Log do sprawdzenia. wolny pc i net

**Posty:** 3 · przez **ChrisKamas** 01 Mar 2009, 13:17

Od jakiegoś czasu komputer mi strasznie muli. Nawet gry ze słabymi wymaganiami się tną. Poza tym strony internetowe się strasznie długo wczytują. Podejrzewam że "coś" zainfekowało mi komputer. Nie znam się na logach, dlatego proszę was o pomoc. Z góry dziękuję.

Kod: Zaznacz wszystko
Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:45:53, on 2009-03-01 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0013) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Razer\DeathAdder\razerhid.exe C:\WINDOWS\system32\CTHELPER.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Nowe Gadu-Gadu\gg.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Nowe Gadu-Gadu\spellchecker_gg.exe C:\Program Files\Razer\DeathAdder\razertra.exe C:\Program Files\Razer\DeathAdder\razerofa.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\TUProgSt.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Winamp\winamp.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.daemonsearch.com/intl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://shop.winamp.com/DRHM/servlet/ControllerServlet?Action=DisplayWaitDontLeavePopUpPage&SiteID=winamp&Locale=en_US&Env=BASE R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Tłumaczenie - {0D704FAD-66E9-4F0A-BFED-4F665770DDB3} - C:\Program Files\Techland\Common\InternetTranslator\InternetTranslator.dll O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [DeathAdder] C:\Program Files\Razer\DeathAdder\razerhid.exe O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKCU\..\Run: [Nowe Gadu-Gadu] "C:\Program Files\Nowe Gadu-Gadu\gg.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user') O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {B46B0919-62BA-4D99-A5C4-916B57A6805C} - C:\Program Files\Techland\Common\InternetTranslator\InternetTranslator.dll O9 - Extra 'Tools' menuitem: @C:\Program Files\Techland\Common\InternetTranslator\InternetTranslator.dll,-103 - {B46B0919-62BA-4D99-A5C4-916B57A6805C} - C:\Program Files\Techland\Common\InternetTranslator\InternetTranslator.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O23 - Service: CT Device Query service (CTDevice_Srv) - Unknown owner - C:\Program Files\Creative\Shared Files\CTDevSrv.exe (file missing) O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe -- End of file - 6016 bytes

**Posty:** 8001 · przez **Okocza** 01 Mar 2009, 13:54

ChrisKamas, popraw nazwę tematu oraz wstaw log z combofixa

**Posty:** 3 · przez **ChrisKamas** 01 Mar 2009, 16:31

Kod: Zaznacz wszystko: [quote]ComboFix 09-02-28.01 - Randi 2009-03-01 15:22:51.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1250.1.1045.18.1535.1136 [GMT 1:00] Uruchomiony z: c:\documents and settings\Randi\Pulpit\ComboFix.exe AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Updated) * Utworzono nowy punkt przywracania . ((((((((((((((((((((((((( Pliki utworzone od 2009-02-01 do 2009-03-01 ))))))))))))))))))))))))))))))) . 2009-03-01 11:44 . 2009-03-01 11:44 <DIR> d-------- c:\program files\Trend Micro 2009-02-28 03:58 . 2009-02-28 03:59 <DIR> d-------- c:\program files\Flash Player Pro 2009-02-27 12:28 . 2009-02-27 12:28 <DIR> d-------- c:\program files\Techland 2009-02-26 13:03 . 2009-02-26 13:03 <DIR> d-------- c:\program files\EA SPORTS 2009-02-26 12:45 . 2009-02-26 12:45 <DIR> d-------- c:\program files\DAEMON Tools 2009-02-24 11:45 . 2009-03-01 14:31 215,755 --a------ c:\windows\system32\nvapps.xml 2009-02-24 11:44 . 2009-02-24 11:44 <DIR> d-------- c:\windows\nview 2009-02-24 11:44 . 2009-02-05 10:54 453,152 --a------ c:\windows\system32\NVUNINST.EXE 2009-02-24 11:44 . 2009-02-09 13:18 453,152 --a------ c:\windows\system32\nvudisp.exe 2009-02-24 11:44 . 2009-02-09 13:18 18,795 --a------ c:\windows\system32\nvdisp.nvu 2009-02-24 09:38 . 2009-02-24 09:41 <DIR> d-------- c:\program files\SystemRequirementsLab 2009-02-24 09:38 . 2009-02-24 09:38 <DIR> d-------- c:\documents and settings\Randi\SystemRequirementsLab 2009-02-23 01:17 . 2009-02-23 01:17 <DIR> d-------- c:\program files\SopCast 2009-02-22 19:58 . 2009-02-22 19:58 <DIR> d-------- c:\documents and settings\Randi\skins 2009-02-21 12:38 . 2009-02-21 12:38 <DIR> d-------- c:\documents and settings\Randi\Dane aplikacji\pokerth 2009-02-21 12:14 . 2009-02-21 12:16 <DIR> d-------- c:\program files\PokerTH 2009-02-20 23:06 . 2009-03-01 12:53 16,820 --a------ c:\windows\system32\BMXStateBkp-{00000000-00000000-00000008-00001102-00000002-80271102}.rfx 2009-02-20 23:06 . 2009-03-01 12:53 16,820 --a------ c:\windows\system32\BMXState-{00000000-00000000-00000008-00001102-00000002-80271102}.rfx 2009-02-20 23:06 . 2009-03-01 12:53 24 --a------ c:\windows\system32\DVCStateBkp-{00000000-00000000-00000008-00001102-00000002-80271102}.dat 2009-02-20 23:06 . 2009-03-01 12:53 24 --a------ c:\windows\system32\DVCState-{00000000-00000000-00000008-00001102-00000002-80271102}.dat 2009-02-20 22:10 . 2009-02-20 22:47 <DIR> d-------- c:\program files\mIRC 2009-02-20 22:10 . 2009-02-20 22:15 <DIR> d-------- c:\documents and settings\Randi\Dane aplikacji\mIRC 2009-02-20 21:56 . 2009-02-20 21:56 <DIR> d-------- c:\documents and settings\Randi\Dane aplikacji\Ventrilo 2009-02-20 21:55 . 2009-02-20 21:55 <DIR> d-------- c:\program files\Ventrilo 2009-02-20 21:55 . 2009-02-20 21:55 <DIR> d-------- c:\program files\Common Files\Wise Installation Wizard 2009-02-20 21:48 . 2009-03-01 12:54 3,373,917 --a------ c:\windows\{00000000-00000000-00000008-00001102-00000002-80271102}.CDF 2009-02-20 21:48 . 2009-03-01 12:54 3,373,917 --a------ c:\windows\{00000000-00000000-00000008-00001102-00000002-80271102}.BAK 2009-02-20 21:47 . 1998-01-08 01:00 1,048,576 --------- c:\windows\system32\SFMAN.DAT 2009-02-20 21:47 . 2000-05-11 01:00 90,112 --------- c:\windows\Updreg.EXE 2009-02-20 21:47 . 1998-06-05 02:00 84,992 --------- c:\windows\system32\SFCVRT32.DLL 2009-02-20 21:47 . 1995-08-30 02:02 82,432 --------- c:\windows\system32\CTWFLT32.DLL 2009-02-20 21:47 . 1998-10-20 16:05 54,784 --------- c:\windows\system32\INETWH32.DLL 2009-02-20 21:47 . 1994-12-05 03:11 53,552 --------- c:\windows\CTCCW.DLL 2009-02-20 21:47 . 2009-03-01 12:53 28,224 --a------ c:\windows\system32\BMXCtrlState-{00000000-00000000-00000008-00001102-00000002-80271102}.rfx 2009-02-20 21:47 . 2009-03-01 12:53 28,224 --a------ c:\windows\system32\BMXBkpCtrlState-{00000000-00000000-00000008-00001102-00000002-80271102}.rfx 2009-02-20 21:47 . 1995-07-13 02:01 26,768 --------- c:\windows\system32\CTL3D.DLL 2009-02-20 21:47 . 1996-05-23 02:24 24,976 --------- c:\windows\CTRES.DLL 2009-02-20 21:47 . 1999-01-14 14:04 231 --------- c:\windows\AC3API.INI 2009-02-20 21:45 . 1999-12-17 01:00 6,752 --------- c:\windows\system32\PFMODNT.SYS 2009-02-20 10:12 . 2009-02-20 10:12 <DIR> d-------- c:\program files\DIFX 2009-02-20 10:11 . 2009-02-20 10:11 <DIR> d----c--- c:\windows\system32\DRVSTORE 2009-02-20 10:11 . 2009-02-20 10:11 <DIR> d-------- c:\program files\Razer 2009-02-20 10:11 . 2009-02-20 10:11 <DIR> d-------- c:\documents and settings\Randi\Dane aplikacji\InstallShield 2009-02-20 10:11 . 2006-11-23 05:55 73,728 --a------ c:\windows\system32\DeathAdder.cpl 2009-02-20 10:11 . 2005-03-03 19:47 31,104 --a------ c:\windows\system32\drivers\CYUSB.sys 2009-02-20 10:11 . 2007-08-02 17:32 22,784 --a------ c:\windows\system32\drivers\dadder.sys 2009-02-18 20:12 . 2009-02-18 20:12 91 --a------ c:\windows\LEXSTAT.INI 2009-02-18 20:11 . 2009-02-18 20:11 <DIR> d-------- c:\program files\Lexmark 640 Series 2009-02-18 20:11 . 2009-02-18 20:11 <DIR> d-------- C:\Lexmark 2009-02-18 20:11 . 2009-02-18 20:11 <DIR> d-------- c:\documents and settings\Randi\WINDOWS 2009-02-18 20:11 . 2004-05-24 13:23 311,296 --a------ c:\windows\system32\LEXBCES.EXE 2009-02-18 20:11 . 1997-04-18 11:52 298,496 --a------ c:\windows\unin0415.exe 2009-02-18 20:11 . 2004-05-24 13:21 201,216 --a------ c:\windows\system32\LEXP2P32.DLL 2009-02-18 20:11 . 2004-05-24 13:42 200,704 --a------ c:\windows\system32\lexlmpm.dll 2009-02-18 20:11 . 2004-05-24 13:26 198,144 --a------ c:\windows\system32\LEX2KUSB.DLL 2009-02-18 20:11 . 2004-05-24 13:22 174,592 --a------ c:\windows\system32\LEXPPS.EXE 2009-02-18 20:11 . 2004-05-24 13:22 147,456 --a------ c:\windows\system32\LEXBCE.DLL 2009-02-18 20:11 . 2006-03-28 05:29 73,728 --a------ c:\windows\system32\lxdapwr.dll 2009-02-18 20:06 . 2008-04-14 00:17 25,856 --a------ c:\windows\system32\drivers\usbprint.sys 2009-02-18 20:06 . 2008-04-14 00:17 25,856 --a--c--- c:\windows\system32\dllcache\usbprint.sys 2009-02-18 18:27 . 2009-02-18 18:27 <DIR> d-------- c:\program files\Common Files\Symantec Shared 2009-02-17 17:23 . 2009-02-17 17:32 <DIR> d-------- C:\vcs5BGEffects 2009-02-15 09:16 . 2009-02-16 13:26 69 --a------ c:\windows\NeroDigital.ini 2009-02-14 13:15 . 2009-02-14 13:15 0 --ahs---- c:\windows\S2EC758D7.tmp 2009-02-14 12:27 . 2009-02-14 13:25 <DIR> d-------- c:\program files\SlySoft 2009-02-14 12:03 . 2009-02-14 12:03 <DIR> d-------- c:\documents and settings\Randi\Dane aplikacji\Nero 2009-02-14 11:59 . 2009-02-14 12:01 <DIR> d-------- c:\program files\Nero 2009-02-14 11:59 . 2009-02-14 12:00 <DIR> d-------- c:\program files\Common Files\Nero 2009-02-14 11:59 . 2009-02-14 11:59 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Nero 2009-02-14 11:59 . 2006-03-17 12:45 1,757,184 --a------ c:\windows\system32\imagX7.dll 2009-02-14 11:59 . 2006-03-17 12:45 802,816 --a------ c:\windows\system32\imagXRA7.dll 2009-02-14 11:59 . 2006-03-17 12:45 497,296 --a------ c:\windows\system32\imagXpr7.dll 2009-02-14 11:59 . 2006-03-17 15:49 368,640 --a------ c:\windows\system32\TwnLib4.dll 2009-02-14 11:59 . 2006-03-17 12:45 258,048 --a------ c:\windows\system32\imagXR7.dll 2009-02-14 11:50 . 2009-02-14 11:50 685,816 --a------ c:\windows\system32\drivers\sptd.sys 2009-02-14 11:35 . 2005-01-31 15:05 17,920 --a------ c:\windows\system32\wnaspi32.dll 2009-02-13 11:14 . 2009-02-28 21:21 4,000 --a------ C:\ao.dat 2009-02-13 11:07 . 2009-02-26 12:03 <DIR> d-------- c:\documents and settings\Randi\Dane aplikacji\foobar2000 2009-02-12 13:23 . 2008-11-06 17:37 3,596,288 --a------ c:\windows\system32\qt-dx331.dll 2009-02-12 13:23 . 2008-09-24 19:41 839,680 --a------ c:\windows\system32\lameACM.acm 2009-02-12 13:23 . 2008-12-07 19:08 795,648 --a------ c:\windows\system32\xvidcore.dll 2009-02-12 13:23 . 2004-01-25 17:18 217,088 --a------ c:\windows\system32\yv12vfw.dll 2009-02-12 13:23 . 2008-09-16 20:23 168,448 --a------ c:\windows\system32\unrar.dll 2009-02-12 13:23 . 2008-12-07 19:08 130,048 --a------ c:\windows\system32\xvidvfw.dll 2009-02-12 13:23 . 2007-09-21 01:52 118,784 --a------ c:\windows\system32\ac3acm.acm 2009-02-12 13:23 . 2008-12-11 01:33 86,016 --a------ c:\windows\system32\dpl100.dll 2009-02-12 13:23 . 2008-10-03 13:30 414 --a------ c:\windows\system32\lame_acm.xml 2009-02-12 13:22 . 2009-02-12 13:23 <DIR> d-------- c:\program files\K-Lite Codec Pack 2009-02-12 13:22 . 2008-11-06 17:33 684,032 --a------ c:\windows\system32\divx.dll 2009-02-12 13:22 . 2008-12-08 12:53 57,344 --a------ c:\windows\system32\ff_vfw.dll 2009-02-12 13:22 . 2007-07-10 17:10 547 --a------ c:\windows\system32\ff_vfw.dll.manifest 2009-02-12 13:01 . 2009-02-12 13:01 <DIR> d-------- c:\program files\Livebox Reconnect 2.0 Pro 2009-02-12 12:30 . 2009-02-12 12:30 <DIR> d-------- c:\program files\Real Alternative 2009-02-11 23:20 . 2009-02-11 23:20 <DIR> d-------- c:\documents and settings\Randi\Dane aplikacji\Media Player Classic 2009-02-11 23:13 . 2009-02-11 23:13 57 --a------ c:\windows\wininit.ini 2009-02-11 22:56 . 2009-02-11 22:56 <DIR> d-------- c:\windows\WinAVI Video Converter 9.0 2009-02-11 22:56 . 2009-02-12 20:48 <DIR> d-------- c:\program files\WinAVI Video Converter 9.0 2009-02-11 22:35 . 2009-02-11 22:35 <DIR> d-------- c:\windows\Sun 2009-02-11 19:24 . 2009-02-11 19:24 603,904 --a------ c:\windows\system32\TUProgSt.exe 2009-02-11 19:24 . 2009-02-11 19:24 360,192 --a------ c:\windows\system32\TuneUpDefragService.exe 2009-02-11 19:24 . 2008-12-11 13:31 27,904 --a------ c:\windows\system32\uxtuneup.dll 2009-02-11 19:19 . 2009-02-11 19:19 <DIR> d-------- c:\documents and settings\Randi\Dane aplikacji\TuneUp Software 2009-02-11 19:18 . 2009-02-11 19:24 <DIR> d-------- c:\program files\TuneUp Utilities 2009 2009-02-11 19:18 . 2009-02-11 19:18 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\TuneUp Software 2009-02-11 19:17 . 2009-02-11 19:17 <DIR> d--hs---- c:\documents and settings\All Users\Dane aplikacji\{55A29068-F2CE-456C-9148-C869879E2357} 2009-02-11 11:12 . 2009-02-11 11:13 <DIR> d-------- c:\documents and settings\Randi\Dane aplikacji\Moje pliki zapisu Bitwy o Śródziemie 2009-02-10 22:48 . 2009-02-24 11:40 <DIR> d-------- c:\program files\PokerStars 2009-02-10 19:37 . 2009-02-18 18:28 <DIR> d-------- c:\program files\Norton Security Scan 2009-02-10 19:37 . 2009-02-10 19:37 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\FLEXnet 2009-02-10 19:36 . 2009-02-10 19:37 <DIR> d-------- c:\windows\system32\Adobe 2009-02-10 19:24 . 2009-02-10 19:24 <DIR> d-------- c:\program files\Adobe Media Player 2009-02-10 19:18 . 2009-02-10 19:18 <DIR> d-------- c:\program files\Common Files\Adobe AIR 2009-02-10 19:05 . 2009-02-10 19:05 <DIR> d-------- c:\program files\Common Files\Macrovision Shared 2009-02-10 19:01 . 2009-02-18 19:59 <DIR> d-------- c:\program files\Common Files\Adobe 2009-02-10 18:12 . 2009-02-10 18:12 <DIR> d-------- c:\program files\Java 2009-02-10 18:12 . 2009-02-10 18:12 410,984 --a------ c:\windows\system32\deploytk.dll 2009-02-10 18:12 . 2009-02-10 18:12 73,728 --a------ c:\windows\system32\javacpl.cpl 2009-02-10 16:58 . 2009-02-10 16:59 <DIR> d-------- c:\program files\Winamp 2009-02-10 16:58 . 2009-02-10 17:01 <DIR> d-------- c:\documents and settings\Randi\Dane aplikacji\Winamp 2009-02-10 13:49 . 2009-02-11 12:19 <DIR> d-------- c:\documents and settings\Randi\Dane aplikacji\Nowe Gadu-Gadu 2009-02-10 13:47 . 2009-02-10 23:52 <DIR> d-------- c:\program files\Nowe Gadu-Gadu 2009-02-10 13:27 . 2009-03-01 15:24 <DIR> d--h----- c:\documents and settings\Randi\Ustawienia lokalne 2009-02-10 13:27 . 2009-02-10 13:27 <DIR> dr------- c:\documents and settings\Randi\Ulubione 2009-02-10 13:27 . 2009-02-10 19:31 <DIR> d--h----- c:\documents and settings\Randi\Szablony 2009-02-10 13:27 . 2009-03-01 14:56 <DIR> d-------- c:\documents and settings\Randi\Pulpit . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-02-27 11:25 --------- d-----w c:\program files\Common Files\InstallShield 2009-02-27 10:52 --------- d-----w c:\program files\ALLPlayer 2009-02-20 20:46 --------- d--h--w c:\program files\InstallShield Installation Information 2009-02-20 20:45 --------- d-----w c:\program files\Creative 2009-02-10 01:58 --------- d-----w c:\program files\NAPI-PROJEKT 2009-02-10 01:26 --------- d-----w c:\program files\ESET 2009-02-10 01:26 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\ESET 2009-02-10 01:24 --------- d-----w c:\program files\Gadu-Gadu 2009-02-10 01:24 --------- d-----w c:\documents and settings\Administrator\Dane aplikacji\Gadu-Gadu 2009-02-10 01:23 --------- d-----w c:\program files\foobar2000 2009-02-10 01:05 --------- d-----w c:\program files\microsoft frontpage 2009-02-10 01:03 --------- d-----w c:\program files\Usługi online 2009-02-10 01:00 --------- d-----w c:\program files\Windows Media Connect 2 . ((((((((((((((((((((((((((((( SnapShot@2009-02-25_19.29.58.23 ))))))))))))))))))))))))))))))))))))))))) . + 2004-07-09 03:26:38 11,392 ----a-w c:\windows\Driver Cache\i386\bdasup.sys + 2004-07-09 03:26:38 16,384 ----a-w c:\windows\Driver Cache\i386\ccdecode.sys + 2002-12-11 23:14:32 130,304 ----a-w c:\windows\Driver Cache\i386\ks.sys + 2002-12-11 23:14:32 4,096 ----a-w c:\windows\Driver Cache\i386\ksuser.dll + 2004-07-09 03:26:38 15,104 ----a-w c:\windows\Driver Cache\i386\mpe.sys + 2004-07-09 03:26:38 52,096 ----a-w c:\windows\Driver Cache\i386\msdv.sys + 2002-12-11 23:14:32 7,424 ----a-w c:\windows\Driver Cache\i386\mskssrv.sys + 2002-12-11 23:14:32 5,248 ----a-w c:\windows\Driver Cache\i386\mspclock.sys + 2001-08-23 04:00:00 4,608 ----a-w c:\windows\Driver Cache\i386\mspqm.sys + 2002-12-11 23:14:32 5,504 ----a-w c:\windows\Driver Cache\i386\mstee.sys + 2004-07-09 03:26:38 16,896 ----a-w c:\windows\Driver Cache\i386\msyuv.dll + 2004-07-09 03:26:38 83,968 ----a-w c:\windows\Driver Cache\i386\nabtsfec.sys + 2004-07-09 03:26:38 10,112 ----a-w c:\windows\Driver Cache\i386\ndisip.sys + 2002-08-29 02:41:00 31,744 ----a-w c:\windows\Driver Cache\i386\pid.dll + 2004-07-09 03:26:40 354,816 ----a-w c:\windows\Driver Cache\i386\psisdecd.dll + 2004-07-09 03:26:40 10,880 ----a-w c:\windows\Driver Cache\i386\slip.sys + 2004-07-09 03:27:28 48,512 ----a-w c:\windows\Driver Cache\i386\stream.sys + 2004-07-09 03:26:40 14,976 ----a-w c:\windows\Driver Cache\i386\streamip.sys + 2002-12-11 23:14:32 4,096 ----a-w c:\windows\Driver Cache\i386\swenum.sys + 2004-07-09 03:26:40 18,688 ----a-w c:\windows\Driver Cache\i386\wstcodec.sys + 2005-10-20 19:02:28 163,328 ----a-w c:\windows\ERDNT\Hiv-backup\ERDNT.EXE + 2009-02-26 12:02:46 25,622 ----a-r c:\windows\Installer\{0A2A5039-B37F-489D-B1DC-A5258DF9E697}\fifapc.exe + 2009-02-27 11:29:21 53,248 ----a-r c:\windows\Installer\{6F89200D-9C19-42F7-A056-640C9D4C158C}\ARPPRODUCTICON.exe + 2009-02-27 11:29:21 53,248 ----a-r c:\windows\Installer\{6F89200D-9C19-42F7-A056-640C9D4C158C}\NewShortcut1_6F89200D9C1942F7A056640C9D4C158C.exe + 2009-02-27 11:29:21 53,248 ----a-r c:\windows\Installer\{6F89200D-9C19-42F7-A056-640C9D4C158C}\NewShortcut2_6F89200D9C1942F7A056640C9D4C158C.exe + 2009-02-27 11:29:21 53,248 ----a-r c:\windows\Installer\{6F89200D-9C19-42F7-A056-640C9D4C158C}\NewShortcut4_6F89200D9C1942F7A056640C9D4C158C.exe + 2009-02-27 11:29:21 53,248 ----a-r c:\windows\Installer\{6F89200D-9C19-42F7-A056-640C9D4C158C}\NewShortcut5_6F89200D9C1942F7A056640C9D4C158C.exe - 2009-02-20 20:55:46 5,120 ----a-r c:\windows\Installer\{789289CA-F73A-4A16-A331-54D498CE069F}\Icon789289CA.exe + 2009-02-25 18:32:08 5,120 ----a-r c:\windows\Installer\{789289CA-F73A-4A16-A331-54D498CE069F}\Icon789289CA.exe + 2002-12-11 23:14:32 64,512 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\amstream.dll + 2004-07-09 03:27:28 1,201,152 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\d3d8.dll + 2002-12-11 23:14:32 8,192 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\d3d8thk.dll + 2003-05-30 08:00:02 797,184 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\d3dim700.dll + 2004-07-09 03:27:28 292,864 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ddraw.dll + 2002-12-11 23:14:32 24,064 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ddrawex.dll + 2003-05-30 08:00:02 132,608 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\devenum.dll + 2002-12-11 23:14:32 27,136 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmband.dll + 2002-12-11 23:14:32 58,368 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmcompos.dll + 2004-07-09 03:27:28 181,248 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmime.dll + 2002-12-11 23:14:32 33,280 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmloader.dll + 2002-12-11 23:14:32 76,800 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmscript.dll + 2002-12-11 23:14:32 98,816 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmstyle.dll + 2002-12-11 23:14:32 100,864 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmsynth.dll + 2004-07-09 03:27:28 122,880 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmusic.dll + 2002-12-11 23:14:32 28,160 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dplaysvr.exe + 2004-07-09 03:27:28 230,400 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dplayx.dll + 2002-12-11 23:14:32 77,824 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpmodemx.dll + 2002-12-11 23:14:32 3,072 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnaddr.dll + 2002-12-11 23:14:32 723,968 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnet.dll + 2003-03-24 08:00:02 32,768 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnhpast.dll + 2003-03-24 08:00:02 68,096 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnhupnp.dll + 2002-12-11 23:14:32 3,072 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnlobby.dll + 2002-12-11 23:14:32 16,896 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpnsvr.exe + 2002-12-11 23:14:32 19,968 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpvacm.dll + 2002-12-11 23:14:32 381,952 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpvoice.dll + 2002-12-11 23:14:32 80,896 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpvsetup.exe + 2002-12-11 23:14:32 112,128 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpvvox.dll + 2004-07-09 03:27:28 79,360 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dpwsockx.dll + 2002-12-11 23:14:32 186,880 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsdmo.dll + 2002-12-11 23:14:32 491,520 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsdmoprp.dll + 2004-07-09 03:27:28 381,952 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsound.dll + 2002-12-11 23:14:32 1,294,336 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsound3d.dll + 2002-12-11 23:14:32 18,432 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dswave.dll + 2002-12-11 23:14:32 602,624 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dx7vb.dll + 2003-05-30 08:00:02 1,189,888 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dx8vb.dll + 2004-07-09 03:27:28 974,848 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dxdiag.exe + 2002-12-11 23:14:32 46,592 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dxdllreg.exe + 2002-12-11 23:14:32 18,944 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\encapi.dll + 2002-12-11 23:14:32 130,304 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ks.sys + 2002-12-11 23:14:32 4,096 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ksuser.dll + 2002-12-11 23:14:32 34,304 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mciqtz32.dll + 2002-12-11 23:14:32 13,312 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\msdmo.dll + 2002-12-11 23:14:32 7,424 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mskssrv.sys + 2002-12-11 23:14:32 5,248 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mspclock.sys + 2001-08-23 04:00:00 4,608 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mspqm.sys + 2002-12-11 23:14:32 5,504 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mstee.sys + 2002-12-11 23:14:32 324,096 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mswebdvd.dll + 2002-12-11 23:14:32 173,056 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\qasf.dll + 2002-12-11 23:14:32 257,024 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\qcap.dll + 2004-07-09 03:27:28 316,928 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\qdv.dll + 2004-07-09 03:27:28 470,528 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\qdvd.dll + 2002-12-11 23:14:32 1,798,144 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\qedit.dll + 2002-12-11 23:14:32 733,184 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\qedwipes.dll + 2003-05-30 08:00:02 1,962,496 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\quartz.dll + 2004-07-09 03:27:28 48,512 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\stream.sys + 2002-12-11 23:14:32 4,096 ----a-w c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\swenum.sys + 2004-07-09 03:26:38 11,392 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\bdasup.sys + 2004-07-09 03:26:38 16,384 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\ccdecode.sys + 2004-07-09 03:26:38 15,104 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\mpe.sys + 2004-07-09 03:26:38 1,230,336 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\msvidctl.dll + 2004-07-09 03:26:38 16,896 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\msyuv.dll + 2004-07-09 03:26:38 83,968 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\nabtsfec.sys + 2004-07-09 03:26:38 10,112 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\ndisip.sys + 2004-07-09 03:26:40 354,816 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\psisdecd.dll + 2004-07-09 03:26:40 10,880 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\slip.sys + 2004-07-09 03:26:40 14,976 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\streamip.sys + 2004-07-09 03:26:40 18,688 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\wstcodec.sys + 2004-07-09 03:26:40 47,104 ----a-w c:\windows\RegisteredPackages\{AA936DF4-2B08-4B1F-B071-72192E287704}\wstdecod.dll + 2004-07-09 03:26:38 11,392 -c--a-w c:\windows\system32\dllcache\bdasup.sys + 2004-07-09 03:26:38 16,384 -c--a-w c:\windows\system32\dllcache\ccdecode.sys - 2001-08-18 00:53:20 10,496 -c--a-w c:\windows\system32\dllcache\dxapi.sys + 2001-08-23 04:00:00 10,496 -c--a-w c:\windows\system32\dllcache\dxapi.sys + 2004-07-09 03:26:38 15,104 -c--a-w c:\windows\system32\dllcache\mpe.sys + 2004-07-09 03:26:38 52,096 -c--a-w c:\windows\system32\dllcache\msdv.sys + 2002-12-11 23:14:32 5,504 -c--a-w c:\windows\system32\dllcache\mstee.sys + 2004-07-09 03:26:38 83,968 -c--a-w c:\windows\system32\dllcache\nabtsfec.sys + 2004-07-09 03:26:38 10,112 -c--a-w c:\windows\system32\dllcache\ndisip.sys + 2002-08-29 02:41:00 31,744 -c--a-w c:\windows\system32\dllcache\pid.dll + 2004-07-09 03:26:40 354,816 -c--a-w c:\windows\system32\dllcache\psisdecd.dll + 2004-07-09 03:26:40 10,880 -c--a-w c:\windows\system32\dllcache\slip.sys + 2004-07-09 03:26:40 14,976 -c--a-w c:\windows\system32\dllcache\streamip.sys + 2004-07-09 03:26:40 18,688 -c--a-w c:\windows\system32\dllcache\wstcodec.sys + 2004-07-09 03:26:38 11,392 ----a-w c:\windows\system32\drivers\bdasup.sys + 2004-07-09 03:26:38 16,384 ----a-w c:\windows\system32\drivers\ccdecode.sys - 2001-08-18 00:53:20 10,496 ----a-w c:\windows\system32\drivers\dxapi.sys + 2001-08-23 04:00:00 10,496 ----a-w c:\windows\system32\drivers\dxapi.sys + 2004-07-09 03:26:38 15,104 ----a-w c:\windows\system32\drivers\mpe.sys + 2004-07-09 03:26:38 52,096 ----a-w c:\windows\system32\drivers\msdv.sys + 2002-12-11 23:14:32 5,504 ----a-w c:\windows\system32\drivers\mstee.sys + 2004-07-09 03:26:38 83,968 ----a-w c:\windows\system32\drivers\nabtsfec.sys + 2004-07-09 03:26:38 10,112 ----a-w c:\windows\system32\drivers\ndisip.sys + 2004-07-09 03:26:40 10,880 ----a-w c:\windows\system32\drivers\slip.sys + 2004-07-09 03:26:40 14,976 ----a-w c:\windows\system32\drivers\streamip.sys + 2004-07-09 03:26:40 18,688 ----a-w c:\windows\system32\drivers\wstcodec.sys + 2002-12-11 23:14:32 46,592 ----a-w c:\windows\system32\dxdllreg.exe + 2007-06-11 20:04:36 190,696 ----a-r c:\windows\system32\Macromed\Flash\FlashUtil9d.exe + 2009-02-28 02:59:16 48,749 ----a-w c:\windows\system32\Macromed\Flash\uninstall_activeX.exe + 2004-11-26 00:16:14 1,046,528 ----a-w c:\windows\system32\MFCL71U.DLL + 2004-11-26 00:07:26 507,904 ----a-w c:\windows\system32\MSVLP71.dll + 2004-11-26 00:07:24 352,256 ----a-w c:\windows\system32\MSVLR71.dll + 2004-07-09 03:26:40 354,816 ----a-w c:\windows\system32\psisdecd.dll + 2009-03-01 11:55:12 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_e4.dat . -- Migawka wyzerowana -- . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Nowe Gadu-Gadu"="c:\program files\Nowe Gadu-Gadu\gg.exe" [2009-02-06 9302632] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2008-12-20 1451264] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-02-10 148888] "DeathAdder"="c:\program files\Razer\DeathAdder\razerhid.exe" [2007-09-07 159744] "Jet Detection"="c:\program files\Creative\SBLive\PROGRAM\ADGJDet.exe" [2001-11-29 28672] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-02-09 13680640] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-02-09 86016] "WINDVDPatch"="CTHELPER.EXE" [2002-07-02 c:\windows\system32\CTHELPER.EXE] "nwiz"="nwiz.exe" [2009-02-09 c:\windows\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "nltide_2"="shell32" [X] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "CTFMON.EXE"=c:\windows\system32\ctfmon.exe "DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" -lang 1033 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "UpdReg"=c:\windows\UpdReg.EXE "NvMediaCenter"=RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit "WINDVDPatch"=CTHELPER.EXE "AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" "WinampAgent"="c:\program files\Winamp\winampa.exe" [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Gadu-Gadu\\gg.exe"= "c:\\Program Files\\Nowe Gadu-Gadu\\gg.exe"= "c:\\Program Files\\Java\\jre6\\launch4j-tmp\\JDownloader.exe"= "d:\\__GRY__\\JDownloader\\JDownloader.exe"= "c:\\WINDOWS\\system32\\java.exe"= "c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"= "d:\\__GRY__\\Bitwa o Śródziemie\\game.dat"= "d:\\__GRY__\\Valve\\Steam\\SteamApps\\randey\\counter-strike\\hl.exe"= "c:\\Program Files\\Java\\jre6\\bin\\java.exe"= "c:\\Program Files\\SopCast\\adv\\SopAdver.exe"= "c:\\Program Files\\SopCast\\SopCast.exe"= "d:\\__GRY__\\Netsoccer\\Netsoccer\\server.exe"= "c:\\Documents and Settings\\Randi\\Application Data\\PowerChallenge\\PowerSoccer\\PowerSoccer.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "5353:TCP"= 5353:TCP:Adobe CSI CS4 R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2008-10-24 34824] R2 ekrn;Eset Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2008-12-20 468224] R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [2009-02-11 603904] R3 DAdderFltr;DeathAdder Mouse;c:\windows\system32\drivers\dadder.sys [2009-02-20 22784] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Zawartość folderu 'Zaplanowane zadania' 2009-03-01 c:\windows\Tasks\1-Click Maintenance.job - c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-12-11 21:36] . . ------- Skan uzupełniający ------- . uStart Page = hxxp://google.daemonsearch.com/intl/ uInternet Connection Wizard,ShellNext = https://shop.winamp.com/DRHM/servlet/ControllerServlet?Action=DisplayWaitDontLeavePopUpPage&SiteID=winamp&Locale=en_US&Env=BASE IE: E&ksport do programu Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000 IE: {{B46B0919-62BA-4D99-A5C4-916B57A6805C} - {B46B0919-62BA-4D99-A5C4-916B57A6805C} - c:\program files\Techland\Common\InternetTranslator\InternetTranslator.dll FF - ProfilePath - c:\documents and settings\Randi\Dane aplikacji\Mozilla\Firefox\Profiles\qn3ruobg.default\ FF - prefs.js: browser.startup.homepage - google.pl ---- FIREFOX - SPOSÓB POSTĘPOWANIA ---- FF - user.js: network.http.max-connections-per-server - 8 FF - user.js: network.http.max-persistent-connections-per-server - 4 FF - user.js: nglayout.initialpaint.delay - 600 FF - user.js: content.notify.interval - 600000 FF - user.js: content.max.tokenizing.time - 1800000 FF - user.js: content.switch.threshold - 600000 . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-03-01 15:24:47 Windows 5.1.2600 Dodatek Service Pack 3 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- - - - - - - - > 'winlogon.exe'(592) c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll . Czas ukończenia: 2009-03-01 15:26:14 ComboFix-quarantined-files.txt 2009-03-01 14:26:11 ComboFix2.txt 2009-02-25 18:30:51 Przed: 2 504 085 504 bajtów wolnych Po: 2,529,374,208 bajtów wolnych WindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect 391 [/quote]

**Posty:** 18165 · przez **wojtas** 01 Mar 2009, 19:06

1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp

oraz skasuj folder C:\Qoobox
2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
5. Wykonaj skan Dr. Web CureIt
6. Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

i tym:

FixIEDef.