe D:\Sciaganie\SDSsD\HiJackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\MICROS~2\Office12\GRA8E1~1.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [system32SWSV Agent] C:\WINDOWS\system32SWSV.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "D:\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [Skype] "D:\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://D:\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1195293863984 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\MICROS~2\Office12\GR99D3~1.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe -- End of file - 5475 bytes

**Posty:** 3854 · przez **Dzi@dek** 02 Sty 2008, 18:05

Otwórz notatnik i wklej:

File::
C:\WINDOWS\system32SWSV.exe

Plik >>> zapisz jako CFScript.txt .Plik przeciągnij i upuść na ikonę ComboFixa (tak jak tu ) . Potwierdz >>> zresetuje sie komputer

(jeśli pojawi się pytanie "1 or 2" - to wpisz 1 i naciśnij ENTER). Rozpocznie się proces usuwania
Daj log z combofix.
http://www.programosy.pl/program,combofix.html

**Posty:** 165 · przez **qweasdzxc** 02 Sty 2008, 18:26

KOMP MI SIE NIE ZRESTARTOWAL - Nie wiem dlaczego

ComboFix:

Kod: Zaznacz wszystko: ComboFix 07-12-31.4 - Rodzinka 2008-01-02 17:24:33.2 - [color=red][b]FAT32[/b][/color]x86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.398 [GMT 1:00] Running from: C:\Documents and Settings\Rodzinka\Pulpit\ComboFix.exe Command switches used :: C:\Documents and Settings\Rodzinka\Pulpit\CFScript.txt * Created a new restore point FILE C:\WINDOWS\system32SWSV.exe . ((((((((((((((((((((((((( Files Created from 2007-12-02 to 2008-01-02 ))))))))))))))))))))))))))))))) . 2008-01-02 17:15 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-12-19 20:05 . 2007-12-19 20:05 <DIR> d-------- C:\WINDOWS\system32\AGEIA 2007-12-19 20:05 . 2007-12-19 20:05 <DIR> d-------- C:\Program Files\AGEIA Technologies 2007-12-19 20:04 . 2007-12-19 20:04 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard 2007-12-19 20:04 . 2007-06-01 08:40 1,184,984 --a------ C:\WINDOWS\system32\wvc1dmod.dll 2007-12-17 14:39 . 2007-12-17 14:39 <DIR> d--hs---- C:\FOUND.001 2007-12-17 06:21 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll 2007-12-17 06:21 . 2006-09-28 16:05 2,414,360 --a------ C:\WINDOWS\system32\d3dx9_31.dll 2007-12-17 06:21 . 2006-12-08 12:02 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll 2007-12-17 06:21 . 2006-09-28 16:05 237,848 --a------ C:\WINDOWS\system32\xactengine2_4.dll 2007-12-17 06:21 . 2007-12-17 06:21 294 --a------ C:\WINDOWS\game.ini 2007-12-15 14:46 . 2006-04-20 12:51 359,808 --a------ C:\WINDOWS\system32\drivers\tcpip.sys.flg 2007-12-13 21:13 . 2007-12-13 21:13 <DIR> d-------- C:\Temp 2007-12-13 21:13 . 2007-12-13 21:14 29 --a------ C:\WINDOWS\wordpad.ini 2007-12-09 21:53 . 2007-12-09 21:53 <DIR> d-------- C:\Program Files\MSXML 4.0 2007-12-08 14:30 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys 2007-12-08 14:30 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\dllcache\usbccgp.sys 2007-12-08 13:26 . 1998-10-07 12:54 327,168 --a------ C:\WINDOWS\IsUn0415.exe 2007-12-08 12:25 . 2007-12-08 12:25 <DIR> d-------- C:\Documents and Settings\Rodzinka\Dane aplikacji\Teleca 2007-12-08 12:24 . 2007-12-08 12:24 <DIR> d-------- C:\Documents and Settings\Rodzinka\Dane aplikacji\Sony Ericsson 2007-12-08 12:22 . 2007-12-08 12:22 <DIR> d-------- C:\WINDOWS\system32\DRVSTORE 2007-12-08 12:22 . 2007-12-08 12:22 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Sony Ericsson 2007-12-08 12:21 . 2007-12-08 12:21 <DIR> d-------- C:\WINDOWS\Downloaded Installations 2007-12-08 12:21 . 2007-12-08 12:21 <DIR> d-------- C:\Program Files\Sony Ericsson 2007-12-08 12:21 . 2007-12-08 12:21 <DIR> d-------- C:\Program Files\Common Files\Teleca Shared 2007-12-08 12:21 . 2007-12-08 12:21 <DIR> d-------- C:\Program Files\Common Files\Sony Ericsson Shared 2007-12-08 12:21 . 2007-12-08 12:21 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Teleca 2007-12-03 21:10 . 2007-12-03 21:10 82 --a------ C:\WINDOWS\mafosav.INI 2007-12-02 14:56 . 2007-12-02 14:57 4,096 --a------ C:\WINDOWS\d3dx.dat . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-08 21:32 24,192 ----a-w C:\Documents and Settings\Rodzinka\usbsermptxp.sys 2007-12-08 21:32 22,768 ----a-w C:\WINDOWS\system32\drivers\usbsermpt.sys 2007-12-08 21:32 22,768 ----a-w C:\Documents and Settings\Rodzinka\usbsermpt.sys 2007-12-01 18:52 32 ----a-w C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat 2007-12-01 18:52 --------- d-----w C:\Program Files\Common Files\Skype 2007-12-01 18:52 --------- d-----w C:\Documents and Settings\Rodzinka\Dane aplikacji\skypePM 2007-12-01 18:52 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Skype 2007-11-24 22:18 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Office Genuine Advantage 2007-11-16 16:19 131,072 ----a-w C:\WINDOWS\system32\gc.dll 2007-11-15 19:49 --------- d-----w C:\Program Files\Common Files\Futuremark Shared 2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys 2007-11-10 15:04 402,944 ----a-w C:\WINDOWS\system32AKV.exe 2007-11-10 15:04 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\TEMP 2007-11-10 14:55 --------- d-----w C:\Program Files\EjoyStudio 2007-11-04 18:42 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\nView_Profiles 2007-11-02 08:53 --------- d-----w C:\Documents and Settings\Rodzinka\Dane aplikacji\Media Player Classic 2007-10-30 23:26 3,590,656 ------w C:\WINDOWS\system32\dllcache\mshtml.dll 2007-10-29 22:44 1,291,264 ----a-w C:\WINDOWS\system32\quartz.dll 2007-10-29 22:44 1,291,264 ----a-w C:\WINDOWS\system32\dllcache\quartz.dll 2007-10-27 17:08 60,416 ----a-w C:\WINDOWS\ALCFDRTM.EXE 2007-10-25 16:44 8,488,960 ----a-w C:\WINDOWS\system32\dllcache\shell32.dll 2007-10-25 08:28 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll 2007-10-25 08:28 222,720 ----a-w C:\WINDOWS\system32\dllcache\wmasf.dll 2007-10-21 13:51 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-10-20 15:41 298,104 ----a-w C:\WINDOWS\system32\imon.dll 2007-10-10 23:52 824,832 ------w C:\WINDOWS\system32\dllcache\wininet.dll 2007-10-10 23:52 671,232 ------w C:\WINDOWS\system32\dllcache\mstime.dll 2007-10-10 23:52 63,488 ------w C:\WINDOWS\system32\dllcache\icardie.dll 2007-10-10 23:52 6,065,664 ------w C:\WINDOWS\system32\dllcache\ieframe.dll 2007-10-10 23:52 52,224 ------w C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2007-10-10 23:52 478,208 ------w C:\WINDOWS\system32\dllcache\mshtmled.dll 2007-10-10 23:52 459,264 ------w C:\WINDOWS\system32\dllcache\msfeeds.dll 2007-10-10 23:52 44,544 ------w C:\WINDOWS\system32\dllcache\iernonce.dll 2007-10-10 23:52 384,512 ------w C:\WINDOWS\system32\dllcache\iedkcs32.dll 2007-10-10 23:52 383,488 ------w C:\WINDOWS\system32\dllcache\ieapfltr.dll 2007-10-10 23:52 27,648 ------w C:\WINDOWS\system32\dllcache\jsproxy.dll 2007-10-10 23:52 267,776 ------w C:\WINDOWS\system32\dllcache\iertutil.dll 2007-10-10 23:52 232,960 ------w C:\WINDOWS\system32\dllcache\webcheck.dll 2007-10-10 23:52 230,400 ------w C:\WINDOWS\system32\dllcache\ieaksie.dll 2007-10-10 23:52 214,528 ------w C:\WINDOWS\system32\dllcache\dxtrans.dll 2007-10-10 23:52 193,024 ------w C:\WINDOWS\system32\dllcache\msrating.dll 2007-10-10 23:52 153,088 ------w C:\WINDOWS\system32\dllcache\ieakeng.dll 2007-10-10 23:52 132,608 ------w C:\WINDOWS\system32\dllcache\extmgr.dll 2007-10-10 23:52 124,928 ------w C:\WINDOWS\system32\dllcache\advpack.dll 2007-10-10 23:52 105,984 ------w C:\WINDOWS\system32\dllcache\url.dll 2007-10-10 23:52 102,400 ------w C:\WINDOWS\system32\dllcache\occache.dll 2007-10-10 23:52 1,159,680 ------w C:\WINDOWS\system32\dllcache\urlmon.dll 2007-10-10 11:03 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe 2007-10-10 11:03 625,152 ------w C:\WINDOWS\system32\dllcache\iexplore.exe 2007-10-10 10:59 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe 2007-10-10 05:46 161,792 ------w C:\WINDOWS\system32\dllcache\ieakui.dll . ((((((((((((((((((((((((((((( snapshot@2008-01-02_17.16.31,75 ))))))))))))))))))))))))))))))))))))))))) . + 2000-08-31 07:00:00 163,328 ----a-w C:\WINDOWS\erdnt\subs\F3M\ERDNT.EXE . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 22:44 15360] "Gadu-Gadu"="D:\Gadu-Gadu\gg.exe" [2007-04-19 17:43 2101248] "Twoje TVN24"="" [] "Skype"="D:\Skype\Phone\Skype.exe" [2007-12-07 15:08 21686568] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-10-10 15:49 7286784] "nwiz"="nwiz.exe" [2005-10-10 15:49 1519616 C:\WINDOWS\system32\nwiz.exe] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2005-10-10 15:49 86016] "SoundMan"="SOUNDMAN.EXE" [2005-09-22 10:42 90112 C:\WINDOWS\soundman.exe] "nod32kui"="C:\Program Files\Eset\nod32kui.exe" [2007-10-20 16:41 949376] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496] "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648] "system32SWSV Agent"="C:\WINDOWS\system32SWSV.exe" [ ] "Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2006-11-24 01:06 487424] "GrooveMonitor"="D:\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47 31016] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 22:44 15360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDTray] 2004-09-03 10:58 65536 --a------ D:\Nero\ODD Toolkit\DVDTray.exe R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);C:\WINDOWS\system32\drivers\sfdrv01a.sys [2006-07-05 13:46] *Newly Created Service* - PROCEXP90 . ************************************************************************** catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-02 17:25:14 Windows 5.1.2600 Dodatek Service Pack 2 FAT NTAPI scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2008-01-02 17:25:33 C:\qoobox\ComboFix-quarantined-files.txt 2008-01-02 16:25:32 C:\qoobox\ComboFix2.txt 2008-01-02 16:16:48 . 2007-12-12 12:15:04 --- E O F ---

**Posty:** 3854 · przez **Dzi@dek** 02 Sty 2008, 19:00

Wklej do notatnika:

Folder::
C:\FOUND.001

File::
C:\WINDOWS\IsUn0415.exe

Plik >>> zapisz jako CFScript.txt .Plik przeciągnij i upuść na ikonę ComboFixa (tak jak tu ) . Potwierdz >>> zresetuje sie komputer

(jeśli pojawi się pytanie "1 or 2" - to wpisz 1 i naciśnij ENTER). Rozpocznie się proces usuwania
Daj log z combofix.

**Posty:** 165 · przez **qweasdzxc** 02 Sty 2008, 19:25

Komp znowu sie nie restartowal

LoG:

Kod: Zaznacz wszystko: ComboFix 07-12-31.4 - Rodzinka 2008-01-02 18:23:21.3 - [color=red][b]FAT32[/b][/color]x86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.370 [GMT 1:00] Running from: C:\Documents and Settings\Rodzinka\Pulpit\ComboFix.exe Command switches used :: C:\DOCUME~1\Rodzinka\Pulpit\CFScript.txt * Created a new restore point FILE C:\WINDOWS\IsUn0415.exe . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\FOUND.001 C:\FOUND.001\FILE0000.CHK C:\WINDOWS\IsUn0415.exe . ((((((((((((((((((((((((( Files Created from 2007-12-02 to 2008-01-02 ))))))))))))))))))))))))))))))) . 2008-01-02 17:15 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-12-19 20:05 . 2007-12-19 20:05 <DIR> d-------- C:\WINDOWS\system32\AGEIA 2007-12-19 20:05 . 2007-12-19 20:05 <DIR> d-------- C:\Program Files\AGEIA Technologies 2007-12-19 20:04 . 2007-12-19 20:04 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard 2007-12-19 20:04 . 2007-06-01 08:40 1,184,984 --a------ C:\WINDOWS\system32\wvc1dmod.dll 2007-12-17 06:21 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll 2007-12-17 06:21 . 2006-09-28 16:05 2,414,360 --a------ C:\WINDOWS\system32\d3dx9_31.dll 2007-12-17 06:21 . 2006-12-08 12:02 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll 2007-12-17 06:21 . 2006-09-28 16:05 237,848 --a------ C:\WINDOWS\system32\xactengine2_4.dll 2007-12-17 06:21 . 2007-12-17 06:21 294 --a------ C:\WINDOWS\game.ini 2007-12-15 14:46 . 2006-04-20 12:51 359,808 --a------ C:\WINDOWS\system32\drivers\tcpip.sys.flg 2007-12-13 21:13 . 2007-12-13 21:13 <DIR> d-------- C:\Temp 2007-12-13 21:13 . 2007-12-13 21:14 29 --a------ C:\WINDOWS\wordpad.ini 2007-12-09 21:53 . 2007-12-09 21:53 <DIR> d-------- C:\Program Files\MSXML 4.0 2007-12-08 14:30 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys 2007-12-08 14:30 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\dllcache\usbccgp.sys 2007-12-08 12:25 . 2007-12-08 12:25 <DIR> d-------- C:\Documents and Settings\Rodzinka\Dane aplikacji\Teleca 2007-12-08 12:24 . 2007-12-08 12:24 <DIR> d-------- C:\Documents and Settings\Rodzinka\Dane aplikacji\Sony Ericsson 2007-12-08 12:22 . 2007-12-08 12:22 <DIR> d-------- C:\WINDOWS\system32\DRVSTORE 2007-12-08 12:22 . 2007-12-08 12:22 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Sony Ericsson 2007-12-08 12:21 . 2007-12-08 12:21 <DIR> d-------- C:\WINDOWS\Downloaded Installations 2007-12-08 12:21 . 2007-12-08 12:21 <DIR> d-------- C:\Program Files\Sony Ericsson 2007-12-08 12:21 . 2007-12-08 12:21 <DIR> d-------- C:\Program Files\Common Files\Teleca Shared 2007-12-08 12:21 . 2007-12-08 12:21 <DIR> d-------- C:\Program Files\Common Files\Sony Ericsson Shared 2007-12-08 12:21 . 2007-12-08 12:21 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Teleca 2007-12-03 21:10 . 2007-12-03 21:10 82 --a------ C:\WINDOWS\mafosav.INI 2007-12-02 14:56 . 2007-12-02 14:57 4,096 --a------ C:\WINDOWS\d3dx.dat . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-08 21:32 24,192 ----a-w C:\Documents and Settings\Rodzinka\usbsermptxp.sys 2007-12-08 21:32 22,768 ----a-w C:\WINDOWS\system32\drivers\usbsermpt.sys 2007-12-08 21:32 22,768 ----a-w C:\Documents and Settings\Rodzinka\usbsermpt.sys 2007-12-01 18:52 32 ----a-w C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat 2007-12-01 18:52 --------- d-----w C:\Program Files\Common Files\Skype 2007-12-01 18:52 --------- d-----w C:\Documents and Settings\Rodzinka\Dane aplikacji\skypePM 2007-12-01 18:52 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Skype 2007-11-24 22:18 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Office Genuine Advantage 2007-11-16 16:19 131,072 ----a-w C:\WINDOWS\system32\gc.dll 2007-11-15 19:49 --------- d-----w C:\Program Files\Common Files\Futuremark Shared 2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys 2007-11-10 15:04 402,944 ----a-w C:\WINDOWS\system32AKV.exe 2007-11-10 15:04 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\TEMP 2007-11-10 14:55 --------- d-----w C:\Program Files\EjoyStudio 2007-11-04 18:42 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\nView_Profiles 2007-11-02 08:53 --------- d-----w C:\Documents and Settings\Rodzinka\Dane aplikacji\Media Player Classic 2007-10-30 23:26 3,590,656 ------w C:\WINDOWS\system32\dllcache\mshtml.dll 2007-10-29 22:44 1,291,264 ----a-w C:\WINDOWS\system32\quartz.dll 2007-10-29 22:44 1,291,264 ----a-w C:\WINDOWS\system32\dllcache\quartz.dll 2007-10-27 17:08 60,416 ----a-w C:\WINDOWS\ALCFDRTM.EXE 2007-10-25 16:44 8,488,960 ----a-w C:\WINDOWS\system32\dllcache\shell32.dll 2007-10-25 08:28 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll 2007-10-25 08:28 222,720 ----a-w C:\WINDOWS\system32\dllcache\wmasf.dll 2007-10-21 13:51 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-10-20 15:41 298,104 ----a-w C:\WINDOWS\system32\imon.dll 2007-10-10 23:52 824,832 ------w C:\WINDOWS\system32\dllcache\wininet.dll 2007-10-10 23:52 671,232 ------w C:\WINDOWS\system32\dllcache\mstime.dll 2007-10-10 23:52 63,488 ------w C:\WINDOWS\system32\dllcache\icardie.dll 2007-10-10 23:52 6,065,664 ------w C:\WINDOWS\system32\dllcache\ieframe.dll 2007-10-10 23:52 52,224 ------w C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2007-10-10 23:52 478,208 ------w C:\WINDOWS\system32\dllcache\mshtmled.dll 2007-10-10 23:52 459,264 ------w C:\WINDOWS\system32\dllcache\msfeeds.dll 2007-10-10 23:52 44,544 ------w C:\WINDOWS\system32\dllcache\iernonce.dll 2007-10-10 23:52 384,512 ------w C:\WINDOWS\system32\dllcache\iedkcs32.dll 2007-10-10 23:52 383,488 ------w C:\WINDOWS\system32\dllcache\ieapfltr.dll 2007-10-10 23:52 27,648 ------w C:\WINDOWS\system32\dllcache\jsproxy.dll 2007-10-10 23:52 267,776 ------w C:\WINDOWS\system32\dllcache\iertutil.dll 2007-10-10 23:52 232,960 ------w C:\WINDOWS\system32\dllcache\webcheck.dll 2007-10-10 23:52 230,400 ------w C:\WINDOWS\system32\dllcache\ieaksie.dll 2007-10-10 23:52 214,528 ------w C:\WINDOWS\system32\dllcache\dxtrans.dll 2007-10-10 23:52 193,024 ------w C:\WINDOWS\system32\dllcache\msrating.dll 2007-10-10 23:52 153,088 ------w C:\WINDOWS\system32\dllcache\ieakeng.dll 2007-10-10 23:52 132,608 ------w C:\WINDOWS\system32\dllcache\extmgr.dll 2007-10-10 23:52 124,928 ------w C:\WINDOWS\system32\dllcache\advpack.dll 2007-10-10 23:52 105,984 ------w C:\WINDOWS\system32\dllcache\url.dll 2007-10-10 23:52 102,400 ------w C:\WINDOWS\system32\dllcache\occache.dll 2007-10-10 23:52 1,159,680 ------w C:\WINDOWS\system32\dllcache\urlmon.dll 2007-10-10 11:03 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe 2007-10-10 11:03 625,152 ------w C:\WINDOWS\system32\dllcache\iexplore.exe 2007-10-10 10:59 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe 2007-10-10 05:46 161,792 ------w C:\WINDOWS\system32\dllcache\ieakui.dll . ((((((((((((((((((((((((((((( snapshot@2008-01-02_17.16.31,75 ))))))))))))))))))))))))))))))))))))))))) . + 2000-08-31 07:00:00 163,328 ----a-w C:\WINDOWS\erdnt\subs\F3M\ERDNT.EXE . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 22:44 15360] "Gadu-Gadu"="D:\Gadu-Gadu\gg.exe" [2007-04-19 17:43 2101248] "Twoje TVN24"="" [] "Skype"="D:\Skype\Phone\Skype.exe" [2007-12-07 15:08 21686568] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-10-10 15:49 7286784] "nwiz"="nwiz.exe" [2005-10-10 15:49 1519616 C:\WINDOWS\system32\nwiz.exe] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2005-10-10 15:49 86016] "SoundMan"="SOUNDMAN.EXE" [2005-09-22 10:42 90112 C:\WINDOWS\soundman.exe] "nod32kui"="C:\Program Files\Eset\nod32kui.exe" [2007-10-20 16:41 949376] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496] "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648] "system32SWSV Agent"="C:\WINDOWS\system32SWSV.exe" [ ] "Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2006-11-24 01:06 487424] "GrooveMonitor"="D:\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47 31016] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 22:44 15360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDTray] 2004-09-03 10:58 65536 --a------ D:\Nero\ODD Toolkit\DVDTray.exe R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);C:\WINDOWS\system32\drivers\sfdrv01a.sys [2006-07-05 13:46] *Newly Created Service* - PROCEXP90 . ************************************************************************** catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-02 18:24:07 Windows 5.1.2600 Dodatek Service Pack 2 FAT NTAPI scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2008-01-02 18:24:27 C:\qoobox\ComboFix-quarantined-files.txt 2008-01-02 17:24:26 C:\qoobox\ComboFix3.txt 2008-01-02 16:16:48 C:\qoobox\ComboFix2.txt 2008-01-02 16:25:34 . 2007-12-12 12:15:04 --- E O F ---

**Posty:** 3854 · przez **Dzi@dek** 02 Sty 2008, 19:31

Tak samo jak poprzednio-wklej

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"system32SWSV Agent"=-

File::
C:\WINDOWS\system32SWSV.exe

Plik >>> zapisz jako CFScript.txt .Plik przeciągnij i upuść na ikonę ComboFixa (tak jak tu ) . Potwierdz >>> zresetuje sie komputer

(jeśli pojawi się pytanie "1 or 2" - to wpisz 1 i naciśnij ENTER). Rozpocznie się proces usuwania
Daj log z combofix.

**Posty:** 165 · przez **qweasdzxc** 02 Sty 2008, 19:41

Tak jak poprzednio komp nadal pracuje

Troche nudne to wklejanie ale wole aby komp wrocil do normy

LoG:

Kod: Zaznacz wszystko: ComboFix 07-12-31.4 - Rodzinka 2008-01-02 18:39:15.4 - [color=red][b]FAT32[/b][/color]x86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.470 [GMT 1:00] Running from: C:\Documents and Settings\Rodzinka\Pulpit\ComboFix.exe Command switches used :: C:\Documents and Settings\Rodzinka\Pulpit\CFScript.txt * Created a new restore point FILE C:\WINDOWS\system32SWSV.exe . ((((((((((((((((((((((((( Files Created from 2007-12-02 to 2008-01-02 ))))))))))))))))))))))))))))))) . 2008-01-02 17:15 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-12-19 20:05 . 2007-12-19 20:05 <DIR> d-------- C:\WINDOWS\system32\AGEIA 2007-12-19 20:05 . 2007-12-19 20:05 <DIR> d-------- C:\Program Files\AGEIA Technologies 2007-12-19 20:04 . 2007-12-19 20:04 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard 2007-12-19 20:04 . 2007-06-01 08:40 1,184,984 --a------ C:\WINDOWS\system32\wvc1dmod.dll 2007-12-17 06:21 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll 2007-12-17 06:21 . 2006-09-28 16:05 2,414,360 --a------ C:\WINDOWS\system32\d3dx9_31.dll 2007-12-17 06:21 . 2006-12-08 12:02 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll 2007-12-17 06:21 . 2006-09-28 16:05 237,848 --a------ C:\WINDOWS\system32\xactengine2_4.dll 2007-12-17 06:21 . 2007-12-17 06:21 294 --a------ C:\WINDOWS\game.ini 2007-12-15 14:46 . 2006-04-20 12:51 359,808 --a------ C:\WINDOWS\system32\drivers\tcpip.sys.flg 2007-12-13 21:13 . 2007-12-13 21:13 <DIR> d-------- C:\Temp 2007-12-13 21:13 . 2007-12-13 21:14 29 --a------ C:\WINDOWS\wordpad.ini 2007-12-09 21:53 . 2007-12-09 21:53 <DIR> d-------- C:\Program Files\MSXML 4.0 2007-12-08 14:30 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys 2007-12-08 14:30 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\dllcache\usbccgp.sys 2007-12-08 12:25 . 2007-12-08 12:25 <DIR> d-------- C:\Documents and Settings\Rodzinka\Dane aplikacji\Teleca 2007-12-08 12:24 . 2007-12-08 12:24 <DIR> d-------- C:\Documents and Settings\Rodzinka\Dane aplikacji\Sony Ericsson 2007-12-08 12:22 . 2007-12-08 12:22 <DIR> d-------- C:\WINDOWS\system32\DRVSTORE 2007-12-08 12:22 . 2007-12-08 12:22 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Sony Ericsson 2007-12-08 12:21 . 2007-12-08 12:21 <DIR> d-------- C:\WINDOWS\Downloaded Installations 2007-12-08 12:21 . 2007-12-08 12:21 <DIR> d-------- C:\Program Files\Sony Ericsson 2007-12-08 12:21 . 2007-12-08 12:21 <DIR> d-------- C:\Program Files\Common Files\Teleca Shared 2007-12-08 12:21 . 2007-12-08 12:21 <DIR> d-------- C:\Program Files\Common Files\Sony Ericsson Shared 2007-12-08 12:21 . 2007-12-08 12:21 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Teleca 2007-12-03 21:10 . 2007-12-03 21:10 82 --a------ C:\WINDOWS\mafosav.INI 2007-12-02 14:56 . 2007-12-02 14:57 4,096 --a------ C:\WINDOWS\d3dx.dat . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-08 21:32 24,192 ----a-w C:\Documents and Settings\Rodzinka\usbsermptxp.sys 2007-12-08 21:32 22,768 ----a-w C:\WINDOWS\system32\drivers\usbsermpt.sys 2007-12-08 21:32 22,768 ----a-w C:\Documents and Settings\Rodzinka\usbsermpt.sys 2007-12-01 18:52 32 ----a-w C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat 2007-12-01 18:52 --------- d-----w C:\Program Files\Common Files\Skype 2007-12-01 18:52 --------- d-----w C:\Documents and Settings\Rodzinka\Dane aplikacji\skypePM 2007-12-01 18:52 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Skype 2007-11-24 22:18 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Office Genuine Advantage 2007-11-16 16:19 131,072 ----a-w C:\WINDOWS\system32\gc.dll 2007-11-15 19:49 --------- d-----w C:\Program Files\Common Files\Futuremark Shared 2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys 2007-11-10 15:04 402,944 ----a-w C:\WINDOWS\system32AKV.exe 2007-11-10 15:04 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\TEMP 2007-11-10 14:55 --------- d-----w C:\Program Files\EjoyStudio 2007-11-04 18:42 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\nView_Profiles 2007-11-02 08:53 --------- d-----w C:\Documents and Settings\Rodzinka\Dane aplikacji\Media Player Classic 2007-10-30 23:26 3,590,656 ------w C:\WINDOWS\system32\dllcache\mshtml.dll 2007-10-29 22:44 1,291,264 ----a-w C:\WINDOWS\system32\quartz.dll 2007-10-29 22:44 1,291,264 ----a-w C:\WINDOWS\system32\dllcache\quartz.dll 2007-10-27 17:08 60,416 ----a-w C:\WINDOWS\ALCFDRTM.EXE 2007-10-25 16:44 8,488,960 ----a-w C:\WINDOWS\system32\dllcache\shell32.dll 2007-10-25 08:28 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll 2007-10-25 08:28 222,720 ----a-w C:\WINDOWS\system32\dllcache\wmasf.dll 2007-10-21 13:51 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-10-20 15:41 298,104 ----a-w C:\WINDOWS\system32\imon.dll 2007-10-10 23:52 824,832 ------w C:\WINDOWS\system32\dllcache\wininet.dll 2007-10-10 23:52 671,232 ------w C:\WINDOWS\system32\dllcache\mstime.dll 2007-10-10 23:52 63,488 ------w C:\WINDOWS\system32\dllcache\icardie.dll 2007-10-10 23:52 6,065,664 ------w C:\WINDOWS\system32\dllcache\ieframe.dll 2007-10-10 23:52 52,224 ------w C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2007-10-10 23:52 478,208 ------w C:\WINDOWS\system32\dllcache\mshtmled.dll 2007-10-10 23:52 459,264 ------w C:\WINDOWS\system32\dllcache\msfeeds.dll 2007-10-10 23:52 44,544 ------w C:\WINDOWS\system32\dllcache\iernonce.dll 2007-10-10 23:52 384,512 ------w C:\WINDOWS\system32\dllcache\iedkcs32.dll 2007-10-10 23:52 383,488 ------w C:\WINDOWS\system32\dllcache\ieapfltr.dll 2007-10-10 23:52 27,648 ------w C:\WINDOWS\system32\dllcache\jsproxy.dll 2007-10-10 23:52 267,776 ------w C:\WINDOWS\system32\dllcache\iertutil.dll 2007-10-10 23:52 232,960 ------w C:\WINDOWS\system32\dllcache\webcheck.dll 2007-10-10 23:52 230,400 ------w C:\WINDOWS\system32\dllcache\ieaksie.dll 2007-10-10 23:52 214,528 ------w C:\WINDOWS\system32\dllcache\dxtrans.dll 2007-10-10 23:52 193,024 ------w C:\WINDOWS\system32\dllcache\msrating.dll 2007-10-10 23:52 153,088 ------w C:\WINDOWS\system32\dllcache\ieakeng.dll 2007-10-10 23:52 132,608 ------w C:\WINDOWS\system32\dllcache\extmgr.dll 2007-10-10 23:52 124,928 ------w C:\WINDOWS\system32\dllcache\advpack.dll 2007-10-10 23:52 105,984 ------w C:\WINDOWS\system32\dllcache\url.dll 2007-10-10 23:52 102,400 ------w C:\WINDOWS\system32\dllcache\occache.dll 2007-10-10 23:52 1,159,680 ------w C:\WINDOWS\system32\dllcache\urlmon.dll 2007-10-10 11:03 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe 2007-10-10 11:03 625,152 ------w C:\WINDOWS\system32\dllcache\iexplore.exe 2007-10-10 10:59 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe 2007-10-10 05:46 161,792 ------w C:\WINDOWS\system32\dllcache\ieakui.dll . ((((((((((((((((((((((((((((( snapshot@2008-01-02_17.16.31,75 ))))))))))))))))))))))))))))))))))))))))) . + 2000-08-31 07:00:00 163,328 ----a-w C:\WINDOWS\erdnt\subs\F3M\ERDNT.EXE . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 22:44 15360] "Gadu-Gadu"="D:\Gadu-Gadu\gg.exe" [2007-04-19 17:43 2101248] "Twoje TVN24"="" [] "Skype"="D:\Skype\Phone\Skype.exe" [2007-12-07 15:08 21686568] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-10-10 15:49 7286784] "nwiz"="nwiz.exe" [2005-10-10 15:49 1519616 C:\WINDOWS\system32\nwiz.exe] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2005-10-10 15:49 86016] "SoundMan"="SOUNDMAN.EXE" [2005-09-22 10:42 90112 C:\WINDOWS\soundman.exe] "nod32kui"="C:\Program Files\Eset\nod32kui.exe" [2007-10-20 16:41 949376] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496] "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648] "Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2006-11-24 01:06 487424] "GrooveMonitor"="D:\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47 31016] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 22:44 15360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDTray] 2004-09-03 10:58 65536 --a------ D:\Nero\ODD Toolkit\DVDTray.exe R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);C:\WINDOWS\system32\drivers\sfdrv01a.sys [2006-07-05 13:46] *Newly Created Service* - PROCEXP90 . ************************************************************************** catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-02 18:40:08 Windows 5.1.2600 Dodatek Service Pack 2 FAT NTAPI scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2008-01-02 18:40:27 C:\qoobox\ComboFix-quarantined-files.txt 2008-01-02 17:40:26 C:\qoobox\ComboFix4.txt 2008-01-02 16:16:48 C:\qoobox\ComboFix3.txt 2008-01-02 16:25:34 C:\qoobox\ComboFix2.txt 2008-01-02 17:24:28 . 2007-12-12 12:15:04 --- E O F ---

**Posty:** 3854 · przez **Dzi@dek** 02 Sty 2008, 19:46

Wygląda na czysty.

Autor postu otrzymał pochwałę

**Posty:** 165 · przez **qweasdzxc** 02 Sty 2008, 20:10

Komp tez juz jest spokojny. Proc 2% Pamiec 204 MB :-)

Dzieki

komp mi wariuje

Komp mi wariuje

Kto jest na forum