Log; problemy z pracą komputera

[lagoon]

Witam, mam problem z wirusem

1) nie można włączyć rejestru oraz menadżera zadań, komunikat ze "edycja została wyłączona przez administratora '
2) nie mogę nic zainstalować
3) nie mogę włączyć antywirusa

Zrobiłem format ale to nie pomogło

próbowałem wejść przez f8 w awaryjny niestety nie daje się wejść resetuje się komp

logi z RSIT

Kod: Zaznacz wszystko

Logfile of random's system information tool 1.06 (written by random/random)
Run by lagoon at 2009-07-31 12:51:18
Microsoft Windows XP Professional Dodatek Service Pack 3
System drive D: has 267 GB (98%) free of 271 GB
Total RAM: 2046 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:51:28, on 2009-07-31
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\System32\FTRTSVC.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\RTHDCPL.EXE
D:\WINDOWS\SOUNDMAN.EXE
D:\WINDOWS\system32\RUNDLL32.EXE
D:\WINDOWS\system32\rundll32.exe
D:\WINDOWS\system32\ctfmon.exe
D:\PROGRA~1\NEOSTR~1\TaskBarIcon.exe
D:\Program Files\neostrada tp\neostradatp.exe
D:\Program Files\neostrada tp\ComComp.exe
D:\PROGRA~1\NEOSTR~1\Toaster.exe
D:\PROGRA~1\NEOSTR~1\Inactivity.exe
D:\PROGRA~1\NEOSTR~1\PollingModule.exe
D:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
D:\Program Files\neostrada tp\Watch.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\DOCUME~1\lagoon\USTAWI~1\Temp\winvdee.exe
D:\Program Files\Nowe Gadu-Gadu\gg.exe
D:\Program Files\Nowe Gadu-Gadu\spellchecker_gg.exe
D:\WINDOWS\system32\WINMINE.EXE
D:\Documents and Settings\lagoon\Moje dokumenty\Pobieranie\RSIT.exe
D:\Program Files\trend micro\lagoon.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = neostrada tp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - D:\WINDOWS\system32\dvmurl.dll
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - D:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [GEST] =
O4 - HKLM\..\Run: [AVP] "D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WinSys2] D:\WINDOWS\system32\winsys2.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WOOWATCH] D:\PROGRA~1\NEOSTR~1\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] D:\PROGRA~1\NEOSTR~1\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] "E:\cs1.6\Steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{8CEE8F16-8BBA-4848-B9A7-E8973F287C1A}: NameServer = 194.204.159.1 217.98.63.164
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - D:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe

--
End of file - 4353 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=D:\WINDOWS\RTHDCPL.EXE [2008-07-03 16876032]
"SoundMan"=D:\WINDOWS\SOUNDMAN.EXE [2008-06-18 77824]
"AlcWzrd"=D:\WINDOWS\ALCWZRD.EXE [2008-06-19 2808832]
"Alcmtr"=D:\WINDOWS\ALCMTR.EXE [2008-06-19 126976]
"GEST"== []
"AVP"=D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe [2007-03-09 200768]
"NvCplDaemon"=D:\WINDOWS\system32\NvCpl.dll [2007-06-28 8466432]
"nwiz"=nwiz.exe /install []
"WinSys2"=D:\WINDOWS\system32\winsys2.exe [2006-04-29 278528]
"NvMediaCenter"=D:\WINDOWS\system32\NvMcTray.dll [2007-06-28 81920]
"WOOWATCH"=D:\PROGRA~1\NEOSTR~1\Watch.exe [2004-08-23 20480]
"WOOTASKBARICON"=D:\PROGRA~1\NEOSTR~1\GestMaj.exe [2004-10-14 114688]
"AdslTaskBar"=stmctrl.dll,TaskBar []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=D:\WINDOWS\system32\ctfmon.exe [2008-04-15 15360]
"Steam"=E:\cs1.6\Steam.exe [2009-07-31 1291512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
D:\WINDOWS\system32\klogon.dll [2007-03-09 200768]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=1
"DisableRegistryTools"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=95000000

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Program Files\Nowe Gadu-Gadu\gg.exe"="D:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu"
"E:\cs1.6\Steam.exe"="E:\cs1.6\Steam.exe:*:Enabled:ipsec"
"D:\WINDOWS\Explorer.EXE"="D:\WINDOWS\Explorer.EXE:*:Enabled:ipsec"
"D:\PROGRA~1\NEOSTR~1\GestMaj.exe"="D:\PROGRA~1\NEOSTR~1\GestMaj.exe:*:Enabled:ipsec"
"D:\WINDOWS\system32\netsh.exe"="D:\WINDOWS\system32\netsh.exe:*:Enabled:ipsec"
"D:\DOCUME~1\lagoon\USTAWI~1\Temp\winvdee.exe"="D:\DOCUME~1\lagoon\USTAWI~1\Temp\winvdee.exe:*:Enabled:ipsec"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{55e3054d-096e-11de-b3bd-806d6172696f}]
shell\1\command - autorun.pif
shell\2\command - autorun.pif
shell\AutoRun\command - D:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL


======List of files/folders created in the last 1 months======

2009-07-31 12:51:18 ----D---- D:\rsit
2009-07-31 12:51:18 ----D---- D:\Program Files\trend micro
2009-07-31 12:37:23 ----D---- D:\Program Files\Alwil Software
2009-07-31 12:30:35 ----A---- D:\WINDOWS\system32\h323log.txt
2009-07-31 12:29:49 ----A---- D:\WINDOWS\system32\hidserv.dll
2009-07-31 12:28:38 ----A---- D:\WINDOWS\system32\usbui.dll
2009-07-31 12:27:44 ----SHD---- D:\WINDOWS\Installer
2009-07-31 12:27:44 ----A---- D:\WINDOWS\system32\PerfStringBackup.INI
2009-07-31 12:27:43 ----D---- D:\Program Files\Common Files\ODBC
2009-07-31 12:27:43 ----A---- D:\WINDOWS\ODBCINST.INI
2009-07-31 12:27:38 ----D---- D:\Program Files\Common Files\SpeechEngines
2009-07-31 12:27:37 ----RD---- D:\Program Files
2009-07-31 12:27:37 ----D---- D:\Program Files\Common Files\Microsoft Shared
2009-07-31 12:27:37 ----D---- D:\Program Files\Common Files
2009-07-31 12:27:34 ----RA---- D:\WINDOWS\system32\kbdtuq.dll
2009-07-31 12:27:34 ----RA---- D:\WINDOWS\system32\kbdtuf.dll
2009-07-31 12:27:34 ----RA---- D:\WINDOWS\system32\kbdazel.dll
2009-07-31 12:27:32 ----RA---- D:\WINDOWS\system32\kbdycc.dll
2009-07-31 12:27:32 ----RA---- D:\WINDOWS\system32\kbduzb.dll
2009-07-31 12:27:32 ----RA---- D:\WINDOWS\system32\kbdur.dll
2009-07-31 12:27:32 ----RA---- D:\WINDOWS\system32\kbdtat.dll
2009-07-31 12:27:32 ----RA---- D:\WINDOWS\system32\kbdru1.dll
2009-07-31 12:27:32 ----RA---- D:\WINDOWS\system32\kbdru.dll
2009-07-31 12:27:32 ----RA---- D:\WINDOWS\system32\kbdmon.dll
2009-07-31 12:27:32 ----RA---- D:\WINDOWS\system32\kbdkyr.dll
2009-07-31 12:27:32 ----RA---- D:\WINDOWS\system32\kbdkaz.dll
2009-07-31 12:27:32 ----RA---- D:\WINDOWS\system32\kbdbu.dll
2009-07-31 12:27:32 ----RA---- D:\WINDOWS\system32\kbdblr.dll
2009-07-31 12:27:32 ----RA---- D:\WINDOWS\system32\kbdaze.dll
2009-07-31 12:27:30 ----RA---- D:\WINDOWS\system32\kbdhept.dll
2009-07-31 12:27:30 ----RA---- D:\WINDOWS\system32\kbdhela3.dll
2009-07-31 12:27:30 ----RA---- D:\WINDOWS\system32\kbdhela2.dll
2009-07-31 12:27:30 ----RA---- D:\WINDOWS\system32\kbdhe319.dll
2009-07-31 12:27:30 ----RA---- D:\WINDOWS\system32\kbdhe220.dll
2009-07-31 12:27:30 ----RA---- D:\WINDOWS\system32\kbdhe.dll
2009-07-31 12:27:30 ----RA---- D:\WINDOWS\system32\kbdgkl.dll
2009-07-31 12:27:28 ----RA---- D:\WINDOWS\system32\kbdlv1.dll
2009-07-31 12:27:28 ----RA---- D:\WINDOWS\system32\kbdlv.dll
2009-07-31 12:27:28 ----RA---- D:\WINDOWS\system32\kbdlt1.dll
2009-07-31 12:27:28 ----RA---- D:\WINDOWS\system32\kbdlt.dll
2009-07-31 12:27:28 ----RA---- D:\WINDOWS\system32\kbdest.dll
2009-07-31 12:27:25 ----A---- D:\WINDOWS\system32\kbdycl.dll
2009-07-31 12:27:25 ----A---- D:\WINDOWS\system32\kbdsl1.dll
2009-07-31 12:27:25 ----A---- D:\WINDOWS\system32\kbdsl.dll
2009-07-31 12:27:25 ----A---- D:\WINDOWS\system32\kbdro.dll
2009-07-31 12:27:25 ----A---- D:\WINDOWS\system32\kbdhu1.dll
2009-07-31 12:27:25 ----A---- D:\WINDOWS\system32\kbdhu.dll
2009-07-31 12:27:25 ----A---- D:\WINDOWS\system32\kbdcz2.dll
2009-07-31 12:27:25 ----A---- D:\WINDOWS\system32\kbdcz1.dll
2009-07-31 12:27:25 ----A---- D:\WINDOWS\system32\kbdcz.dll
2009-07-31 12:27:25 ----A---- D:\WINDOWS\system32\kbdcr.dll
2009-07-31 12:27:25 ----A---- D:\WINDOWS\system32\KBDAL.DLL
2009-07-31 12:27:24 ----A---- D:\WINDOWS\system32\irclass.dll
2009-07-31 12:27:24 ----A---- D:\WINDOWS\system32\dgsetup.dll
2009-07-31 12:27:24 ----A---- D:\WINDOWS\system32\dgrpsetu.dll
2009-07-31 12:27:23 ----A---- D:\WINDOWS\system32\spxcoins.dll
2009-07-31 12:27:23 ----A---- D:\WINDOWS\system32\EqnClass.Dll
2009-07-31 12:27:19 ----N---- D:\WINDOWS\system32\CONFIG.TMP
2009-07-31 12:27:19 ----A---- D:\WINDOWS\TASKMAN.EXE
2009-07-31 12:27:19 ----A---- D:\WINDOWS\system32\batt.dll
2009-07-31 12:27:18 ----A---- D:\WINDOWS\NOTEPAD.EXE
2009-07-31 12:27:17 ----A---- D:\WINDOWS\system32\storprop.dll
2009-07-31 12:27:12 ----ASH---- D:\Documents and Settings\All Users\Dane aplikacji\desktop.ini
2009-07-31 12:27:09 ----RA---- D:\WINDOWS\SET8.tmp
2009-07-31 12:27:06 ----RA---- D:\WINDOWS\SET4.tmp
2009-07-31 12:27:04 ----RA---- D:\WINDOWS\SET3.tmp
2009-07-31 12:26:59 ----D---- D:\WINDOWS\system32\CatRoot2
2009-07-31 12:26:59 ----D---- D:\WINDOWS\system32\CatRoot
2009-07-31 12:26:54 ----SD---- D:\Documents and Settings\All Users\Dane aplikacji\Microsoft
2009-07-31 12:26:34 ----A---- D:\WINDOWS\setuplog.txt
2009-07-31 12:26:31 ----SHD---- D:\System Volume Information
2009-07-31 12:26:31 ----D---- D:\Documents and Settings
2009-07-31 12:19:39 ----RSHDC---- D:\WINDOWS\system32\dllcache
2009-07-31 12:19:39 ----RSD---- D:\WINDOWS\Fonts
2009-07-31 12:19:39 ----RD---- D:\WINDOWS\Web
2009-07-31 12:19:39 ----HD---- D:\WINDOWS\inf
2009-07-31 12:19:39 ----D---- D:\WINDOWS\WinSxS
2009-07-31 12:19:39 ----D---- D:\WINDOWS\twain_32
2009-07-31 12:19:39 ----D---- D:\WINDOWS\Temp
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\wins
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\wbem
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\usmt
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\spool
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\ShellExt
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\Setup
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\ras
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\pl-pl
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\pl
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\oobe
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\npp
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\mui
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\inetsrv
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\IME
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\icsxml
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\ias
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\export
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\drivers
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\dhcp
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\config
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\3com_dmi
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\3076
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\2052
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\1054
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\1045
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\1042
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\1041
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\1037
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\1033
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\1031
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\1028
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32\1025
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system32
2009-07-31 12:19:39 ----D---- D:\WINDOWS\system
2009-07-31 12:19:39 ----D---- D:\WINDOWS\security
2009-07-31 12:19:39 ----D---- D:\WINDOWS\Resources
2009-07-31 12:19:39 ----D---- D:\WINDOWS\repair
2009-07-31 12:19:39 ----D---- D:\WINDOWS\Provisioning
2009-07-31 12:19:39 ----D---- D:\WINDOWS\PeerNet
2009-07-31 12:19:39 ----D---- D:\WINDOWS\pchealth
2009-07-31 12:19:39 ----D---- D:\WINDOWS\Network Diagnostic
2009-07-31 12:19:39 ----D---- D:\WINDOWS\mui
2009-07-31 12:19:39 ----D---- D:\WINDOWS\msapps
2009-07-31 12:19:39 ----D---- D:\WINDOWS\msagent
2009-07-31 12:19:39 ----D---- D:\WINDOWS\Media
2009-07-31 12:19:39 ----D---- D:\WINDOWS\L2Schemas
2009-07-31 12:19:39 ----D---- D:\WINDOWS\java
2009-07-31 12:19:39 ----D---- D:\WINDOWS\ime
2009-07-31 12:19:39 ----D---- D:\WINDOWS\Help
2009-07-31 12:19:39 ----D---- D:\WINDOWS\ehome
2009-07-31 12:19:39 ----D---- D:\WINDOWS\Driver Cache
2009-07-31 12:19:39 ----D---- D:\WINDOWS\Debug
2009-07-31 12:19:39 ----D---- D:\WINDOWS\Cursors
2009-07-31 12:19:39 ----D---- D:\WINDOWS\Connection Wizard
2009-07-31 12:19:39 ----D---- D:\WINDOWS\Config
2009-07-31 12:19:39 ----D---- D:\WINDOWS\AppPatch
2009-07-31 12:19:39 ----D---- D:\WINDOWS\addins
2009-07-31 12:19:39 ----D---- D:\WINDOWS
2009-07-31 12:00:40 ----D---- D:\Documents and Settings\lagoon\Dane aplikacji\WinRAR
2009-07-31 11:59:59 ----SHD---- D:\RECYCLER
2009-07-31 11:57:17 ----D---- D:\Program Files\WinRAR
2009-07-31 11:44:04 ----D---- D:\Documents and Settings\lagoon\Dane aplikacji\Nowe Gadu-Gadu
2009-07-31 11:44:00 ----D---- D:\Program Files\Nowe Gadu-Gadu
2009-07-31 11:26:43 ----D---- D:\Documents and Settings\lagoon\Dane aplikacji\Adobe
2009-07-31 11:23:07 ----D---- D:\Documents and Settings\lagoon\Dane aplikacji\Mozilla
2009-07-31 11:22:50 ----D---- D:\Program Files\Mozilla Firefox
2009-07-31 11:18:11 ----D---- D:\WINDOWS\system32\InsFiles
2009-07-31 11:18:09 ----RA---- D:\WINDOWS\system32\setup.ini
2009-07-31 11:18:09 ----RA---- D:\WINDOWS\stmtrace.exe
2009-07-31 11:18:09 ----RA---- D:\WINDOWS\DSLTest.exe
2009-07-31 11:18:09 ----RA---- D:\WINDOWS\DSLSetup.ini
2009-07-31 11:18:08 ----RA---- D:\WINDOWS\system32\stmclean.exe
2009-07-31 11:15:35 ----A---- D:\WINDOWS\system32\WooDial2000.dll
2009-07-31 11:15:22 ----RA---- D:\WINDOWS\system32\stmctrl.dll
2009-07-31 11:15:22 ----RA---- D:\WINDOWS\system32\stmcfg32.dll
2009-07-31 11:15:10 ----D---- D:\Program Files\ZTE ZXDSL 852
2009-07-31 11:15:06 ----D---- D:\WINDOWS\system32\AlertModule
2009-07-31 11:15:04 ----A---- D:\WINDOWS\system32\W32n50.dll
2009-07-31 11:15:00 ----A---- D:\WINDOWS\system32\IfHelper.dll
2009-07-31 11:15:00 ----A---- D:\WINDOWS\system32\FTRTSVC.exe
2009-07-31 11:14:46 ----N---- D:\WINDOWS\system32\javaw.exe
2009-07-31 11:14:46 ----N---- D:\WINDOWS\system32\java.exe
2009-07-31 11:14:38 ----N---- D:\WINDOWS\system32\ActPanel.dll
2009-07-31 11:13:42 ----D---- D:\Program Files\neostrada tp
2009-07-31 11:13:32 ----D---- D:\Documents and Settings\lagoon\Dane aplikacji\Macromedia
2009-07-31 11:13:31 ----SHD---- D:\WINDOWS\ftpcache
2009-07-31 11:12:25 ----A---- D:\WINDOWS\msicpl.ini
2009-07-31 11:09:06 ----D---- D:\WINDOWS\nview
2009-07-31 11:09:05 ----A---- D:\WINDOWS\system32\nvudisp.exe
2009-07-31 11:08:34 ----RA---- D:\WINDOWS\system32\MadCHook.dll
2009-07-31 11:08:33 ----RA---- D:\WINDOWS\system32\smdll.dll
2009-07-31 11:08:31 ----RA---- D:\WINDOWS\system32\d3dx9_28.dll
2009-07-31 11:08:29 ----RA---- D:\WINDOWS\system32\d3dx9_27.dll
2009-07-31 11:08:28 ----RA---- D:\WINDOWS\system32\msvcr71.dll
2009-07-31 11:08:28 ----RA---- D:\WINDOWS\system32\Auxiliary.dll
2009-07-31 11:08:27 ----RA---- D:\WINDOWS\system32\HookShield.dll
2009-07-31 11:08:27 ----RA---- D:\WINDOWS\system32\HookMAp.dll
2009-07-31 11:08:26 ----RA---- D:\WINDOWS\system32\sysinfo.dll
2009-07-31 11:08:25 ----RA---- D:\WINDOWS\system32\WinSys2.exe
2009-07-31 11:08:25 ----RA---- D:\WINDOWS\system32\WinSys.exe
2009-07-31 11:08:24 ----RA---- D:\WINDOWS\system32\sw24.exe
2009-07-31 11:08:23 ----RA---- D:\WINDOWS\system32\sw20.exe
2009-07-31 11:08:22 ----RA---- D:\WINDOWS\system32\Nvgpio.dll
2009-07-31 11:08:18 ----RA---- D:\WINDOWS\system32\msicpl.dll
2009-07-31 11:07:46 ----A---- D:\WINDOWS\system32\NVUNINST.EXE
2009-07-31 11:06:39 ----D---- D:\Program Files\GIGABYTE
2009-07-31 11:03:38 ----D---- D:\Program Files\Kaspersky Lab
2009-07-31 11:03:38 ----D---- D:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab
2009-07-31 10:44:28 ----D---- D:\WINDOWS\OPTIONS
2009-07-31 10:44:02 ----D---- D:\WINDOWS\system32\Lang
2009-07-31 10:42:24 ----R---- D:\WINDOWS\system32\ChCfg.exe
2009-07-31 10:42:08 ----D---- D:\WINDOWS\system32\RTCOM
2009-07-31 10:42:06 ----A---- D:\WINDOWS\system32\ksuser.dll
2009-07-31 10:42:02 ----R---- D:\WINDOWS\SoundMan.exe
2009-07-31 10:42:02 ----R---- D:\WINDOWS\SkyTel.exe
2009-07-31 10:42:02 ----R---- D:\WINDOWS\RtlUpd.exe
2009-07-31 10:42:01 ----R---- D:\WINDOWS\RTLCPL.exe
2009-07-31 10:41:54 ----R---- D:\WINDOWS\RTHDCPL.exe
2009-07-31 10:41:54 ----R---- D:\WINDOWS\MicCal.exe
2009-07-31 10:41:51 ----R---- D:\WINDOWS\alcwzrd.exe
2009-07-31 10:41:51 ----R---- D:\WINDOWS\Alcmtr.exe
2009-07-31 10:41:50 ----D---- D:\Program Files\Realtek
2009-07-31 10:41:48 ----A---- D:\WINDOWS\HideWin.exe
2009-07-31 10:41:47 ----R---- D:\WINDOWS\RtlExUpd.dll
2009-07-31 10:41:44 ----D---- D:\Program Files\Common Files\InstallShield
2009-07-31 10:41:39 ----D---- D:\WINDOWS\system32\ReinstallBackups
2009-07-31 10:41:37 ----DC---- D:\WINDOWS\system32\DRVSTORE
2009-07-31 10:41:36 ----D---- D:\Program Files\AMD
2009-07-31 10:41:32 ----D---- D:\Documents and Settings\lagoon\Dane aplikacji\InstallShield
2009-07-31 10:41:14 ----HD---- D:\Program Files\InstallShield Installation Information
2009-07-31 10:41:14 ----D---- D:\Program Files\Browser Configuration Utility
2009-07-31 10:41:14 ----A---- D:\WINDOWS\system32\dvmurl.dll
2009-07-31 10:40:18 ----D---- D:\Documents and Settings\lagoon\Dane aplikacji\Identities
2009-07-31 10:40:17 ----HD---- D:\Program Files\Uninstall Information
2009-07-31 10:40:13 ----SD---- D:\Documents and Settings\lagoon\Dane aplikacji\Microsoft
2009-07-31 10:40:13 ----ASH---- D:\Documents and Settings\lagoon\Dane aplikacji\desktop.ini
2009-07-31 10:39:49 ----D---- D:\WINDOWS\SoftwareDistribution
2009-07-31 10:39:48 ----D---- D:\WINDOWS\Prefetch
2009-07-31 10:39:47 ----SD---- D:\WINDOWS\system32\Microsoft
2009-07-31 10:39:47 ----A---- D:\WINDOWS\SchedLgU.Txt
2009-07-31 10:36:54 ----D---- D:\WINDOWS\system32\xircom
2009-07-31 10:36:54 ----D---- D:\Program Files\xerox
2009-07-31 10:36:54 ----D---- D:\Program Files\microsoft frontpage
2009-07-31 10:36:07 ----A---- D:\WINDOWS\control.ini
2009-07-31 10:35:59 ----A---- D:\WINDOWS\OEWABLog.txt
2009-07-31 10:35:56 ----A---- D:\WINDOWS\system32\mapi32.dll
2009-07-31 10:35:18 ----RD---- D:\WINDOWS\Offline Web Pages
2009-07-31 10:35:17 ----SD---- D:\WINDOWS\Downloaded Program Files
2009-07-31 10:35:17 ----RAH---- D:\WINDOWS\system32\logonui.exe.manifest
2009-07-31 10:35:13 ----RAH---- D:\WINDOWS\system32\cdplayer.exe.manifest
2009-07-31 10:35:10 ----HD---- D:\Program Files\WindowsUpdate
2009-07-31 10:35:07 ----D---- D:\Program Files\Usługi online
2009-07-31 10:34:52 ----D---- D:\WINDOWS\system32\DirectX
2009-07-31 10:34:41 ----A---- D:\WINDOWS\system32\atrace.dll
2009-07-31 10:34:38 ----A---- D:\WINDOWS\system32\desktop.ini
2009-07-31 10:34:38 ----A---- D:\WINDOWS\desktop.ini
2009-07-31 10:34:26 ----A---- D:\WINDOWS\system32\nmevtmsg.dll
2009-07-31 10:34:25 ----A---- D:\WINDOWS\system32\acctres.dll
2009-07-31 10:34:24 ----D---- D:\Program Files\Common Files\Services
2009-07-31 10:34:21 ----SD---- D:\WINDOWS\Tasks
2009-07-31 10:34:21 ----A---- D:\WINDOWS\system32\icfgnt5.dll
2009-07-31 10:34:20 ----D---- D:\Program Files\Common Files\MSSoap
2009-07-31 10:34:15 ----D---- D:\WINDOWS\srchasst
2009-07-31 10:34:14 ----D---- D:\WINDOWS\system32\Macromed
2009-07-31 10:34:11 ----A---- D:\WINDOWS\system32\wuweb.dll
2009-07-31 10:34:11 ----A---- D:\WINDOWS\system32\wucltui.dll
2009-07-31 10:34:11 ----A---- D:\WINDOWS\system32\wuauserv.dll
2009-07-31 10:34:11 ----A---- D:\WINDOWS\system32\wuaueng1.dll
2009-07-31 10:34:10 ----A---- D:\WINDOWS\system32\wups.dll
2009-07-31 10:34:10 ----A---- D:\WINDOWS\system32\wuaueng.dll
2009-07-31 10:34:10 ----A---- D:\WINDOWS\system32\wuauclt1.exe
2009-07-31 10:34:10 ----A---- D:\WINDOWS\system32\wuauclt.exe
2009-07-31 10:34:10 ----A---- D:\WINDOWS\system32\wuapi.dll
2009-07-31 10:34:10 ----A---- D:\WINDOWS\system32\bitsprx4.dll
2009-07-31 10:34:10 ----A---- D:\WINDOWS\system32\bitsprx3.dll
2009-07-31 10:34:10 ----A---- D:\WINDOWS\system32\bitsprx2.dll
2009-07-31 10:34:09 ----A---- D:\WINDOWS\system32\qmgrprxy.dll
2009-07-31 10:34:09 ----A---- D:\WINDOWS\system32\qmgr.dll
2009-07-31 10:34:05 ----D---- D:\Program Files\Movie Maker
2009-07-31 10:33:35 ----A---- D:\WINDOWS\system32\safrslv.dll
2009-07-31 10:33:35 ----A---- D:\WINDOWS\system32\safrdm.dll
2009-07-31 10:33:35 ----A---- D:\WINDOWS\system32\safrcdlg.dll
2009-07-31 10:33:35 ----A---- D:\WINDOWS\system32\racpldlg.dll
2009-07-31 10:33:31 ----A---- D:\WINDOWS\system32\fltlib.dll
2009-07-31 10:33:30 ----D---- D:\WINDOWS\system32\Restore
2009-07-31 10:33:30 ----A---- D:\WINDOWS\system32\srsvc.dll
2009-07-31 10:33:30 ----A---- D:\WINDOWS\system32\srrstr.dll
2009-07-31 10:33:30 ----A---- D:\WINDOWS\system32\srclient.dll
2009-07-31 10:33:30 ----A---- D:\WINDOWS\system32\fltMc.exe
2009-07-31 10:33:29 ----A---- D:\WINDOWS\system32\mnmdd.dll
2009-07-31 10:33:29 ----A---- D:\WINDOWS\system32\isrdbg32.dll
2009-07-31 10:33:29 ----A---- D:\WINDOWS\system32\ils.dll
2009-07-31 10:33:28 ----A---- D:\WINDOWS\system32\nmmkcert.dll
2009-07-31 10:33:28 ----A---- D:\WINDOWS\system32\msconf.dll
2009-07-31 10:33:28 ----A---- D:\WINDOWS\system32\mnmsrvc.exe
2009-07-31 10:33:25 ----D---- D:\Program Files\NetMeeting
2009-07-31 10:33:25 ----A---- D:\WINDOWS\system32\msoert2.dll
2009-07-31 10:33:25 ----A---- D:\WINDOWS\system32\msoeacct.dll
2009-07-31 10:33:24 ----A---- D:\WINDOWS\system32\inetres.dll
2009-07-31 10:33:23 ----A---- D:\WINDOWS\system32\inetcomm.dll
2009-07-31 10:33:21 ----D---- D:\Program Files\Outlook Express
2009-07-31 10:33:21 ----A---- D:\WINDOWS\system32\schedsvc.dll
2009-07-31 10:33:21 ----A---- D:\WINDOWS\system32\mstinit.exe
2009-07-31 10:33:21 ----A---- D:\WINDOWS\system32\mstask.dll
2009-07-31 10:33:20 ----A---- D:\WINDOWS\system32\isign32.dll
2009-07-31 10:33:20 ----A---- D:\WINDOWS\system32\inetcfg.dll
2009-07-31 10:33:20 ----A---- D:\WINDOWS\system32\icwphbk.dll
2009-07-31 10:33:20 ----A---- D:\WINDOWS\system32\icwdial.dll
2009-07-31 10:33:09 ----D---- D:\Program Files\Common Files\System
2009-07-31 10:33:07 ----D---- D:\Program Files\Internet Explorer
2009-07-31 10:32:39 ----D---- D:\Program Files\ComPlus Applications
2009-07-31 10:32:38 ----A---- D:\WINDOWS\vbaddin.ini
2009-07-31 10:32:38 ----A---- D:\WINDOWS\vb.ini
2009-07-31 10:32:34 ----D---- D:\WINDOWS\Registration
2009-07-31 10:32:28 ----D---- D:\Program Files\Windows Media Player
2009-07-31 10:32:23 ----D---- D:\Program Files\Messenger
2009-07-31 10:32:19 ----D---- D:\Program Files\MSN Gaming Zone
2009-07-31 10:32:18 ----A---- D:\WINDOWS\system32\write.exe
2009-07-31 10:32:09 ----A---- D:\WINDOWS\system32\sndvol32.exe
2009-07-31 10:32:09 ----A---- D:\WINDOWS\system32\hticons.dll
2009-07-31 10:32:09 ----A---- D:\WINDOWS\system32\avwav.dll
2009-07-31 10:32:09 ----A---- D:\WINDOWS\system32\avtapi.dll
2009-07-31 10:32:09 ----A---- D:\WINDOWS\system32\avmeter.dll
2009-07-31 10:32:08 ----A---- D:\WINDOWS\system32\winchat.exe
2009-07-31 10:31:56 ----A---- D:\WINDOWS\system32\getuname.dll
2009-07-31 10:31:56 ----A---- D:\WINDOWS\system32\charmap.exe
2009-07-31 10:31:55 ----A---- D:\WINDOWS\system32\winmine.exe
2009-07-31 10:31:55 ----A---- D:\WINDOWS\system32\sol.exe
2009-07-31 10:31:55 ----A---- D:\WINDOWS\system32\calc.exe
2009-07-31 10:31:54 ----A---- D:\WINDOWS\system32\usrlogon.cmd
2009-07-31 10:31:54 ----A---- D:\WINDOWS\system32\reset.exe
2009-07-31 10:31:54 ----A---- D:\WINDOWS\system32\mshearts.exe
2009-07-31 10:31:54 ----A---- D:\WINDOWS\system32\freecell.exe
2009-07-31 10:31:53 ----A---- D:\WINDOWS\system32\tsshutdn.exe
2009-07-31 10:31:53 ----A---- D:\WINDOWS\system32\tslabels.ini
2009-07-31 10:31:53 ----A---- D:\WINDOWS\system32\tskill.exe
2009-07-31 10:31:53 ----A---- D:\WINDOWS\system32\tsdiscon.exe
2009-07-31 10:31:53 ----A---- D:\WINDOWS\system32\tscon.exe
2009-07-31 10:31:53 ----A---- D:\WINDOWS\system32\shadow.exe
2009-07-31 10:31:53 ----A---- D:\WINDOWS\system32\rwinsta.exe
2009-07-31 10:31:53 ----A---- D:\WINDOWS\system32\regini.exe
2009-07-31 10:31:53 ----A---- D:\WINDOWS\system32\rdpcfgex.dll
2009-07-31 10:31:53 ----A---- D:\WINDOWS\system32\qwinsta.exe
2009-07-31 10:31:53 ----A---- D:\WINDOWS\system32\qappsrv.exe
2009-07-31 10:31:52 ----A---- D:\WINDOWS\system32\msg.exe
2009-07-31 10:31:52 ----A---- D:\WINDOWS\system32\msdtcprf.ini
2009-07-31 10:31:52 ----A---- D:\WINDOWS\system32\logoff.exe
2009-07-31 10:31:52 ----A---- D:\WINDOWS\system32\cdmodem.dll
2009-07-31 10:31:46 ----A---- D:\WINDOWS\system32\wmimgmt.msc
2009-07-31 10:31:45 ----A---- D:\WINDOWS\system32\sndrec32.exe
2009-07-31 10:31:45 ----A---- D:\WINDOWS\system32\accwiz.exe
2009-07-31 10:31:44 ----A---- D:\WINDOWS\system32\mplay32.exe
2009-07-31 10:31:44 ----A---- D:\WINDOWS\system32\hypertrm.dll
2009-07-31 10:31:43 ----D---- D:\Program Files\Windows NT
2009-07-31 10:31:43 ----A---- D:\WINDOWS\system32\spider.exe
2009-07-31 10:31:43 ----A---- D:\WINDOWS\system32\mspaint.exe
2009-07-31 10:31:43 ----A---- D:\WINDOWS\system32\clipbrd.exe
2009-07-31 10:31:41 ----A---- D:\WINDOWS\system32\tsgqec.dll
2009-07-31 10:31:41 ----A---- D:\WINDOWS\system32\tscfgwmi.dll
2009-07-31 10:31:41 ----A---- D:\WINDOWS\system32\rhttpaa.dll
2009-07-31 10:31:41 ----A---- D:\WINDOWS\system32\aaclient.dll
2009-07-31 10:31:40 ----A---- D:\WINDOWS\system32\remotepg.dll
2009-07-31 10:31:40 ----A---- D:\WINDOWS\system32\mstscax.dll
2009-07-31 10:31:40 ----A---- D:\WINDOWS\system32\mstsc.exe
2009-07-31 10:31:39 ----A---- D:\WINDOWS\system32\termsrv.dll
2009-07-31 10:31:39 ----A---- D:\WINDOWS\system32\sessmgr.exe
2009-07-31 10:31:39 ----A---- D:\WINDOWS\system32\rdshost.exe
2009-07-31 10:31:39 ----A---- D:\WINDOWS\system32\rdsaddin.exe
2009-07-31 10:31:39 ----A---- D:\WINDOWS\system32\rdpwsx.dll
2009-07-31 10:31:39 ----A---- D:\WINDOWS\system32\rdpsnd.dll
2009-07-31 10:31:39 ----A---- D:\WINDOWS\system32\rdpclip.exe
2009-07-31 10:31:39 ----A---- D:\WINDOWS\system32\rdchost.dll
2009-07-31 10:31:38 ----D---- D:\WINDOWS\system32\MsDtc
2009-07-31 10:31:38 ----A---- D:\WINDOWS\system32\qprocess.exe
2009-07-31 10:31:38 ----A---- D:\WINDOWS\system32\mtxoci.dll
2009-07-31 10:31:38 ----A---- D:\WINDOWS\system32\msdtcuiu.dll
2009-07-31 10:31:38 ----A---- D:\WINDOWS\system32\msdtcprx.dll
2009-07-31 10:31:38 ----A---- D:\WINDOWS\system32\icaapi.dll
2009-07-31 10:31:38 ----A---- D:\WINDOWS\system32\cfgbkend.dll
2009-07-31 10:31:37 ----A---- D:\WINDOWS\system32\xolehlp.dll
2009-07-31 10:31:37 ----A---- D:\WINDOWS\system32\msdtctm.dll
2009-07-31 10:31:37 ----A---- D:\WINDOWS\system32\msdtclog.dll
2009-07-31 10:31:37 ----A---- D:\WINDOWS\system32\msdtc.exe
2009-07-31 10:31:36 ----A---- D:\WINDOWS\system32\mtxlegih.dll
2009-07-31 10:31:36 ----A---- D:\WINDOWS\system32\mtxex.dll
2009-07-31 10:31:36 ----A---- D:\WINDOWS\system32\mtxdm.dll
2009-07-31 10:31:36 ----A---- D:\WINDOWS\system32\dcomcnfg.exe
2009-07-31 10:31:35 ----D---- D:\WINDOWS\system32\Com
2009-07-31 10:31:35 ----A---- D:\WINDOWS\system32\stclient.dll
2009-07-31 10:31:35 ----A---- D:\WINDOWS\system32\comrepl.dll
2009-07-31 10:31:35 ----A---- D:\WINDOWS\system32\comaddin.dll
2009-07-31 10:31:35 ----A---- D:\WINDOWS\system32\colbact.dll
2009-07-31 10:31:35 ----A---- D:\WINDOWS\system32\clbcatex.dll
2009-07-31 10:31:35 ----A---- D:\WINDOWS\system32\catsrvps.dll
2009-07-31 10:31:34 ----A---- D:\WINDOWS\system32\comuid.dll
2009-07-31 10:31:34 ----A---- D:\WINDOWS\system32\comsvcs.dll
2009-07-31 10:31:34 ----A---- D:\WINDOWS\system32\catsrvut.dll
2009-07-31 10:31:34 ----A---- D:\WINDOWS\system32\catsrv.dll
2009-07-31 10:31:33 ----A---- D:\WINDOWS\system32\comsnap.dll
2009-07-31 10:31:33 ----A---- D:\WINDOWS\system32\clbcatq.dll
2009-07-31 10:31:22 ----A---- D:\WINDOWS\system32\servdeps.dll
2009-07-31 10:31:22 ----A---- D:\WINDOWS\system32\mmfutil.dll
2009-07-31 10:31:22 ----A---- D:\WINDOWS\system32\licwmi.dll
2009-07-31 10:31:21 ----A---- D:\WINDOWS\system32\cmprops.dll

======List of files/folders modified in the last 1 months======

2009-07-31 12:18:34 ----A---- D:\WINDOWS\system.ini
2009-07-31 10:36:07 ----A---- D:\WINDOWS\win.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;Sterownik procesora AMD; D:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520]
R1 kbdhid;Sterownik klawiatury HID; D:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 klif;Klif; \??\D:\WINDOWS\system32\drivers\klif.sys []
R1 WmiAcpi;Interfejs zarządzania Microsoft Windows dla ACPI; D:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R3 abp470n5;abp470n5; \??\D:\WINDOWS\system32\drivers\nkmoss.sys []
R3 Arp1394;Protokół klienta 1394 ARP; D:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-15 60800]
R3 HDAudBus;Sterownik magistrali Microsoft UAA dla High Definition Audio; D:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 hidusb;Sterownik Microsoft klasy HID; D:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); D:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-07-03 4745216]
R3 mouhid;Sterownik myszy HID; D:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-27 12160]
R3 NIC1394;Sterownik sieci 1394; D:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-15 61824]
R3 nv;nv; D:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-06-28 6807328]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; D:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-01-04 105856]
R3 Stmatm;ATM/ADSL miniport; D:\WINDOWS\system32\DRIVERS\stmatm.sys [2003-08-12 60255]
R3 TaurusUsb;ADSL Modem USB Service; D:\WINDOWS\system32\DRIVERS\torususb.sys [2006-05-25 684265]
R3 usbccgp;Rodzajowy sterownik nadrzędny USB Microsoft; D:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbehci;Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft; D:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Koncentrator z obsługą USB2; D:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbohci;Sterownik Miniport otwartego kontrolera hosta USB Microsoft; D:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-14 17152]
S3 gdrv;gdrv; \??\D:\WINDOWS\gdrv.sys []
S3 GMSIPCI;GMSIPCI; \??\F:\INSTALL\GMSIPCI.SYS []
S3 MSICPL;MSICPL; \??\F:\install4\MSICPL.sys []
S3 NTACCESS;NTACCESS; \??\F:\NTACCESS.sys []
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\D:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\D:\WINDOWS\system32\PCANDIS5.SYS []
S3 SetupNTGLM7X;SetupNTGLM7X; \??\F:\NTGLM7X.sys []
S4 IntelIde;IntelIde; D:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 FTRTSVC;France Telecom Routing Table Service; D:\WINDOWS\System32\FTRTSVC.exe [2004-08-23 40960]
R2 NVSvc;NVIDIA Display Driver Service; D:\WINDOWS\system32\nvsvc32.exe [2007-06-28 155716]
S2 AVP;Kaspersky Anti-Virus 6.0; D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe [2007-03-09 200768]

-----------------EOF-----------------


[Okocza]

lagoon, wykonaj skan combofixem i daj log z niego tagach 'code'

[lagoon]

hijackthis:

Kod: Zaznacz wszystko

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:24:58, on 2009-07-31
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\System32\FTRTSVC.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\RTHDCPL.EXE
D:\WINDOWS\SOUNDMAN.EXE
D:\WINDOWS\system32\RUNDLL32.EXE
D:\WINDOWS\system32\rundll32.exe
D:\WINDOWS\system32\ctfmon.exe
D:\PROGRA~1\NEOSTR~1\TaskBarIcon.exe
D:\Program Files\neostrada tp\neostradatp.exe
D:\Program Files\neostrada tp\ComComp.exe
D:\PROGRA~1\NEOSTR~1\Toaster.exe
D:\PROGRA~1\NEOSTR~1\Inactivity.exe
D:\PROGRA~1\NEOSTR~1\PollingModule.exe
D:\Program Files\neostrada tp\Watch.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\DOCUME~1\lagoon\USTAWI~1\Temp\winvdee.exe
D:\Program Files\Nowe Gadu-Gadu\gg.exe
D:\Program Files\Nowe Gadu-Gadu\spellchecker_gg.exe
D:\Documents and Settings\lagoon\Moje dokumenty\Pobieranie\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = neostrada tp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - D:\WINDOWS\system32\dvmurl.dll
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - D:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [GEST] =
O4 - HKLM\..\Run: [AVP] "D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WinSys2] D:\WINDOWS\system32\winsys2.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WOOWATCH] D:\PROGRA~1\NEOSTR~1\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] D:\PROGRA~1\NEOSTR~1\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] "E:\cs1.6\Steam.exe" -silent
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{8CEE8F16-8BBA-4848-B9A7-E8973F287C1A}: NameServer = 194.204.159.1 217.98.63.164
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - D:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe

--
End of file - 4049 bytes


Dodano Dzisiaj, 13:32:
log z combofix

Kod: Zaznacz wszystko

ComboFix 09-07-29.04 - lagoon 2009-07-31 13:29.1.2 - NTFSx86
Microsoft Windows XP Professional  5.1.2600.3.1250.48.1045.18.2046.1431 [GMT 2:00]
Uruchomiony z: d:\documents and settings\lagoon\Moje dokumenty\Pobieranie\ComboFix.exe
AV: Kaspersky Anti-Virus *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Anti-Virus *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
.

(((((((((((((((((((((((((((((((((((((((   Usunięto   )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\autorun.inf
c:\windows\Installer\10b869.msi
c:\windows\Installer\266d8d.msi
c:\windows\Installer\2b3d6b.msi
c:\windows\Installer\34750d.msi
c:\windows\Installer\347518.msi
c:\windows\Installer\5f412.msi
c:\windows\Installer\b397c.msi
c:\windows\Installer\b3980.msi
c:\windows\Installer\b66e8.msi
c:\windows\Installer\b66ef.msi
c:\windows\Installer\b66f6.msi
c:\windows\Installer\b66fd.msi
c:\windows\Installer\b6704.msi
c:\windows\Installer\b670b.msi
c:\windows\Installer\b6712.msi
c:\windows\Installer\b6721.msi
c:\windows\Installer\b6728.msi
c:\windows\Installer\b672f.msi
c:\windows\Installer\b6736.msi
c:\windows\Installer\b673d.msi
c:\windows\Installer\b674b.msi
c:\windows\Installer\b6752.msi
c:\windows\Installer\b6766.msi
c:\windows\Installer\b676e.msi
c:\windows\Installer\b6775.msi
c:\windows\Installer\b6781.msi
c:\windows\Installer\b678a.msi
c:\windows\Installer\b6791.msi
c:\windows\Installer\b679d.msi
c:\windows\Installer\b67a5.msi
c:\windows\Installer\b67ae.msi
c:\windows\Installer\b67ba.msi
c:\windows\Installer\b67c2.msi
c:\windows\Installer\b67cf.msi
c:\windows\Installer\b67d6.msi
c:\windows\Installer\b67dd.msi
c:\windows\Installer\b67e4.msi
c:\windows\Installer\b67ec.msi
c:\windows\Installer\b67f3.msi
c:\windows\Installer\b67fb.msi
d:\windows\system32\setup.ini

.
(((((((((((((((((((((((((   Pliki utworzone od 2009-06-28 do 2009-07-31  )))))))))))))))))))))))))))))))
.

Nie utworzono żadnych nowych plików w tym okresie

.
((((((((((((((((((((((((((((((((((((((((   Sekcja Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-31 11:31 . 2009-07-31 09:03   72992   --sha-w-   d:\windows\system32\drivers\fidbox2.dat
2009-07-31 11:31 . 2009-07-31 09:03   2295584   --sha-w-   d:\windows\system32\drivers\fidbox.dat
2009-07-31 10:51 . 2009-07-31 10:51   --------   d-----w-   d:\program files\trend micro
2009-07-31 10:37 . 2009-07-31 10:37   --------   d-----w-   d:\program files\Alwil Software
2009-07-31 10:27 . 2009-07-31 09:03   --------   d-----w-   d:\documents and settings\All Users\Dane aplikacji\Kaspersky Lab
2009-07-31 10:25 . 2001-10-26 20:15   49712   ----a-w-   d:\windows\system32\perfc015.dat
2009-07-31 10:25 . 2001-10-26 20:15   355830   ----a-w-   d:\windows\system32\perfh015.dat
2009-07-31 10:22 . 2009-07-31 09:13   --------   d-----w-   d:\program files\neostrada tp
2009-07-31 10:20 . 2009-07-31 09:03   6956   --sha-w-   d:\windows\system32\drivers\fidbox2.idx
2009-07-31 10:20 . 2009-07-31 09:03   31436   --sha-w-   d:\windows\system32\drivers\fidbox.idx
2009-07-31 10:02 . 2009-07-31 10:02   15872   ----a-r-   d:\documents and settings\lagoon\Dane aplikacji\Microsoft\Installer\{048298C9-A4D3-490B-9FF9-AB023A9238F3}\Icon048298C9.exe
2009-07-31 09:45 . 2009-07-31 09:44   --------   d-----w-   d:\documents and settings\lagoon\Dane aplikacji\Nowe Gadu-Gadu
2009-07-31 09:44 . 2009-07-31 09:44   --------   d-----w-   d:\program files\Nowe Gadu-Gadu
2009-07-31 09:23 . 2009-07-31 09:23   0   ----a-w-   d:\windows\nsreg.dat
2009-07-31 09:15 . 2009-07-31 09:15   --------   d-----w-   d:\program files\ZTE ZXDSL 852
2009-07-31 09:14 . 2009-07-31 08:41   --------   d--h--w-   d:\program files\InstallShield Installation Information
2009-07-31 09:14 . 2009-07-31 08:41   --------   d-----w-   d:\program files\Common Files\InstallShield
2009-07-31 09:06 . 2009-07-31 09:06   --------   d-----w-   d:\program files\GIGABYTE
2009-07-31 09:06 . 2009-07-31 08:40   16608   ----a-w-   d:\windows\gdrv.sys
2009-07-31 09:03 . 2009-07-31 09:03   75932   ----a-w-   d:\windows\system32\drivers\klick.dat
2009-07-31 09:03 . 2009-07-31 09:03   74396   ----a-w-   d:\windows\system32\drivers\klin.dat
2009-07-31 09:03 . 2009-07-31 09:03   --------   d-----w-   d:\program files\Kaspersky Lab
2009-07-31 08:44 . 2009-07-31 08:41   --------   d-----w-   d:\program files\Realtek
2009-07-31 08:41 . 2009-07-31 08:41   315392   ----a-w-   d:\windows\HideWin.exe
2009-07-31 08:41 . 2009-07-31 08:41   --------   d-----w-   d:\program files\AMD
2009-07-31 08:41 . 2009-07-31 08:41   --------   d-----w-   d:\documents and settings\lagoon\Dane aplikacji\InstallShield
2009-07-31 08:41 . 2009-07-31 08:41   --------   d-----w-   d:\program files\Browser Configuration Utility
2009-07-31 08:36 . 2009-07-31 08:36   --------   d-----w-   d:\program files\microsoft frontpage
2009-07-31 08:35 . 2009-07-31 08:35   86327   ----a-w-   d:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-07-31 08:35 . 2009-07-31 08:35   --------   d-----w-   d:\program files\Usługi online
2009-07-31 08:32 . 2009-07-31 08:32   21856   ----a-w-   d:\windows\system32\emptyregdb.dat
2009-07-27 15:42 . 2009-07-27 15:42   42088   ----a-w-   d:\documents and settings\lagoon\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll
2009-07-27 15:03 . 2009-07-27 15:03   11264   ----a-w-   d:\documents and settings\lagoon\Dane aplikacji\Nowe Gadu-Gadu\_userdata\npgg.1.dll
2009-07-16 01:02 . 2009-07-31 09:22   137208   ----a-w-   d:\program files\mozilla firefox\components\brwsrcmp.dll
.

(((((((((((((((((((((((((((((((((((((   Wpisy startowe rejestru   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="d:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"Steam"="e:\cs1.6\Steam.exe" [2009-07-31 1291512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GEST"="=" [X]
"NvCplDaemon"="d:\windows\system32\NvCpl.dll" [2007-06-28 8466432]
"WinSys2"="d:\windows\system32\winsys2.exe" [2006-04-29 278528]
"NvMediaCenter"="d:\windows\system32\NvMcTray.dll" [2007-06-28 81920]
"WOOWATCH"="d:\progra~1\NEOSTR~1\Watch.exe" [2004-08-23 20480]
"WOOTASKBARICON"="d:\progra~1\NEOSTR~1\GestMaj.exe" [2004-10-14 114688]
"RTHDCPL"="RTHDCPL.EXE" - d:\windows\RTHDCPL.exe [2008-07-03 16876032]
"SoundMan"="SOUNDMAN.EXE" - d:\windows\SoundMan.exe [2008-06-18 77824]
"AlcWzrd"="ALCWZRD.EXE" - d:\windows\alcwzrd.exe [2008-06-19 2808832]
"nwiz"="nwiz.exe" - d:\windows\system32\nwiz.exe [2007-06-28 1703936]
"AdslTaskBar"="stmctrl.dll" - d:\windows\system32\stmctrl.dll [2006-06-02 151552]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="d:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableTaskMgr"= 1 (0x1)
"DisableRegistryTools"= 1 (0x1)

[COLOR=RED] Klucz Trybu Awaryjnego wymaga naprawy. Komputer nie może wejść w Tryb Awaryjny. [/COLOR]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
@="Driver Group"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
@="DiskDrive"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
@="Hdc"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
@="Keyboard"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
@="Mouse"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
@="System"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
@="Volume"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
"UacDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001
"AntiVirusDisableNotify"=dword:00000001
"FirewallDisableNotify"=dword:00000001
"FirewallOverride"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"UacDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"d:\\Program Files\\Nowe Gadu-Gadu\\gg.exe"=
"e:\\cs1.6\\Steam.exe"=
"d:\\PROGRA~1\\NEOSTR~1\\GestMaj.exe"=
"d:\\WINDOWS\\system32\\netsh.exe"=
"d:\\WINDOWS\\system32\\CF8417.exe"=

R3 abp470n5;abp470n5;\??\d:\windows\system32\drivers\nkmoss.sys --> d:\windows\system32\drivers\nkmoss.sys [?]
R3 Stmatm;ATM/ADSL miniport;d:\windows\system32\drivers\stmatm.sys [2009-07-31 60255]
R3 TaurusUsb;ADSL Modem USB Service;d:\windows\system32\drivers\torususb.sys [2009-07-31 684265]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\f:\ntglm7x.sys --> f:\NTGLM7X.sys [?]

--- Inne Usługi/Sterowniki w Pamięci ---

*NewlyCreated* - AVP
.
.
------- Skan uzupełniający -------
.
uStart Page = hxxp://www.neostrada.pl
IE: { - d:\program files\Messenger\msmsgs.exe
TCP: {8CEE8F16-8BBA-4848-B9A7-E8973F287C1A} = 194.204.159.1 217.98.63.164
FF - ProfilePath - d:\documents and settings\lagoon\Dane aplikacji\Mozilla\Firefox\Profiles\0hyou3lc.default\
FF - plugin: d:\documents and settings\lagoon\Dane aplikacji\Nowe Gadu-Gadu\_userdata\npgg.1.dll

---- FIREFOX - SPOSÓB POSTĘPOWANIA ----
d:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
d:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota",      5120);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
d:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true);
d:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
d:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
d:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history",     true);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata",    true);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords",   false);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads",   true);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies",     true);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache",       true);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions",    true);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history",                 true);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata",                true);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords",               false);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads",               true);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies",                 true);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache",                   true);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions",                true);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps",             false);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings",            false);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs",    false);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
d:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-31 13:31
Windows 5.1.2600 Dodatek Service Pack 3 NTFS

skanowanie ukrytych procesów ... 

skanowanie ukrytych wpisów autostartu ...

skanowanie ukrytych plików ... 

skanowanie pomyślnie ukończone
ukryte pliki: 0

**************************************************************************
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------

- - - - - - - > 'winlogon.exe'(832)
d:\windows\system32\klogon.dll
.
Czas ukończenia: 2009-07-31 13:31
ComboFix-quarantined-files.txt  2009-07-31 11:31

Przed: 279 792 885 760 bajtów wolnych
Po: 279 691 685 888 bajtów wolnych

WindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(3)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(3)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /usepmtimer
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /usepmtimer

248


[Okocza]

lagoon, masz płytę główną Gigabyte ?

wykonaj to co tu jest opisane:

zhakowane-konto-wow-a-logi-po-czyszczeniu-vt111408.html#p844321

[lagoon]

gigabyte ma790xds4

[Okocza]

lagoon,

wykonaj to co tu jest opisane:

zhakowane-konto-wow-a-logi-po-czyszczeniu-vt111408.html#p844321

[lagoon]

Zrobiłem wszystko co tam bylo napisane ale nie moge wejść na http://www.kaspersky.pl/virusscanner.html
próbowałem na Mozilli i IE

[Okocza]

lagoon, w takim wypadku wejdź na

http://www.eset.pl/onlinescan

i zrób skan

[lagoon]

http://www.eset.pl/onlinescan to tez nie chce dzialac... juz nie wiem co mam robic bo nawet format nie dziala wiec wrzuce logi z DDS

DDS

Kod: Zaznacz wszystko

DDS (Ver_09-07-30.01) - NTFSx86 
Run by lagoon at 16:03:53,29 on 2009-07-31
Internet Explorer: 6.0.2900.5512
Microsoft Windows XP Professional  5.1.2600.3.1250.48.1045.18.2046.1366 [GMT 2:00]

AV: Kaspersky Anti-Virus *On-access scanning disabled* (Updated)   {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Anti-Virus *disabled*   {2C4D4BC6-0793-4956-A9F9-E252435469C0}

============== Running Processes ===============

D:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
D:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\System32\FTRTSVC.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\RTHDCPL.EXE
D:\WINDOWS\SOUNDMAN.EXE
D:\WINDOWS\system32\rundll32.exe
D:\PROGRA~1\NEOSTR~1\TaskBarIcon.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\neostrada tp\neostradatp.exe
D:\Program Files\neostrada tp\ComComp.exe
D:\PROGRA~1\NEOSTR~1\Toaster.exe
D:\PROGRA~1\NEOSTR~1\Inactivity.exe
D:\PROGRA~1\NEOSTR~1\PollingModule.exe
D:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
D:\Program Files\neostrada tp\Watch.exe
D:\WINDOWS\explorer.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\DOCUME~1\lagoon\USTAWI~1\Temp\winyqtjy.exe
D:\Program Files\internet explorer\iexplore.exe
D:\Documents and Settings\lagoon\Moje dokumenty\Pobieranie\dds.pif

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.neostrada.pl
uURLSearchHooks: DeviceVM Url Search Hook: {0063bf63-bfff-4b8f-9d26-4267df7f17dd} - d:\windows\system32\dvmurl.dll
uURLSearchHooks: Search Class: {08c06d61-f1f3-4799-86f8-be1a89362c85} - d:\progra~1\neostr~1\SEARCH~1.DLL
uRun: [CTFMON.EXE] d:\windows\system32\ctfmon.exe
uRun: [Odkurzacz-MCD] d:\program files\odkurzacz\odk_mcd.exe
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [SoundMan] SOUNDMAN.EXE
mRun: [AlcWzrd] ALCWZRD.EXE
mRun: [GEST] =
mRun: [NvCplDaemon] RUNDLL32.EXE d:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [WinSys2] d:\windows\system32\winsys2.exe
mRun: [WOOWATCH] d:\progra~1\neostr~1\Watch.exe
mRun: [WOOTASKBARICON] d:\progra~1\neostr~1\GestMaj.exe TaskBarIcon.exe
mRun: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
mRun: [MSConfig] d:\windows\pchealth\helpctr\binaries\MSCONFIG.EXE /auto
mRun: [AVP] "d:\program files\kaspersky lab\kaspersky anti-virus 6.0\avp.exe"
dRun: [CTFMON.EXE] d:\windows\system32\CTFMON.EXE
uPolicies-system: DisableTaskMgr = 1 (0x1)
uPolicies-system: DisableRegistryTools = 1 (0x1)
mPolicies-system: EnableLUA = 0 (0x0)
IE: { - d:\program files\messenger\msmsgs.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - {85E0B171-04FA-11D1-B7DA-00A0C90348D6} - d:\program files\kaspersky lab\kaspersky anti-virus 6.0\scieplugin.dll
DPF: {68282C51-9459-467B-95BF-3C0E89627E55} - hxxp://www.mks.com.pl/skaner/SkanerOnline.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/products/plugin/autodl/jinstall-1_4_0_03-win.cab
DPF: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-1_4_0_03-win.cab
TCP: {8CEE8F16-8BBA-4848-B9A7-E8973F287C1A} = 194.204.159.1 217.98.63.164
Notify: klogon - d:\windows\system32\klogon.dll

================= FIREFOX ===================

FF - ProfilePath - d:\docume~1\lagoon\daneap~1\mozilla\firefox\profiles\0hyou3lc.default\
FF - plugin: d:\documents and settings\lagoon\dane aplikacji\nowe gadu-gadu\_userdata\npgg.1.dll

---- FIREFOX POLICIES ----
d:\program files\mozilla firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
d:\program files\mozilla firefox\greprefs\all.js - pref("media.cache_size", 51200);
d:\program files\mozilla firefox\greprefs\all.js - pref("media.ogg.enabled", true);
d:\program files\mozilla firefox\greprefs\all.js - pref("media.wave.enabled", true);
d:\program files\mozilla firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
d:\program files\mozilla firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
d:\program files\mozilla firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
d:\program files\mozilla firefox\greprefs\all.js - pref("dom.storage.default_quota",      5120);
d:\program files\mozilla firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
d:\program files\mozilla firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
d:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.dpi", -1);
d:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
d:\program files\mozilla firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
d:\program files\mozilla firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
d:\program files\mozilla firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
d:\program files\mozilla firefox\greprefs\all.js - pref("geo.enabled", true);
d:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
d:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
d:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history",     true);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata",    true);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords",   false);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads",   true);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies",     true);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache",       true);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions",    true);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.history",                 true);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata",                true);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords",               false);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads",               true);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies",                 true);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache",                   true);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions",                true);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps",             false);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings",            false);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs",    false);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
d:\program files\mozilla firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");

============= SERVICES / DRIVERS ===============

R0 kl1;Kl1;d:\windows\system32\drivers\kl1.sys [2007-3-3 110360]
R1 klif;Klif;d:\windows\system32\drivers\klif.sys [2007-1-27 175888]
R3 abp470n5;abp470n5;\??\d:\windows\system32\drivers\nkmoss.sys --> d:\windows\system32\drivers\nkmoss.sys [?]
R3 Stmatm;ATM/ADSL miniport;d:\windows\system32\drivers\stmatm.sys [2009-7-31 60255]
R3 TaurusUsb;ADSL Modem USB Service;d:\windows\system32\drivers\torususb.sys [2009-7-31 684265]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\f:\ntglm7x.sys --> f:\NTGLM7X.sys [?]

=============== Created Last 30 ================

2009-07-31 16:03   <DIR>   --d-h---   d:\windows\PIF
2009-07-31 15:05   <DIR>   --d-----   d:\program files\SkanerOnline
2009-07-31 15:01   <DIR>   --d-----   d:\program files\Odkurzacz
2009-07-31 14:52   <DIR>   --d-----   d:\program files\HDCleaner
2009-07-31 14:43   <DIR>   --d-----   d:\windows\ERUNT
2009-07-31 14:43   <DIR>   --d-----   D:\!FixIEDef
2009-07-31 14:01   <DIR>   --d-----   d:\windows\pss
2009-07-31 13:31   <DIR>   -cd-----   d:\windows\system32\dllcache\cache
2009-07-31 13:27   <DIR>   --ds----   D:\ComboFix
2009-07-31 13:23   219,648   a-------   d:\windows\PEV.exe
2009-07-31 13:23   161,792   a-------   d:\windows\SWREG.exe
2009-07-31 13:23   98,816   a-------   d:\windows\sed.exe
2009-07-31 12:51   <DIR>   --d-----   d:\program files\trend micro
2009-07-31 12:30   3,072   a-------   d:\windows\system32\drivers\audstub.sys
2009-07-31 12:29   21,504   a-------   d:\windows\system32\hidserv.dll
2009-07-31 12:29   58,880   a-------   d:\windows\system32\drivers\redbook.sys
2009-07-31 12:28   6,400   a-------   d:\windows\system32\drivers\enum1394.sys
2009-07-31 12:28   77,312   a-------   d:\windows\system32\usbui.dll
2009-07-31 12:28   8,832   a-------   d:\windows\system32\drivers\wmiacpi.sys
2009-07-31 12:27   <DIR>   --d-----   d:\program files\common files\ODBC
2009-07-31 12:27   <DIR>   --d-----   d:\program files\common files\SpeechEngines
2009-07-31 12:27   <DIR>   --d-h---   d:\documents and settings\all users\Szablony
2009-07-31 12:27   <DIR>   --d--r--   d:\documents and settings\all users\Menu Start
2009-07-31 12:27   <DIR>   --d--r--   d:\documents and settings\all users\Dokumenty
2009-07-31 12:27   <DIR>   --d-----   d:\documents and settings\all users\Ulubione
2009-07-31 12:27   <DIR>   --d-----   d:\documents and settings\all users\Pulpit
2009-07-31 12:26   <DIR>   --d-----   d:\windows\system32\CatRoot2
2009-07-31 12:26   <DIR>   --d-----   d:\windows\system32\CatRoot
2009-07-31 12:26   <DIR>   --d-hr--   d:\documents and settings\all users\Dane aplikacji
2009-07-31 12:26   <DIR>   --d-----   D:\Documents and Settings
2009-07-31 12:25   589   a-------   d:\windows\system32\$winnt$.inf
2009-07-31 11:44   <DIR>   --d-----   d:\docume~1\lagoon\daneap~1\Nowe Gadu-Gadu
2009-07-31 11:44   <DIR>   --d-----   d:\program files\Nowe Gadu-Gadu
2009-07-31 11:15   <DIR>   --d-----   d:\program files\ZTE ZXDSL 852
2009-07-31 11:13   <DIR>   --d-----   d:\program files\neostrada tp
2009-07-31 11:06   <DIR>   --d-----   d:\program files\GIGABYTE
2009-07-31 11:03   <DIR>   --d-----   d:\program files\Kaspersky Lab
2009-07-31 11:03   <DIR>   --d-----   d:\docume~1\alluse~1\daneap~1\Kaspersky Lab
2009-07-31 10:41   <DIR>   --d-----   d:\program files\Realtek
2009-07-31 10:41   <DIR>   --d-----   d:\program files\AMD
2009-07-31 10:41   <DIR>   --d-----   d:\program files\Browser Configuration Utility
2009-07-31 10:40   <DIR>   --d-hr--   d:\documents and settings\lagoon\Dane aplikacji
2009-07-31 10:40   <DIR>   --d-h---   d:\documents and settings\lagoon\Ustawienia lokalne
2009-07-31 10:40   <DIR>   --d-h---   d:\documents and settings\lagoon\Szablony
2009-07-31 10:40   <DIR>   --d--r--   d:\documents and settings\lagoon\Ulubione
2009-07-31 10:40   <DIR>   --d--r--   d:\documents and settings\lagoon\Moje dokumenty
2009-07-31 10:40   <DIR>   --d--r--   d:\documents and settings\lagoon\Menu Start
2009-07-31 10:40   <DIR>   --d-----   d:\documents and settings\lagoon\Pulpit
2009-07-31 10:35   <DIR>   --dsh---   d:\documents and settings\all users\DRM
2009-07-31 10:35   <DIR>   --d-h---   d:\program files\WindowsUpdate
2009-07-31 10:35   <DIR>   --d-----   d:\program files\Usługi online
2009-07-31 10:34   <DIR>   --d-----   d:\program files\common files\MSSoap
2009-07-31 10:32   <DIR>   --d-----   d:\program files\Messenger
2009-07-31 10:32   <DIR>   --d-----   d:\program files\MSN Gaming Zone
2009-07-31 10:31   <DIR>   --d-----   d:\program files\Windows NT

==================== Find3M  ====================

2009-07-31 16:03   86,560   a--sh---   d:\windows\system32\drivers\fidbox2.dat
2009-07-31 16:03   2,429,984   a--sh---   d:\windows\system32\drivers\fidbox.dat
2009-07-31 14:36   355,830   a-------   d:\windows\system32\perfh015.dat
2009-07-31 14:36   49,712   a-------   d:\windows\system32\perfc015.dat
2009-07-31 14:07   36,524   a--sh---   d:\windows\system32\drivers\fidbox.idx
2009-07-31 14:07   11,288   a--sh---   d:\windows\system32\drivers\fidbox2.idx
2009-07-31 11:06   16,608   a-------   d:\windows\gdrv.sys
2009-07-31 11:03   75,932   a-------   d:\windows\system32\drivers\klick.dat
2009-07-31 11:03   74,396   a-------   d:\windows\system32\drivers\klin.dat
2009-07-31 10:41   315,392   a-------   d:\windows\HideWin.exe
2009-07-31 10:35   86,327   a-------   d:\windows\pchealth\helpctr\offlinecache\index.dat
2009-07-31 10:32   21,856   a-------   d:\windows\system32\emptyregdb.dat

============= FINISH: 16:04:03,34 ===============


[Okocza]

hmm... wydaje mi się że Twój komputer został zarażony wirusem Sality - infekuje wszystkie pliki wykonywalne na komputerze...

http://www.searchengines.pl/Wirus-robak-Win32Sality-t106545.html

wykonaj to co napisała Picasso

Autor postu otrzymał pochwałę