proszę o sprawdzenie loga.

**Posty:** 198 · przez **wilczy** 14 Lut 2008, 23:51

Jak w temacie:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:49:54, on 2008-02-14
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\A4Tech\Mouse\Amoumain.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\Grisoft\AVG7\avgwb.dat
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\DialNet\WrOS.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Avant Browser\avant.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O1 - Hosts: 121.128.133.26 gwgt1.joymax.com
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {347A7938-9AA9-44B5-A806-BDEFA53042E5} - C:\WINDOWS\system32\gebyw.dll (file missing)
O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (file missing)
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll
O2 - BHO: (no name) - {415D402F-A6FC-4CA2-927B-2323BAAFB966} - C:\WINDOWS\system32\iifgffd.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {8C39AD6C-F519-4BD2-B72A-B322485948CB} - C:\WINDOWS\system32\mljji.dll (file missing)
O2 - BHO: Pomocnik rejestracji usługi Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A95B2816-1D7E-4561-A202-68C0DE02353A} - C:\WINDOWS\system32\mkmsjkra.dll (file missing)
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: {45eff7b1-6a95-cb79-3bd4-e1df4b9ae96e} - {e69ea9b4-fd1e-4db3-97bc-59a61b7ffe54} - C:\WINDOWS\system32\blwkfiff.dll (file missing)
O3 - Toolbar: (no name) - {37B85A29-692B-4205-9CAD-2626E4993404} - (no file)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [987aaaac] rundll32.exe "C:\WINDOWS\system32\spxyupwr.dll",b
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Wpis w blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Wpis w blogu w Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.pl/resources/virusscanner/kavwebscan_unicode.cab
O16 - DPF: {18506D80-9B80-11D4-82C2-0080C8D7ED4A} (GameDesire Roulette) - http://67.15.101.33/g_bin/pl/roulette_2_0_0_27.cab
O16 - DPF: {41ACD49D-1974-791A-0981-AA9872721044} (Ganymede Board Games) - http://67.15.101.33/g_bin/pl/boards_2_0_0_35.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1190445127187
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/webplayer/stage6/windows/DivXBrowserPlugin.cab
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1190445117625
O16 - DPF: {83AFB5CA-ED35-11D4-A452-0080C8D85045} (GameDesire Poker Games) - http://67.15.101.33/g_bin/pl/poker_2_0_0_49.cab
O16 - DPF: {A6212120-01D4-11D5-9A39-0080C8D85044} (GameDesire Slots 70th) - http://67.15.101.33/g_bin/pl/slots70_2_0_0_35.cab
O16 - DPF: {E23FABEE-12E3-33DA-DA12-195DAC123984} (GameDesire Mahjong) - http://67.15.101.33/g_bin/pl/mahjong_2_0_0_31.cab
O16 - DPF: {E95CF138-A587-4C54-8175-3AD80997CB14} (GameDesire Soccer) - http://67.15.101.33/g_bin/pl/soccer_2_0_0_19.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: iifgffd - iifgffd.dll (file missing)
O20 - Winlogon Notify: mkmsjkra - mkmsjkra.dll (file missing)
O20 - Winlogon Notify: winhdn32 - winhdn32.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: WinPPPoverEthernet - Fine Point Technologies, Inc. - C:\Program Files\DialNet\WrOS.EXE

--
End of file - 10984 bytes

_______________________
Komputer ma skłonności zwieszania się, co uniemożliwia pracę. Do tego nie ma firewalla, więc jest podatny na ataki, ale już mam NOD32 i ZonAlarm - zastanawiam się tylko który wybrać.

**Posty:** 3854 · przez **Dzi@dek** 15 Lut 2008, 00:09

wilczy napisał(a):ale już mam NOD32 i ZonAlarm - zastanawiam się tylko który wybrać.

NOD32 to antywirus a Zonealarm to firewall. Jedno i drugie potrzebne.

Ale widać u Ciebie coś z Symanteca i Awasta - nie można mieć kilku programów antywirusowych.

Uruchom hijackthis, daj na scan only - zaznac/z podane wpisy i kliknij - Fix Checked.

O1 - Hosts: 121.128.133.26 gwgt1.joymax.com
O2 - BHO: (no name) - {347A7938-9AA9-44B5-A806-BDEFA53042E5} - C:\WINDOWS\system32\gebyw.dll (file missing)
O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (file missing)
O2 - BHO: (no name) - {415D402F-A6FC-4CA2-927B-2323BAAFB966} - C:\WINDOWS\system32\iifgffd.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {8C39AD6C-F519-4BD2-B72A-B322485948CB} - C:\WINDOWS\system32\mljji.dll (file missing)
O2 - BHO: (no name) - {A95B2816-1D7E-4561-A202-68C0DE02353A} - C:\WINDOWS\system32\mkmsjkra.dll (file missing)
O2 - BHO: {45eff7b1-6a95-cb79-3bd4-e1df4b9ae96e} - {e69ea9b4-fd1e-4db3-97bc-59a61b7ffe54} - C:\WINDOWS\system32\blwkfiff.dll (file missing)
O3 - Toolbar: (no name) - {37B85A29-692B-4205-9CAD-2626E4993404} - (no file)
O4 - HKLM\..\Run: [987aaaac] rundll32.exe "C:\WINDOWS\system32\spxyupwr.dll",b
O20 - Winlogon Notify: iifgffd - iifgffd.dll (file missing)
O20 - Winlogon Notify: mkmsjkra - mkmsjkra.dll (file missing)
O20 - Winlogon Notify: winhdn32 - winhdn32.dll (file missing)

Daj nowe logi z Combofix oraz Hijackthis.

Autor postu otrzymał pochwałę

**Posty:** 198 · przez **wilczy** 15 Lut 2008, 08:28

ComboFix 08-02-15.2 - Administrator 2008-02-15 7:21:52.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.496 [GMT 1:00]
Running from: C:\Documents and Settings\Administrator\Pulpit\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\cookies.ini
C:\WINDOWS\system32\_000007_.tmp.dll
C:\WINDOWS\system32\_000008_.tmp.dll
C:\WINDOWS\system32\_000009_.tmp.dll
C:\WINDOWS\system32\_000010_.tmp.dll
C:\WINDOWS\system32\_000012_.tmp.dll
C:\WINDOWS\system32\_000013_.tmp.dll
C:\WINDOWS\system32\_000014_.tmp.dll
C:\WINDOWS\system32\_000015_.tmp.dll
C:\WINDOWS\system32\_000042_.tmp.dll
C:\WINDOWS\system32\dndaghmb.ini
C:\WINDOWS\system32\drivers\npf.sys
C:\WINDOWS\system32\ijjlm.ini
C:\WINDOWS\system32\ijjlm.ini2
C:\WINDOWS\system32\lyhxxaum.ini
C:\WINDOWS\system32\mcrh.tmp
C:\WINDOWS\system32\mkmsjkra.dllbox
C:\WINDOWS\system32\packet.dll
C:\WINDOWS\system32\pthreadVC.dll
C:\WINDOWS\system32\wanpacket.dll
C:\WINDOWS\system32\wpcap.dll
C:\WINDOWS\system32\wybeg.ini
C:\WINDOWS\system32\wybeg.ini2
C:\WINDOWS\system32\x64

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
-------\NPF

((((((((((((((((((((((((( Files Created from 2008-01-15 to 2008-02-15 )))))))))))))))))))))))))))))))
.

2008-02-14 22:39 . 2008-02-14 22:39 <DIR> d-------- C:\Documents and Settings\LocalService\Dane aplikacji\AVG7
2008-02-14 22:39 . 2008-02-14 22:45 <DIR> d-------- C:\Documents and Settings\Administrator\Dane aplikacji\AVG7
2008-02-14 22:38 . 2008-02-14 22:38 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Grisoft
2008-02-14 22:38 . 2008-02-14 22:45 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\avg7
2008-02-14 22:36 . 2008-02-14 22:36 <DIR> d-------- C:\Program Files\Trend Micro
2008-02-14 22:31 . 2008-02-14 22:31 <DIR> d-------- C:\Program Files\CCleaner
2008-02-14 13:29 . 2008-02-14 18:42 534 ---hs---- C:\WINDOWS\system32\rwpuyxps.ini
2008-02-10 20:09 . 2008-02-10 20:09 <DIR> d-------- C:\Program Files\Audacity
2008-02-09 21:26 . 2008-02-09 21:26 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Corel
2008-02-09 21:23 . 2008-02-09 21:23 <DIR> d-------- C:\Program Files\Corel
2008-02-09 21:23 . 2008-02-09 21:24 <DIR> d-------- C:\Program Files\Common Files\Corel
2008-02-09 21:18 . 2008-02-09 21:18 <DIR> d-------- C:\Program Files\MagicDisc
2008-02-09 21:18 . 2006-09-22 14:06 92,160 --a------ C:\WINDOWS\system32\drivers\mcdbus.sys
2008-02-09 08:49 . 1998-10-07 12:54 327,168 --a------ C:\WINDOWS\IsUn0415.exe
2008-02-09 08:44 . 2008-02-09 08:45 <DIR> d-------- C:\Program Files\DAEMON Tools Lite
2008-02-09 08:44 . 2008-02-09 08:44 <DIR> d-------- C:\Documents and Settings\Administrator\Dane aplikacji\DAEMON Tools
2008-02-09 08:38 . 2008-02-09 08:38 716,272 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2008-02-08 15:29 . 2008-02-08 15:30 <DIR> d-------- C:\Program Files\Arial Sound Recorder
2008-02-08 15:23 . 2008-02-08 15:23 <DIR> d-------- C:\Program Files\Common Files\snpp106
2008-02-08 15:23 . 1998-06-11 23:15 307,200 --a------ C:\WINDOWS\vidcap32.exe
2008-02-08 15:23 . 2002-12-05 16:58 239,488 --a------ C:\WINDOWS\system32\drivers\snpp106.sys
2008-02-08 15:23 . 2002-10-15 17:14 120,874 --a------ C:\WINDOWS\usnpp106.exe
2008-02-08 15:23 . 2002-11-25 17:35 61,440 --a------ C:\WINDOWS\system32\dsnpp106.dll
2008-02-08 15:23 . 2002-07-03 11:44 53,248 --a------ C:\WINDOWS\amcap.exe
2008-02-08 15:23 . 2002-11-25 17:40 49,152 --a------ C:\WINDOWS\system32\vsnpp106.dll
2008-02-08 15:23 . 2002-11-25 18:10 28,672 --a------ C:\WINDOWS\vsnpp106.exe
2008-02-08 15:23 . 2002-11-25 17:43 28,672 --a------ C:\WINDOWS\system32\dsnpp106.ax
2008-02-08 15:23 . 2002-07-11 14:20 20,480 --a------ C:\WINDOWS\dsnpp106.exe
2008-02-08 15:23 . 2002-07-08 14:08 15,494 --a------ C:\WINDOWS\snpp106.ini
2008-02-08 15:23 . 2002-11-26 11:41 12,827 --a------ C:\WINDOWS\snpp106.src
2008-02-08 08:16 . 2008-02-09 21:08 474 ---hs---- C:\WINDOWS\system32\brwdgled.ini
2008-02-06 09:51 . 2008-02-07 06:58 414 ---hs---- C:\WINDOWS\system32\tnsxsxic.ini
2008-02-05 19:46 . 2008-02-05 19:46 <DIR> d-------- C:\Program Files\AC3Filter
2008-02-05 19:46 . 2007-08-18 08:54 380,928 --a------ C:\WINDOWS\system32\ac3filter.acm
2008-02-05 19:04 . 2008-02-10 08:22 <DIR> d-------- C:\Documents and Settings\Administrator\Dane aplikacji\gtk-2.0
2008-02-05 19:04 . 2008-02-05 19:04 <DIR> d-------- C:\Documents and Settings\Administrator\.thumbnails
2008-02-05 19:03 . 2008-02-05 19:03 <DIR> d-------- C:\Program Files\GIMP-2.0
2008-02-05 19:03 . 2008-02-10 08:24 <DIR> d-------- C:\Documents and Settings\Administrator\.gimp-2.4
2008-01-31 15:55 . 2008-01-31 15:55 <DIR> d-------- C:\Program Files\Ricochet Xtreme
2008-01-31 15:55 . 2008-01-31 15:55 <DIR> d-------- C:\Program Files\ReflexiveArcade
2008-01-30 16:05 . 2008-01-30 16:05 <DIR> d-------- C:\Program Files\AT&T WorldNet Setup
2008-01-30 16:05 . 2008-01-30 16:05 21,840 --a------ C:\WINDOWS\system32\SIntfNT.dll
2008-01-30 16:05 . 2008-01-30 16:05 17,212 --a------ C:\WINDOWS\system32\SIntf32.dll
2008-01-30 16:05 . 2008-01-30 16:05 12,067 --a------ C:\WINDOWS\system32\SIntf16.dll
2008-01-30 16:04 . 2008-01-30 16:04 216 --a------ C:\WINDOWS\SIERRA.INI
2008-01-27 16:41 . 2008-01-27 19:53 38 --a------ C:\WINDOWS\avisplitter.INI
2008-01-27 16:28 . 2008-01-27 16:28 635 --a------ C:\WINDOWS\Spidey.INI
2008-01-25 21:51 . 2008-01-25 21:51 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer
2008-01-25 07:00 . 2008-01-25 07:00 <DIR> d-------- C:\Xili
2008-01-20 13:59 . 2008-01-20 13:59 168 --a------ C:\WINDOWS\system32\proc-322085835.bin
2008-01-20 13:48 . 2008-01-20 13:48 <DIR> d-------- C:\Program Files\K-Lite Codec Pack
2008-01-20 10:56 . 2008-01-20 10:56 <DIR> d-------- C:\Documents and Settings\Administrator\Dane aplikacji\Teleca
2008-01-20 10:55 . 2007-04-23 15:54 108,680 -ra------ C:\WINDOWS\system32\drivers\s115mdm.sys
2008-01-20 10:55 . 2007-04-23 15:54 100,488 -ra------ C:\WINDOWS\system32\drivers\s115mgmt.sys
2008-01-20 10:55 . 2007-04-23 15:54 98,568 -ra------ C:\WINDOWS\system32\drivers\s115obex.sys
2008-01-20 10:55 . 2007-04-23 15:54 83,208 -ra------ C:\WINDOWS\system32\drivers\s115bus.sys
2008-01-20 10:55 . 2007-04-23 15:54 15,112 -ra------ C:\WINDOWS\system32\drivers\s115mdfl.sys
2008-01-20 10:55 . 2007-04-23 15:54 12,424 -ra------ C:\WINDOWS\system32\drivers\s115whnt.sys
2008-01-20 10:55 . 2007-04-23 15:54 12,424 -ra------ C:\WINDOWS\system32\drivers\s115wh.sys
2008-01-20 10:55 . 2007-04-23 15:54 12,424 -ra------ C:\WINDOWS\system32\drivers\s115cmnt.sys
2008-01-20 10:55 . 2007-04-23 15:54 12,424 -ra------ C:\WINDOWS\system32\drivers\s115cm.sys
2008-01-20 10:53 . 2008-01-20 10:53 <DIR> d-------- C:\WINDOWS\Downloaded Installations
2008-01-20 10:53 . 2008-01-20 10:54 <DIR> d-------- C:\Program Files\Common Files\Teleca Shared
2008-01-20 10:53 . 2008-01-20 10:53 <DIR> d-------- C:\Program Files\Common Files\Sony Ericsson Shared
2008-01-20 10:53 . 2008-01-20 10:53 <DIR> d-------- C:\Documents and Settings\Administrator\Dane aplikacji\Sony Ericsson
2008-01-20 10:51 . 2008-01-20 10:53 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Teleca
2008-01-20 10:51 . 2008-01-20 10:53 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Sony Ericsson
2008-01-20 10:41 . 2008-01-20 10:53 <DIR> d-------- C:\Program Files\Sony Ericsson
2008-01-20 10:34 . 2008-01-20 10:34 <DIR> d-------- C:\Program Files\MyPhoneExplorer
2008-01-20 10:34 . 2008-01-20 10:59 <DIR> d-------- C:\Documents and Settings\Administrator\Dane aplikacji\MyPhoneExplorer

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-15 06:25 --------- d-----w C:\Program Files\DialNet
2008-02-14 21:43 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-02-14 21:43 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Symantec
2008-02-14 17:59 --------- d-----w C:\Program Files\Symantec
2008-02-14 17:03 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\Skype
2008-02-12 08:51 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\GanymedeNet
2008-02-11 20:11 --------- d-----w C:\Program Files\Gadu-Gadu
2008-02-11 08:42 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\AdobeUM
2008-02-10 10:55 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-02-09 14:16 --------- d-----w C:\Program Files\NAPI-PROJEKT
2008-02-02 14:41 --------- d-----w C:\Program Files\Xfire
2008-01-31 17:17 --------- d-----w C:\Program Files\Ganymede
2008-01-25 05:36 --------- d-----w C:\Program Files\ICQToolbar
2008-01-18 11:56 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\Xfire
2008-01-17 14:39 --------- d-----w C:\Program Files\BitComet
2008-01-17 14:39 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\Hamachi
2008-01-16 21:40 --------- d-----w C:\Program Files\DivX
2008-01-13 14:19 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\WebCallDirect
2008-01-13 14:08 --------- d-----w C:\Program Files\WebCallDirect.com
2008-01-11 00:29 54,608 ----a-w C:\WINDOWS\system32\xfcodec.dll
2008-01-03 06:05 --------- d-----w C:\Program Files\WinAVIVideoConverter
2008-01-03 05:55 --------- d-----w C:\Program Files\QuickTime
2008-01-03 05:47 --------- d-----w C:\Program Files\AVOne
2007-12-30 19:48 --------- d-----w C:\Program Files\Hamachi
2007-12-30 19:47 25,280 ----a-w C:\WINDOWS\system32\drivers\hamachi.sys
2007-12-29 19:58 --------- d-----w C:\Program Files\A4Tech
2007-12-27 18:56 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\ICQ Toolbar
2007-12-25 15:58 --------- d-----w C:\Program Files\ICQ6
2007-12-25 15:58 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\ICQ
2007-12-25 13:08 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\Ventrilo
2007-12-25 13:07 --------- d-----w C:\Program Files\Ventrilo
2007-12-25 13:07 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2007-12-24 12:49 7,680 ----a-w C:\WINDOWS\system32\ff_vfw.dll
2007-12-22 10:33 --------- d-----w C:\Program Files\Avant Browser
2007-12-19 21:57 --------- d-----w C:\Program Files\Asprate
2007-12-18 09:51 179,584 ----a-w C:\WINDOWS\system32\drivers\mrxdav.sys
2007-12-16 18:37 121,856 ----a-w C:\WINDOWS\system32\MadCHook.dll
2007-12-16 10:30 --------- d-----w C:\Program Files\Alwil Software
2007-12-07 01:08 662,016 ----a-w C:\WINDOWS\system32\wininet.dll
2007-12-04 18:42 550,912 ----a-w C:\WINDOWS\system32\oleaut32.dll
2007-12-04 13:04 837,496 ----a-w C:\WINDOWS\system32\aswBoot.exe
2007-12-04 12:54 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr
2007-12-04 01:33 682,496 ----a-w C:\WINDOWS\system32\divx.dll
2007-11-29 22:30 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
2007-11-29 22:30 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
2007-11-29 22:30 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
2007-11-29 22:28 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{347A7938-9AA9-44B5-A806-BDEFA53042E5}]
C:\WINDOWS\system32\gebyw.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 18:03 152872]
"Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-07-09 08:39 2119104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 17:30 517768]
"WheelMouse"="C:\Program Files\A4Tech\Mouse\Amoumain.exe" [2006-12-26 16:08 196608]
"MSConfig"="C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe" [2004-08-03 23:44 159744]
"987aaaac"="C:\WINDOWS\system32\spxyupwr.dll" [ ]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2008-02-14 22:38 579072]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 23:44 15360]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2008-02-14 22:38 219136]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=MsgPlusLoader.dll

[HKLM\~\startupfolder\C:^Documents and Settings^Administrator^Menu Start^Programy^Autostart^GIGABYTE VGA Utility.lnk]
path=C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\GIGABYTE VGA Utility.lnk
backup=C:\WINDOWS\pss\GIGABYTE VGA Utility.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Administrator^Menu Start^Programy^Autostart^hamachi.lnk]
path=C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\hamachi.lnk
backup=C:\WINDOWS\pss\hamachi.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Administrator^Menu Start^Programy^Autostart^MagicDisc.lnk]
path=C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\MagicDisc.lnk
backup=C:\WINDOWS\pss\MagicDisc.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Administrator^Menu Start^Programy^Autostart^Xfire.lnk]
path=C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\Xfire.lnk
backup=C:\WINDOWS\pss\Xfire.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Microsoft Office.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup
--a------ 2004-11-05 11:29 110592 C:\PROGRA~1\DialNet\FPLICE~1.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\987aaaac]
C:\WINDOWS\system32\bmhgadnd.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\a-winpoet-service]
--a------ 2007-01-18 09:26 405504 C:\Program Files\DialNet\winpppoverethernet.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
-r------- 2005-05-03 11:43 69632 C:\WINDOWS\Alcmtr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avast!]
--a------ 2007-12-04 14:00 79224 C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BearFlix]
--a------ 2007-06-19 10:15 3346432 C:\Program Files\BearFlix\bearflix.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BearShare]
--a------ 2006-08-01 16:04 3313664 C:\Program Files\BearShare\BearShare.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
--a------ 2004-08-03 23:44 15360 C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
--a------ 2008-01-17 17:51 486856 C:\Program Files\DAEMON Tools Lite\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadu-Gadu]
--a------ 2007-07-09 08:39 2119104 C:\Program Files\Gadu-Gadu\gg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
--a------ 2007-08-24 10:01 159744 C:\WINDOWS\system32\hkcmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
--a------ 2007-11-21 01:47 172280 C:\Program Files\ICQ6\ICQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
--a------ 2007-08-24 10:01 135168 C:\WINDOWS\system32\igfxtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
--a------ 2005-08-11 09:30 249856 c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
--a------ 2005-08-11 09:30 81920 C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MessengerPlus3]
--a------ 2007-11-09 16:47 190024 C:\Program Files\MessengerPlus! 3\MsgPlus.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
--a------ 2004-10-13 17:24 1694208 C:\Program Files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
--a------ 2007-10-18 11:34 5724184 C:\Program Files\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2007-03-01 14:57 153136 C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
--a------ 2007-05-10 23:03 8429568 C:\WINDOWS\system32\NvCpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
--a------ 2007-05-10 23:03 81920 C:\WINDOWS\system32\NvMcTray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
--a------ 2007-05-10 23:03 1626112 C:\WINDOWS\system32\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
--a------ 2007-08-24 10:00 131072 C:\WINDOWS\system32\igfxpers.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
-r------- 2006-11-14 10:21 16270848 C:\WINDOWS\RTHDCPL.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
-ra------ 2007-09-13 13:31 22880040 C:\Program Files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
-r------- 2006-05-16 11:04 2879488 C:\WINDOWS\SkyTel.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
-ra------ 2007-06-13 08:16 528384 C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2007-09-25 01:11 132496 C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WebCallDirect]
--a------ 2008-01-03 10:17 8922424 C:\Program Files\WebCallDirect.com\WebCallDirect\WebCallDirect.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\z-wrdialer]
--a------ 2007-01-18 12:18 483328 C:\Program Files\DialNet\wrdialer.exe

R2 TopWinPoETDriver;WinPoET PPPoE Optimized Driver;C:\WINDOWS\system32\DRIVERS\WrKPoET2000.sys [2004-09-16 16:56]
R2 UxTuneUp;TuneUp Theme Extension;C:\WINDOWS\System32\svchost.exe [2004-08-03 23:44]
R3 MouseCap;MouseCapture Driver;C:\WINDOWS\system32\Drivers\MouseCap.sys [2005-08-08 14:44]
R3 SNPP106;PC Camera (6029 CIF);C:\WINDOWS\system32\DRIVERS\snpp106.sys [2002-12-05 16:58]
R3 WrKPoET2000;WrKPoET2000;C:\Program Files\DialNet\WrKPoET2000.sys [2004-09-16 16:56]
R3 WRSWanDD;WinPoET PPPoE Adapter;C:\WINDOWS\system32\DRIVERS\WrKPoETNic2000.sys [2002-10-28 16:42]
S3 FPD;Fine Point Packet Service;C:\WINDOWS\system32\drivers\fpd.sys [2003-04-04 14:07]
S3 gdrv;gdrv;C:\WINDOWS\gdrv.sys [2007-09-22 15:39]
S3 igfx;igfx;C:\WINDOWS\system32\DRIVERS\igdkmd32.sys [2006-11-28 14:39]
S3 PsSdk30;PsSdk30;C:\WINDOWS\system32\Drivers\PsSdk30.drv []
S3 s115bus;Sony Ericsson Device 115 driver (WDM);C:\WINDOWS\system32\DRIVERS\s115bus.sys [2007-04-23 15:54]
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\s115mdfl.sys [2007-04-23 15:54]
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\s115mdm.sys [2007-04-23 15:54]
S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\s115mgmt.sys [2007-04-23 15:54]
S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\s115obex.sys [2007-04-23 15:54]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-15 07:25:08
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\DialNet\WrOS.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2008-02-15 7:26:31 - machine was rebooted
ComboFix-quarantined-files.txt 2008-02-15 06:26:28
.
2008-02-13 20:45:55 --- E O F ---

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:28:20, on 2008-02-15
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\A4Tech\Mouse\Amoumain.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\DialNet\WrOS.EXE
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Program Files\Avant Browser\avant.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {347A7938-9AA9-44B5-A806-BDEFA53042E5} - C:\WINDOWS\system32\gebyw.dll (file missing)
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Pomocnik rejestracji usługi Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [987aaaac] rundll32.exe "C:\WINDOWS\system32\spxyupwr.dll",b
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Wpis w blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Wpis w blogu w Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.pl/resources/virusscanner/kavwebscan_unicode.cab
O16 - DPF: {18506D80-9B80-11D4-82C2-0080C8D7ED4A} (GameDesire Roulette) - http://67.15.101.33/g_bin/pl/roulette_2_0_0_27.cab
O16 - DPF: {41ACD49D-1974-791A-0981-AA9872721044} (Ganymede Board Games) - http://67.15.101.33/g_bin/pl/boards_2_0_0_35.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1190445127187
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/webplayer/stage6/windows/DivXBrowserPlugin.cab
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1190445117625
O16 - DPF: {83AFB5CA-ED35-11D4-A452-0080C8D85045} (GameDesire Poker Games) - http://67.15.101.33/g_bin/pl/poker_2_0_0_49.cab
O16 - DPF: {A6212120-01D4-11D5-9A39-0080C8D85044} (GameDesire Slots 70th) - http://67.15.101.33/g_bin/pl/slots70_2_0_0_35.cab
O16 - DPF: {E23FABEE-12E3-33DA-DA12-195DAC123984} (GameDesire Mahjong) - http://67.15.101.33/g_bin/pl/mahjong_2_0_0_31.cab
O16 - DPF: {E95CF138-A587-4C54-8175-3AD80997CB14} (GameDesire Soccer) - http://67.15.101.33/g_bin/pl/soccer_2_0_0_19.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: WinPPPoverEthernet - Fine Point Technologies, Inc. - C:\Program Files\DialNet\WrOS.EXE

--
End of file - 9830 bytes

[ Dodano: Dzisiaj o 12:52 ]
Dzis zainstalowałem NOD32 i Zone Alarm i np. podczas oglądania filmu, rozmowy na GG, komp sie wiesza, pojawia się niebieski ekran z białymi literami i komputer sie resetuje wydając brzęczący dźwięk..

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:49:54, on 2008-02-15
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\DialNet\WrOS.EXE
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\A4Tech\Mouse\Amoumain.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\Program Files\BitComet\BitComet.exe
C:\Program Files\Avant Browser\avant.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Symantec\LiveUpdate\AUpdate.exe
C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\igfxsrvc.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {347A7938-9AA9-44B5-A806-BDEFA53042E5} - C:\WINDOWS\system32\gebyw.dll (file missing)
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Pomocnik rejestracji usługi Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [987aaaac] rundll32.exe "C:\WINDOWS\system32\spxyupwr.dll",b
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Wpis w blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Wpis w blogu w Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.pl/resources/virusscanner/kavwebscan_unicode.cab
O16 - DPF: {18506D80-9B80-11D4-82C2-0080C8D7ED4A} (GameDesire Roulette) - http://67.15.101.33/g_bin/pl/roulette_2_0_0_27.cab
O16 - DPF: {41ACD49D-1974-791A-0981-AA9872721044} (Ganymede Board Games) - http://67.15.101.33/g_bin/pl/boards_2_0_0_35.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1190445127187
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/webplayer/stage6/windows/DivXBrowserPlugin.cab
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1190445117625
O16 - DPF: {83AFB5CA-ED35-11D4-A452-0080C8D85045} (GameDesire Poker Games) - http://67.15.101.33/g_bin/pl/poker_2_0_0_49.cab
O16 - DPF: {A6212120-01D4-11D5-9A39-0080C8D85044} (GameDesire Slots 70th) - http://67.15.101.33/g_bin/pl/slots70_2_0_0_35.cab
O16 - DPF: {E23FABEE-12E3-33DA-DA12-195DAC123984} (GameDesire Mahjong) - http://67.15.101.33/g_bin/pl/mahjong_2_0_0_31.cab
O16 - DPF: {E95CF138-A587-4C54-8175-3AD80997CB14} (GameDesire Soccer) - http://67.15.101.33/g_bin/pl/soccer_2_0_0_19.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: WinPPPoverEthernet - Fine Point Technologies, Inc. - C:\Program Files\DialNet\WrOS.EXE

--
End of file - 8915 bytes

**Posty:** 18165 · przez **wojtas** 15 Lut 2008, 18:58

zastosuj:

smitfraudfix z opcji 2
(sciagasz -> uruchamiasz-> klikasz dowolny klawisz -> wpisujesz w programie 2 i enter potem czekasz chwile -> gdy wyskoczy pytanie w programie Do you want to clean the registry ? to wpisujesz literke Y i znowu enter i czekasz do wyskoczenia raportu (znak ze skan dobiegł konca)

oraz te skanery po kilka razy

VundoFix

VirtumundoBeGone

FixVundo

Otworz notatnik i wklej w nim to:

File::
C:\WINDOWS\system32\rwpuyxps.ini
C:\WINDOWS\system32\brwdgled.ini
C:\WINDOWS\system32\tnsxsxic.ini

Folder::
C:\Program Files\Common Files\Symantec Shared
C:\Documents and Settings\All Users\Dane aplikacji\Symantec
C:\Program Files\Symantec
C:\Program Files\Alwil Software

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BearFlix]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avast!]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avast!]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{347A7938-9AA9-44B5-A806-BDEFA53042E5}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Symantec PIF AlertEng"=-
"987aaaac"=-

Plik >>> zapisz jako CFScript.txt .Plik przeciągnij i upuść na ikonę ComboFixa (tak jak tu ) . odczekaj az wygeneruje sie nowy log i go daj na forum

**Posty:** 198 · przez **wilczy** 16 Lut 2008, 10:57

VundoFix, VirtumundoBeGone, FixVundo - nie odnalazły wirusa.

VBG:

[02/16/2008, 9:14:56] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\Administrator\Ustawienia lokalne\Temporary Internet Files\Content.IE5\4DY7W52B\VirtumundoBeGone[1].exe" )
[02/16/2008, 9:15:05] - Detected System Information:
[02/16/2008, 9:15:05] - Windows Version: 5.1.2600, Dodatek Service Pack 2
[02/16/2008, 9:15:05] - Current Username: Administrator (Admin)
[02/16/2008, 9:15:05] - Windows is in NORMAL mode.
[02/16/2008, 9:15:05] - Searching for Browser Helper Objects:
[02/16/2008, 9:15:05] - BHO 1: {055FD26D-3A88-4e15-963D-DC8493744B1D} (XTTBPos00 Class)
[02/16/2008, 9:15:05] - BHO 2: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[02/16/2008, 9:15:05] - BHO 3: {347A7938-9AA9-44B5-A806-BDEFA53042E5} ()
[02/16/2008, 9:15:05] - WARNING: BHO has no default name. Checking for Winlogon reference.
[02/16/2008, 9:15:05] - Checking for HKLM\...\Winlogon\Notify\gebyw
[02/16/2008, 9:15:05] - Key not found: HKLM\...\Winlogon\Notify\gebyw, continuing.
[02/16/2008, 9:15:05] - BHO 4: {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} (BitComet Helper)
[02/16/2008, 9:15:05] - BHO 5: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[02/16/2008, 9:15:05] - BHO 6: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Pomocnik rejestracji usługi Windows Live)
[02/16/2008, 9:15:05] - BHO 7: {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (Windows Live Toolbar Helper)
[02/16/2008, 9:15:05] - Finished Searching Browser Helper Objects
[02/16/2008, 9:15:05] - Finishing up...
[02/16/2008, 9:15:05] - Nothing found! Exiting...

ComboFix:

ComboFix 08-02-15.2 - Administrator 2008-02-16 9:47:11.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.413 [GMT 1:00]
Running from: C:\Documents and Settings\Administrator\Pulpit\ComboFix.exe
Command switches used :: C:\Documents and Settings\Administrator\Pulpit\CFScript.txt
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

FILE
C:\WINDOWS\system32\brwdgled.ini
C:\WINDOWS\system32\rwpuyxps.ini
C:\WINDOWS\system32\tnsxsxic.ini
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Dane aplikacji\Symantec
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\1.Configuration.Log.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\1.Product.Inventory.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\1.Settings.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\2.Product.Inventory.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\2.Settings.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\2008-02-03_Log.ALUSchedulerSvc.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\2008-02-04_Log.ALUSchedulerSvc.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\2008-02-05_Log.ALUSchedulerSvc.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\2008-02-06_Log.ALUSchedulerSvc.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\2008-02-07_Log.ALUSchedulerSvc.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\2008-02-08_Log.ALUSchedulerSvc.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\2008-02-09_Log.ALUSchedulerSvc.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\2008-02-10_Log.ALUSchedulerSvc.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\2008-02-11_Log.ALUSchedulerSvc.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\2008-02-12_Log.ALUSchedulerSvc.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\2008-02-13_Log.ALUSchedulerSvc.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\2008-02-14_Log.ALUSchedulerSvc.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\2008-02-15_Log.ALUSchedulerSvc.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\2008-02-16_Log.ALUSchedulerSvc.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\3.Product.Inventory.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\3.Settings.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Configuration.Log.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1170354439jtun_encc0123.x00.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1190257997jtun_encp0913.x00.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1190511555jtun_nav2k6en70921019.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1190564376jtun_nav2k6en70922023.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1190653564jtun_nav2k6en70923008.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1190735158jtun_nav2k6en70924019.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1190780811jtun_harenis06.x00
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1190830172jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1190834985jtun_nav2k6en70925017.m25
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1190909795jtun_nav2k6en70926021.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1190994745jtun_nav2k6en70927009.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1191083542jtun_nav2k6en70928016.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1191183891jtun_nav2k6en70929007.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1191258715jtun_nav2k6en70930018.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1191338853jtun_nav2k6en71001017.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1191433361jtun_ensi0924.x00.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1191445933jtun_nav2k6en71002017.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1191470255jtun_nisenid09md25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1191470255jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1191470855jtun_enale346.347.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1191610406jtun_symsubwz06.x00
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1191965265jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1192127009jtun_nav2k6en71003035.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1192164766jtun_nisenidcurd25.x86
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1192225316jtun_nav2k6en71011021.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1192319763jtun_nav2k6en71012023.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1192405178jtun_nav2k6en71013066.m25
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1192468566jtun_nav2k6en71014023.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1192490144jtun_ensr1001.x00.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1192547568jtun_nav2k6en71015009.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1192637712jtun_nav2k6en71016009.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1192743788jtun_nav2k6en71017018.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1192810490jtun_nav2k6en71018034.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1192857389jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1192897077jtun_nav2k6en71019009.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1192981897jtun_nav2k6en71020006.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1193070198jtun_nav2k6en71021005.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1193114438jtun_enale347.348.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1193156097jtun_nav2k6en71022017.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1193249452jtun_nav2k6en71023016.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1193334711jtun_nav2k6en71024017.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1193421771jtun_nav2k6en71025021.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1193502829jtun_nav2k6en71026021.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1193591080jtun_nav2k6en71027007.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1193675107jtun_nav2k6en71028005.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1193679946jtun_nas.x00.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1193856122jtun_enale348.349.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1193866543jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1193933794jtun_nav2k6en71029008.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1194019346jtun_nav2k6en71101016.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1194027668jtun_enale349.350.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1194108370jtun_nav2k6en71102016.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1194196156jtun_nav2k6en71103005.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1194282877jtun_nav2k6en71104009.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1194382590jtun_nav2k6en71105016.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1194460509jtun_nav2k6en71106025.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1194484244jtun_nisenid10md25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1194484244jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1194544746jtun_nav2k6en71107018.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1194562204jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1194626182jtun_nav2k6en71108016.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1194684041jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1194714003jtun_nav2k6en71109017.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1194803741jtun_nav2k6en71110007.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1194893465jtun_nav2k6en71111007.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1194989800jtun_nav2k6en71112017.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1194998126jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1195070853jtun_nav2k6en71113019.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1195148577jtun_nav2k6en71114020.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1195148577jtun_nav2k6ennful25.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1195233913jtun_nav2k6en71115016.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1195254326jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1195320699jtun_nav2k6en71116009.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1195417327jtun_nav2k6en71117004.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1195487017jtun_nav2k6en71118016.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1195499881jtun_enale350.351.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1195574903jtun_nav2k6en71119003.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1195618463jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1195660319jtun_nav2k6en71120002.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1196883725jtun_enale351.353.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1196913089jtun_nisenidfull25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1197447200jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1197647576jtun_nav2k6enncur25.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1197733628jtun_nav2k6en71214002.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1197818632jtun_nav2k6en71215002.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1197906667jtun_nav2k6en71216003.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1197920731jtun_enale353.354.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1197993696jtun_nav2k6en71217003.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1198086045jtun_nav2k6en71218007.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1198096221jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1198166572jtun_nav2k6en71219007.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1198252742jtun_nav2k6en71220003.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1198266349jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1198340411jtun_nav2k6en71221003.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1198423153jtun_nav2k6en71222003.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1198509522jtun_nav2k6en71223002.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1198595580jtun_nav2k6en71224002.m25.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1199920580jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1200093500jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1200334520jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1200521843jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1201068577jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1202248050jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1202422002jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1202514275jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\1202842846jtun_nisenidcurd25.x86.full.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\ad$20blocking$20def_1.0_english_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\ad$20blocking$20feature_2006.2.00_english_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\antispam$20feature_2006.2.00.1_english_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\antispam$20feature_2006.2.00_english_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\avenge$20microdefs25$20nav2006_microdefsb.curdefs_symalllanguages_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\avenge$20microdefs25$20nav2006_microdefsb.nov_symalllanguages_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\avenge$20microdefs25$20nav2006_microdefsb.old_symalllanguages_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\avenge$20microdefs25$20nav2006_microdefsb.sep_symalllanguages_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\ccpd$5fretail$5flicensing$5ftechnology_6.0_english_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\common$20client$20ccproxy_104.0.1_english_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\common$20client$20core_104.0.1_english_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\common$20client$20core_104.0.14_english_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\drm$5fcom$5fmodules_6.0_english_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\ids$20defs$202006$20microdefs25_microdefsb.curdefs_symalllanguages_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\ids$20defs$202006$20microdefs25_microdefsb.nov_symalllanguages_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\ids$20defs$202006$20microdefs25_microdefsb.oct_symalllanguages_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\ids$20defs$202006$20microdefs25_microdefsb.old_symalllanguages_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\ids$20defs$202006$20microdefs25_microdefsb.sep_symalllanguages_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\minitri.flg
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\navnt$202006_12.0.2.5_english_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\norton$20internet$20security$20other_2.0_english_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\norton$20internet$20security_9.0.3_english_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\norton$20protection$20center_2006.1.1_english_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\spam$20def_2.0_english_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\spbbc_2.0_symalllanguages_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\symantec$20trusted$20application$20list_1.1_english_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\symevent$20installer$20$2d$20consumer_12.0_symalllanguages_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\symevent$20installer$20$2d$20consumer_12.5_symalllanguages_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\symnet$20consumer_6.0.0_symalllanguages_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Downloads\symnet$20consumer_6.0.7_symalllanguages_livetri.zip
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Log.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Product.Inventory.LastGood.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\LiveUpdate\Settings.LiveUpdate
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PollManager\PollManager_Current.dat
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PollManager\PollManager_Job.dat
C:\Documents and Settings\All Users\Dane aplikacji\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\SVAR\SVAR_{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}.dat
C:\Program Files\Alwil Software
C:\Program Files\Common Files\Symantec Shared
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\ez_log.htm
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll
C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys
C:\Program Files\Common Files\Symantec Shared\Help\LUALL.CHM
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.loc
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertUi.dll
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\dcGlobal.dll
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\dcmhSvar.dll
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\dcProd.dll
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\mhSched.dll
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\mhUpgr.dll
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\nlc.ico
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifPep06.dll
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifPep07.dll
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PollMgr.dll
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\readme.txt
C:\Program Files\Common Files\Symantec Shared\SPManifests\AlertEng.grd
C:\Program Files\Common Files\Symantec Shared\SPManifests\AlertEng.sig
C:\Program Files\Common Files\Symantec Shared\SPManifests\AlertEng.spm
C:\Program Files\Common Files\Symantec Shared\SPManifests\eraser.grd
C:\Program Files\Common Files\Symantec Shared\SPManifests\eraser.sig
C:\Program Files\Common Files\Symantec Shared\SPManifests\eraser.spm
C:\Program Files\Common Files\Symantec Shared\SPManifests\LuSymProtect.grd
C:\Program Files\Common Files\Symantec Shared\SPManifests\LuSymProtect.sig
C:\Program Files\Common Files\Symantec Shared\SPManifests\LuSymProtect.spm
C:\Program Files\Common Files\Symantec Shared\SPManifests\PifCore.grd
C:\Program Files\Common Files\Symantec Shared\SPManifests\PifCore.sig
C:\Program Files\Common Files\Symantec Shared\SPManifests\PifCore.spm
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\CATALOG.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\CCERASER.DLL
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\ECBOOTIL.VXD
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\ECMSVR32.DLL
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\eeCtrl.sys
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\ERASER.grd
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\ERASER.sig
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\ERASER.spm
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\eraser.sys
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\ESRDEF.BIN
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\HH
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\NAVENG.EXP
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\NAVENG.SYS
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\NAVENG.VXD
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\NAVENG32.DLL
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\NAVEX15.EXP
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\NAVEX15.SYS
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\NAVEX15.VXD
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\NAVEX32A.DLL
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\NCSACERT.TXT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\SCRAUTH.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\SYMAVENG.CAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\SYMAVENG.INF
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\SymErase.cat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\SymErase.inf
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\TCDEFS.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\TCSCAN7.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\TCSCAN8.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\TCSCAN9.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\TECHNOTE.TXT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\TINF.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\TINFIDX.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\TINFL.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\TSCAN1.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\TSCAN1HD.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\V.GRD
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\V.SIG
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\VIRSCAN.INF
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\VIRSCAN1.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\VIRSCAN2.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\VIRSCAN3.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\VIRSCAN4.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\VIRSCAN5.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\VIRSCAN6.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\VIRSCAN7.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\VIRSCAN8.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\VIRSCAN9.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\VIRSCANT.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\WHATSNEW.TXT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071224.002\ZDONE.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\CATALOG.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\CCERASER.DLL
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\ECBOOTIL.VXD
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\ECMSVR32.DLL
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\eeCtrl.sys
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\ERASER.grd
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\ERASER.sig
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\ERASER.spm
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\eraser.sys
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\ESRDEF.BIN
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\HH
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\NAVENG.EXP
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\NAVENG.SYS
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\NAVENG.VXD
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\NAVENG32.DLL
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\NAVEX15.EXP
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\NAVEX15.SYS
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\NAVEX15.VXD
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\NAVEX32A.DLL
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\NCSACERT.TXT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\SCRAUTH.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\SYMAVENG.CAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\SYMAVENG.INF
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\SymErase.cat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\SymErase.inf
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\TCDEFS.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\TCSCAN7.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\TCSCAN8.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\TCSCAN9.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\TECHNOTE.TXT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\TINF.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\TINFIDX.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\TINFL.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\TSCAN1.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\TSCAN1HD.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\V.GRD
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\V.SIG
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\VIRSCAN.INF
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\VIRSCAN1.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\VIRSCAN2.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\VIRSCAN3.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\VIRSCAN4.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\VIRSCAN5.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\VIRSCAN6.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\VIRSCAN7.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\VIRSCAN8.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\VIRSCAN9.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\VIRSCANT.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\vscanmsx.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\WHATSNEW.TXT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20071225.004\ZDONE.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\catalog.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\cceraser.dll
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\ecbootil.vxd
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\ecmsvr32.dll
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\eeCtrl.sys
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\ERASER.grd
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\ERASER.sig
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\ERASER.spm
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\eraser.sys
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\esrdef.bin
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\hh
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\naveng.exp
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\naveng.sys
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\naveng.vxd
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\naveng32.dll
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\navex15.exp
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\navex15.sys
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\navex15.vxd
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\navex32a.dll
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\ncsacert.txt
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\scrauth.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\symaveng.cat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\symaveng.inf
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\SymErase.cat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\SymErase.inf
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\tcdefs.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\tcscan7.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\tcscan8.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\tcscan9.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\technote.txt
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\tinf.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\tinfidx.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\tinfl.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\tscan1.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\tscan1hd.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\v.grd
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\v.sig
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan.inf
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan1.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan2.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan3.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan4.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan5.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan6.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan7.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan8.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\virscan9.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\VIRSCANT.DAT
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\whatsnew.txt
C:\Program Files\Common Files\Symantec Shared\VirusDefs\BinHub\zdone.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\definfo.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\TextHub\virscant.dat
C:\Program Files\Common Files\Symantec Shared\VirusDefs\usage.dat
C:\Program Files\Symantec
C:\Program Files\Symantec\LiveUpdate\1.Settings.Default.LiveUpdate
C:\Program Files\Symantec\LiveUpdate\ALUNOTIFY.EXE
C:\Program Files\Symantec\LiveUpdate\ALUNOTIFYRES.DLL
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvcRes.dll
C:\Program Files\Symantec\LiveUpdate\AUPDATE.EXE
C:\Program Files\Symantec\LiveUpdate\AUPDATERES.DLL
C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE
C:\Program Files\Symantec\LiveUpdate\LSETUPRES.DLL
C:\Program Files\Symantec\LiveUpdate\LUALL.EXE
C:\Program Files\Symantec\LiveUpdate\LUALLRES.DLL
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Symantec\LiveUpdate\LuComServer_3_0.EXE
C:\Program Files\Symantec\LiveUpdate\LuComServerPS_3_0.DLL
C:\Program Files\Symantec\LiveUpdate\LuComServerRes.dll
C:\Program Files\Symantec\LiveUpdate\ludirloc.dat
C:\Program Files\Symantec\LiveUpdate\LUINFO.INF
C:\Program Files\Symantec\LiveUpdate\LUInit.exe
C:\Program Files\Symantec\LiveUpdate\LUInit.ini
C:\Program Files\Symantec\LiveUpdate\LUINSDLL.DLL
C:\Program Files\Symantec\LiveUpdate\LUINSDLLRES.DLL
C:\Program Files\Symantec\LiveUpdate\luinventoryinst.jar
C:\Program Files\Symantec\LiveUpdate\LuPreCon.DLL
C:\Program Files\Symantec\LiveUpdate\LuResult.txt
C:\Program Files\Symantec\LiveUpdate\LUSESAIntegration.dll
C:\Program Files\Symantec\LiveUpdate\LUSESAIntegrationRes.dll
C:\Program Files\Symantec\LiveUpdate\LUSETUP.EXE
C:\Program Files\Symantec\LiveUpdate\LUUPDATE.EXE
C:\Program Files\Symantec\LiveUpdate\MFC71.DLL
C:\Program Files\Symantec\LiveUpdate\MSVCP71.DLL
C:\Program Files\Symantec\LiveUpdate\MSVCR71.DLL
C:\Program Files\Symantec\LiveUpdate\NetDetectController_3_0.DLL
C:\Program Files\Symantec\LiveUpdate\ProductRegCom_3_0.DLL
C:\Program Files\Symantec\LiveUpdate\providerInst.jar
C:\Program Files\Symantec\LiveUpdate\README.TXT
C:\Program Files\Symantec\LiveUpdate\S32LIVE1.DLL
C:\Program Files\Symantec\LiveUpdate\S32LUCP1.CPL
C:\Program Files\Symantec\LiveUpdate\S32LUCP1RES.DLL
C:\Program Files\Symantec\LiveUpdate\S32LUIS1.DLL
C:\Program Files\Symantec\LiveUpdate\S32LUWI1.DLL
C:\Program Files\Symantec\LiveUpdate\SESA.Settings.LiveUpdate
C:\Program Files\Symantec\LiveUpdate\Settings.Default.LiveUpdate
C:\Program Files\Symantec\LiveUpdate\SymantecRootInstaller.exe
C:\Program Files\Symantec\LiveUpdate\SymantecRootInstaller.log
C:\Program Files\Symantec\LiveUpdate\SymantecRootInstallerRes.dll
C:\Program Files\Symantec\LiveUpdate\UNRAR.DLL
C:\Program Files\Symantec\LiveUpdate\winluproviderinst.jar
C:\WINDOWS\system32\brwdgled.ini
C:\WINDOWS\system32\rwpuyxps.ini
C:\WINDOWS\system32\tnsxsxic.ini

.
((((((((((((((((((((((((( Files Created from 2008-01-16 to 2008-02-16 )))))))))))))))))))))))))))))))
.

2008-02-16 09:04 . 2008-02-16 09:04 <DIR> d-------- C:\VundoFix Backups
2008-02-16 08:56 . 2008-02-16 09:02 2,202 --a------ C:\WINDOWS\system32\tmp.reg
2008-02-16 08:55 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2008-02-16 08:55 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2008-02-16 08:55 . 2008-02-08 23:55 85,504 --a------ C:\WINDOWS\system32\VACFix.exe
2008-02-16 08:55 . 2008-02-08 10:37 82,432 --a------ C:\WINDOWS\system32\IEDFix.exe
2008-02-16 08:55 . 2003-06-05 20:13 53,248 --a------ C:\WINDOWS\system32\Process.exe
2008-02-16 08:55 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2008-02-16 08:55 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2008-02-15 22:16 . 2008-02-15 22:16 <DIR> d-------- C:\Documents and Settings\Administrator\Dane aplikacji\Corel
2008-02-15 22:16 . 2008-02-15 22:16 848 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys
2008-02-15 08:28 . 2008-02-16 02:26 2,378 --a------ C:\rollback.ini
2008-02-15 08:09 . 2008-02-15 08:45 <DIR> d-------- C:\Documents and Settings\Administrator\Dane aplikacji\MailFrontier
2008-02-15 08:07 . 2008-02-15 11:53 9,737,760 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2008-02-15 08:07 . 2008-02-15 08:07 32 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
2008-02-15 08:03 . 2008-02-15 08:03 <DIR> d-------- C:\Program Files\Zone Labs
2008-02-15 08:03 . 2008-02-15 11:58 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\MailFrontier
2008-02-15 08:02 . 2008-02-16 09:31 <DIR> d-------- C:\WINDOWS\Internet Logs
2008-02-15 07:47 . 2008-02-15 07:47 <DIR> d-------- C:\Programas
2008-02-15 07:46 . 2008-02-15 07:46 <DIR> d-------- C:\Documents and Settings\Administrator\Dane aplikacji\ESET
2008-02-15 07:40 . 2008-02-15 07:40 <DIR> d-------- C:\Program Files\ESET
2008-02-15 07:40 . 2008-02-15 07:40 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\ESET
2008-02-15 07:33 . 2008-02-15 07:33 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Avg7
2008-02-14 22:36 . 2008-02-14 22:36 <DIR> d-------- C:\Program Files\Trend Micro
2008-02-14 22:31 . 2008-02-14 22:31 <DIR> d-------- C:\Program Files\CCleaner
2008-02-10 20:09 . 2008-02-10 20:09 <DIR> d-------- C:\Program Files\Audacity
2008-02-09 21:26 . 2008-02-09 21:26 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Corel
2008-02-09 21:23 . 2008-02-09 21:23 <DIR> d-------- C:\Program Files\Corel
2008-02-09 21:23 . 2008-02-09 21:24 <DIR> d-------- C:\Program Files\Common Files\Corel
2008-02-09 21:18 . 2008-02-09 21:18 <DIR> d-------- C:\Program Files\MagicDisc
2008-02-09 21:18 . 2006-09-22 14:06 92,160 --a------ C:\WINDOWS\system32\drivers\mcdbus.sys
2008-02-09 08:49 . 1998-10-07 12:54 327,168 --a------ C:\WINDOWS\IsUn0415.exe
2008-02-09 08:44 . 2008-02-09 08:45 <DIR> d-------- C:\Program Files\DAEMON Tools Lite
2008-02-09 08:44 . 2008-02-09 08:44 <DIR> d-------- C:\Documents and Settings\Administrator\Dane aplikacji\DAEMON Tools
2008-02-09 08:38 . 2008-02-09 08:38 716,272 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2008-02-08 15:29 . 2008-02-08 15:30 <DIR> d-------- C:\Program Files\Arial Sound Recorder
2008-02-08 15:23 . 2008-02-08 15:23 <DIR> d-------- C:\Program Files\Common Files\snpp106
2008-02-08 15:23 . 1998-06-11 23:15 307,200 --a------ C:\WINDOWS\vidcap32.exe
2008-02-08 15:23 . 2002-12-05 16:58 239,488 --a------ C:\WINDOWS\system32\drivers\snpp106.sys
2008-02-08 15:23 . 2002-10-15 17:14 120,874 --a------ C:\WINDOWS\usnpp106.exe
2008-02-08 15:23 . 2002-11-25 17:35 61,440 --a------ C:\WINDOWS\system32\dsnpp106.dll
2008-02-08 15:23 . 2002-07-03 11:44 53,248 --a------ C:\WINDOWS\amcap.exe
2008-02-08 15:23 . 2002-11-25 17:40 49,152 --a------ C:\WINDOWS\system32\vsnpp106.dll
2008-02-08 15:23 . 2002-11-25 18:10 28,672 --a------ C:\WINDOWS\vsnpp106.exe
2008-02-08 15:23 . 2002-11-25 17:43 28,672 --a------ C:\WINDOWS\system32\dsnpp106.ax
2008-02-08 15:23 . 2002-07-11 14:20 20,480 --a------ C:\WINDOWS\dsnpp106.exe
2008-02-08 15:23 . 2002-07-08 14:08 15,494 --a------ C:\WINDOWS\snpp106.ini
2008-02-08 15:23 . 2002-11-26 11:41 12,827 --a------ C:\WINDOWS\snpp106.src
2008-02-05 19:46 . 2008-02-05 19:46 <DIR> d-------- C:\Program Files\AC3Filter
2008-02-05 19:46 . 2007-08-18 08:54 380,928 --a------ C:\WINDOWS\system32\ac3filter.acm
2008-02-05 19:04 . 2008-02-10 08:22 <DIR> d-------- C:\Documents and Settings\Administrator\Dane aplikacji\gtk-2.0
2008-02-05 19:04 . 2008-02-05 19:04 <DIR> d-------- C:\Documents and Settings\Administrator\.thumbnails
2008-02-05 19:03 . 2008-02-05 19:03 <DIR> d-------- C:\Program Files\GIMP-2.0
2008-02-05 19:03 . 2008-02-10 08:24 <DIR> d-------- C:\Documents and Settings\Administrator\.gimp-2.4
2008-01-31 15:55 . 2008-01-31 15:55 <DIR> d-------- C:\Program Files\Ricochet Xtreme
2008-01-31 15:55 . 2008-01-31 15:55 <DIR> d-------- C:\Program Files\ReflexiveArcade
2008-01-30 16:05 . 2008-01-30 16:05 <DIR> d-------- C:\Program Files\AT&T WorldNet Setup
2008-01-30 16:05 . 2008-01-30 16:05 21,840 --a------ C:\WINDOWS\system32\SIntfNT.dll
2008-01-30 16:05 . 2008-01-30 16:05 17,212 --a------ C:\WINDOWS\system32\SIntf32.dll
2008-01-30 16:05 . 2008-01-30 16:05 12,067 --a------ C:\WINDOWS\system32\SIntf16.dll
2008-01-30 16:04 . 2008-01-30 16:04 216 --a------ C:\WINDOWS\SIERRA.INI
2008-01-27 16:41 . 2008-02-15 16:36 38 --a------ C:\WINDOWS\avisplitter.INI
2008-01-27 16:28 . 2008-01-27 16:28 635 --a------ C:\WINDOWS\Spidey.INI
2008-01-25 21:51 . 2008-01-25 21:51 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer
2008-01-25 07:00 . 2008-01-25 07:00 <DIR> d-------- C:\Xili
2008-01-20 13:59 . 2008-01-20 13:59 168 --a------ C:\WINDOWS\system32\proc-322085835.bin
2008-01-20 13:48 . 2008-01-20 13:48 <DIR> d-------- C:\Program Files\K-Lite Codec Pack
2008-01-20 10:56 . 2008-01-20 10:56 <DIR> d-------- C:\Documents and Settings\Administrator\Dane aplikacji\Teleca
2008-01-20 10:55 . 2007-04-23 15:54 108,680 -ra------ C:\WINDOWS\system32\drivers\s115mdm.sys
2008-01-20 10:55 . 2007-04-23 15:54 100,488 -ra------ C:\WINDOWS\system32\drivers\s115mgmt.sys
2008-01-20 10:55 . 2007-04-23 15:54 98,568 -ra------ C:\WINDOWS\system32\drivers\s115obex.sys
2008-01-20 10:55 . 2007-04-23 15:54 83,208 -ra------ C:\WINDOWS\system32\drivers\s115bus.sys
2008-01-20 10:55 . 2007-04-23 15:54 15,112 -ra------ C:\WINDOWS\system32\drivers\s115mdfl.sys
2008-01-20 10:55 . 2007-04-23 15:54 12,424 -ra------ C:\WINDOWS\system32\drivers\s115whnt.sys
2008-01-20 10:55 . 2007-04-23 15:54 12,424 -ra------ C:\WINDOWS\system32\drivers\s115wh.sys
2008-01-20 10:55 . 2007-04-23 15:54 12,424 -ra------ C:\WINDOWS\system32\drivers\s115cmnt.sys
2008-01-20 10:55 . 2007-04-23 15:54 12,424 -ra------ C:\WINDOWS\system32\drivers\s115cm.sys
2008-01-20 10:53 . 2008-01-20 10:53 <DIR> d-------- C:\WINDOWS\Downloaded Installations
2008-01-20 10:53 . 2008-01-20 10:54 <DIR> d-------- C:\Program Files\Common Files\Teleca Shared
2008-01-20 10:53 . 2008-01-20 10:53 <DIR> d-------- C:\Program Files\Common Files\Sony Ericsson Shared
2008-01-20 10:53 . 2008-01-20 10:53 <DIR> d-------- C:\Documents and Settings\Administrator\Dane aplikacji\Sony Ericsson
2008-01-20 10:51 . 2008-01-20 10:53 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Teleca
2008-01-20 10:51 . 2008-01-20 10:53 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Sony Ericsson
2008-01-20 10:41 . 2008-01-20 10:53 <DIR> d-------- C:\Program Files\Sony Ericsson
2008-01-20 10:34 . 2008-01-20 10:34 <DIR> d-------- C:\Program Files\MyPhoneExplorer
2008-01-20 10:34 . 2008-01-20 10:59 <DIR> d-------- C:\Documents and Settings\Administrator\Dane aplikacji\MyPhoneExplorer

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-16 08:27 --------- d-----w C:\Program Files\Wolfenstein - Enemy Territory
2008-02-15 20:33 --------- d-----w C:\Program Files\DialNet
2008-02-15 17:55 1,840,128 ----a-w C:\WINDOWS\Internet Logs\xDB3.tmp
2008-02-15 17:25 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\Skype
2008-02-15 10:56 2,473,984 ----a-w C:\WINDOWS\Internet Logs\xDB1.tmp
2008-02-15 10:56 1,841,152 ----a-w C:\WINDOWS\Internet Logs\xDB2.tmp
2008-02-15 10:55 --------- d-----w C:\Program Files\Gadu-Gadu
2008-02-15 06:27 --------- d-----w C:\Program Files\ICQToolbar
2008-02-12 08:51 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\GanymedeNet
2008-02-11 08:42 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\AdobeUM
2008-02-10 10:55 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-02-09 14:16 --------- d-----w C:\Program Files\NAPI-PROJEKT
2008-02-02 14:41 --------- d-----w C:\Program Files\Xfire
2008-01-31 17:17 --------- d-----w C:\Program Files\Ganymede
2008-01-18 11:56 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\Xfire
2008-01-17 14:39 --------- d-----w C:\Program Files\BitComet
2008-01-17 14:39 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\Hamachi
2008-01-16 21:40 --------- d-----w C:\Program Files\DivX
2008-01-13 14:19 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\WebCallDirect
2008-01-13 14:08 --------- d-----w C:\Program Files\WebCallDirect.com
2008-01-11 00:29 54,608 ----a-w C:\WINDOWS\system32\xfcodec.dll
2008-01-03 06:05 --------- d-----w C:\Program Files\WinAVIVideoConverter
2008-01-03 05:55 --------- d-----w C:\Program Files\QuickTime
2008-01-03 05:47 --------- d-----w C:\Program Files\AVOne
2007-12-30 19:48 --------- d-----w C:\Program Files\Hamachi
2007-12-30 19:47 25,280 ----a-w C:\WINDOWS\system32\drivers\hamachi.sys
2007-12-29 19:58 --------- d-----w C:\Program Files\A4Tech
2007-12-27 18:56 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\ICQ Toolbar
2007-12-25 15:58 --------- d-----w C:\Program Files\ICQ6
2007-12-25 15:58 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\ICQ
2007-12-25 13:08 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\Ventrilo
2007-12-25 13:07 --------- d-----w C:\Program Files\Ventrilo
2007-12-25 13:07 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2007-12-24 12:49 7,680 ----a-w C:\WINDOWS\system32\ff_vfw.dll
2007-12-22 10:33 --------- d-----w C:\Program Files\Avant Browser
2007-12-21 07:21 71,176 ----a-w C:\WINDOWS\system32\drivers\epfw.sys
2007-12-21 07:21 53,768 ----a-w C:\WINDOWS\system32\drivers\epfwtdi.sys
2007-12-21 07:21 30,728 ----a-w C:\WINDOWS\system32\drivers\epfwndis.sys
2007-12-21 07:20 30,216 ----a-w C:\WINDOWS\system32\drivers\easdrv.sys
2007-12-21 07:19 39,944 ----a-w C:\WINDOWS\system32\drivers\eamon.sys
2007-12-19 21:57 --------- d-----w C:\Program Files\Asprate
2007-12-18 09:51 179,584 ----a-w C:\WINDOWS\system32\drivers\mrxdav.sys
2007-12-07 01:08 662,016 ----a-w C:\WINDOWS\system32\wininet.dll
2007-12-04 18:42 550,912 ----a-w C:\WINDOWS\system32\oleaut32.dll
2007-12-04 01:33 682,496 ----a-w C:\WINDOWS\system32\divx.dll
2007-11-29 22:30 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
2007-11-29 22:30 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
2007-11-29 22:30 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
2007-11-29 22:28 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 18:03 152872]
"Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-07-09 08:39 2119104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WheelMouse"="C:\Program Files\A4Tech\Mouse\Amoumain.exe" [2006-12-26 16:08 196608]
"egui"="C:\Program Files\ESET\ESET Smart Security\egui.exe" [2007-12-21 08:21 1443072]
"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-11-14 16:05 919016]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 23:44 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=MsgPlusLoader.dll

[HKLM\~\startupfolder\C:^Documents and Settings^Administrator^Menu Start^Programy^Autostart^GIGABYTE VGA Utility.lnk]
path=C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\GIGABYTE VGA Utility.lnk
backup=C:\WINDOWS\pss\GIGABYTE VGA Utility.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Administrator^Menu Start^Programy^Autostart^hamachi.lnk]
path=C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\hamachi.lnk
backup=C:\WINDOWS\pss\hamachi.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Administrator^Menu Start^Programy^Autostart^MagicDisc.lnk]
path=C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\MagicDisc.lnk
backup=C:\WINDOWS\pss\MagicDisc.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Administrator^Menu Start^Programy^Autostart^Xfire.lnk]
path=C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\Xfire.lnk
backup=C:\WINDOWS\pss\Xfire.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Microsoft Office.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup
--a------ 2004-11-05 11:29 110592 C:\PROGRA~1\DialNet\FPLICE~1.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\987aaaac]
C:\WINDOWS\system32\bmhgadnd.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\a-winpoet-service]
--a------ 2007-01-18 09:26 405504 C:\Program Files\DialNet\winpppoverethernet.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
-r------- 2005-05-03 11:43 69632 C:\WINDOWS\Alcmtr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BearShare]
--a------ 2006-08-01 16:04 3313664 C:\Program Files\BearShare\BearShare.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
--a------ 2004-08-03 23:44 15360 C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
--a------ 2008-01-17 17:51 486856 C:\Program Files\DAEMON Tools Lite\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadu-Gadu]
--a------ 2007-07-09 08:39 2119104 C:\Program Files\Gadu-Gadu\gg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
--a------ 2007-08-24 10:01 159744 C:\WINDOWS\system32\hkcmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
--a------ 2007-11-21 01:47 172280 C:\Program Files\ICQ6\ICQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
--a------ 2007-08-24 10:01 135168 C:\WINDOWS\system32\igfxtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
--a------ 2005-08-11 09:30 249856 c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
--a------ 2005-08-11 09:30 81920 C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MessengerPlus3]
--a------ 2007-11-09 16:47 190024 C:\Program Files\MessengerPlus! 3\MsgPlus.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
--a------ 2004-10-13 17:24 1694208 C:\Program Files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
--a------ 2007-10-18 11:34 5724184 C:\Program Files\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2007-03-01 14:57 153136 C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
--a------ 2007-05-10 23:03 8429568 C:\WINDOWS\system32\NvCpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
--a------ 2007-05-10 23:03 81920 C:\WINDOWS\system32\NvMcTray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
--a------ 2007-05-10 23:03 1626112 C:\WINDOWS\system32\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
--a------ 2007-08-24 10:00 131072 C:\WINDOWS\system32\igfxpers.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
-r------- 2006-11-14 10:21 16270848 C:\WINDOWS\RTHDCPL.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
-ra------ 2007-09-13 13:31 22880040 C:\Program Files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
-r------- 2006-05-16 11:04 2879488 C:\WINDOWS\SkyTel.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
-ra------ 2007-06-13 08:16 528384 C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2007-09-25 01:11 132496 C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WebCallDirect]
--a------ 2008-01-03 10:17 8922424 C:\Program Files\WebCallDirect.com\WebCallDirect\WebCallDirect.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\z-wrdialer]
--a------ 2007-01-18 12:18 483328 C:\Program Files\DialNet\wrdialer.exe

R2 TopWinPoETDriver;WinPoET PPPoE Optimized Driver;C:\WINDOWS\system32\DRIVERS\WrKPoET2000.sys [2004-09-16 16:56]
R2 UxTuneUp;TuneUp Theme Extension;C:\WINDOWS\System32\svchost.exe [2004-08-03 23:44]
R3 MouseCap;MouseCapture Driver;C:\WINDOWS\system32\Drivers\MouseCap.sys [2005-08-08 14:44]
R3 SNPP106;PC Camera (6029 CIF);C:\WINDOWS\system32\DRIVERS\snpp106.sys [2002-12-05 16:58]
R3 WrKPoET2000;WrKPoET2000;C:\Program Files\DialNet\WrKPoET2000.sys [2004-09-16 16:56]
R3 WRSWanDD;WinPoET PPPoE Adapter;C:\WINDOWS\system32\DRIVERS\WrKPoETNic2000.sys [2002-10-28 16:42]
S3 FPD;Fine Point Packet Service;C:\WINDOWS\system32\drivers\fpd.sys [2003-04-04 14:07]
S3 gdrv;gdrv;C:\WINDOWS\gdrv.sys [2007-09-22 15:39]
S3 igfx;igfx;C:\WINDOWS\system32\DRIVERS\igdkmd32.sys [2006-11-28 14:39]
S3 PsSdk30;PsSdk30;C:\WINDOWS\system32\Drivers\PsSdk30.drv []
S3 s115bus;Sony Ericsson Device 115 driver (WDM);C:\WINDOWS\system32\DRIVERS\s115bus.sys [2007-04-23 15:54]
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\s115mdfl.sys [2007-04-23 15:54]
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\s115mdm.sys [2007-04-23 15:54]
S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\s115mgmt.sys [2007-04-23 15:54]
S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\s115obex.sys [2007-04-23 15:54]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-16 09:54:08
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-02-16 9:55:18
ComboFix-quarantined-files.txt 2008-02-16 08:55:14
ComboFix2.txt 2008-02-15 06:26:32
.
2008-02-13 20:45:55 --- E O F ---

**Posty:** 18165 · przez **wojtas** 16 Lut 2008, 16:55

wklej do notatnika

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\987aaaac]

w notatniku u góry>>>plik zapisz jako>>>Zmien rozszerzenie z TXT na Wszystkie pliki *.* >>> Zapisz pod nazwą FIX.REG

Klikasz dwa razy na powstały plik fix i dodajesz go do rejestru....

Autor postu otrzymał pochwałę

**Posty:** 198 · przez **wilczy** 16 Lut 2008, 22:35

Gotowe^^

proszę o sprawdzenie loga.

proszę o sprawdzenie loga.

Kto jest na forum