Nowy system a coś się wali, log

**Posty:** 570 · przez **anded** 07 Wrz 2008, 11:32

Dopiero co postawiłem nowy system a już coś się wali

internet przestaje działać. Proszę o sprawdzenie.

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:31:09, on 2008-09-07 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\a-squared Free\a2service.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\oodag.exe C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\NetMeter\NetMeter.exe C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Winamp\winamp.exe C:\Program Files\Winamp\winamp.exe C:\Documents and Settings\Michał\Pulpit\HiJackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: flashget2 urlcatch - {1F364306-AA45-47B5-9F9D-39A8B94E7EF1} - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\bhoCATCH.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [C:\Program Files\NetMeter\NetMeter.exe] C:\Program Files\NetMeter\NetMeter.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: &Download All by FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm O8 - Extra context menu item: &Download by FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{13A28F0C-131A-43D8-B7E9-FC72A5EC8E9C}: NameServer = 194.204.159.1,194.204.152.34 O17 - HKLM\System\CS1\Services\Tcpip\..\{13A28F0C-131A-43D8-B7E9-FC72A5EC8E9C}: NameServer = 194.204.159.1,194.204.152.34 O17 - HKLM\System\CS2\Services\Tcpip\..\{13A28F0C-131A-43D8-B7E9-FC72A5EC8E9C}: NameServer = 194.204.159.1,194.204.152.34 O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe -- End of file - 5034 bytes

**Posty:** 684 · przez **djarta** 07 Wrz 2008, 11:34

W HijackThis żadnej infekcji nie widać.

Ściągnij -----> ComboFixa,przeskanuj daj log.

=========================================
K.

**Posty:** 570 · przez **anded** 07 Wrz 2008, 13:51

Proszę oto log

Kod: Zaznacz wszystko: ComboFix 08-09-05.02 - Michał 2008-09-07 13:29:00.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1250.1.1045.18.255 [GMT 2:00] Running from: C:\Documents and Settings\Michał\Pulpit\ComboFix.exe * Created a new restore point [color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color] . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\Michał\Dane aplikacji\BITS\BITS.ini C:\Documents and Settings\Michał\Dane aplikacji\BITS\DHTTable.dat C:\Documents and Settings\Michał\Dane aplikacji\BITS\ProxyList.ini C:\Program Files\FlashGet Network C:\Program Files\FlashGet Network\FlashGet universal\btcore.dll C:\Program Files\FlashGet Network\FlashGet universal\btwrap.dll C:\Program Files\FlashGet Network\FlashGet universal\BugReport.dll C:\Program Files\FlashGet Network\FlashGet universal\BugReport.exe C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\bhoCATCH.dll C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bhocfg.ini C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\ComDlls.ini C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\FlashgetXpi.dll C:\Program Files\FlashGet Network\FlashGet universal\dbghelp.dll C:\Program Files\FlashGet Network\FlashGet universal\DBTrans.dll C:\Program Files\FlashGet Network\FlashGet universal\DBTransC.exe C:\Program Files\FlashGet Network\FlashGet universal\ed2kwrap.dll C:\Program Files\FlashGet Network\FlashGet universal\explorerbar.dll C:\Program Files\FlashGet Network\FlashGet universal\fgoption.ini C:\Program Files\FlashGet Network\FlashGet universal\FGVer.dll C:\Program Files\FlashGet Network\FlashGet universal\flashget.exe C:\Program Files\FlashGet Network\FlashGet universal\gt.exe C:\Program Files\FlashGet Network\FlashGet universal\hashgen.dll C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddBatchLinksDlg.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddBTTask.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\Added.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddEMTask.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddHpFpLink.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddLinksDlg.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddLinksDlgEx.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddLinksModern.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\BrowserPlugins.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\BTOption.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\CategoryView.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ComfirmWhenExitDialog.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\CommonDlg.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ConfirmInvalidLinks.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ContextMenu.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\DefaultDownloadsDialog.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\DeleteFilesDialog.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\DetailStatus.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\EMOption.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\EMServers.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ExplorerPane.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ExtensionRuleDlg.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FG2SearchTopPlugin.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FileListCtrl.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FileRemovedDialog.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FindTaskDialog.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FlashgetAbout.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FlashGetDlg.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FSUStatusBar.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\GarageLoginDialog.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\GarageView.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\HotResource.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\HpFpOption.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\Info.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\LogsOutput.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\MACReader.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\MainMenu.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\MainToolbar.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\MonitorOption.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\NormalOption.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\NotifyOption.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\Option.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\P4PPluginMain.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ProxySetting.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\SearchBar.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\Security.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\SecurityOption.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\SecurityScan.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\SecurityToolbar.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\Shutdown.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\StatusBar.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\TaskDefOption.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\TaskListView.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\TaskNotify.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\UserListCtrl.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\XpEnhance.ini C:\Program Files\FlashGet Network\FlashGet universal\libupnp.dll C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateUI.dll C:\Program Files\FlashGet Network\FlashGet universal\modules\ComHelper\ComHelper.dll C:\Program Files\FlashGet Network\FlashGet universal\modules\ComHelper\Info.ini C:\Program Files\FlashGet Network\FlashGet universal\modules\Downstat\Downstat.dll C:\Program Files\FlashGet Network\FlashGet universal\modules\Downstat\Info.ini C:\Program Files\FlashGet Network\FlashGet universal\modules\P4pclient\Info.ini C:\Program Files\FlashGet Network\FlashGet universal\modules\P4pclient\P4pclient.dll C:\Program Files\FlashGet Network\FlashGet universal\modules\SearchTop\Info.ini C:\Program Files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource.ini C:\Program Files\FlashGet Network\FlashGet universal\modules\SearchTop\SearchTop.dll C:\Program Files\FlashGet Network\FlashGet universal\modules\Security\Info.ini C:\Program Files\FlashGet Network\FlashGet universal\modules\Security\SECURITY.dll C:\Program Files\FlashGet Network\FlashGet universal\modules\SnapShot\Info.ini C:\Program Files\FlashGet Network\FlashGet universal\modules\SnapShot\SamplerCli.dll C:\Program Files\FlashGet Network\FlashGet universal\modules\SnapShot\SnapShot.dll C:\Program Files\FlashGet Network\FlashGet universal\modules\tasknotifier\Info.ini C:\Program Files\FlashGet Network\FlashGet universal\modules\tasknotifier\tasknotifier.dll C:\Program Files\FlashGet Network\FlashGet universal\P2PCfg.ini C:\Program Files\FlashGet Network\FlashGet universal\P2PCore.dll C:\Program Files\FlashGet Network\FlashGet universal\p2pprot.dll C:\Program Files\FlashGet Network\FlashGet universal\p2snetio.dll C:\Program Files\FlashGet Network\FlashGet universal\p2spmgr.dll C:\Program Files\FlashGet Network\FlashGet universal\p2spmgr.ini C:\Program Files\FlashGet Network\FlashGet universal\p2sprot.dll C:\Program Files\FlashGet Network\FlashGet universal\p2spwrap.dll C:\Program Files\FlashGet Network\FlashGet universal\p4spmgr.ini C:\Program Files\FlashGet Network\FlashGet universal\Profiles\config.dat C:\Program Files\FlashGet Network\FlashGet universal\Profiles\tasks.dat C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\Info.ini C:\Program Files\FlashGet Network\FlashGet universal\storage.dll C:\Program Files\FlashGet Network\FlashGet universal\SysOpt.exe C:\Program Files\FlashGet Network\FlashGet universal\zlib.dll . ---- Previous Run ------- . C:\Program Files\FlashGet Network C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ExplorerPane.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ExtensionRuleDlg.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FG2SearchTopPlugin.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FileListCtrl.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FileRemovedDialog.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FindTaskDialog.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FlashgetAbout.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FlashGetDlg.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FSUStatusBar.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\GarageLoginDialog.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\GarageView.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\HotResource.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\HpFpOption.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\Info.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\LogsOutput.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\MACReader.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\MainMenu.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\MainToolbar.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\MonitorOption.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\NormalOption.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\NotifyOption.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\Option.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\P4PPluginMain.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ProxySetting.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\SearchBar.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\Security.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\SecurityOption.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\SecurityScan.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\SecurityToolbar.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\Shutdown.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\StatusBar.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\TaskDefOption.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\TaskListView.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\TaskNotify.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\UserListCtrl.ini C:\Program Files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\XpEnhance.ini C:\Program Files\FlashGet Network\FlashGet universal\modules\ComHelper\ComHelper.dll C:\Program Files\FlashGet Network\FlashGet universal\modules\ComHelper\Info.ini C:\Program Files\FlashGet Network\FlashGet universal\modules\Downstat\Downstat.dll C:\Program Files\FlashGet Network\FlashGet universal\modules\Downstat\Info.ini C:\Program Files\FlashGet Network\FlashGet universal\modules\P4pclient\Info.ini C:\Program Files\FlashGet Network\FlashGet universal\modules\P4pclient\P4pclient.dll C:\Program Files\FlashGet Network\FlashGet universal\modules\P4pclient\Thumbs.db C:\Program Files\FlashGet Network\FlashGet universal\modules\SearchTop\Info.ini C:\Program Files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource.ini C:\Program Files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource\iexplorer.bmp C:\Program Files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource\resource.bmp C:\Program Files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource\resource.xml C:\Program Files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource\search.bmp C:\Program Files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource\subscribe.bmp C:\Program Files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource\Thumbs.db C:\Program Files\FlashGet Network\FlashGet universal\modules\SearchTop\SearchTop.dll C:\Program Files\FlashGet Network\FlashGet universal\modules\Security\FunctionalRepair.bmp C:\Program Files\FlashGet Network\FlashGet universal\modules\Security\Info.ini C:\Program Files\FlashGet Network\FlashGet universal\modules\Security\Scanning.bmp C:\Program Files\FlashGet Network\FlashGet universal\modules\Security\Security.bmp C:\Program Files\FlashGet Network\FlashGet universal\modules\Security\SECURITY.dll C:\Program Files\FlashGet Network\FlashGet universal\modules\Security\Security.xml C:\Program Files\FlashGet Network\FlashGet universal\modules\Security\SystemFix.bmp C:\Program Files\FlashGet Network\FlashGet universal\modules\SnapShot\Info.ini C:\Program Files\FlashGet Network\FlashGet universal\modules\SnapShot\SamplerCli.dll C:\Program Files\FlashGet Network\FlashGet universal\modules\SnapShot\SnapShot.dll C:\Program Files\FlashGet Network\FlashGet universal\modules\tasknotifier\Info.ini C:\Program Files\FlashGet Network\FlashGet universal\modules\tasknotifier\tasknotifier.dll C:\Program Files\FlashGet Network\FlashGet universal\Profiles\config.dat C:\Program Files\FlashGet Network\FlashGet universal\Profiles\tasks.dat C:\Program Files\FlashGet Network\FlashGet universal\Skins\close_default.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\close_press.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\close_select.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\max_default.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\max_press.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\max_select.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\min_default.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\min_press.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\min_select.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\notify.wav C:\Program Files\FlashGet Network\FlashGet universal\Skins\notify_board.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\notify_icon.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarCT\Back.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarCT\Backward.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarCT\BrowserBarCT.xml C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarCT\FlashgetResource.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarCT\Forward.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarCT\Home.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarDisableCT\Backward.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarDisableCT\BrowserBarDisableCT.xml C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarDisableCT\Forward.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarDisableCT\Home.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarDisableCT\Resource.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Available.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\CategoryTreeCT.xml C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Downloaded.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Downloading.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Favorite.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Flashget.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Release.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Rubbish.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Search.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\ExpBar\Expbar.xml C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\ExpBar\garage.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\ExpBar\resource.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\ExpBar\transfer.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\BT.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\EM.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\GlobalOptionCT.xml C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\HpFp.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\Monitor.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\Normal.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\Notify.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\Proxy.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\TaskDef.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\Info.ini C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\About.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\DeleteTask.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\folder.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\MainMenuCT.xml C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\MoveDownTask.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\MoveUpTask.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\NewTask.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\open.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\Option.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\PauseTask.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\Resource.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\StartTask.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\TaskProperties.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\About.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\DeleteTask.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\Folder.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\MainToolbarCT.xml C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\NewTask.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\Open.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\Option.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\PauseTask.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\Resource.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\StartTask.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\TaskProperties.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\About.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\DeleteTask.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\Folder.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\MainToolbarDisableCT.xml C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\NewTask.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\Open.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\Option.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\PauseTask.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\Resource.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\StartTask.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\TaskProperties.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\Monitor\InfoBkg.Bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\Monitor\MonitorBkg.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\OutpuLogCT\Down.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\OutpuLogCT\Error.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\OutpuLogCT\Normal.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\OutpuLogCT\OutpuLogCT.xml C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\OutpuLogCT\Up.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\All.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Book.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Bt.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Game.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Movie.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Music.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Phone.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Picture.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\SobarIconCT.xml C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Software.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Error.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\hashing.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\OK.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Pause.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Pin.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Schedule.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Start.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\TaskListCT.xml C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Upload.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Wait.bmp C:\Program Files\FlashGet Network\FlashGet universal\Skins\Thumbs.db . ((((((((((((((((((((((((( Files Created from 2008-08-07 to 2008-09-07 ))))))))))))))))))))))))))))))) . 2008-09-07 13:36 . 2008-09-07 13:36 4,594 --a------ C:\Documents and Settings\Michacatchme.zip 2008-09-07 13:21 . 2008-09-07 13:21 <DIR> d-------- C:\WINDOWS\[u]0[/u]48298C9A4D3490B9FF9AB023A9238F3.TMP 2008-09-07 13:11 . 2008-09-07 13:20 <DIR> d-------- C:\327882R2FWJFW(2) 2008-09-07 12:13 . 2008-09-07 13:21 <DIR> d-------- C:\ComboFix(2) 2008-09-07 11:22 . 2008-09-07 11:22 <DIR> d-------- C:\Program Files\Linearteam 2008-09-06 14:39 . 2008-09-06 14:39 <DIR> d-------- C:\DOWNLOADS 2008-09-06 14:39 . 2008-09-06 14:39 <DIR> d-------- C:\!Temp 2008-09-05 14:47 . 2008-09-05 14:47 <DIR> d-------- C:\Program Files\Avira 2008-09-05 14:47 . 2008-09-05 14:47 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Avira 2008-09-05 14:42 . 2008-09-05 14:46 <DIR> d-------- C:\Program Files\RegCleaner 2008-09-04 15:44 . 2008-09-07 13:16 <DIR> d-------- C:\Program Files\Mozilla Thunderbird 2008-09-03 16:30 . 2008-09-03 16:30 <DIR> d-------- C:\Program Files\IrfanView 2008-09-02 22:45 . 2008-09-02 22:45 <DIR> d-------- C:\WINDOWS\Sun 2008-09-02 21:54 . 2008-09-06 16:38 69 --a------ C:\WINDOWS\NeroDigital.ini 2008-09-02 21:10 . 2008-09-02 21:10 <DIR> d-------- C:\profiles 2008-09-02 20:25 . 2008-09-02 20:25 <DIR> d-------- C:\Program Files\VirtualDJ 2008-09-02 20:18 . 2008-09-07 13:38 39,587 --a------ C:\WINDOWS\system32\oodbs.lor 2008-09-02 20:11 . 2008-04-14 22:51 221,184 --a------ C:\WINDOWS\system32\wmpns.dll 2008-09-02 20:10 . 2008-09-02 20:10 <DIR> d-------- C:\Program Files\Windows Media Connect 2 2008-09-02 20:09 . 2008-09-02 20:10 <DIR> d-------- C:\Program Files\OpenOffice.org 2.4 2008-09-02 20:04 . 2008-09-02 20:04 <DIR> d-------- C:\WINDOWS\system32\LogFiles 2008-09-02 20:04 . 2008-09-02 20:06 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF 2008-09-02 18:48 . 2008-09-02 18:49 <DIR> d-------- C:\Program Files\Common Files\Adobe 2008-09-02 18:46 . 2008-09-04 17:54 <DIR> d-------- C:\Program Files\a-squared Free 2008-09-02 18:28 . 2008-09-02 18:28 <DIR> d-------- C:\Program Files\Sunbelt Software 2008-09-02 18:28 . 2008-07-16 09:57 269,736 -ra------ C:\WINDOWS\system32\drivers\SbFw.sys 2008-09-02 18:28 . 2007-03-12 23:34 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll 2008-09-02 18:28 . 2007-03-12 23:34 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll 2008-09-02 18:28 . 2007-03-12 23:34 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll 2008-09-02 18:28 . 2008-06-21 04:54 65,576 --a------ C:\WINDOWS\system32\drivers\SbFwIm.sys 2008-09-02 18:15 . 2008-06-14 19:36 273,024 --------- C:\WINDOWS\system32\drivers\bthport.sys 2008-09-02 18:15 . 2008-06-14 19:36 273,024 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys 2008-09-02 18:10 . 2008-09-02 22:54 <DIR> d--h----- C:\WINDOWS\$hf_mig$ 2008-09-02 18:10 . 2006-09-25 17:58 23,856 --a------ C:\WINDOWS\system32\spupdsvc.exe 2008-09-02 18:03 . 2008-09-02 18:03 <DIR> d-------- C:\Program Files\Gadu-Gadu 2008-09-02 18:03 . 2008-09-02 18:03 <DIR> d-------- C:\NVIDIA 2008-09-02 18:02 . 2008-09-02 21:05 <DIR> d-------- C:\Program Files\SubEdit-Player 2008-09-02 18:01 . 2008-09-02 18:01 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\nView_Profiles 2008-09-02 16:50 . 2004-07-12 16:50 5,222,400 --a------ C:\WINDOWS\system32\nvoglnt.dll 2008-09-02 16:50 . 2004-07-12 16:50 4,112,384 --a------ C:\WINDOWS\system32\nvcpl.dll 2008-09-02 16:50 . 2004-07-12 16:50 241,664 --a------ C:\WINDOWS\system32\nvnt4cpl.dll 2008-09-02 16:50 . 2004-07-12 16:50 114,755 --a------ C:\WINDOWS\system32\nvsvc32.exe 2008-09-02 16:50 . 2004-07-12 16:50 81,920 --a------ C:\WINDOWS\system32\nvwddi.dll 2008-09-02 16:50 . 2004-07-12 16:50 81,920 --a------ C:\WINDOWS\system32\nvmctray.dll 2008-09-02 16:50 . 2004-07-12 16:50 32,256 --a------ C:\WINDOWS\system32\nvcodins.dll 2008-09-02 16:50 . 2004-07-12 16:50 32,256 --a------ C:\WINDOWS\system32\nvcod.dll . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-09-05 12:43 81,984 ----a-w C:\WINDOWS\system32\bdod.bin 2008-09-05 12:43 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\BitDefender 2008-09-02 17:37 --------- d-----w C:\Program Files\Reference Assemblies 2008-09-02 17:37 --------- d-----w C:\Program Files\MSBuild 2008-09-02 17:31 --------- d-----w C:\Program Files\Common Files\Ahead 2008-09-02 17:27 --------- d-----w C:\Program Files\Nero 2008-09-02 17:27 --------- d-----w C:\Program Files\MoorHunt 2008-09-02 17:13 --------- d-----w C:\Program Files\Java 2008-09-02 17:13 --------- d-----w C:\Program Files\Common Files\Java 2008-09-02 17:10 --------- d-----w C:\Program Files\OO Software 2008-09-02 15:59 --------- d-----w C:\Program Files\Winamp 2008-09-02 15:59 --------- d-----w C:\Program Files\NetMeter 2008-09-02 15:52 --------- d-----w C:\Program Files\K-Lite Codec Pack 2008-09-02 15:49 --------- d-----w C:\Program Files\Zone Labs 2008-09-02 15:48 --------- d-----w C:\Program Files\Common Files\Softwin 2008-09-02 15:46 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-09-02 15:46 --------- d-----w C:\Program Files\NVIDIA Corporation 2008-09-02 15:46 --------- d-----w C:\Program Files\Common Files\NVIDIA Shared 2008-09-02 15:46 --------- d-----w C:\Program Files\Common Files\InstallShield 2008-09-02 15:22 --------- d-----w C:\Program Files\microsoft frontpage 2008-09-02 15:20 --------- d-----w C:\Program Files\Usługi online 2008-07-31 08:41 68,616 ----a-w C:\WINDOWS\system32\XAPOFX1_1.dll 2008-07-31 08:41 238,088 ----a-w C:\WINDOWS\system32\xactengine3_2.dll 2008-07-31 08:40 509,448 ----a-w C:\WINDOWS\system32\XAudio2_2.dll 2008-07-25 08:34 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll 2008-07-25 08:34 683,520 ----a-w C:\WINDOWS\system32\divx.dll 2008-07-23 16:50 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll 2008-07-16 18:51 2,041,363 ----a-w C:\WINDOWS\system32\x264vfw.dll 2008-07-12 06:18 467,984 ----a-w C:\WINDOWS\system32\d3dx10_39.dll 2008-07-12 06:18 3,851,784 ----a-w C:\WINDOWS\system32\D3DX9_39.dll 2008-07-12 06:18 1,493,528 ----a-w C:\WINDOWS\system32\D3DCompiler_39.dll 2008-07-07 20:29 253,952 ----a-w C:\WINDOWS\system32\es.dll 2008-06-24 16:46 74,240 ----a-w C:\WINDOWS\system32\mscms.dll 2008-06-23 15:13 668,672 ----a-w C:\WINDOWS\system32\wininet.dll 2008-06-20 17:48 246,784 ----a-w C:\WINDOWS\system32\mswsock.dll 2008-06-12 18:36 7,680 ----a-w C:\WINDOWS\system32\ff_vfw.dll . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "C:\Program Files\NetMeter\NetMeter.exe"="C:\Program Files\NetMeter\NetMeter.exe" [2007-08-11 331264] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NVMixerTray"="C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" [2004-12-20 131072] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-07-12 4112384] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2004-07-12 81920] "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497] "nwiz"="nwiz.exe" [2004-07-12 C:\WINDOWS\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.X264"= x264vfw.dll "VIDC.YV12"= yv12vfw.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= R1 SbFw;SbFw;C:\WINDOWS\system32\drivers\SbFw.sys [2008-07-16 269736] R1 sbhips;Sunbelt HIPS Driver;C:\WINDOWS\system32\drivers\sbhips.sys [2008-06-21 66600] R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;C:\WINDOWS\system32\DRIVERS\sbfwim.sys [2008-06-21 65576] S2 SbPF.Launcher;SbPF.Launcher;C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [2008-07-30 95528] S2 SPF4;Sunbelt Personal Firewall 4;C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [2008-07-30 1361192] . . ------- Supplementary Scan ------- . FireFox -: Profile - C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\2g8ghr8h.default\ . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-09-07 13:46:59 Windows 5.1.2600 Dodatek Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\2g8ghr8h.default\parent.lock 0 bytes C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\2g8ghr8h.default\places.sqlite-journal 62072 bytes C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\2g8ghr8h.default\sessionstore.js 3246 bytes scan completed successfully hidden files: 3 ************************************************************************** . ------------------------ Other Running Processes ------------------------ . C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\a-squared Free\a2service.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\oodag.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Gadu-Gadu\gg.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Winamp\winamp.exe C:\Program Files\Mozilla Firefox\firefox.exe . ************************************************************************** . Completion time: 2008-09-07 13:50:28 - machine was rebooted ComboFix-quarantined-files.txt 2008-09-07 11:50:18 Pre-Run: 4,531,859,456 bajtów wolnych Post-Run: 4,514,426,880 bajt˘w wolnych 454 --- E O F --- 2008-09-04 15:59:28

**Posty:** 684 · przez **djarta** 07 Wrz 2008, 13:55

Jest do usunięcia jedna "sierotka"

Wklej do Notatnika:

Kod: Zaznacz wszystko: Folder:: C:\WINDOWS\048298C9A4D3490B9FF9AB023A9238F3.TMP

>>Plik>>Zapisz jako... >>> CFScript
Przeciągnij i upuść plik CFScript.txt na plik ComboFix.exe
-->

Ma się rozpocząć usuwanie. (i powstanie log).Daj ten log, który powstanie w trakcie usuwania.
Jeśli pójdzie dobrze, to: Po restarcie usuń ręcznie folder C:\Qoobox.

=======================
K.

**Posty:** 570 · przez **anded** 07 Wrz 2008, 15:28

Wykonane i nowy log.

Kod: Zaznacz wszystko: ComboFix 08-09-05.02 - Michał 2008-09-07 15:18:08.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1250.1.1045.18.241 [GMT 2:00] Running from: C:\Documents and Settings\Michał\Pulpit\ComboFix.exe Command switches used :: C:\Documents and Settings\Michał\Pulpit\CFScript.txt * Created a new restore point [color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color] . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\Michał\Dane aplikacji\BITS C:\WINDOWS\[u]0[/u]48298C9A4D3490B9FF9AB023A9238F3.TMP C:\WINDOWS\[u]0[/u]48298C9A4D3490B9FF9AB023A9238F3.TMP\WiseCustomCalla.dll C:\WINDOWS\[u]0[/u]48298C9A4D3490B9FF9AB023A9238F3.TMP\WiseCustomCalla6.dll C:\WINDOWS\[u]0[/u]48298C9A4D3490B9FF9AB023A9238F3.TMP\WiseData.ini . ((((((((((((((((((((((((( Files Created from 2008-08-07 to 2008-09-07 ))))))))))))))))))))))))))))))) . 2008-09-07 13:50 . <DIR> C:\Documents and Settings\Micha- 2008-09-07 13:36 . 2008-09-07 13:36 4,594 --a------ C:\Documents and Settings\Michacatchme.zip 2008-09-07 13:11 . 2008-09-07 13:20 <DIR> d-------- C:\327882R2FWJFW(2) 2008-09-07 12:13 . 2008-09-07 13:21 <DIR> d-------- C:\ComboFix(2) 2008-09-07 11:22 . 2008-09-07 11:22 <DIR> d-------- C:\Program Files\Linearteam 2008-09-06 14:39 . 2008-09-06 14:39 <DIR> d-------- C:\DOWNLOADS 2008-09-06 14:39 . 2008-09-06 14:39 <DIR> d-------- C:\Documents and Settings\Michał\Dane aplikacji\Thinstall 2008-09-06 14:39 . 2008-09-06 14:39 <DIR> d-------- C:\!Temp 2008-09-05 14:47 . 2008-09-05 14:47 <DIR> d-------- C:\Program Files\Avira 2008-09-05 14:47 . 2008-09-05 14:47 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Avira 2008-09-05 14:42 . 2008-09-05 14:46 <DIR> d-------- C:\Program Files\RegCleaner 2008-09-04 15:47 . 2008-09-04 15:47 <DIR> d-------- C:\Documents and Settings\Michał\Dane aplikacji\Thunderbird 2008-09-04 15:44 . 2008-09-07 13:16 <DIR> d-------- C:\Program Files\Mozilla Thunderbird 2008-09-03 18:56 . 2008-09-03 21:25 <DIR> d-------- C:\Documents and Settings\Michał\dwhelper 2008-09-03 18:56 . 2008-09-03 21:25 <DIR> d-------- C:\Documents and Settings\Michał\dwhelper 2008-09-03 16:30 . 2008-09-03 16:30 <DIR> d-------- C:\Program Files\IrfanView 2008-09-03 15:09 . 2008-09-07 13:23 <DIR> d-------- C:\Documents and Settings\Michał\Dane aplikacji\OpenOffice.org2 2008-09-02 22:45 . 2008-09-02 22:45 <DIR> d-------- C:\WINDOWS\Sun 2008-09-02 22:38 . 2008-09-02 22:38 <DIR> d-------- C:\Documents and Settings\Michał\Dane aplikacji\Gadu-Gadu 2008-09-02 21:54 . 2008-09-02 21:54 <DIR> d-------- C:\Documents and Settings\Michał\Dane aplikacji\Media Player Classic 2008-09-02 21:54 . 2008-09-06 16:38 69 --a------ C:\WINDOWS\NeroDigital.ini 2008-09-02 21:10 . 2008-09-02 21:10 <DIR> d-------- C:\profiles 2008-09-02 20:25 . 2008-09-02 20:25 <DIR> d-------- C:\Program Files\VirtualDJ 2008-09-02 20:18 . 2008-09-07 15:10 40,864 --a------ C:\WINDOWS\system32\oodbs.lor 2008-09-02 20:11 . 2008-04-14 22:51 221,184 --a------ C:\WINDOWS\system32\wmpns.dll 2008-09-02 20:10 . 2008-09-02 20:10 <DIR> d-------- C:\Program Files\Windows Media Connect 2 2008-09-02 20:09 . 2008-09-02 20:10 <DIR> d-------- C:\Program Files\OpenOffice.org 2.4 2008-09-02 20:04 . 2008-09-02 20:04 <DIR> d-------- C:\WINDOWS\system32\LogFiles 2008-09-02 20:04 . 2008-09-02 20:06 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF 2008-09-02 18:48 . 2008-09-02 18:49 <DIR> d-------- C:\Program Files\Common Files\Adobe 2008-09-02 18:46 . 2008-09-04 17:54 <DIR> d-------- C:\Program Files\a-squared Free 2008-09-02 18:28 . 2008-09-02 18:28 <DIR> d-------- C:\Program Files\Sunbelt Software 2008-09-02 18:28 . 2008-07-16 09:57 269,736 -ra------ C:\WINDOWS\system32\drivers\SbFw.sys 2008-09-02 18:28 . 2007-03-12 23:34 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll 2008-09-02 18:28 . 2007-03-12 23:34 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll 2008-09-02 18:28 . 2007-03-12 23:34 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll 2008-09-02 18:28 . 2008-06-21 04:54 65,576 --a------ C:\WINDOWS\system32\drivers\SbFwIm.sys 2008-09-02 18:15 . 2008-06-14 19:36 273,024 --------- C:\WINDOWS\system32\drivers\bthport.sys 2008-09-02 18:15 . 2008-06-14 19:36 273,024 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys 2008-09-02 18:10 . 2008-09-02 22:54 <DIR> d--h----- C:\WINDOWS\$hf_mig$ 2008-09-02 18:10 . 2006-09-25 17:58 23,856 --a------ C:\WINDOWS\system32\spupdsvc.exe 2008-09-02 18:03 . 2008-09-02 18:03 <DIR> d-------- C:\Program Files\Gadu-Gadu 2008-09-02 18:03 . 2008-09-02 18:03 <DIR> d-------- C:\NVIDIA 2008-09-02 18:03 . 2008-09-02 18:03 <DIR> d-------- C:\Documents and Settings\Michał\Gadu-Gadu 2008-09-02 18:03 . 2008-09-02 18:03 <DIR> d-------- C:\Documents and Settings\Michał\Gadu-Gadu 2008-09-02 18:02 . 2008-09-02 21:05 <DIR> d-------- C:\Program Files\SubEdit-Player 2008-09-02 18:01 . 2008-09-02 18:01 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\nView_Profiles 2008-09-02 16:50 . 2004-07-12 16:50 5,222,400 --a------ C:\WINDOWS\system32\nvoglnt.dll 2008-09-02 16:50 . 2004-07-12 16:50 4,112,384 --a------ C:\WINDOWS\system32\nvcpl.dll 2008-09-02 16:50 . 2004-07-12 16:50 241,664 --a------ C:\WINDOWS\system32\nvnt4cpl.dll 2008-09-02 16:50 . 2004-07-12 16:50 114,755 --a------ C:\WINDOWS\system32\nvsvc32.exe 2008-09-02 16:50 . 2004-07-12 16:50 81,920 --a------ C:\WINDOWS\system32\nvwddi.dll 2008-09-02 16:50 . 2004-07-12 16:50 81,920 --a------ C:\WINDOWS\system32\nvmctray.dll 2008-09-02 16:50 . 2004-07-12 16:50 32,256 --a------ C:\WINDOWS\system32\nvcodins.dll 2008-09-02 16:50 . 2004-07-12 16:50 32,256 --a------ C:\WINDOWS\system32\nvcod.dll . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-09-05 12:43 81,984 ----a-w C:\WINDOWS\system32\bdod.bin 2008-09-05 12:43 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\BitDefender 2008-09-02 18:45 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\Winamp 2008-09-02 17:37 --------- d-----w C:\Program Files\Reference Assemblies 2008-09-02 17:37 --------- d-----w C:\Program Files\MSBuild 2008-09-02 17:31 --------- d-----w C:\Program Files\Common Files\Ahead 2008-09-02 17:29 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\Ahead 2008-09-02 17:27 --------- d-----w C:\Program Files\Nero 2008-09-02 17:27 --------- d-----w C:\Program Files\MoorHunt 2008-09-02 17:13 --------- d-----w C:\Program Files\Java 2008-09-02 17:13 --------- d-----w C:\Program Files\Common Files\Java 2008-09-02 17:10 --------- d-----w C:\Program Files\OO Software 2008-09-02 15:59 --------- d-----w C:\Program Files\Winamp 2008-09-02 15:59 --------- d-----w C:\Program Files\NetMeter 2008-09-02 15:52 --------- d-----w C:\Program Files\K-Lite Codec Pack 2008-09-02 15:49 --------- d-----w C:\Program Files\Zone Labs 2008-09-02 15:48 --------- d-----w C:\Program Files\Common Files\Softwin 2008-09-02 15:46 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-09-02 15:46 --------- d-----w C:\Program Files\NVIDIA Corporation 2008-09-02 15:46 --------- d-----w C:\Program Files\Common Files\NVIDIA Shared 2008-09-02 15:46 --------- d-----w C:\Program Files\Common Files\InstallShield 2008-09-02 15:22 --------- d-----w C:\Program Files\microsoft frontpage 2008-09-02 15:20 --------- d-----w C:\Program Files\Usługi online 2008-07-31 08:41 68,616 ----a-w C:\WINDOWS\system32\XAPOFX1_1.dll 2008-07-31 08:41 238,088 ----a-w C:\WINDOWS\system32\xactengine3_2.dll 2008-07-31 08:40 509,448 ----a-w C:\WINDOWS\system32\XAudio2_2.dll 2008-07-25 08:34 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll 2008-07-25 08:34 683,520 ----a-w C:\WINDOWS\system32\divx.dll 2008-07-23 16:50 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll 2008-07-16 18:51 2,041,363 ----a-w C:\WINDOWS\system32\x264vfw.dll 2008-07-12 06:18 467,984 ----a-w C:\WINDOWS\system32\d3dx10_39.dll 2008-07-12 06:18 3,851,784 ----a-w C:\WINDOWS\system32\D3DX9_39.dll 2008-07-12 06:18 1,493,528 ----a-w C:\WINDOWS\system32\D3DCompiler_39.dll 2008-07-07 20:29 253,952 ----a-w C:\WINDOWS\system32\es.dll 2008-06-24 16:46 74,240 ----a-w C:\WINDOWS\system32\mscms.dll 2008-06-23 15:13 668,672 ----a-w C:\WINDOWS\system32\wininet.dll 2008-06-20 17:48 246,784 ----a-w C:\WINDOWS\system32\mswsock.dll 2008-06-12 18:36 7,680 ----a-w C:\WINDOWS\system32\ff_vfw.dll . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "C:\Program Files\NetMeter\NetMeter.exe"="C:\Program Files\NetMeter\NetMeter.exe" [2007-08-11 331264] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NVMixerTray"="C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" [2004-12-20 131072] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-07-12 4112384] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2004-07-12 81920] "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497] "nwiz"="nwiz.exe" [2004-07-12 C:\WINDOWS\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.X264"= x264vfw.dll "VIDC.YV12"= yv12vfw.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= R1 SbFw;SbFw;C:\WINDOWS\system32\drivers\SbFw.sys [2008-07-16 269736] R1 sbhips;Sunbelt HIPS Driver;C:\WINDOWS\system32\drivers\sbhips.sys [2008-06-21 66600] R2 SbPF.Launcher;SbPF.Launcher;C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [2008-07-30 95528] R2 SPF4;Sunbelt Personal Firewall 4;C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [2008-07-30 1361192] R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;C:\WINDOWS\system32\DRIVERS\sbfwim.sys [2008-06-21 65576] . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-09-07 15:23:48 Windows 5.1.2600 Dodatek Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2008-09-07 15:26:03 ComboFix-quarantined-files.txt 2008-09-07 13:25:55 ComboFix2.txt 2008-09-07 11:50:32 Pre-Run: 4,501,970,944 bajtów wolnych Post-Run: 4,493,279,232 bajtów wolnych 159 --- E O F --- 2008-09-04 15:59:28

**Posty:** 684 · przez **djarta** 07 Wrz 2008, 16:17

Log wygląda na czysty.

Wykonaj to co jest podane w tym temacie (jeśli wykonałeś/łaś to wcześniej to nie rób tego).

Usuń ręcznie folder C:\Qoobox,

Usuń instalkę ComboFix z dysku.

Wykonaj optymalizację autostartu

Przeczyść komputer ATF-Cleaner

Wyłącz i włącz przywracanie systemu na wszystkich dyskach.Instrukcja

Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

i tym:

FixIEDef.

=======================
K.