proszę o powtórne sprawdzanie loga

**Posty:** 35 · przez **Wilk.** 02 Kwi 2007, 21:03

Kod: Zaznacz wszystko: GMER 1.0.12.12086 - http://www.gmer.net Rootkit scan 2007-04-02 20:45:59 Windows 5.1.2600 Dodatek Service Pack 2 ---- Services - GMER 1.0.12 ---- Service [DISABLED] Abiosdsk Service [DISABLED] abp480n5 Service C:\WINDOWS\system32\DRIVERS\ACPI.sys [BOOT] ACPI Service [DISABLED] ACPIEC Service [DISABLED] adpu160m Service C:\WINDOWS\system32\drivers\aec.sys [MANUAL] aec Service C:\WINDOWS\System32\drivers\afd.sys [SYSTEM] AFD Service [DISABLED] Aha154x Service [DISABLED] aic78u2 Service [DISABLED] aic78xx Service C:\WINDOWS\system32\DRIVERS\alcan5wn.sys [MANUAL] alcan5wn Service C:\WINDOWS\system32\DRIVERS\alcaudsl.sys [MANUAL] alcaudsl Service C:\WINDOWS\system32\drivers\ALCXWDM.SYS [MANUAL] ALCXWDM Service C:\WINDOWS\system32\svchost.exe [DISABLED] Alerter Service C:\WINDOWS\System32\alg.exe [MANUAL] ALG Service [DISABLED] AliIde Service C:\WINDOWS\system32\DRIVERS\amdk7.sys [SYSTEM] AmdK7 Service [DISABLED] amsint Service C:\WINDOWS\system32\svchost.exe [MANUAL] AppMgmt Service [DISABLED] asc Service [DISABLED] asc3350p Service [DISABLED] asc3550 Service C:\WINDOWS\system32\DRIVERS\asyncmac.sys [MANUAL] AsyncMac Service C:\WINDOWS\system32\DRIVERS\atapi.sys [BOOT] atapi Service [DISABLED] Atdisk Service C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [MANUAL] ati2mtag Service C:\WINDOWS\system32\DRIVERS\atmarpc.sys [MANUAL] Atmarpc Service C:\WINDOWS\System32\svchost.exe [AUTO] AudioSrv Service C:\WINDOWS\system32\DRIVERS\audstub.sys [MANUAL] audstub Service C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe [AUTO] AVP Service BattC Service [SYSTEM] Beep Service C:\WINDOWS\system32\svchost.exe [MANUAL] BITS Service C:\WINDOWS\system32\svchost.exe [AUTO] Browser Service [DISABLED] cbidf2k Service [DISABLED] cd20xrnt Service [SYSTEM] Cdaudio Service [DISABLED] Cdfs Service C:\WINDOWS\system32\DRIVERS\cdrom.sys [SYSTEM] Cdrom Service [SYSTEM] Changer Service C:\WINDOWS\system32\cisvc.exe [MANUAL] CiSvc Service C:\WINDOWS\system32\clipsrv.exe [DISABLED] ClipSrv Service [DISABLED] CmdIde Service C:\WINDOWS\system32\dllhost.exe [MANUAL] COMSysApp Service ContentFilter Service ContentIndex Service [DISABLED] Cpqarray Service C:\WINDOWS\system32\svchost.exe [AUTO] CryptSvc Service [DISABLED] dac2w2k Service [DISABLED] dac960nt Service C:\WINDOWS\system32\svchost.exe [AUTO] DcomLaunch Service C:\WINDOWS\system32\svchost.exe [AUTO] Dhcp Service C:\WINDOWS\system32\DRIVERS\disk.sys [BOOT] Disk Service C:\WINDOWS\System32\dmadmin.exe [MANUAL] dmadmin Service C:\WINDOWS\System32\drivers\dmboot.sys [DISABLED] dmboot Service C:\WINDOWS\System32\drivers\dmio.sys [DISABLED] dmio Service C:\WINDOWS\System32\drivers\dmload.sys [DISABLED] dmload Service C:\WINDOWS\System32\svchost.exe [MANUAL] dmserver Service C:\WINDOWS\system32\drivers\DMusic.sys [MANUAL] DMusic Service C:\WINDOWS\system32\svchost.exe [AUTO] Dnscache Service [DISABLED] dpti2o Service C:\WINDOWS\system32\drivers\drmkaud.sys [MANUAL] drmkaud Service C:\WINDOWS\System32\svchost.exe [AUTO] ERSvc Service C:\WINDOWS\system32\services.exe [AUTO] Eventlog Service C:\WINDOWS\system32\svchost.exe [MANUAL] EventSystem Service C:\Program Files\ewido anti-spyware 4.0\guard.sys [SYSTEM] ewido anti-spyware 4.0 driver Service C:\Program Files\ewido anti-spyware 4.0\guard.exe [AUTO] ewido anti-spyware 4.0 guard Service [DISABLED] Fastfat Service C:\WINDOWS\System32\svchost.exe [MANUAL] FastUserSwitchingCompatibility Service C:\WINDOWS\system32\DRIVERS\fdc.sys [MANUAL] Fdc Service [SYSTEM] Fips Service C:\WINDOWS\system32\DRIVERS\flpydisk.sys [MANUAL] Flpydisk Service C:\WINDOWS\system32\DRIVERS\fltMgr.sys [BOOT] FltMgr Service [SYSTEM] Fs_Rec Service C:\WINDOWS\system32\DRIVERS\ftdisk.sys [BOOT] Ftdisk Service C:\WINDOWS\System32\DRIVERS\gmer.sys [MANUAL] gmer Service C:\WINDOWS\system32\DRIVERS\msgpc.sys [MANUAL] Gpc Service C:\WINDOWS\system32\DRIVERS\hamachi.sys [MANUAL] hamachi Service C:\WINDOWS\System32\svchost.exe [AUTO] helpsvc Service C:\WINDOWS\System32\svchost.exe [DISABLED] HidServ Service [DISABLED] hpn Service C:\WINDOWS\System32\Drivers\HTTP.sys [MANUAL] HTTP Service C:\WINDOWS\System32\svchost.exe [MANUAL] HTTPFilter Service [SYSTEM] i2omgmt Service [DISABLED] i2omp Service C:\WINDOWS\system32\DRIVERS\i8042prt.sys [SYSTEM] i8042prt Service C:\WINDOWS\system32\DRIVERS\imapi.sys [SYSTEM] Imapi Service C:\WINDOWS\system32\imapi.exe [MANUAL] ImapiService Service inetaccs Service [DISABLED] ini910u Service Inport Service [DISABLED] IntelIde Service C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys [MANUAL] Ip6Fw Service C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys [MANUAL] IpFilterDriver Service C:\WINDOWS\system32\DRIVERS\ipinip.sys [MANUAL] IpInIp Service C:\WINDOWS\system32\DRIVERS\ipnat.sys [MANUAL] IpNat Service C:\WINDOWS\system32\DRIVERS\ipsec.sys [SYSTEM] IPSec Service C:\WINDOWS\system32\DRIVERS\irenum.sys [MANUAL] IRENUM Service ISAPISearch Service C:\WINDOWS\system32\DRIVERS\isapnp.sys [BOOT] isapnp Service C:\WINDOWS\system32\DRIVERS\kbdclass.sys [SYSTEM] Kbdclass Service C:\WINDOWS\system32\drivers\kl1.sys [BOOT] kl1 Service C:\WINDOWS\system32\drivers\klif.sys [SYSTEM] klif Service C:\WINDOWS\system32\drivers\kmixer.sys [MANUAL] kmixer Service [BOOT] KSecDD Service C:\WINDOWS\system32\svchost.exe [AUTO] lanmanserver Service C:\WINDOWS\system32\svchost.exe [AUTO] lanmanworkstation Service [SYSTEM] lbrtfdc Service ldap Service LicenseService Service C:\Program Files\Common Files\LightScribe\LSSrvc.exe [AUTO] LightScribeService Service C:\WINDOWS\system32\svchost.exe [AUTO] LmHosts Service C:\WINDOWS\system32\svchost.exe [DISABLED] Messenger Service [SYSTEM] mnmdd Service C:\WINDOWS\system32\mnmsrvc.exe [MANUAL] mnmsrvc Service [MANUAL] Modem Service C:\WINDOWS\system32\DRIVERS\mouclass.sys [SYSTEM] Mouclass Service [BOOT] MountMgr Service [DISABLED] mraid35x Service C:\WINDOWS\system32\DRIVERS\mrxdav.sys [MANUAL] MRxDAV Service C:\WINDOWS\system32\DRIVERS\mrxsmb.sys [SYSTEM] MRxSmb Service C:\WINDOWS\system32\msdtc.exe [MANUAL] MSDTC Service [SYSTEM] Msfs Service C:\WINDOWS\system32\msiexec.exe [MANUAL] MSIServer Service C:\WINDOWS\system32\drivers\MSKSSRV.sys [MANUAL] MSKSSRV Service C:\WINDOWS\system32\drivers\MSPCLOCK.sys [MANUAL] MSPCLOCK Service C:\WINDOWS\system32\drivers\MSPQM.sys [MANUAL] MSPQM Service C:\WINDOWS\system32\DRIVERS\mssmbios.sys [MANUAL] mssmbios Service [BOOT] Mup Service [BOOT] NDIS Service C:\WINDOWS\system32\DRIVERS\ndistapi.sys [MANUAL] NdisTapi Service C:\WINDOWS\system32\DRIVERS\ndisuio.sys [MANUAL] Ndisuio Service C:\WINDOWS\system32\DRIVERS\ndiswan.sys [MANUAL] NdisWan Service [MANUAL] NDProxy Service C:\WINDOWS\system32\DRIVERS\netbios.sys [SYSTEM] NetBIOS Service C:\WINDOWS\system32\DRIVERS\netbt.sys [MANUAL] NetBT Service C:\WINDOWS\system32\netdde.exe [DISABLED] NetDDE Service C:\WINDOWS\system32\netdde.exe [DISABLED] NetDDEdsdm Service C:\WINDOWS\system32\lsass.exe [MANUAL] Netlogon Service C:\WINDOWS\System32\svchost.exe [MANUAL] Netman Service C:\WINDOWS\system32\svchost.exe [MANUAL] Nla Service [SYSTEM] Npfs Service [DISABLED] Ntfs Service C:\WINDOWS\system32\lsass.exe [MANUAL] NtLmSsp Service C:\WINDOWS\system32\svchost.exe [MANUAL] NtmsSvc Service [SYSTEM] Null Service C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys [MANUAL] NwlnkFlt Service C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys [MANUAL] NwlnkFwd Service C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [MANUAL] ose Service C:\WINDOWS\system32\DRIVERS\parport.sys [MANUAL] Parport Service [BOOT] PartMgr Service [AUTO] ParVdm Service C:\WINDOWS\system32\DRIVERS\pci.sys [BOOT] PCI Service [SYSTEM] PCIDump Service C:\WINDOWS\system32\DRIVERS\pciide.sys [BOOT] PCIIde Service [DISABLED] Pcmcia Service [MANUAL] PDCOMP Service [MANUAL] PDFRAME Service [MANUAL] PDRELI Service [MANUAL] PDRFRAME Service [DISABLED] perc2 Service [DISABLED] perc2hib Service PerfDisk Service PerfNet Service PerfOS Service PerfProc Service C:\WINDOWS\system32\services.exe [AUTO] PlugPlay Service C:\WINDOWS\system32\PnkBstrA.exe [AUTO] PnkBstrA Service C:\WINDOWS\system32\PnkBstrB.exe [MANUAL] PnkBstrB Service C:\WINDOWS\system32\drivers\PnkBstrK.sys [MANUAL] PnkBstrK Service C:\WINDOWS\system32\lsass.exe [AUTO] PolicyAgent Service C:\WINDOWS\system32\DRIVERS\raspptp.sys [MANUAL] PptpMiniport Service C:\WINDOWS\system32\lsass.exe [AUTO] ProtectedStorage Service C:\WINDOWS\system32\DRIVERS\psched.sys [MANUAL] PSched Service C:\WINDOWS\system32\DRIVERS\ptilink.sys [MANUAL] Ptilink Service C:\WINDOWS\System32\Drivers\PxHelp20.sys [BOOT] PxHelp20 Service [DISABLED] ql1080 Service [DISABLED] Ql10wnt Service [DISABLED] ql12160 Service [DISABLED] ql1240 Service [DISABLED] ql1280 Service C:\WINDOWS\system32\DRIVERS\rasacd.sys [SYSTEM] RasAcd Service C:\WINDOWS\system32\svchost.exe [MANUAL] RasAuto Service C:\WINDOWS\system32\DRIVERS\rasl2tp.sys [MANUAL] Rasl2tp Service C:\WINDOWS\system32\svchost.exe [MANUAL] RasMan Service C:\WINDOWS\system32\DRIVERS\raspppoe.sys [MANUAL] RasPppoe Service C:\WINDOWS\system32\DRIVERS\raspti.sys [MANUAL] Raspti Service C:\WINDOWS\system32\DRIVERS\rdbss.sys [SYSTEM] Rdbss Service C:\WINDOWS\System32\DRIVERS\RDPCDD.sys [SYSTEM] RDPCDD Service RDPDD Service RDPNP Service [MANUAL] RDPWD Service C:\WINDOWS\system32\sessmgr.exe [MANUAL] RDSessMgr Service C:\WINDOWS\system32\DRIVERS\redbook.sys [SYSTEM] redbook Service C:\WINDOWS\system32\svchost.exe [DISABLED] RemoteAccess Service C:\WINDOWS\system32\locator.exe [MANUAL] RpcLocator Service C:\WINDOWS\system32\svchost.exe [AUTO] RpcSs Service C:\WINDOWS\system32\rsvp.exe [MANUAL] RSVP Service C:\WINDOWS\system32\lsass.exe [AUTO] SamSs Service C:\WINDOWS\System32\SCardSvr.exe [MANUAL] SCardSvr Service C:\WINDOWS\System32\svchost.exe [AUTO] Schedule Service C:\WINDOWS\system32\DRIVERS\secdrv.sys [MANUAL] Secdrv Service C:\WINDOWS\System32\svchost.exe [AUTO] seclogon Service C:\WINDOWS\system32\svchost.exe [AUTO] SENS Service C:\WINDOWS\system32\DRIVERS\serenum.sys [MANUAL] serenum Service C:\WINDOWS\system32\DRIVERS\serial.sys [SYSTEM] Serial Service [SYSTEM] Sfloppy Service C:\WINDOWS\system32\svchost.exe [AUTO] SharedAccess Service C:\WINDOWS\System32\svchost.exe [AUTO] ShellHWDetection Service [DISABLED] Simbad Service C:\WINDOWS\system32\DRIVERS\sisnic.sys [MANUAL] SISNIC Service C:\Program Files\Sygate\SPF\smc.exe [AUTO] SmcService Service [DISABLED] Sparrow Service C:\WINDOWS\system32\drivers\splitter.sys [MANUAL] splitter Service C:\WINDOWS\system32\spoolsv.exe [AUTO] Spooler Service C:\WINDOWS\system32\DRIVERS\sr.sys [DISABLED] sr Service C:\WINDOWS\system32\svchost.exe [AUTO] srservice Service C:\WINDOWS\system32\DRIVERS\srv.sys [MANUAL] Srv Service C:\WINDOWS\system32\svchost.exe [MANUAL] SSDPSRV Service C:\WINDOWS\system32\svchost.exe [AUTO] stisvc Service C:\WINDOWS\system32\DRIVERS\swenum.sys [MANUAL] swenum Service C:\WINDOWS\system32\drivers\swmidi.sys [MANUAL] swmidi Service C:\WINDOWS\system32\dllhost.exe [MANUAL] SwPrv Service [DISABLED] symc810 Service [DISABLED] symc8xx Service [DISABLED] sym_hi Service [DISABLED] sym_u3 Service C:\WINDOWS\system32\drivers\sysaudio.sys [MANUAL] sysaudio Service C:\WINDOWS\system32\smlogsvc.exe [MANUAL] SysmonLog Service C:\WINDOWS\System32\svchost.exe [MANUAL] TapiSrv Service C:\WINDOWS\system32\DRIVERS\tcpip.sys [SYSTEM] Tcpip Service [MANUAL] TDPIPE Service [MANUAL] TDTCP Service C:\WINDOWS\SYSTEM32\Drivers\Teefer.sys [BOOT] Teefer Service C:\WINDOWS\system32\DRIVERS\termdd.sys [SYSTEM] TermDD Service C:\WINDOWS\System32\svchost.exe [MANUAL] TermService Service C:\WINDOWS\System32\svchost.exe [AUTO] Themes Service [DISABLED] TosIde Service C:\WINDOWS\system32\svchost.exe [AUTO] TrkWks Service TSDDD Service C:\WINDOWS\system32\DRIVERS\uagp35.sys [BOOT] uagp35 Service [DISABLED] Udfs Service [DISABLED] ultra Service C:\WINDOWS\system32\wdfmgr.exe [AUTO] UMWdf Service C:\WINDOWS\system32\DRIVERS\update.sys [MANUAL] Update Service C:\WINDOWS\system32\svchost.exe [MANUAL] upnphost Service C:\WINDOWS\System32\ups.exe [MANUAL] UPS Service C:\WINDOWS\system32\DRIVERS\usbehci.sys [MANUAL] usbehci Service C:\WINDOWS\system32\DRIVERS\usbhub.sys [MANUAL] usbhub Service C:\WINDOWS\system32\DRIVERS\usbohci.sys [MANUAL] usbohci Service C:\WINDOWS\system32\DRIVERS\usbprint.sys [MANUAL] usbprint Service C:\WINDOWS\system32\DRIVERS\usbscan.sys [MANUAL] usbscan Service C:\WINDOWS\System32\drivers\vga.sys [SYSTEM] VgaSave Service [DISABLED] ViaIde Service [BOOT] VolSnap Service [DISABLED] vsdatant Service C:\WINDOWS\System32\vssvc.exe [MANUAL] VSS Service C:\WINDOWS\System32\svchost.exe [AUTO] W32Time Service W3SVC Service C:\WINDOWS\system32\DRIVERS\wanarp.sys [MANUAL] Wanarp Service [MANUAL] WDICA Service C:\WINDOWS\system32\drivers\wdmaud.sys [MANUAL] wdmaud Service C:\WINDOWS\system32\svchost.exe [AUTO] WebClient Service C:\WINDOWS\SYSTEM32\Drivers\wg3n.sys [AUTO] wg3n Service C:\WINDOWS\SYSTEM32\Drivers\wg4n.sys [AUTO] wg4n Service C:\WINDOWS\SYSTEM32\Drivers\wg5n.sys [AUTO] wg5n Service C:\WINDOWS\SYSTEM32\Drivers\wg6n.sys [AUTO] wg6n Service C:\WINDOWS\system32\svchost.exe [AUTO] winmgmt Service [MANUAL] Winsock Service WinSock2 Service WinTrust Service C:\WINDOWS\System32\svchost.exe [MANUAL] WmdmPmSN Service WmiApRpl Service C:\WINDOWS\system32\wbem\wmiapsrv.exe [MANUAL] WmiApSrv Service C:\WINDOWS\system32\drivers\wpsdrvnt.sys [SYSTEM] wpsdrvnt Service [SYSTEM] WS2IFSL Service C:\WINDOWS\System32\svchost.exe [AUTO] wscsvc Service C:\WINDOWS\system32\svchost.exe [AUTO] wuauserv Service C:\WINDOWS\System32\svchost.exe [AUTO] WZCSVC Service C:\WINDOWS\System32\svchost.exe [MANUAL] xmlprov Service {06E6A357-5CA4-4DE2-A137-6ABD34937548} Service {735FC036-7518-48D3-AF84-A7E9E7D71E98} ---- EOF - GMER 1.0.12 ----

Kod: Zaznacz wszystko: GMER 1.0.12.12086 - http://www.gmer.net Rootkit scan 2007-04-02 20:53:43 Windows 5.1.2600 Dodatek Service Pack 2 ---- System - GMER 1.0.12 ---- SSDT \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys ZwAllocateVirtualMemory SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwClose SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateProcess SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateProcessEx SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateSection SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateSymbolicLinkObject SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateThread SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwDuplicateObject SSDT \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys ZwMapViewOfSection SSDT kl1.sys ZwOpenFile SSDT \??\C:\Program Files\ewido anti-spyware 4.0\guard.sys ZwOpenProcess SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwOpenSection SSDT \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys ZwProtectVirtualMemory SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwQuerySystemInformation SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwResumeThread SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetContextThread SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetInformationFile SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetInformationProcess SSDT \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys ZwShutdownSystem SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSuspendThread SSDT \??\C:\Program Files\ewido anti-spyware 4.0\guard.sys ZwTerminateProcess SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwWriteVirtualMemory SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[284] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[285] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[286] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[287] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[288] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[289] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[290] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[291] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[292] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[293] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[294] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[295] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[296] Code \??\C:\WINDOWS\system32\drivers\klif.sys FsRtlCheckLockForReadAccess Code \??\C:\WINDOWS\system32\drivers\klif.sys IoIsOperationSynchronous ---- Kernel code sections - GMER 1.0.12 ---- .text ntoskrnl.exe!KiDispatchInterrupt + BA 804DB92E 7 Bytes JMP B2E76E10 \??\C:\WINDOWS\system32\drivers\klif.sys .text ntoskrnl.exe!IoIsOperationSynchronous 804E8752 5 Bytes JMP B2E74B50 \??\C:\WINDOWS\system32\drivers\klif.sys .text ntoskrnl.exe!FsRtlCheckLockForReadAccess 80503C29 5 Bytes JMP B2E746C0 \??\C:\WINDOWS\system32\drivers\klif.sys ? C:\WINDOWS\system32\drivers\kl1.sys Nie można odnaleźć określonego pliku. .text tcpip.sys!IPTransmit + 10BC B2F50CFA 6 Bytes CALL F7691E50 Teefer.sys .text tcpip.sys!IPTransmit + 2810 B2F5244E 6 Bytes CALL F7691E50 Teefer.sys .text tcpip.sys!ARPRcv + 506D B2F574E0 6 Bytes CALL F7691E50 Teefer.sys ? C:\WINDOWS\system32\drivers\klif.sys Nie można odnaleźć określonego pliku. .text wanarp.sys F79643FD 4 Bytes CALL F7691FA0 Teefer.sys .text wanarp.sys F7964402 2 Bytes [ 90, 90 ] ---- Devices - GMER 1.0.12 ---- Device \Driver\kl1 \Device\klick IRP_MJ_CREATE [F7910220] wpsdrvnt.sys Device \Driver\kl1 \Device\klick IRP_MJ_CLOSE [F7910480] wpsdrvnt.sys Device \Driver\kl1 \Device\klick IRP_MJ_DEVICE_CONTROL [F79105A0] wpsdrvnt.sys Device \Driver\kl1 \Device\klick IRP_MJ_INTERNAL_DEVICE_CONTROL [F79105D0] wpsdrvnt.sys Device \Driver\kl1 \Device\kl1 IRP_MJ_CREATE [F7910220] wpsdrvnt.sys Device \Driver\kl1 \Device\kl1 IRP_MJ_CLOSE [F7910480] wpsdrvnt.sys Device \Driver\kl1 \Device\kl1 IRP_MJ_DEVICE_CONTROL [F79105A0] wpsdrvnt.sys Device \Driver\kl1 \Device\kl1 IRP_MJ_INTERNAL_DEVICE_CONTROL [F79105D0] wpsdrvnt.sys Device \Driver\kl1 \Device\klop IRP_MJ_CREATE [F7910220] wpsdrvnt.sys Device \Driver\kl1 \Device\klop IRP_MJ_CLOSE [F7910480] wpsdrvnt.sys Device \Driver\kl1 \Device\klop IRP_MJ_DEVICE_CONTROL [F79105A0] wpsdrvnt.sys Device \Driver\kl1 \Device\klop IRP_MJ_INTERNAL_DEVICE_CONTROL [F79105D0] wpsdrvnt.sys Device \Driver\kl1 \Device\klin IRP_MJ_CREATE [F7910220] wpsdrvnt.sys Device \Driver\kl1 \Device\klin IRP_MJ_CLOSE [F7910480] wpsdrvnt.sys Device \Driver\kl1 \Device\klin IRP_MJ_DEVICE_CONTROL [F79105A0] wpsdrvnt.sys Device \Driver\kl1 \Device\klin IRP_MJ_INTERNAL_DEVICE_CONTROL [F79105D0] wpsdrvnt.sys ---- Threads - GMER 1.0.12 ---- Thread 4:116 863AB8E0 Thread 4:120 863AB8E0 Thread 4:124 863848D0 Thread 4:128 863848D0 Thread 4:132 863848D0 Thread 4:348 863AB8E0 Thread 4:412 863AB8E0 Thread 4:1956 85A2B4A0 ---- Processes - GMER 1.0.12 ---- Library C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll (*** hidden *** ) @ C:\WINDOWS\system32\msiexec.exe [2720] 0x61300000 ---- EOF - GMER 1.0.12 ----

wyskoczylo powiadomienie zeznalazl modyfikacje wskazujaca na obecnosc rookita to dobrze czy zle?:D

**Posty:** 18165 · przez **wojtas** 02 Kwi 2007, 21:14

pokaz jeszcze comboscana

**Posty:** 35 · przez **Wilk.** 02 Kwi 2007, 21:15

cieply comoscan z podwojnym serem raz

Kod: Zaznacz wszystko: ComboScan v20070306.20 run by Konrad on 2007-04-02 at 21:05:56 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- HijackThis (run as Konrad.exe) ---------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 21:05:58, on 2007-04-02 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Sygate\SPF\smc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\ewido anti-spyware 4.0\guard.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\svchost.exe C:\PROGRA~1\NEOSTR~1\CnxMon.exe C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\QuickTime\qttask.exe C:\Program Files\ewido anti-spyware 4.0\ewido.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Neostrada TP\NeostradaTP.exe C:\Program Files\Neostrada TP\ComComp.exe C:\Program Files\Neostrada TP\Watch.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Konrad\Pulpit\Nowy folder\comboscan.exe C:\DOCUME~1\Konrad\Pulpit\NOWYFO~1\Konrad.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O17 - HKLM\System\CCS\Services\Tcpip\..\{6F14A062-74DC-45F9-82BB-D906B7B577E0}: NameServer = 194.204.159.1 217.98.63.164 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe -- Files created between 2007-03-02 and 2007-04-02 ----------------------------- 2007-04-02 16:20:32 25856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys 2007-04-01 19:57:32 0 d-------- C:\Program Files\ewido anti-spyware 4.0<EWIDOA~1.0> 2007-04-01 12:20:59 17480 --a------ C:\WINDOWS\system32\drivers\hamachi.sys 2007-04-01 12:20:59 0 d-------- C:\Program Files\Hamachi 2007-04-01 12:20:37 13900 --a------ C:\WINDOWS\War3Unin.dat 2007-04-01 12:20:36 2829 --a------ C:\WINDOWS\War3Unin.pif 2007-04-01 12:20:36 126976 --a------ C:\WINDOWS\War3Unin.exe 2007-03-29 22:15:44 80 --a------ C:\WINDOWS\gmer_uninstall.cmd<GMER_U~1.CMD> 2007-03-29 21:59:48 14568 --a------ C:\WINDOWS\system32\drivers\wg6n.sys 2007-03-29 21:59:48 14568 --a------ C:\WINDOWS\system32\drivers\wg5n.sys 2007-03-29 21:59:47 14568 --a------ C:\WINDOWS\system32\drivers\wg4n.sys 2007-03-29 21:59:47 14568 --a------ C:\WINDOWS\system32\drivers\wg3n.sys 2007-03-29 21:59:47 60496 --a------ C:\WINDOWS\system32\drivers\Teefer.sys 2007-03-29 21:59:46 21075 --a------ C:\WINDOWS\system32\drivers\wpsdrvnt.sys 2007-03-29 21:59:43 83096 --a------ C:\WINDOWS\system32\SSSensor.dll 2007-03-29 21:59:40 0 d-------- C:\Program Files\Sygate 2007-03-29 21:59:27 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard<WISEIN~1> 2007-03-29 19:36:37 139776 --a------ C:\WINDOWS\system32\TASKMGR.COM 2007-03-29 19:36:37 139776 --a------ C:\WINDOWS\system32\T.COM 2007-03-29 19:36:37 149504 --a------ C:\WINDOWS\R.COM 2007-03-29 09:00:12 0 d-------- C:\Program Files\QuickTime<QUICKT~1> 2007-03-29 08:59:55 0 d-------- C:\Program Files\Apple Software Update<APPLES~1> 2007-03-28 21:19:14 0 d-------- C:\Program Files\BrizVideoJoin<BRIZVI~1> 2007-03-28 21:17:23 0 d-------- C:\Program Files\AVI Codec Pack<AVICOD~1> 2007-03-28 21:02:56 0 d-------- C:\Program Files\SubEdit-Player<SUBEDI~1> 2007-03-28 21:02:37 0 d-------- C:\Program Files\Real Alternative<REALAL~1> 2007-03-28 21:02:37 0 d-------- C:\Program Files\Media Player Classic<MEDIAP~1> 2007-03-28 21:01:51 0 d-------- C:\Program Files\AC3Filter<AC3FIL~1> 2007-03-28 21:01:30 0 d-------- C:\Program Files\DivX 2007-03-28 20:59:14 0 d-------- C:\Program Files\MarBit 2007-03-28 16:14:32 0 d-------- C:\Program Files\Common Files\LightScribe<LIGHTS~1> 2007-03-28 16:12:47 364544 -----n--- C:\WINDOWS\system32\TwnLib4.dll 2007-03-28 16:12:47 106496 --a------ C:\WINDOWS\system32\TwnLib20.dll 2007-03-28 16:12:43 471040 -----n--- C:\WINDOWS\system32\ImagXRA7.dll 2007-03-28 16:12:43 262144 -----n--- C:\WINDOWS\system32\ImagXR7.dll 2007-03-28 16:12:43 476320 -----n--- C:\WINDOWS\system32\ImagXpr7.dll 2007-03-28 16:12:43 1568768 -----n--- C:\WINDOWS\system32\ImagX7.dll 2007-03-28 16:12:42 155648 --a------ C:\WINDOWS\system32\NeroCheck.exe<NEROCH~1.EXE> 2007-03-28 16:12:38 0 d-------- C:\Program Files\Common Files\Ahead 2007-03-28 16:12:36 0 d-------- C:\Program Files\Ahead 2007-03-27 20:37:04 63040 --a------ C:\WINDOWS\system32\PnkBstrA.exe 2007-03-27 19:09:36 0 d-------- C:\Program Files\America's Army Server Manager<AMERIC~1> 2007-03-26 19:27:02 22584 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys 2007-03-26 16:57:55 99904 --a------ C:\WINDOWS\system32\PnkBstrB.exe 2007-03-26 16:57:46 0 d-------- C:\WINDOWS\system32\LogFiles 2007-03-26 16:47:45 0 d-------- C:\Program Files\America's Army<AMERIC~2> 2007-03-26 16:44:45 62744 --a------ C:\WINDOWS\system32\xinput1_2.dll<XINPUT~3.DLL> 2007-03-26 16:44:45 236824 --a------ C:\WINDOWS\system32\xactengine2_3.dll<XACTEN~4.DLL> 2007-03-22 15:40:20 17920 --a------ C:\WINDOWS\system32\mdimon.dll 2007-03-22 15:39:10 0 d-------- C:\WINDOWS\SHELLNEW 2007-03-22 15:30:28 0 d-------- C:\Program Files\Common Files\Adobe 2007-03-22 01:09:06 0 d-------- C:\Program Files\Common Files\Skype 2007-03-22 01:08:52 0 d-------- C:\Program Files\Skype 2007-03-21 09:31:49 5632 --a------ C:\WINDOWS\system32\ptpusb.dll 2007-03-21 09:31:47 159232 --a------ C:\WINDOWS\system32\ptpusd.dll 2007-03-21 09:31:46 15104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys 2007-03-20 21:36:26 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll<CMDLIN~1.DLL> 2007-03-20 20:41:50 2297552 --a------ C:\WINDOWS\system32\d3dx9_26.dll 2007-03-20 15:38:13 115880 -----n--- C:\WINDOWS\system32\pxinsi64.exe 2007-03-20 15:38:13 36528 -----n--- C:\WINDOWS\system32\drivers\PxHelp20.sys 2007-03-20 15:38:13 2560 -----n--- C:\WINDOWS\system32\drivers\cdralw2k.sys 2007-03-20 15:38:13 2432 -----n--- C:\WINDOWS\system32\drivers\cdr4_xp.sys 2007-03-20 15:38:12 129784 -----n--- C:\WINDOWS\system32\pxafs.dll 2007-03-20 15:37:44 0 d-------- C:\WINDOWS\RegisteredPackages<REGIST~2> 2007-03-20 15:36:11 0 d-------- C:\Program Files\Winamp 2007-03-20 15:29:05 3490 --a------ C:\WINDOWS\mozver.dat 2007-03-20 15:28:56 0 d-------- C:\Program Files\Mozilla Thunderbird<MOZILL~2> 2007-03-19 22:24:28 0 --a------ C:\WINDOWS\nsreg.dat 2007-03-19 22:24:20 0 d-------- C:\Program Files\Mozilla Firefox<MOZILL~1> 2007-03-19 00:20:15 49152 --a------ C:\WINDOWS\system32\ChCfg.exe 2007-03-19 00:20:14 6400 --a------ C:\WINDOWS\system32\drivers\splitter.sys 2007-03-19 00:20:12 82944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys 2007-03-19 00:20:10 52864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys 2007-03-19 00:20:04 54272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys 2007-03-19 00:20:02 142464 --a------ C:\WINDOWS\system32\drivers\aec.sys 2007-03-19 00:20:00 172416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys 2007-03-19 00:19:59 2944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys 2007-03-19 00:19:57 60800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys 2007-03-19 00:19:56 7552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys 2007-03-19 00:19:54 4992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys 2007-03-19 00:19:51 5376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2007-03-19 00:19:47 4027456 -ra------ C:\WINDOWS\system32\drivers\alcxwdm.sys 2007-03-19 00:19:45 4096 --a------ C:\WINDOWS\system32\ksuser.dll 2007-03-19 00:19:45 145792 --a------ C:\WINDOWS\system32\drivers\portcls.sys 2007-03-19 00:19:45 60288 --a------ C:\WINDOWS\system32\drivers\drmk.sys 2007-03-19 00:19:39 10528768 --a------ C:\WINDOWS\system32\RTLCPL.exe 2007-03-19 00:19:39 0 d-------- C:\Program Files\Realtek AC97<REALTE~2> 2007-03-19 00:19:37 577536 --a------ C:\WINDOWS\soundman.exe 2007-03-19 00:19:36 147456 --a------ C:\WINDOWS\system32\RtlCPAPI.dll 2007-03-19 00:19:36 315392 --a------ C:\WINDOWS\alcupd.exe 2007-03-19 00:19:36 217088 --a------ C:\WINDOWS\Alcrmv.exe 2007-03-18 22:58:20 22752 --a------ C:\WINDOWS\system32\spupdsvc.exe 2007-03-18 22:58:20 0 d-------- C:\WINDOWS\system32\PreInstall<PREINS~1> 2007-03-18 22:58:18 0 d--h----- C:\WINDOWS\$hf_mig$ 2007-03-18 22:46:47 0 d-------- C:\WINDOWS\system32\SoftwareDistribution<SOFTWA~1> 2007-03-18 22:41:28 0 d-------- C:\Program Files\Realtek Sound Manager<REALTE~1> 2007-03-18 22:41:28 0 d-------- C:\Program Files\AvRack 2007-03-18 20:28:56 0 d-------- C:\Program Files\Gadu-Gadu<GADU-G~1> 2007-03-18 20:26:43 32768 --a------ C:\WINDOWS\system32\UnAudioNT.dll<UNAUDI~1.DLL> 2007-03-18 20:26:43 0 d-------- C:\Program Files\VIA Technologies, Inc<VIATEC~1> 2007-03-18 20:26:39 306688 --a------ C:\WINDOWS\IsUninst.exe 2007-03-18 19:41:56 3072 --a------ C:\WINDOWS\system32\drivers\audstub.sys 2007-03-18 19:40:48 58624 --a------ C:\WINDOWS\system32\drivers\redbook.sys 2007-03-18 19:40:26 701440 --a------ C:\WINDOWS\system32\drivers\ati2mtag.sys 2007-03-18 19:40:26 516768 --a------ C:\WINDOWS\system32\ativvaxx.dll 2007-03-18 19:40:26 1888992 --a------ C:\WINDOWS\system32\ati3duag.dll 2007-03-18 19:40:26 870784 --a------ C:\WINDOWS\system32\ati3d1ag.dll 2007-03-18 19:40:25 201728 --a------ C:\WINDOWS\system32\ati2dvag.dll 2007-03-18 19:40:25 229376 --a------ C:\WINDOWS\system32\ati2cqag.dll 2007-03-18 19:40:06 44672 --a------ C:\WINDOWS\system32\drivers\UAGP35.SYS 2007-03-18 19:40:02 32768 --a------ C:\WINDOWS\system32\drivers\sisnic.sys 2007-03-18 19:39:56 77312 --a------ C:\WINDOWS\system32\usbui.dll 2007-03-18 19:38:45 0 d--hs---- C:\WINDOWS\Installer<INSTAL~1> 2007-03-18 19:38:44 0 d-------- C:\Program Files\Common Files\ODBC 2007-03-18 19:38:41 0 dr------- C:\Program Files<PROGRA~1> 2007-03-18 19:38:41 0 d-------- C:\Program Files\Common Files\SpeechEngines<SPEECH~1> 2007-03-18 19:38:37 6144 -ra------ C:\WINDOWS\system32\kbdtuq.dll 2007-03-18 19:38:37 6144 -ra------ C:\WINDOWS\system32\kbdtuf.dll 2007-03-18 19:38:37 5632 -ra------ C:\WINDOWS\system32\kbdazel.dll 2007-03-18 19:38:36 5632 -ra------ C:\WINDOWS\system32\kbdmon.dll 2007-03-18 19:38:36 5632 -ra------ C:\WINDOWS\system32\kbdkyr.dll 2007-03-18 19:38:34 8192 -ra------ C:\WINDOWS\system32\kbdhept.dll 2007-03-18 19:38:34 6656 -ra------ C:\WINDOWS\system32\kbdhela3.dll 2007-03-18 19:38:34 6144 -ra------ C:\WINDOWS\system32\kbdhela2.dll 2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe319.dll 2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe220.dll 2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe.dll 2007-03-18 19:38:34 6144 -ra------ C:\WINDOWS\system32\kbdgkl.dll 2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdlv1.dll 2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdlv.dll 2007-03-18 19:38:32 5632 -ra------ C:\WINDOWS\system32\kbdlt1.dll 2007-03-18 19:38:32 5632 -ra------ C:\WINDOWS\system32\kbdlt.dll 2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdest.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdycl.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdsl1.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdsl.dll 2007-03-18 19:38:29 5632 --a------ C:\WINDOWS\system32\kbdro.dll 2007-03-18 19:38:29 5632 --a------ C:\WINDOWS\system32\kbdhu1.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdhu.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcz2.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcz1.dll 2007-03-18 19:38:29 7168 --a------ C:\WINDOWS\system32\kbdcz.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcr.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\KBDAL.DLL 2007-03-18 19:38:28 13312 --a------ C:\WINDOWS\system32\irclass.dll 2007-03-18 19:38:28 176157 --a------ C:\WINDOWS\system32\dgrpsetu.dll 2007-03-18 19:38:27 24661 --a------ C:\WINDOWS\system32\spxcoins.dll 2007-03-18 19:38:27 103424 --a------ C:\WINDOWS\system32\EqnClass.Dll 2007-03-18 19:38:27 85532 --a------ C:\WINDOWS\system32\dgsetup.dll 2007-03-18 19:38:27 9168 --a------ C:\WINDOWS\system\VER.DLL 2007-03-18 19:38:27 19200 --a------ C:\WINDOWS\system\TAPI.DLL 2007-03-18 19:38:27 5120 --a------ C:\WINDOWS\system\SHELL.DLL 2007-03-18 19:38:26 24064 --a------ C:\WINDOWS\system\OLESVR.DLL 2007-03-18 19:38:26 83456 --a------ C:\WINDOWS\system\OLECLI.DLL 2007-03-18 19:38:26 127008 --a------ C:\WINDOWS\system\MSVIDEO.DLL 2007-03-18 19:38:26 9936 --a------ C:\WINDOWS\system\LZEXPAND.DLL 2007-03-18 19:38:26 33376 --a------ C:\WINDOWS\system\COMMDLG.DLL 2007-03-18 19:38:26 109488 --a------ C:\WINDOWS\system\AVIFILE.DLL 2007-03-18 19:38:26 70096 --a------ C:\WINDOWS\system\AVICAP.DLL 2007-03-18 19:38:25 15360 --a------ C:\WINDOWS\TASKMAN.EXE 2007-03-18 19:38:25 11264 --a------ C:\WINDOWS\system32\drivers\irenum.sys 2007-03-18 19:38:25 8704 --a------ C:\WINDOWS\system32\batt.dll 2007-03-18 19:38:25 69552 --a------ C:\WINDOWS\system\MMSYSTEM.DLL 2007-03-18 19:38:24 70144 --a------ C:\WINDOWS\NOTEPAD.EXE 2007-03-18 19:38:23 75776 --a------ C:\WINDOWS\system32\storprop.dll 2007-03-18 19:38:03 0 d-------- C:\WINDOWS\system32\CatRoot2 2007-03-18 19:38:03 0 d-------- C:\WINDOWS\system32\CatRoot 2007-03-18 19:37:37 0 d-------- C:\Documents and Settings<DOCUME~1> 2007-03-18 19:37:36 0 d--hs---- C:\System Volume Information<SYSTEM~1> 2007-03-18 19:29:37 0 d-------- C:\WINDOWS 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\WinSxS 2007-03-18 19:29:37 0 dr------- C:\WINDOWS\Web 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\twain_32 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\wins 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\wbem 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\usmt 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\spool 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ShellExt 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\Setup 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ras 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\oobe 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\npp 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\mui 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\inetsrv 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\IME 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\icsxml 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ias 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\export 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers\etc 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers\disdn 2007-03-18 19:29:37 0 dr-hs--c- C:\WINDOWS\system32\dllcache 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\dhcp 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\config 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\3com_dmi 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\3076 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\2052 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1054 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1045 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1042 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1041 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1037 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1033 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1031 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1028 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1025 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\security 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Resources<RESOUR~1> 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\repair 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Provisioning<PROVIS~1> 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\PeerNet 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\pchealth 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\mui 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\msapps 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\msagent 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Media 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\java 2007-03-18 19:29:37 0 d--h----- C:\WINDOWS\inf 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\ime 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Help 2007-03-18 19:29:37 0 dr--s---- C:\WINDOWS\Fonts 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Driver Cache<DRIVER~1> 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Debug 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Cursors 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Connection Wizard<CONNEC~1> 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Config 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\AppPatch 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\addins 2007-03-18 19:08:28 32768 --a------ C:\WINDOWS\system32\WooDial2000.dll<WOODIA~1.DLL> 2007-03-18 19:06:22 5606 --a------ C:\WINDOWS\system32\stci.dll 2007-03-18 19:06:22 5280 --a------ C:\WINDOWS\system32\drivers\alcawh.sys 2007-03-18 19:06:22 70688 --a------ C:\WINDOWS\system32\drivers\alcaudsl.sys 2007-03-18 19:06:22 3968 --a------ C:\WINDOWS\system32\drivers\alcacr.sys 2007-03-18 19:06:21 53600 --a------ C:\WINDOWS\system32\drivers\alcan5wn.sys 2007-03-18 19:06:20 0 d-------- C:\Program Files\Thomson 2007-03-18 19:06:19 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1> 2007-03-18 19:06:17 0 d-------- C:\Program Files\Common Files\InstallShield<INSTAL~1> 2007-03-18 19:05:15 0 d-------- C:\Program Files\Neostrada TP<NEOSTR~1> 2007-03-18 18:53:40 0 d-------- C:\WINDOWS\SoftwareDistribution<SOFTWA~1> 2007-03-18 18:53:39 0 d-------- C:\WINDOWS\Prefetch 2007-03-18 18:50:11 0 d-------- C:\WINDOWS\system32\xircom 2007-03-18 18:50:11 0 d-------- C:\Program Files\microsoft frontpage<MICROS~1> 2007-03-18 18:50:02 0 -rahs---- C:\MSDOS.SYS 2007-03-18 18:50:02 0 -rahs---- C:\IO.SYS 2007-03-18 18:50:02 0 --a------ C:\CONFIG.SYS 2007-03-18 18:50:02 0 -----n--- C:\AUTOEXEC.BAT 2007-03-18 18:49:44 112128 --a------ C:\WINDOWS\system32\mapi32.dll 2007-03-18 18:48:53 0 dr------- C:\WINDOWS\Offline Web Pages<OFFLIN~1> 2007-03-18 18:48:53 0 d---s---- C:\WINDOWS\Downloaded Program Files<DOWNLO~1> 2007-03-18 18:48:41 0 d--h----- C:\Program Files\WindowsUpdate<WINDOW~3> 2007-03-18 18:48:38 0 d-------- C:\Program Files\Usługi online<USUGIO~1> 2007-03-18 18:48:21 0 d-------- C:\WINDOWS\system32\DirectX 2007-03-18 18:48:01 11264 --a------ C:\WINDOWS\system32\atrace.dll 2007-03-18 18:47:53 12288 --a------ C:\WINDOWS\system32\nmevtmsg.dll 2007-03-18 18:47:52 67584 --a------ C:\WINDOWS\system32\acctres.dll 2007-03-18 18:47:49 0 d---s---- C:\WINDOWS\Tasks 2007-03-18 18:47:49 16384 --a------ C:\WINDOWS\system32\icfgnt5.dll 2007-03-18 18:47:48 0 d-------- C:\Program Files\Common Files\MSSoap 2007-03-18 18:47:44 0 d-------- C:\WINDOWS\system32\Macromed 2007-03-18 18:47:44 0 d-------- C:\WINDOWS\srchasst 2007-03-18 18:47:41 173536 --a------ C:\WINDOWS\system32\wuweb.dll 2007-03-18 18:47:41 128280 --a------ C:\WINDOWS\system32\wucltui.dll 2007-03-18 18:47:41 6656 --a------ C:\WINDOWS\system32\wuauserv.dll 2007-03-18 18:47:41 195352 --a------ C:\WINDOWS\system32\wuaueng1.dll 2007-03-18 18:47:41 1343768 --a------ C:\WINDOWS\system32\wuaueng.dll 2007-03-18 18:47:40 41240 --a------ C:\WINDOWS\system32\wups.dll 2007-03-18 18:47:40 175384 --a------ C:\WINDOWS\system32\wuauclt1.exe 2007-03-18 18:47:40 125208 --a------ C:\WINDOWS\system32\wuauclt.exe 2007-03-18 18:47:40 466200 --a------ C:\WINDOWS\system32\wuapi.dll 2007-03-18 18:47:40 18944 --a------ C:\WINDOWS\system32\qmgrprxy.dll 2007-03-18 18:47:40 382464 --a------ C:\WINDOWS\system32\qmgr.dll 2007-03-18 18:47:40 7168 --a------ C:\WINDOWS\system32\bitsprx3.dll 2007-03-18 18:47:40 8192 --a------ C:\WINDOWS\system32\bitsprx2.dll 2007-03-18 18:47:36 0 d-------- C:\Program Files\Movie Maker<MOVIEM~1> 2007-03-18 18:47:33 45568 --a------ C:\WINDOWS\system32\safrslv.dll 2007-03-18 18:47:33 29696 --a------ C:\WINDOWS\system32\safrdm.dll 2007-03-18 18:47:33 43520 --a------ C:\WINDOWS\system32\safrcdlg.dll 2007-03-18 18:47:32 43520 --a------ C:\WINDOWS\system32\racpldlg.dll 2007-03-18 18:47:30 23040 --a------ C:\WINDOWS\system32\fltmc.exe 2007-03-18 18:47:30 16896 --a------ C:\WINDOWS\system32\fltlib.dll 2007-03-18 18:47:29 171008 --a------ C:\WINDOWS\system32\srsvc.dll 2007-03-18 18:47:29 240128 --a------ C:\WINDOWS\system32\srrstr.dll 2007-03-18 18:47:29 67584 --a------ C:\WINDOWS\system32\srclient.dll 2007-03-18 18:47:29 0 d-------- C:\WINDOWS\system32\Restore 2007-03-18 18:47:29 73472 --a------ C:\WINDOWS\system32\drivers\sr.sys 2007-03-18 18:47:29 128896 --a------ C:\WINDOWS\system32\drivers\fltmgr.sys 2007-03-18 18:47:28 28672 --a------ C:\WINDOWS\system32\nmmkcert.dll 2007-03-18 18:47:28 69632 --a------ C:\WINDOWS\system32\msconf.dll 2007-03-18 18:47:28 32768 --a------ C:\WINDOWS\system32\mnmsrvc.exe 2007-03-18 18:47:28 34560 --a------ C:\WINDOWS\system32\mnmdd.dll 2007-03-18 18:47:28 32768 --a------ C:\WINDOWS\system32\isrdbg32.dll 2007-03-18 18:47:28 81920 --a------ C:\WINDOWS\system32\ils.dll 2007-03-18 18:47:25 105984 --a------ C:\WINDOWS\system32\msoert2.dll 2007-03-18 18:47:25 252928 --a------ C:\WINDOWS\system32\msoeacct.dll 2007-03-18 18:47:24 49664 --a------ C:\WINDOWS\system32\inetres.dll 2007-03-18 18:47:24 679424 --a------ C:\WINDOWS\system32\inetcomm.dll 2007-03-18 18:47:22 192000 --a------ C:\WINDOWS\system32\schedsvc.dll 2007-03-18 18:47:22 12288 --a------ C:\WINDOWS\system32\mstinit.exe 2007-03-18 18:47:22 278528 --a------ C:\WINDOWS\system32\mstask.dll 2007-03-18 18:47:22 86016 --a------ C:\WINDOWS\system32\isign32.dll 2007-03-18 18:47:22 278528 --a------ C:\WINDOWS\system32\inetcfg.dll 2007-03-18 18:47:22 65536 --a------ C:\WINDOWS\system32\icwphbk.dll 2007-03-18 18:47:22 73728 --a------ C:\WINDOWS\system32\icwdial.dll 2007-03-18 18:47:13 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat<EMPTYR~1.DAT> 2007-03-18 18:46:58 0 d-------- C:\WINDOWS\Registration<REGIST~1> 2007-03-18 18:46:18 0 d-------- C:\Program Files\Messenger<MESSEN~1> 2007-03-18 18:46:15 5632 --a------ C:\WINDOWS\system32\write.exe 2007-03-18 18:46:15 0 d-------- C:\Program Files\MSN Gaming Zone<MSNGAM~1> 2007-03-18 18:46:06 139264 --a------ C:\WINDOWS\system32\sndvol32.exe 2007-03-18 18:46:06 44544 --a------ C:\WINDOWS\system32\hticons.dll 2007-03-18 18:46:05 35328 --a------ C:\WINDOWS\system32\winchat.exe 2007-03-18 18:46:05 73216 --a------ C:\WINDOWS\system32\avwav.dll 2007-03-18 18:46:05 231424 --a------ C:\WINDOWS\system32\avtapi.dll 2007-03-18 18:46:05 16384 --a------ C:\WINDOWS\system32\avmeter.dll 2007-03-18 18:45:58 119808 --a------ C:\WINDOWS\system32\winmine.exe 2007-03-18 18:45:58 57344 --a------ C:\WINDOWS\system32\sol.exe 2007-03-18 18:45:58 605696 --a------ C:\WINDOWS\system32\getuname.dll 2007-03-18 18:45:58 80896 --a------ C:\WINDOWS\system32\charmap.exe 2007-03-18 18:45:58 115200 --a------ C:\WINDOWS\system32\calc.exe 2007-03-18 18:45:57 1225 --a------ C:\WINDOWS\system32\usrlogon.cmd 2007-03-18 18:45:57 17920 --a------ C:\WINDOWS\system32\tsshutdn.exe 2007-03-18 18:45:57 16384 --a------ C:\WINDOWS\system32\tskill.exe 2007-03-18 18:45:57 15360 --a------ C:\WINDOWS\system32\tsdiscon.exe 2007-03-18 18:45:57 15360 --a------ C:\WINDOWS\system32\tscon.exe 2007-03-18 18:45:57 9728 --a------ C:\WINDOWS\system32\reset.exe 2007-03-18 18:45:57 128000 --a------ C:\WINDOWS\system32\mshearts.exe 2007-03-18 18:45:57 55808 --a------ C:\WINDOWS\system32\freecell.exe 2007-03-18 18:45:56 15360 --a------ C:\WINDOWS\system32\shadow.exe 2007-03-18 18:45:56 16384 --a------ C:\WINDOWS\system32\rwinsta.exe 2007-03-18 18:45:56 33792 --a------ C:\WINDOWS\system32\regini.exe 2007-03-18 18:45:56 4608 --a------ C:\WINDOWS\system32\rdpcfgex.dll 2007-03-18 18:45:56 22528 --a------ C:\WINDOWS\system32\qwinsta.exe 2007-03-18 18:45:56 17408 --a------ C:\WINDOWS\system32\qappsrv.exe 2007-03-18 18:45:56 22528 --a------ C:\WINDOWS\system32\msg.exe 2007-03-18 18:45:56 15872 --a------ C:\WINDOWS\system32\logoff.exe 2007-03-18 18:45:56 15872 --a------ C:\WINDOWS\system32\cdmodem.dll 2007-03-18 18:45:55 25088 --a------ C:\WINDOWS\system32\mtxlegih.dll 2007-03-18 18:45:55 4096 --a------ C:\WINDOWS\system32\mtxex.dll 2007-03-18 18:45:55 20480 --a------ C:\WINDOWS\system32\mtxdm.dll 2007-03-18 18:45:55 5120 --a------ C:\WINDOWS\system32\dcomcnfg.exe 2007-03-18 18:45:55 97792 --a------ C:\WINDOWS\system32\comrepl.dll 2007-03-18 18:45:55 25600 --a------ C:\WINDOWS\system32\comaddin.dll 2007-03-18 18:45:54 54272 --a------ C:\WINDOWS\system32\stclient.dll 2007-03-18 18:45:54 147456 --a------ C:\WINDOWS\system32\comsnap.dll 2007-03-18 18:45:49 132608 --a------ C:\WINDOWS\system32\sndrec32.exe 2007-03-18 18:45:49 124928 --a------ C:\WINDOWS\system32\mplay32.exe 2007-03-18 18:45:49 351744 --a------ C:\WINDOWS\system32\hypertrm.dll 2007-03-18 18:45:49 187904 --a------ C:\WINDOWS\system32\accwiz.exe 2007-03-18 18:45:48 539136 --a------ C:\WINDOWS\system32\spider.exe 2007-03-18 18:45:48 345088 --a------ C:\WINDOWS\system32\mspaint.exe 2007-03-18 18:45:48 103424 --a------ C:\WINDOWS\system32\clipbrd.exe 2007-03-18 18:45:48 0 d-------- C:\Program Files\Windows NT<WINDOW~1> 2007-03-18 18:45:47 94720 --a------ C:\WINDOWS\system32\tscfgwmi.dll 2007-03-18 18:45:47 60928 --a------ C:\WINDOWS\system32\remotepg.dll 2007-03-18 18:45:47 13824 --a------ C:\WINDOWS\system32\rdsaddin.exe 2007-03-18 18:45:47 655360 --a------ C:\WINDOWS\system32\mstscax.dll 2007-03-18 18:45:47 408576 --a------ C:\WINDOWS\system32\mstsc.exe 2007-03-18 18:45:47 21896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys 2007-03-18 18:45:47 12040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys 2007-03-18 18:45:47 139528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys 2007-03-18 18:45:46 44544 --a------ C:\WINDOWS\system32\tscupgrd.exe 2007-03-18 18:45:46 296448 --a------ C:\WINDOWS\system32\termsrv.dll 2007-03-18 18:45:46 141824 --a------ C:\WINDOWS\system32\sessmgr.exe 2007-03-18 18:45:46 67072 --a------ C:\WINDOWS\system32\rdshost.exe 2007-03-18 18:45:46 87176 --a------ C:\WINDOWS\system32\rdpwsx.dll 2007-03-18 18:45:46 19968 --a------ C:\WINDOWS\system32\rdpsnd.dll 2007-03-18 18:45:46 62464 --a------ C:\WINDOWS\system32\rdpclip.exe 2007-03-18 18:45:46 147968 --a------ C:\WINDOWS\system32\rdchost.dll 2007-03-18 18:45:46 20992 --a------ C:\WINDOWS\system32\qprocess.exe 2007-03-18 18:45:46 11264 --a------ C:\WINDOWS\system32\icaapi.dll 2007-03-18 18:45:45 11776 --a------ C:\WINDOWS\system32\xolehlp.dll 2007-03-18 18:45:45 91136 --a------ C:\WINDOWS\system32\mtxoci.dll 2007-03-18 18:45:45 161280 --a------ C:\WINDOWS\system32\msdtcuiu.dll 2007-03-18 18:45:45 956416 --a------ C:\WINDOWS\system32\msdtctm.dll 2007-03-18 18:45:45 426496 --a------ C:\WINDOWS\system32\msdtcprx.dll 2007-03-18 18:45:45 58880 --a------ C:\WINDOWS\system32\msdtclog.dll 2007-03-18 18:45:45 0 d-------- C:\WINDOWS\system32\MsDtc 2007-03-18 18:45:45 38912 --a------ C:\WINDOWS\system32\cfgbkend.dll 2007-03-18 18:45:44 6144 --a------ C:\WINDOWS\system32\msdtc.exe 2007-03-18 18:45:44 0 d-------- C:\WINDOWS\system32\Com 2007-03-18 18:45:44 60416 --a------ C:\WINDOWS\system32\colbact.dll 2007-03-18 18:45:44 85504 --a------ C:\WINDOWS\system32\catsrvps.dll 2007-03-18 18:45:43 540160 --a------ C:\WINDOWS\system32\comuid.dll 2007-03-18 18:45:43 1267200 --a------ C:\WINDOWS\system32\comsvcs.dll 2007-03-18 18:45:43 110080 --a------ C:\WINDOWS\system32\clbcatex.dll 2007-03-18 18:45:43 625152 --a------ C:\WINDOWS\system32\catsrvut.dll 2007-03-18 18:45:43 225792 --a------ C:\WINDOWS\system32\catsrv.dll 2007-03-18 18:45:42 498688 --a------ C:\WINDOWS\system32\clbcatq.dll 2007-03-18 18:45:38 56320 --a------ C:\WINDOWS\system32\servdeps.dll 2007-03-18 18:45:38 17920 --a------ C:\WINDOWS\system32\mmfutil.dll 2007-03-18 18:45:38 58880 --a------ C:\WINDOWS\system32\licwmi.dll 2007-03-18 18:45:38 187904 --a------ C:\WINDOWS\system32\cmprops.dll 2007-03-18 18:45:32 40840 --a------ C:\WINDOWS\system32\drivers\termdd.sys 2007-03-18 18:45:32 196864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys -- Find3M Report --------------------------------------------------------------- 2007-04-02 20:46:33 355486 --a------ C:\WINDOWS\system32\perfh015.dat 2007-04-02 20:46:33 49492 --a------ C:\WINDOWS\system32\perfc015.dat 2007-04-02 18:35:40 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\teamspeak2<TEAMSP~1> 2007-04-02 18:14:28 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\uTorrent 2007-04-02 17:23:48 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Hamachi 2007-03-31 22:07:54 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Skype 2007-03-29 20:08:06 0 d---s---- C:\Documents and Settings\Konrad\Dane aplikacji\Microsoft<MICROS~1> 2007-03-29 09:02:26 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Apple Computer<APPLEC~1> 2007-03-28 21:16:46 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Media Player Classic<MEDIAP~1> 2007-03-28 21:02:37 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Real 2007-03-22 15:31:15 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\AdobeUM 2007-03-22 15:30:47 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Adobe 2007-03-20 15:29:27 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Mozilla 2007-03-20 15:29:25 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Thunderbird<THUNDE~1> 2007-03-19 22:24:33 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Talkback 2007-03-18 23:29:11 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Macromedia<MACROM~1> 2007-03-18 19:38:16 62 --ahs---- C:\Documents and Settings\Konrad\Dane aplikacji\desktop.ini 2007-03-18 19:04:25 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Identities<IDENTI~1> 2007-01-29 10:58:06 60416 -----n--- C:\WINDOWS\system32\tzchange.exe -- Registry Dump --------------------------------------------------------------- [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "WooCnxMon"="C:\\PROGRA~1\\NEOSTR~1\\CnxMon.exe" "SpeedTouch USB Diagnostics"="\"C:\\Program Files\\Thomson\\SpeedTouch USB\\Dragdiag.exe\" /icon" "WOOWATCH"="C:\\PROGRA~1\\NEOSTR~1\\Watch.exe" "WOOTASKBARICON"="C:\\PROGRA~1\\NEOSTR~1\\TaskbarIcon.exe" "SoundMan"="SOUNDMAN.EXE" "NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe" "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime" "SmcService"="C:\\PROGRA~1\\Sygate\\SPF\\smc.exe -startgui" "!ewido"="\"C:\\Program Files\\ewido anti-spyware 4.0\\ewido.exe\" /minimized" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI] "Installed"="1" "NoChange"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce] "avp6_post_uninstall"="" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="ewido anti-spyware 4.0" [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "DisableRegistryTools"=dword:00000000 [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] HTTPFilter REG_MULTI_SZ HTTPFilter\0\0 LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ DnsCache\0\0 DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 termsvcs REG_MULTI_SZ TermService\0\0 [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\H] Shell\AutoRun\command H:\autoplay.exe -- End of ComboScan: finished at 2007-04-02 at 21:06:26 ------------------------

**Posty:** 18165 · przez **wojtas** 02 Kwi 2007, 21:23

jest ok

Autor postu otrzymał pochwałę

**Posty:** 35 · przez **Wilk.** 02 Kwi 2007, 21:25

ok dzieki :*

[ Dodano: Dzisiaj o 20:26 ]
jak znowu zalapie syf mam pisac w tym temacie czy zalozyc nowy?

**Posty:** 18165 · przez **wojtas** 02 Kwi 2007, 21:27

Wilk. napisał(a):jak znowu zalapie syf mam pisac w tym temacie czy zalozyc nowy?

w tym chyba ze za kilka tygodni to wtedy zaloz nowy

**Posty:** 35 · przez **Wilk.** 03 Kwi 2007, 18:22

Kod: Zaznacz wszystko: ComboScan v20070306.20 run by Konrad on 2007-04-03 at 18:10:38 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- HijackThis (run as Konrad.exe) ---------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 18:10:55, on 2007-04-03 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Sygate\SPF\smc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE C:\Program Files\ewido anti-spyware 4.0\guard.exe C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe C:\Program Files\F-Secure Internet Security\Anti-Virus\FSGK32.EXE C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\F-Secure Internet Security\Common\FSMB32.EXE C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\F-Secure Internet Security\Anti-Virus\fssm32.exe C:\Program Files\F-Secure Internet Security\Common\FCH32.EXE C:\Program Files\F-Secure Internet Security\Common\FAMEH32.EXE C:\Program Files\F-Secure Internet Security\Anti-Virus\fsqh.exe C:\Program Files\F-Secure Internet Security\Anti-Virus\fsrw.exe C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe C:\WINDOWS\system32\wscntfy.exe C:\PROGRA~1\NEOSTR~1\CnxMon.exe C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\QuickTime\qttask.exe C:\Program Files\ewido anti-spyware 4.0\ewido.exe C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE C:\Program Files\Neostrada TP\NeostradaTP.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe C:\Program Files\F-Secure Internet Security\Anti-Virus\fsav32.exe C:\Program Files\Neostrada TP\ComComp.exe C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe C:\PROGRA~1\F-SECU~1\ANTI-S~1\fsaw.exe C:\Program Files\F-Secure Internet Security\FSGUI\fsguidll.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Neostrada TP\Watch.exe G:\Teamspeak2_RC2\TeamSpeak.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Konrad\Pulpit\Nowy folder\comboscan.exe C:\DOCUME~1\Konrad\Pulpit\NOWYFO~1\Konrad.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE" /splash O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\F-Secure Internet Security\FSGUI\FSSW.EXE" /reboot O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender9\bdmcon.exe" O4 - HKLM\..\Run: [BDOESRV] "C:\Program Files\Softwin\BitDefender9\bdoesrv.exe" O4 - HKLM\..\Run: [BDNewsAgent] "C:\Program Files\Softwin\BitDefender9\bdnagent.exe" O4 - HKLM\..\Run: [BDSwitchAgent] "C:\Program Files\Softwin\BitDefender9\bdswitch.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: F-Secure Anti-Virus 2006.lnk = C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe O8 - Extra context menu item: &Zablokuj to okienko - C:\Program Files\F-Secure Internet Security\Anti-Spyware\blockpopups.htm O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: Osłona programu IE - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dll O9 - Extra 'Tools' menuitem: Osłona programu IE... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O17 - HKLM\System\CCS\Services\Tcpip\..\{6F14A062-74DC-45F9-82BB-D906B7B577E0}: NameServer = 194.204.159.1 217.98.63.164 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: F-Secure Anti-Virus 2006 (BackWeb Plug-in - 4476822) - F-Secure Internet Security 2005 - C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender9\vsserv.exe (file missing) -- Files created between 2007-03-03 and 2007-04-03 ----------------------------- 2007-04-03 17:40:02 0 d-------- C:\Program Files\Lavasoft 2007-04-02 21:21:24 33584 --a------ C:\WINDOWS\system32\drivers\fsndis5.sys 2007-04-02 21:21:24 70864 --a------ C:\WINDOWS\system32\drivers\fsdfw.sys 2007-04-02 21:19:58 0 d-------- C:\Program Files\F-Secure Internet Security<F-SECU~1> 2007-04-02 16:20:32 25856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys 2007-04-01 19:57:32 0 d-------- C:\Program Files\ewido anti-spyware 4.0<EWIDOA~1.0> 2007-04-01 12:20:59 17480 --a------ C:\WINDOWS\system32\drivers\hamachi.sys 2007-04-01 12:20:59 0 d-------- C:\Program Files\Hamachi 2007-04-01 12:20:37 13900 --a------ C:\WINDOWS\War3Unin.dat 2007-04-01 12:20:36 2829 --a------ C:\WINDOWS\War3Unin.pif 2007-04-01 12:20:36 126976 --a------ C:\WINDOWS\War3Unin.exe 2007-03-29 22:15:44 80 --a------ C:\WINDOWS\gmer_uninstall.cmd<GMER_U~1.CMD> 2007-03-29 21:59:48 14568 --a------ C:\WINDOWS\system32\drivers\wg6n.sys 2007-03-29 21:59:48 14568 --a------ C:\WINDOWS\system32\drivers\wg5n.sys 2007-03-29 21:59:47 14568 --a------ C:\WINDOWS\system32\drivers\wg4n.sys 2007-03-29 21:59:47 14568 --a------ C:\WINDOWS\system32\drivers\wg3n.sys 2007-03-29 21:59:47 60496 --a------ C:\WINDOWS\system32\drivers\Teefer.sys 2007-03-29 21:59:46 21075 --a------ C:\WINDOWS\system32\drivers\wpsdrvnt.sys 2007-03-29 21:59:43 83096 --a------ C:\WINDOWS\system32\SSSensor.dll 2007-03-29 21:59:40 0 d-------- C:\Program Files\Sygate 2007-03-29 21:59:27 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard<WISEIN~1> 2007-03-29 19:36:37 139776 --a------ C:\WINDOWS\system32\TASKMGR.COM 2007-03-29 19:36:37 139776 --a------ C:\WINDOWS\system32\T.COM 2007-03-29 19:36:37 149504 --a------ C:\WINDOWS\R.COM 2007-03-29 09:00:12 0 d-------- C:\Program Files\QuickTime<QUICKT~1> 2007-03-29 08:59:55 0 d-------- C:\Program Files\Apple Software Update<APPLES~1> 2007-03-28 21:19:14 0 d-------- C:\Program Files\BrizVideoJoin<BRIZVI~1> 2007-03-28 21:17:23 0 d-------- C:\Program Files\AVI Codec Pack<AVICOD~1> 2007-03-28 21:02:56 0 d-------- C:\Program Files\SubEdit-Player<SUBEDI~1> 2007-03-28 21:02:37 0 d-------- C:\Program Files\Real Alternative<REALAL~1> 2007-03-28 21:02:37 0 d-------- C:\Program Files\Media Player Classic<MEDIAP~1> 2007-03-28 21:01:51 0 d-------- C:\Program Files\AC3Filter<AC3FIL~1> 2007-03-28 21:01:30 0 d-------- C:\Program Files\DivX 2007-03-28 20:59:14 0 d-------- C:\Program Files\MarBit 2007-03-28 16:14:32 0 d-------- C:\Program Files\Common Files\LightScribe<LIGHTS~1> 2007-03-28 16:12:47 364544 -----n--- C:\WINDOWS\system32\TwnLib4.dll 2007-03-28 16:12:47 106496 --a------ C:\WINDOWS\system32\TwnLib20.dll 2007-03-28 16:12:43 471040 -----n--- C:\WINDOWS\system32\ImagXRA7.dll 2007-03-28 16:12:43 262144 -----n--- C:\WINDOWS\system32\ImagXR7.dll 2007-03-28 16:12:43 476320 -----n--- C:\WINDOWS\system32\ImagXpr7.dll 2007-03-28 16:12:43 1568768 -----n--- C:\WINDOWS\system32\ImagX7.dll 2007-03-28 16:12:42 155648 --a------ C:\WINDOWS\system32\NeroCheck.exe<NEROCH~1.EXE> 2007-03-28 16:12:38 0 d-------- C:\Program Files\Common Files\Ahead 2007-03-28 16:12:36 0 d-------- C:\Program Files\Ahead 2007-03-27 20:37:04 63040 --a------ C:\WINDOWS\system32\PnkBstrA.exe 2007-03-27 19:09:36 0 d-------- C:\Program Files\America's Army Server Manager<AMERIC~1> 2007-03-26 19:27:02 22584 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys 2007-03-26 16:57:55 99904 --a------ C:\WINDOWS\system32\PnkBstrB.exe 2007-03-26 16:57:46 0 d-------- C:\WINDOWS\system32\LogFiles 2007-03-26 16:47:45 0 d-------- C:\Program Files\America's Army<AMERIC~2> 2007-03-26 16:44:45 62744 --a------ C:\WINDOWS\system32\xinput1_2.dll<XINPUT~3.DLL> 2007-03-26 16:44:45 236824 --a------ C:\WINDOWS\system32\xactengine2_3.dll<XACTEN~4.DLL> 2007-03-22 15:40:20 17920 --a------ C:\WINDOWS\system32\mdimon.dll 2007-03-22 15:39:10 0 d-------- C:\WINDOWS\SHELLNEW 2007-03-22 15:30:28 0 d-------- C:\Program Files\Common Files\Adobe 2007-03-22 01:09:06 0 d-------- C:\Program Files\Common Files\Skype 2007-03-22 01:08:52 0 d-------- C:\Program Files\Skype 2007-03-21 09:31:49 5632 --a------ C:\WINDOWS\system32\ptpusb.dll 2007-03-21 09:31:47 159232 --a------ C:\WINDOWS\system32\ptpusd.dll 2007-03-21 09:31:46 15104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys 2007-03-20 21:36:26 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll<CMDLIN~1.DLL> 2007-03-20 20:41:50 2297552 --a------ C:\WINDOWS\system32\d3dx9_26.dll 2007-03-20 15:38:13 115880 -----n--- C:\WINDOWS\system32\pxinsi64.exe 2007-03-20 15:38:13 36528 -----n--- C:\WINDOWS\system32\drivers\PxHelp20.sys 2007-03-20 15:38:13 2560 -----n--- C:\WINDOWS\system32\drivers\cdralw2k.sys 2007-03-20 15:38:13 2432 -----n--- C:\WINDOWS\system32\drivers\cdr4_xp.sys 2007-03-20 15:38:12 129784 -----n--- C:\WINDOWS\system32\pxafs.dll 2007-03-20 15:37:44 0 d-------- C:\WINDOWS\RegisteredPackages<REGIST~2> 2007-03-20 15:36:11 0 d-------- C:\Program Files\Winamp 2007-03-20 15:29:05 3490 --a------ C:\WINDOWS\mozver.dat 2007-03-20 15:28:56 0 d-------- C:\Program Files\Mozilla Thunderbird<MOZILL~2> 2007-03-19 22:24:28 0 --a------ C:\WINDOWS\nsreg.dat 2007-03-19 22:24:20 0 d-------- C:\Program Files\Mozilla Firefox<MOZILL~1> 2007-03-19 00:20:15 49152 --a------ C:\WINDOWS\system32\ChCfg.exe 2007-03-19 00:20:14 6400 --a------ C:\WINDOWS\system32\drivers\splitter.sys 2007-03-19 00:20:12 82944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys 2007-03-19 00:20:10 52864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys 2007-03-19 00:20:04 54272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys 2007-03-19 00:20:02 142464 --a------ C:\WINDOWS\system32\drivers\aec.sys 2007-03-19 00:20:00 172416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys 2007-03-19 00:19:59 2944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys 2007-03-19 00:19:57 60800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys 2007-03-19 00:19:56 7552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys 2007-03-19 00:19:54 4992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys 2007-03-19 00:19:51 5376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2007-03-19 00:19:47 4027456 -ra------ C:\WINDOWS\system32\drivers\alcxwdm.sys 2007-03-19 00:19:45 4096 --a------ C:\WINDOWS\system32\ksuser.dll 2007-03-19 00:19:45 145792 --a------ C:\WINDOWS\system32\drivers\portcls.sys 2007-03-19 00:19:45 60288 --a------ C:\WINDOWS\system32\drivers\drmk.sys 2007-03-19 00:19:39 10528768 --a------ C:\WINDOWS\system32\RTLCPL.exe 2007-03-19 00:19:39 0 d-------- C:\Program Files\Realtek AC97<REALTE~2> 2007-03-19 00:19:37 577536 --a------ C:\WINDOWS\soundman.exe 2007-03-19 00:19:36 147456 --a------ C:\WINDOWS\system32\RtlCPAPI.dll 2007-03-19 00:19:36 315392 --a------ C:\WINDOWS\alcupd.exe 2007-03-19 00:19:36 217088 --a------ C:\WINDOWS\Alcrmv.exe 2007-03-18 22:58:20 22752 --a------ C:\WINDOWS\system32\spupdsvc.exe 2007-03-18 22:58:20 0 d-------- C:\WINDOWS\system32\PreInstall<PREINS~1> 2007-03-18 22:58:18 0 d--h----- C:\WINDOWS\$hf_mig$ 2007-03-18 22:46:47 0 d-------- C:\WINDOWS\system32\SoftwareDistribution<SOFTWA~1> 2007-03-18 22:41:28 0 d-------- C:\Program Files\Realtek Sound Manager<REALTE~1> 2007-03-18 22:41:28 0 d-------- C:\Program Files\AvRack 2007-03-18 20:28:56 0 d-------- C:\Program Files\Gadu-Gadu<GADU-G~1> 2007-03-18 20:26:43 32768 --a------ C:\WINDOWS\system32\UnAudioNT.dll<UNAUDI~1.DLL> 2007-03-18 20:26:43 0 d-------- C:\Program Files\VIA Technologies, Inc<VIATEC~1> 2007-03-18 20:26:39 306688 --a------ C:\WINDOWS\IsUninst.exe 2007-03-18 19:41:56 3072 --a------ C:\WINDOWS\system32\drivers\audstub.sys 2007-03-18 19:40:48 58624 --a------ C:\WINDOWS\system32\drivers\redbook.sys 2007-03-18 19:40:26 701440 --a------ C:\WINDOWS\system32\drivers\ati2mtag.sys 2007-03-18 19:40:26 516768 --a------ C:\WINDOWS\system32\ativvaxx.dll 2007-03-18 19:40:26 1888992 --a------ C:\WINDOWS\system32\ati3duag.dll 2007-03-18 19:40:26 870784 --a------ C:\WINDOWS\system32\ati3d1ag.dll 2007-03-18 19:40:25 201728 --a------ C:\WINDOWS\system32\ati2dvag.dll 2007-03-18 19:40:25 229376 --a------ C:\WINDOWS\system32\ati2cqag.dll 2007-03-18 19:40:06 44672 --a------ C:\WINDOWS\system32\drivers\UAGP35.SYS 2007-03-18 19:40:02 32768 --a------ C:\WINDOWS\system32\drivers\sisnic.sys 2007-03-18 19:39:56 77312 --a------ C:\WINDOWS\system32\usbui.dll 2007-03-18 19:38:45 0 d--hs---- C:\WINDOWS\Installer<INSTAL~1> 2007-03-18 19:38:44 0 d-------- C:\Program Files\Common Files\ODBC 2007-03-18 19:38:41 0 dr------- C:\Program Files<PROGRA~1> 2007-03-18 19:38:41 0 d-------- C:\Program Files\Common Files\SpeechEngines<SPEECH~1> 2007-03-18 19:38:37 6144 -ra------ C:\WINDOWS\system32\kbdtuq.dll 2007-03-18 19:38:37 6144 -ra------ C:\WINDOWS\system32\kbdtuf.dll 2007-03-18 19:38:37 5632 -ra------ C:\WINDOWS\system32\kbdazel.dll 2007-03-18 19:38:36 5632 -ra------ C:\WINDOWS\system32\kbdmon.dll 2007-03-18 19:38:36 5632 -ra------ C:\WINDOWS\system32\kbdkyr.dll 2007-03-18 19:38:34 8192 -ra------ C:\WINDOWS\system32\kbdhept.dll 2007-03-18 19:38:34 6656 -ra------ C:\WINDOWS\system32\kbdhela3.dll 2007-03-18 19:38:34 6144 -ra------ C:\WINDOWS\system32\kbdhela2.dll 2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe319.dll 2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe220.dll 2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe.dll 2007-03-18 19:38:34 6144 -ra------ C:\WINDOWS\system32\kbdgkl.dll 2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdlv1.dll 2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdlv.dll 2007-03-18 19:38:32 5632 -ra------ C:\WINDOWS\system32\kbdlt1.dll 2007-03-18 19:38:32 5632 -ra------ C:\WINDOWS\system32\kbdlt.dll 2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdest.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdycl.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdsl1.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdsl.dll 2007-03-18 19:38:29 5632 --a------ C:\WINDOWS\system32\kbdro.dll 2007-03-18 19:38:29 5632 --a------ C:\WINDOWS\system32\kbdhu1.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdhu.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcz2.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcz1.dll 2007-03-18 19:38:29 7168 --a------ C:\WINDOWS\system32\kbdcz.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcr.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\KBDAL.DLL 2007-03-18 19:38:28 13312 --a------ C:\WINDOWS\system32\irclass.dll 2007-03-18 19:38:28 176157 --a------ C:\WINDOWS\system32\dgrpsetu.dll 2007-03-18 19:38:27 24661 --a------ C:\WINDOWS\system32\spxcoins.dll 2007-03-18 19:38:27 103424 --a------ C:\WINDOWS\system32\EqnClass.Dll 2007-03-18 19:38:27 85532 --a------ C:\WINDOWS\system32\dgsetup.dll 2007-03-18 19:38:27 9168 --a------ C:\WINDOWS\system\VER.DLL 2007-03-18 19:38:27 19200 --a------ C:\WINDOWS\system\TAPI.DLL 2007-03-18 19:38:27 5120 --a------ C:\WINDOWS\system\SHELL.DLL 2007-03-18 19:38:26 24064 --a------ C:\WINDOWS\system\OLESVR.DLL 2007-03-18 19:38:26 83456 --a------ C:\WINDOWS\system\OLECLI.DLL 2007-03-18 19:38:26 127008 --a------ C:\WINDOWS\system\MSVIDEO.DLL 2007-03-18 19:38:26 9936 --a------ C:\WINDOWS\system\LZEXPAND.DLL 2007-03-18 19:38:26 33376 --a------ C:\WINDOWS\system\COMMDLG.DLL 2007-03-18 19:38:26 109488 --a------ C:\WINDOWS\system\AVIFILE.DLL 2007-03-18 19:38:26 70096 --a------ C:\WINDOWS\system\AVICAP.DLL 2007-03-18 19:38:25 15360 --a------ C:\WINDOWS\TASKMAN.EXE 2007-03-18 19:38:25 11264 --a------ C:\WINDOWS\system32\drivers\irenum.sys 2007-03-18 19:38:25 8704 --a------ C:\WINDOWS\system32\batt.dll 2007-03-18 19:38:25 69552 --a------ C:\WINDOWS\system\MMSYSTEM.DLL 2007-03-18 19:38:24 70144 --a------ C:\WINDOWS\NOTEPAD.EXE 2007-03-18 19:38:23 75776 --a------ C:\WINDOWS\system32\storprop.dll 2007-03-18 19:38:03 0 d-------- C:\WINDOWS\system32\CatRoot2 2007-03-18 19:38:03 0 d-------- C:\WINDOWS\system32\CatRoot 2007-03-18 19:37:37 0 d-------- C:\Documents and Settings<DOCUME~1> 2007-03-18 19:37:36 0 d--hs---- C:\System Volume Information<SYSTEM~1> 2007-03-18 19:29:37 0 d-------- C:\WINDOWS 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\WinSxS 2007-03-18 19:29:37 0 dr------- C:\WINDOWS\Web 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\twain_32 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\wins 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\wbem 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\usmt 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\spool 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ShellExt 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\Setup 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ras 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\oobe 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\npp 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\mui 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\inetsrv 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\IME 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\icsxml 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ias 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\export 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers\etc 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers\disdn 2007-03-18 19:29:37 0 dr-hs--c- C:\WINDOWS\system32\dllcache 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\dhcp 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\config 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\3com_dmi 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\3076 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\2052 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1054 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1045 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1042 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1041 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1037 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1033 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1031 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1028 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1025 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\security 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Resources<RESOUR~1> 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\repair 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Provisioning<PROVIS~1> 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\PeerNet 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\pchealth 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\mui 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\msapps 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\msagent 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Media 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\java 2007-03-18 19:29:37 0 d--h----- C:\WINDOWS\inf 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\ime 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Help 2007-03-18 19:29:37 0 dr--s---- C:\WINDOWS\Fonts 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Driver Cache<DRIVER~1> 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Debug 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Cursors 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Connection Wizard<CONNEC~1> 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Config 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\AppPatch 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\addins 2007-03-18 19:08:28 32768 --a------ C:\WINDOWS\system32\WooDial2000.dll<WOODIA~1.DLL> 2007-03-18 19:06:22 5606 --a------ C:\WINDOWS\system32\stci.dll 2007-03-18 19:06:22 5280 --a------ C:\WINDOWS\system32\drivers\alcawh.sys 2007-03-18 19:06:22 70688 --a------ C:\WINDOWS\system32\drivers\alcaudsl.sys 2007-03-18 19:06:22 3968 --a------ C:\WINDOWS\system32\drivers\alcacr.sys 2007-03-18 19:06:21 53600 --a------ C:\WINDOWS\system32\drivers\alcan5wn.sys 2007-03-18 19:06:20 0 d-------- C:\Program Files\Thomson 2007-03-18 19:06:19 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1> 2007-03-18 19:06:17 0 d-------- C:\Program Files\Common Files\InstallShield<INSTAL~1> 2007-03-18 19:05:15 0 d-------- C:\Program Files\Neostrada TP<NEOSTR~1> 2007-03-18 18:53:40 0 d-------- C:\WINDOWS\SoftwareDistribution<SOFTWA~1> 2007-03-18 18:53:39 0 d-------- C:\WINDOWS\Prefetch 2007-03-18 18:50:11 0 d-------- C:\WINDOWS\system32\xircom 2007-03-18 18:50:11 0 d-------- C:\Program Files\microsoft frontpage<MICROS~1> 2007-03-18 18:50:02 0 -rahs---- C:\MSDOS.SYS 2007-03-18 18:50:02 0 -rahs---- C:\IO.SYS 2007-03-18 18:50:02 0 --a------ C:\CONFIG.SYS 2007-03-18 18:50:02 0 -----n--- C:\AUTOEXEC.BAT 2007-03-18 18:49:44 112128 --a------ C:\WINDOWS\system32\mapi32.dll 2007-03-18 18:48:53 0 dr------- C:\WINDOWS\Offline Web Pages<OFFLIN~1> 2007-03-18 18:48:53 0 d---s---- C:\WINDOWS\Downloaded Program Files<DOWNLO~1> 2007-03-18 18:48:41 0 d--h----- C:\Program Files\WindowsUpdate<WINDOW~3> 2007-03-18 18:48:38 0 d-------- C:\Program Files\Usługi online<USUGIO~1> 2007-03-18 18:48:21 0 d-------- C:\WINDOWS\system32\DirectX 2007-03-18 18:48:01 11264 --a------ C:\WINDOWS\system32\atrace.dll 2007-03-18 18:47:53 12288 --a------ C:\WINDOWS\system32\nmevtmsg.dll 2007-03-18 18:47:52 67584 --a------ C:\WINDOWS\system32\acctres.dll 2007-03-18 18:47:49 0 d---s---- C:\WINDOWS\Tasks 2007-03-18 18:47:49 16384 --a------ C:\WINDOWS\system32\icfgnt5.dll 2007-03-18 18:47:48 0 d-------- C:\Program Files\Common Files\MSSoap 2007-03-18 18:47:44 0 d-------- C:\WINDOWS\system32\Macromed 2007-03-18 18:47:44 0 d-------- C:\WINDOWS\srchasst 2007-03-18 18:47:41 173536 --a------ C:\WINDOWS\system32\wuweb.dll 2007-03-18 18:47:41 128280 --a------ C:\WINDOWS\system32\wucltui.dll 2007-03-18 18:47:41 6656 --a------ C:\WINDOWS\system32\wuauserv.dll 2007-03-18 18:47:41 195352 --a------ C:\WINDOWS\system32\wuaueng1.dll 2007-03-18 18:47:41 1343768 --a------ C:\WINDOWS\system32\wuaueng.dll 2007-03-18 18:47:40 41240 --a------ C:\WINDOWS\system32\wups.dll 2007-03-18 18:47:40 175384 --a------ C:\WINDOWS\system32\wuauclt1.exe 2007-03-18 18:47:40 125208 --a------ C:\WINDOWS\system32\wuauclt.exe 2007-03-18 18:47:40 466200 --a------ C:\WINDOWS\system32\wuapi.dll 2007-03-18 18:47:40 18944 --a------ C:\WINDOWS\system32\qmgrprxy.dll 2007-03-18 18:47:40 382464 --a------ C:\WINDOWS\system32\qmgr.dll 2007-03-18 18:47:40 7168 --a------ C:\WINDOWS\system32\bitsprx3.dll 2007-03-18 18:47:40 8192 --a------ C:\WINDOWS\system32\bitsprx2.dll 2007-03-18 18:47:36 0 d-------- C:\Program Files\Movie Maker<MOVIEM~1> 2007-03-18 18:47:33 45568 --a------ C:\WINDOWS\system32\safrslv.dll 2007-03-18 18:47:33 29696 --a------ C:\WINDOWS\system32\safrdm.dll 2007-03-18 18:47:33 43520 --a------ C:\WINDOWS\system32\safrcdlg.dll 2007-03-18 18:47:32 43520 --a------ C:\WINDOWS\system32\racpldlg.dll 2007-03-18 18:47:30 23040 --a------ C:\WINDOWS\system32\fltmc.exe 2007-03-18 18:47:30 16896 --a------ C:\WINDOWS\system32\fltlib.dll 2007-03-18 18:47:29 171008 --a------ C:\WINDOWS\system32\srsvc.dll 2007-03-18 18:47:29 240128 --a------ C:\WINDOWS\system32\srrstr.dll 2007-03-18 18:47:29 67584 --a------ C:\WINDOWS\system32\srclient.dll 2007-03-18 18:47:29 0 d-------- C:\WINDOWS\system32\Restore 2007-03-18 18:47:29 73472 --a------ C:\WINDOWS\system32\drivers\sr.sys 2007-03-18 18:47:29 128896 --a------ C:\WINDOWS\system32\drivers\fltmgr.sys 2007-03-18 18:47:28 28672 --a------ C:\WINDOWS\system32\nmmkcert.dll 2007-03-18 18:47:28 69632 --a------ C:\WINDOWS\system32\msconf.dll 2007-03-18 18:47:28 32768 --a------ C:\WINDOWS\system32\mnmsrvc.exe 2007-03-18 18:47:28 34560 --a------ C:\WINDOWS\system32\mnmdd.dll 2007-03-18 18:47:28 32768 --a------ C:\WINDOWS\system32\isrdbg32.dll 2007-03-18 18:47:28 81920 --a------ C:\WINDOWS\system32\ils.dll 2007-03-18 18:47:25 105984 --a------ C:\WINDOWS\system32\msoert2.dll 2007-03-18 18:47:25 252928 --a------ C:\WINDOWS\system32\msoeacct.dll 2007-03-18 18:47:24 49664 --a------ C:\WINDOWS\system32\inetres.dll 2007-03-18 18:47:24 679424 --a------ C:\WINDOWS\system32\inetcomm.dll 2007-03-18 18:47:22 192000 --a------ C:\WINDOWS\system32\schedsvc.dll 2007-03-18 18:47:22 12288 --a------ C:\WINDOWS\system32\mstinit.exe 2007-03-18 18:47:22 278528 --a------ C:\WINDOWS\system32\mstask.dll 2007-03-18 18:47:22 86016 --a------ C:\WINDOWS\system32\isign32.dll 2007-03-18 18:47:22 278528 --a------ C:\WINDOWS\system32\inetcfg.dll 2007-03-18 18:47:22 65536 --a------ C:\WINDOWS\system32\icwphbk.dll 2007-03-18 18:47:22 73728 --a------ C:\WINDOWS\system32\icwdial.dll 2007-03-18 18:47:13 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat<EMPTYR~1.DAT> 2007-03-18 18:46:58 0 d-------- C:\WINDOWS\Registration<REGIST~1> 2007-03-18 18:46:18 0 d-------- C:\Program Files\Messenger<MESSEN~1> 2007-03-18 18:46:15 5632 --a------ C:\WINDOWS\system32\write.exe 2007-03-18 18:46:15 0 d-------- C:\Program Files\MSN Gaming Zone<MSNGAM~1> 2007-03-18 18:46:06 139264 --a------ C:\WINDOWS\system32\sndvol32.exe 2007-03-18 18:46:06 44544 --a------ C:\WINDOWS\system32\hticons.dll 2007-03-18 18:46:05 35328 --a------ C:\WINDOWS\system32\winchat.exe 2007-03-18 18:46:05 73216 --a------ C:\WINDOWS\system32\avwav.dll 2007-03-18 18:46:05 231424 --a------ C:\WINDOWS\system32\avtapi.dll 2007-03-18 18:46:05 16384 --a------ C:\WINDOWS\system32\avmeter.dll 2007-03-18 18:45:58 119808 --a------ C:\WINDOWS\system32\winmine.exe 2007-03-18 18:45:58 57344 --a------ C:\WINDOWS\system32\sol.exe 2007-03-18 18:45:58 605696 --a------ C:\WINDOWS\system32\getuname.dll 2007-03-18 18:45:58 80896 --a------ C:\WINDOWS\system32\charmap.exe 2007-03-18 18:45:58 115200 --a------ C:\WINDOWS\system32\calc.exe 2007-03-18 18:45:57 1225 --a------ C:\WINDOWS\system32\usrlogon.cmd 2007-03-18 18:45:57 17920 --a------ C:\WINDOWS\system32\tsshutdn.exe 2007-03-18 18:45:57 16384 --a------ C:\WINDOWS\system32\tskill.exe 2007-03-18 18:45:57 15360 --a------ C:\WINDOWS\system32\tsdiscon.exe 2007-03-18 18:45:57 15360 --a------ C:\WINDOWS\system32\tscon.exe 2007-03-18 18:45:57 9728 --a------ C:\WINDOWS\system32\reset.exe 2007-03-18 18:45:57 128000 --a------ C:\WINDOWS\system32\mshearts.exe 2007-03-18 18:45:57 55808 --a------ C:\WINDOWS\system32\freecell.exe 2007-03-18 18:45:56 15360 --a------ C:\WINDOWS\system32\shadow.exe 2007-03-18 18:45:56 16384 --a------ C:\WINDOWS\system32\rwinsta.exe 2007-03-18 18:45:56 33792 --a------ C:\WINDOWS\system32\regini.exe 2007-03-18 18:45:56 4608 --a------ C:\WINDOWS\system32\rdpcfgex.dll 2007-03-18 18:45:56 22528 --a------ C:\WINDOWS\system32\qwinsta.exe 2007-03-18 18:45:56 17408 --a------ C:\WINDOWS\system32\qappsrv.exe 2007-03-18 18:45:56 22528 --a------ C:\WINDOWS\system32\msg.exe 2007-03-18 18:45:56 15872 --a------ C:\WINDOWS\system32\logoff.exe 2007-03-18 18:45:56 15872 --a------ C:\WINDOWS\system32\cdmodem.dll 2007-03-18 18:45:55 25088 --a------ C:\WINDOWS\system32\mtxlegih.dll 2007-03-18 18:45:55 4096 --a------ C:\WINDOWS\system32\mtxex.dll 2007-03-18 18:45:55 20480 --a------ C:\WINDOWS\system32\mtxdm.dll 2007-03-18 18:45:55 5120 --a------ C:\WINDOWS\system32\dcomcnfg.exe 2007-03-18 18:45:55 97792 --a------ C:\WINDOWS\system32\comrepl.dll 2007-03-18 18:45:55 25600 --a------ C:\WINDOWS\system32\comaddin.dll 2007-03-18 18:45:54 54272 --a------ C:\WINDOWS\system32\stclient.dll 2007-03-18 18:45:54 147456 --a------ C:\WINDOWS\system32\comsnap.dll 2007-03-18 18:45:49 132608 --a------ C:\WINDOWS\system32\sndrec32.exe 2007-03-18 18:45:49 124928 --a------ C:\WINDOWS\system32\mplay32.exe 2007-03-18 18:45:49 351744 --a------ C:\WINDOWS\system32\hypertrm.dll 2007-03-18 18:45:49 187904 --a------ C:\WINDOWS\system32\accwiz.exe 2007-03-18 18:45:48 539136 --a------ C:\WINDOWS\system32\spider.exe 2007-03-18 18:45:48 345088 --a------ C:\WINDOWS\system32\mspaint.exe 2007-03-18 18:45:48 103424 --a------ C:\WINDOWS\system32\clipbrd.exe 2007-03-18 18:45:48 0 d-------- C:\Program Files\Windows NT<WINDOW~1> 2007-03-18 18:45:47 94720 --a------ C:\WINDOWS\system32\tscfgwmi.dll 2007-03-18 18:45:47 60928 --a------ C:\WINDOWS\system32\remotepg.dll 2007-03-18 18:45:47 13824 --a------ C:\WINDOWS\system32\rdsaddin.exe 2007-03-18 18:45:47 655360 --a------ C:\WINDOWS\system32\mstscax.dll 2007-03-18 18:45:47 408576 --a------ C:\WINDOWS\system32\mstsc.exe 2007-03-18 18:45:47 21896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys 2007-03-18 18:45:47 12040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys 2007-03-18 18:45:47 139528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys 2007-03-18 18:45:46 44544 --a------ C:\WINDOWS\system32\tscupgrd.exe 2007-03-18 18:45:46 296448 --a------ C:\WINDOWS\system32\termsrv.dll 2007-03-18 18:45:46 141824 --a------ C:\WINDOWS\system32\sessmgr.exe 2007-03-18 18:45:46 67072 --a------ C:\WINDOWS\system32\rdshost.exe 2007-03-18 18:45:46 87176 --a------ C:\WINDOWS\system32\rdpwsx.dll 2007-03-18 18:45:46 19968 --a------ C:\WINDOWS\system32\rdpsnd.dll 2007-03-18 18:45:46 62464 --a------ C:\WINDOWS\system32\rdpclip.exe 2007-03-18 18:45:46 147968 --a------ C:\WINDOWS\system32\rdchost.dll 2007-03-18 18:45:46 20992 --a------ C:\WINDOWS\system32\qprocess.exe 2007-03-18 18:45:46 11264 --a------ C:\WINDOWS\system32\icaapi.dll 2007-03-18 18:45:45 11776 --a------ C:\WINDOWS\system32\xolehlp.dll 2007-03-18 18:45:45 91136 --a------ C:\WINDOWS\system32\mtxoci.dll 2007-03-18 18:45:45 161280 --a------ C:\WINDOWS\system32\msdtcuiu.dll 2007-03-18 18:45:45 956416 --a------ C:\WINDOWS\system32\msdtctm.dll 2007-03-18 18:45:45 426496 --a------ C:\WINDOWS\system32\msdtcprx.dll 2007-03-18 18:45:45 58880 --a------ C:\WINDOWS\system32\msdtclog.dll 2007-03-18 18:45:45 0 d-------- C:\WINDOWS\system32\MsDtc 2007-03-18 18:45:45 38912 --a------ C:\WINDOWS\system32\cfgbkend.dll 2007-03-18 18:45:44 6144 --a------ C:\WINDOWS\system32\msdtc.exe 2007-03-18 18:45:44 0 d-------- C:\WINDOWS\system32\Com 2007-03-18 18:45:44 60416 --a------ C:\WINDOWS\system32\colbact.dll 2007-03-18 18:45:44 85504 --a------ C:\WINDOWS\system32\catsrvps.dll 2007-03-18 18:45:43 540160 --a------ C:\WINDOWS\system32\comuid.dll 2007-03-18 18:45:43 1267200 --a------ C:\WINDOWS\system32\comsvcs.dll 2007-03-18 18:45:43 110080 --a------ C:\WINDOWS\system32\clbcatex.dll 2007-03-18 18:45:43 625152 --a------ C:\WINDOWS\system32\catsrvut.dll 2007-03-18 18:45:43 225792 --a------ C:\WINDOWS\system32\catsrv.dll 2007-03-18 18:45:42 498688 --a------ C:\WINDOWS\system32\clbcatq.dll 2007-03-18 18:45:38 56320 --a------ C:\WINDOWS\system32\servdeps.dll 2007-03-18 18:45:38 17920 --a------ C:\WINDOWS\system32\mmfutil.dll 2007-03-18 18:45:38 58880 --a------ C:\WINDOWS\system32\licwmi.dll 2007-03-18 18:45:38 187904 --a------ C:\WINDOWS\system32\cmprops.dll 2007-03-18 18:45:32 40840 --a------ C:\WINDOWS\system32\drivers\termdd.sys 2007-03-18 18:45:32 196864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys -- Find3M Report --------------------------------------------------------------- 2007-04-03 18:11:34 355486 --a------ C:\WINDOWS\system32\perfh015.dat 2007-04-03 18:11:34 49492 --a------ C:\WINDOWS\system32\perfc015.dat 2007-04-03 17:45:32 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\F-Secure 2007-04-03 17:11:44 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Hamachi 2007-04-02 18:35:40 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\teamspeak2<TEAMSP~1> 2007-04-02 18:14:28 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\uTorrent 2007-03-31 22:07:54 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Skype 2007-03-29 20:08:06 0 d---s---- C:\Documents and Settings\Konrad\Dane aplikacji\Microsoft<MICROS~1> 2007-03-29 09:02:26 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Apple Computer<APPLEC~1> 2007-03-28 21:16:46 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Media Player Classic<MEDIAP~1> 2007-03-28 21:02:37 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Real 2007-03-22 15:31:15 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\AdobeUM 2007-03-22 15:30:47 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Adobe 2007-03-20 15:29:27 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Mozilla 2007-03-20 15:29:25 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Thunderbird<THUNDE~1> 2007-03-19 22:24:33 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Talkback 2007-03-18 23:29:11 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Macromedia<MACROM~1> 2007-03-18 19:38:16 62 --ahs---- C:\Documents and Settings\Konrad\Dane aplikacji\desktop.ini 2007-03-18 19:04:25 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Identities<IDENTI~1> 2007-01-29 10:58:06 60416 -----n--- C:\WINDOWS\system32\tzchange.exe -- Registry Dump --------------------------------------------------------------- [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "WooCnxMon"="C:\\PROGRA~1\\NEOSTR~1\\CnxMon.exe" "SpeedTouch USB Diagnostics"="\"C:\\Program Files\\Thomson\\SpeedTouch USB\\Dragdiag.exe\" /icon" "WOOWATCH"="C:\\PROGRA~1\\NEOSTR~1\\Watch.exe" "WOOTASKBARICON"="C:\\PROGRA~1\\NEOSTR~1\\TaskbarIcon.exe" "SoundMan"="SOUNDMAN.EXE" "NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe" "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime" "SmcService"="C:\\PROGRA~1\\Sygate\\SPF\\smc.exe -startgui" "!ewido"="\"C:\\Program Files\\ewido anti-spyware 4.0\\ewido.exe\" /minimized" "F-Secure Manager"="\"C:\\Program Files\\F-Secure Internet Security\\Common\\FSM32.EXE\" /splash" "F-Secure TNB"="\"C:\\Program Files\\F-Secure Internet Security\\TNB\\TNBUtil.exe\" /CHECKALL /WAITFORSW" "F-Secure Startup Wizard"="\"C:\\Program Files\\F-Secure Internet Security\\FSGUI\\FSSW.EXE\" /reboot" "BDMCon"="\"C:\\Program Files\\Softwin\\BitDefender9\\bdmcon.exe\"" "BDOESRV"="\"C:\\Program Files\\Softwin\\BitDefender9\\bdoesrv.exe\"" "BDNewsAgent"="\"C:\\Program Files\\Softwin\\BitDefender9\\bdnagent.exe\"" "BDSwitchAgent"="\"C:\\Program Files\\Softwin\\BitDefender9\\bdswitch.exe\"" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI] "Installed"="1" "NoChange"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="ewido anti-spyware 4.0" [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "DisableRegistryTools"=dword:00000000 [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] HTTPFilter REG_MULTI_SZ HTTPFilter\0\0 LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ DnsCache\0\0 DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 termsvcs REG_MULTI_SZ TermService\0\0 [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\H] Shell\AutoRun\command H:\autoplay.exe -- End of ComboScan: finished at 2007-04-03 at 18:12:37 ------------------------

kurde 305 pingu 1,34% packet lossow a bylo 5 ;/

**Posty:** 18165 · przez **wojtas** 03 Kwi 2007, 19:48

jest ok

**Posty:** 35 · przez **Wilk.** 03 Kwi 2007, 19:54

kurcze nie moze byc ok mam 500 pingu ;/

[ Dodano: Dzisiaj o 18:55 ]
dam jeszce raz nowego ;/

Kod: Zaznacz wszystko: ComboScan v20070306.20 run by Konrad on 2007-04-03 at 19:45:00 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- HijackThis (run as Konrad.exe) ---------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 19:45:03, on 2007-04-03 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE C:\Program Files\ewido anti-spyware 4.0\guard.exe C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe C:\Program Files\F-Secure Internet Security\Anti-Virus\FSGK32.EXE C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\F-Secure Internet Security\Common\FSMB32.EXE C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\F-Secure Internet Security\Anti-Virus\fssm32.exe C:\Program Files\F-Secure Internet Security\Common\FCH32.EXE C:\Program Files\F-Secure Internet Security\Common\FAMEH32.EXE C:\Program Files\F-Secure Internet Security\Anti-Virus\fsqh.exe C:\Program Files\F-Secure Internet Security\Anti-Virus\fsrw.exe C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe C:\WINDOWS\system32\wscntfy.exe C:\PROGRA~1\NEOSTR~1\CnxMon.exe C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\QuickTime\qttask.exe C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE C:\Program Files\Neostrada TP\NeostradaTP.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\F-Secure Internet Security\Anti-Virus\fsav32.exe C:\Program Files\Neostrada TP\ComComp.exe C:\PROGRA~1\F-SECU~1\ANTI-S~1\fsaw.exe C:\Program Files\F-Secure Internet Security\FSGUI\fsguidll.exe C:\Program Files\Neostrada TP\Watch.exe G:\Teamspeak2_RC2\TeamSpeak.exe C:\WINDOWS\system32\PnkBstrB.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Sygate\SPF\smc.exe d:\warcraft iii\war3.exe C:\Documents and Settings\Konrad\Pulpit\Nowy folder\comboscan.exe C:\DOCUME~1\Konrad\Pulpit\NOWYFO~1\Konrad.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE" /splash O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\F-Secure Internet Security\FSGUI\FSSW.EXE" /reboot O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender9\bdmcon.exe" O4 - HKLM\..\Run: [BDOESRV] "C:\Program Files\Softwin\BitDefender9\bdoesrv.exe" O4 - HKLM\..\Run: [BDNewsAgent] "C:\Program Files\Softwin\BitDefender9\bdnagent.exe" O4 - HKLM\..\Run: [BDSwitchAgent] "C:\Program Files\Softwin\BitDefender9\bdswitch.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: F-Secure Anti-Virus 2006.lnk = C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe O8 - Extra context menu item: &Zablokuj to okienko - C:\Program Files\F-Secure Internet Security\Anti-Spyware\blockpopups.htm O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: Osłona programu IE - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dll O9 - Extra 'Tools' menuitem: Osłona programu IE... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O17 - HKLM\System\CCS\Services\Tcpip\..\{6F14A062-74DC-45F9-82BB-D906B7B577E0}: NameServer = 194.204.159.1 217.98.63.164 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: F-Secure Anti-Virus 2006 (BackWeb Plug-in - 4476822) - F-Secure Internet Security 2005 - C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender9\vsserv.exe (file missing) -- Files created between 2007-03-03 and 2007-04-03 ----------------------------- 2007-04-03 17:40:02 0 d-------- C:\Program Files\Lavasoft 2007-04-02 21:21:24 33584 --a------ C:\WINDOWS\system32\drivers\fsndis5.sys 2007-04-02 21:21:24 70864 --a------ C:\WINDOWS\system32\drivers\fsdfw.sys 2007-04-02 21:19:58 0 d-------- C:\Program Files\F-Secure Internet Security<F-SECU~1> 2007-04-02 16:20:32 25856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys 2007-04-01 19:57:32 0 d-------- C:\Program Files\ewido anti-spyware 4.0<EWIDOA~1.0> 2007-04-01 12:20:59 17480 --a------ C:\WINDOWS\system32\drivers\hamachi.sys 2007-04-01 12:20:59 0 d-------- C:\Program Files\Hamachi 2007-04-01 12:20:37 13900 --a------ C:\WINDOWS\War3Unin.dat 2007-04-01 12:20:36 2829 --a------ C:\WINDOWS\War3Unin.pif 2007-04-01 12:20:36 126976 --a------ C:\WINDOWS\War3Unin.exe 2007-03-29 22:15:44 80 --a------ C:\WINDOWS\gmer_uninstall.cmd<GMER_U~1.CMD> 2007-03-29 21:59:48 14568 --a------ C:\WINDOWS\system32\drivers\wg6n.sys 2007-03-29 21:59:48 14568 --a------ C:\WINDOWS\system32\drivers\wg5n.sys 2007-03-29 21:59:47 14568 --a------ C:\WINDOWS\system32\drivers\wg4n.sys 2007-03-29 21:59:47 14568 --a------ C:\WINDOWS\system32\drivers\wg3n.sys 2007-03-29 21:59:47 60496 --a------ C:\WINDOWS\system32\drivers\Teefer.sys 2007-03-29 21:59:46 21075 --a------ C:\WINDOWS\system32\drivers\wpsdrvnt.sys 2007-03-29 21:59:43 83096 --a------ C:\WINDOWS\system32\SSSensor.dll 2007-03-29 21:59:40 0 d-------- C:\Program Files\Sygate 2007-03-29 21:59:27 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard<WISEIN~1> 2007-03-29 19:36:37 139776 --a------ C:\WINDOWS\system32\TASKMGR.COM 2007-03-29 19:36:37 139776 --a------ C:\WINDOWS\system32\T.COM 2007-03-29 19:36:37 149504 --a------ C:\WINDOWS\R.COM 2007-03-29 09:00:12 0 d-------- C:\Program Files\QuickTime<QUICKT~1> 2007-03-29 08:59:55 0 d-------- C:\Program Files\Apple Software Update<APPLES~1> 2007-03-28 21:19:14 0 d-------- C:\Program Files\BrizVideoJoin<BRIZVI~1> 2007-03-28 21:17:23 0 d-------- C:\Program Files\AVI Codec Pack<AVICOD~1> 2007-03-28 21:02:56 0 d-------- C:\Program Files\SubEdit-Player<SUBEDI~1> 2007-03-28 21:02:37 0 d-------- C:\Program Files\Real Alternative<REALAL~1> 2007-03-28 21:02:37 0 d-------- C:\Program Files\Media Player Classic<MEDIAP~1> 2007-03-28 21:01:51 0 d-------- C:\Program Files\AC3Filter<AC3FIL~1> 2007-03-28 21:01:30 0 d-------- C:\Program Files\DivX 2007-03-28 20:59:14 0 d-------- C:\Program Files\MarBit 2007-03-28 16:14:32 0 d-------- C:\Program Files\Common Files\LightScribe<LIGHTS~1> 2007-03-28 16:12:47 364544 -----n--- C:\WINDOWS\system32\TwnLib4.dll 2007-03-28 16:12:47 106496 --a------ C:\WINDOWS\system32\TwnLib20.dll 2007-03-28 16:12:43 471040 -----n--- C:\WINDOWS\system32\ImagXRA7.dll 2007-03-28 16:12:43 262144 -----n--- C:\WINDOWS\system32\ImagXR7.dll 2007-03-28 16:12:43 476320 -----n--- C:\WINDOWS\system32\ImagXpr7.dll 2007-03-28 16:12:43 1568768 -----n--- C:\WINDOWS\system32\ImagX7.dll 2007-03-28 16:12:42 155648 --a------ C:\WINDOWS\system32\NeroCheck.exe<NEROCH~1.EXE> 2007-03-28 16:12:38 0 d-------- C:\Program Files\Common Files\Ahead 2007-03-28 16:12:36 0 d-------- C:\Program Files\Ahead 2007-03-27 20:37:04 63040 --a------ C:\WINDOWS\system32\PnkBstrA.exe 2007-03-27 19:09:36 0 d-------- C:\Program Files\America's Army Server Manager<AMERIC~1> 2007-03-26 19:27:02 22584 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys 2007-03-26 16:57:55 99904 --a------ C:\WINDOWS\system32\PnkBstrB.exe 2007-03-26 16:57:46 0 d-------- C:\WINDOWS\system32\LogFiles 2007-03-26 16:47:45 0 d-------- C:\Program Files\America's Army<AMERIC~2> 2007-03-26 16:44:45 62744 --a------ C:\WINDOWS\system32\xinput1_2.dll<XINPUT~3.DLL> 2007-03-26 16:44:45 236824 --a------ C:\WINDOWS\system32\xactengine2_3.dll<XACTEN~4.DLL> 2007-03-22 15:40:20 17920 --a------ C:\WINDOWS\system32\mdimon.dll 2007-03-22 15:39:10 0 d-------- C:\WINDOWS\SHELLNEW 2007-03-22 15:30:28 0 d-------- C:\Program Files\Common Files\Adobe 2007-03-22 01:09:06 0 d-------- C:\Program Files\Common Files\Skype 2007-03-22 01:08:52 0 d-------- C:\Program Files\Skype 2007-03-21 09:31:49 5632 --a------ C:\WINDOWS\system32\ptpusb.dll 2007-03-21 09:31:47 159232 --a------ C:\WINDOWS\system32\ptpusd.dll 2007-03-21 09:31:46 15104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys 2007-03-20 21:36:26 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll<CMDLIN~1.DLL> 2007-03-20 20:41:50 2297552 --a------ C:\WINDOWS\system32\d3dx9_26.dll 2007-03-20 15:38:13 115880 -----n--- C:\WINDOWS\system32\pxinsi64.exe 2007-03-20 15:38:13 36528 -----n--- C:\WINDOWS\system32\drivers\PxHelp20.sys 2007-03-20 15:38:13 2560 -----n--- C:\WINDOWS\system32\drivers\cdralw2k.sys 2007-03-20 15:38:13 2432 -----n--- C:\WINDOWS\system32\drivers\cdr4_xp.sys 2007-03-20 15:38:12 129784 -----n--- C:\WINDOWS\system32\pxafs.dll 2007-03-20 15:37:44 0 d-------- C:\WINDOWS\RegisteredPackages<REGIST~2> 2007-03-20 15:36:11 0 d-------- C:\Program Files\Winamp 2007-03-20 15:29:05 3490 --a------ C:\WINDOWS\mozver.dat 2007-03-20 15:28:56 0 d-------- C:\Program Files\Mozilla Thunderbird<MOZILL~2> 2007-03-19 22:24:28 0 --a------ C:\WINDOWS\nsreg.dat 2007-03-19 22:24:20 0 d-------- C:\Program Files\Mozilla Firefox<MOZILL~1> 2007-03-19 00:20:15 49152 --a------ C:\WINDOWS\system32\ChCfg.exe 2007-03-19 00:20:14 6400 --a------ C:\WINDOWS\system32\drivers\splitter.sys 2007-03-19 00:20:12 82944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys 2007-03-19 00:20:10 52864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys 2007-03-19 00:20:04 54272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys 2007-03-19 00:20:02 142464 --a------ C:\WINDOWS\system32\drivers\aec.sys 2007-03-19 00:20:00 172416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys 2007-03-19 00:19:59 2944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys 2007-03-19 00:19:57 60800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys 2007-03-19 00:19:56 7552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys 2007-03-19 00:19:54 4992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys 2007-03-19 00:19:51 5376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2007-03-19 00:19:47 4027456 -ra------ C:\WINDOWS\system32\drivers\alcxwdm.sys 2007-03-19 00:19:45 4096 --a------ C:\WINDOWS\system32\ksuser.dll 2007-03-19 00:19:45 145792 --a------ C:\WINDOWS\system32\drivers\portcls.sys 2007-03-19 00:19:45 60288 --a------ C:\WINDOWS\system32\drivers\drmk.sys 2007-03-19 00:19:39 10528768 --a------ C:\WINDOWS\system32\RTLCPL.exe 2007-03-19 00:19:39 0 d-------- C:\Program Files\Realtek AC97<REALTE~2> 2007-03-19 00:19:37 577536 --a------ C:\WINDOWS\soundman.exe 2007-03-19 00:19:36 147456 --a------ C:\WINDOWS\system32\RtlCPAPI.dll 2007-03-19 00:19:36 315392 --a------ C:\WINDOWS\alcupd.exe 2007-03-19 00:19:36 217088 --a------ C:\WINDOWS\Alcrmv.exe 2007-03-18 22:58:20 22752 --a------ C:\WINDOWS\system32\spupdsvc.exe 2007-03-18 22:58:20 0 d-------- C:\WINDOWS\system32\PreInstall<PREINS~1> 2007-03-18 22:58:18 0 d--h----- C:\WINDOWS\$hf_mig$ 2007-03-18 22:46:47 0 d-------- C:\WINDOWS\system32\SoftwareDistribution<SOFTWA~1> 2007-03-18 22:41:28 0 d-------- C:\Program Files\Realtek Sound Manager<REALTE~1> 2007-03-18 22:41:28 0 d-------- C:\Program Files\AvRack 2007-03-18 20:28:56 0 d-------- C:\Program Files\Gadu-Gadu<GADU-G~1> 2007-03-18 20:26:43 32768 --a------ C:\WINDOWS\system32\UnAudioNT.dll<UNAUDI~1.DLL> 2007-03-18 20:26:43 0 d-------- C:\Program Files\VIA Technologies, Inc<VIATEC~1> 2007-03-18 20:26:39 306688 --a------ C:\WINDOWS\IsUninst.exe 2007-03-18 19:41:56 3072 --a------ C:\WINDOWS\system32\drivers\audstub.sys 2007-03-18 19:40:48 58624 --a------ C:\WINDOWS\system32\drivers\redbook.sys 2007-03-18 19:40:26 701440 --a------ C:\WINDOWS\system32\drivers\ati2mtag.sys 2007-03-18 19:40:26 516768 --a------ C:\WINDOWS\system32\ativvaxx.dll 2007-03-18 19:40:26 1888992 --a------ C:\WINDOWS\system32\ati3duag.dll 2007-03-18 19:40:26 870784 --a------ C:\WINDOWS\system32\ati3d1ag.dll 2007-03-18 19:40:25 201728 --a------ C:\WINDOWS\system32\ati2dvag.dll 2007-03-18 19:40:25 229376 --a------ C:\WINDOWS\system32\ati2cqag.dll 2007-03-18 19:40:06 44672 --a------ C:\WINDOWS\system32\drivers\UAGP35.SYS 2007-03-18 19:40:02 32768 --a------ C:\WINDOWS\system32\drivers\sisnic.sys 2007-03-18 19:39:56 77312 --a------ C:\WINDOWS\system32\usbui.dll 2007-03-18 19:38:45 0 d--hs---- C:\WINDOWS\Installer<INSTAL~1> 2007-03-18 19:38:44 0 d-------- C:\Program Files\Common Files\ODBC 2007-03-18 19:38:41 0 dr------- C:\Program Files<PROGRA~1> 2007-03-18 19:38:41 0 d-------- C:\Program Files\Common Files\SpeechEngines<SPEECH~1> 2007-03-18 19:38:37 6144 -ra------ C:\WINDOWS\system32\kbdtuq.dll 2007-03-18 19:38:37 6144 -ra------ C:\WINDOWS\system32\kbdtuf.dll 2007-03-18 19:38:37 5632 -ra------ C:\WINDOWS\system32\kbdazel.dll 2007-03-18 19:38:36 5632 -ra------ C:\WINDOWS\system32\kbdmon.dll 2007-03-18 19:38:36 5632 -ra------ C:\WINDOWS\system32\kbdkyr.dll 2007-03-18 19:38:34 8192 -ra------ C:\WINDOWS\system32\kbdhept.dll 2007-03-18 19:38:34 6656 -ra------ C:\WINDOWS\system32\kbdhela3.dll 2007-03-18 19:38:34 6144 -ra------ C:\WINDOWS\system32\kbdhela2.dll 2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe319.dll 2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe220.dll 2007-03-18 19:38:34 5632 -ra------ C:\WINDOWS\system32\kbdhe.dll 2007-03-18 19:38:34 6144 -ra------ C:\WINDOWS\system32\kbdgkl.dll 2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdlv1.dll 2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdlv.dll 2007-03-18 19:38:32 5632 -ra------ C:\WINDOWS\system32\kbdlt1.dll 2007-03-18 19:38:32 5632 -ra------ C:\WINDOWS\system32\kbdlt.dll 2007-03-18 19:38:32 6144 -ra------ C:\WINDOWS\system32\kbdest.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdycl.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdsl1.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdsl.dll 2007-03-18 19:38:29 5632 --a------ C:\WINDOWS\system32\kbdro.dll 2007-03-18 19:38:29 5632 --a------ C:\WINDOWS\system32\kbdhu1.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdhu.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcz2.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcz1.dll 2007-03-18 19:38:29 7168 --a------ C:\WINDOWS\system32\kbdcz.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\kbdcr.dll 2007-03-18 19:38:29 6656 --a------ C:\WINDOWS\system32\KBDAL.DLL 2007-03-18 19:38:28 13312 --a------ C:\WINDOWS\system32\irclass.dll 2007-03-18 19:38:28 176157 --a------ C:\WINDOWS\system32\dgrpsetu.dll 2007-03-18 19:38:27 24661 --a------ C:\WINDOWS\system32\spxcoins.dll 2007-03-18 19:38:27 103424 --a------ C:\WINDOWS\system32\EqnClass.Dll 2007-03-18 19:38:27 85532 --a------ C:\WINDOWS\system32\dgsetup.dll 2007-03-18 19:38:27 9168 --a------ C:\WINDOWS\system\VER.DLL 2007-03-18 19:38:27 19200 --a------ C:\WINDOWS\system\TAPI.DLL 2007-03-18 19:38:27 5120 --a------ C:\WINDOWS\system\SHELL.DLL 2007-03-18 19:38:26 24064 --a------ C:\WINDOWS\system\OLESVR.DLL 2007-03-18 19:38:26 83456 --a------ C:\WINDOWS\system\OLECLI.DLL 2007-03-18 19:38:26 127008 --a------ C:\WINDOWS\system\MSVIDEO.DLL 2007-03-18 19:38:26 9936 --a------ C:\WINDOWS\system\LZEXPAND.DLL 2007-03-18 19:38:26 33376 --a------ C:\WINDOWS\system\COMMDLG.DLL 2007-03-18 19:38:26 109488 --a------ C:\WINDOWS\system\AVIFILE.DLL 2007-03-18 19:38:26 70096 --a------ C:\WINDOWS\system\AVICAP.DLL 2007-03-18 19:38:25 15360 --a------ C:\WINDOWS\TASKMAN.EXE 2007-03-18 19:38:25 11264 --a------ C:\WINDOWS\system32\drivers\irenum.sys 2007-03-18 19:38:25 8704 --a------ C:\WINDOWS\system32\batt.dll 2007-03-18 19:38:25 69552 --a------ C:\WINDOWS\system\MMSYSTEM.DLL 2007-03-18 19:38:24 70144 --a------ C:\WINDOWS\NOTEPAD.EXE 2007-03-18 19:38:23 75776 --a------ C:\WINDOWS\system32\storprop.dll 2007-03-18 19:38:03 0 d-------- C:\WINDOWS\system32\CatRoot2 2007-03-18 19:38:03 0 d-------- C:\WINDOWS\system32\CatRoot 2007-03-18 19:37:37 0 d-------- C:\Documents and Settings<DOCUME~1> 2007-03-18 19:37:36 0 d--hs---- C:\System Volume Information<SYSTEM~1> 2007-03-18 19:29:37 0 d-------- C:\WINDOWS 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\WinSxS 2007-03-18 19:29:37 0 dr------- C:\WINDOWS\Web 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\twain_32 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\wins 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\wbem 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\usmt 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\spool 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ShellExt 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\Setup 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ras 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\oobe 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\npp 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\mui 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\inetsrv 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\IME 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\icsxml 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\ias 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\export 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers\etc 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\drivers\disdn 2007-03-18 19:29:37 0 dr-hs--c- C:\WINDOWS\system32\dllcache 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\dhcp 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\config 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\3com_dmi 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\3076 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\2052 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1054 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1045 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1042 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1041 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1037 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1033 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1031 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1028 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system32\1025 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\system 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\security 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Resources<RESOUR~1> 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\repair 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Provisioning<PROVIS~1> 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\PeerNet 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\pchealth 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\mui 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\msapps 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\msagent 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Media 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\java 2007-03-18 19:29:37 0 d--h----- C:\WINDOWS\inf 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\ime 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Help 2007-03-18 19:29:37 0 dr--s---- C:\WINDOWS\Fonts 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Driver Cache<DRIVER~1> 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Debug 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Cursors 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Connection Wizard<CONNEC~1> 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\Config 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\AppPatch 2007-03-18 19:29:37 0 d-------- C:\WINDOWS\addins 2007-03-18 19:08:28 32768 --a------ C:\WINDOWS\system32\WooDial2000.dll<WOODIA~1.DLL> 2007-03-18 19:06:22 5606 --a------ C:\WINDOWS\system32\stci.dll 2007-03-18 19:06:22 5280 --a------ C:\WINDOWS\system32\drivers\alcawh.sys 2007-03-18 19:06:22 70688 --a------ C:\WINDOWS\system32\drivers\alcaudsl.sys 2007-03-18 19:06:22 3968 --a------ C:\WINDOWS\system32\drivers\alcacr.sys 2007-03-18 19:06:21 53600 --a------ C:\WINDOWS\system32\drivers\alcan5wn.sys 2007-03-18 19:06:20 0 d-------- C:\Program Files\Thomson 2007-03-18 19:06:19 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1> 2007-03-18 19:06:17 0 d-------- C:\Program Files\Common Files\InstallShield<INSTAL~1> 2007-03-18 19:05:15 0 d-------- C:\Program Files\Neostrada TP<NEOSTR~1> 2007-03-18 18:53:40 0 d-------- C:\WINDOWS\SoftwareDistribution<SOFTWA~1> 2007-03-18 18:53:39 0 d-------- C:\WINDOWS\Prefetch 2007-03-18 18:50:11 0 d-------- C:\WINDOWS\system32\xircom 2007-03-18 18:50:11 0 d-------- C:\Program Files\microsoft frontpage<MICROS~1> 2007-03-18 18:50:02 0 -rahs---- C:\MSDOS.SYS 2007-03-18 18:50:02 0 -rahs---- C:\IO.SYS 2007-03-18 18:50:02 0 --a------ C:\CONFIG.SYS 2007-03-18 18:50:02 0 -----n--- C:\AUTOEXEC.BAT 2007-03-18 18:49:44 112128 --a------ C:\WINDOWS\system32\mapi32.dll 2007-03-18 18:48:53 0 dr------- C:\WINDOWS\Offline Web Pages<OFFLIN~1> 2007-03-18 18:48:53 0 d---s---- C:\WINDOWS\Downloaded Program Files<DOWNLO~1> 2007-03-18 18:48:41 0 d--h----- C:\Program Files\WindowsUpdate<WINDOW~3> 2007-03-18 18:48:38 0 d-------- C:\Program Files\Usługi online<USUGIO~1> 2007-03-18 18:48:21 0 d-------- C:\WINDOWS\system32\DirectX 2007-03-18 18:48:01 11264 --a------ C:\WINDOWS\system32\atrace.dll 2007-03-18 18:47:53 12288 --a------ C:\WINDOWS\system32\nmevtmsg.dll 2007-03-18 18:47:52 67584 --a------ C:\WINDOWS\system32\acctres.dll 2007-03-18 18:47:49 0 d---s---- C:\WINDOWS\Tasks 2007-03-18 18:47:49 16384 --a------ C:\WINDOWS\system32\icfgnt5.dll 2007-03-18 18:47:48 0 d-------- C:\Program Files\Common Files\MSSoap 2007-03-18 18:47:44 0 d-------- C:\WINDOWS\system32\Macromed 2007-03-18 18:47:44 0 d-------- C:\WINDOWS\srchasst 2007-03-18 18:47:41 173536 --a------ C:\WINDOWS\system32\wuweb.dll 2007-03-18 18:47:41 128280 --a------ C:\WINDOWS\system32\wucltui.dll 2007-03-18 18:47:41 6656 --a------ C:\WINDOWS\system32\wuauserv.dll 2007-03-18 18:47:41 195352 --a------ C:\WINDOWS\system32\wuaueng1.dll 2007-03-18 18:47:41 1343768 --a------ C:\WINDOWS\system32\wuaueng.dll 2007-03-18 18:47:40 41240 --a------ C:\WINDOWS\system32\wups.dll 2007-03-18 18:47:40 175384 --a------ C:\WINDOWS\system32\wuauclt1.exe 2007-03-18 18:47:40 125208 --a------ C:\WINDOWS\system32\wuauclt.exe 2007-03-18 18:47:40 466200 --a------ C:\WINDOWS\system32\wuapi.dll 2007-03-18 18:47:40 18944 --a------ C:\WINDOWS\system32\qmgrprxy.dll 2007-03-18 18:47:40 382464 --a------ C:\WINDOWS\system32\qmgr.dll 2007-03-18 18:47:40 7168 --a------ C:\WINDOWS\system32\bitsprx3.dll 2007-03-18 18:47:40 8192 --a------ C:\WINDOWS\system32\bitsprx2.dll 2007-03-18 18:47:36 0 d-------- C:\Program Files\Movie Maker<MOVIEM~1> 2007-03-18 18:47:33 45568 --a------ C:\WINDOWS\system32\safrslv.dll 2007-03-18 18:47:33 29696 --a------ C:\WINDOWS\system32\safrdm.dll 2007-03-18 18:47:33 43520 --a------ C:\WINDOWS\system32\safrcdlg.dll 2007-03-18 18:47:32 43520 --a------ C:\WINDOWS\system32\racpldlg.dll 2007-03-18 18:47:30 23040 --a------ C:\WINDOWS\system32\fltmc.exe 2007-03-18 18:47:30 16896 --a------ C:\WINDOWS\system32\fltlib.dll 2007-03-18 18:47:29 171008 --a------ C:\WINDOWS\system32\srsvc.dll 2007-03-18 18:47:29 240128 --a------ C:\WINDOWS\system32\srrstr.dll 2007-03-18 18:47:29 67584 --a------ C:\WINDOWS\system32\srclient.dll 2007-03-18 18:47:29 0 d-------- C:\WINDOWS\system32\Restore 2007-03-18 18:47:29 73472 --a------ C:\WINDOWS\system32\drivers\sr.sys 2007-03-18 18:47:29 128896 --a------ C:\WINDOWS\system32\drivers\fltmgr.sys 2007-03-18 18:47:28 28672 --a------ C:\WINDOWS\system32\nmmkcert.dll 2007-03-18 18:47:28 69632 --a------ C:\WINDOWS\system32\msconf.dll 2007-03-18 18:47:28 32768 --a------ C:\WINDOWS\system32\mnmsrvc.exe 2007-03-18 18:47:28 34560 --a------ C:\WINDOWS\system32\mnmdd.dll 2007-03-18 18:47:28 32768 --a------ C:\WINDOWS\system32\isrdbg32.dll 2007-03-18 18:47:28 81920 --a------ C:\WINDOWS\system32\ils.dll 2007-03-18 18:47:25 105984 --a------ C:\WINDOWS\system32\msoert2.dll 2007-03-18 18:47:25 252928 --a------ C:\WINDOWS\system32\msoeacct.dll 2007-03-18 18:47:24 49664 --a------ C:\WINDOWS\system32\inetres.dll 2007-03-18 18:47:24 679424 --a------ C:\WINDOWS\system32\inetcomm.dll 2007-03-18 18:47:22 192000 --a------ C:\WINDOWS\system32\schedsvc.dll 2007-03-18 18:47:22 12288 --a------ C:\WINDOWS\system32\mstinit.exe 2007-03-18 18:47:22 278528 --a------ C:\WINDOWS\system32\mstask.dll 2007-03-18 18:47:22 86016 --a------ C:\WINDOWS\system32\isign32.dll 2007-03-18 18:47:22 278528 --a------ C:\WINDOWS\system32\inetcfg.dll 2007-03-18 18:47:22 65536 --a------ C:\WINDOWS\system32\icwphbk.dll 2007-03-18 18:47:22 73728 --a------ C:\WINDOWS\system32\icwdial.dll 2007-03-18 18:47:13 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat<EMPTYR~1.DAT> 2007-03-18 18:46:58 0 d-------- C:\WINDOWS\Registration<REGIST~1> 2007-03-18 18:46:18 0 d-------- C:\Program Files\Messenger<MESSEN~1> 2007-03-18 18:46:15 5632 --a------ C:\WINDOWS\system32\write.exe 2007-03-18 18:46:15 0 d-------- C:\Program Files\MSN Gaming Zone<MSNGAM~1> 2007-03-18 18:46:06 139264 --a------ C:\WINDOWS\system32\sndvol32.exe 2007-03-18 18:46:06 44544 --a------ C:\WINDOWS\system32\hticons.dll 2007-03-18 18:46:05 35328 --a------ C:\WINDOWS\system32\winchat.exe 2007-03-18 18:46:05 73216 --a------ C:\WINDOWS\system32\avwav.dll 2007-03-18 18:46:05 231424 --a------ C:\WINDOWS\system32\avtapi.dll 2007-03-18 18:46:05 16384 --a------ C:\WINDOWS\system32\avmeter.dll 2007-03-18 18:45:58 119808 --a------ C:\WINDOWS\system32\winmine.exe 2007-03-18 18:45:58 57344 --a------ C:\WINDOWS\system32\sol.exe 2007-03-18 18:45:58 605696 --a------ C:\WINDOWS\system32\getuname.dll 2007-03-18 18:45:58 80896 --a------ C:\WINDOWS\system32\charmap.exe 2007-03-18 18:45:58 115200 --a------ C:\WINDOWS\system32\calc.exe 2007-03-18 18:45:57 1225 --a------ C:\WINDOWS\system32\usrlogon.cmd 2007-03-18 18:45:57 17920 --a------ C:\WINDOWS\system32\tsshutdn.exe 2007-03-18 18:45:57 16384 --a------ C:\WINDOWS\system32\tskill.exe 2007-03-18 18:45:57 15360 --a------ C:\WINDOWS\system32\tsdiscon.exe 2007-03-18 18:45:57 15360 --a------ C:\WINDOWS\system32\tscon.exe 2007-03-18 18:45:57 9728 --a------ C:\WINDOWS\system32\reset.exe 2007-03-18 18:45:57 128000 --a------ C:\WINDOWS\system32\mshearts.exe 2007-03-18 18:45:57 55808 --a------ C:\WINDOWS\system32\freecell.exe 2007-03-18 18:45:56 15360 --a------ C:\WINDOWS\system32\shadow.exe 2007-03-18 18:45:56 16384 --a------ C:\WINDOWS\system32\rwinsta.exe 2007-03-18 18:45:56 33792 --a------ C:\WINDOWS\system32\regini.exe 2007-03-18 18:45:56 4608 --a------ C:\WINDOWS\system32\rdpcfgex.dll 2007-03-18 18:45:56 22528 --a------ C:\WINDOWS\system32\qwinsta.exe 2007-03-18 18:45:56 17408 --a------ C:\WINDOWS\system32\qappsrv.exe 2007-03-18 18:45:56 22528 --a------ C:\WINDOWS\system32\msg.exe 2007-03-18 18:45:56 15872 --a------ C:\WINDOWS\system32\logoff.exe 2007-03-18 18:45:56 15872 --a------ C:\WINDOWS\system32\cdmodem.dll 2007-03-18 18:45:55 25088 --a------ C:\WINDOWS\system32\mtxlegih.dll 2007-03-18 18:45:55 4096 --a------ C:\WINDOWS\system32\mtxex.dll 2007-03-18 18:45:55 20480 --a------ C:\WINDOWS\system32\mtxdm.dll 2007-03-18 18:45:55 5120 --a------ C:\WINDOWS\system32\dcomcnfg.exe 2007-03-18 18:45:55 97792 --a------ C:\WINDOWS\system32\comrepl.dll 2007-03-18 18:45:55 25600 --a------ C:\WINDOWS\system32\comaddin.dll 2007-03-18 18:45:54 54272 --a------ C:\WINDOWS\system32\stclient.dll 2007-03-18 18:45:54 147456 --a------ C:\WINDOWS\system32\comsnap.dll 2007-03-18 18:45:49 132608 --a------ C:\WINDOWS\system32\sndrec32.exe 2007-03-18 18:45:49 124928 --a------ C:\WINDOWS\system32\mplay32.exe 2007-03-18 18:45:49 351744 --a------ C:\WINDOWS\system32\hypertrm.dll 2007-03-18 18:45:49 187904 --a------ C:\WINDOWS\system32\accwiz.exe 2007-03-18 18:45:48 539136 --a------ C:\WINDOWS\system32\spider.exe 2007-03-18 18:45:48 345088 --a------ C:\WINDOWS\system32\mspaint.exe 2007-03-18 18:45:48 103424 --a------ C:\WINDOWS\system32\clipbrd.exe 2007-03-18 18:45:48 0 d-------- C:\Program Files\Windows NT<WINDOW~1> 2007-03-18 18:45:47 94720 --a------ C:\WINDOWS\system32\tscfgwmi.dll 2007-03-18 18:45:47 60928 --a------ C:\WINDOWS\system32\remotepg.dll 2007-03-18 18:45:47 13824 --a------ C:\WINDOWS\system32\rdsaddin.exe 2007-03-18 18:45:47 655360 --a------ C:\WINDOWS\system32\mstscax.dll 2007-03-18 18:45:47 408576 --a------ C:\WINDOWS\system32\mstsc.exe 2007-03-18 18:45:47 21896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys 2007-03-18 18:45:47 12040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys 2007-03-18 18:45:47 139528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys 2007-03-18 18:45:46 44544 --a------ C:\WINDOWS\system32\tscupgrd.exe 2007-03-18 18:45:46 296448 --a------ C:\WINDOWS\system32\termsrv.dll 2007-03-18 18:45:46 141824 --a------ C:\WINDOWS\system32\sessmgr.exe 2007-03-18 18:45:46 67072 --a------ C:\WINDOWS\system32\rdshost.exe 2007-03-18 18:45:46 87176 --a------ C:\WINDOWS\system32\rdpwsx.dll 2007-03-18 18:45:46 19968 --a------ C:\WINDOWS\system32\rdpsnd.dll 2007-03-18 18:45:46 62464 --a------ C:\WINDOWS\system32\rdpclip.exe 2007-03-18 18:45:46 147968 --a------ C:\WINDOWS\system32\rdchost.dll 2007-03-18 18:45:46 20992 --a------ C:\WINDOWS\system32\qprocess.exe 2007-03-18 18:45:46 11264 --a------ C:\WINDOWS\system32\icaapi.dll 2007-03-18 18:45:45 11776 --a------ C:\WINDOWS\system32\xolehlp.dll 2007-03-18 18:45:45 91136 --a------ C:\WINDOWS\system32\mtxoci.dll 2007-03-18 18:45:45 161280 --a------ C:\WINDOWS\system32\msdtcuiu.dll 2007-03-18 18:45:45 956416 --a------ C:\WINDOWS\system32\msdtctm.dll 2007-03-18 18:45:45 426496 --a------ C:\WINDOWS\system32\msdtcprx.dll 2007-03-18 18:45:45 58880 --a------ C:\WINDOWS\system32\msdtclog.dll 2007-03-18 18:45:45 0 d-------- C:\WINDOWS\system32\MsDtc 2007-03-18 18:45:45 38912 --a------ C:\WINDOWS\system32\cfgbkend.dll 2007-03-18 18:45:44 6144 --a------ C:\WINDOWS\system32\msdtc.exe 2007-03-18 18:45:44 0 d-------- C:\WINDOWS\system32\Com 2007-03-18 18:45:44 60416 --a------ C:\WINDOWS\system32\colbact.dll 2007-03-18 18:45:44 85504 --a------ C:\WINDOWS\system32\catsrvps.dll 2007-03-18 18:45:43 540160 --a------ C:\WINDOWS\system32\comuid.dll 2007-03-18 18:45:43 1267200 --a------ C:\WINDOWS\system32\comsvcs.dll 2007-03-18 18:45:43 110080 --a------ C:\WINDOWS\system32\clbcatex.dll 2007-03-18 18:45:43 625152 --a------ C:\WINDOWS\system32\catsrvut.dll 2007-03-18 18:45:43 225792 --a------ C:\WINDOWS\system32\catsrv.dll 2007-03-18 18:45:42 498688 --a------ C:\WINDOWS\system32\clbcatq.dll 2007-03-18 18:45:38 56320 --a------ C:\WINDOWS\system32\servdeps.dll 2007-03-18 18:45:38 17920 --a------ C:\WINDOWS\system32\mmfutil.dll 2007-03-18 18:45:38 58880 --a------ C:\WINDOWS\system32\licwmi.dll 2007-03-18 18:45:38 187904 --a------ C:\WINDOWS\system32\cmprops.dll 2007-03-18 18:45:32 40840 --a------ C:\WINDOWS\system32\drivers\termdd.sys 2007-03-18 18:45:32 196864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys -- Find3M Report --------------------------------------------------------------- 2007-04-03 18:11:34 355486 --a------ C:\WINDOWS\system32\perfh015.dat 2007-04-03 18:11:34 49492 --a------ C:\WINDOWS\system32\perfc015.dat 2007-04-03 17:45:32 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\F-Secure 2007-04-03 17:11:44 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Hamachi 2007-04-02 18:35:40 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\teamspeak2<TEAMSP~1> 2007-04-02 18:14:28 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\uTorrent 2007-03-31 22:07:54 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Skype 2007-03-29 20:08:06 0 d---s---- C:\Documents and Settings\Konrad\Dane aplikacji\Microsoft<MICROS~1> 2007-03-29 09:02:26 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Apple Computer<APPLEC~1> 2007-03-28 21:16:46 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Media Player Classic<MEDIAP~1> 2007-03-28 21:02:37 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Real 2007-03-22 15:31:15 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\AdobeUM 2007-03-22 15:30:47 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Adobe 2007-03-20 15:29:27 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Mozilla 2007-03-20 15:29:25 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Thunderbird<THUNDE~1> 2007-03-19 22:24:33 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Talkback 2007-03-18 23:29:11 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Macromedia<MACROM~1> 2007-03-18 19:38:16 62 --ahs---- C:\Documents and Settings\Konrad\Dane aplikacji\desktop.ini 2007-03-18 19:04:25 0 d-------- C:\Documents and Settings\Konrad\Dane aplikacji\Identities<IDENTI~1> 2007-01-29 10:58:06 60416 -----n--- C:\WINDOWS\system32\tzchange.exe -- Registry Dump --------------------------------------------------------------- [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "WooCnxMon"="C:\\PROGRA~1\\NEOSTR~1\\CnxMon.exe" "SpeedTouch USB Diagnostics"="\"C:\\Program Files\\Thomson\\SpeedTouch USB\\Dragdiag.exe\" /icon" "WOOWATCH"="C:\\PROGRA~1\\NEOSTR~1\\Watch.exe" "WOOTASKBARICON"="C:\\PROGRA~1\\NEOSTR~1\\TaskbarIcon.exe" "SoundMan"="SOUNDMAN.EXE" "NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe" "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime" "SmcService"="C:\\PROGRA~1\\Sygate\\SPF\\smc.exe -startgui" "!ewido"="\"C:\\Program Files\\ewido anti-spyware 4.0\\ewido.exe\" /minimized" "F-Secure Manager"="\"C:\\Program Files\\F-Secure Internet Security\\Common\\FSM32.EXE\" /splash" "F-Secure TNB"="\"C:\\Program Files\\F-Secure Internet Security\\TNB\\TNBUtil.exe\" /CHECKALL /WAITFORSW" "F-Secure Startup Wizard"="\"C:\\Program Files\\F-Secure Internet Security\\FSGUI\\FSSW.EXE\" /reboot" "BDMCon"="\"C:\\Program Files\\Softwin\\BitDefender9\\bdmcon.exe\"" "BDOESRV"="\"C:\\Program Files\\Softwin\\BitDefender9\\bdoesrv.exe\"" "BDNewsAgent"="\"C:\\Program Files\\Softwin\\BitDefender9\\bdnagent.exe\"" "BDSwitchAgent"="\"C:\\Program Files\\Softwin\\BitDefender9\\bdswitch.exe\"" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI] "Installed"="1" "NoChange"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="ewido anti-spyware 4.0" [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "DisableRegistryTools"=dword:00000000 [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] HTTPFilter REG_MULTI_SZ HTTPFilter\0\0 LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ DnsCache\0\0 DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 termsvcs REG_MULTI_SZ TermService\0\0 [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\H] Shell\AutoRun\command H:\autoplay.exe [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0f713e33-d575-11db-8925-806d6172696f}] Shell\AutoRun\command H:\autoplay.exe *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_PNKBSTRB *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_PNKBSTRK -- End of ComboScan: finished at 2007-04-03 at 19:45:36 ------------------------

**Posty:** 18165 · przez **wojtas** 03 Kwi 2007, 20:13

wklej loga z gmera:

1. Zakładka Rootkit >>> zaznaczone wszystko oprócz Pokazuj wszystko >>> kliknij Szukaj >>> czekaj cierpliwie aż skończy >>> Kopiuj >>> wklej do posta
2. Zakładka Rootkit >>> zaznaczone tylko Usługi i Pokazuj wszystko >>> kliknij Szukaj >>> czekaj cierpliwie aż skończy >>> Kopiuj >>> wklej do posta

**Posty:** 35 · przez **Wilk.** 03 Kwi 2007, 20:38

Kod: Zaznacz wszystko: GMER 1.0.12.12086 - http://www.gmer.net Rootkit scan 2007-04-03 20:10:15 Windows 5.1.2600 Dodatek Service Pack 2 ---- Services - GMER 1.0.12 ---- Service [DISABLED] Abiosdsk Service [DISABLED] abp480n5 Service C:\WINDOWS\system32\DRIVERS\ACPI.sys [BOOT] ACPI Service [DISABLED] ACPIEC Service [DISABLED] adpu160m Service C:\WINDOWS\system32\drivers\aec.sys [MANUAL] aec Service C:\WINDOWS\System32\drivers\afd.sys [SYSTEM] AFD Service [DISABLED] Aha154x Service [DISABLED] aic78u2 Service [DISABLED] aic78xx Service C:\WINDOWS\system32\DRIVERS\alcan5wn.sys [MANUAL] alcan5wn Service C:\WINDOWS\system32\DRIVERS\alcaudsl.sys [MANUAL] alcaudsl Service C:\WINDOWS\system32\drivers\ALCXWDM.SYS [MANUAL] ALCXWDM Service C:\WINDOWS\system32\svchost.exe [DISABLED] Alerter Service C:\WINDOWS\System32\alg.exe [MANUAL] ALG Service [DISABLED] AliIde Service C:\WINDOWS\system32\DRIVERS\amdk7.sys [SYSTEM] AmdK7 Service [DISABLED] amsint Service C:\WINDOWS\system32\svchost.exe [MANUAL] AppMgmt Service [DISABLED] asc Service [DISABLED] asc3350p Service [DISABLED] asc3550 Service C:\WINDOWS\system32\DRIVERS\asyncmac.sys [MANUAL] AsyncMac Service C:\WINDOWS\system32\DRIVERS\atapi.sys [BOOT] atapi Service [DISABLED] Atdisk Service C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [MANUAL] ati2mtag Service C:\WINDOWS\system32\DRIVERS\atmarpc.sys [MANUAL] Atmarpc Service C:\WINDOWS\System32\svchost.exe [AUTO] AudioSrv Service C:\WINDOWS\system32\DRIVERS\audstub.sys [MANUAL] audstub Service C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE [AUTO] BackWeb Plug-in - 4476822 Service BattC Service C:\Program Files\Common Files\Softwin\BitDefender Firewall\bdftdif.sys [SYSTEM] bdftdif Service [SYSTEM] Beep Service C:\WINDOWS\system32\svchost.exe [MANUAL] BITS Service C:\WINDOWS\system32\svchost.exe [AUTO] Browser Service [DISABLED] cbidf2k Service [DISABLED] cd20xrnt Service [SYSTEM] Cdaudio Service [DISABLED] Cdfs Service C:\WINDOWS\system32\DRIVERS\cdrom.sys [SYSTEM] Cdrom Service [SYSTEM] Changer Service C:\WINDOWS\system32\cisvc.exe [MANUAL] CiSvc Service C:\WINDOWS\system32\clipsrv.exe [DISABLED] ClipSrv Service [DISABLED] CmdIde Service C:\WINDOWS\system32\dllhost.exe [MANUAL] COMSysApp Service ContentFilter Service ContentIndex Service [DISABLED] Cpqarray Service C:\WINDOWS\system32\svchost.exe [AUTO] CryptSvc Service [DISABLED] dac2w2k Service [DISABLED] dac960nt Service C:\WINDOWS\system32\svchost.exe [AUTO] DcomLaunch Service C:\WINDOWS\system32\svchost.exe [AUTO] Dhcp Service C:\WINDOWS\system32\DRIVERS\disk.sys [BOOT] Disk Service C:\WINDOWS\System32\dmadmin.exe [MANUAL] dmadmin Service C:\WINDOWS\System32\drivers\dmboot.sys [DISABLED] dmboot Service C:\WINDOWS\System32\drivers\dmio.sys [DISABLED] dmio Service C:\WINDOWS\System32\drivers\dmload.sys [DISABLED] dmload Service C:\WINDOWS\System32\svchost.exe [MANUAL] dmserver Service C:\WINDOWS\system32\drivers\DMusic.sys [MANUAL] DMusic Service C:\WINDOWS\system32\svchost.exe [AUTO] Dnscache Service [DISABLED] dpti2o Service C:\WINDOWS\system32\drivers\drmkaud.sys [MANUAL] drmkaud Service C:\WINDOWS\System32\svchost.exe [AUTO] ERSvc Service C:\WINDOWS\system32\services.exe [AUTO] Eventlog Service C:\WINDOWS\system32\svchost.exe [MANUAL] EventSystem Service C:\Program Files\ewido anti-spyware 4.0\guard.sys [SYSTEM] ewido anti-spyware 4.0 driver Service C:\Program Files\ewido anti-spyware 4.0\guard.exe [AUTO] ewido anti-spyware 4.0 guard Service C:\Program Files\F-Secure Internet Security\Anti-Virus\Win2K\FSfilter.sys [AUTO] F-Secure Filter Service C:\Program Files\F-Secure Internet Security\Anti-Virus\Win2K\FSgk.sys [AUTO] F-Secure Gatekeeper Service C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe [AUTO] F-Secure Gatekeeper Handler Starter Service C:\Program Files\F-Secure Internet Security\Anti-Virus\Win2K\FSrec.sys [AUTO] F-Secure Recognizer Service [DISABLED] Fastfat Service C:\WINDOWS\System32\svchost.exe [MANUAL] FastUserSwitchingCompatibility Service C:\WINDOWS\system32\DRIVERS\fdc.sys [MANUAL] Fdc Service [SYSTEM] Fips Service C:\WINDOWS\system32\DRIVERS\flpydisk.sys [MANUAL] Flpydisk Service C:\WINDOWS\system32\DRIVERS\fltMgr.sys [BOOT] FltMgr Service C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe [AUTO] fsbwsys Service C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe [MANUAL] FSDFWD Service C:\WINDOWS\System32\drivers\fsdfw.sys [BOOT] FSFW Service C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE [AUTO] FSMA Service [SYSTEM] Fs_Rec Service C:\WINDOWS\system32\DRIVERS\ftdisk.sys [BOOT] Ftdisk Service C:\WINDOWS\System32\DRIVERS\gmer.sys [MANUAL] gmer Service C:\WINDOWS\system32\DRIVERS\msgpc.sys [MANUAL] Gpc Service C:\WINDOWS\system32\DRIVERS\hamachi.sys [MANUAL] hamachi Service C:\WINDOWS\System32\svchost.exe [AUTO] helpsvc Service C:\WINDOWS\System32\svchost.exe [DISABLED] HidServ Service [DISABLED] hpn Service C:\WINDOWS\System32\Drivers\HTTP.sys [MANUAL] HTTP Service C:\WINDOWS\System32\svchost.exe [MANUAL] HTTPFilter Service [SYSTEM] i2omgmt Service [DISABLED] i2omp Service C:\WINDOWS\system32\DRIVERS\i8042prt.sys [SYSTEM] i8042prt Service C:\WINDOWS\system32\DRIVERS\imapi.sys [SYSTEM] Imapi Service C:\WINDOWS\system32\imapi.exe [MANUAL] ImapiService Service inetaccs Service [DISABLED] ini910u Service Inport Service [DISABLED] IntelIde Service C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys [MANUAL] Ip6Fw Service C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys [MANUAL] IpFilterDriver Service C:\WINDOWS\system32\DRIVERS\ipinip.sys [MANUAL] IpInIp Service C:\WINDOWS\system32\DRIVERS\ipnat.sys [MANUAL] IpNat Service C:\WINDOWS\system32\DRIVERS\ipsec.sys [SYSTEM] IPSec Service C:\WINDOWS\system32\DRIVERS\irenum.sys [MANUAL] IRENUM Service ISAPISearch Service C:\WINDOWS\system32\DRIVERS\isapnp.sys [BOOT] isapnp Service C:\WINDOWS\system32\DRIVERS\kbdclass.sys [SYSTEM] Kbdclass Service C:\WINDOWS\system32\drivers\kmixer.sys [MANUAL] kmixer Service [BOOT] KSecDD Service C:\WINDOWS\system32\svchost.exe [AUTO] lanmanserver Service C:\WINDOWS\system32\svchost.exe [AUTO] lanmanworkstation Service [SYSTEM] lbrtfdc Service ldap Service LicenseService Service C:\Program Files\Common Files\LightScribe\LSSrvc.exe [AUTO] LightScribeService Service C:\WINDOWS\system32\svchost.exe [AUTO] LmHosts Service C:\WINDOWS\system32\svchost.exe [DISABLED] Messenger Service [SYSTEM] mnmdd Service C:\WINDOWS\system32\mnmsrvc.exe [MANUAL] mnmsrvc Service [MANUAL] Modem Service C:\WINDOWS\system32\DRIVERS\mouclass.sys [SYSTEM] Mouclass Service [BOOT] MountMgr Service [DISABLED] mraid35x Service C:\WINDOWS\system32\DRIVERS\mrxdav.sys [MANUAL] MRxDAV Service C:\WINDOWS\system32\DRIVERS\mrxsmb.sys [SYSTEM] MRxSmb Service C:\WINDOWS\system32\msdtc.exe [MANUAL] MSDTC Service [SYSTEM] Msfs Service C:\WINDOWS\system32\msiexec.exe [MANUAL] MSIServer Service C:\WINDOWS\system32\drivers\MSKSSRV.sys [MANUAL] MSKSSRV Service C:\WINDOWS\system32\drivers\MSPCLOCK.sys [MANUAL] MSPCLOCK Service C:\WINDOWS\system32\drivers\MSPQM.sys [MANUAL] MSPQM Service C:\WINDOWS\system32\DRIVERS\mssmbios.sys [MANUAL] mssmbios Service [BOOT] Mup Service [BOOT] NDIS Service C:\WINDOWS\system32\DRIVERS\ndistapi.sys [MANUAL] NdisTapi Service C:\WINDOWS\system32\DRIVERS\ndisuio.sys [MANUAL] Ndisuio Service C:\WINDOWS\system32\DRIVERS\ndiswan.sys [MANUAL] NdisWan Service [MANUAL] NDProxy Service C:\WINDOWS\system32\DRIVERS\netbios.sys [SYSTEM] NetBIOS Service C:\WINDOWS\system32\DRIVERS\netbt.sys [MANUAL] NetBT Service C:\WINDOWS\system32\netdde.exe [DISABLED] NetDDE Service C:\WINDOWS\system32\netdde.exe [DISABLED] NetDDEdsdm Service C:\WINDOWS\system32\lsass.exe [MANUAL] Netlogon Service C:\WINDOWS\System32\svchost.exe [MANUAL] Netman Service C:\WINDOWS\system32\svchost.exe [MANUAL] Nla Service [SYSTEM] Npfs Service [DISABLED] Ntfs Service C:\WINDOWS\system32\lsass.exe [MANUAL] NtLmSsp Service C:\WINDOWS\system32\svchost.exe [MANUAL] NtmsSvc Service [SYSTEM] Null Service C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys [MANUAL] NwlnkFlt Service C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys [MANUAL] NwlnkFwd Service C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [MANUAL] ose Service C:\WINDOWS\system32\DRIVERS\parport.sys [MANUAL] Parport Service [BOOT] PartMgr Service [AUTO] ParVdm Service C:\WINDOWS\system32\DRIVERS\pci.sys [BOOT] PCI Service [SYSTEM] PCIDump Service C:\WINDOWS\system32\DRIVERS\pciide.sys [BOOT] PCIIde Service [DISABLED] Pcmcia Service [MANUAL] PDCOMP Service [MANUAL] PDFRAME Service [MANUAL] PDRELI Service [MANUAL] PDRFRAME Service [DISABLED] perc2 Service [DISABLED] perc2hib Service PerfDisk Service PerfNet Service PerfOS Service PerfProc Service C:\WINDOWS\system32\services.exe [AUTO] PlugPlay Service C:\WINDOWS\system32\PnkBstrA.exe [AUTO] PnkBstrA Service C:\WINDOWS\system32\PnkBstrB.exe [MANUAL] PnkBstrB Service C:\WINDOWS\system32\drivers\PnkBstrK.sys [MANUAL] PnkBstrK Service C:\WINDOWS\system32\lsass.exe [AUTO] PolicyAgent Service C:\WINDOWS\system32\DRIVERS\raspptp.sys [MANUAL] PptpMiniport Service C:\WINDOWS\system32\lsass.exe [AUTO] ProtectedStorage Service C:\WINDOWS\system32\DRIVERS\psched.sys [MANUAL] PSched Service C:\WINDOWS\system32\DRIVERS\ptilink.sys [MANUAL] Ptilink Service C:\WINDOWS\System32\Drivers\PxHelp20.sys [BOOT] PxHelp20 Service [DISABLED] ql1080 Service [DISABLED] Ql10wnt Service [DISABLED] ql12160 Service [DISABLED] ql1240 Service [DISABLED] ql1280 Service C:\WINDOWS\system32\DRIVERS\rasacd.sys [SYSTEM] RasAcd Service C:\WINDOWS\system32\svchost.exe [MANUAL] RasAuto Service C:\WINDOWS\system32\DRIVERS\rasl2tp.sys [MANUAL] Rasl2tp Service C:\WINDOWS\system32\svchost.exe [MANUAL] RasMan Service C:\WINDOWS\system32\DRIVERS\raspppoe.sys [MANUAL] RasPppoe Service C:\WINDOWS\system32\DRIVERS\raspti.sys [MANUAL] Raspti Service C:\WINDOWS\system32\DRIVERS\rdbss.sys [SYSTEM] Rdbss Service C:\WINDOWS\System32\DRIVERS\RDPCDD.sys [SYSTEM] RDPCDD Service RDPDD Service RDPNP Service [MANUAL] RDPWD Service C:\WINDOWS\system32\sessmgr.exe [MANUAL] RDSessMgr Service C:\WINDOWS\system32\DRIVERS\redbook.sys [SYSTEM] redbook Service C:\WINDOWS\system32\svchost.exe [DISABLED] RemoteAccess Service C:\WINDOWS\system32\locator.exe [MANUAL] RpcLocator Service C:\WINDOWS\system32\svchost.exe [AUTO] RpcSs Service C:\WINDOWS\system32\rsvp.exe [MANUAL] RSVP Service C:\WINDOWS\system32\lsass.exe [AUTO] SamSs Service C:\WINDOWS\System32\SCardSvr.exe [MANUAL] SCardSvr Service C:\WINDOWS\System32\svchost.exe [AUTO] Schedule Service C:\WINDOWS\system32\DRIVERS\secdrv.sys [MANUAL] Secdrv Service C:\WINDOWS\System32\svchost.exe [AUTO] seclogon Service C:\WINDOWS\system32\svchost.exe [AUTO] SENS Service C:\WINDOWS\system32\DRIVERS\serenum.sys [MANUAL] serenum Service C:\WINDOWS\system32\DRIVERS\serial.sys [SYSTEM] Serial Service [SYSTEM] Sfloppy Service C:\WINDOWS\system32\svchost.exe [AUTO] SharedAccess Service C:\WINDOWS\System32\svchost.exe [AUTO] ShellHWDetection Service [DISABLED] Simbad Service C:\WINDOWS\system32\DRIVERS\sisnic.sys [MANUAL] SISNIC Service C:\Program Files\Sygate\SPF\smc.exe [AUTO] SmcService Service [DISABLED] Sparrow Service C:\WINDOWS\system32\drivers\splitter.sys [MANUAL] splitter Service C:\WINDOWS\system32\spoolsv.exe [AUTO] Spooler Service C:\WINDOWS\system32\DRIVERS\sr.sys [DISABLED] sr Service C:\WINDOWS\system32\svchost.exe [AUTO] srservice Service C:\WINDOWS\system32\DRIVERS\srv.sys [MANUAL] Srv Service C:\WINDOWS\system32\svchost.exe [MANUAL] SSDPSRV Service C:\WINDOWS\system32\svchost.exe [AUTO] stisvc Service C:\WINDOWS\system32\DRIVERS\swenum.sys [MANUAL] swenum Service C:\WINDOWS\system32\drivers\swmidi.sys [MANUAL] swmidi Service C:\WINDOWS\system32\dllhost.exe [MANUAL] SwPrv Service [DISABLED] symc810 Service [DISABLED] symc8xx Service [DISABLED] sym_hi Service [DISABLED] sym_u3 Service C:\WINDOWS\system32\drivers\sysaudio.sys [MANUAL] sysaudio Service C:\WINDOWS\system32\smlogsvc.exe [MANUAL] SysmonLog Service C:\WINDOWS\System32\svchost.exe [MANUAL] TapiSrv Service C:\WINDOWS\system32\DRIVERS\tcpip.sys [SYSTEM] Tcpip Service [MANUAL] TDPIPE Service [MANUAL] TDTCP Service C:\WINDOWS\SYSTEM32\Drivers\Teefer.sys [BOOT] Teefer Service C:\WINDOWS\system32\DRIVERS\termdd.sys [SYSTEM] TermDD Service C:\WINDOWS\System32\svchost.exe [MANUAL] TermService Service C:\WINDOWS\System32\svchost.exe [AUTO] Themes Service [DISABLED] TosIde Service C:\WINDOWS\system32\svchost.exe [AUTO] TrkWks Service TSDDD Service C:\WINDOWS\system32\DRIVERS\uagp35.sys [BOOT] uagp35 Service [DISABLED] Udfs Service [DISABLED] ultra Service C:\WINDOWS\system32\wdfmgr.exe [AUTO] UMWdf Service C:\WINDOWS\system32\DRIVERS\update.sys [MANUAL] Update Service C:\WINDOWS\system32\svchost.exe [MANUAL] upnphost Service C:\WINDOWS\System32\ups.exe [MANUAL] UPS Service C:\WINDOWS\system32\DRIVERS\usbehci.sys [MANUAL] usbehci Service C:\WINDOWS\system32\DRIVERS\usbhub.sys [MANUAL] usbhub Service C:\WINDOWS\system32\DRIVERS\usbohci.sys [MANUAL] usbohci Service C:\WINDOWS\system32\DRIVERS\usbprint.sys [MANUAL] usbprint Service C:\WINDOWS\system32\DRIVERS\usbscan.sys [MANUAL] usbscan Service C:\WINDOWS\System32\drivers\vga.sys [SYSTEM] VgaSave Service [DISABLED] ViaIde Service [BOOT] VolSnap Service [DISABLED] vsdatant Service C:\WINDOWS\System32\vssvc.exe [MANUAL] VSS Service C:\Program [AUTO] VSSERV Service C:\WINDOWS\System32\svchost.exe [AUTO] W32Time Service W3SVC Service C:\WINDOWS\system32\DRIVERS\wanarp.sys [MANUAL] Wanarp Service [MANUAL] WDICA Service C:\WINDOWS\system32\drivers\wdmaud.sys [MANUAL] wdmaud Service C:\WINDOWS\system32\svchost.exe [AUTO] WebClient Service C:\WINDOWS\SYSTEM32\Drivers\wg3n.sys [AUTO] wg3n Service C:\WINDOWS\SYSTEM32\Drivers\wg4n.sys [AUTO] wg4n Service C:\WINDOWS\SYSTEM32\Drivers\wg5n.sys [AUTO] wg5n Service C:\WINDOWS\SYSTEM32\Drivers\wg6n.sys [AUTO] wg6n Service C:\WINDOWS\system32\svchost.exe [AUTO] winmgmt Service [MANUAL] Winsock Service WinSock2 Service WinTrust Service C:\WINDOWS\System32\svchost.exe [MANUAL] WmdmPmSN Service WmiApRpl Service C:\WINDOWS\system32\wbem\wmiapsrv.exe [MANUAL] WmiApSrv Service C:\WINDOWS\system32\drivers\wpsdrvnt.sys [SYSTEM] wpsdrvnt Service [SYSTEM] WS2IFSL Service C:\WINDOWS\System32\svchost.exe [AUTO] wscsvc Service C:\WINDOWS\system32\svchost.exe [AUTO] wuauserv Service C:\WINDOWS\System32\svchost.exe [AUTO] WZCSVC Service C:\WINDOWS\System32\svchost.exe [MANUAL] xmlprov Service {06E6A357-5CA4-4DE2-A137-6ABD34937548} Service {735FC036-7518-48D3-AF84-A7E9E7D71E98} ---- EOF - GMER 1.0.12 ----

Kod: Zaznacz wszystko: GMER 1.0.12.12086 - http://www.gmer.net Rootkit scan 2007-04-03 20:29:15 Windows 5.1.2600 Dodatek Service Pack 2 ---- System - GMER 1.0.12 ---- SSDT \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys ZwAllocateVirtualMemory SSDT \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys ZwCreateThread SSDT \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys ZwMapViewOfSection SSDT \??\C:\Program Files\ewido anti-spyware 4.0\guard.sys ZwOpenProcess SSDT \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys ZwProtectVirtualMemory SSDT \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys ZwShutdownSystem SSDT \??\C:\Program Files\ewido anti-spyware 4.0\guard.sys ZwTerminateProcess SSDT \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys ZwWriteVirtualMemory Code \WINDOWS\System32\drivers\fsndis5.sys IoCreateDevice ---- Kernel code sections - GMER 1.0.12 ---- PAGE ntoskrnl.exe!IoCreateDevice 8059F4A5 5 Bytes JMP F788FFD0 \WINDOWS\System32\drivers\fsndis5.sys .text tcpip.sys!IPTransmit + 10BC B2D35CFA 6 Bytes CALL F767FE50 Teefer.sys .text tcpip.sys!IPTransmit + 2810 B2D3744E 6 Bytes CALL F767FE50 Teefer.sys .text tcpip.sys!ARPRcv + 506D B2D3C4E0 6 Bytes CALL F767FE50 Teefer.sys .text wanarp.sys F79C43FD 4 Bytes CALL F767FFA0 Teefer.sys .text wanarp.sys F79C4402 2 Bytes [ 90, 90 ] ---- Devices - GMER 1.0.12 ---- Device \Driver\Tcpip \Device\Ip IRP_MJ_CREATE [F7990220] wpsdrvnt.sys Device \Driver\Tcpip \Device\Ip IRP_MJ_CLOSE [F7990480] wpsdrvnt.sys Device \Driver\Tcpip \Device\Ip IRP_MJ_DEVICE_CONTROL [F79905A0] wpsdrvnt.sys Device \Driver\Tcpip \Device\Ip IRP_MJ_INTERNAL_DEVICE_CONTROL [F79905D0] wpsdrvnt.sys Device \Driver\Tcpip \Device\Tcp IRP_MJ_CREATE [F7990220] wpsdrvnt.sys Device \Driver\Tcpip \Device\Tcp IRP_MJ_CLOSE [F7990480] wpsdrvnt.sys Device \Driver\Tcpip \Device\Tcp IRP_MJ_DEVICE_CONTROL [F79905A0] wpsdrvnt.sys Device \Driver\Tcpip \Device\Tcp IRP_MJ_INTERNAL_DEVICE_CONTROL [F79905D0] wpsdrvnt.sys Device \Driver\Tcpip \Device\Udp IRP_MJ_CREATE [F7990220] wpsdrvnt.sys Device \Driver\Tcpip \Device\Udp IRP_MJ_CLOSE [F7990480] wpsdrvnt.sys Device \Driver\Tcpip \Device\Udp IRP_MJ_DEVICE_CONTROL [F79905A0] wpsdrvnt.sys Device \Driver\Tcpip \Device\Udp IRP_MJ_INTERNAL_DEVICE_CONTROL [F79905D0] wpsdrvnt.sys Device \Driver\Tcpip \Device\RawIp IRP_MJ_CREATE [F7990220] wpsdrvnt.sys Device \Driver\Tcpip \Device\RawIp IRP_MJ_CLOSE [F7990480] wpsdrvnt.sys Device \Driver\Tcpip \Device\RawIp IRP_MJ_DEVICE_CONTROL [F79905A0] wpsdrvnt.sys Device \Driver\Tcpip \Device\RawIp IRP_MJ_INTERNAL_DEVICE_CONTROL [F79905D0] wpsdrvnt.sys Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CREATE [F7990220] wpsdrvnt.sys Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CLOSE [F7990480] wpsdrvnt.sys Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_DEVICE_CONTROL [F79905A0] wpsdrvnt.sys Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_INTERNAL_DEVICE_CONTROL [F79905D0] wpsdrvnt.sys ---- EOF - GMER 1.0.12 ----

**Posty:** 18165 · przez **wojtas** 03 Kwi 2007, 20:44

czysto

proszę o powtórne sprawdzanie loga

Kto jest na forum