Combofix:
ComboFix 09-01-10.03 - Patryk 2009-01-11 19:14:39.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.3327.2836 [GMT 1:00]
Uruchomiony z: c:\documents and settings\Patryk\Pulpit\ComboFix.exe
* Utworzono nowy punkt przywracania
.
((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\system32\Dvbpws.dll
.
((((((((((((((((((((((((( Pliki utworzone od 2008-12-11 do 2009-01-11 )))))))))))))))))))))))))))))))
.
2009-01-11 17:00 . 2009-01-11 17:00 <DIR> d-------- c:\program files\EA GAMES
2009-01-11 17:00 . 2005-02-26 06:34 442,368 -ra------ c:\windows\system32\vp6vfw.dll
2009-01-11 15:41 . 2004-08-04 00:44 4,096 --a------ c:\windows\system32\OLD39.tmp
2009-01-11 15:40 . 2009-01-11 15:41 <DIR> d-------- c:\windows\LastGood
2009-01-11 15:38 . 2009-01-11 15:38 3,932,214 --a------ c:\windows\system32\tv.bmp
2009-01-11 15:13 . 2009-01-11 15:13 0 --a------ c:\windows\graphedt.INI
2009-01-11 10:16 . 2009-01-11 10:16 <DIR> d-------- c:\program files\Windows Sidebar
2009-01-11 10:16 . 2009-01-11 10:16 <DIR> d-------- c:\program files\Common Files\ArcSoft
2009-01-11 10:16 . 2009-01-11 10:16 <DIR> d-------- c:\documents and settings\Patryk\Dane aplikacji\ArcSoft
2009-01-11 10:16 . 2009-01-11 10:16 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\ArcSoft
2009-01-10 21:50 . 2007-09-19 15:24 16,654 --a------ c:\windows\system32\drivers\wfcxvcap.inf
2009-01-10 21:50 . 2006-02-23 10:56 10,190 --a------ c:\windows\system32\drivers\wfcxxbar.cat
2009-01-10 21:50 . 2006-02-23 10:56 10,190 --a------ c:\windows\system32\drivers\wfcxvcap.cat
2009-01-10 21:50 . 2006-02-23 10:56 10,190 --a------ c:\windows\system32\drivers\wfcxtcap.cat
2009-01-10 21:50 . 2006-02-23 10:56 10,190 --a------ c:\windows\system32\drivers\wfcxdtun.cat
2009-01-10 21:50 . 2006-02-23 10:56 10,190 --a------ c:\windows\system32\drivers\wfcxatun.cat
2009-01-10 21:50 . 2006-02-23 10:56 10,190 --a------ c:\windows\system32\drivers\wfcxacap.cat
2009-01-10 21:50 . 2007-09-19 15:37 8,168 --a------ c:\windows\system32\drivers\wfcxatun.inf
2009-01-10 21:50 . 2007-09-19 11:50 7,268 --a------ c:\windows\system32\drivers\wfcxxbar.inf
2009-01-10 21:50 . 2007-09-19 11:49 6,170 --a------ c:\windows\system32\drivers\wfcxdtun.inf
2009-01-10 21:50 . 2007-09-19 11:50 4,348 --a------ c:\windows\system32\drivers\wfcxtcap.inf
2009-01-10 21:50 . 2007-09-19 11:49 4,131 --a------ c:\windows\system32\drivers\wfcxacap.inf
2009-01-10 21:29 . 2009-01-10 21:29 20,558 --a------ C:\09-01-10_212933.wav
2009-01-10 21:08 . 2009-01-10 21:08 <DIR> d-------- c:\windows\system32\AGEIA
2009-01-10 21:08 . 2009-01-10 21:10 <DIR> d-------- c:\windows\NV38003804.TMP
2009-01-10 21:08 . 2009-01-10 21:09 <DIR> d-------- c:\program files\AGEIA Technologies
2009-01-10 21:08 . 2009-01-10 21:08 <DIR> d-------- C:\NVIDIA
2009-01-10 20:05 . 2005-05-03 11:43 69,632 -r------- c:\windows\Alcmtr.exe
2009-01-10 19:38 . 2009-01-10 19:38 <DIR> d-------- c:\program files\Driver Magician Lite
2009-01-10 19:36 . 2009-01-10 19:36 <DIR> d-------- c:\program files\FCleaner
2009-01-10 19:36 . 2009-01-10 19:36 <DIR> d-------- c:\documents and settings\Patryk\Dane aplikacji\Iomatic
2009-01-10 19:36 . 2009-01-10 19:36 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\FTWeak
2009-01-10 19:32 . 2008-05-19 16:01 53,888 --a------ c:\windows\system32\drivers\evserial.sys
2009-01-10 19:32 . 2008-05-19 16:01 27,904 --a------ c:\windows\system32\drivers\evsbc.sys
2009-01-10 19:09 . 2009-01-10 19:09 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\PC Drivers HeadQuarters
2009-01-10 19:03 . 2009-01-10 19:03 23,600 --a------ c:\windows\system32\drivers\TVICHW32.SYS
2009-01-10 16:26 . 2009-01-11 10:16 <DIR> d-------- c:\program files\WinFast
2009-01-09 18:24 . 2009-01-09 18:25 <DIR> d-------- c:\documents and settings\Patryk\Dane aplikacji\Sports Interactive
2009-01-09 18:24 . 2009-01-09 18:24 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Sports Interactive
2009-01-09 18:20 . 2009-01-09 18:20 <DIR> d-------- c:\windows\Logs
2009-01-09 18:20 . 2008-05-30 14:11 3,850,760 --a------ c:\windows\system32\D3DX9_38.dll
2009-01-09 18:20 . 2008-05-30 14:11 1,491,992 --a------ c:\windows\system32\D3DCompiler_38.dll
2009-01-09 18:20 . 2008-05-30 14:19 507,400 --a------ c:\windows\system32\XAudio2_1.dll
2009-01-09 18:20 . 2008-05-30 14:11 467,984 --a------ c:\windows\system32\d3dx10_38.dll
2009-01-09 18:20 . 2008-05-30 14:18 238,088 --a------ c:\windows\system32\xactengine3_1.dll
2009-01-09 18:20 . 2008-05-30 14:17 65,032 --a------ c:\windows\system32\XAPOFX1_0.dll
2009-01-09 18:20 . 2008-05-30 14:17 25,608 --a------ c:\windows\system32\X3DAudio1_4.dll
2009-01-09 18:17 . 2009-01-09 18:17 <DIR> d--h----- c:\program files\Zero G Registry
2009-01-09 18:16 . 2009-01-09 18:16 <DIR> d--h----- c:\documents and settings\Patryk\InstallAnywhere
2009-01-05 19:20 . 2009-01-05 19:20 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\281B5
2009-01-04 21:34 . 2009-01-04 21:34 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\2B177
2009-01-04 15:15 . 2009-01-04 15:15 <DIR> d-------- c:\program files\FAR
2009-01-04 14:06 . 2008-03-21 13:57 14,640 --------- c:\windows\system32\spmsgXP_2k3.dll
2009-01-04 14:06 . 2009-01-04 14:06 0 --ah----- c:\windows\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
2009-01-04 14:06 . 2009-01-04 14:06 0 --ah----- c:\windows\system32\drivers\Msft_Kernel_ggsemc_01007.Wdf
2009-01-04 13:54 . 2009-01-04 13:54 1,107,296 --a------ c:\windows\system32\WdfCoInstaller01007.dll
2009-01-04 13:54 . 2009-01-04 13:54 22,368 --a------ c:\windows\system32\drivers\ggsemc.sys
2009-01-04 13:54 . 2009-01-04 13:54 10,976 --a------ c:\windows\system32\drivers\ggflt.sys
2009-01-04 13:52 . 2009-01-04 13:53 <DIR> d-------- c:\program files\Sony Ericsson
2009-01-04 13:52 . 2009-01-04 13:52 <DIR> d-------- c:\program files\Avanquest update
2009-01-04 13:52 . 2009-01-04 13:52 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Sony Ericsson
2009-01-04 13:52 . 2009-01-04 13:52 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\BVRP Software
2009-01-04 13:52 . 2008-05-16 12:33 120,744 --a------ c:\windows\system32\drivers\s0016mdm.sys
2009-01-04 13:52 . 2008-05-16 12:33 115,752 --a------ c:\windows\system32\drivers\s0016unic.sys
2009-01-04 13:52 . 2008-05-16 12:33 114,216 --a------ c:\windows\system32\drivers\s0016mgmt.sys
2009-01-04 13:52 . 2008-05-16 12:33 110,632 --a------ c:\windows\system32\drivers\s0016obex.sys
2009-01-04 13:52 . 2008-05-16 12:33 89,256 --a------ c:\windows\system32\drivers\s0016bus.sys
2009-01-04 13:52 . 2008-05-16 12:33 25,512 --a------ c:\windows\system32\drivers\s0016nd5.sys
2009-01-04 13:52 . 2008-05-16 12:33 15,016 --a------ c:\windows\system32\drivers\s0016mdfl.sys
2009-01-04 13:52 . 2008-05-16 12:33 12,200 --a------ c:\windows\system32\drivers\s0016whnt.sys
2009-01-04 13:52 . 2008-05-16 12:33 12,200 --a------ c:\windows\system32\drivers\s0016wh.sys
2009-01-04 13:52 . 2008-05-16 12:33 12,200 --a------ c:\windows\system32\drivers\s0016cmnt.sys
2009-01-04 13:52 . 2008-05-16 12:33 12,200 --a------ c:\windows\system32\drivers\s0016cm.sys
2009-01-04 13:52 . 2008-05-16 12:33 10,792 --a------ c:\windows\system32\drivers\s0016cr.sys
2009-01-04 02:07 . 2009-01-04 02:07 117,640 --a------ C:\test.htm
2009-01-04 00:24 . 2009-01-04 00:24 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\1A35B
2009-01-03 00:42 . 2009-01-03 00:42 <DIR> d-------- C:\MFT 10562
2009-01-03 00:32 . 2009-01-03 00:32 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\8CB
2009-01-03 00:24 . 2009-01-03 00:24 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\23203
2009-01-03 00:22 . 2009-01-03 00:22 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\222CE
2009-01-02 21:19 . 2009-01-02 21:19 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\1A8C
2009-01-02 20:58 . 2009-01-11 02:12 69 --a------ c:\windows\NeroDigital.ini
2009-01-02 20:40 . 2009-01-10 19:34 <DIR> d-a------ c:\documents and settings\All Users\Dane aplikacji\TEMP
2009-01-02 20:23 . 2004-08-03 23:10 15,360 --a------ c:\windows\system32\drivers\MPE.sys
2009-01-02 20:23 . 2004-08-03 23:10 15,360 --a--c--- c:\windows\system32\dllcache\mpe.sys
2009-01-02 19:17 . 2006-01-26 18:19 167,296 --a------ c:\windows\system32\drivers\wfcxvcap.sys
2009-01-02 19:17 . 2006-01-26 18:16 15,872 --a------ c:\windows\system32\drivers\wfcxtcap.sys
2009-01-02 19:16 . 2009-01-02 19:16 <DIR> d-------- c:\windows\system32\WinFox
2009-01-02 19:16 . 2009-01-11 15:17 <DIR> d-------- c:\windows\system32\WinFast
2009-01-02 19:16 . 2009-01-02 19:16 <DIR> d-------- c:\windows\system32\Munins
2009-01-02 19:16 . 2003-09-05 09:57 9,469 --a------ c:\windows\system32\drivers\WINFOXIO.sys
2009-01-02 19:08 . 2009-01-02 19:08 <DIR> d-------- c:\windows\system32\Quicktime
2009-01-02 19:08 . 2009-01-02 19:08 <DIR> d-------- c:\program files\SmartSound Software
2009-01-02 19:08 . 2009-01-02 19:08 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\SmartSound Software Inc
2009-01-02 19:08 . 2009-01-02 19:08 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\QuickTime
2009-01-02 19:08 . 2004-05-04 11:53 1,645,320 --------- c:\windows\system32\gdiplus.dll
2009-01-02 19:04 . 2009-01-02 23:39 152 --a------ c:\windows\ULead32.ini
2009-01-02 19:04 . 2009-01-02 19:04 24 --a------ c:\windows\system32\DKRNL.JAX
2009-01-02 19:03 . 2009-01-02 19:03 <DIR> d-------- c:\windows\Ulead.dat
2009-01-02 19:03 . 1998-10-29 16:45 306,688 --a------ c:\windows\IsUninst.exe
2009-01-02 19:02 . 2009-01-02 19:02 <DIR> d---s---- c:\documents and settings\Patryk\UserData
2009-01-02 19:01 . 2009-01-02 19:01 <DIR> d-------- c:\windows\system32\windows media
2009-01-02 19:01 . 2009-01-02 19:01 <DIR> d--h----- c:\windows\msdownld.tmp
2009-01-02 19:01 . 2009-01-02 19:01 <DIR> d-------- c:\program files\Windows Media Components
2009-01-02 19:00 . 2002-08-29 18:41 401,462 --a------ c:\windows\msvcp60.dll
2009-01-02 19:00 . 2000-04-07 11:10 278,581 --a------ c:\windows\msvcrt.dll
2009-01-02 18:59 . 2009-01-02 20:06 <DIR> d-------- c:\program files\Common Files\Ulead Systems
2009-01-02 18:59 . 2009-01-02 20:51 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Ulead Systems
2009-01-02 18:46 . 2009-01-02 18:46 <DIR> d-------- c:\program files\BearShare Applications
2009-01-02 18:46 . 2008-09-25 14:20 483,328 --a------ c:\windows\system32\actskn45.ocx
2009-01-02 13:48 . 2009-01-02 15:08 <DIR> d-------- C:\Netgear
2009-01-01 23:55 . 2009-01-01 23:55 <DIR> d-------- c:\program files\Microsoft CopyProfile
2009-01-01 23:55 . 2003-06-25 15:05 266,360 --a------ c:\windows\system32\TweakUI.exe
2009-01-01 23:55 . 2002-07-17 20:03 45,056 --a------ c:\windows\system32\WNASPI32.DLL
2009-01-01 23:55 . 2002-07-17 19:05 16,512 --a------ c:\windows\system32\drivers\ASPI32.SYS
2009-01-01 22:46 . 2009-01-01 22:46 <DIR> d-------- c:\documents and settings\Patryk\Dane aplikacji\Leadertech
2009-01-01 22:29 . 2009-01-01 22:29 <DIR> d-------- c:\program files\DAEMON Tools Lite
2009-01-01 22:29 . 2009-01-11 17:43 <DIR> d-------- c:\documents and settings\Patryk\Gadu-Gadu
2009-01-01 22:29 . 2009-01-01 22:29 <DIR> d-------- c:\documents and settings\Patryk\Dane aplikacji\DAEMON Tools
2009-01-01 22:26 . 2009-01-01 22:26 715,248 --a------ c:\windows\system32\drivers\sptd.sys
2008-12-29 00:29 . 2008-12-29 00:29 <DIR> d-------- c:\program files\Alwil Software
2008-12-28 00:34 . 2008-12-28 00:34 <DIR> d-------- c:\program files\Gadu-Gadu
2008-12-27 18:31 . 2008-12-27 18:31 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\.Beniamin
2008-12-27 18:03 . 2002-07-15 18:18 8,704 --a------ c:\windows\system32\sporder.dll
2008-12-26 23:45 . 2009-01-03 00:43 151 --a------ c:\windows\PhotoSnapViewer.INI
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-11 14:17 --------- d--h--w c:\program files\InstallShield Installation Information
2009-01-10 19:05 --------- d-----w c:\program files\Realtek
2009-01-01 21:46 --------- d-----w c:\program files\Common Files\InstallShield
2008-12-12 14:58 1,386,496 ----a-w c:\windows\system32\msvbvm60.dll
2008-12-12 14:58 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\InstallShield
2008-12-12 14:56 --------- d-----w c:\program files\Trust
2008-12-12 14:55 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\{3E318E90-4BE6-4440-A0EE-2EAF8419199C}
2008-12-12 14:49 315,392 ----a-w c:\windows\HideWin.exe
2008-12-12 14:45 --------- d-----w c:\documents and settings\Patryk\Dane aplikacji\InstallShield
2008-12-12 14:32 --------- d-----w c:\program files\microsoft frontpage
2008-12-12 14:31 --------- d-----w c:\program files\Usługi online
2008-11-12 12:45 453,152 ----a-w c:\windows\system32\NVUNINST.EXE
2008-10-13 08:56 70,936 ----a-w c:\windows\system32\PhysXLoader.dll
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}]
2008-09-02 15:05 398776 --a------ c:\program files\BearShare Applications\BearShare MediaBar\BearShareIEHelper.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"FTweakFCleaner"="c:\program files\FCleaner\FCleaner.exe" [2009-01-05 1644544]
"Gadu-Gadu"="c:\program files\Gadu-Gadu\gg.exe" [2005-08-30 1708032]
"WinFast Schedule"="c:\program files\WinFast\WFDTV\WFWIZ.exe" [2008-10-02 2916352]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 81000]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-11-12 13672448]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-11-12 86016]
"WinFastDTV"="c:\program files\WinFast\WFDTV\DTVSchdl.exe" [2008-10-24 90112]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2008-11-20 178688]
"nwiz"="nwiz.exe" [2008-11-12 c:\windows\system32\nwiz.exe]
"RTHDCPL"="RTHDCPL.EXE" [2007-05-10 c:\windows\RTHDCPL.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoLogoff"= 1 (0x1)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"lanmanserver"=2 (0x2)
"JavaQuickStarterService"=2 (0x2)
"TuneUp.Defrag"=3 (0x3)
"SharedAccess"=2 (0x2)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Gadu-Gadu"="c:\program files\Gadu-Gadu\gg.exe" /tray
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Counter-Strike 1.6\\hl.exe"=
"c:\\Program Files\\OnRez\\SLVoice.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Gadu-Gadu\\gg.exe"=
"d:\\Internetowe\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\BearShare Applications\\BearShare\\BearShare.exe"=
"e:\\Gry\\Football Manager 2009\\fm.exe"=
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-12-29 111184]
R3 wfcxtcap;WinFast DTV BDA Transport Stream Capture Driver;c:\windows\system32\drivers\wfcxtcap.sys [2009-01-02 15872]
R4 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2008-12-29 20560]
S3 evserial;Virtual Serial Ports Driver (Eltima Softwate);c:\windows\system32\drivers\evserial.sys [2009-01-10 53888]
S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\drivers\ggflt.sys [2009-01-04 10976]
S3 MRVW225;802.11g/b Wireless LAN Dirver for Windows XP;c:\windows\system32\drivers\MRVW225.sys [2008-12-12 299904]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\system32\drivers\s0016bus.sys [2009-01-04 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\system32\drivers\s0016mdfl.sys [2009-01-04 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\system32\drivers\s0016mdm.sys [2009-01-04 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s0016mgmt.sys [2009-01-04 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\system32\drivers\s0016nd5.sys [2009-01-04 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\system32\drivers\s0016obex.sys [2009-01-04 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\system32\drivers\s0016unic.sys [2009-01-04 115752]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\f:\ntglm7x.sys --> f:\NTGLM7X.sys [?]
S3 VSBC;Virtual Serial Bus Enumerator (Eltima Software);c:\windows\system32\drivers\evsbc.sys [2009-01-10 27904]
S3 wfcxdtun;WinFast DTV BDA Tuner/Demod Driver;c:\windows\system32\drivers\wfcxdtun.sys --> c:\windows\system32\drivers\wfcxdtun.sys [?]
S3 wfcxxbar;WinFast TV Crossbar Driver;c:\windows\system32\drivers\wfcxxbar.sys --> c:\windows\system32\drivers\wfcxxbar.sys [?]
S4 WFCXVCAP;WinFast TV Video Capture Driver;c:\windows\system32\drivers\wfcxvcap.sys [2009-01-02 167296]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"
.
Zawartość folderu 'Zaplanowane zadania'
2009-01-11 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2008\OneClickStarter.exe [2008-06-20 09:09]
.
.
------- Skan uzupełniający -------
.
uStart Page = hxxp://search.bearshare.com/pl/
uInternet Connection Wizard,ShellNext = hxxp://www.auslogics.com/go/ddt7/en/speed-up-pc
FF - ProfilePath - c:\documents and settings\Patryk\Dane aplikacji\Mozilla\Firefox\Profiles\ctoe3bv4.default\
FF - prefs.js: browser.startup.homepage - hxxp://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl:official
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-11 19:15:21
Windows 5.1.2600 Dodatek Service Pack 2 NTFS
skanowanie ukrytych procesów ...
skanowanie ukrytych wpisów autostartu ...
skanowanie ukrytych plików ...
skanowanie pomyślnie ukończone
ukryte pliki: 0
**************************************************************************
.
Czas ukończenia: 2009-01-11 19:16:15
ComboFix-quarantined-files.txt 2009-01-11 18:15:47
Przed: 50 477 830 144 bajtów wolnych
Po: 50,506,706,944 bajtów wolnych
WindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /usepmtimer
256
HJ:
.ComboFix 09-01-10.03 - Patryk 2009-01-11 19:14:39.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.3327.2836 [GMT 1:00]
Uruchomiony z: c:\documents and settings\Patryk\Pulpit\ComboFix.exe
* Utworzono nowy punkt przywracania
.
((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\system32\Dvbpws.dll
.
((((((((((((((((((((((((( Pliki utworzone od 2008-12-11 do 2009-01-11 )))))))))))))))))))))))))))))))
.
2009-01-11 17:00 . 2009-01-11 17:00 <DIR> d-------- c:\program files\EA GAMES
2009-01-11 17:00 . 2005-02-26 06:34 442,368 -ra------ c:\windows\system32\vp6vfw.dll
2009-01-11 15:41 . 2004-08-04 00:44 4,096 --a------ c:\windows\system32\OLD39.tmp
2009-01-11 15:40 . 2009-01-11 15:41 <DIR> d-------- c:\windows\LastGood
2009-01-11 15:38 . 2009-01-11 15:38 3,932,214 --a------ c:\windows\system32\tv.bmp
2009-01-11 15:13 . 2009-01-11 15:13 0 --a------ c:\windows\graphedt.INI
2009-01-11 10:16 . 2009-01-11 10:16 <DIR> d-------- c:\program files\Windows Sidebar
2009-01-11 10:16 . 2009-01-11 10:16 <DIR> d-------- c:\program files\Common Files\ArcSoft
2009-01-11 10:16 . 2009-01-11 10:16 <DIR> d-------- c:\documents and settings\Patryk\Dane aplikacji\ArcSoft
2009-01-11 10:16 . 2009-01-11 10:16 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\ArcSoft
2009-01-10 21:50 . 2007-09-19 15:24 16,654 --a------ c:\windows\system32\drivers\wfcxvcap.inf
2009-01-10 21:50 . 2006-02-23 10:56 10,190 --a------ c:\windows\system32\drivers\wfcxxbar.cat
2009-01-10 21:50 . 2006-02-23 10:56 10,190 --a------ c:\windows\system32\drivers\wfcxvcap.cat
2009-01-10 21:50 . 2006-02-23 10:56 10,190 --a------ c:\windows\system32\drivers\wfcxtcap.cat
2009-01-10 21:50 . 2006-02-23 10:56 10,190 --a------ c:\windows\system32\drivers\wfcxdtun.cat
2009-01-10 21:50 . 2006-02-23 10:56 10,190 --a------ c:\windows\system32\drivers\wfcxatun.cat
2009-01-10 21:50 . 2006-02-23 10:56 10,190 --a------ c:\windows\system32\drivers\wfcxacap.cat
2009-01-10 21:50 . 2007-09-19 15:37 8,168 --a------ c:\windows\system32\drivers\wfcxatun.inf
2009-01-10 21:50 . 2007-09-19 11:50 7,268 --a------ c:\windows\system32\drivers\wfcxxbar.inf
2009-01-10 21:50 . 2007-09-19 11:49 6,170 --a------ c:\windows\system32\drivers\wfcxdtun.inf
2009-01-10 21:50 . 2007-09-19 11:50 4,348 --a------ c:\windows\system32\drivers\wfcxtcap.inf
2009-01-10 21:50 . 2007-09-19 11:49 4,131 --a------ c:\windows\system32\drivers\wfcxacap.inf
2009-01-10 21:29 . 2009-01-10 21:29 20,558 --a------ C:\09-01-10_212933.wav
2009-01-10 21:08 . 2009-01-10 21:08 <DIR> d-------- c:\windows\system32\AGEIA
2009-01-10 21:08 . 2009-01-10 21:10 <DIR> d-------- c:\windows\NV38003804.TMP
2009-01-10 21:08 . 2009-01-10 21:09 <DIR> d-------- c:\program files\AGEIA Technologies
2009-01-10 21:08 . 2009-01-10 21:08 <DIR> d-------- C:\NVIDIA
2009-01-10 20:05 . 2005-05-03 11:43 69,632 -r------- c:\windows\Alcmtr.exe
2009-01-10 19:38 . 2009-01-10 19:38 <DIR> d-------- c:\program files\Driver Magician Lite
2009-01-10 19:36 . 2009-01-10 19:36 <DIR> d-------- c:\program files\FCleaner
2009-01-10 19:36 . 2009-01-10 19:36 <DIR> d-------- c:\documents and settings\Patryk\Dane aplikacji\Iomatic
2009-01-10 19:36 . 2009-01-10 19:36 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\FTWeak
2009-01-10 19:32 . 2008-05-19 16:01 53,888 --a------ c:\windows\system32\drivers\evserial.sys
2009-01-10 19:32 . 2008-05-19 16:01 27,904 --a------ c:\windows\system32\drivers\evsbc.sys
2009-01-10 19:09 . 2009-01-10 19:09 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\PC Drivers HeadQuarters
2009-01-10 19:03 . 2009-01-10 19:03 23,600 --a------ c:\windows\system32\drivers\TVICHW32.SYS
2009-01-10 16:26 . 2009-01-11 10:16 <DIR> d-------- c:\program files\WinFast
2009-01-09 18:24 . 2009-01-09 18:25 <DIR> d-------- c:\documents and settings\Patryk\Dane aplikacji\Sports Interactive
2009-01-09 18:24 . 2009-01-09 18:24 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Sports Interactive
2009-01-09 18:20 . 2009-01-09 18:20 <DIR> d-------- c:\windows\Logs
2009-01-09 18:20 . 2008-05-30 14:11 3,850,760 --a------ c:\windows\system32\D3DX9_38.dll
2009-01-09 18:20 . 2008-05-30 14:11 1,491,992 --a------ c:\windows\system32\D3DCompiler_38.dll
2009-01-09 18:20 . 2008-05-30 14:19 507,400 --a------ c:\windows\system32\XAudio2_1.dll
2009-01-09 18:20 . 2008-05-30 14:11 467,984 --a------ c:\windows\system32\d3dx10_38.dll
2009-01-09 18:20 . 2008-05-30 14:18 238,088 --a------ c:\windows\system32\xactengine3_1.dll
2009-01-09 18:20 . 2008-05-30 14:17 65,032 --a------ c:\windows\system32\XAPOFX1_0.dll
2009-01-09 18:20 . 2008-05-30 14:17 25,608 --a------ c:\windows\system32\X3DAudio1_4.dll
2009-01-09 18:17 . 2009-01-09 18:17 <DIR> d--h----- c:\program files\Zero G Registry
2009-01-09 18:16 . 2009-01-09 18:16 <DIR> d--h----- c:\documents and settings\Patryk\InstallAnywhere
2009-01-05 19:20 . 2009-01-05 19:20 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\281B5
2009-01-04 21:34 . 2009-01-04 21:34 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\2B177
2009-01-04 15:15 . 2009-01-04 15:15 <DIR> d-------- c:\program files\FAR
2009-01-04 14:06 . 2008-03-21 13:57 14,640 --------- c:\windows\system32\spmsgXP_2k3.dll
2009-01-04 14:06 . 2009-01-04 14:06 0 --ah----- c:\windows\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
2009-01-04 14:06 . 2009-01-04 14:06 0 --ah----- c:\windows\system32\drivers\Msft_Kernel_ggsemc_01007.Wdf
2009-01-04 13:54 . 2009-01-04 13:54 1,107,296 --a------ c:\windows\system32\WdfCoInstaller01007.dll
2009-01-04 13:54 . 2009-01-04 13:54 22,368 --a------ c:\windows\system32\drivers\ggsemc.sys
2009-01-04 13:54 . 2009-01-04 13:54 10,976 --a------ c:\windows\system32\drivers\ggflt.sys
2009-01-04 13:52 . 2009-01-04 13:53 <DIR> d-------- c:\program files\Sony Ericsson
2009-01-04 13:52 . 2009-01-04 13:52 <DIR> d-------- c:\program files\Avanquest update
2009-01-04 13:52 . 2009-01-04 13:52 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Sony Ericsson
2009-01-04 13:52 . 2009-01-04 13:52 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\BVRP Software
2009-01-04 13:52 . 2008-05-16 12:33 120,744 --a------ c:\windows\system32\drivers\s0016mdm.sys
2009-01-04 13:52 . 2008-05-16 12:33 115,752 --a------ c:\windows\system32\drivers\s0016unic.sys
2009-01-04 13:52 . 2008-05-16 12:33 114,216 --a------ c:\windows\system32\drivers\s0016mgmt.sys
2009-01-04 13:52 . 2008-05-16 12:33 110,632 --a------ c:\windows\system32\drivers\s0016obex.sys
2009-01-04 13:52 . 2008-05-16 12:33 89,256 --a------ c:\windows\system32\drivers\s0016bus.sys
2009-01-04 13:52 . 2008-05-16 12:33 25,512 --a------ c:\windows\system32\drivers\s0016nd5.sys
2009-01-04 13:52 . 2008-05-16 12:33 15,016 --a------ c:\windows\system32\drivers\s0016mdfl.sys
2009-01-04 13:52 . 2008-05-16 12:33 12,200 --a------ c:\windows\system32\drivers\s0016whnt.sys
2009-01-04 13:52 . 2008-05-16 12:33 12,200 --a------ c:\windows\system32\drivers\s0016wh.sys
2009-01-04 13:52 . 2008-05-16 12:33 12,200 --a------ c:\windows\system32\drivers\s0016cmnt.sys
2009-01-04 13:52 . 2008-05-16 12:33 12,200 --a------ c:\windows\system32\drivers\s0016cm.sys
2009-01-04 13:52 . 2008-05-16 12:33 10,792 --a------ c:\windows\system32\drivers\s0016cr.sys
2009-01-04 02:07 . 2009-01-04 02:07 117,640 --a------ C:\test.htm
2009-01-04 00:24 . 2009-01-04 00:24 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\1A35B
2009-01-03 00:42 . 2009-01-03 00:42 <DIR> d-------- C:\MFT 10562
2009-01-03 00:32 . 2009-01-03 00:32 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\8CB
2009-01-03 00:24 . 2009-01-03 00:24 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\23203
2009-01-03 00:22 . 2009-01-03 00:22 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\222CE
2009-01-02 21:19 . 2009-01-02 21:19 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\1A8C
2009-01-02 20:58 . 2009-01-11 02:12 69 --a------ c:\windows\NeroDigital.ini
2009-01-02 20:40 . 2009-01-10 19:34 <DIR> d-a------ c:\documents and settings\All Users\Dane aplikacji\TEMP
2009-01-02 20:23 . 2004-08-03 23:10 15,360 --a------ c:\windows\system32\drivers\MPE.sys
2009-01-02 20:23 . 2004-08-03 23:10 15,360 --a--c--- c:\windows\system32\dllcache\mpe.sys
2009-01-02 19:17 . 2006-01-26 18:19 167,296 --a------ c:\windows\system32\drivers\wfcxvcap.sys
2009-01-02 19:17 . 2006-01-26 18:16 15,872 --a------ c:\windows\system32\drivers\wfcxtcap.sys
2009-01-02 19:16 . 2009-01-02 19:16 <DIR> d-------- c:\windows\system32\WinFox
2009-01-02 19:16 . 2009-01-11 15:17 <DIR> d-------- c:\windows\system32\WinFast
2009-01-02 19:16 . 2009-01-02 19:16 <DIR> d-------- c:\windows\system32\Munins
2009-01-02 19:16 . 2003-09-05 09:57 9,469 --a------ c:\windows\system32\drivers\WINFOXIO.sys
2009-01-02 19:08 . 2009-01-02 19:08 <DIR> d-------- c:\windows\system32\Quicktime
2009-01-02 19:08 . 2009-01-02 19:08 <DIR> d-------- c:\program files\SmartSound Software
2009-01-02 19:08 . 2009-01-02 19:08 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\SmartSound Software Inc
2009-01-02 19:08 . 2009-01-02 19:08 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\QuickTime
2009-01-02 19:08 . 2004-05-04 11:53 1,645,320 --------- c:\windows\system32\gdiplus.dll
2009-01-02 19:04 . 2009-01-02 23:39 152 --a------ c:\windows\ULead32.ini
2009-01-02 19:04 . 2009-01-02 19:04 24 --a------ c:\windows\system32\DKRNL.JAX
2009-01-02 19:03 . 2009-01-02 19:03 <DIR> d-------- c:\windows\Ulead.dat
2009-01-02 19:03 . 1998-10-29 16:45 306,688 --a------ c:\windows\IsUninst.exe
2009-01-02 19:02 . 2009-01-02 19:02 <DIR> d---s---- c:\documents and settings\Patryk\UserData
2009-01-02 19:01 . 2009-01-02 19:01 <DIR> d-------- c:\windows\system32\windows media
2009-01-02 19:01 . 2009-01-02 19:01 <DIR> d--h----- c:\windows\msdownld.tmp
2009-01-02 19:01 . 2009-01-02 19:01 <DIR> d-------- c:\program files\Windows Media Components
2009-01-02 19:00 . 2002-08-29 18:41 401,462 --a------ c:\windows\msvcp60.dll
2009-01-02 19:00 . 2000-04-07 11:10 278,581 --a------ c:\windows\msvcrt.dll
2009-01-02 18:59 . 2009-01-02 20:06 <DIR> d-------- c:\program files\Common Files\Ulead Systems
2009-01-02 18:59 . 2009-01-02 20:51 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Ulead Systems
2009-01-02 18:46 . 2009-01-02 18:46 <DIR> d-------- c:\program files\BearShare Applications
2009-01-02 18:46 . 2008-09-25 14:20 483,328 --a------ c:\windows\system32\actskn45.ocx
2009-01-02 13:48 . 2009-01-02 15:08 <DIR> d-------- C:\Netgear
2009-01-01 23:55 . 2009-01-01 23:55 <DIR> d-------- c:\program files\Microsoft CopyProfile
2009-01-01 23:55 . 2003-06-25 15:05 266,360 --a------ c:\windows\system32\TweakUI.exe
2009-01-01 23:55 . 2002-07-17 20:03 45,056 --a------ c:\windows\system32\WNASPI32.DLL
2009-01-01 23:55 . 2002-07-17 19:05 16,512 --a------ c:\windows\system32\drivers\ASPI32.SYS
2009-01-01 22:46 . 2009-01-01 22:46 <DIR> d-------- c:\documents and settings\Patryk\Dane aplikacji\Leadertech
2009-01-01 22:29 . 2009-01-01 22:29 <DIR> d-------- c:\program files\DAEMON Tools Lite
2009-01-01 22:29 . 2009-01-11 17:43 <DIR> d-------- c:\documents and settings\Patryk\Gadu-Gadu
2009-01-01 22:29 . 2009-01-01 22:29 <DIR> d-------- c:\documents and settings\Patryk\Dane aplikacji\DAEMON Tools
2009-01-01 22:26 . 2009-01-01 22:26 715,248 --a------ c:\windows\system32\drivers\sptd.sys
2008-12-29 00:29 . 2008-12-29 00:29 <DIR> d-------- c:\program files\Alwil Software
2008-12-28 00:34 . 2008-12-28 00:34 <DIR> d-------- c:\program files\Gadu-Gadu
2008-12-27 18:31 . 2008-12-27 18:31 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\.Beniamin
2008-12-27 18:03 . 2002-07-15 18:18 8,704 --a------ c:\windows\system32\sporder.dll
2008-12-26 23:45 . 2009-01-03 00:43 151 --a------ c:\windows\PhotoSnapViewer.INI
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-11 14:17 --------- d--h--w c:\program files\InstallShield Installation Information
2009-01-10 19:05 --------- d-----w c:\program files\Realtek
2009-01-01 21:46 --------- d-----w c:\program files\Common Files\InstallShield
2008-12-12 14:58 1,386,496 ----a-w c:\windows\system32\msvbvm60.dll
2008-12-12 14:58 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\InstallShield
2008-12-12 14:56 --------- d-----w c:\program files\Trust
2008-12-12 14:55 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\{3E318E90-4BE6-4440-A0EE-2EAF8419199C}
2008-12-12 14:49 315,392 ----a-w c:\windows\HideWin.exe
2008-12-12 14:45 --------- d-----w c:\documents and settings\Patryk\Dane aplikacji\InstallShield
2008-12-12 14:32 --------- d-----w c:\program files\microsoft frontpage
2008-12-12 14:31 --------- d-----w c:\program files\Usługi online
2008-11-12 12:45 453,152 ----a-w c:\windows\system32\NVUNINST.EXE
2008-10-13 08:56 70,936 ----a-w c:\windows\system32\PhysXLoader.dll
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}]
2008-09-02 15:05 398776 --a------ c:\program files\BearShare Applications\BearShare MediaBar\BearShareIEHelper.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"FTweakFCleaner"="c:\program files\FCleaner\FCleaner.exe" [2009-01-05 1644544]
"Gadu-Gadu"="c:\program files\Gadu-Gadu\gg.exe" [2005-08-30 1708032]
"WinFast Schedule"="c:\program files\WinFast\WFDTV\WFWIZ.exe" [2008-10-02 2916352]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 81000]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-11-12 13672448]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-11-12 86016]
"WinFastDTV"="c:\program files\WinFast\WFDTV\DTVSchdl.exe" [2008-10-24 90112]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2008-11-20 178688]
"nwiz"="nwiz.exe" [2008-11-12 c:\windows\system32\nwiz.exe]
"RTHDCPL"="RTHDCPL.EXE" [2007-05-10 c:\windows\RTHDCPL.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoLogoff"= 1 (0x1)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"lanmanserver"=2 (0x2)
"JavaQuickStarterService"=2 (0x2)
"TuneUp.Defrag"=3 (0x3)
"SharedAccess"=2 (0x2)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Gadu-Gadu"="c:\program files\Gadu-Gadu\gg.exe" /tray
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Counter-Strike 1.6\\hl.exe"=
"c:\\Program Files\\OnRez\\SLVoice.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Gadu-Gadu\\gg.exe"=
"d:\\Internetowe\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\BearShare Applications\\BearShare\\BearShare.exe"=
"e:\\Gry\\Football Manager 2009\\fm.exe"=
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-12-29 111184]
R3 wfcxtcap;WinFast DTV BDA Transport Stream Capture Driver;c:\windows\system32\drivers\wfcxtcap.sys [2009-01-02 15872]
R4 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2008-12-29 20560]
S3 evserial;Virtual Serial Ports Driver (Eltima Softwate);c:\windows\system32\drivers\evserial.sys [2009-01-10 53888]
S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\drivers\ggflt.sys [2009-01-04 10976]
S3 MRVW225;802.11g/b Wireless LAN Dirver for Windows XP;c:\windows\system32\drivers\MRVW225.sys [2008-12-12 299904]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\system32\drivers\s0016bus.sys [2009-01-04 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\system32\drivers\s0016mdfl.sys [2009-01-04 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\system32\drivers\s0016mdm.sys [2009-01-04 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s0016mgmt.sys [2009-01-04 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\system32\drivers\s0016nd5.sys [2009-01-04 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\system32\drivers\s0016obex.sys [2009-01-04 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\system32\drivers\s0016unic.sys [2009-01-04 115752]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\f:\ntglm7x.sys --> f:\NTGLM7X.sys [?]
S3 VSBC;Virtual Serial Bus Enumerator (Eltima Software);c:\windows\system32\drivers\evsbc.sys [2009-01-10 27904]
S3 wfcxdtun;WinFast DTV BDA Tuner/Demod Driver;c:\windows\system32\drivers\wfcxdtun.sys --> c:\windows\system32\drivers\wfcxdtun.sys [?]
S3 wfcxxbar;WinFast TV Crossbar Driver;c:\windows\system32\drivers\wfcxxbar.sys --> c:\windows\system32\drivers\wfcxxbar.sys [?]
S4 WFCXVCAP;WinFast TV Video Capture Driver;c:\windows\system32\drivers\wfcxvcap.sys [2009-01-02 167296]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"
.
Zawartość folderu 'Zaplanowane zadania'
2009-01-11 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2008\OneClickStarter.exe [2008-06-20 09:09]
.
.
------- Skan uzupełniający -------
.
uStart Page = hxxp://search.bearshare.com/pl/
uInternet Connection Wizard,ShellNext = hxxp://www.auslogics.com/go/ddt7/en/speed-up-pc
FF - ProfilePath - c:\documents and settings\Patryk\Dane aplikacji\Mozilla\Firefox\Profiles\ctoe3bv4.default\
FF - prefs.js: browser.startup.homepage - hxxp://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl:official
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-11 19:15:21
Windows 5.1.2600 Dodatek Service Pack 2 NTFS
skanowanie ukrytych procesów ...
skanowanie ukrytych wpisów autostartu ...
skanowanie ukrytych plików ...
skanowanie pomyślnie ukończone
ukryte pliki: 0
**************************************************************************
.
Czas ukończenia: 2009-01-11 19:16:15
ComboFix-quarantined-files.txt 2009-01-11 18:15:47
Przed: 50 477 830 144 bajtów wolnych
Po: 50,506,706,944 bajtów wolnych
WindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /usepmtimer
256
Sorry za Quote... Z rozpędu zrobiłem zamiast Code, więcej się to nie powtórzy...
