logi / i problem z netem /kompem :/

**Posty:** 974 · przez **Swat** 25 Mar 2007, 22:50

Mam problem z kompem . Gdy sobie gram itd. to mi wywala czasami jakiś koles mnie atakuje , ciagle ten sam tylko IP zmienia : /

następny problem to chyba jakiś żyd w kompie bo co wyłączę antywirusa to zaraz net siada , zaczyna mi mrugać windows (pasek ten na dole )

I wogóle komp jakiś dziwny jest i nic nieda sie zrobić i po chwili bład

I nie wiem jak wytępić to cholerstwo

Kasprzak nic nie wykrywa i ewidio też nic

moze jakiś rotkit nie wykrywalny ?

hijack

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 22:37:30, on 2007-03-25 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe C:\Program Files\ewido anti-spyware 4.0\guard.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\RunDll32.exe C:\WINDOWS\Xerox\PanelMgr\ssmmgr.exe C:\program files\zte corporation\zxdsl852\CnxDslTb.exe C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe C:\Program Files\DAEMON Tools\daemon.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\AutoConnect\AutoConnect.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\WinRAR\WinRAR.exe C:\DOCUME~1\ADMINS~1\USTAWI~1\Temp\Rar$EX00.734\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.bearshare.com/pl/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TP R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [Xerox PanelMgr] C:\WINDOWS\Xerox\PanelMgr\ssmmgr.exe /autorun O4 - HKLM\..\Run: [CnxDslTaskBar] "c:\program files\zte corporation\zxdsl852\CnxDslTb.exe" "ZTE Corporation\ZXDSL852" O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: ATI CATALYST – pasek zadań.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\ie_banner_deny.htm O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{0829766D-7133-49D3-AC2D-7BF7B6BE86AB}: NameServer = 194.204.159.1 217.98.63.164 O17 - HKLM\System\CS1\Services\Tcpip\..\{0829766D-7133-49D3-AC2D-7BF7B6BE86AB}: NameServer = 194.204.159.1 217.98.63.164 O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing) O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe

wycięte

**Posty:** 18165 · przez **wojtas** 25 Mar 2007, 22:53

Użyj WWDC :
http://www.firewallleaktester.com/wwdc.htm
Zmień opcje z disable na enable. Uruchom ponownie komputer.
Tak powinny wyglądać porty (NetBIOS może być żółty) :
http://www.firewallleaktester.com/images_site/wwdc.jpg

Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach)
Start do awaryjnego ( F8 ) przy starcie komputera.

O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL
O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL

Odpalasz hijackthis i zaznaczasz ptaszkami powyższe wpisy i dajesz Fix checked.
Pogrubione pliki usuwasz ręcznie z dysku
potem nowe logi z Hijack This oraz Silent runners oraz comboscan:

http://forum.programosy.pl/dodatkowe-narzedzia-do-usuwania-i-ochrony-vt42021.html

**Posty:** 974 · przez **Swat** 25 Mar 2007, 23:07

comboscan

Kod: Zaznacz wszystko: ComboScan v20070306.20 run by Admin SwaT on 2007-03-25 at 22:56:41 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- Successfully created ComboScan Restore Point. -- Last 5 Restore Point(s) -- 7: 2007-03-25 20:56:49 UTC - RP24 - ComboScan Restore Point 6: 2007-03-22 17:36:02 UTC - RP23 - Removed COD2 RCON Commander 5: 2007-03-22 17:34:07 UTC - RP22 - Removed ColdFear 4: 2007-03-20 18:37:04 UTC - RP21 - ??????????? Counter-Strike 1.6 3: 2007-03-18 16:20:41 UTC - RP20 - Installed Ground Control II -- First Restore Point -- 1: 2007-03-18 16:12:29 UTC - RP18 - Installed Ground Control II Performed disk cleanup. -- HijackThis (run as Admin SwaT.exe) ------------------------------------------ Logfile of HijackThis v1.99.1 Scan saved at 22:56:54, on 2007-03-25 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe C:\Program Files\ewido anti-spyware 4.0\guard.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\RunDll32.exe C:\WINDOWS\Xerox\PanelMgr\ssmmgr.exe C:\program files\zte corporation\zxdsl852\CnxDslTb.exe C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe C:\Program Files\DAEMON Tools\daemon.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\AutoConnect\AutoConnect.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\System32\WScript.exe C:\Documents and Settings\Admin SwaT\Pulpit\comboscan.exe C:\DOCUME~1\ADMINS~1\Pulpit\Admin SwaT.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.bearshare.com/pl/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TP R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [Xerox PanelMgr] C:\WINDOWS\Xerox\PanelMgr\ssmmgr.exe /autorun O4 - HKLM\..\Run: [CnxDslTaskBar] "c:\program files\zte corporation\zxdsl852\CnxDslTb.exe" "ZTE Corporation\ZXDSL852" O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: ATI CATALYST – pasek zadań.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\ie_banner_deny.htm O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{0829766D-7133-49D3-AC2D-7BF7B6BE86AB}: NameServer = 194.204.159.1 217.98.63.164 O17 - HKLM\System\CS1\Services\Tcpip\..\{0829766D-7133-49D3-AC2D-7BF7B6BE86AB}: NameServer = 194.204.159.1 217.98.63.164 O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing) O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe -- File Associations ----------------------------------------------------------- .bat - batfile - "%1" %* .chm - chm.file - "C:\WINDOWS\hh.exe" %1 .cmd - cmdfile - "%1" %* .com - comfile - "%1" %* .exe - exefile - "%1" %* .hlp - hlpfile - %SystemRoot%\System32\winhlp32.exe %1 .inf - inffile - %SystemRoot%\System32\NOTEPAD.EXE %1 .ini - inifile - %SystemRoot%\System32\NOTEPAD.EXE %1 .js - JSFile - %SystemRoot%\System32\WScript.exe "%1" %* .lnk - lnkfile - {00021401-0000-0000-C000-000000000046} .pif - piffile - "%1" %* .reg - regfile - regedit.exe "%1" .scr - scrfile - "%1" /S .txt - txtfile - %SystemRoot%\system32\NOTEPAD.EXE %1 .vbs - VBSFile - %SystemRoot%\System32\WScript.exe "%1" %* -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- 1R AmdK7 (Sterownik procesora AMD K7) - C:\WINDOWS\system32\drivers\amdk7.sys 3R ati2mtag - C:\WINDOWS\system32\drivers\ati2mtag.sys 3R cmuda (C-Media WDM Audio Interface) - C:\WINDOWS\system32\drivers\cmuda.sys 3R CnxEtP (ZTE ZXDSL852 Adapter Filter Driver) - C:\WINDOWS\system32\drivers\CnxEtP.sys 3R CnxEtU (ZTE ZXDSL852 Interface Device Driver) - C:\WINDOWS\system32\drivers\CnxEtU.sys 3R CnxTgNW (ZTE ZXDSL852 WAN PPPoA Adapter Driver) - C:\WINDOWS\system32\drivers\CnxTgNW.sys 2R DgiVecp - C:\WINDOWS\system32\drivers\DGIVECP.SYS 3R dtscsi - C:\WINDOWS\system32\drivers\dtscsi.sys 3S EL90XBC (Sterownik karty 3Com EtherLink XL 90XB/C) - C:\WINDOWS\system32\drivers\el90xbc5.sys 1R ewido anti-spyware 4.0 driver - C:\Program Files\ewido anti-spyware 4.0\guard.sys 3S FETNDIS (Sterownik NT karty VIA PCI 10/100Mb Fast Ethernet) - C:\WINDOWS\system32\drivers\fetnd5.sys 3S hamachi (Hamachi Network Interface) - C:\WINDOWS\system32\drivers\hamachi.sys 0R kl1 - C:\WINDOWS\system32\drivers\kl1.sys 1R klif - C:\WINDOWS\system32\drivers\klif.sys 0R PxHelp20 - C:\WINDOWS\system32\drivers\PxHelp20.sys 0R sptd - C:\WINDOWS\system32\drivers\sptd.sys 0R uagp35 (Filtr AGPv3.5 firmy Microsoft) - C:\WINDOWS\system32\drivers\UAGP35.SYS 3R usbehci (Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft) - C:\WINDOWS\system32\drivers\usbehci.sys 3S usbprint (Klasa PRINTER USB Microsoft) - C:\WINDOWS\system32\drivers\usbprint.sys 3S usbstor (Sterownik magazynu masowego USB) - C:\WINDOWS\system32\drivers\usbstor.sys -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- 3S Adobe LM Service - "C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe" 3S aspnet_state (ASP.NET State Service) - C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe 2R Ati HotKey Poller - C:\WINDOWS\system32\Ati2evxx.exe 2S ATI Smart - C:\WINDOWS\system32\ati2sgag.exe 2R AVP (Kaspersky Internet Security 6.0) - "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r 2R ewido anti-spyware 4.0 guard - C:\Program Files\ewido anti-spyware 4.0\guard.exe 2R UMWdf (Windows User Mode Driver Framework) - C:\WINDOWS\system32\wdfmgr.exe -- Files created between 2007-02-25 and 2007-03-25 ----------------------------- 2007-03-25 19:57:13 17480 --a------ C:\WINDOWS\system32\drivers\hamachi.sys 2007-03-25 19:57:11 0 d-------- C:\Program Files\Hamachi 2007-03-22 18:36:05 0 d-------- C:\WINDOWS\system32\appmgmt 2007-03-21 18:39:37 0 d-------- C:\My Download<MYDOWN~2> 2007-03-21 14:44:02 0 d-------- C:\pliki na serwer<PLIKIN~1> 2007-03-21 12:42:46 0 d-------- C:\dreamstats<DREAMS~1> 2007-03-20 19:37:05 0 d-------- C:\Program Files\Valve 2007-03-20 18:55:58 125184 -----n--- C:\WINDOWS\system32\drivers\imagesrv.sys 2007-03-20 18:55:58 5504 -----n--- C:\WINDOWS\system32\drivers\imagedrv.sys 2007-03-20 18:55:40 106496 --a------ C:\WINDOWS\system32\TwnLib20.dll 2007-03-20 18:55:40 471040 -----n--- C:\WINDOWS\system32\ImagXRA7.dll 2007-03-20 18:55:40 262144 -----n--- C:\WINDOWS\system32\ImagXR7.dll 2007-03-20 18:55:40 476320 -----n--- C:\WINDOWS\system32\ImagXpr7.dll 2007-03-20 18:55:40 1568768 -----n--- C:\WINDOWS\system32\ImagX7.dll 2007-03-20 18:55:39 155648 --a------ C:\WINDOWS\system32\NeroCheck.exe<NEROCH~1.EXE> 2007-03-20 18:55:39 0 d-------- C:\Program Files\Common Files\Ahead 2007-03-20 18:55:34 0 d-------- C:\Program Files\Ahead 2007-03-20 16:46:48 0 d-------- C:\Program Files\MyGlobalSearch<MYGLOB~1> 2007-03-20 16:46:36 0 d-a------ C:\My Downloads<MYDOWN~1> 2007-03-20 16:46:35 0 d-------- C:\Program Files\BearShare<BEARSH~1> 2007-03-18 17:15:02 43520 --a------ C:\WINDOWS\system32\CmdLineExt03.dll<CMDLIN~1.DLL> 2007-03-18 12:49:11 0 d-------- C:\Program Files\Croteam 2007-03-17 11:54:54 0 d-------- C:\WINDOWS\Starshatter The Gathering Storm<STARSH~1> 2007-03-17 11:32:02 223128 --a------ C:\WINDOWS\system32\drivers\dtscsi.sys 2007-03-17 11:32:00 0 d-------- C:\Program Files\DAEMON Tools<DAEMON~1> 2007-03-17 11:30:06 96256 --a------ C:\WINDOWS\system32\drivers\sptd8765.sys 2007-03-17 11:30:06 664064 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2007-03-15 11:54:37 237568 --a------ C:\WINDOWS\system32\OggDS.dll 2007-03-15 11:54:23 921600 --a------ C:\WINDOWS\system32\vorbisenc.dll<VORBIS~1.DLL> 2007-03-15 11:53:46 188416 --a------ C:\WINDOWS\system32\vorbis.dll 2007-03-15 11:53:29 45056 --a------ C:\WINDOWS\system32\ogg.dll 2007-03-15 11:53:22 1415680 --a------ C:\WINDOWS\system32\WMV9VCM.dll 2007-03-15 11:52:09 245760 --a------ C:\WINDOWS\system32\mplvpx.dll 2007-03-15 11:51:55 9216 --a------ C:\WINDOWS\system32\cpuinf32.dll 2007-03-15 11:51:44 755200 --a------ C:\WINDOWS\system32\ir50_32.dll 2007-03-15 11:49:40 765952 --a------ C:\WINDOWS\system32\xvidcore.dll 2007-03-15 11:48:14 0 d-------- C:\Program Files\MarBit 2007-03-15 11:43:08 0 d-------- C:\Program Files\SubEdit-Player<SUBEDI~1> 2007-03-14 23:01:13 0 d-------- C:\Program Files\ABBYY FineReader 8.0 Professional Edition<ABBYYF~1.0PR> 2007-03-14 22:36:16 0 d-------- C:\USDownloader<USDOWN~1> 2007-03-14 16:00:02 0 d-------- C:\WINDOWS\Sun 2007-03-14 15:56:52 0 d-------- C:\Program Files\Java 2007-03-14 15:54:13 0 d-------- C:\Program Files\Common Files\Java 2007-03-11 22:14:58 0 d-------- C:\obrazki 2007-03-10 00:06:28 0 d-------- C:\Program Files\Mozilla Firefox<MOZILL~2> 2007-03-09 20:31:08 0 d-------- C:\WINDOWS\system32\PreInstall<PREINS~1> 2007-03-09 20:31:07 22752 --a------ C:\WINDOWS\system32\spupdsvc.exe 2007-03-09 20:31:05 0 d--h----- C:\WINDOWS\$hf_mig$ 2007-03-09 18:27:16 0 d-------- C:\WINDOWS\system32\SoftwareDistribution<SOFTWA~1> 2007-03-09 14:18:32 0 d-------- C:\Program Files\Ubisoft 2007-03-09 14:08:16 0 d-------- C:\Program Files\Teleport Pro<TELEPO~1> 2007-03-09 12:31:58 66591 --a------ C:\WINDOWS\system32\drivers\el90xbc5.sys 2007-03-07 19:27:53 0 d-------- C:\Program Files\Common Files\Adobe Systems Shared<ADOBES~1> 2007-03-07 19:25:08 0 d-------- C:\Program Files\Common Files\Adobe 2007-03-07 15:26:48 115880 -----n--- C:\WINDOWS\system32\pxinsi64.exe 2007-03-07 15:26:48 129784 -----n--- C:\WINDOWS\system32\pxafs.dll 2007-03-07 15:26:48 36528 -----n--- C:\WINDOWS\system32\drivers\PxHelp20.sys 2007-03-07 15:26:48 2560 -----n--- C:\WINDOWS\system32\drivers\cdralw2k.sys 2007-03-07 15:26:48 2432 -----n--- C:\WINDOWS\system32\drivers\cdr4_xp.sys 2007-03-07 15:25:54 0 d-------- C:\WINDOWS\RegisteredPackages<REGIST~2> 2007-03-07 15:24:05 0 d-------- C:\Program Files\Winamp 2007-03-06 18:04:56 1974272 --a------ C:\CoD2MP_s.exe 2007-03-06 17:01:29 0 --a------ C:\WINDOWS\nsreg.dat 2007-03-06 16:42:30 0 d-------- C:\Program Files\Gadu-Gadu<GADU-G~1> 2007-03-06 16:17:41 0 d-------- C:\WINDOWS\Microsoft.NET<MICROS~1.NET> 2007-03-06 16:17:41 0 dr--s---- C:\WINDOWS\assembly 2007-03-06 16:17:38 0 d-------- C:\WINDOWS\system32\URTTemp 2007-03-06 16:16:18 516096 -----n--- C:\WINDOWS\system32\ati2sgag.exe 2007-03-06 16:16:12 307200 -ra------ C:\WINDOWS\system32\atiiiexx.dll 2007-03-06 16:16:07 95617 -ra------ C:\WINDOWS\system32\atiicdxx.dat 2007-03-06 16:16:01 0 d-------- C:\WINDOWS\system32\ReinstallBackups<REINST~1> 2007-03-06 16:15:47 0 d-------- C:\Program Files\ATI Technologies<ATITEC~1> 2007-03-06 16:15:07 0 d-------- C:\Program Files\Common Files\InstallShield<INSTAL~1> 2007-03-06 16:14:24 0 d--hs---- C:\Recycled 2007-03-06 16:11:46 74396 --a------ C:\WINDOWS\system32\drivers\klin.dat 2007-03-06 16:11:46 75932 --a------ C:\WINDOWS\system32\drivers\klick.dat 2007-03-06 16:11:37 0 d-------- C:\Program Files\Kaspersky Lab<KASPER~1> 2007-03-06 16:11:35 32 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat 2007-03-06 16:11:35 32 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat 2007-03-06 16:11:04 0 d-------- C:\KAV 2007-03-06 16:09:44 0 d-------- C:\Program Files\ewido anti-spyware 4.0<EWIDOA~1.0> 2007-03-06 16:00:25 32768 --a------ C:\WINDOWS\system32\WooDial2000.dll<WOODIA~1.DLL> 2007-03-06 15:59:43 52736 -ra------ C:\WINDOWS\system32\drivers\CnxTgNW.sys 2007-03-06 15:59:19 618112 -ra------ C:\WINDOWS\system32\drivers\CnxEtU.sys 2007-03-06 15:59:19 131072 -ra------ C:\WINDOWS\system32\drivers\CnxEtP.sys 2007-03-06 15:59:19 2719744 -ra------ C:\WINDOWS\system32\cnxci.dll 2007-03-06 15:58:46 0 d-------- C:\Program Files\ZTE Corporation<ZTECOR~1> 2007-03-06 15:57:03 0 d-------- C:\Program Files\Neostrada TP<NEOSTR~1> 2007-03-06 15:56:43 0 d--hs---- C:\WINDOWS\ftpcache 2007-03-06 15:52:38 0 d-------- C:\Program Files\Opera 2007-03-06 15:52:06 545 --a------ C:\WINDOWS\UC.PIF 2007-03-06 15:52:06 545 --a------ C:\WINDOWS\RAR.PIF 2007-03-06 15:52:06 545 --a------ C:\WINDOWS\PKZIP.PIF 2007-03-06 15:52:06 545 --a------ C:\WINDOWS\PKUNZIP.PIF 2007-03-06 15:52:06 545 --a------ C:\WINDOWS\NOCLOSE.PIF 2007-03-06 15:52:06 545 --a------ C:\WINDOWS\LHA.PIF 2007-03-06 15:52:06 545 --a------ C:\WINDOWS\ARJ.PIF 2007-03-06 15:52:05 0 d-------- C:\totalcmd 2007-03-06 15:51:38 4221 --a------ C:\WINDOWS\mozver.dat 2007-03-06 15:51:33 0 d-------- C:\Program Files\Mozilla Thunderbird<MOZILL~1> 2007-03-06 15:48:47 0 d-------- C:\Program Files\AutoConnect<AUTOCO~1> 2007-03-06 15:48:03 49152 --a------ C:\WINDOWS\system32\ssusbpn.dll 2007-03-06 15:48:03 65536 --a------ C:\WINDOWS\system32\ssdevm.dll 2007-03-06 15:47:33 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1> 2007-03-06 15:47:32 454656 --a------ C:\WINDOWS\ssndii.exe 2007-03-06 15:47:30 21776 --a------ C:\WINDOWS\system32\msxml2a.dll 2007-03-06 15:47:29 82432 --a------ C:\WINDOWS\system32\msxml4r.dll 2007-03-06 15:47:29 44544 --a------ C:\WINDOWS\system32\msxml4a.dll 2007-03-06 15:47:28 0 d-------- C:\WINDOWS\Xerox 2007-03-06 15:47:28 1233920 --a------ C:\WINDOWS\system32\msxml4.dll 2007-03-06 15:45:31 25856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys 2007-03-06 15:44:15 22663 -----n--- C:\WINDOWS\system32\XRXG1LMK.DLL 2007-03-06 15:44:11 151552 --a------ C:\WINDOWS\system32\XRXG1CI.exe 2007-03-06 15:44:11 57344 --a------ C:\WINDOWS\system32\XRXG1CI.dll 2007-03-06 15:44:11 0 d-------- C:\WINDOWS\system32\drivers\Xerox 2007-03-06 15:44:10 41984 -----n--- C:\WINDOWS\system32\drivers\DGIVECP.SYS 2007-03-06 15:43:43 6400 --a------ C:\WINDOWS\system32\drivers\splitter.sys 2007-03-06 15:43:40 82944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys 2007-03-06 15:43:36 52864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys 2007-03-06 15:43:32 54272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys 2007-03-06 15:43:28 142464 --a------ C:\WINDOWS\system32\drivers\aec.sys 2007-03-06 15:43:21 171776 --a------ C:\WINDOWS\system32\drivers\kmixer.sys 2007-03-06 15:43:18 2944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys 2007-03-06 15:43:15 60800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys 2007-03-06 15:43:11 7552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys 2007-03-06 15:43:08 4992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys 2007-03-06 15:43:04 5376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2007-03-06 15:42:47 145792 --a------ C:\WINDOWS\system32\drivers\portcls.sys 2007-03-06 15:42:44 4096 --a------ C:\WINDOWS\system32\ksuser.dll 2007-03-06 15:42:41 60288 --a------ C:\WINDOWS\system32\drivers\drmk.sys 2007-03-06 15:42:26 32768 --a------ C:\WINDOWS\system32\udaprop.dll 2007-03-06 15:42:26 1454080 --a------ C:\WINDOWS\system\SmWizard.exe 2007-03-06 15:42:25 812416 --a------ C:\WINDOWS\system32\drivers\cmuda.sys 2007-03-06 15:42:25 151552 --a------ C:\WINDOWS\system32\cmuda.dll 2007-03-06 15:42:25 233472 --a------ C:\WINDOWS\system32\cmirmdrv.exe 2007-03-06 15:42:25 28672 --a------ C:\WINDOWS\system32\cmirmdrv.dll 2007-03-06 15:42:25 917504 --a------ C:\WINDOWS\system\cmids3d.dll 2007-03-06 15:42:24 712704 --a------ C:\WINDOWS\system32\Audio3D.dll 2007-03-06 15:42:24 712704 --a------ C:\WINDOWS\system32\a3d.dll 2007-03-06 15:42:19 266240 --a------ C:\WINDOWS\CMIUninstall.exe<CMIUNI~1.EXE> 2007-03-06 15:42:19 225280 --a------ C:\WINDOWS\CmiRmRedundDir.exe<CMIRMR~1.EXE> 2007-03-06 15:42:19 28672 --a------ C:\WINDOWS\CMIRmDriver.dll<CMIRMD~1.DLL> 2007-03-06 15:42:19 0 d-------- C:\Program Files\C-Media 3D Audio<C-MEDI~1> 2007-03-06 15:42:03 306688 --a------ C:\WINDOWS\IsUninst.exe 2007-03-06 15:41:29 5824 --a------ C:\WINDOWS\system32\drivers\ASUSHWIO.SYS 2007-03-06 15:37:58 0 d-------- C:\WINDOWS\SoftwareDistribution<SOFTWA~1> 2007-03-06 15:37:58 0 d--hs---- C:\System Volume Information<SYSTEM~1> 2007-03-06 15:37:57 0 d-------- C:\WINDOWS\Prefetch 2007-03-06 15:31:52 0 d-------- C:\WINDOWS\system32\xircom 2007-03-06 15:31:52 0 d-------- C:\Program Files\microsoft frontpage<MICROS~1> 2007-03-06 15:31:31 0 -rahs---- C:\MSDOS.SYS 2007-03-06 15:31:31 0 -rahs---- C:\IO.SYS 2007-03-06 15:31:31 0 --a------ C:\CONFIG.SYS 2007-03-06 15:31:31 0 --a------ C:\AUTOEXEC.BAT 2007-03-06 15:31:11 112128 --a------ C:\WINDOWS\system32\mapi32.dll 2007-03-06 15:30:08 0 dr------- C:\WINDOWS\Offline Web Pages<OFFLIN~1> 2007-03-06 15:30:07 0 d---s---- C:\WINDOWS\Downloaded Program Files<DOWNLO~1> 2007-03-06 15:29:56 0 d--h----- C:\Program Files\WindowsUpdate<WINDOW~3> 2007-03-06 15:29:52 0 d-------- C:\Program Files\Usługi online<USŁUGI~1> 2007-03-06 15:29:27 0 d-------- C:\WINDOWS\system32\DirectX 2007-03-06 15:28:56 11264 --a------ C:\WINDOWS\system32\atrace.dll 2007-03-06 15:28:45 12288 --a------ C:\WINDOWS\system32\nmevtmsg.dll 2007-03-06 15:28:44 67584 --a------ C:\WINDOWS\system32\acctres.dll 2007-03-06 15:28:39 0 d---s---- C:\WINDOWS\Tasks 2007-03-06 15:28:39 16384 --a------ C:\WINDOWS\system32\icfgnt5.dll 2007-03-06 15:28:38 0 d-------- C:\Program Files\Common Files\MSSoap 2007-03-06 15:28:33 0 d-------- C:\WINDOWS\srchasst 2007-03-06 15:28:31 0 d-------- C:\WINDOWS\system32\Macromed 2007-03-06 15:28:27 173536 --a------ C:\WINDOWS\system32\wuweb.dll 2007-03-06 15:28:27 128280 --a------ C:\WINDOWS\system32\wucltui.dll 2007-03-06 15:28:27 6656 --a------ C:\WINDOWS\system32\wuauserv.dll 2007-03-06 15:28:27 195352 --a------ C:\WINDOWS\system32\wuaueng1.dll 2007-03-06 15:28:26 41240 --a------ C:\WINDOWS\system32\wups.dll 2007-03-06 15:28:26 1343768 --a------ C:\WINDOWS\system32\wuaueng.dll 2007-03-06 15:28:26 175384 --a------ C:\WINDOWS\system32\wuauclt1.exe 2007-03-06 15:28:25 125208 --a------ C:\WINDOWS\system32\wuauclt.exe 2007-03-06 15:28:25 466200 --a------ C:\WINDOWS\system32\wuapi.dll 2007-03-06 15:28:25 18944 --a------ C:\WINDOWS\system32\qmgrprxy.dll 2007-03-06 15:28:25 7168 --a------ C:\WINDOWS\system32\bitsprx3.dll 2007-03-06 15:28:25 8192 --a------ C:\WINDOWS\system32\bitsprx2.dll 2007-03-06 15:28:24 382464 --a------ C:\WINDOWS\system32\qmgr.dll 2007-03-06 15:28:19 0 d-------- C:\Program Files\Movie Maker<MOVIEM~1> 2007-03-06 15:28:14 45568 --a------ C:\WINDOWS\system32\safrslv.dll 2007-03-06 15:28:14 29696 --a------ C:\WINDOWS\system32\safrdm.dll 2007-03-06 15:28:14 43520 --a------ C:\WINDOWS\system32\safrcdlg.dll 2007-03-06 15:28:14 43520 --a------ C:\WINDOWS\system32\racpldlg.dll 2007-03-06 15:28:09 240128 --a------ C:\WINDOWS\system32\srrstr.dll 2007-03-06 15:28:09 0 d-------- C:\WINDOWS\system32\Restore 2007-03-06 15:28:09 22528 --a------ C:\WINDOWS\system32\fltMc.exe 2007-03-06 15:28:09 16896 --a------ C:\WINDOWS\system32\fltlib.dll 2007-03-06 15:28:09 124800 --a------ C:\WINDOWS\system32\drivers\fltMgr.sys 2007-03-06 15:28:08 171008 --a------ C:\WINDOWS\system32\srsvc.dll 2007-03-06 15:28:08 67584 --a------ C:\WINDOWS\system32\srclient.dll 2007-03-06 15:28:08 81920 --a------ C:\WINDOWS\system32\ils.dll 2007-03-06 15:28:08 73472 --a------ C:\WINDOWS\system32\drivers\sr.sys 2007-03-06 15:28:07 28672 --a------ C:\WINDOWS\system32\nmmkcert.dll 2007-03-06 15:28:07 69632 --a------ C:\WINDOWS\system32\msconf.dll 2007-03-06 15:28:07 32768 --a------ C:\WINDOWS\system32\mnmsrvc.exe 2007-03-06 15:28:07 34560 --a------ C:\WINDOWS\system32\mnmdd.dll 2007-03-06 15:28:07 32768 --a------ C:\WINDOWS\system32\isrdbg32.dll 2007-03-06 15:28:04 105984 --a------ C:\WINDOWS\system32\msoert2.dll 2007-03-06 15:28:03 252928 --a------ C:\WINDOWS\system32\msoeacct.dll 2007-03-06 15:28:02 49664 --a------ C:\WINDOWS\system32\inetres.dll 2007-03-06 15:28:02 678400 --a------ C:\WINDOWS\system32\inetcomm.dll 2007-03-06 15:27:59 192000 --a------ C:\WINDOWS\system32\schedsvc.dll 2007-03-06 15:27:59 12288 --a------ C:\WINDOWS\system32\mstinit.exe 2007-03-06 15:27:59 278528 --a------ C:\WINDOWS\system32\mstask.dll 2007-03-06 15:27:58 86016 --a------ C:\WINDOWS\system32\isign32.dll 2007-03-06 15:27:58 278528 --a------ C:\WINDOWS\system32\inetcfg.dll 2007-03-06 15:27:58 65536 --a------ C:\WINDOWS\system32\icwphbk.dll 2007-03-06 15:27:58 73728 --a------ C:\WINDOWS\system32\icwdial.dll 2007-03-06 15:27:13 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat<EMPTYR~1.DAT> 2007-03-06 15:26:52 0 d-------- C:\WINDOWS\Registration<REGIST~1> 2007-03-06 15:26:36 0 d-------- C:\Program Files\Messenger<MESSEN~1> 2007-03-06 15:26:31 5632 --a------ C:\WINDOWS\system32\write.exe 2007-03-06 15:26:31 0 d-------- C:\Program Files\MSN Gaming Zone<MSNGAM~1> 2007-03-06 15:26:13 139264 --a------ C:\WINDOWS\system32\sndvol32.exe 2007-03-06 15:26:13 44544 --a------ C:\WINDOWS\system32\hticons.dll 2007-03-06 15:26:12 35328 --a------ C:\WINDOWS\system32\winchat.exe 2007-03-06 15:26:12 73216 --a------ C:\WINDOWS\system32\avwav.dll 2007-03-06 15:26:12 231424 --a------ C:\WINDOWS\system32\avtapi.dll 2007-03-06 15:26:12 16384 --a------ C:\WINDOWS\system32\avmeter.dll 2007-03-06 15:26:02 605696 --a------ C:\WINDOWS\system32\getuname.dll 2007-03-06 15:26:01 80896 --a------ C:\WINDOWS\system32\charmap.exe 2007-03-06 15:26:01 115200 --a------ C:\WINDOWS\system32\calc.exe 2007-03-06 15:26:00 119808 --a------ C:\WINDOWS\system32\winmine.exe 2007-03-06 15:26:00 57344 --a------ C:\WINDOWS\system32\sol.exe 2007-03-06 15:26:00 128000 --a------ C:\WINDOWS\system32\mshearts.exe 2007-03-06 15:26:00 55808 --a------ C:\WINDOWS\system32\freecell.exe 2007-03-06 15:25:59 1225 --a------ C:\WINDOWS\system32\usrlogon.cmd 2007-03-06 15:25:59 17920 --a------ C:\WINDOWS\system32\tsshutdn.exe 2007-03-06 15:25:59 16384 --a------ C:\WINDOWS\system32\tskill.exe 2007-03-06 15:25:59 15360 --a------ C:\WINDOWS\system32\tsdiscon.exe 2007-03-06 15:25:59 15360 --a------ C:\WINDOWS\system32\tscon.exe 2007-03-06 15:25:59 9728 --a------ C:\WINDOWS\system32\reset.exe 2007-03-06 15:25:58 15360 --a------ C:\WINDOWS\system32\shadow.exe 2007-03-06 15:25:58 16384 --a------ C:\WINDOWS\system32\rwinsta.exe 2007-03-06 15:25:58 33792 --a------ C:\WINDOWS\system32\regini.exe 2007-03-06 15:25:58 4608 --a------ C:\WINDOWS\system32\rdpcfgex.dll 2007-03-06 15:25:58 22528 --a------ C:\WINDOWS\system32\qwinsta.exe 2007-03-06 15:25:58 17408 --a------ C:\WINDOWS\system32\qappsrv.exe 2007-03-06 15:25:58 22528 --a------ C:\WINDOWS\system32\msg.exe 2007-03-06 15:25:58 15872 --a------ C:\WINDOWS\system32\logoff.exe 2007-03-06 15:25:58 15872 --a------ C:\WINDOWS\system32\cdmodem.dll 2007-03-06 15:25:56 54272 --a------ C:\WINDOWS\system32\stclient.dll 2007-03-06 15:25:56 25088 --a------ C:\WINDOWS\system32\mtxlegih.dll 2007-03-06 15:25:56 4096 --a------ C:\WINDOWS\system32\mtxex.dll 2007-03-06 15:25:56 20480 --a------ C:\WINDOWS\system32\mtxdm.dll 2007-03-06 15:25:56 5120 --a------ C:\WINDOWS\system32\dcomcnfg.exe 2007-03-06 15:25:56 82432 --a------ C:\WINDOWS\system32\comrepl.dll 2007-03-06 15:25:56 25600 --a------ C:\WINDOWS\system32\comaddin.dll 2007-03-06 15:25:55 147456 --a------ C:\WINDOWS\system32\comsnap.dll 2007-03-06 15:25:46 187904 --a------ C:\WINDOWS\system32\accwiz.exe 2007-03-06 15:25:45 132608 --a------ C:\WINDOWS\system32\sndrec32.exe 2007-03-06 15:25:45 124928 --a------ C:\WINDOWS\system32\mplay32.exe 2007-03-06 15:25:45 349696 --a------ C:\WINDOWS\system32\hypertrm.dll 2007-03-06 15:25:44 345088 --a------ C:\WINDOWS\system32\mspaint.exe 2007-03-06 15:25:44 103424 --a------ C:\WINDOWS\system32\clipbrd.exe 2007-03-06 15:25:44 0 d-------- C:\Program Files\Windows NT<WINDOW~1> 2007-03-06 15:25:43 94720 --a------ C:\WINDOWS\system32\tscfgwmi.dll 2007-03-06 15:25:43 539136 --a------ C:\WINDOWS\system32\spider.exe 2007-03-06 15:25:43 21896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys 2007-03-06 15:25:43 12040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys 2007-03-06 15:25:43 139400 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys 2007-03-06 15:25:42 141824 --a------ C:\WINDOWS\system32\sessmgr.exe 2007-03-06 15:25:42 60928 --a------ C:\WINDOWS\system32\remotepg.dll 2007-03-06 15:25:42 67072 --a------ C:\WINDOWS\system32\rdshost.exe 2007-03-06 15:25:42 13824 --a------ C:\WINDOWS\system32\rdsaddin.exe 2007-03-06 15:25:42 655360 --a------ C:\WINDOWS\system32\mstscax.dll 2007-03-06 15:25:42 408576 --a------ C:\WINDOWS\system32\mstsc.exe 2007-03-06 15:25:41 44544 --a------ C:\WINDOWS\system32\tscupgrd.exe 2007-03-06 15:25:41 296448 --a------ C:\WINDOWS\system32\termsrv.dll 2007-03-06 15:25:41 87176 --a------ C:\WINDOWS\system32\rdpwsx.dll 2007-03-06 15:25:41 19968 --a------ C:\WINDOWS\system32\rdpsnd.dll 2007-03-06 15:25:41 62464 --a------ C:\WINDOWS\system32\rdpclip.exe 2007-03-06 15:25:41 147968 --a------ C:\WINDOWS\system32\rdchost.dll 2007-03-06 15:25:40 20992 --a------ C:\WINDOWS\system32\qprocess.exe 2007-03-06 15:25:40 90112 --a------ C:\WINDOWS\system32\mtxoci.dll 2007-03-06 15:25:40 161280 --a------ C:\WINDOWS\system32\msdtcuiu.dll 2007-03-06 15:25:40 0 d-------- C:\WINDOWS\system32\MsDtc 2007-03-06 15:25:40 11264 --a------ C:\WINDOWS\system32\icaapi.dll 2007-03-06 15:25:40 38912 --a------ C:\WINDOWS\system32\cfgbkend.dll 2007-03-06 15:25:39 11776 --a------ C:\WINDOWS\system32\xolehlp.dll 2007-03-06 15:25:39 949248 --a------ C:\WINDOWS\system32\msdtctm.dll 2007-03-06 15:25:39 425472 --a------ C:\WINDOWS\system32\msdtcprx.dll 2007-03-06 15:25:39 58880 --a------ C:\WINDOWS\system32\msdtclog.dll 2007-03-06 15:25:39 6144 --a------ C:\WINDOWS\system32\msdtc.exe 2007-03-06 15:25:38 0 d-------- C:\WINDOWS\system32\Com 2007-03-06 15:25:38 62464 --a------ C:\WINDOWS\system32\colbact.dll 2007-03-06 15:25:37 110080 --a------ C:\WINDOWS\system32\clbcatex.dll 2007-03-06 15:25:37 628224 --a------ C:\WINDOWS\system32\catsrvut.dll 2007-03-06 15:25:37 85504 --a------ C:\WINDOWS\system32\catsrvps.dll 2007-03-06 15:25:37 229888 --a------ C:\WINDOWS\system32\catsrv.dll 2007-03-06 15:25:36 540160 --a------ C:\WINDOWS\system32\comuid.dll 2007-03-06 15:25:36 1251840 --a------ C:\WINDOWS\system32\comsvcs.dll 2007-03-06 15:25:36 501248 --a------ C:\WINDOWS\system32\clbcatq.dll 2007-03-06 15:25:26 56320 --a------ C:\WINDOWS\system32\servdeps.dll 2007-03-06 15:25:26 17920 --a------ C:\WINDOWS\system32\mmfutil.dll 2007-03-06 15:25:26 58880 --a------ C:\WINDOWS\system32\licwmi.dll 2007-03-06 15:25:26 187904 --a------ C:\WINDOWS\system32\cmprops.dll 2007-03-06 15:25:22 196864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys 2007-03-06 15:25:21 40840 --a------ C:\WINDOWS\system32\drivers\termdd.sys 2007-03-06 15:22:36 3072 --a------ C:\WINDOWS\system32\drivers\audstub.sys 2007-03-06 15:21:55 58624 --a------ C:\WINDOWS\system32\drivers\redbook.sys 2007-03-06 15:21:20 1273344 --a------ C:\WINDOWS\system32\drivers\ati2mtag.sys 2007-03-06 15:21:20 639872 --a------ C:\WINDOWS\system32\ativvaxx.dll 2007-03-06 15:21:20 2365472 --a------ C:\WINDOWS\system32\ati3duag.dll 2007-03-06 15:21:20 870784 --a------ C:\WINDOWS\system32\ati3d1ag.dll 2007-03-06 15:21:20 205312 --a------ C:\WINDOWS\system32\ati2dvag.dll 2007-03-06 15:21:20 212992 --a------ C:\WINDOWS\system32\ati2cqag.dll 2007-03-06 15:21:10 27165 --a------ C:\WINDOWS\system32\drivers\fetnd5.sys 2007-03-06 15:21:07 77312 --a------ C:\WINDOWS\system32\usbui.dll 2007-03-06 15:21:02 44672 --a------ C:\WINDOWS\system32\drivers\UAGP35.SYS 2007-03-06 15:21:00 10624 --a------ C:\WINDOWS\system32\drivers\gameenum.sys 2007-03-06 15:19:54 0 d--hs---- C:\WINDOWS\Installer<INSTAL~1> 2007-03-06 15:19:54 0 d-------- C:\Program Files\Common Files\ODBC 2007-03-06 15:19:49 0 dr------- C:\Program Files<PROGRA~1> 2007-03-06 15:19:49 0 d-------- C:\Program Files\Common Files\SpeechEngines<SPEECH~1> 2007-03-06 15:19:45 5632 -ra------ C:\WINDOWS\system32\kbdazel.dll 2007-03-06 15:19:44 6144 -ra------ C:\WINDOWS\system32\kbdtuq.dll 2007-03-06 15:19:44 6144 -ra------ C:\WINDOWS\system32\kbdtuf.dll 2007-03-06 15:19:42 5632 -ra------ C:\WINDOWS\system32\kbdmon.dll 2007-03-06 15:19:42 5632 -ra------ C:\WINDOWS\system32\kbdkyr.dll 2007-03-06 15:19:38 8192 -ra------ C:\WINDOWS\system32\kbdhept.dll 2007-03-06 15:19:38 6656 -ra------ C:\WINDOWS\system32\kbdhela3.dll 2007-03-06 15:19:38 6144 -ra------ C:\WINDOWS\system32\kbdhela2.dll 2007-03-06 15:19:38 5632 -ra------ C:\WINDOWS\system32\kbdhe319.dll 2007-03-06 15:19:38 5632 -ra------ C:\WINDOWS\system32\kbdhe220.dll 2007-03-06 15:19:38 5632 -ra------ C:\WINDOWS\system32\kbdhe.dll 2007-03-06 15:19:38 6144 -ra------ C:\WINDOWS\system32\kbdgkl.dll 2007-03-06 15:19:36 6144 -ra------ C:\WINDOWS\system32\kbdlv1.dll 2007-03-06 15:19:36 6144 -ra------ C:\WINDOWS\system32\kbdlv.dll 2007-03-06 15:19:36 5632 -ra------ C:\WINDOWS\system32\kbdlt1.dll 2007-03-06 15:19:36 5632 -ra------ C:\WINDOWS\system32\kbdlt.dll 2007-03-06 15:19:36 6144 -ra------ C:\WINDOWS\system32\kbdest.dll 2007-03-06 15:19:31 6656 --a------ C:\WINDOWS\system32\kbdsl1.dll 2007-03-06 15:19:31 6656 --a------ C:\WINDOWS\system32\kbdsl.dll 2007-03-06 15:19:31 5632 --a------ C:\WINDOWS\system32\kbdro.dll 2007-03-06 15:19:31 5632 --a------ C:\WINDOWS\system32\kbdhu1.dll 2007-03-06 15:19:31 6656 --a------ C:\WINDOWS\system32\kbdhu.dll 2007-03-06 15:19:31 6656 --a------ C:\WINDOWS\system32\kbdcz2.dll 2007-03-06 15:19:31 6656 --a------ C:\WINDOWS\system32\kbdcz1.dll 2007-03-06 15:19:31 7168 --a------ C:\WINDOWS\system32\kbdcz.dll 2007-03-06 15:19:31 6656 --a------ C:\WINDOWS\system32\kbdcr.dll 2007-03-06 15:19:31 6656 --a------ C:\WINDOWS\system32\KBDAL.DLL 2007-03-06 15:19:30 6656 --a------ C:\WINDOWS\system32\kbdycl.dll 2007-03-06 15:19:30 13312 --a------ C:\WINDOWS\system32\irclass.dll 2007-03-06 15:19:29 24661 --a------ C:\WINDOWS\system32\spxcoins.dll 2007-03-06 15:19:29 103424 --a------ C:\WINDOWS\system32\EqnClass.Dll 2007-03-06 15:19:29 85532 --a------ C:\WINDOWS\system32\dgsetup.dll 2007-03-06 15:19:29 176157 --a------ C:\WINDOWS\system32\dgrpsetu.dll 2007-03-06 15:19:29 9168 --a------ C:\WINDOWS\system\VER.DLL 2007-03-06 15:19:28 19200 --a------ C:\WINDOWS\system\TAPI.DLL 2007-03-06 15:19:28 5120 --a------ C:\WINDOWS\system\SHELL.DLL 2007-03-06 15:19:28 24064 --a------ C:\WINDOWS\system\OLESVR.DLL 2007-03-06 15:19:28 83456 --a------ C:\WINDOWS\system\OLECLI.DLL 2007-03-06 15:19:28 127008 --a------ C:\WINDOWS\system\MSVIDEO.DLL 2007-03-06 15:19:27 9936 --a------ C:\WINDOWS\system\LZEXPAND.DLL 2007-03-06 15:19:27 33376 --a------ C:\WINDOWS\system\COMMDLG.DLL 2007-03-06 15:19:27 109488 --a------ C:\WINDOWS\system\AVIFILE.DLL 2007-03-06 15:19:26 15360 --a------ C:\WINDOWS\TASKMAN.EXE 2007-03-06 15:19:26 11264 --a------ C:\WINDOWS\system32\drivers\irenum.sys 2007-03-06 15:19:26 8704 --a------ C:\WINDOWS\system32\batt.dll 2007-03-06 15:19:26 70096 --a------ C:\WINDOWS\system\AVICAP.DLL 2007-03-06 15:19:25 69552 --a------ C:\WINDOWS\system\MMSYSTEM.DLL 2007-03-06 15:19:25 70144 --a------ C:\WINDOWS\NOTEPAD.EXE 2007-03-06 15:19:24 75776 --a------ C:\WINDOWS\system32\storprop.dll 2007-03-06 15:19:01 0 d-------- C:\WINDOWS\system32\CatRoot2 2007-03-06 15:19:01 0 d-------- C:\WINDOWS\system32\CatRoot 2007-03-06 15:18:28 0 d-------- C:\Documents and Settings<DOCUME~1> 2007-03-06 15:11:08 0 d-------- C:\WINDOWS 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\WinSxS 2007-03-06 15:11:08 0 dr------- C:\WINDOWS\Web 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\twain_32 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\wins 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\wbem 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\usmt 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\spool 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\ShellExt 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\Setup 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\ras 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\oobe 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\npp 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\mui 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\inetsrv 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\IME 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\icsxml 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\ias 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\export 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\drivers 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\drivers\etc 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\drivers\disdn 2007-03-06 15:11:08 0 dr-hs---- C:\WINDOWS\system32\dllcache 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\dhcp 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\config 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\3com_dmi 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\3076 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\2052 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\1054 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\1045 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\1042 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\1041 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\1037 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\1033 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\1031 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\1028 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system32\1025 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\system 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\security 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\Resources<RESOUR~1> 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\repair 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\Provisioning<PROVIS~1> 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\PeerNet 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\pchealth 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\mui 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\msapps 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\msagent 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\Media 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\java 2007-03-06 15:11:08 0 d--h----- C:\WINDOWS\inf 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\ime 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\Help 2007-03-06 15:11:08 0 dr--s---- C:\WINDOWS\Fonts 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\ehome 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\Driver Cache<DRIVER~1> 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\Debug 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\Cursors 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\Connection Wizard<CONNEC~1> 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\Config 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\AppPatch 2007-03-06 15:11:08 0 d-------- C:\WINDOWS\addins -- Find3M Report --------------------------------------------------------------- 2007-03-25 22:52:14 373898 --a------ C:\WINDOWS\system32\perfh015.dat 2007-03-25 22:52:14 59764 --a------ C:\WINDOWS\system32\perfc015.dat 2007-03-25 19:57:52 0 d-------- C:\Documents and Settings\Admin SwaT\Dane aplikacji\Hamachi 2007-03-14 23:04:10 0 d-------- C:\Documents and Settings\Admin SwaT\Dane aplikacji\ABBYY 2007-03-14 16:00:02 0 d-------- C:\Documents and Settings\Admin SwaT\Dane aplikacji\Sun 2007-03-07 20:13:58 0 d-------- C:\Documents and Settings\Admin SwaT\Dane aplikacji\Adobe 2007-03-06 18:15:10 0 d-------- C:\Documents and Settings\Admin SwaT\Dane aplikacji\Macromedia<MACROM~1> 2007-03-06 17:01:38 0 d-------- C:\Documents and Settings\Admin SwaT\Dane aplikacji\Talkback 2007-03-06 17:01:24 0 d-------- C:\Documents and Settings\Admin SwaT\Dane aplikacji\Thunderbird<THUNDE~1> 2007-03-06 16:27:46 0 d-------- C:\Documents and Settings\Admin SwaT\Dane aplikacji\Opera 2007-03-06 16:26:38 0 d-------- C:\Documents and Settings\Admin SwaT\Dane aplikacji\ATI 2007-03-06 15:51:38 0 d-------- C:\Documents and Settings\Admin SwaT\Dane aplikacji\Mozilla 2007-03-06 15:40:32 0 d-------- C:\Documents and Settings\Admin SwaT\Dane aplikacji\Identities<IDENTI~1> 2007-03-06 15:19:16 62 --ahs---- C:\Documents and Settings\Admin SwaT\Dane aplikacji\desktop.ini 2007-03-06 15:18:56 0 d---s---- C:\Documents and Settings\Admin SwaT\Dane aplikacji\Microsoft<MICROS~1> 2007-01-29 23:04:00 200768 --a------ C:\WINDOWS\system32\klogon.dll -- Registry Dump --------------------------------------------------------------- [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe" "AutoConnect"="C:\\Program Files\\AutoConnect\\AutoConnect.exe" "Gadu-Gadu"="\"C:\\Program Files\\Gadu-Gadu\\gg.exe\" /tray" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "Cmaudio"="RunDll32 cmicnfg.cpl,CMICtrlWnd" "Xerox PanelMgr"="C:\\WINDOWS\\Xerox\\PanelMgr\\ssmmgr.exe /autorun" "CnxDslTaskBar"="\"c:\\program files\\zte corporation\\zxdsl852\\CnxDslTb.exe\" \"ZTE Corporation\\ZXDSL852\"" "WOOWATCH"="C:\\PROGRA~1\\NEOSTR~1\\Watch.exe" "WOOTASKBARICON"="C:\\PROGRA~1\\NEOSTR~1\\TaskbarIcon.exe" "!ewido"="\"C:\\Program Files\\ewido anti-spyware 4.0\\ewido.exe\" /minimized" "AVP"="\"C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 6.0\\avp.exe\"" "ATICCC"="\"C:\\Program Files\\ATI Technologies\\ATI.ACE\\cli.exe\" runtime" "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_11\\bin\\jusched.exe\"" "DAEMON Tools"="\"C:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033" "BearShare"="\"C:\\Program Files\\BearShare\\BearShare.exe\" /pause" "NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "appinit_dlls"="C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="ewido anti-spyware 4.0" [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "DisableRegistryTools"=dword:00000000 [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] HTTPFilter REG_MULTI_SZ HTTPFilter\0\0 LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ DnsCache\0\0 DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 termsvcs REG_MULTI_SZ TermService\0\0 [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{cb36b222-d472-11db-a4da-00d0d08a4c43}] Shell\AutoRun\command E:\autorun.exe -- End of ComboScan: finished at 2007-03-25 at 22:57:57 ------------------------

**Posty:** 18165 · przez **wojtas** 25 Mar 2007, 23:25

ten folder skasuJ:

C:\Program Files\MyGlobalSearch

poszukaj w kasprzaku zeby Cie nie informowalo o atakach

logi / i problem z netem /kompem :/

logi / i problem z netem /kompem :/

Kto jest na forum