prosze o sprawdzenie loga, zamulony komp

[karpiaq]

Witam mam problem z kompem otóz jakos wolno chodzi

Kod: Zaznacz wszystko

Logfile of HijackThis v1.99.1
Scan saved at 19:36:40, on 2007-11-24
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\LEXPPS.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\Explorer.EXE
C:\WINNT\SOUNDMAN.EXE
C:\WINNT\system32\LXSUPMON.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINNT\StartupMonitor.exe
C:\WINNT\system32\RUNDLL32.EXE
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\DU Meter\DUMeter.exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\HDD Health\HDDHealth.exe
C:\Program Files\cFosSpeed\spd.exe
F:\programy\AQQ\AQQ.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\WLAN\WConfig\WConfig.exe
C:\WINNT\system32\nvsvc32.exe
C:\Program Files\Kalendarz XP\Kalendarz.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Last.fm\LastFMHelper.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINNT\system32\wscntfy.exe
C:\Program Files\Peer2Mail\P2M.exe
C:\Program Files\Eset\nod32.exe
C:\Program Files\HD Tune\HDTune.exe
I:\Programosy\PrcView\PrcView.exe
C:\Program Files\Winamp3\winamp3.exe
I:\Programosy\Programy\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Karpiaq
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Flashget Catch Url Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: gFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\PROGRA~1\FLASHGET\getflash.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [LXSUPMON] C:\WINNT\system32\LXSUPMON.EXE RUN
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Run StartupMonitor] StartupMonitor.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe
O4 - HKLM\..\Run: [cFosSpeed] C:\Program Files\cFosSpeed\cFosSpeed.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINNT\system32\ctfmon.exe
O4 - HKCU\..\Run: [HDDHealth] C:\Program Files\HDD Health\HDDHealth.exe -wl
O4 - HKCU\..\Run: [AQQ] F:\programy\AQQ\AQQ.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: WConfig.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Kalendarz XP.lnk = C:\Program Files\Kalendarz XP\Kalendarz.exe
O4 - Global Startup: NetMeter.lnk = C:\Program Files\NetMeter\NetMeter.exe
O4 - Global Startup: Last.fm Helper.lnk = C:\Program Files\Last.fm\LastFMHelper.exe
O8 - Extra context menu item: &Stáhnout FlashGetem - C:\PROGRA~1\FLASHGET\jc_link.htm
O8 - Extra context menu item: &Stáhnout všechno FlashGetem - C:\PROGRA~1\FLASHGET\jc_all.htm
O8 - Extra context menu item: &Ściągnij przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: &Ściągnij wszystko przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{E10B8886-289F-4CC5-86D6-0818D85D4F82}: NameServer = 194.204.159.1,194.204.152.34
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINNT\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: cFosSpeed System Service (cFosSpeedS) - Unknown owner - C:\Program Files\cFosSpeed\spd.exe" -service (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINNT\system32\LEXBCES.EXE
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset  - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)



[wojtas]

Start>uruchom>msconfig>zakladka uruchamianie> wylacz progsy które nie chcesz żeby startowaly z systemem przyspieszy Ci to wlaczanie kompa

i daj loga z combofixa (tylko przed uzyciem go zmien date w komputerze np. na 15.11.2007 zeby byla wczesniejsza niz dzisiejsza data)

[karpiaq]

Kod: Zaznacz wszystko

ComboFix 07-11-19.3 - Łukasz 2007-11-15 22:07:27.1 - [color=red][b]FAT32[/b][/color]x86
Microsoft Windows XP Professional  5.1.2600.2.1250.1.1045.18.243 [GMT 1:00]
Running from: C:\Documents and Settings\Łukasz\Pulpit\ComboFix.exe
.

(((((((((((((((((((((((((   Files Created from 2007-10-19 to 2007-11-19  )))))))))))))))))))))))))))))))
.

2007-11-24 16:06   710,360   -ra------   C:\WINNT\system32\drivers\cfosspeed.sys
2007-11-24 16:05   <DIR>   d--------   C:\Program Files\cFosSpeed
2007-11-24 16:05   298,200   --a------   C:\WINNT\system32\cfosspeed.dll
2007-11-24 13:35   <DIR>   d--------   C:\Documents and Settings\All Users\Dane aplikacji\Hagel Technologies
2007-11-24 12:56   <DIR>   d--------   C:\Program Files\Active Ports
2007-11-24 12:56   49,664   --a------   C:\WINNT\unvise32.exe
2007-11-23 20:21   <DIR>   d--------   C:\Program Files\Peer2Mail
2007-11-23 18:50   <DIR>   d--------   C:\Program Files\HLTooLz
2007-11-23 18:50   249,856   ---------   C:\WINNT\Setup1.exe
2007-11-23 18:50   73,216   --a------   C:\WINNT\ST6UNST.EXE
2007-11-23 18:30   <DIR>   d--------   C:\Program Files\sXe Injected
2007-11-23 18:12   <DIR>   d--hs----   C:\FOUND.036
2007-11-18 14:47   <DIR>   d--------   C:\Program Files\Valve
2007-11-16 23:19   <DIR>   d--------   C:\Program Files\RivaTuner v2.06
2007-11-10 00:06   <DIR>   d--------   C:\Documents and Settings\Łukasz\Dane aplikacji\ACD Systems
2007-11-10 00:03   <DIR>   d--------   C:\extensions
2007-11-10 00:02   <DIR>   d--------   C:\Program Files\Yahoo!
2007-11-10 00:01   <DIR>   d--------   C:\Program Files\Common Files\ACD Systems
2007-11-10 00:01   <DIR>   d--------   C:\Program Files\ACD Systems
2007-11-10 00:01   <DIR>   d--------   C:\Documents and Settings\All Users\Dane aplikacji\ACD Systems
2007-11-04 15:03   <DIR>   d--------   C:\Program Files\CamStudio
2007-11-04 15:01   <DIR>   d--------   C:\Fraps
2007-11-03 20:04   <DIR>   d--------   C:\Moje dokumenty
2007-11-01 12:10   <DIR>   d--hs----   C:\FOUND.035
2007-10-31 20:33   <DIR>   d--hs----   C:\FOUND.034
2007-10-19 16:13   <DIR>   d--------   C:\Program Files\Common Files\DirectX
2007-10-19 16:12   <DIR>   d--------   C:\Program Files\GameSpy
2007-10-19 16:06   3,495,784   --a------   C:\WINNT\system32\d3dx9_33.dll
2007-10-19 16:06   81,768   --a------   C:\WINNT\system32\xinput1_3.dll
2007-10-19 15:43   <DIR>   d--hs----   C:\FOUND.033

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-24 12:49   ---------   d-----w   C:\Documents and Settings\Łukasz\Dane aplikacji\WinRAR
2007-11-24 12:28   512,096   ----a-w   C:\WINNT\system32\drivers\amon.sys
2007-11-24 12:28   298,104   ----a-w   C:\WINNT\system32\imon.dll
2007-11-24 12:28   15,424   ----a-w   C:\WINNT\system32\drivers\nod32drv.sys
2007-11-19 21:08   11,010,048   ---ha-w   C:\Documents and Settings\Łukasz\NTUSER.DAT
2007-11-19 21:08   11,010,048   ---ha-w   C:\Documents and Settings\Łukasz\NTUSER.DAT
2007-11-09 23:06   ---------   d-----w   C:\Documents and Settings\Łukasz\Dane aplikacji\ACD Systems
2007-10-25 16:44   8,488,960   ----a-w   C:\WINNT\system32\dllcache\shell32.dll
2007-10-14 20:49   ---------   d-----w   C:\Program Files\ImTOO
2007-10-13 15:30   ---------   d-----w   C:\Program Files\Real Desktop
2007-10-13 13:00   ---------   d-----w   C:\Program Files\WebServ
2007-10-06 19:49   ---------   d-----w   C:\Program Files\Last.fm
2007-10-06 19:49   ---------   d-----w   C:\Documents and Settings\All Users\Dane aplikacji\Last.fm
2007-10-05 20:57   ---------   d-----w   C:\Program Files\NCH Software
2007-10-05 20:55   ---------   d-----w   C:\Program Files\NCH Swift Sound
2007-10-05 20:55   ---------   d-----w   C:\Documents and Settings\Łukasz\Dane aplikacji\NCH Swift Sound
2007-10-05 20:48   ---------   d-----w   C:\Program Files\Crystal Software
2007-09-30 17:01   94,064   ----a-w   C:\WINNT\system32\drivers\k510mdm.sys
2007-09-30 17:01   89,872   ----a-w   C:\WINNT\system32\drivers\k750mdm.sys
2007-09-30 17:01   85,408   ----a-w   C:\WINNT\system32\drivers\k510mgmt.sys
2007-09-30 17:01   83,344   ----a-w   C:\WINNT\system32\drivers\k510obex.sys
2007-09-30 17:01   81,728   ----a-w   C:\WINNT\system32\drivers\k750mgmt.sys
2007-09-30 17:01   8,336   ----a-w   C:\WINNT\system32\drivers\k510mdfl.sys
2007-09-30 17:01   79,488   ----a-w   C:\WINNT\system32\drivers\k750obex.sys
2007-09-30 17:01   6,576   ----a-w   C:\WINNT\system32\drivers\k750mdfl.sys
2007-09-30 17:01   6,176   ----a-w   C:\WINNT\system32\drivers\k510cmnt.sys
2007-09-30 17:01   6,176   ----a-w   C:\WINNT\system32\drivers\k510cm.sys
2007-09-30 17:01   6,144   ----a-w   C:\WINNT\system32\drivers\k750cmnt.sys
2007-09-30 17:01   6,144   ----a-w   C:\WINNT\system32\drivers\k750cm.sys
2007-09-30 17:01   58,288   ----a-w   C:\WINNT\system32\drivers\k510bus.sys
2007-09-30 17:01   55,216   ----a-w   C:\WINNT\system32\drivers\k750bus.sys
2007-09-30 17:01   5,808   ----a-w   C:\WINNT\system32\drivers\k510whnt.sys
2007-09-30 17:01   5,808   ----a-w   C:\WINNT\system32\drivers\k510wh.sys
2007-09-30 17:01   5,744   ----a-w   C:\WINNT\system32\drivers\k750whnt.sys
2007-09-30 17:01   5,744   ----a-w   C:\WINNT\system32\drivers\k750wh.sys
2007-09-11 11:02   81,920   ----a-w   C:\WINNT\system32\frapsvid.dll
2007-09-03 11:52   25,944   ----a-w   C:\Documents and Settings\Łukasz\Dane aplikacji\GDIPFONTCACHEV1.DAT
2007-08-22 13:58   96,768   ------w   C:\WINNT\system32\dllcache\inseng.dll
2007-08-22 13:58   668,160   ------w   C:\WINNT\system32\dllcache\wininet.dll
2007-08-22 13:58   619,008   ------w   C:\WINNT\system32\dllcache\urlmon.dll
2007-08-22 13:58   55,808   ------w   C:\WINNT\system32\dllcache\extmgr.dll
2007-08-22 13:58   532,480   ------w   C:\WINNT\system32\dllcache\mstime.dll
2007-08-22 13:58   474,112   ------w   C:\WINNT\system32\dllcache\shlwapi.dll
2007-08-22 13:58   449,024   ------w   C:\WINNT\system32\dllcache\mshtmled.dll
2007-08-22 13:58   39,424   ------w   C:\WINNT\system32\dllcache\pngfilt.dll
2007-08-22 13:58   357,888   ------w   C:\WINNT\system32\dllcache\dxtmsft.dll
2007-08-22 13:58   3,085,824   ------w   C:\WINNT\system32\dllcache\mshtml.dll
2007-08-22 13:58   251,904   ------w   C:\WINNT\system32\dllcache\iepeers.dll
2007-08-22 13:58   205,824   ------w   C:\WINNT\system32\dllcache\dxtrans.dll
2007-08-22 13:58   16,384   ------w   C:\WINNT\system32\dllcache\jsproxy.dll
2007-08-22 13:58   151,552   ------w   C:\WINNT\system32\dllcache\cdfview.dll
2007-08-22 13:58   146,432   ------w   C:\WINNT\system32\dllcache\msrating.dll
2007-08-22 13:58   1,498,112   ------w   C:\WINNT\system32\dllcache\shdocvw.dll
2007-08-22 13:58   1,055,744   ------w   C:\WINNT\system32\dllcache\danim.dll
2007-08-22 13:58   1,022,976   ------w   C:\WINNT\system32\dllcache\browseui.dll
2007-08-21 11:19   18,432   ------w   C:\WINNT\system32\dllcache\iedw.exe
2007-08-21 07:18   683,520   ----a-w   C:\WINNT\system32\inetcomm.dll
2007-08-21 07:18   683,520   ------w   C:\WINNT\system32\dllcache\inetcomm.dll
2007-02-15 20:27   848   --sha-w   C:\WINNT\system32\KGyGaAvL.sys
.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINNT\system32\ctfmon.exe" [2004-08-04 00:44]
"HDDHealth"="C:\Program Files\HDD Health\HDDHealth.exe" [2005-06-24 09:17]
"AQQ"="F:\programy\AQQ\AQQ.exe" [2007-02-28 14:18]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2003-01-10 04:39 C:\WINNT\SOUNDMAN.EXE]
"LXSUPMON"="C:\WINNT\system32\LXSUPMON.exe" [2002-01-28 13:48]
"nod32kui"="C:\Program Files\Eset\nod32kui.exe" [2007-11-24 13:28]
"NWEReboot"="" []
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-02-10 20:47]
"Run StartupMonitor"="StartupMonitor.exe" [2000-05-20 17:23 C:\WINNT\StartupMonitor.exe]
"NvCplDaemon"="RUNDLL32.exe" [2004-08-04 00:44 C:\WINNT\system32\rundll32.exe]
"nwiz"="nwiz.exe" [2004-10-29 10:50 C:\WINNT\system32\nwiz.exe]
"NvMediaCenter"="RUNDLL32.exe" [2004-08-04 00:44 C:\WINNT\system32\rundll32.exe]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2006-11-12 12:48]
"DU Meter"="C:\Program Files\DU Meter\DUMeter.exe" [2006-11-27 15:18]
"cFosSpeed"="C:\Program Files\cFosSpeed\cFosSpeed.exe" [2007-11-22 17:02]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINNT\system32\CTFMON.EXE" [2004-08-04 00:44]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-09-28 03:17]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nlsf"="cmd.exe" [2004-08-04 00:44 C:\WINNT\system32\cmd.exe]
"tscuninstall"="C:\WINNT\system32\tscupgrd.exe" [2004-08-04 01:33]

C:\Documents and Settings\ťukasz\Menu Start\Programy\Autostart\
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 19:16:50]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
WConfig.lnk - C:\Program Files\WLAN\WConfig\WConfig.exe [2007-01-12 21:10:56]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 10:01:04]
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-24 07:05:26]
Kalendarz XP.lnk - C:\Program Files\Kalendarz XP\Kalendarz.exe [2007-02-09 13:00:13]

R0 HFXP2;HFXP2;C:\WINNT\system32\DRIVERS\HFXP2.SYS
R3 axvbusx;axvbusx;C:\WINNT\system32\DRIVERS\axvbusx.sys
R3 axvscsi;axvscsi;C:\WINNT\system32\DRIVERS\axvscsi.sys
R3 GT680x;GrandTechICNameNT;C:\WINNT\system32\Drivers\gt680x.sys
R3 RT2400PCI;802.11b WLAN PCI;C:\WINNT\system32\DRIVERS\RT2400.sys
S3 ddsxeiservice;ddsxeiservice2;\??\C:\Program Files\sXe Injected\ddsxei.sys
S3 k510bus;Sony Ericsson K510 Driver driver (WDM);C:\WINNT\system32\DRIVERS\k510bus.sys
S3 k510mdfl;Sony Ericsson K510 USB WMC Modem Filter;C:\WINNT\system32\DRIVERS\k510mdfl.sys
S3 k510mdm;Sony Ericsson K510 USB WMC Modem Driver;C:\WINNT\system32\DRIVERS\k510mdm.sys
S3 k510mgmt;Sony Ericsson K510 USB WMC Device Management Drivers (WDM);C:\WINNT\system32\DRIVERS\k510mgmt.sys
S3 k510obex;Sony Ericsson K510 USB WMC OBEX Interface;C:\WINNT\system32\DRIVERS\k510obex.sys
S3 NPF;NetGroup Packet Filter Driver;C:\WINNT\system32\drivers\npf.sys
S3 RivaTuner32;RivaTuner32;\??\C:\Program Files\RivaTuner v2.06\RivaTuner32.sys
S3 USBSTOR;Sterownik magazynu masowego USB;C:\WINNT\system32\DRIVERS\USBSTOR.SYS

*Newly Created Service* - CATCHME
.
**************************************************************************

catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-19 22:10:14
Windows 5.1.2600 Dodatek Service Pack 2 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-11-19 22:10:58
.
   --- E O F ---


[wojtas]

czysto