prosze o sprawdzenie loga :(

[mariusz_563]

Miałem problem z trojanem który ujawniał sie procesem cftmon.exe , oraz "Odmową dostepu" do dysków ale mam nadzieje że sobie już poradzilem

Dla pewnosci prosze serdecznie o sprawdzenie loga narazie HijackThis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:55:15, on 2007-10-11
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\PROGRA~1\NEOSTR~1\CnxMon.exe
C:\PROGRA~1\NEOSTR~1\taskbaricon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Screenshot Utility\ScreenshotUtility.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\PROGRA~1\NEOSTR~1\NeostradaTP.exe
C:\PROGRA~1\NEOSTR~1\ComComp.exe
C:\PROGRA~1\NEOSTR~1\Watch.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
D:\Tibia\Tibia.exe
C:\Program Files\TibiaBot NG\loader.exe
C:\Program Files\TibiaBot NG\loader.exe
C:\Documents and Settings\Mariusz\Pulpit\hijackthis.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0 CE\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: Mario Forever Toolbar Helper - {8036D4D7-AAD3-4793-AB49-329E437155A8} - C:\Program Files\Mario Forever Toolbar\v2.0.0.3\Mario_Forever_Toolbar.dll
O2 - BHO: IECatcher Class - {B930BA63-9E5A-11D3-A288-0000E80E2EDE} - F:\MASSDO~1\MDHELPER.DLL
O3 - Toolbar: Mario Forever Toolbar - {463DF6D5-BEC1-4d67-B217-59DB692DFC53} - C:\Program Files\Mario Forever Toolbar\v2.0.0.3\Mario_Forever_Toolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\taskbaricon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [WinMem] C:\Program Files\WinCleaner Memory Optimizer\WinMemOpt.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Screenshot Utility.lnk = C:\Program Files\Screenshot Utility\ScreenshotUtility.exe
O4 - Startup: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Pobierz &Wszystko używając Mass Downloader'a - F:\Mass Downloader\Add_All.htm
O8 - Extra context menu item: Pobierz używając &Mass Downloader'a - F:\Mass Downloader\Add_Url.htm
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - F:\Mass Downloader\massdown.exe
O9 - Extra 'Tools' menuitem: &Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - F:\Mass Downloader\massdown.exe
O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O17 - HKLM\System\CCS\Services\Tcpip\..\{23AFE6BF-97E4-444F-A7A1-99D9B3E8BD80}: NameServer = 194.204.159.1 217.98.63.164
O17 - HKLM\System\CS1\Services\Tcpip\..\{23AFE6BF-97E4-444F-A7A1-99D9B3E8BD80}: NameServer = 194.204.159.1 217.98.63.164
O17 - HKLM\System\CS2\Services\Tcpip\..\{23AFE6BF-97E4-444F-A7A1-99D9B3E8BD80}: NameServer = 194.204.159.1 217.98.63.164
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

--
End of file - 8514 bytes

[wojtas]

czysto

[mariusz_563]

thx za sprawdzenie iza fatygę

[Dzi@dek]

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

Do usunięcia j/w

Za dużo masz programów w autostarcie - sprawdź i wyłącz:
start-uruchom-msconfig [enter] autostart.

[mariusz_563]

ComboFix 07-10-07.2 - Mariusz 2007-10-13 13:19:37.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1250.1.1045.18.135 [GMT 2:00]
Running from: C:\Documents and Settings\Mariusz\Pulpit\ComboFix.exe
.

((((((((((((((((((((((((( Files Created from 2007-09-13 to 2007-10-13 )))))))))))))))))))))))))))))))
.

2007-10-13 12:54 <DIR> d-------- C:\WINDOWS\pss
2007-10-08 20:06 2,232,320 --a------ C:\Tibia.exe
2007-10-03 14:45 122,880 --a------ C:\WINDOWS\UnGins.exe
2007-10-03 14:45 <DIR> d-------- C:\Program Files\Screenshot Utility
2007-09-24 18:16 7,552 --a--c--- C:\WINDOWS\system32\dllcache\sonypvu1.sys
2007-09-24 18:16 7,552 --a------ C:\WINDOWS\system32\drivers\SONYPVU1.SYS

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-10-13 13:03 --------- d-------- C:\Documents and Settings\Mariusz\Dane aplikacji\Skype
2007-10-13 12:24 --------- d-a------ C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TEMP
2007-10-13 07:00 --------- d-------- C:\Program Files\Neostrada TP
2007-10-10 16:14 --------- d-------- C:\Program Files\RonOTS Client
2007-10-09 18:00 --------- d-------- C:\Program Files\TibiaBot NG
2007-10-09 17:44 103736 --a------ C:\WINDOWS\system32\PnkBstrB.exe
2007-10-08 19:03 --------- d-------- C:\Documents and Settings\Mariusz\Dane aplikacji\Tibia
2007-10-07 18:51 --------- d-------- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Microsoft Help
2007-09-25 19:52 --------- d-------- C:\Documents and Settings\Mariusz\Dane aplikacji\BearShare
2007-09-23 19:44 --------- d-------- C:\Documents and Settings\Mariusz\Dane aplikacji\Image Zone Express
2007-09-10 14:01 --------- d-------- C:\Documents and Settings\Mariusz\Dane aplikacji\uTorrent
2007-09-07 15:54 --------- d-------- C:\Documents and Settings\Mariusz\Dane aplikacji\AdobeAUM
2007-09-06 12:09 801144 --a------ C:\WINDOWS\system32\aswBoot.exe
2007-09-06 12:05 94416 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2007-09-06 12:05 92848 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2007-09-06 12:03 23152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2007-09-06 12:02 42912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2007-09-06 12:00 95608 --a------ C:\WINDOWS\system32\AVASTSS.scr
2007-09-06 12:00 26624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2007-09-02 16:36 --------- d-------- C:\Documents and Settings\Mariusz\Dane aplikacji\Xfire
2007-09-02 16:21 --------- d-------- C:\Program Files\Skype
2007-09-02 16:21 --------- d-------- C:\Program Files\Common Files\Skype
2007-09-02 16:21 --------- d-------- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Skype
2007-09-02 16:13 22328 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
2007-09-02 16:12 --------- d---s---- C:\Program Files\Xfire
2007-08-29 12:36 --------- d-------- C:\Program Files\TibiaCam TV Lite
2007-08-29 10:15 --------- d-------- C:\Program Files\HP
2007-08-27 16:03 --------- d-------- C:\Documents and Settings\Mariusz\Dane aplikacji\HP
2007-08-27 15:59 --------- d-------- C:\Program Files\Common Files\HP
2007-08-27 15:59 --------- d-------- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\HP
2007-08-27 15:57 --------- d-------- C:\Program Files\Hewlett-Packard
2007-08-27 15:56 --------- d-------- C:\Program Files\Common Files\Hewlett-Packard
2007-08-26 20:38 --------- d-------- C:\Program Files\Reality Pump
2007-08-26 12:47 --------- d-------- C:\Program Files\Aladdin
2007-08-26 12:27 --------- d-------- C:\Program Files\Asterix and the Power of The Gods
2007-08-26 12:24 --------- d-------- C:\Program Files\Mega Bomberman
2007-08-24 22:40 --------- d-------- C:\Program Files\TryMedia
2007-08-24 22:40 --------- d-------- C:\Program Files\GameHouse
2007-08-22 00:19 --------- d-------- C:\Program Files\LightBrain
2007-08-21 08:18 683520 --a------ C:\WINDOWS\system32\inetcomm.dll
2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\cdm.dll
2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\wuapi.dll
2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-07-30 19:19 43352 --a------ C:\WINDOWS\system32\wups2.dll
2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\wucltui.dll
2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\wuweb.dll
2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\wups.dll
2007-07-28 21:14 66872 --a------ C:\WINDOWS\system32\PnkBstrA.exe
.

((((((((((((((((((((((((((((( snapshot@2007-10-08_16.53.17.40 )))))))))))))))))))))))))))))))))))))))))
.
----a-w 16,096 2005-10-12 23:21:28 C:\WINDOWS\$hf_mig$\KB933729\spmsg.dll
----a-w 216,288 2005-10-12 23:21:30 C:\WINDOWS\$hf_mig$\KB933729\spuninst.exe
----a-w 582,656 2007-07-09 13:20:23 C:\WINDOWS\$hf_mig$\KB933729\SP2QFE\rpcrt4.dll
----a-w 368,640 2007-06-18 22:24:36 C:\WINDOWS\$hf_mig$\KB933729\SP2QFE\spru0415.dll
----a-w 22,752 2005-10-12 23:21:27 C:\WINDOWS\$hf_mig$\KB933729\update\spcustom.dll
----a-w 723,680 2005-10-12 23:21:34 C:\WINDOWS\$hf_mig$\KB933729\update\update.exe
----a-w 386,784 2005-10-12 23:21:41 C:\WINDOWS\$hf_mig$\KB933729\update\updspapi.dll
----a-w 16,096 2007-03-06 03:28:35 C:\WINDOWS\$hf_mig$\KB939653\spmsg.dll
----a-w 216,288 2007-03-06 03:28:40 C:\WINDOWS\$hf_mig$\KB939653\spuninst.exe
----a-w 1,022,976 2007-08-22 12:58:11 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\browseui.dll
----a-w 151,552 2007-08-22 12:58:11 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\cdfview.dll
----a-w 1,055,744 2007-08-22 12:58:11 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\danim.dll
----a-w 357,888 2007-08-22 12:58:12 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\dxtmsft.dll
----a-w 205,824 2007-08-22 12:58:12 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\dxtrans.dll
----a-w 55,808 2007-08-22 12:58:12 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\extmgr.dll
----a-w 18,432 2007-08-21 10:19:39 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\iedw.exe
----a-w 251,904 2007-08-22 12:58:12 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\iepeers.dll
----a-w 96,768 2007-08-22 12:58:12 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\inseng.dll
----a-w 16,384 2007-08-22 12:58:12 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\jsproxy.dll
----a-w 3,085,824 2007-08-22 12:58:12 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\mshtml.dll
----a-w 449,024 2007-08-22 12:58:12 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\mshtmled.dll
----a-w 146,432 2007-08-22 12:58:12 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\msrating.dll
----a-w 532,480 2007-08-22 12:58:12 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\mstime.dll
----a-w 39,424 2007-08-22 12:58:12 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\pngfilt.dll
----a-w 1,498,112 2007-08-22 12:58:13 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\shdocvw.dll
----a-w 474,112 2007-08-22 12:58:13 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\shlwapi.dll
----a-w 368,640 2007-08-21 10:51:03 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\spru0415.dll
----a-w 619,008 2007-08-22 12:58:13 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\urlmon.dll
----a-w 668,160 2007-08-22 12:58:13 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\wininet.dll
----a-w 22,752 2007-03-06 03:28:33 C:\WINDOWS\$hf_mig$\KB939653\update\spcustom.dll
----a-w 723,680 2007-03-06 03:28:58 C:\WINDOWS\$hf_mig$\KB939653\update\update.exe
----a-w 386,784 2007-03-06 03:29:50 C:\WINDOWS\$hf_mig$\KB939653\update\updspapi.dll
----a-w 16,096 2007-03-06 03:28:35 C:\WINDOWS\$hf_mig$\KB941202\spmsg.dll
----a-w 216,288 2007-03-06 03:28:40 C:\WINDOWS\$hf_mig$\KB941202\spuninst.exe
----a-w 683,520 2007-08-21 06:26:10 C:\WINDOWS\$hf_mig$\KB941202\SP2QFE\inetcomm.dll
----a-w 22,752 2007-03-06 03:28:33 C:\WINDOWS\$hf_mig$\KB941202\update\spcustom.dll
----a-w 723,680 2007-03-06 03:28:58 C:\WINDOWS\$hf_mig$\KB941202\update\update.exe
----a-w 386,784 2007-03-06 03:29:50 C:\WINDOWS\$hf_mig$\KB941202\update\updspapi.dll
-c----w 581,120 2006-03-02 12:00:00 C:\WINDOWS\$NtUninstallKB933729$\rpcrt4.dll
-c----w 216,288 2005-10-12 23:21:30 C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe
-c----w 386,784 2005-10-12 23:21:41 C:\WINDOWS\$NtUninstallKB933729$\spuninst\updspapi.dll
-c----w 1,023,488 2007-06-14 18:11:18 C:\WINDOWS\$NtUninstallKB939653$\browseui.dll
-c----w 151,552 2007-06-14 18:11:18 C:\WINDOWS\$NtUninstallKB939653$\cdfview.dll
-c----w 1,055,744 2007-06-14 18:11:18 C:\WINDOWS\$NtUninstallKB939653$\danim.dll
-c----w 357,888 2007-06-14 18:11:18 C:\WINDOWS\$NtUninstallKB939653$\dxtmsft.dll
-c----w 205,312 2007-06-14 18:11:18 C:\WINDOWS\$NtUninstallKB939653$\dxtrans.dll
-c----w 55,808 2007-06-14 18:11:18 C:\WINDOWS\$NtUninstallKB939653$\extmgr.dll
-c----w 18,432 2007-06-14 14:07:24 C:\WINDOWS\$NtUninstallKB939653$\iedw.exe
-c----w 251,392 2007-06-14 18:11:18 C:\WINDOWS\$NtUninstallKB939653$\iepeers.dll
-c----w 96,768 2007-06-14 18:11:18 C:\WINDOWS\$NtUninstallKB939653$\inseng.dll
-c----w 16,384 2007-06-14 18:11:18 C:\WINDOWS\$NtUninstallKB939653$\jsproxy.dll
-c----w 3,079,680 2007-06-14 18:11:20 C:\WINDOWS\$NtUninstallKB939653$\mshtml.dll
-c----w 449,024 2007-06-14 18:11:18 C:\WINDOWS\$NtUninstallKB939653$\mshtmled.dll
-c----w 146,432 2007-06-14 18:11:18 C:\WINDOWS\$NtUninstallKB939653$\msrating.dll
-c----w 532,480 2007-06-14 18:11:18 C:\WINDOWS\$NtUninstallKB939653$\mstime.dll
-c----w 39,424 2007-06-14 18:11:18 C:\WINDOWS\$NtUninstallKB939653$\pngfilt.dll
-c----w 1,494,528 2007-06-14 18:11:18 C:\WINDOWS\$NtUninstallKB939653$\shdocvw.dll
-c----w 474,112 2007-06-14 18:11:18 C:\WINDOWS\$NtUninstallKB939653$\shlwapi.dll
-c----w 616,448 2007-06-14 18:11:18 C:\WINDOWS\$NtUninstallKB939653$\urlmon.dll
-c----w 661,504 2007-06-26 14:15:49 C:\WINDOWS\$NtUninstallKB939653$\wininet.dll
-c----w 122,368 2007-06-14 14:24:48 C:\WINDOWS\$NtUninstallKB939653$\xpsp3res.dll
-c----w 216,288 2007-03-06 03:28:40 C:\WINDOWS\$NtUninstallKB939653$\spuninst\spuninst.exe
-c----w 386,784 2007-03-06 03:29:50 C:\WINDOWS\$NtUninstallKB939653$\spuninst\updspapi.dll
-c----w 683,520 2007-05-16 15:18:58 C:\WINDOWS\$NtUninstallKB941202$\inetcomm.dll
-c----w 216,288 2007-03-06 03:28:40 C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe
-c----w 386,784 2007-03-06 03:29:50 C:\WINDOWS\$NtUninstallKB941202$\spuninst\updspapi.dll
----a-w 16,096 2007-03-06 03:28:35 C:\WINDOWS\SoftwareDistribution\Download\0dc65f8b8fd17c1fd33483ff6d468fa7\spmsg.dll
----a-w 216,288 2007-03-06 03:28:40 C:\WINDOWS\SoftwareDistribution\Download\0dc65f8b8fd17c1fd33483ff6d468fa7\spuninst.exe
----a-w 683,520 2007-08-21 06:18:06 C:\WINDOWS\SoftwareDistribution\Download\0dc65f8b8fd17c1fd33483ff6d468fa7\sp2gdr\inetcomm.dll
----a-w 683,520 2007-08-21 06:26:10 C:\WINDOWS\SoftwareDistribution\Download\0dc65f8b8fd17c1fd33483ff6d468fa7\sp2qfe\inetcomm.dll
----a-w 22,752 2007-03-06 03:28:33 C:\WINDOWS\SoftwareDistribution\Download\0dc65f8b8fd17c1fd33483ff6d468fa7\update\spcustom.dll
----a-w 723,680 2007-03-06 03:28:58 C:\WINDOWS\SoftwareDistribution\Download\0dc65f8b8fd17c1fd33483ff6d468fa7\update\update.exe
----a-w 386,784 2007-03-06 03:29:50 C:\WINDOWS\SoftwareDistribution\Download\0dc65f8b8fd17c1fd33483ff6d468fa7\update\updspapi.dll
----a-w 16,096 2007-03-06 03:28:35 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\spmsg.dll
----a-w 216,288 2007-03-06 03:28:40 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\spuninst.exe
----a-w 1,022,976 2007-08-22 13:19:16 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\browseui.dll
----a-w 151,552 2007-08-22 13:19:16 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\cdfview.dll
----a-w 1,055,744 2007-08-22 13:19:16 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\danim.dll
----a-w 357,888 2007-08-22 13:19:17 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\dxtmsft.dll
----a-w 205,312 2007-08-22 13:19:17 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\dxtrans.dll
----a-w 55,808 2007-08-22 13:19:17 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\extmgr.dll
----a-w 18,432 2007-08-21 10:30:45 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\iedw.exe
----a-w 251,392 2007-08-22 13:19:17 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\iepeers.dll
----a-w 96,768 2007-08-22 13:19:17 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\inseng.dll
----a-w 16,384 2007-08-22 13:19:17 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\jsproxy.dll
----a-w 3,079,168 2007-08-22 13:19:18 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\mshtml.dll
----a-w 449,024 2007-08-22 13:19:18 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\mshtmled.dll
----a-w 146,432 2007-08-22 13:19:18 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\msrating.dll
----a-w 532,480 2007-08-22 13:19:19 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\mstime.dll
----a-w 39,424 2007-08-22 13:19:19 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\pngfilt.dll
----a-w 1,494,528 2007-08-22 13:19:19 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\shdocvw.dll
----a-w 474,112 2007-08-22 13:19:19 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\shlwapi.dll
----a-w 122,368 2007-08-21 10:53:33 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\spru0415.dll
----a-w 616,448 2007-08-22 13:19:19 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\urlmon.dll
----a-w 661,504 2007-08-22 13:19:20 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2gdr\wininet.dll
----a-w 1,022,976 2007-08-22 12:58:11 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\browseui.dll
----a-w 151,552 2007-08-22 12:58:11 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\cdfview.dll
----a-w 1,055,744 2007-08-22 12:58:11 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\danim.dll
----a-w 357,888 2007-08-22 12:58:12 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\dxtmsft.dll
----a-w 205,824 2007-08-22 12:58:12 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\dxtrans.dll
----a-w 55,808 2007-08-22 12:58:12 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\extmgr.dll
----a-w 18,432 2007-08-21 10:19:39 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\iedw.exe
----a-w 251,904 2007-08-22 12:58:12 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\iepeers.dll
----a-w 96,768 2007-08-22 12:58:12 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\inseng.dll
----a-w 16,384 2007-08-22 12:58:12 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\jsproxy.dll
----a-w 3,085,824 2007-08-22 12:58:12 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\mshtml.dll
----a-w 449,024 2007-08-22 12:58:12 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\mshtmled.dll
----a-w 146,432 2007-08-22 12:58:12 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\msrating.dll
----a-w 532,480 2007-08-22 12:58:12 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\mstime.dll
----a-w 39,424 2007-08-22 12:58:12 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\pngfilt.dll
----a-w 1,498,112 2007-08-22 12:58:13 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\shdocvw.dll
----a-w 474,112 2007-08-22 12:58:13 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\shlwapi.dll
----a-w 368,640 2007-08-21 10:51:03 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\spru0415.dll
----a-w 619,008 2007-08-22 12:58:13 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\urlmon.dll
----a-w 668,160 2007-08-22 12:58:13 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\sp2qfe\wininet.dll
----a-w 22,752 2007-03-06 03:28:33 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\update\spcustom.dll
----a-w 723,680 2007-03-06 03:28:58 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\update\update.exe
----a-w 386,784 2007-03-06 03:29:50 C:\WINDOWS\SoftwareDistribution\Download\4a82ff564ddb543f5e0969df6555fce9\update\updspapi.dll
----a-w 16,096 2005-10-12 23:21:28 C:\WINDOWS\SoftwareDistribution\Download\c556d8b3bc368a24b6159c2d1e667902\spmsg.dll
----a-w 216,288 2005-10-12 23:21:30 C:\WINDOWS\SoftwareDistribution\Download\c556d8b3bc368a24b6159c2d1e667902\spuninst.exe
----a-w 584,192 2007-07-09 13:11:53 C:\WINDOWS\SoftwareDistribution\Download\c556d8b3bc368a24b6159c2d1e667902\SP2GDR\rpcrt4.dll
----a-w 122,368 2007-06-12 21:53:16 C:\WINDOWS\SoftwareDistribution\Download\c556d8b3bc368a24b6159c2d1e667902\SP2GDR\spru0415.dll
----a-w 582,656 2007-07-09 13:20:23 C:\WINDOWS\SoftwareDistribution\Download\c556d8b3bc368a24b6159c2d1e667902\SP2QFE\rpcrt4.dll
----a-w 368,640 2007-06-18 22:24:36 C:\WINDOWS\SoftwareDistribution\Download\c556d8b3bc368a24b6159c2d1e667902\SP2QFE\spru0415.dll
----a-w 22,752 2005-10-12 23:21:27 C:\WINDOWS\SoftwareDistribution\Download\c556d8b3bc368a24b6159c2d1e667902\update\spcustom.dll
----a-w 723,680 2005-10-12 23:21:34 C:\WINDOWS\SoftwareDistribution\Download\c556d8b3bc368a24b6159c2d1e667902\update\update.exe
----a-w 386,784 2005-10-12 23:21:41 C:\WINDOWS\SoftwareDistribution\Download\c556d8b3bc368a24b6159c2d1e667902\update\updspapi.dll
----a-w 1,022,976 2007-08-22 13:19:16 C:\WINDOWS\system32\browseui.dll
----a-w 151,552 2007-08-22 13:19:16 C:\WINDOWS\system32\cdfview.dll
----a-w 1,055,744 2007-08-22 13:19:16 C:\WINDOWS\system32\danim.dll
----a-w 357,888 2007-08-22 13:19:17 C:\WINDOWS\system32\dxtmsft.dll
----a-w 205,312 2007-08-22 13:19:17 C:\WINDOWS\system32\dxtrans.dll
----a-w 55,808 2007-08-22 13:19:17 C:\WINDOWS\system32\extmgr.dll
----a-w 251,392 2007-08-22 13:19:17 C:\WINDOWS\system32\iepeers.dll
----a-w 96,768 2007-08-22 13:19:17 C:\WINDOWS\system32\inseng.dll
----a-w 16,384 2007-08-22 13:19:17 C:\WINDOWS\system32\jsproxy.dll
----a-w 18,089,592 2007-09-28 05:19:39 C:\WINDOWS\system32\MRT.exe
----a-w 3,079,168 2007-08-22 13:19:18 C:\WINDOWS\system32\mshtml.dll
----a-w 449,024 2007-08-22 13:19:18 C:\WINDOWS\system32\mshtmled.dll
----a-w 146,432 2007-08-22 13:19:18 C:\WINDOWS\system32\msrating.dll
----a-w 532,480 2007-08-22 13:19:19 C:\WINDOWS\system32\mstime.dll
----a-w 39,424 2007-08-22 13:19:19 C:\WINDOWS\system32\pngfilt.dll
----a-w 584,192 2007-07-09 13:11:53 C:\WINDOWS\system32\rpcrt4.dll
----a-w 1,494,528 2007-08-22 13:19:19 C:\WINDOWS\system32\shdocvw.dll
----a-w 474,112 2007-08-22 13:19:19 C:\WINDOWS\system32\shlwapi.dll
----a-w 616,448 2007-08-22 13:19:19 C:\WINDOWS\system32\urlmon.dll
----a-w 661,504 2007-08-22 13:19:20 C:\WINDOWS\system32\wininet.dll
----a-w 122,368 2007-08-21 10:53:33 C:\WINDOWS\system32\xpsp3res.dll
-c--a-w 1,022,976 2007-08-22 13:19:16 C:\WINDOWS\system32\dllcache\browseui.dll
-c--a-w 151,552 2007-08-22 13:19:16 C:\WINDOWS\system32\dllcache\cdfview.dll
-c--a-w 1,055,744 2007-08-22 13:19:16 C:\WINDOWS\system32\dllcache\danim.dll
-c--a-w 357,888 2007-08-22 13:19:17 C:\WINDOWS\system32\dllcache\dxtmsft.dll
-c--a-w 205,312 2007-08-22 13:19:17 C:\WINDOWS\system32\dllcache\dxtrans.dll
-c--a-w 55,808 2007-08-22 13:19:17 C:\WINDOWS\system32\dllcache\extmgr.dll
-c--a-w 18,432 2007-08-21 10:30:45 C:\WINDOWS\system32\dllcache\iedw.exe
-c--a-w 251,392 2007-08-22 13:19:17 C:\WINDOWS\system32\dllcache\iepeers.dll
-c--a-w 683,520 2007-08-21 06:18:06 C:\WINDOWS\system32\dllcache\inetcomm.dll
-c--a-w 96,768 2007-08-22 13:19:17 C:\WINDOWS\system32\dllcache\inseng.dll
-c--a-w 16,384 2007-08-22 13:19:17 C:\WINDOWS\system32\dllcache\jsproxy.dll
-c--a-w 3,079,168 2007-08-22 13:19:18 C:\WINDOWS\system32\dllcache\mshtml.dll
-c--a-w 449,024 2007-08-22 13:19:18 C:\WINDOWS\system32\dllcache\mshtmled.dll
-c--a-w 146,432 2007-08-22 13:19:18 C:\WINDOWS\system32\dllcache\msrating.dll
-c--a-w 532,480 2007-08-22 13:19:19 C:\WINDOWS\system32\dllcache\mstime.dll
-c--a-w 39,424 2007-08-22 13:19:19 C:\WINDOWS\system32\dllcache\pngfilt.dll
-c--a-w 584,192 2007-07-09 13:11:53 C:\WINDOWS\system32\dllcache\rpcrt4.dll
-c--a-w 1,494,528 2007-08-22 13:19:19 C:\WINDOWS\system32\dllcache\shdocvw.dll
-c--a-w 474,112 2007-08-22 13:19:19 C:\WINDOWS\system32\dllcache\shlwapi.dll
-c--a-w 616,448 2007-08-22 13:19:19 C:\WINDOWS\system32\dllcache\urlmon.dll
-c--a-w 661,504 2007-08-22 13:19:20 C:\WINDOWS\system32\dllcache\wininet.dll
----atw 16,384 2007-10-13 04:59:29 C:\WINDOWS\Temp\Perflib_Perfdata_4dc.dat
.
----a-w 1,023,488 2007-06-14 18:11:18 C:\WINDOWS\system32\browseui.dll
----a-w 151,552 2007-06-14 18:11:18 C:\WINDOWS\system32\cdfview.dll
----a-w 1,055,744 2007-06-14 18:11:18 C:\WINDOWS\system32\danim.dll
----a-w 357,888 2007-06-14 18:11:18 C:\WINDOWS\system32\dxtmsft.dll
----a-w 205,312 2007-06-14 18:11:18 C:\WINDOWS\system32\dxtrans.dll
----a-w 55,808 2007-06-14 18:11:18 C:\WINDOWS\system32\extmgr.dll
----a-w 251,392 2007-06-14 18:11:18 C:\WINDOWS\system32\iepeers.dll
----a-w 96,768 2007-06-14 18:11:18 C:\WINDOWS\system32\inseng.dll
----a-w 16,384 2007-06-14 18:11:18 C:\WINDOWS\system32\jsproxy.dll
----a-w 17,474,680 2007-09-06 02:50:42 C:\WINDOWS\system32\MRT.exe
----a-w 3,079,680 2007-06-14 18:11:20 C:\WINDOWS\system32\mshtml.dll
----a-w 449,024 2007-06-14 18:11:18 C:\WINDOWS\system32\mshtmled.dll
----a-w 146,432 2007-06-14 18:11:18 C:\WINDOWS\system32\msrating.dll
----a-w 532,480 2007-06-14 18:11:18 C:\WINDOWS\system32\mstime.dll
----a-w 39,424 2007-06-14 18:11:18 C:\WINDOWS\system32\pngfilt.dll
----a-w 581,120 2006-03-02 12:00:00 C:\WINDOWS\system32\rpcrt4.dll
----a-w 1,494,528 2007-06-14 18:11:18 C:\WINDOWS\system32\shdocvw.dll
----a-w 474,112 2007-06-14 18:11:18 C:\WINDOWS\system32\shlwapi.dll
----a-w 616,448 2007-06-14 18:11:18 C:\WINDOWS\system32\urlmon.dll
----a-w 661,504 2007-06-26 14:15:49 C:\WINDOWS\system32\wininet.dll
----a-w 122,368 2007-06-14 14:24:48 C:\WINDOWS\system32\xpsp3res.dll
-c--a-w 1,023,488 2007-06-14 18:11:18 C:\WINDOWS\system32\dllcache\browseui.dll
-c--a-w 151,552 2007-06-14 18:11:18 C:\WINDOWS\system32\dllcache\cdfview.dll
-c--a-w 1,055,744 2007-06-14 18:11:18 C:\WINDOWS\system32\dllcache\danim.dll
-c--a-w 357,888 2007-06-14 18:11:18 C:\WINDOWS\system32\dllcache\dxtmsft.dll
-c--a-w 205,312 2007-06-14 18:11:18 C:\WINDOWS\system32\dllcache\dxtrans.dll
-c--a-w 55,808 2007-06-14 18:11:18 C:\WINDOWS\system32\dllcache\extmgr.dll
-c--a-w 18,432 2007-06-14 14:07:24 C:\WINDOWS\system32\dllcache\iedw.exe
-c--a-w 251,392 2007-06-14 18:11:18 C:\WINDOWS\system32\dllcache\iepeers.dll
-c--a-w 683,520 2007-05-16 15:18:58 C:\WINDOWS\system32\dllcache\inetcomm.dll
-c--a-w 96,768 2007-06-14 18:11:18 C:\WINDOWS\system32\dllcache\inseng.dll
-c--a-w 16,384 2007-06-14 18:11:18 C:\WINDOWS\system32\dllcache\jsproxy.dll
-c--a-w 3,079,680 2007-06-14 18:11:20 C:\WINDOWS\system32\dllcache\mshtml.dll
-c--a-w 449,024 2007-06-14 18:11:18 C:\WINDOWS\system32\dllcache\mshtmled.dll
-c--a-w 146,432 2007-06-14 18:11:18 C:\WINDOWS\system32\dllcache\msrating.dll
-c--a-w 532,480 2007-06-14 18:11:18 C:\WINDOWS\system32\dllcache\mstime.dll
-c--a-w 39,424 2007-06-14 18:11:18 C:\WINDOWS\system32\dllcache\pngfilt.dll
-c--a-w 581,120 2006-03-02 12:00:00 C:\WINDOWS\system32\dllcache\rpcrt4.dll
-c--a-w 1,494,528 2007-06-14 18:11:18 C:\WINDOWS\system32\dllcache\shdocvw.dll
-c--a-w 474,112 2007-06-14 18:11:18 C:\WINDOWS\system32\dllcache\shlwapi.dll
-c--a-w 616,448 2007-06-14 18:11:18 C:\WINDOWS\system32\dllcache\urlmon.dll
-c--a-w 661,504 2007-06-26 14:15:49 C:\WINDOWS\system32\dllcache\wininet.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-08-11 15:43]
"nwiz"="nwiz.exe" [2006-08-11 15:43 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-08-11 15:43]
"SoundMan"="SOUNDMAN.EXE" [2006-03-01 16:22 C:\WINDOWS\soundman.exe]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2006-11-12 12:48]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-02-13 20:29]
"Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2005-10-26 17:17]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" [2005-06-06 23:46]
"WooCnxMon"="C:\PROGRA~1\NEOSTR~1\CnxMon.exe" [2003-10-16 18:07]
"WOOWATCH"="C:\PROGRA~1\NEOSTR~1\Watch.exe" [2003-10-16 18:07]
"WOOTASKBARICON"="C:\PROGRA~1\NEOSTR~1\taskbaricon.exe" [2003-10-16 18:07]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-09-06 12:06]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 02:41]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 14:00]
"Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-01-30 16:58]
"WinMem"="C:\Program Files\WinCleaner Memory Optimizer\WinMemOpt.exe" []
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-08-25 21:54]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24]

C:\Documents and Settings\Mariusz\Menu Start\Programy\Autostart\
Screenshot Utility.lnk - C:\Program Files\Screenshot Utility\ScreenshotUtility.exe [2001-12-24 14:24:12]
Tworzenie wycink˘w ekranu i uruchamianie programu OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 20:24:54]

C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Autostart\
DSLMON.lnk - C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2007-06-18 20:44:48]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2006-02-19 04:21:22]

S3 HWIONT;HWIONT;\??\C:\Documents and Settings\Mariusz\Pulpit\moretv353pl\HWIONT.sys
S3 SE27bus;Sony Ericsson Device 039 Driver driver (WDM);C:\WINDOWS\system32\DRIVERS\SE27bus.sys
S3 SE27mdfl;Sony Ericsson Device 039 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\SE27mdfl.sys
S3 SE27mdm;Sony Ericsson Device 039 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\SE27mdm.sys
S3 SE27mgmt;Sony Ericsson Device 039 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\SE27mgmt.sys
S3 se27nd5;Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (NDIS);C:\WINDOWS\system32\DRIVERS\se27nd5.sys
S3 SE27obex;Sony Ericsson Device 039 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\SE27obex.sys
S3 se27unic;Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (WDM);C:\WINDOWS\system32\DRIVERS\se27unic.sys

.
**************************************************************************

catchme 0.3.1169 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-13 13:21:24
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-10-13 13:22:14
C:\ComboFix2.txt ... 2007-10-08 16:53
.
--- E O F ---

[wojtas]

czysto

[mariusz_563]

Dzieki