nie moge wejsc na partycje z mojego komputera || po formacie

[prog]

hhey mialem wira i jakos sie poddalem [ehh nie ten sam prog co kiedys] no i dalej mam problem otoz jak chce wejsc na partycje D i E z mojego komputera uruchamia sie jakos autoodtwarzanie [normalnie po double clicku] i pisze ze nie mozna znalesc pliku copy.exe

nie moglem znalesc zadnego autorun.inf itp wiec nie wiem o co kaman

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 18:29:44, on 2008-03-07
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Tlen.pl\tlen.exe
C:\Program Files\Opera\Opera.exe
E:\Rzeczy Maxa\Instalki\ochrona komputera i optymalizacja\hijackthis 2.0\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKCU\..\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Moduł wstępnego ładowania interfejsu Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Demon buforu kategorii składników - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe

--
End of file - 3013 bytes

"Silent Runners.vbs", revision 41, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"Komunikator" = "C:\Program Files\Tlen.pl\tlen.exe" ["o2.pl Sp. z o.o."]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"avgnt" = ""C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min" ["Avira GmbH"]
"SSBkgdUpdate" = ""C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot" ["Scansoft, Inc."]
"PaperPort PTD" = "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe" ["ScanSoft, Inc."]
"IndexSearch" = "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe" ["ScanSoft, Inc."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania"
-> {CLSID}\InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."]
"{5E2121EE-0300-11D4-8D3B-444553540000}" = "Catalyst Context Menu extension"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll" [empty string]
"{45AC2688-0253-4ED8-97DE-B5370FA7D48A}" = "Shell Extension for Malware scanning"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\AntiVir PersonalEdition Classic\shlext.dll" ["H+BEDV Datentechnik GmbH"]
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\
INFECTION WARNING! AtiExtEvent\DLLName = "Ati2evxx.dll" ["ATI Technologies Inc."]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
Shell Extension for Malware scanning\(Default) = "{45AC2688-0253-4ED8-97DE-B5370FA7D48A}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\AntiVir PersonalEdition Classic\shlext.dll" ["H+BEDV Datentechnik GmbH"]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\
Shell Extension for Malware scanning\(Default) = "{45AC2688-0253-4ED8-97DE-B5370FA7D48A}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\AntiVir PersonalEdition Classic\shlext.dll" ["H+BEDV Datentechnik GmbH"]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]


Active Desktop and Wallpaper:
-----------------------------

Active Desktop is disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\WINDOWS\web\wallpaper\Idylla.bmp"


Enabled Screen Saver:
---------------------

HKCU\Control Panel\Desktop\
"SCRNSAVE.EXE" = "C:\WINDOWS\system32\logon.scr" [MS]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 13
%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05


Toolbars, Explorer Bars, Extensions:
------------------------------------

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{FB5F1910-F110-11D2-BB9E-00C04F795683}\
"ButtonText" = "Messenger"
"MenuText" = "Windows Messenger"
"Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS]


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

AntiVir PersonalEdition Classic Guard, AntiVirService, "C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe" ["AVIRA GmbH"]
AntiVir PersonalEdition Classic Scheduler, AntiVirScheduler, "C:\Program Files\AntiVir PersonalEdition Classic\sched.exe" ["Avira GmbH"]
Ati HotKey Poller, Ati HotKey Poller, "C:\WINDOWS\system32\Ati2evxx.exe" ["ATI Technologies Inc."]


----------
+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
launch it from a command prompt or a shortcut with the -all parameter.
+ The search for DESKTOP.INI DLL launch points on all local fixed drives
took 21 seconds.
+ The search for all Registry CLSIDs containing dormant Explorer Bars
took 6 seconds.
---------- (total run time: 44 seconds)

to dwa podstawowe logi jezeli chcecie wiecej pisac

[wojtas]

witaj

Wykonaj to co jest podane w tym temacie


Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu C:\SDFix wrzuc zawartość pliku Report.txt + log z combofixa

[prog]

SDFix: Version 1.153

Run by prog on 2008-03-07 at 19:05

Microsoft Windows XP [Wersja 5.1.2600]
Running From: C:\SDFix

Checking Services :


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting


Checking Files :

No Trojan Files Found






Removing Temp Files

ADS Check :



Final Check :

catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-07 19:08:27
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services :



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

Remaining Files :



Files with Hidden Attributes :


Finished!

ComboScan v20070306.20 run by prog on 2008-03-07 at 19:10:53
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created ComboScan Restore Point.


-- Last 5 Restore Point(s) --
19: 2008-03-07 18:10:56 UTC - RP19 - ComboScan Restore Point
18: 2008-03-07 17:57:41 UTC - RP18 - Installed Java(TM) 6 Update 5
17: 2008-03-07 17:37:42 UTC - RP17 - Installed J2SE Runtime Environment 5.0 Update 11
16: 2008-03-07 17:37:01 UTC - RP16 - Shockwave Player
15: 2008-03-07 16:49:31 UTC - RP15 - Zainstalowano: Opera 9.26


-- First Restore Point --
1: 2008-03-07 15:36:04 UTC - RP1 - Punkt kontrolny systemu


Performed disk cleanup.


-- HijackThis (run as prog.exe) ------------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 19:11:51, on 2008-03-07
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Tlen.pl\tlen.exe
C:\Program Files\Opera\Opera.exe
E:\Rzeczy Maxa\Instalki\ochrona komputera i optymalizacja\inne - szczepionki i narzedzia\comboscan.exe
C:\PROGRA~1\HIJACK~1\prog.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKCU\..\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe


-- File Associations -----------------------------------------------------------

.bat - batfile - "%1" %*
.chm - chm.file - "C:\WINDOWS\hh.exe" %1
.cmd - cmdfile - "%1" %*
.com - comfile - "%1" %*
.exe - exefile - "%1" %*
.hlp - hlpfile - %SystemRoot%\System32\winhlp32.exe %1
.inf - inffile - %SystemRoot%\System32\NOTEPAD.EXE %1
.ini - inifile - %SystemRoot%\System32\NOTEPAD.EXE %1
.js - JSFile - %SystemRoot%\System32\WScript.exe "%1" %*
.lnk - lnkfile - {00021401-0000-0000-C000-000000000046}
.pif - piffile - "%1" %*
.reg - regfile - regedit.exe "%1"
.scr - scrfile - "%1" /S
.txt - txtfile - %SystemRoot%\system32\NOTEPAD.EXE %1
.vbs - VBSFile - %SystemRoot%\System32\WScript.exe "%1" %*


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

3R ALCXWDM (Service for Realtek AC97 Audio (WDM)) - C:\WINDOWS\system32\drivers\ALCXWDM.SYS
3R ati2mtag - C:\WINDOWS\system32\drivers\ati2mtag.sys
3R atinevxx (ATI WDM Rage Theater Video NSP) - C:\WINDOWS\system32\drivers\atinevxx.sys
1R avgio - C:\Program Files\AntiVir PersonalEdition Classic\avgio.sys
3R avgntflt - C:\Program Files\AntiVir PersonalEdition Classic\avgntflt.sys
3R catchme - C:\DOCUME~1\prog\USTAWI~1\Temp\catchme.sys (not found)
3S CCDECODE (Dekoder napisów) - C:\WINDOWS\system32\drivers\CCDECODE.sys
1R fwdrv (Firewall Driver) - C:\WINDOWS\system32\drivers\fwdrv.sys
3R hidusb (Sterownik Microsoft klasy HID) - C:\WINDOWS\system32\drivers\hidusb.sys
1R intelppm (Sterownik procesora Intel) - C:\WINDOWS\system32\drivers\intelppm.sys
1R kbdhid (Sterownik klawiatury HID) - C:\WINDOWS\system32\drivers\kbdhid.sys
1R khips (Kerio HIPS Driver) - C:\WINDOWS\system32\drivers\khips.sys
3S MSTEE (Konwerter strumieni Tee/Sink-to-Sink Microsoft Streaming) - C:\WINDOWS\system32\drivers\MSTEE.sys
3R MVDCODEC (ATI WDM Specialized MVD Codec) - C:\WINDOWS\system32\drivers\atinmdxx.sys
3S NABTSFEC (Koder-dekoder NABTS/FEC VBI) - C:\WINDOWS\system32\drivers\NABTSFEC.sys
3S NdisIP (Połączenie TV/wideo firmy Microsoft) - C:\WINDOWS\system32\drivers\NdisIP.sys
3R RTL8023 (Realtek RTL8139/810x/8169/8110 all in one NDIS NT Driver) - C:\WINDOWS\system32\drivers\Rtlnic51.sys
3S SLIP (BDA Slip De-Framer) - C:\WINDOWS\system32\drivers\SLIP.sys
3S streamip (BDA IPSink) - C:\WINDOWS\system32\drivers\StreamIP.sys
3R usbccgp (Rodzajowy sterownik nadrzędny USB Microsoft) - C:\WINDOWS\system32\drivers\usbccgp.sys
3R usbehci (Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft) - C:\WINDOWS\system32\drivers\usbehci.sys
3R usbprint (Klasa PRINTER USB Microsoft) - C:\WINDOWS\system32\drivers\usbprint.sys
3R usbstor (Sterownik magazynu masowego USB) - C:\WINDOWS\system32\drivers\usbstor.sys
3S WSTCODEC (Kodery-dekodery teletekstu w standardzie światowym) - C:\WINDOWS\system32\drivers\WSTCODEC.SYS


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

2R AntiVirScheduler (AntiVir PersonalEdition Classic Scheduler) - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
2R AntiVirService (AntiVir PersonalEdition Classic Guard) - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
3S aspnet_state (ASP.NET State Service) - C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
2R Ati HotKey Poller - C:\WINDOWS\system32\Ati2evxx.exe
2S ATI Smart - C:\WINDOWS\system32\ati2sgag.exe
2S KPF4 (Sunbelt Kerio Personal Firewall 4) - "C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe"


-- Files created between 2008-02-07 and 2008-03-07 -----------------------------

2008-03-07 19:03:51 0 d-------- C:\WINDOWS\ERUNT
2008-03-07 18:54:33 0 d-------- C:\SDFix
2008-03-07 18:37:49 0 d-------- C:\Program Files\Java
2008-03-07 18:37:48 0 d-------- C:\Program Files\Common Files\Java
2008-03-07 17:41:09 0 d-------- C:\Program Files\Tlen.pl
2008-03-07 17:40:44 0 d-------- C:\Program Files\Opera
2008-03-07 17:38:48 0 d-------- C:\Program Files\Combined Community Codec Pack<COMBIN~1>
2008-03-07 17:25:08 50 --a------ C:\WINDOWS\system32\bridf05a.dat
2008-03-07 17:24:58 52224 -----n--- C:\WINDOWS\system32\brinsstr.dll
2008-03-07 17:24:39 0 d-------- C:\Brother
2008-03-07 17:24:36 147456 -----n--- C:\WINDOWS\brunin03.dll
2008-03-07 17:22:27 0 d-------- C:\Program Files\Common Files\ScanSoft Shared<SCANSO~1>
2008-03-07 17:22:22 0 d-------- C:\Program Files\ScanSoft
2008-03-07 17:16:14 3072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2008-03-07 17:16:05 21504 --a------ C:\WINDOWS\system32\hidserv.dll
2008-03-07 17:15:32 0 d-------- C:\Program Files\Sunbelt Software<SUNBEL~1>
2008-03-07 17:15:02 25856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2008-03-07 17:14:35 14848 --a------ C:\WINDOWS\system32\drivers\avgntmgr.sys
2008-03-07 17:14:35 34304 --a------ C:\WINDOWS\system32\drivers\avgntdd.sys
2008-03-07 17:14:34 0 d-------- C:\Program Files\AntiVir PersonalEdition Classic<ANTIVI~1>
2008-03-07 17:14:21 58624 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2008-03-07 17:13:55 5504 --a------ C:\WINDOWS\system32\drivers\intelide.sys
2008-03-07 17:13:31 77312 --a------ C:\WINDOWS\system32\usbui.dll
2008-03-07 17:12:16 0 d--hs---- C:\WINDOWS\Installer<INSTAL~1>
2008-03-07 17:12:16 0 d-------- C:\Program Files\Common Files\ODBC
2008-03-07 17:12:11 0 d-------- C:\Program Files\Common Files\SpeechEngines<SPEECH~1>
2008-03-07 17:12:10 0 dr------- C:\Program Files<PROGRA~1>
2008-03-07 17:12:05 6144 -ra------ C:\WINDOWS\system32\kbdtuq.dll
2008-03-07 17:12:05 6144 -ra------ C:\WINDOWS\system32\kbdtuf.dll
2008-03-07 17:12:05 5632 -ra------ C:\WINDOWS\system32\kbdazel.dll
2008-03-07 17:12:02 5632 -ra------ C:\WINDOWS\system32\kbdmon.dll
2008-03-07 17:12:02 5632 -ra------ C:\WINDOWS\system32\kbdkyr.dll
2008-03-07 17:11:57 8192 -ra------ C:\WINDOWS\system32\kbdhept.dll
2008-03-07 17:11:57 6656 -ra------ C:\WINDOWS\system32\kbdhela3.dll
2008-03-07 17:11:57 6144 -ra------ C:\WINDOWS\system32\kbdhela2.dll
2008-03-07 17:11:57 5632 -ra------ C:\WINDOWS\system32\kbdhe319.dll
2008-03-07 17:11:57 5632 -ra------ C:\WINDOWS\system32\kbdhe220.dll
2008-03-07 17:11:57 5632 -ra------ C:\WINDOWS\system32\kbdhe.dll
2008-03-07 17:11:57 6144 -ra------ C:\WINDOWS\system32\kbdgkl.dll
2008-03-07 17:11:54 6144 -ra------ C:\WINDOWS\system32\kbdlv1.dll
2008-03-07 17:11:54 6144 -ra------ C:\WINDOWS\system32\kbdlv.dll
2008-03-07 17:11:54 5632 -ra------ C:\WINDOWS\system32\kbdlt1.dll
2008-03-07 17:11:54 5632 -ra------ C:\WINDOWS\system32\kbdlt.dll
2008-03-07 17:11:54 6144 -ra------ C:\WINDOWS\system32\kbdest.dll
2008-03-07 17:11:48 6656 --a------ C:\WINDOWS\system32\kbdsl1.dll
2008-03-07 17:11:48 6656 --a------ C:\WINDOWS\system32\kbdsl.dll
2008-03-07 17:11:48 5632 --a------ C:\WINDOWS\system32\kbdro.dll
2008-03-07 17:11:48 5632 --a------ C:\WINDOWS\system32\kbdhu1.dll
2008-03-07 17:11:48 6656 --a------ C:\WINDOWS\system32\kbdhu.dll
2008-03-07 17:11:48 6656 --a------ C:\WINDOWS\system32\kbdcz2.dll
2008-03-07 17:11:48 6656 --a------ C:\WINDOWS\system32\kbdcz1.dll
2008-03-07 17:11:48 7168 --a------ C:\WINDOWS\system32\kbdcz.dll
2008-03-07 17:11:48 6656 --a------ C:\WINDOWS\system32\kbdcr.dll
2008-03-07 17:11:47 6656 --a------ C:\WINDOWS\system32\kbdycl.dll
2008-03-07 17:11:47 6656 --a------ C:\WINDOWS\system32\KBDAL.DLL
2008-03-07 17:11:46 24661 --a------ C:\WINDOWS\system32\spxcoins.dll
2008-03-07 17:11:46 13312 --a------ C:\WINDOWS\system32\irclass.dll
2008-03-07 17:11:46 85532 --a------ C:\WINDOWS\system32\dgsetup.dll
2008-03-07 17:11:46 176157 --a------ C:\WINDOWS\system32\dgrpsetu.dll
2008-03-07 17:11:45 103424 --a------ C:\WINDOWS\system32\EqnClass.Dll
2008-03-07 17:11:45 9168 --a------ C:\WINDOWS\system\VER.DLL
2008-03-07 17:11:45 19200 --a------ C:\WINDOWS\system\TAPI.DLL
2008-03-07 17:11:44 5120 --a------ C:\WINDOWS\system\SHELL.DLL
2008-03-07 17:11:44 24064 --a------ C:\WINDOWS\system\OLESVR.DLL
2008-03-07 17:11:44 83456 --a------ C:\WINDOWS\system\OLECLI.DLL
2008-03-07 17:11:44 127008 --a------ C:\WINDOWS\system\MSVIDEO.DLL
2008-03-07 17:11:43 9936 --a------ C:\WINDOWS\system\LZEXPAND.DLL
2008-03-07 17:11:43 33376 --a------ C:\WINDOWS\system\COMMDLG.DLL
2008-03-07 17:11:43 109488 --a------ C:\WINDOWS\system\AVIFILE.DLL
2008-03-07 17:11:42 15360 --a------ C:\WINDOWS\TASKMAN.EXE
2008-03-07 17:11:42 11264 --a------ C:\WINDOWS\system32\drivers\irenum.sys
2008-03-07 17:11:42 70096 --a------ C:\WINDOWS\system\AVICAP.DLL
2008-03-07 17:11:41 8704 --a------ C:\WINDOWS\system32\batt.dll
2008-03-07 17:11:41 69552 --a------ C:\WINDOWS\system\MMSYSTEM.DLL
2008-03-07 17:11:41 70144 --a------ C:\WINDOWS\NOTEPAD.EXE
2008-03-07 17:11:40 75776 --a------ C:\WINDOWS\system32\storprop.dll
2008-03-07 17:11:31 0 d-------- C:\WINDOWS\pss
2008-03-07 17:11:19 5504 --a------ C:\WINDOWS\system32\drivers\MSTEE.sys
2008-03-07 17:11:17 10880 --a------ C:\WINDOWS\system32\drivers\NdisIP.sys
2008-03-07 17:11:16 15360 --a------ C:\WINDOWS\system32\drivers\StreamIP.sys
2008-03-07 17:11:15 0 d-------- C:\WINDOWS\system32\CatRoot2
2008-03-07 17:11:15 0 d-------- C:\WINDOWS\system32\CatRoot
2008-03-07 17:11:14 11136 --a------ C:\WINDOWS\system32\drivers\SLIP.sys
2008-03-07 17:11:10 19328 --a------ C:\WINDOWS\system32\drivers\WSTCODEC.SYS
2008-03-07 17:11:07 85376 --a------ C:\WINDOWS\system32\drivers\NABTSFEC.sys
2008-03-07 17:11:05 17024 --a------ C:\WINDOWS\system32\drivers\CCDECODE.sys
2008-03-07 17:10:59 54784 --a------ C:\WINDOWS\system32\vfwwdm32.dll
2008-03-07 17:10:36 0 d-------- C:\Documents and Settings<DOCUME~1>
2008-03-07 17:10:35 0 d--hs---- C:\System Volume Information<SYSTEM~1>
2008-03-07 17:04:47 0 d-------- C:\WINDOWS
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\WinSxS
2008-03-07 17:04:47 0 dr------- C:\WINDOWS\Web
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\twain_32
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\wins
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\wbem
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\usmt
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\spool
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\ShellExt
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\Setup
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\ras
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\oobe
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\npp
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\mui
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\inetsrv
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\IME
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\icsxml
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\ias
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\export
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\drivers
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\drivers\etc
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\drivers\disdn
2008-03-07 17:04:47 0 dr-hs--c- C:\WINDOWS\system32\dllcache
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\dhcp
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\config
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\3com_dmi
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\3076
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\2052
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\1054
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\1045
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\1042
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\1041
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\1037
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\1033
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\1031
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\1028
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system32\1025
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\system
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\security
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\Resources<RESOUR~1>
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\repair
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\Provisioning<PROVIS~1>
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\PeerNet
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\pchealth
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\mui
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\msapps
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\msagent
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\Media
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\java
2008-03-07 17:04:47 0 d--h----- C:\WINDOWS\inf
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\ime
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\Help
2008-03-07 17:04:47 0 dr--s---- C:\WINDOWS\Fonts
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\ehome
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\Driver Cache<DRIVER~1>
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\Debug
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\Cursors
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\Connection Wizard<CONNEC~1>
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\Config
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\AppPatch
2008-03-07 17:04:47 0 d-------- C:\WINDOWS\addins
2008-03-07 16:56:10 0 d-------- C:\WINDOWS\Microsoft.NET<MICROS~1.NET>
2008-03-07 16:56:10 0 dr--s---- C:\WINDOWS\assembly
2008-03-07 16:56:09 0 d-------- C:\WINDOWS\system32\URTTemp
2008-03-07 16:54:19 34304 --a------ C:\WINDOWS\system32\ativtmxx.dll
2008-03-07 16:54:18 15360 --a------ C:\WINDOWS\system32\drivers\atinmdxx.sys
2008-03-07 16:54:18 166400 --a------ C:\WINDOWS\system32\drivers\atinevxx.sys
2008-03-07 16:54:00 520192 -----n--- C:\WINDOWS\system32\ati2sgag.exe
2008-03-07 16:53:54 307200 -ra------ C:\WINDOWS\system32\atiiiexx.dll
2008-03-07 16:53:43 121994 -ra------ C:\WINDOWS\system32\atiicdxx.dat
2008-03-07 16:53:10 0 d-------- C:\Program Files\ATI Technologies<ATITEC~1>
2008-03-07 16:48:07 69504 --a------ C:\WINDOWS\system32\drivers\Rtlnic51.sys
2008-03-07 16:48:07 0 d-------- C:\WINDOWS\OPTIONS
2008-03-07 16:47:48 6400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2008-03-07 16:47:46 82944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2008-03-07 16:47:45 52864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys
2008-03-07 16:47:44 54272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2008-03-07 16:47:42 142464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2008-03-07 16:47:41 171776 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2008-03-07 16:47:40 2944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2008-03-07 16:47:38 60800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2008-03-07 16:47:36 7552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys
2008-03-07 16:47:35 4992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys
2008-03-07 16:47:33 5376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2008-03-07 16:47:25 4096 --a------ C:\WINDOWS\system32\ksuser.dll
2008-03-07 16:47:25 145792 --a------ C:\WINDOWS\system32\drivers\portcls.sys
2008-03-07 16:47:25 60288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2008-03-07 16:47:21 0 d-------- C:\Program Files\Realtek Sound Manager<REALTE~1>
2008-03-07 16:47:18 0 d-------- C:\Program Files\AvRack
2008-03-07 16:47:14 156672 --a------ C:\WINDOWS\system32\RTLCPAPI.dll
2008-03-07 16:47:14 2317504 --a------ C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2008-03-07 16:47:14 77824 --a------ C:\WINDOWS\SOUNDMAN.EXE
2008-03-07 16:47:13 40960 -----n--- C:\WINDOWS\system32\ChCfg.exe
2008-03-07 16:47:10 9324032 --a------ C:\WINDOWS\system32\RTLCPL.EXE
2008-03-07 16:46:58 294912 -----n--- C:\WINDOWS\alcupd.exe
2008-03-07 16:46:57 200704 -----n--- C:\WINDOWS\alcrmv.exe
2008-03-07 16:46:52 192512 -----n--- C:\WINDOWS\RtlExUpd.dll
2008-03-07 16:45:27 0 d-------- C:\Program Files\Intel
2008-03-07 16:44:50 0 d-------- C:\WINDOWS\system32\ReinstallBackups<REINST~1>
2008-03-07 16:44:48 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1>
2008-03-07 16:44:46 0 d-------- C:\Program Files\Common Files\InstallShield<INSTAL~1>
2008-03-07 16:28:30 0 d-------- C:\WINDOWS\SoftwareDistribution<SOFTWA~1>
2008-03-07 16:28:28 0 d-------- C:\WINDOWS\Prefetch
2008-03-07 16:24:56 0 d-------- C:\WINDOWS\system32\xircom
2008-03-07 16:24:56 0 d-------- C:\Program Files\microsoft frontpage<MICROS~1>
2008-03-07 16:24:37 0 -rahs---- C:\MSDOS.SYS
2008-03-07 16:24:37 0 -rahs---- C:\IO.SYS
2008-03-07 16:24:37 0 --a------ C:\CONFIG.SYS
2008-03-07 16:24:37 0 --a------ C:\AUTOEXEC.BAT
2008-03-07 16:24:23 112128 --a------ C:\WINDOWS\system32\mapi32.dll
2008-03-07 16:23:33 0 dr------- C:\WINDOWS\Offline Web Pages<OFFLIN~1>
2008-03-07 16:23:33 0 d---s---- C:\WINDOWS\Downloaded Program Files<DOWNLO~1>
2008-03-07 16:23:22 0 d--h----- C:\Program Files\WindowsUpdate<WINDOW~3>
2008-03-07 16:23:17 0 d-------- C:\Program Files\Usługi online<USUGIO~1>
2008-03-07 16:22:56 0 d-------- C:\WINDOWS\system32\DirectX
2008-03-07 16:22:26 11264 --a------ C:\WINDOWS\system32\atrace.dll
2008-03-07 16:22:13 12288 --a------ C:\WINDOWS\system32\nmevtmsg.dll
2008-03-07 16:22:11 67584 --a------ C:\WINDOWS\system32\acctres.dll
2008-03-07 16:22:07 0 d---s---- C:\WINDOWS\Tasks
2008-03-07 16:22:07 16384 --a------ C:\WINDOWS\system32\icfgnt5.dll
2008-03-07 16:22:05 0 d-------- C:\Program Files\Common Files\MSSoap
2008-03-07 16:21:59 0 d-------- C:\WINDOWS\srchasst
2008-03-07 16:21:58 0 d-------- C:\WINDOWS\system32\Macromed
2008-03-07 16:21:54 120320 --a------ C:\WINDOWS\system32\wuweb.dll
2008-03-07 16:21:54 113664 --a------ C:\WINDOWS\system32\wucltui.dll
2008-03-07 16:21:54 6656 --a------ C:\WINDOWS\system32\wuauserv.dll
2008-03-07 16:21:54 184320 --a------ C:\WINDOWS\system32\wuaueng1.dll
2008-03-07 16:21:53 36864 --a------ C:\WINDOWS\system32\wups.dll
2008-03-07 16:21:53 1134592 --a------ C:\WINDOWS\system32\wuaueng.dll
2008-03-07 16:21:53 168960 --a------ C:\WINDOWS\system32\wuauclt1.exe
2008-03-07 16:21:53 112128 --a------ C:\WINDOWS\system32\wuauclt.exe
2008-03-07 16:21:53 431616 --a------ C:\WINDOWS\system32\wuapi.dll
2008-03-07 16:21:52 18944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2008-03-07 16:21:52 382464 --a------ C:\WINDOWS\system32\qmgr.dll
2008-03-07 16:21:52 7168 --a------ C:\WINDOWS\system32\bitsprx3.dll
2008-03-07 16:21:52 8192 --a------ C:\WINDOWS\system32\bitsprx2.dll
2008-03-07 16:21:46 0 d-------- C:\Program Files\Movie Maker<MOVIEM~1>
2008-03-07 16:21:41 45568 --a------ C:\WINDOWS\system32\safrslv.dll
2008-03-07 16:21:41 29696 --a------ C:\WINDOWS\system32\safrdm.dll
2008-03-07 16:21:40 43520 --a------ C:\WINDOWS\system32\safrcdlg.dll
2008-03-07 16:21:40 43520 --a------ C:\WINDOWS\system32\racpldlg.dll
2008-03-07 16:21:35 22528 --a------ C:\WINDOWS\system32\fltMc.exe
2008-03-07 16:21:35 16896 --a------ C:\WINDOWS\system32\fltlib.dll
2008-03-07 16:21:35 124800 --a------ C:\WINDOWS\system32\drivers\fltMgr.sys
2008-03-07 16:21:34 171008 --a------ C:\WINDOWS\system32\srsvc.dll
2008-03-07 16:21:34 240128 --a------ C:\WINDOWS\system32\srrstr.dll
2008-03-07 16:21:34 67584 --a------ C:\WINDOWS\system32\srclient.dll
2008-03-07 16:21:34 0 d-------- C:\WINDOWS\system32\Restore
2008-03-07 16:21:33 32768 --a------ C:\WINDOWS\system32\isrdbg32.dll
2008-03-07 16:21:33 81920 --a------ C:\WINDOWS\system32\ils.dll
2008-03-07 16:21:33 73472 --a------ C:\WINDOWS\system32\drivers\sr.sys
2008-03-07 16:21:32 28672 --a------ C:\WINDOWS\system32\nmmkcert.dll
2008-03-07 16:21:32 69632 --a------ C:\WINDOWS\system32\msconf.dll
2008-03-07 16:21:32 32768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2008-03-07 16:21:32 34560 --a------ C:\WINDOWS\system32\mnmdd.dll
2008-03-07 16:21:28 105984 --a------ C:\WINDOWS\system32\msoert2.dll
2008-03-07 16:21:28 252928 --a------ C:\WINDOWS\system32\msoeacct.dll
2008-03-07 16:21:26 49664 --a------ C:\WINDOWS\system32\inetres.dll
2008-03-07 16:21:26 678400 --a------ C:\WINDOWS\system32\inetcomm.dll
2008-03-07 16:21:23 192000 --a------ C:\WINDOWS\system32\schedsvc.dll
2008-03-07 16:21:23 12288 --a------ C:\WINDOWS\system32\mstinit.exe
2008-03-07 16:21:22 278528 --a------ C:\WINDOWS\system32\mstask.dll
2008-03-07 16:21:22 86016 --a------ C:\WINDOWS\system32\isign32.dll
2008-03-07 16:21:22 65536 --a------ C:\WINDOWS\system32\icwphbk.dll
2008-03-07 16:21:22 73728 --a------ C:\WINDOWS\system32\icwdial.dll
2008-03-07 16:21:21 278528 --a------ C:\WINDOWS\system32\inetcfg.dll
2008-03-07 16:20:47 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat<EMPTYR~1.DAT>
2008-03-07 16:20:30 0 d-------- C:\WINDOWS\Registration<REGIST~1>
2008-03-07 16:20:16 0 d-------- C:\Program Files\Messenger<MESSEN~1>
2008-03-07 16:20:11 5632 --a------ C:\WINDOWS\system32\write.exe
2008-03-07 16:20:11 0 d-------- C:\Program Files\MSN Gaming Zone<MSNGAM~1>
2008-03-07 16:19:58 139264 --a------ C:\WINDOWS\system32\sndvol32.exe
2008-03-07 16:19:58 44544 --a------ C:\WINDOWS\system32\hticons.dll
2008-03-07 16:19:57 35328 --a------ C:\WINDOWS\system32\winchat.exe
2008-03-07 16:19:57 73216 --a------ C:\WINDOWS\system32\avwav.dll
2008-03-07 16:19:57 231424 --a------ C:\WINDOWS\system32\avtapi.dll
2008-03-07 16:19:57 16384 --a------ C:\WINDOWS\system32\avmeter.dll
2008-03-07 16:19:46 605696 --a------ C:\WINDOWS\system32\getuname.dll
2008-03-07 16:19:46 80896 --a------ C:\WINDOWS\system32\charmap.exe
2008-03-07 16:19:45 57344 --a------ C:\WINDOWS\system32\sol.exe
2008-03-07 16:19:45 115200 --a------ C:\WINDOWS\system32\calc.exe
2008-03-07 16:19:44 119808 --a------ C:\WINDOWS\system32\winmine.exe
2008-03-07 16:19:44 9728 --a------ C:\WINDOWS\system32\reset.exe
2008-03-07 16:19:44 128000 --a------ C:\WINDOWS\system32\mshearts.exe
2008-03-07 16:19:44 55808 --a------ C:\WINDOWS\system32\freecell.exe
2008-03-07 16:19:43 1225 --a------ C:\WINDOWS\system32\usrlogon.cmd
2008-03-07 16:19:43 17920 --a------ C:\WINDOWS\system32\tsshutdn.exe
2008-03-07 16:19:43 16384 --a------ C:\WINDOWS\system32\tskill.exe
2008-03-07 16:19:43 15360 --a------ C:\WINDOWS\system32\tsdiscon.exe
2008-03-07 16:19:43 15360 --a------ C:\WINDOWS\system32\tscon.exe
2008-03-07 16:19:43 15360 --a------ C:\WINDOWS\system32\shadow.exe
2008-03-07 16:19:43 16384 --a------ C:\WINDOWS\system32\rwinsta.exe
2008-03-07 16:19:43 33792 --a------ C:\WINDOWS\system32\regini.exe
2008-03-07 16:19:42 4608 --a------ C:\WINDOWS\system32\rdpcfgex.dll
2008-03-07 16:19:42 22528 --a------ C:\WINDOWS\system32\qwinsta.exe
2008-03-07 16:19:42 17408 --a------ C:\WINDOWS\system32\qappsrv.exe
2008-03-07 16:19:42 22528 --a------ C:\WINDOWS\system32\msg.exe
2008-03-07 16:19:42 15872 --a------ C:\WINDOWS\system32\logoff.exe
2008-03-07 16:19:42 15872 --a------ C:\WINDOWS\system32\cdmodem.dll
2008-03-07 16:19:40 54272 --a------ C:\WINDOWS\system32\stclient.dll
2008-03-07 16:19:40 25088 --a------ C:\WINDOWS\system32\mtxlegih.dll
2008-03-07 16:19:40 4096 --a------ C:\WINDOWS\system32\mtxex.dll
2008-03-07 16:19:40 20480 --a------ C:\WINDOWS\system32\mtxdm.dll
2008-03-07 16:19:40 5120 --a------ C:\WINDOWS\system32\dcomcnfg.exe
2008-03-07 16:19:40 82432 --a------ C:\WINDOWS\system32\comrepl.dll
2008-03-07 16:19:40 25600 --a------ C:\WINDOWS\system32\comaddin.dll
2008-03-07 16:19:39 147456 --a------ C:\WINDOWS\system32\comsnap.dll
2008-03-07 16:19:31 187904 --a------ C:\WINDOWS\system32\accwiz.exe
2008-03-07 16:19:30 132608 --a------ C:\WINDOWS\system32\sndrec32.exe
2008-03-07 16:19:30 124928 --a------ C:\WINDOWS\system32\mplay32.exe
2008-03-07 16:19:30 349696 --a------ C:\WINDOWS\system32\hypertrm.dll
2008-03-07 16:19:29 345088 --a------ C:\WINDOWS\system32\mspaint.exe
2008-03-07 16:19:29 103424 --a------ C:\WINDOWS\system32\clipbrd.exe
2008-03-07 16:19:29 0 d-------- C:\Program Files\Windows NT<WINDOW~1>
2008-03-07 16:19:28 539136 --a------ C:\WINDOWS\system32\spider.exe
2008-03-07 16:19:28 21896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2008-03-07 16:19:28 12040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys
2008-03-07 16:19:27 94720 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2008-03-07 16:19:27 655360 --a------ C:\WINDOWS\system32\mstscax.dll
2008-03-07 16:19:27 139400 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys
2008-03-07 16:19:26 44544 --a------ C:\WINDOWS\system32\tscupgrd.exe
2008-03-07 16:19:26 141824 --a------ C:\WINDOWS\system32\sessmgr.exe
2008-03-07 16:19:26 60928 --a------ C:\WINDOWS\system32\remotepg.dll
2008-03-07 16:19:26 67072 --a------ C:\WINDOWS\system32\rdshost.exe
2008-03-07 16:19:26 13824 --a------ C:\WINDOWS\system32\rdsaddin.exe
2008-03-07 16:19:26 147968 --a------ C:\WINDOWS\system32\rdchost.dll
2008-03-07 16:19:26 408576 --a------ C:\WINDOWS\system32\mstsc.exe
2008-03-07 16:19:25 296448 --a------ C:\WINDOWS\system32\termsrv.dll
2008-03-07 16:19:25 87176 --a------ C:\WINDOWS\system32\rdpwsx.dll
2008-03-07 16:19:25 19968 --a------ C:\WINDOWS\system32\rdpsnd.dll
2008-03-07 16:19:25 62464 --a------ C:\WINDOWS\system32\rdpclip.exe
2008-03-07 16:19:25 20992 --a------ C:\WINDOWS\system32\qprocess.exe
2008-03-07 16:19:25 11264 --a------ C:\WINDOWS\system32\icaapi.dll
2008-03-07 16:19:24 90112 --a------ C:\WINDOWS\system32\mtxoci.dll
2008-03-07 16:19:24 161280 --a------ C:\WINDOWS\system32\msdtcuiu.dll
2008-03-07 16:19:24 0 d-------- C:\WINDOWS\system32\MsDtc
2008-03-07 16:19:24 38912 --a------ C:\WINDOWS\system32\cfgbkend.dll
2008-03-07 16:19:23 11776 --a------ C:\WINDOWS\system32\xolehlp.dll
2008-03-07 16:19:23 949248 --a------ C:\WINDOWS\system32\msdtctm.dll
2008-03-07 16:19:23 425472 --a------ C:\WINDOWS\system32\msdtcprx.dll
2008-03-07 16:19:23 58880 --a------ C:\WINDOWS\system32\msdtclog.dll
2008-03-07 16:19:23 6144 --a------ C:\WINDOWS\system32\msdtc.exe
2008-03-07 16:19:21 0 d-------- C:\WINDOWS\system32\Com
2008-03-07 16:19:21 62464 --a------ C:\WINDOWS\system32\colbact.dll
2008-03-07 16:19:21 110080 --a------ C:\WINDOWS\system32\clbcatex.dll
2008-03-07 16:19:21 85504 --a------ C:\WINDOWS\system32\catsrvps.dll
2008-03-07 16:19:20 628224 --a------ C:\WINDOWS\system32\catsrvut.dll
2008-03-07 16:19:20 229888 --a------ C:\WINDOWS\system32\catsrv.dll
2008-03-07 16:19:19 540160 --a------ C:\WINDOWS\system32\comuid.dll
2008-03-07 16:19:19 1251840 --a------ C:\WINDOWS\system32\comsvcs.dll
2008-03-07 16:19:19 501248 --a------ C:\WINDOWS\system32\clbcatq.dll
2008-03-07 16:19:09 56320 --a------ C:\WINDOWS\system32\servdeps.dll
2008-03-07 16:19:09 17920 --a------ C:\WINDOWS\system32\mmfutil.dll
2008-03-07 16:19:09 58880 --a------ C:\WINDOWS\system32\licwmi.dll
2008-03-07 16:19:08 187904 --a------ C:\WINDOWS\system32\cmprops.dll
2008-03-07 16:19:05 40840 --a------ C:\WINDOWS\system32\drivers\termdd.sys
2008-03-07 16:19:05 196864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys


-- Find3M Report ---------------------------------------------------------------

2008-03-07 18:37:04 0 d-------- C:\Documents and Settings\prog\Dane aplikacji\Macromedia<MACROM~1>
2008-03-07 17:41:38 0 d-------- C:\Documents and Settings\prog\Dane aplikacji\Tlen.pl
2008-03-07 17:40:47 0 d-------- C:\Documents and Settings\prog\Dane aplikacji\Opera
2008-03-07 17:23:50 0 d---s---- C:\Documents and Settings\prog\Dane aplikacji\Microsoft<MICROS~1>
2008-03-07 17:11:32 62 --ahs---- C:\Documents and Settings\prog\Dane aplikacji\desktop.ini
2008-03-07 17:10:54 0 d-------- C:\Documents and Settings\prog\Dane aplikacji\ATI
2008-03-07 16:57:01 495780 --a------ C:\WINDOWS\system32\perfh015.dat
2008-03-07 16:57:01 73752 --a------ C:\WINDOWS\system32\perfc015.dat
2008-03-07 16:35:53 0 d-------- C:\Documents and Settings\prog\Dane aplikacji\Identities<IDENTI~1>


-- Registry Dump ---------------------------------------------------------------


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"Komunikator"="C:\\Program Files\\Tlen.pl\\tlen.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"avgnt"="\"C:\\Program Files\\AntiVir PersonalEdition Classic\\avgnt.exe\" /min"
"SSBkgdUpdate"="\"C:\\Program Files\\Common Files\\Scansoft Shared\\SSBkgdUpdate\\SSBkgdupdate.exe\" -Embedding -boot"
"PaperPort PTD"="C:\\Program Files\\ScanSoft\\PaperPort\\pptd40nt.exe"
"IndexSearch"="C:\\Program Files\\ScanSoft\\PaperPort\\IndexSearch.exe"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0_05\\bin\\jusched.exe\""

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="cli"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\ATI Technologies\\ATI.ACE\\cli.exe\" runtime -Delay"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="ctfmon"
"hkey"="HKCU"
"command"="C:\\WINDOWS\\system32\\ctfmon.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="SOUNDMAN"
"hkey"="HKLM"
"command"="SOUNDMAN.EXE"
"inimapping"="0"


[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0


[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\D]
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E]
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\G]
Shell\AutoRun\command G:\setup.exe

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{27ea7f81-ec5f-11dc-84f9-806d6172696f}]
Shell\AutoRun\command G:\setup.exe

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{27ea7f83-ec5f-11dc-84f9-806d6172696f}]
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{27ea7f84-ec5f-11dc-84f9-806d6172696f}]
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe


-- End of ComboScan: finished at 2008-03-07 at 19:12:38 ------------------------

[wojtas]

wklej do notatnika

Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\D]

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E]

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{27ea7f81-ec5f-11dc-84f9-806d6172696f}]

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{27ea7f83-ec5f-11dc-84f9-806d6172696f}]

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{27ea7f84-ec5f-11dc-84f9-806d6172696f}]

w notatniku u góry>>>plik zapisz jako>>>Zmien rozszerzenie z TXT na Wszystkie pliki *.* >>> Zapisz pod nazwą FIX.REG

Klikasz dwa razy na powstały plik fix i dodajesz go do rejestru....

i daj loga z combofixa

[prog]

ComboFix 08-03-07.1 - prog 2008-03-07 20:14:49.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.1593 [GMT 1:00]
Running from: E:\Rzeczy Maxa\Instalki\ochrona komputera i optymalizacja\inne - szczepionki i narzedzia\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

D:\Autorun.inf
E:\Autorun.inf

.
((((((((((((((((((((((((( Files Created from 2008-02-07 to 2008-03-07 )))))))))))))))))))))))))))))))
.

2008-03-07 20:08 . 2008-03-07 20:08 <DIR> d-------- C:\Program Files\Microsoft Works
2008-03-07 20:08 . 2006-10-26 19:56 32,592 --a------ C:\WINDOWS\system32\msonpmon.dll
2008-03-07 20:07 . 2008-03-07 20:07 <DIR> d-------- C:\Program Files\Microsoft.NET
2008-03-07 20:06 . 2008-03-07 20:06 <DIR> d-------- C:\WINDOWS\SHELLNEW
2008-03-07 20:05 . 2008-03-07 20:08 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help
2008-03-07 20:04 . 2008-03-07 20:04 <DIR> dr-h----- C:\MSOCache
2008-03-07 19:42 . 2008-03-07 19:43 <DIR> d-------- C:\Program Files\foobar2000
2008-03-07 19:42 . 2008-03-07 19:59 <DIR> d-------- C:\Documents and Settings\prog\Dane aplikacji\foobar2000
2008-03-07 19:34 . 2008-03-07 19:34 <DIR> d-------- C:\Documents and Settings\LocalService\Dane aplikacji\Xfire
2008-03-07 19:32 . 2008-03-07 19:41 <DIR> d---s---- C:\Program Files\Xfire
2008-03-07 19:32 . 2008-03-07 20:17 <DIR> d-------- C:\Documents and Settings\prog\Dane aplikacji\Xfire
2008-03-07 19:03 . 2008-03-07 19:03 <DIR> d-------- C:\WINDOWS\ERUNT
2008-03-07 19:03 . 2008-03-07 19:03 163 --a------ C:\WINDOWS\system32\drivers\fwdrv.err
2008-03-07 19:01 . 2008-02-22 02:33 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-03-07 18:54 . 2008-03-07 19:09 <DIR> d-------- C:\SDFix
2008-03-07 18:37 . 2008-03-07 19:01 <DIR> d-------- C:\Program Files\Java
2008-03-07 18:37 . 2008-03-07 18:37 <DIR> d-------- C:\Program Files\Common Files\Java
2008-02-21 02:57 . 2008-02-21 02:57 54,608 --a------ C:\WINDOWS\system32\xfcodec.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-07 18:40 219,648 ----a-w C:\WINDOWS\system32\uxtheme.dll
2008-03-07 17:36 --------- d-----w C:\Program Files\Opera
2008-03-07 16:41 --------- d-----w C:\Program Files\Tlen.pl
2008-03-07 16:41 --------- d-----w C:\Documents and Settings\prog\Dane aplikacji\Tlen.pl
2008-03-07 16:38 --------- d-----w C:\Program Files\Combined Community Codec Pack
2008-03-07 16:37 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-03-07 16:37 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-03-07 16:22 --------- d-----w C:\Program Files\ScanSoft
2008-03-07 16:22 --------- d-----w C:\Program Files\Common Files\ScanSoft Shared
2008-03-07 16:22 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\ScanSoft
2008-03-07 16:22 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\InstallShield
2008-03-07 16:20 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Brother
2008-03-07 16:15 --------- d-----w C:\Program Files\Sunbelt Software
2008-03-07 16:14 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\AntiVir PersonalEdition Classic
2008-03-07 16:10 --------- d-----w C:\Documents and Settings\prog\Dane aplikacji\ATI
2008-03-07 15:58 --------- d-----w C:\Program Files\ATI Technologies
2008-03-07 15:47 --------- d-----w C:\Program Files\Realtek Sound Manager
2008-03-07 15:47 --------- d-----w C:\Program Files\AvRack
2008-03-07 15:45 --------- d-----w C:\Program Files\Intel
2008-03-07 15:24 --------- d-----w C:\Program Files\microsoft frontpage
2008-03-07 15:23 --------- d-----w C:\Program Files\Usługi online
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 23:44 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" [2006-10-31 17:07 262184]
"SSBkgdUpdate"="C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 10:22 155648]
"PaperPort PTD"="C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe" [2005-03-17 14:25 57393]
"IndexSearch"="C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe" [2005-03-17 14:45 40960]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 23:44 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC]
--a------ 2005-08-12 14:43 45056 C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
--a------ 2004-08-03 23:44 15360 C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
--a------ 2005-04-15 04:01 77824 C:\WINDOWS\SOUNDMAN.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=

R1 fwdrv;Firewall Driver;C:\WINDOWS\system32\drivers\fwdrv.sys [2005-12-15 18:13]
R1 khips;Kerio HIPS Driver;C:\WINDOWS\system32\drivers\khips.sys [2005-12-15 18:01]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G]
\Shell\AutoRun\command - G:\setup.exe

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-07 20:18:01
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\explorer.exe [6.00.2900.2180]
-> C:\Program Files\WinRAR\rarext.dll
.
Completion time: 2008-03-07 20:19:20
ComboFix-quarantined-files.txt 2008-03-07 19:19:14

[wojtas]

wydaje sie byc ok

[prog]

antivir pokazuje wirsusa w E/System Volue Information co robić?

[wojtas]

Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach) i po chwili wlacz

[prog]

dzięki