Logfile of HijackThis v1.99.1
Scan saved at 14:28:06, on 2007-04-25
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Eset\nod32kui.exe
C:\PROGRA~1\NEOSTR~1\CnxMon.exe
C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
C:\Program Files\D-Tools\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\supervisor.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Microsoft Office\Office\1045\msoffice.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Mateusz\Pulpit\comboscan.exe
C:\DOCUME~1\Mateusz\Pulpit\Mateusz.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TP
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1557B435-8242-4686-9AA3-9265BF7525A4} - (no file)
O2 - BHO: (no name) - {99513F11-0750-45DB-8E2E-6C5FC0963561} - C:\WINDOWS\system32\geebx.dll
O2 - BHO: (no name) - {9E93A147-E3F9-47AB-BAF0-915CCAAA7034} - C:\WINDOWS\system32\cbxyabc.dll
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [WooCnxMon] c:\PROGRA~1\NEOSTR~1\CnxMon.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1045 -lock
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [supervisor.exe] C:\WINDOWS\supervisor.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Blokuj wszystkie obrazy z tego serwera - C:\Program Files\Avant Browser\AddAllToADBlackList.htm
O8 - Extra context menu item: Dodaj do listy blokowanych reklam - C:\Program Files\Avant Browser\AddToADBlackList.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: Otwórz w nowym Avant Browser - C:\Program Files\Avant Browser\OpenInNewBrowser.htm
O8 - Extra context menu item: Otwórz wszystkie adresy z tej strony... - C:\Program Files\Avant Browser\OpenAllLinks.htm
O8 - Extra context menu item: Podświetl - C:\Program Files\Avant Browser\Highlight.htm
O8 - Extra context menu item: Szukaj - C:\Program Files\Avant Browser\Search.htm
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O17 - HKLM\System\CS2\Services\Tcpip\..\{12137B10-9DF8-4061-8A1B-E6D1C730FE80}: NameServer = 194.204.152.34 217.98.63.164
O20 - Winlogon Notify: cbxyabc - C:\WINDOWS\SYSTEM32\cbxyabc.dll
O20 - Winlogon Notify: geebx - C:\WINDOWS\system32\geebx.dll
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
Comboscana
ComboScan v20070306.20 run by Mateusz on 2007-04-25 at 14:27:55
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- HijackThis (run as Mateusz.exe) ---------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 14:28:06, on 2007-04-25
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Eset\nod32kui.exe
C:\PROGRA~1\NEOSTR~1\CnxMon.exe
C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
C:\Program Files\D-Tools\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\supervisor.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Microsoft Office\Office\1045\msoffice.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Mateusz\Pulpit\comboscan.exe
C:\DOCUME~1\Mateusz\Pulpit\Mateusz.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TP
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1557B435-8242-4686-9AA3-9265BF7525A4} - (no file)
O2 - BHO: (no name) - {99513F11-0750-45DB-8E2E-6C5FC0963561} - C:\WINDOWS\system32\geebx.dll
O2 - BHO: (no name) - {9E93A147-E3F9-47AB-BAF0-915CCAAA7034} - C:\WINDOWS\system32\cbxyabc.dll
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [WooCnxMon] c:\PROGRA~1\NEOSTR~1\CnxMon.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1045 -lock
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [supervisor.exe] C:\WINDOWS\supervisor.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Blokuj wszystkie obrazy z tego serwera - C:\Program Files\Avant Browser\AddAllToADBlackList.htm
O8 - Extra context menu item: Dodaj do listy blokowanych reklam - C:\Program Files\Avant Browser\AddToADBlackList.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: Otwórz w nowym Avant Browser - C:\Program Files\Avant Browser\OpenInNewBrowser.htm
O8 - Extra context menu item: Otwórz wszystkie adresy z tej strony... - C:\Program Files\Avant Browser\OpenAllLinks.htm
O8 - Extra context menu item: Podświetl - C:\Program Files\Avant Browser\Highlight.htm
O8 - Extra context menu item: Szukaj - C:\Program Files\Avant Browser\Search.htm
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O17 - HKLM\System\CS2\Services\Tcpip\..\{12137B10-9DF8-4061-8A1B-E6D1C730FE80}: NameServer = 194.204.152.34 217.98.63.164
O20 - Winlogon Notify: cbxyabc - C:\WINDOWS\SYSTEM32\cbxyabc.dll
O20 - Winlogon Notify: geebx - C:\WINDOWS\system32\geebx.dll
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
-- Files created between 2007-03-25 and 2007-04-25 -----------------------------
2007-04-24 19:06:00 473227 ---hs---- C:\WINDOWS\system32\xbeeg.bak1<XBEEG~1.BAK>
2007-04-24 19:05:36 281172 ---hs---- C:\WINDOWS\system32\geebx.dll
2007-04-24 18:24:44 26678 --a------ C:\WINDOWS\system32\hggffcy.dll
2007-04-24 18:24:04 26678 --a------ C:\WINDOWS\system32\ddcccyy.dll
2007-04-24 18:22:42 26678 --a------ C:\WINDOWS\system32\mljjigf.dll
2007-04-24 18:21:27 26678 --a------ C:\WINDOWS\system32\cbxyabc.dll
2007-04-24 18:19:03 0 d-------- C:\Program Files\Sunbelt Software<SUNBEL~1>
2007-04-23 21:09:39 0 d-------- C:\Program Files\CodeStuff<CODEST~1>
2007-04-23 14:07:17 0 d-------- C:\Program Files\ATS2
2007-04-21 22:28:09 493590 ---hs---- C:\WINDOWS\system32\hjjlm.ini2<HJJLM~1.INI>
2007-04-18 12:21:11 0 d-------- C:\Program Files\MSXML 4.0<MSXML4~1.0>
2007-04-17 21:17:34 474321 ---hs---- C:\WINDOWS\system32\hjjlm.bak2<HJJLM~2.BAK>
2007-04-15 19:37:46 0 d-------- C:\NERO 7<NERO7~1>
2007-04-15 13:58:51 474140 ---hs---- C:\WINDOWS\system32\hjjlm.bak1<HJJLM~1.BAK>
2007-04-01 19:36:10 0 d-------- C:\DYSK F<DYSKF~1>
2007-03-31 19:06:24 0 d-------- C:\Program Files\Common Files\NSV
-- Find3M Report ---------------------------------------------------------------
2007-04-25 14:27:26 436322 --a------ C:\WINDOWS\system32\perfh015.dat
2007-04-25 14:27:26 67298 --a------ C:\WINDOWS\system32\perfc015.dat
2007-04-25 14:13:20 0 d-------- C:\Program Files\eMule
2007-04-24 20:18:00 0 d-------- C:\Program Files\a-squared Free<A-SQUA~1>
2007-04-24 16:18:39 0 d-------- C:\Program Files\DAP
2007-04-21 23:25:44 0 d-------- C:\Program Files\Winamp
2007-04-21 23:25:34 0 d---s---- C:\Documents and Settings\Mateusz\Dane aplikacji\Microsoft<MICROS~1>
2007-04-21 23:25:32 0 d-------- C:\Program Files\HDD Regenerator<HDDREG~1>
2007-04-15 23:29:02 0 d-------- C:\Program Files\RegCleaner<REGCLE~1>
2007-04-15 17:26:52 0 d-------- C:\Documents and Settings\Mateusz\Dane aplikacji\Ahead
2007-04-15 17:25:45 0 d-------- C:\Program Files\Common Files\Ahead
2007-04-08 08:15:55 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1>
2007-03-17 20:54:17 1028 --a------ C:\WINDOWS\unins001.dat
2007-03-17 15:45:36 293376 --a------ C:\WINDOWS\system32\winsrv.dll
2007-03-13 20:56:16 33634 --a------ C:\WINDOWS\DIIUnin.dat
2007-03-13 20:52:03 2829 --a------ C:\WINDOWS\DIIUnin.pif
2007-03-13 20:52:03 106496 --a------ C:\WINDOWS\DIIUnin.exe
2007-03-12 22:28:04 0 d-------- C:\Documents and Settings\Mateusz\Dane aplikacji\AdobeUM
2007-03-12 20:40:33 0 d-------- C:\Documents and Settings\Mateusz\Dane aplikacji\Real
2007-03-12 20:39:58 0 d-------- C:\Program Files\Real Alternative<REALAL~1>
2007-03-12 20:39:54 0 d-------- C:\Program Files\Media Player Classic<MEDIAP~1>
2007-03-12 13:51:08 972336 --a------ C:\WINDOWS\UNNeroMediaHome.exe<UNNERO~4.EXE>
2007-03-11 23:06:03 0 d-------- C:\Program Files\Borland
2007-03-11 23:06:02 0 d-------- C:\Program Files\Cartall
2007-03-11 22:47:49 0 d-------- C:\Program Files\D-Tools
2007-03-11 21:56:07 0 d-------- C:\Program Files\CDex_151
2007-03-11 21:39:52 0 d-------- C:\Program Files\PITy
2007-03-11 21:39:22 0 d-------- C:\Program Files\Słownik<SOWNIK~1>
2007-03-11 21:38:10 0 d-------- C:\Documents and Settings\Mateusz\Dane aplikacji\Tlen.pl
2007-03-11 21:38:06 0 d-------- C:\Program Files\Tlen.pl
2007-03-11 19:33:59 0 d-------- C:\Program Files\Avant Browser<AVANTB~1>
2007-03-11 19:14:26 0 d-------- C:\Documents and Settings\Mateusz\Dane aplikacji\Avant Profiles<AVANTP~1>
2007-03-11 19:02:28 0 d-------- C:\Documents and Settings\Mateusz\Dane aplikacji\Macromedia<MACROM~1>
2007-03-11 18:46:06 0 d-------- C:\Program Files\Lavasoft
2007-03-11 18:44:40 0 d-------- C:\Documents and Settings\Mateusz\Dane aplikacji\Lavasoft
2007-03-11 15:23:25 0 d-------- C:\Program Files\Messenger<MESSEN~1>
2007-03-11 11:40:39 0 d-------- C:\Program Files\Neostrada TP<NEOSTR~1>
2007-03-11 11:38:52 0 d-------- C:\Documents and Settings\Mateusz\Dane aplikacji\Adobe
2007-03-10 20:47:52 0 d-------- C:\Program Files\Common Files\InstallShield<INSTAL~1>
2007-03-10 19:29:23 0 d-------- C:\Documents and Settings\Mateusz\Dane aplikacji\Media Player Classic<MEDIAP~1>
2007-03-10 18:52:03 0 d-------- C:\Program Files\QuickTime<QUICKT~1>
2007-03-10 18:52:02 0 d-------- C:\Program Files\Xilisoft
2007-03-10 00:25:05 0 d-------- C:\Program Files\Common Files\Real
2007-03-09 13:24:29 0 d-------- C:\Program Files\Java Web Start<JAVAWE~1>
2007-03-09 12:37:12 50688 --a------ C:\WINDOWS\system32\wbhelp2.dll
2007-03-09 12:31:48 0 d-------- C:\Program Files\Nero
2007-03-09 11:49:36 0 d-------- C:\Program Files\Przegladarka migawek<PRZEGL~1>
2007-03-09 11:44:39 0 d-------- C:\Documents and Settings\Mateusz\Dane aplikacji\Microsoft Web Folders<MICROS~2>
2007-03-09 11:41:01 0 d--h----- C:\Program Files\WindowsUpdate<WINDOW~2>
2007-03-09 11:35:04 298104 --a------ C:\WINDOWS\system32\imon.dll
2007-03-09 11:28:25 0 d-------- C:\Program Files\Movie Maker<MOVIEM~1>
2007-03-09 11:25:45 0 d-------- C:\Program Files\Windows NT<WINDOW~1>
2007-03-09 11:16:32 0 d-------- C:\Program Files\Hewlett-Packard<HEWLET~1>
2007-03-09 11:16:20 0 d-------- C:\Program Files\hp deskjet 3320 series<HPDESK~1>
2007-03-09 10:45:05 0 d-------- C:\Program Files\aod
2007-03-09 10:35:13 0 d-------- C:\Documents and Settings\Mateusz\Dane aplikacji\Help
2007-03-09 10:29:30 0 d-------- C:\Program Files\Thomson
2007-03-09 10:28:54 0 d-------- C:\Program Files\Java
2007-03-09 10:12:55 0 d-------- C:\Program Files\K-Lite Codec Pack<K-LITE~1>
2007-03-09 10:08:20 984 --a------ C:\WINDOWS\unins000.dat
2007-03-09 10:00:49 0 d-------- C:\Program Files\Common Files\Adobe
2007-03-09 09:57:53 0 d-------- C:\Program Files\SiSLan
2007-03-09 09:56:56 0 d-------- C:\Program Files\Analog Devices<ANALOG~1>
2007-03-09 09:56:55 44 --a------ C:\WINDOWS\system32\msssc.dll
2007-03-09 01:09:52 0 d-------- C:\Documents and Settings\Mateusz\Dane aplikacji\Identities<IDENTI~1>
2007-03-09 01:04:57 0 d-------- C:\Program Files\microsoft frontpage<MICROS~1>
2007-03-09 01:04:36 0 -rahs---- C:\MSDOS.SYS
2007-03-09 01:04:36 0 -rahs---- C:\IO.SYS
2007-03-09 01:04:36 0 --a------ C:\CONFIG.SYS
2007-03-09 01:04:36 0 --a------ C:\AUTOEXEC.BAT
2007-03-09 01:03:21 0 d-------- C:\Program Files\Usługi online<USUGIO~1>
2007-03-09 01:02:15 0 d-------- C:\Program Files\Common Files\MSSoap
2007-03-09 01:01:35 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat<EMPTYR~1.DAT>
2007-03-09 01:01:04 0 d-------- C:\Program Files\MSN Gaming Zone<MSNGAM~1>
2007-03-09 00:54:25 0 d-------- C:\Program Files\Common Files\ODBC
2007-03-09 00:54:22 0 d-------- C:\Program Files\Common Files\SpeechEngines<SPEECH~1>
2007-03-09 00:54:01 62 --ahs---- C:\Documents and Settings\Mateusz\Dane aplikacji\desktop.ini
2007-03-08 17:38:47 579072 --a------ C:\WINDOWS\system32\user32.dll
2007-03-08 17:38:47 40960 --a------ C:\WINDOWS\system32\mf3216.dll
2007-03-08 17:38:47 281600 --a------ C:\WINDOWS\system32\gdi32.dll
2007-03-08 17:37:33 1843840 --a------ C:\WINDOWS\system32\win32k.sys
2007-02-28 20:53:50 972336 --a------ C:\WINDOWS\UNNeroVision.exe<UNNERO~1.EXE>
2007-02-28 15:41:02 972336 --a------ C:\WINDOWS\UNNeroShowTime.exe<UNNERO~3.EXE>
2007-02-05 22:19:48 185856 --a------ C:\WINDOWS\system32\upnphost.dll
2007-01-29 10:58:06 60416 -----n--- C:\WINDOWS\system32\tzchange.exe
-- Registry Dump ---------------------------------------------------------------
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
"supervisor.exe"="C:\\WINDOWS\\supervisor.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"Smapp"="C:\\Program Files\\Analog Devices\\SoundMAX\\SMTray.exe"
"nwiz"="nwiz.exe /install"
"SpeedTouch USB Diagnostics"="\"C:\\Program Files\\Thomson\\SpeedTouch USB\\Dragdiag.exe\" /icon"
"HPDJ Taskbar Utility"="C:\\WINDOWS\\System32\\spool\\drivers\\w32x86\\3\\hpztsb07.exe"
"nod32kui"="\"C:\\Program Files\\Eset\\nod32kui.exe\" /WAITSERVICE"
"WooCnxMon"="c:\\PROGRA~1\\NEOSTR~1\\CnxMon.exe"
"WOOWATCH"="C:\\PROGRA~1\\NEOSTR~1\\Watch.exe"
"WOOTASKBARICON"="C:\\PROGRA~1\\NEOSTR~1\\TaskbarIcon.exe"
"DAEMON Tools-1033"="\"C:\\Program Files\\D-Tools\\daemon.exe\" -lang 1045 -lock"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"NoChange"="1"
"Installed"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{6148028B-D532-4417-8C0B-5A4A0B745393}"=""
"{9E93A147-E3F9-47AB-BAF0-915CCAAA7034}"=""
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cbxyabc
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\geebx
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
-- End of ComboScan: finished at 2007-04-25 at 14:30:43 ------------------------
Ewido usunął jakieś trojany, ale po restarcie kompa włączam go od nowa i znowu są te trojany.
Anty-wira mam NOD32
Skanowałem też:
Anti-Trojan Shield
Ad-Aware SE
a-squared Free 2.0
Wykryły różne bródy i je usuneły ale nadal dziwnie się zachowuje komp.
Dzisiaj rano jak próbowałem się połączyć z netem to mi wyświetliło ekran śmierci (cały niebieski) i robiło zrzut pamięci.
