
Procesor: Athlon xp 1700+
RAM: 768 MB
Karta Graficzna: radeon 9600pro
System: Xp sp 3
nikt nie ma zamiaruturbo16 napisał(a):Tylko nie radźcie mi abym zrobił formata bo to odpada.
ComboFix 08-12-20.05 - _Turbo_ 2008-12-22 8:24:49.6 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1250.1.1045.18.767.509 [GMT 1:00]
Uruchomiony z: c:\documents and settings\_Turbo_\Pulpit\ComboFix.exe
[COLOR=RED][B]UWAGA - TEN KOMPUTER NIE MA ZAINSTALOWANEJ KONSOLI ODZYSKIWANIA !![/B][/COLOR]
.
((((((((((((((((((((((((( Pliki utworzone od 2008-11-22 do 2008-12-22 )))))))))))))))))))))))))))))))
.
2008-12-22 08:05 . 2008-12-22 08:05 <DIR> d-------- c:\windows\Logs
2008-12-22 08:05 . 2008-12-22 08:05 <DIR> d-------- c:\windows\LastGood
2008-12-22 07:27 . 2008-12-22 07:27 35 --a------ c:\windows\WorldBuilder.INI
2008-12-21 08:42 . 2008-12-21 18:58 <DIR> d-------- c:\documents and settings\_Turbo_\Dane aplikacji\Moje pliki zapisu Bitwy o Śródziemie
2008-12-21 07:29 . 2008-12-21 08:21 <DIR> d-------- c:\documents and settings\Marvolo\Dane aplikacji\Moje pliki zapisu Bitwy o Śródziemie
2008-12-18 18:59 . 2008-12-18 18:59 <DIR> d--hs---- c:\windows\ftpcache
2008-12-16 18:48 . 2008-12-16 18:48 <DIR> dr-h----- c:\documents and settings\_Turbo_\Dane aplikacji\SecuROM
2008-12-16 16:57 . 1998-10-07 11:54 327,168 --a------ c:\windows\IsUn0415.exe
2008-12-13 20:30 . 2006-06-29 13:07 14,048 --------- c:\windows\system32\spmsg2.dll
2008-12-10 18:20 . 2008-12-10 18:20 <DIR> d-------- c:\documents and settings\Marvolo\Dane aplikacji\EmailNotifier
2008-12-10 17:48 . 2008-12-10 17:48 <DIR> d-------- c:\program files\MegauploadToolbar
2008-12-10 17:48 . 2008-12-10 17:48 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Megaupload
2008-12-10 17:48 . 2008-12-10 17:48 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\EmailNotifier
2008-12-10 17:48 . 2008-12-10 17:49 <DIR> d-------- c:\documents and settings\_Turbo_\Dane aplikacji\EmailNotifier
2008-12-10 17:37 . 2008-10-03 11:04 247,326 -----c--- c:\windows\system32\dllcache\strmdll.dll
2008-12-10 16:07 . 2008-12-13 12:49 <DIR> d-------- c:\documents and settings\_Turbo_\Dane aplikacji\GanymedeNet
2008-12-10 16:04 . 2008-12-10 16:06 <DIR> d-------- c:\program files\Ganymede
2008-12-09 14:37 . 2008-12-20 10:22 <DIR> d-------- c:\program files\DC++
2008-12-05 17:49 . 2008-12-05 17:52 <DIR> d-------- c:\documents and settings\_Turbo_\Dane aplikacji\RapidGet
2008-12-05 17:09 . 2008-12-05 17:09 <DIR> d-------- c:\documents and settings\_Turbo_\Dane aplikacji\WinRAR
2008-12-05 16:23 . 2008-12-05 16:23 <DIR> d-------- c:\program files\Jdownloader
2008-11-30 10:19 . 2008-11-30 10:19 <DIR> d-------- c:\documents and settings\_Turbo_\Dane aplikacji\Vidalia
2008-11-30 10:02 . 2008-11-30 10:19 <DIR> d-------- c:\documents and settings\_Turbo_\Dane aplikacji\tor
2008-11-29 08:50 . 2008-12-07 07:06 <DIR> d-------- C:\sXe Injected
2008-11-28 16:16 . 2008-11-28 16:16 410,976 --a------ c:\windows\system32\deploytk.dll
2008-11-27 17:12 . 2008-11-27 17:12 <DIR> d-------- c:\documents and settings\_Turbo_\Dane aplikacji\Leadertech
2008-11-27 16:58 . 2008-03-05 15:56 3,786,760 --a------ c:\windows\system32\D3DX9_37.dll
2008-11-27 16:58 . 2007-10-12 15:14 3,734,536 --a------ c:\windows\system32\d3dx9_36.dll
2008-11-27 16:58 . 2008-03-05 15:56 1,420,824 --a------ c:\windows\system32\D3DCompiler_37.dll
2008-11-27 16:58 . 2007-10-12 15:14 1,374,232 --a------ c:\windows\system32\D3DCompiler_36.dll
2008-11-27 16:58 . 2008-03-05 16:03 479,752 --a------ c:\windows\system32\XAudio2_0.dll
2008-11-27 16:58 . 2008-02-05 23:07 462,864 --a------ c:\windows\system32\d3dx10_37.dll
2008-11-27 16:58 . 2007-10-02 09:56 444,776 --a------ c:\windows\system32\d3dx10_36.dll
2008-11-27 16:58 . 2007-10-22 03:39 267,272 --a------ c:\windows\system32\xactengine2_10.dll
2008-11-27 16:58 . 2008-03-05 16:03 238,088 --a------ c:\windows\system32\xactengine3_0.dll
2008-11-27 16:58 . 2008-03-05 16:00 25,608 --a------ c:\windows\system32\X3DAudio1_3.dll
2008-11-27 16:57 . 2007-07-19 18:14 3,727,720 --a------ c:\windows\system32\d3dx9_35.dll
2008-11-27 16:57 . 2006-11-29 13:06 3,426,072 --a------ c:\windows\system32\d3dx9_32.dll
2008-11-27 16:57 . 2006-09-28 16:05 2,414,360 --a------ c:\windows\system32\d3dx9_31.dll
2008-11-27 16:57 . 2007-07-19 18:14 1,358,192 --a------ c:\windows\system32\D3DCompiler_35.dll
2008-11-27 16:57 . 2007-07-19 18:14 444,776 --a------ c:\windows\system32\d3dx10_35.dll
2008-11-27 16:57 . 2007-07-20 00:57 267,112 --a------ c:\windows\system32\xactengine2_9.dll
2008-11-27 16:57 . 2006-12-08 12:02 251,672 --a------ c:\windows\system32\xactengine2_5.dll
2008-11-27 16:57 . 2006-09-28 16:05 237,848 --a------ c:\windows\system32\xactengine2_4.dll
2008-11-27 16:57 . 2006-07-28 09:30 236,824 --a------ c:\windows\system32\xactengine2_3.dll
2008-11-27 16:57 . 2006-07-28 09:30 62,744 --a------ c:\windows\system32\xinput1_2.dll
2008-11-23 12:22 . 2008-11-23 12:22 580,096 --a--c--- c:\windows\system32\dllcache\user32.dll
2008-11-23 12:20 . 2008-11-23 13:49 <DIR> d-------- c:\windows\ERUNT
2008-11-22 15:08 . 2008-11-22 15:08 356,352 --a------ c:\windows\eSellerateEngine.dll
2008-11-22 15:03 . 2008-11-22 15:03 2,208 --a------ c:\windows\system32\drivers\nxsIO32.sys
2008-11-22 14:44 . 2008-11-24 07:51 <DIR> d-------- c:\documents and settings\Master\Dane aplikacji\Spyware Terminator
2008-11-22 09:39 . 2008-11-22 09:39 <DIR> d-------- c:\program files\Common Files\Wise Installation Wizard
2008-11-22 07:57 . 2008-11-22 07:57 <DIR> d-------- c:\program files\Lavasoft
2008-11-22 07:57 . 2008-11-22 09:40 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Lavasoft
2008-11-22 07:38 . 2008-11-26 15:18 <DIR> d-------- c:\documents and settings\Marvolo\Dane aplikacji\Spyware Terminator
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-20 09:28 --------- d--h--w c:\program files\InstallShield Installation Information
2008-12-14 09:54 --------- d-----w c:\documents and settings\_Turbo_\Dane aplikacji\MegauploadToolbar
2008-12-06 12:32 --------- d-----w c:\program files\NAPI-PROJEKT
2008-11-28 15:16 --------- d-----w c:\program files\Java
2008-11-27 17:13 --------- d-----w c:\program files\Common Files\InstallShield
2008-11-21 19:27 --------- d-----w c:\program files\Common Files\Panda Software
2008-11-21 19:16 0 ----a-w c:\windows\system32\drivers\wnmsav.dat
2008-11-21 06:18 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\Malwarebytes
2008-11-21 06:18 --------- d-----w c:\documents and settings\_Turbo_\Dane aplikacji\Malwarebytes
2008-11-20 18:20 1,990 ----a-w c:\windows\system32\drivers\net_m32.inf
2008-11-20 18:16 --------- d-----w c:\program files\Gadu-Gadu
2008-11-20 17:44 --------- d-----w c:\program files\Panda Software
2008-11-18 13:58 --------- d-----w c:\documents and settings\_Turbo_\Dane aplikacji\Skype
2008-11-17 14:15 --------- d-----w c:\documents and settings\_Turbo_\Dane aplikacji\Lavasoft
2008-11-17 13:57 --------- d-----w c:\documents and settings\_Turbo_\Dane aplikacji\ArcaBit
2008-11-15 19:20 --------- d-----w c:\program files\Common Files\xing shared
2008-11-15 19:20 --------- d-----w c:\program files\Common Files\Real
2008-11-15 19:19 --------- d-----w c:\program files\Real
2008-11-14 17:37 --------- d-----w c:\program files\Common Files\NSV
2008-11-04 11:40 --------- d-----w c:\documents and settings\Master\Dane aplikacji\MEGAUPLOADTOOLBAR
2008-11-02 14:39 249,856 ------w c:\windows\Setup1.exe
2008-10-30 14:09 --------- d-----w c:\program files\Common Files\Borland Shared
2008-10-30 14:09 --------- d-----w c:\program files\Borland
2008-10-27 09:04 70,992 ----a-w c:\windows\system32\XAPOFX1_2.dll
2008-10-27 09:04 514,384 ----a-w c:\windows\system32\XAudio2_3.dll
2008-10-27 09:04 235,856 ----a-w c:\windows\system32\xactengine3_3.dll
2008-10-27 09:04 23,376 ----a-w c:\windows\system32\X3DAudio1_5.dll
2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
2008-10-23 12:42 286,720 ----a-w c:\windows\system32\gdi32.dll
2008-10-23 12:03 --------- d-----w c:\documents and settings\Master\Dane aplikacji\Nero
2008-10-16 20:33 826,368 ----a-w c:\windows\system32\wininet.dll
2008-10-16 13:13 202,776 ----a-w c:\windows\system32\wuweb.dll
2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
2008-10-16 13:12 561,688 ----a-w c:\windows\system32\wuapi.dll
2008-10-16 13:12 323,608 ----a-w c:\windows\system32\wucltui.dll
2008-10-16 13:09 92,696 ----a-w c:\windows\system32\cdm.dll
2008-10-16 13:09 51,224 ----a-w c:\windows\system32\wuauclt.exe
2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2.dll
2008-10-16 13:08 34,328 ----a-w c:\windows\system32\wups.dll
2008-10-10 14:50 921,600 ----a-w c:\windows\system32\vorbisenc.dll
2008-10-10 14:50 892,928 ----a-w c:\windows\system32\iconv.dll
2008-10-10 14:50 45,056 ----a-w c:\windows\system32\ogg.dll
2008-10-10 14:50 237,568 ----a-w c:\windows\system32\OggDS.dll
2008-10-10 14:50 188,416 ----a-w c:\windows\system32\vorbis.dll
2008-10-10 14:50 1,415,680 ----a-w c:\windows\system32\WMV9VCM.dll
2008-10-10 14:49 9,216 ----a-w c:\windows\system32\cpuinf32.dll
2008-10-10 14:49 755,027 ----a-w c:\windows\system32\xvidcore.dll
2008-10-10 14:49 245,760 ----a-w c:\windows\system32\mplvpx.dll
2008-10-10 03:52 452,440 ----a-w c:\windows\system32\d3dx10_40.dll
2008-10-10 03:52 4,379,984 ----a-w c:\windows\system32\D3DX9_40.dll
2008-10-10 03:52 2,036,576 ----a-w c:\windows\system32\D3DCompiler_40.dll
2008-10-03 10:04 247,326 ----a-w c:\windows\system32\strmdll.dll
2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll
2008-03-04 18:35 32 -c--a-w c:\documents and settings\All Users\Dane aplikacji\ezsid.dat
2004-10-01 13:00 40,960 ----a-w c:\program files\Uninstall_CDS.exe
2001-11-23 04:08 712,704 -c--a-w c:\windows\inf\OTHER\AUDIO3D.DLL
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A057A204-BACC-4D26-C39E-35F1D2A32EC8}]
2008-08-04 21:44 1947080 --a------ c:\progra~1\MEGAUP~1\MEGAUP~1.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{A057A204-BACC-4D26-C39E-35F1D2A32EC8}"= "c:\progra~1\MEGAUP~1\MEGAUP~1.DLL" [2008-08-04 1947080]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{A057A204-BACC-4D26-C39E-35F1D2A32EC8}"= "c:\progra~1\MEGAUP~1\MEGAUP~1.DLL" [2008-08-04 1947080]
[HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-c39e-35f1d2a32ec8}]
[HKEY_CLASSES_ROOT\megauploadtoolbar.MEGAUPLOADTOOLBAR]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Gadu-Gadu"="c:\program files\Gadu-Gadu\gg.exe" [2007-11-14 2131392]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-02-28 1828136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-30 344064]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-28 136600]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 81000]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 2008-06-12 01:38 34672 c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
--a------ 2008-02-14 00:09 486856 c:\program files\DAEMON Tools Lite\daemon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
--a------ 2008-02-18 15:29 2221352 c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2008-02-28 08:59 570664 c:\program files\Common Files\Nero\Lib\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\PandaAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\PandaFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\Gadu-Gadu\\gg.exe"=
"c:\\Program Files\\DC++\\DCPlusPlus.exe"=
"c:\\Program Files\\Ares\\Ares.exe"=
"e:\\cs16\\hl.exe"=
"e:\\cs16\\hlds.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"c:\\Program Files\\Nero\\Nero8\\Nero Home\\NeroHome.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"d:\\cs\\hl.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\SAGENT4.EXE"=
"c:\\Documents and Settings\\Marvolo\\Pulpit\\gusanos-0.9c\\gusanos.exe"=
"c:\\Program Files\\Java\\jre6\\launch4j-tmp\\JDownloader.exe"=
"c:\\WINDOWS\\system32\\java.exe"=
"d:\\metin2\\metin2.bin"=
"d:\\bitwaokakalo\\game.dat"=
"f:\\rapidshare\\Left_4_Dead_Skullptura\\Left.4.Dead.Full-Rip.Skullptura\\Left 4 Dead\\left4dead.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009
R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [2008-11-17 28544]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-11-21 111184]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2008-11-21 20560]
R2 NwSapAgent;Agent SAP;c:\windows\system32\svchost.exe -k netsvcs [2004-08-03 14336]
R2 nxsIO32;NextSensor Kernel I/O Driver;\??\c:\windows\System32\DRIVERS\nxsIO32.sys [2008-11-22 2208]
R3 CIF USB CAMERA Service;CIF USB CAMERA;c:\windows\system32\DRIVERS\pfc027.sys [2008-02-12 112380]
S0 knsywcw;knsywcw;c:\windows\system32\drivers\bbtdekyy.sys []
S3 ddsxeiservice;ddsxeiservice2;\??\c:\sxe injected\ddsxei.sys [2008-12-04 48768]
.
.
------- Skan uzupełniający -------
.
uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
uInternet Settings,ProxyServer = w3cache.tpnet.pl:80
IE: E&ksport do programu Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: pobierz za pomocą mega manager... - c:\program files\Megaupload\Mega Manager\mm_file.htm
c:\windows\system32\SkanerOnlineUninstall.exe - O16 -: {68282C51-9459-467B-95BF-3C0E89627E55}
hxxp://www.mks.com.pl/skaner/SkanerOnline.cab
c:\windows\Downloaded Program Files\SkanerOnline.inf
FF - ProfilePath - c:\documents and settings\_Turbo_\Dane aplikacji\Mozilla\Firefox\Profiles\7uf6tb2a.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage - hxxp://www.google.pl/
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?ei=utf-8&fr=megaup&p=
FF - component: c:\program files\Real\RealPlayer\browserrecord\components\nprpbrowserrecordplugin.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npganymedenet.dll
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-22 08:26:23
Windows 5.1.2600 Dodatek Service Pack 3 NTFS
skanowanie ukrytych procesów ...
skanowanie ukrytych wpisów autostartu ...
skanowanie ukrytych plików ...
skanowanie pomyślnie ukończone
ukryte pliki: 0
**************************************************************************
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------
- - - - - - - > 'winlogon.exe'(548)
c:\windows\system32\Ati2evxx.dll
.
Czas ukończenia: 2008-12-22 8:27:18
ComboFix-quarantined-files.txt 2008-12-22 07:27:04
ComboFix2.txt 2008-12-21 18:14:22
ComboFix3.txt 2008-12-21 18:09:34
Przed: 11 614 019 584 bajtów wolnych
Po: 11,604,992,000 bajtów wolnych
226 --- E O F --- 2008-12-18 11:03:12
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:29:12, on 2008-12-22
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\imapi.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = w3cache.tpnet.pl:80
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - (no file)
O3 - Toolbar: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: pobierz za pomocą mega manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {3CA1D406-30D8-4DBC-8EE6-0E2C05F78864} - (no file) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://www.pandasecurity.com/activescan/cabs/as2stubie.cab
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1202969780014
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
--
End of file - 7689 bytes
klej30 napisał(a):spróbuj tych programów : Ccleaner,Ashampoo WinOptimizer 6,Registry Booster,Uniblue SpeedUpMyPC
Wejdź jeszcze w oczyszczanie dysku: pozaznaczaj tam wszystkie opcje i usuń punkty kontrone przywracania systemu
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
Nie działa mi polecenie msconfig.
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 12 gości