

Dopiero używając Unclera usuwam je. Ale mam pytanie czemu nie mogę ich w naturalny sposób usuwac?
ComboFix 09-09-04.02 - Robert 2009-09-05 17:18.22.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.48.1045.18.511.246 [GMT 2:00]
Uruchomiony z: c:\documents and settings\Robert\Pulpit\ComboFix.exe
AV: avast! antivirus 4.8.1351 [VPS 090904-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\Robert\Menu Start\Programy\AVI Codec Pack +
c:\documents and settings\Robert\Menu Start\Programy\AVI Codec Pack +\Check For Updates.lnk
c:\documents and settings\Robert\Menu Start\Programy\AVI Codec Pack +\Uninstall.lnk
c:\program files\AVI Codec Pack
c:\program files\AVI Codec Pack\AC3\ac3filter.ax
c:\program files\AVI Codec Pack\AC3\dialog_patch.exe
c:\program files\AVI Codec Pack\LAYER-3\L3CODECP.ACM
c:\program files\AVI Codec Pack\LAYER-3\RaMp3Cfg.exe
c:\program files\AVI Codec Pack\uninstall.exe
c:\program files\Dealio Toolbar
c:\program files\Dealio Toolbar\config.ini
c:\program files\Dealio Toolbar\DealioToolbarIE.dll
c:\program files\Dealio Toolbar\Res\amazon.gif
c:\program files\Dealio Toolbar\Res\apple.gif
c:\program files\Dealio Toolbar\Res\barnes.gif
c:\program files\Dealio Toolbar\Res\bestbuy.gif
c:\program files\Dealio Toolbar\Res\dealio_logo.gif
c:\program files\Dealio Toolbar\Res\dealio_logo_hover.gif
c:\program files\Dealio Toolbar\Res\ebay.gif
c:\program files\Dealio Toolbar\Res\icon_settings.gif
c:\program files\Dealio Toolbar\Res\macys.gif
c:\program files\Dealio Toolbar\Res\newegg.gif
c:\program files\Dealio Toolbar\Res\overstock.gif
c:\program files\Dealio Toolbar\Res\search-button-hover.gif
c:\program files\Dealio Toolbar\Res\search-button.gif
c:\program files\Dealio Toolbar\Res\search-chevron-hover.gif
c:\program files\Dealio Toolbar\Res\search-chevron.gif
c:\program files\Dealio Toolbar\Res\search_amazon.gif
c:\program files\Dealio Toolbar\Res\search_dealio.gif
c:\program files\Dealio Toolbar\Res\search_ebay.gif
c:\program files\Dealio Toolbar\Res\search_yahoo.gif
c:\program files\Dealio Toolbar\Res\separator.gif
c:\program files\Dealio Toolbar\Res\target.gif
c:\program files\Dealio Toolbar\Res\walmart.gif
c:\program files\Dealio Toolbar\Res\widgets.xml
c:\program files\Dealio Toolbar\SearchSettingsKit.exe
c:\program files\Dealio Toolbar\WidgiHelper.exe
c:\program files\Search Settings
c:\program files\Search Settings\kb128\SeARchsettings.dll
c:\program files\Search Settings\kb128\SearchSettingsRes409.dll
c:\program files\Search Settings\SearchSettings.exe
.
((((((((((((((((((((((((( Pliki utworzone od 2009-08-05 do 2009-09-05 )))))))))))))))))))))))))))))))
.
2009-09-04 19:32 . 2009-09-05 02:54 -------- d-----w- c:\program files\TC UP
2009-09-04 18:31 . 2009-09-04 18:31 -------- d-----w- c:\program files\Xvid
2009-09-04 17:47 . 2009-09-04 17:47 -------- d-----w- c:\program files\Common Files\FDRLab
2009-09-02 11:59 . 2009-09-02 11:59 -------- d-----w- c:\documents and settings\Robert\Dane aplikacji\DivX
2009-08-31 13:50 . 2009-08-31 13:50 -------- d-----w- c:\documents and settings\Robert\Dane aplikacji\Search Settings
2009-08-31 13:50 . 2009-08-31 13:50 -------- d-----w- c:\documents and settings\Robert\Dane aplikacji\Dealio
2009-08-31 13:44 . 2009-08-31 13:44 -------- d-----w- c:\windows\system32\custom matrices
2009-08-31 13:44 . 2009-08-31 13:44 -------- d-----w- c:\windows\system32\C2MP
2009-08-31 13:15 . 2009-08-31 13:15 -------- d-----w- c:\program files\videofixer
2009-08-31 13:06 . 2003-10-02 10:42 212992 ----a-w- c:\windows\system32\corona.dll
2009-08-24 08:35 . 2009-07-10 13:31 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll
2009-08-11 20:21 . 2009-08-11 20:21 87552 ----a-w- c:\windows\system32\ac3config.exe
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-03 16:11 . 2007-10-26 16:36 -------- d-----w- c:\documents and settings\Robert\Dane aplikacji\Skype
2009-09-03 16:11 . 2008-10-07 14:14 -------- d-----w- c:\documents and settings\Robert\Dane aplikacji\skypePM
2009-09-02 14:02 . 2009-03-28 21:24 -------- d-----w- c:\documents and settings\Robert\Dane aplikacji\ArcaMicroScan
2009-09-02 12:44 . 2009-07-06 17:21 -------- d-----w- c:\program files\KGB Archiver 2
2009-08-17 16:10 . 2009-02-19 05:23 1279456 ----a-w- c:\windows\system32\aswBoot.exe
2009-08-17 16:06 . 2009-02-19 05:24 93392 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-08-17 16:06 . 2009-02-19 05:24 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-08-17 16:05 . 2009-02-19 05:24 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-08-17 16:05 . 2009-02-19 05:24 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-08-17 16:04 . 2009-02-19 05:24 51376 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-08-17 16:04 . 2009-02-19 05:24 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-08-17 16:03 . 2009-02-19 05:24 26944 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-08-17 16:02 . 2009-02-19 05:24 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-08-05 09:01 . 2006-03-02 12:00 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-04 15:58 . 2009-08-04 15:58 802603 ----a-w- c:\windows\system32\ff_x264.dll
2009-08-04 15:57 . 2009-08-04 15:57 557003 ----a-w- c:\windows\system32\libmplayer.dll
2009-08-04 13:07 . 2009-08-04 13:07 4455179 ----a-w- c:\windows\system32\libavcodec.dll
2009-07-17 19:04 . 2006-03-02 12:00 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-14 13:19 . 2009-07-14 13:19 425040 ----a-w- c:\windows\system32\TomsMoComp_ff.dll
2009-07-14 12:31 . 2009-07-14 12:31 146098 ----a-w- c:\windows\system32\libmpeg2_ff.dll
2009-07-13 08:08 . 2006-03-02 12:00 286720 ----a-w- c:\windows\system32\wmpdxm.dll
2009-06-26 16:51 . 2006-03-02 12:00 669184 ------w- c:\windows\system32\wininet.dll
2009-06-26 16:51 . 2006-03-02 12:00 81920 ----a-w- c:\windows\system32\ieencode.dll
2009-06-21 19:20 . 2007-10-17 13:15 93744 ----a-w- c:\documents and settings\Robert\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
2009-06-16 14:40 . 2006-03-02 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-06-16 14:40 . 2006-03-02 12:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-06-15 10:45 . 2006-03-02 12:00 78336 ----a-w- c:\windows\system32\telnet.exe
2009-06-10 14:15 . 2006-03-02 12:00 84992 ----a-w- c:\windows\system32\avifil32.dll
2009-06-10 07:22 . 2007-10-17 12:41 2066432 ----a-w- c:\windows\system32\mstscax.dll
2009-06-10 06:16 . 2006-03-02 12:00 132096 ----a-w- c:\windows\system32\wkssvc.dll
.
((((((((((((((((((((((((((((( SnapShot_2009-08-27_13.23.29 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-09-05 12:21 . 2009-09-05 12:21 16384 c:\windows\temp\Perflib_Perfdata_520.dat
+ 2008-06-08 22:58 . 2008-06-08 22:58 60273 c:\windows\system32\pthreadGC2.dll
+ 2002-10-04 23:04 . 2002-10-04 23:04 45056 c:\windows\system32\ogg.dll
+ 2001-02-26 12:01 . 2001-02-26 12:01 45056 c:\windows\system32\msasf.exe
+ 2002-05-15 23:38 . 2002-05-15 23:38 91136 c:\windows\system32\mp4fil32.dll
+ 2009-01-10 22:14 . 2009-01-10 22:14 79360 c:\windows\system32\mkzlib.dll
+ 2009-01-10 22:14 . 2009-01-10 22:14 23552 c:\windows\system32\mkunicode.dll
+ 2009-06-02 17:11 . 2009-06-02 17:11 98304 c:\windows\system32\ff_wmv9.dll
+ 2009-06-02 17:11 . 2009-06-02 17:11 85504 c:\windows\system32\ff_vfw.dll
+ 2008-08-05 21:59 . 2008-08-05 21:59 57344 c:\windows\system32\dpv11.dll
+ 2009-05-01 21:02 . 2009-05-01 21:02 90112 c:\windows\system32\dpl100.dll
+ 2009-08-27 13:27 . 2008-10-16 13:09 51224 c:\windows\system32\dllcache\cache\wuauclt.exe
+ 2009-08-27 13:27 . 2008-04-14 17:21 13824 c:\windows\system32\dllcache\cache\wscntfy.exe
+ 2009-08-27 13:27 . 2008-04-14 17:20 82432 c:\windows\system32\dllcache\cache\ws2_32.dll
+ 2009-08-27 13:27 . 2008-04-14 17:21 26624 c:\windows\system32\dllcache\cache\userinit.exe
+ 2009-08-27 13:27 . 2008-04-14 17:21 14336 c:\windows\system32\dllcache\cache\svchost.exe
+ 2009-08-27 13:27 . 2008-04-14 17:20 71680 c:\windows\system32\dllcache\cache\ssdpsrv.dll
+ 2009-08-27 13:27 . 2008-04-14 17:21 57856 c:\windows\system32\dllcache\cache\spoolsv.exe
+ 2009-08-27 13:27 . 2008-04-14 17:20 59904 c:\windows\system32\dllcache\cache\regsvc.dll
+ 2009-08-27 13:27 . 2008-04-14 17:20 88576 c:\windows\system32\dllcache\cache\rasauto.dll
+ 2009-08-27 13:27 . 2008-04-14 17:20 17408 c:\windows\system32\dllcache\cache\powrprof.dll
+ 2009-08-27 13:27 . 2005-01-28 12:44 25088 c:\windows\system32\dllcache\cache\MsPMSNSv.dll
+ 2009-08-27 13:27 . 2008-04-14 17:20 33792 c:\windows\system32\dllcache\cache\msgsvc.dll
+ 2009-08-27 13:27 . 2008-04-14 17:21 13312 c:\windows\system32\dllcache\cache\lsass.exe
+ 2009-08-27 13:27 . 2008-04-14 17:20 22016 c:\windows\system32\dllcache\cache\lpk.dll
+ 2009-08-27 13:27 . 2008-04-14 17:20 19968 c:\windows\system32\dllcache\cache\linkinfo.dll
+ 2009-08-27 13:27 . 2008-04-14 16:20 24960 c:\windows\system32\dllcache\cache\kbdclass.sys
+ 2009-08-27 13:27 . 2008-04-13 18:53 36608 c:\windows\system32\dllcache\cache\ip6fw.sys
+ 2009-08-27 13:27 . 2008-04-14 17:20 56320 c:\windows\system32\dllcache\cache\eventlog.dll
+ 2009-08-27 13:27 . 2008-04-14 17:21 15360 c:\windows\system32\dllcache\cache\ctfmon.exe
+ 2009-08-27 13:27 . 2008-04-14 17:20 62464 c:\windows\system32\dllcache\cache\cryptsvc.dll
+ 2009-08-27 13:27 . 2008-04-14 17:20 77824 c:\windows\system32\dllcache\cache\browser.dll
+ 2009-08-27 13:27 . 2008-04-13 18:57 14336 c:\windows\system32\dllcache\cache\asyncmac.sys
+ 2009-08-27 13:27 . 2006-03-02 12:00 12032 c:\windows\system32\dllcache\cache\acpiec.sys
+ 2009-08-17 06:57 . 2009-08-17 06:57 44474 c:\windows\system32\C2MP\Un_Parts.exe
+ 2008-05-25 14:39 . 2008-05-25 14:39 13824 c:\windows\system32\C2MP\StatsReader.exe
+ 2002-12-12 00:14 . 2002-12-12 00:14 13312 c:\windows\system32\C2MP\msdmo.dll
+ 2002-06-12 16:52 . 2002-06-12 16:52 23040 c:\windows\system32\C2MP\MiniCalc.exe
+ 2009-05-01 21:02 . 2009-05-01 21:02 69632 c:\windows\system32\C2MP\DivXConfig.exe
+ 2007-02-01 23:19 . 2007-02-01 23:19 28088 c:\windows\system32\bass_wv.dll
+ 2007-02-01 23:19 . 2007-02-01 23:19 18888 c:\windows\system32\bass_mpc.dll
+ 2007-02-01 23:19 . 2007-02-01 23:19 23616 c:\windows\system32\bass_flac.dll
+ 2007-02-01 23:19 . 2007-02-01 23:19 33240 c:\windows\system32\bass_ape.dll
+ 2007-02-01 23:19 . 2007-02-01 23:19 12784 c:\windows\system32\bass_alac.dll
+ 2007-02-01 23:19 . 2007-02-01 23:19 92728 c:\windows\system32\bass.dll
+ 2009-01-10 22:15 . 2009-01-10 22:15 97280 c:\windows\system32\avs.dll
+ 2009-08-31 13:46 . 2009-08-31 13:46 10134 c:\windows\Installer\{94C3BB3A-56A1-43DE-A242-8B41F46E97EF}\ARPPRODUCTICON.exe
+ 2009-08-31 13:47 . 2009-08-31 13:47 10134 c:\windows\Installer\{0B1AAC97-8563-41D9-AE47-58E6A222F0E1}\ARPPRODUCTICON.exe
+ 2009-08-27 13:27 . 2008-04-14 17:20 5120 c:\windows\system32\dllcache\cache\sfc.dll
+ 2009-08-27 13:27 . 2006-03-02 12:00 2944 c:\windows\system32\dllcache\cache\null.sys
+ 2009-08-27 13:27 . 2006-03-02 12:00 4224 c:\windows\system32\dllcache\cache\beep.sys
+ 2003-12-26 19:26 . 2003-12-26 19:26 9216 c:\windows\system32\C2MP\OGMCalc.exe
+ 2004-03-04 20:00 . 2004-03-04 20:00 6144 c:\windows\system32\C2MP\AviC.exe
+ 2007-02-01 23:19 . 2007-02-01 23:19 8664 c:\windows\system32\bass_tta.dll
+ 2008-03-04 01:17 . 2008-03-04 01:17 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30304.0_x-ww_003f2b36\msvcr90.dll
+ 2008-03-04 01:17 . 2008-03-04 01:17 572928 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30304.0_x-ww_003f2b36\msvcp90.dll
+ 2008-03-03 19:52 . 2008-03-03 19:52 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30304.0_x-ww_003f2b36\msvcm90.dll
+ 2008-12-03 22:11 . 2009-06-07 14:24 180224 c:\windows\system32\xvidvfw.dll
+ 2009-07-29 23:10 . 2009-06-07 14:16 819200 c:\windows\system32\xvidcore.dll
+ 2008-08-26 22:11 . 2008-08-26 22:11 987136 c:\windows\system32\VSFilter.dll
+ 2004-12-10 09:03 . 2004-12-10 09:03 438272 c:\windows\system32\vp6vfw.dll
+ 2002-10-04 23:04 . 2002-10-04 23:04 921600 c:\windows\system32\VorbisEnc.dll
+ 2002-10-04 23:04 . 2002-10-04 23:04 188416 c:\windows\system32\vorbis.dll
+ 2009-01-10 22:17 . 2009-01-10 22:17 163840 c:\windows\system32\ts.dll
+ 2009-05-01 21:02 . 2009-05-01 21:02 200704 c:\windows\system32\ssldivx.dll
+ 2004-04-20 22:00 . 2004-04-20 22:00 172032 c:\windows\system32\OptimFROG.dll
+ 2009-01-10 22:15 . 2009-01-10 22:15 120832 c:\windows\system32\ogm.dll
+ 2002-10-06 18:42 . 2002-10-06 18:42 237568 c:\windows\system32\OggDS.dll
+ 2002-01-05 03:37 . 2002-01-05 03:37 344064 c:\windows\system32\msvcr70.dll
- 2002-01-05 02:37 . 2002-01-05 02:37 344064 c:\windows\system32\msvcr70.dll
+ 2001-04-01 23:47 . 2001-04-01 23:47 416304 c:\windows\system32\mpg4c32.dll
+ 2009-01-10 22:16 . 2009-01-10 22:16 141312 c:\windows\system32\mp4.dll
+ 2009-01-10 22:15 . 2009-01-10 22:15 159744 c:\windows\system32\mmfinfo.dll
+ 2009-01-10 22:16 . 2009-01-10 22:16 148480 c:\windows\system32\mkx.dll
+ 2009-01-10 22:15 . 2009-01-10 22:15 135168 c:\windows\system32\mkv2vfr.exe
+ 2007-07-05 01:33 . 2007-07-05 01:33 892928 c:\windows\system32\iconv.dll
+ 2009-01-10 22:16 . 2009-01-10 22:16 335872 c:\windows\system32\gdsmux.exe
+ 2009-06-02 17:15 . 2009-06-02 17:15 113152 c:\windows\system32\ff_unrar.dll
+ 2009-06-02 17:15 . 2009-06-02 17:15 146944 c:\windows\system32\ff_tremor.dll
+ 2009-06-02 17:15 . 2009-06-02 17:15 183296 c:\windows\system32\ff_samplerate.dll
+ 2009-06-02 17:14 . 2009-06-02 17:14 178688 c:\windows\system32\ff_libmad.dll
+ 2009-06-02 17:14 . 2009-06-02 17:14 486400 c:\windows\system32\ff_libfaad2.dll
+ 2009-06-02 17:13 . 2009-06-02 17:13 257024 c:\windows\system32\ff_libdts.dll
+ 2009-06-02 17:13 . 2009-06-02 17:13 142848 c:\windows\system32\ff_liba52.dll
+ 2009-06-02 17:35 . 2009-06-02 17:35 328334 c:\windows\system32\ff_kernelDeint.dll
+ 2009-01-10 22:15 . 2009-01-10 22:15 246784 c:\windows\system32\dxr.dll
+ 2008-08-05 21:59 . 2008-08-05 21:59 196608 c:\windows\system32\dtu100.dll
+ 2009-01-10 22:15 . 2009-01-10 22:15 103424 c:\windows\system32\dsmux.exe
+ 2008-08-05 21:59 . 2008-08-05 21:59 344064 c:\windows\system32\dpus11.dll
+ 2008-08-05 21:59 . 2008-08-05 21:59 593920 c:\windows\system32\dpuGUI11.dll
+ 2008-08-05 21:59 . 2008-08-05 21:59 294912 c:\windows\system32\dpu11.dll
+ 2009-08-27 13:27 . 2008-04-14 17:21 129024 c:\windows\system32\dllcache\cache\xmlprov.dll
+ 2009-08-27 13:27 . 2008-04-14 17:21 510464 c:\windows\system32\dllcache\cache\winlogon.exe
+ 2009-08-27 13:27 . 2009-06-26 16:51 669184 c:\windows\system32\dllcache\cache\wininet.dll
+ 2009-08-27 13:27 . 2008-04-14 17:20 580096 c:\windows\system32\dllcache\cache\user32.dll
+ 2009-08-27 13:27 . 2008-04-14 17:20 186880 c:\windows\system32\dllcache\cache\upnphost.dll
+ 2009-08-27 13:27 . 2008-04-14 17:20 296448 c:\windows\system32\dllcache\cache\termsrv.dll
+ 2009-08-27 13:27 . 2008-06-20 11:51 361600 c:\windows\system32\dllcache\cache\tcpip.sys
+ 2009-08-27 13:27 . 2008-04-14 17:20 249856 c:\windows\system32\dllcache\cache\tapisrv.dll
+ 2009-08-27 13:27 . 2008-04-14 17:20 171520 c:\windows\system32\dllcache\cache\srsvc.dll
+ 2009-08-27 13:27 . 2008-04-14 17:20 135680 c:\windows\system32\dllcache\cache\shsvcs.dll
+ 2009-08-27 13:27 . 2009-02-09 11:25 111104 c:\windows\system32\dllcache\cache\services.exe
+ 2009-08-27 13:27 . 2008-04-14 17:20 193536 c:\windows\system32\dllcache\cache\schedsvc.dll
+ 2009-08-27 13:27 . 2008-04-14 17:20 186368 c:\windows\system32\dllcache\cache\scecli.dll
+ 2009-08-27 13:27 . 2009-02-09 10:53 401408 c:\windows\system32\dllcache\cache\rpcss.dll
+ 2009-08-27 13:27 . 2008-04-14 17:20 409088 c:\windows\system32\dllcache\cache\qmgr.dll
+ 2009-08-27 13:27 . 2008-04-14 17:20 435712 c:\windows\system32\dllcache\cache\ntmssvc.dll
+ 2009-08-27 13:27 . 2008-04-13 19:15 574976 c:\windows\system32\dllcache\cache\ntfs.sys
+ 2009-08-27 13:27 . 2008-04-14 17:20 198144 c:\windows\system32\dllcache\cache\netman.dll
+ 2009-08-27 13:27 . 2008-04-14 17:20 407040 c:\windows\system32\dllcache\cache\netlogon.dll
+ 2009-08-27 13:27 . 2008-04-13 19:20 182656 c:\windows\system32\dllcache\cache\ndis.sys
+ 2009-08-27 13:27 . 2008-06-20 17:48 246784 c:\windows\system32\dllcache\cache\mswsock.dll
+ 2009-08-27 13:27 . 2008-04-14 17:20 927504 c:\windows\system32\dllcache\cache\mfc40u.dll
+ 2009-08-27 13:27 . 2008-04-14 17:20 110080 c:\windows\system32\dllcache\cache\imm32.dll
+ 2009-08-27 13:27 . 2008-07-07 20:29 253952 c:\windows\system32\dllcache\cache\es.dll
+ 2009-08-27 13:27 . 2008-04-14 17:20 822272 c:\windows\system32\dllcache\cache\comres.dll
+ 2009-08-27 13:27 . 2008-04-14 17:20 617472 c:\windows\system32\dllcache\cache\comctl32.dll
+ 2009-08-27 13:27 . 2008-04-13 16:39 142592 c:\windows\system32\dllcache\cache\aec.sys
+ 2009-05-01 21:03 . 2009-05-01 21:03 528384 c:\windows\system32\DivXsm.exe
+ 2009-05-01 21:02 . 2009-05-01 21:02 685056 c:\windows\system32\DivX.dll
+ 2009-08-17 06:57 . 2009-08-17 06:57 241343 c:\windows\system32\C2MP\Uninst.exe
+ 2007-02-19 15:28 . 2007-02-19 15:28 117974 c:\windows\system32\C2MP\GSpot27.dat
+ 2007-02-22 20:08 . 2007-02-22 20:08 925696 c:\windows\system32\C2MP\GSpot.exe
+ 2007-02-01 23:19 . 2007-02-01 23:19 150520 c:\windows\system32\bass_aac.dll
+ 2009-01-10 22:15 . 2009-01-10 22:15 102400 c:\windows\system32\avss.dll
+ 2009-01-10 22:16 . 2009-01-10 22:16 108032 c:\windows\system32\avi.dll
+ 2009-08-31 13:46 . 2009-08-31 13:46 709632 c:\windows\Installer\4508d1.msi
+ 2008-11-06 16:37 . 2008-11-06 16:37 1585664 c:\windows\system32\VC80CRTRedist.msi
+ 2008-11-06 16:37 . 2008-11-06 16:37 3596288 c:\windows\system32\qt-dx331.dll
+ 2009-05-01 21:02 . 2009-05-01 21:02 1044480 c:\windows\system32\libdivx.dll
+ 2009-08-27 13:27 . 2008-04-14 17:20 1571840 c:\windows\system32\dllcache\cache\sfcfiles.dll
+ 2009-08-27 13:27 . 2009-02-09 11:26 2190336 c:\windows\system32\dllcache\cache\ntoskrnl.exe
+ 2009-08-27 13:27 . 2009-02-10 17:09 2067328 c:\windows\system32\dllcache\cache\ntkrnlpa.exe
+ 2009-08-27 13:27 . 2009-07-18 16:05 3090432 c:\windows\system32\dllcache\cache\mshtml.dll
+ 2009-08-27 13:27 . 2009-03-21 14:08 1018368 c:\windows\system32\dllcache\cache\kernel32.dll
+ 2009-08-27 13:27 . 2008-04-14 17:21 1035264 c:\windows\system32\dllcache\cache\explorer.exe
+ 2009-05-12 18:46 . 2009-05-12 18:46 1650992 c:\windows\system32\C2MP\npdivx32.dll
+ 2009-08-31 13:47 . 2009-08-31 13:47 1603584 c:\windows\Installer\4508da.msi
.
-- Migawka wyzerowana --
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"Odkurzacz-MCD"="c:\program files\Odkurzacz\odk_mcd.exe" [2008-08-16 264704]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [2008-05-02 15872]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-08-17 81000]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-25 148888]
c:\documents and settings\Robert\Menu Start\Programy\Autostart\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-9-12 384000]
openSUSE-uninst.exe [2008-6-29 78371]
c:\documents and settings\All Users\Menu Start\Programy\Autostart\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-4-23 29696]
Monitor Apache Servers.lnk - c:\program files\Apache Group\Apache2\bin\ApacheMonitor.exe [2004-6-29 41042]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Gadu-Gadu\\gg.exe"=
"c:\\Program Files\\Apache Group\\Apache2\\bin\\Apache.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"7008:TCP"= 7008:TCP:wqgbvtr
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-02-19 114768]
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service;c:\program files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [2007-12-06 660768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-02-19 20560]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;\??\i:\everest home edition 1.10\kerneld.wnt --> i:\everest home edition 1.10\kerneld.wnt [?]
S3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe [2008-11-17 33752]
S3 tap0801;TAP-Win32 Adapter V8;c:\windows\system32\drivers\tap0801.sys [2006-10-01 26624]
.
Zawartość folderu 'Zaplanowane zadania'
2009-06-20 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
.
- - - - USUNIĘTO PUSTE WPISY - - - -
BHO-{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - c:\program files\Dealio Toolbar\DealioToolbarIE.dll
Toolbar-{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - c:\program files\Dealio Toolbar\DealioToolbarIE.dll
HKLM-Run-SearchSettings - c:\program files\Search Settings\SearchSettings.exe
.
------- Skan uzupełniający -------
.
uStart Page = hxxp://www.onet.pl/
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
DPF: {1E53EA77-34F2-474E-9046-B2B0C86F1821} - hxxp://www.eska.pl/streamplayers/OggX.ocx
FF - ProfilePath - c:\documents and settings\Robert\Dane aplikacji\Mozilla\Firefox\Profiles\5zev5cdz.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=616163&p=
FF - component: c:\program files\Mozilla Firefox\extensions\search@searchsettings.com\components\SearchSettingsFF.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npImagine.dll
FF - plugin: c:\windows\system32\C2MP\npdivx32.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-05 17:24
Windows 5.1.2600 Dodatek Service Pack 3 NTFS
skanowanie ukrytych procesów ...
skanowanie ukrytych wpisów autostartu ...
skanowanie ukrytych plików ...
**************************************************************************
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\EverestDriver]
"ImagePath"="\??\i:\everest home edition 1.10\kerneld.wnt"
.
Czas ukończenia: 2009-09-05 17:27
ComboFix-quarantined-files.txt 2009-09-05 15:25
ComboFix2.txt 2009-08-27 13:30
ComboFix3.txt 2009-05-11 14:15
ComboFix4.txt 2009-03-18 15:27
ComboFix5.txt 2009-09-05 15:17
Przed: 3 558 457 344 bajtów wolnych
Po: 3 595 649 024 bajtów wolnych
317 --- E O F --- 2009-08-26 08:35
Użytkownicy przeglądający to forum: vahamo oraz 15 gości