ok
dzięki za szybką odp[owiedx
wykonam wszystkie instrukcjie podane
ale pewnie już dziś mi się nie uda wszystkiego wykonać
proszę o cierpliwość i dalszą pomoc
dzięki
[ Dodano: Dzisiaj o 11:18 ] witam ponownie
o ile dobrze wszystkie instrukcje wykonałem to powinienem je tzn te logi z tych 3 programików wrzucić poniżej więc zamieszcam je niżej
po sprawdzeniu przez Was proszę o dalsze instrukcje
z góry dziękuję
Logfile of HijackThis v1.99.1
Scan saved at 11:09:55, on 2008-03-22
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\WINDOWS\PowerS.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\LClock\LClock.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\PeerGuardian2\pg2.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe
C:\WINDOWS\explorer.exe
C:\niezbędnik\instalki\antywirusy i logi\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Soltek] C:\WINDOWS\System32\autorun.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [PowerS] C:\WINDOWS\PowerS.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [LClock] C:\Program Files\LClock\LClock.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PeerGuardian] C:\Program Files\PeerGuardian2\pg2.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {3D8700FB-86A4-4CB4-B738-6F0FC016AC7D} - http://slimak.onet.pl/_m/wirusy/ArcaOnline.cab
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
ComboFix 08-03-21.2 - Kemuel 2008-03-22 11:05:44.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.264 [GMT 1:00]
Running from: C:\niezbędnik\instalki\antywirusy i logi\Combofix\Combo-Fix.exe
* Created a new restore point
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((( Files Created from 2008-02-22 to 2008-03-22 )))))))))))))))))))))))))))))))
.
2008-03-22 10:54 . 2004-08-03 23:44 578,560 --a--c--- C:\WINDOWS\system32\dllcache\user32.dll
2008-03-22 10:53 . 2008-03-22 10:53 <DIR> d-------- C:\WINDOWS\ERUNT
2008-03-22 10:49 . 2008-03-22 11:02 <DIR> d-------- C:\SDFix
2008-03-21 20:57 . 2008-03-21 21:10 <DIR> d-------- C:\Program Files\ArcaMicroScan
2008-03-17 16:40 . 2008-03-17 17:05 <DIR> d-------- C:\Documents and Settings\Kemuel\Dane aplikacji\TuxPaint
2008-03-17 16:39 . 2008-03-21 10:54 <DIR> d-------- C:\Program Files\TuxPaint
2008-03-14 12:05 . 1999-12-17 09:13 86,016 --a------ C:\WINDOWS\unvise32.exe
2008-03-13 14:56 . 2008-03-13 14:56 32,768 --a------ C:\t3cc
2008-03-04 17:19 . 2008-03-04 17:19 65,536 --a------ C:\t27g
2008-03-03 12:41 . 2008-03-03 14:45 <DIR> d-------- C:\Program Files\HLSW
2008-02-23 17:50 . 2008-02-23 17:50 <DIR> d-------- C:\Documents and Settings\Kemuel\Dane aplikacji\teamspeak2
2008-02-23 17:50 . 2008-02-23 17:50 34,064 --a------ C:\WINDOWS\system32\lhacm.acm
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-22 09:48 --------- d-----w C:\Program Files\PeerGuardian2
2008-03-22 08:50 --------- d-----w C:\Documents and Settings\Kemuel\Dane aplikacji\AVG7
2008-03-20 17:24 --------- d-----w C:\Documents and Settings\Kemuel\Dane aplikacji\Azureus
2008-03-20 14:06 --------- d-----w C:\Program Files\Gadu-Gadu
2008-03-07 18:34 --------- d-----w C:\Program Files\Azureus
2008-02-26 13:10 --------- d-----w C:\Documents and Settings\Kemuel\Dane aplikacji\BearShare
2008-02-17 12:12 --------- d-----w C:\Program Files\Haali
2008-02-17 11:06 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Azureus
2008-02-10 14:04 --------- d-----w C:\Program Files\Sierra On-Line
2008-02-09 20:29 43,520 ----a-w C:\WINDOWS\system32\CmdLineExt03.dll
2008-02-06 09:18 --------- d-----w C:\Program Files\QuickTime
2008-02-04 09:41 --------- d-----w C:\Documents and Settings\Kemuel\Dane aplikacji\Nokia Multimedia Player
2008-01-30 19:21 --------- d-----w C:\Program Files\Acala 3GP Movies Free
2008-01-25 17:36 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-26 10:42 21,840 ----atw C:\WINDOWS\system32\SIntfNT.dll
2007-12-26 10:42 17,212 ----atw C:\WINDOWS\system32\SIntf32.dll
2007-12-26 10:42 12,067 ----atw C:\WINDOWS\system32\SIntf16.dll
2004-10-01 13:00 40,960 ----a-w C:\Program Files\Uninstall_CDS.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 23:44 15360]
"PeerGuardian"="C:\Program Files\PeerGuardian2\pg2.exe" [2005-04-23 19:03 1175552]
"PcSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 09:17 1241088]
"NBJ"="C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" [2005-06-02 15:03 1957888]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="NvQTwk" []
"nwiz"="nwiz.exe" [2002-03-09 02:53 364544 C:\WINDOWS\system32\nwiz.exe]
"Soltek"="C:\WINDOWS\System32\autorun.exe" [2001-10-30 07:00 61440]
"WINDVDPatch"="CTHELPER.EXE" [2002-02-07 19:01 40960 C:\WINDOWS\system32\CTHELPER.EXE]
"UpdReg"="C:\WINDOWS\UpdReg.EXE" [2000-05-11 00:00 90112]
"Jet Detection"="C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe" [2001-10-04 00:00 28672]
"CTStartup"="C:\Program Files\Creative\Splash Screen\CTEaxSpl.exe" [2001-12-20 00:00 28672]
"PowerS"="C:\WINDOWS\PowerS.exe" [2001-08-03 16:56 159800]
"InCD"="C:\Program Files\Ahead\InCD\InCD.exe" [2005-07-08 15:25 1397760]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11 132496]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-12-22 08:25 579072]
"LClock"="C:\Program Files\LClock\LClock.exe" [2004-09-20 00:27 65536]
"PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-06-18 14:10 271360]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-03 23:44 15360]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2007-10-27 07:25 219136]
"Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 09:17 1241088]
C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
InterVideo WinCinema Manager.lnk - C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe [2007-09-23 12:26:27 73728]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Trans]
C:\Program Files\Trans\trans.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UVS10 Preload]
--------- 2006-03-07 00:52 36864 C:\Program Files\Ulead Systems\Ulead VideoStudio 10\uvPL.exe
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avginet.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgemc.exe"=
R1 VIAPFD;VIAPFD;C:\WINDOWS\system32\Drivers\VIAPFD.SYS [2001-12-18 07:45]
R2 BT848;BtCap, WDM Video Capture;C:\WINDOWS\system32\drivers\BT848.SYS [2002-02-22 12:36]
R2 BTTUNER;BtTuner, WDM TV Tuner;C:\WINDOWS\system32\drivers\BTTUNER.SYS [2002-02-22 12:36]
R2 BTXBAR;BtXBar, WDM Crossbar;C:\WINDOWS\system32\drivers\BTXBAR.SYS [2002-02-22 12:36]
S3 rtport;rtport;C:\WINDOWS\system32\drivers\rtport.sys [2007-09-23 11:04]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{dbd12831-af1f-11dc-983a-00e04cee6d96}]
\Shell\AutoRun\command - G:\EXPLORER.EXE
\Shell\explore\Command - G:\EXPLORER.EXE
\Shell\open\Command - G:\EXPLORER.EXE
*Newly Created Service* - PGFILTER
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"C:\Program Files\Common Files\LightScribe\LSRunOnce.exe"
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-22 11:06:58
Windows 5.1.2600 Dodatek Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
CTStartup = C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run???h??????s?????\?w? ?w???????w???w4???????.??w4???????4???TA?s4????????&7????wd??w????????\???\??????????????w-??w\???\???????(?`??????C@?\???\??????s????\??????s\????&7?A??s?&7??C@?x???`|?w\?????@
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
PROCESS: C:\WINDOWS\explorer.exe
-> C:\Program Files\LClock\LC.dll
.
Completion time: 2008-03-22 11:07:42
ComboFix-quarantined-files.txt 2008-03-22 10:07:25
SDFix: Version 1.159
Run by Kemuel on 2008-03-22 at 10:55
Microsoft Windows XP [Wersja 5.1.2600]
Running From: C:\SDFix
Checking Services :
Name:
msupdate
Path:
c:\windows\system32\mssrv32.exe
msupdate - Deleted
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting
Checking Files :
Trojan Files Found:
C:\Documents and Settings\Kemuel\nax.exe - Deleted
C:\WINDOWS\system32\autorun.ini - Deleted
C:\WINDOWS\system32\mssrv32.exe - Deleted
Removing Temp Files
ADS Check :
Final Check :
catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-22 11:00:22
Windows 5.1.2600 Dodatek Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
scanning hidden registry entries ...
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\A\1\5\1c]
"Order"=hex:08,00,00,00,02,00,00,00,0c,00,00,00,01,00,00,00,00,00,00,00
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0
Remaining Services :
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Grisoft\\AVG7\\avginet.exe"="C:\\Program Files\\Grisoft\\AVG7\\avginet.exe:*:Enabled:avginet.exe"
"C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe"="C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe:*:Enabled:avgamsvr.exe"
"C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe"="C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe:*:Enabled:avgcc.exe"
"C:\\Program Files\\Grisoft\\AVG7\\avgemc.exe"="C:\\Program Files\\Grisoft\\AVG7\\avgemc.exe:*:Enabled:avgemc.exe"
"C:\\Documents and Settings\\Kemuel\\Ustawienia lokalne\\Temp\\nsd3.tmp\\utorrent.exe"="C:\\Documents and Settings\\Kemuel\\Ustawienia lokalne\\Temp\\nsd3.tmp\\utorrent.exe:*:Enabled:uTorrent"
"C:\\Documents and Settings\\Kemuel\\Ustawienia lokalne\\Temp\\nso6B.tmp\\utorrent.exe"="C:\\Documents and Settings\\Kemuel\\Ustawienia lokalne\\Temp\\nso6B.tmp\\utorrent.exe:*:Enabled:uTorrent"
"C:\\Documents and Settings\\Kemuel\\Ustawienia lokalne\\Temp\\nso7.tmp\\utorrent.exe"="C:\\Documents and Settings\\Kemuel\\Ustawienia lokalne\\Temp\\nso7.tmp\\utorrent.exe:*:Enabled:uTorrent"
"C:\\Documents and Settings\\Kemuel\\Ustawienia lokalne\\Temp\\nskA.tmp\\utorrent.exe"="C:\\Documents and Settings\\Kemuel\\Ustawienia lokalne\\Temp\\nskA.tmp\\utorrent.exe:*:Enabled:uTorrent"
"C:\\Documents and Settings\\Kemuel\\Ustawienia lokalne\\Temp\\nsr12.tmp\\utorrent.exe"="C:\\Documents and Settings\\Kemuel\\Ustawienia lokalne\\Temp\\nsr12.tmp\\utorrent.exe:*:Enabled:uTorrent"
"C:\\Documents and Settings\\Kemuel\\Ustawienia lokalne\\Temp\\nsv14.tmp\\utorrent.exe"="C:\\Documents and Settings\\Kemuel\\Ustawienia lokalne\\Temp\\nsv14.tmp\\utorrent.exe:*:Enabled:uTorrent"
"C:\\Documents and Settings\\Kemuel\\Ustawienia lokalne\\Temp\\nsh19.tmp\\utorrent.exe"="C:\\Documents and Settings\\Kemuel\\Ustawienia lokalne\\Temp\\nsh19.tmp\\utorrent.exe:*:Enabled:uTorrent"
"C:\\Documents and Settings\\Kemuel\\Ustawienia lokalne\\Temp\\nsj23.tmp\\utorrent.exe"="C:\\Documents and Settings\\Kemuel\\Ustawienia lokalne\\Temp\\nsj23.tmp\\utorrent.exe:*:Enabled:uTorrent"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
Remaining Files :
File Backups: - C:\SDFix\backups\backups.zip
Files with Hidden Attributes :
Tue 3 Aug 2004 1,667,584 ..SH. --- "C:\Program Files\Messenger\msmsgs.exe"
Tue 3 Aug 2004 60,928 A.SH. --- "C:\Program Files\Outlook Express\msimn.exe"
Sat 9 Feb 2008 22,510 A..H. --- "C:\Documents and Settings\Kemuel\Pulpit\Jaggo7\D2\AUTOMAP0.TMP"
Sat 9 Feb 2008 592 A..H. --- "C:\Documents and Settings\Kemuel\Pulpit\Jaggo7\D2\AUTOMAP1.TMP"
Finished!
