straszna zamuła neta <log>

**Posty:** 214 · przez **muzzy17** 17 Mar 2007, 11:32

witam , tak jak w temacie , stronki ledwo się wczytują , gg bardzo długo sie łączy . Mam neta radiowego , zawsze wszystko było ok , dostawca mówi ze u nich wszystko dobrze.
Oto logi:

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 10:21:59, on 2007-03-17 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\acs.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\TP-LINK\TWCU\TWCU.exe C:\Program Files\Eset\nod32kui.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe E:\programy\Winamp\winamp.exe C:\Program Files\Mozilla Firefox\firefox.exe E:\programy\Gadu-Gadu\gg.exe E:\programy\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O4 - HKLM\..\Run: [TWCU] "C:\Program Files\TP-LINK\TWCU\TWCU.exe" -nogui O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "C:\Program Files\RivaTuner v2.0 Final Release\RivaTuner.exe" /S O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "E:\programy\Gadu-Gadu\gg.exe" /tray O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{23488AC9-EE8C-4794-8C94-0464F3DE3CFE}: NameServer = 192.168.11.3 192.168.11.3 O23 - Service: TP-LINK Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

za chwile dodam silentrunners[/code]

**Posty:** 18165 · przez **wojtas** 17 Mar 2007, 13:05

daj loga z

otwierasz link>> http://www.silentrunners.org/Silent%20Runners.vbs >>zapisujesz jako na pulpicie>>klikasz dwa razy >>masz wybor i wybierasz no>>i czekasz troszke az wygeneruje sie cały log do konca
wrzucasz na forum

oraz comboscana

http://www.techsupportforum.com/sectools/Deckard/comboscan.exe

**Posty:** 214 · przez **muzzy17** 17 Mar 2007, 15:49

comboscan :

Kod: Zaznacz wszystko: ComboScan v20070306.20 run by Administrator on 2007-03-17 at 14:26:18 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- Successfully created ComboScan Restore Point. -- Last 5 Restore Point(s) -- 5: 2007-03-17 13:26:21 UTC - RP22 - ComboScan Restore Point 4: 2007-03-16 22:01:20 UTC - RP21 - Installed TP-LINK Wireless Client Installation Program 3: 2007-03-15 23:33:57 UTC - RP20 - Punkt kontrolny systemu 2: 2007-03-14 23:18:45 UTC - RP19 - Punkt kontrolny systemu 1: 2007-03-13 23:13:59 UTC - RP18 - Punkt kontrolny systemu Performed disk cleanup. -- HijackThis (run as Administrator.exe) --------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 14:26:26, on 2007-03-17 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\acs.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\TP-LINK\TWCU\TWCU.exe C:\Program Files\Eset\nod32kui.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe E:\ściągnięte\comboscan.exe E:\programy\Administrator.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O4 - HKLM\..\Run: [TWCU] "C:\Program Files\TP-LINK\TWCU\TWCU.exe" -nogui O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "C:\Program Files\RivaTuner v2.0 Final Release\RivaTuner.exe" /S O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "E:\programy\Gadu-Gadu\gg.exe" /tray O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{23488AC9-EE8C-4794-8C94-0464F3DE3CFE}: NameServer = 192.168.11.3 192.168.11.3 O23 - Service: TP-LINK Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe -- HijackThis Fixed Entries (E:\programy\backups\) ----------------------------- backup-20070221-195940-244 O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe backup-20070221-195940-398 O11 - Options group: [INTERNATIONAL] International* backup-20070221-195940-879 O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe -- File Associations ----------------------------------------------------------- .bat - batfile - "%1" %* .chm - chm.file - "C:\WINDOWS\hh.exe" %1 .cmd - cmdfile - "%1" %* .com - comfile - "%1" %* .exe - exefile - "%1" %* .hlp - hlpfile - %SystemRoot%\System32\winhlp32.exe %1 .inf - inffile - %SystemRoot%\System32\NOTEPAD.EXE %1 .ini - inifile - %SystemRoot%\System32\NOTEPAD.EXE %1 .js - JSFile - %SystemRoot%\System32\WScript.exe "%1" %* .lnk - lnkfile - {00021401-0000-0000-C000-000000000046} .pif - piffile - "%1" %* .reg - regfile - regedit.exe "%1" .scr - scrfile - "%1" /S .txt - txtfile - %SystemRoot%\system32\NOTEPAD.EXE %1 .vbs - VBSFile - %SystemRoot%\System32\WScript.exe "%1" %* -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- 2R AegisP (AEGIS Protocol (IEEE 802.1x) v3.2.0.3) - C:\WINDOWS\system32\drivers\AegisP.sys 1R AmdK7 (Sterownik procesora AMD K7) - C:\WINDOWS\system32\drivers\amdk7.sys 2R AMON - C:\WINDOWS\system32\drivers\amon.sys 3R AR5211 (TP-LINK Wireless Network Adapter Service) - C:\WINDOWS\system32\drivers\ar5211.sys 1R AVG Anti-Spyware Driver - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys 1R AvgAsCln (AVG Anti-Spyware Clean Driver) - C:\WINDOWS\system32\drivers\AvgAsCln.sys 3R cmuda (C-Media WDM Audio Interface) - C:\WINDOWS\system32\drivers\cmuda.sys 3R FETNDIS (Sterownik NT karty VIA PCI 10/100Mb Fast Ethernet) - C:\WINDOWS\system32\drivers\fetnd5.sys 4S InCDFs (InCD File System) - C:\WINDOWS\system32\drivers\InCDFs.sys (not found) 1S InCDPass - C:\WINDOWS\system32\drivers\InCDPass.sys (not found) 1S InCDRm (InCD Reader) - C:\WINDOWS\system32\drivers\InCDRm.sys (not found) 1R nod32drv - C:\WINDOWS\system32\drivers\nod32drv.sys 3R nv - C:\WINDOWS\system32\drivers\nv4_mini.sys 3R RivaTuner32 - C:\Program Files\RivaTuner v2.0 Final Release\RivaTuner32.sys 0R sptd - C:\WINDOWS\system32\drivers\sptd.sys 0R uagp35 (Filtr AGPv3.5 firmy Microsoft) - C:\WINDOWS\system32\drivers\UAGP35.SYS 3R usbehci (Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft) - C:\WINDOWS\system32\drivers\usbehci.sys 3S USBSTOR (Sterownik magazynu masowego USB) - C:\WINDOWS\system32\drivers\USBSTOR.SYS 0R viaagp1 (VIA AGP Filter) - C:\WINDOWS\system32\drivers\VIAAGP1.SYS 1R WS2IFSL (Środowisko wspomagające dostawcę usług innych niż IFS - Windows Socket 2.0) - C:\WINDOWS\system32\drivers\ws2ifsl.sys -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- 2R ACS (TP-LINK Configuration Service) - C:\WINDOWS\system32\acs.exe 3S aspnet_state (ASP.NET State Service) - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe 2R AVG Anti-Spyware Guard - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe 3S clr_optimization_v2.0.50727_32 (.NET Runtime Optimization Service v2.0.50727_X86) - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 2R NOD32krn (NOD32 Kernel Service) - "C:\Program Files\Eset\nod32krn.exe" 2R NVSvc (NVIDIA Display Driver Service) - C:\WINDOWS\system32\nvsvc32.exe -- Files created between 2007-02-17 and 2007-03-17 ----------------------------- 2007-03-16 22:12:35 0 d-------- C:\1x22 2007-03-11 21:58:11 671 --a------ C:\WINDOWS\mozver.dat 2007-03-06 20:30:30 32768 --a------ C:\WINDOWS\system32\BCGPOleAcc.dll<BCGPOL~1.DLL> 2007-03-06 20:30:29 364544 --a------ C:\WINDOWS\system32\TwnLib4.dll 2007-03-06 20:30:29 471040 --a------ C:\WINDOWS\system32\imagXRA7.dll 2007-03-06 20:30:29 262144 --a------ C:\WINDOWS\system32\imagXR7.dll 2007-03-06 20:30:29 476320 --a------ C:\WINDOWS\system32\imagXpr7.dll 2007-03-06 20:30:29 2605056 --a------ C:\WINDOWS\system32\BCGCBPRO800u.dll<BCGCBP~2.DLL> 2007-03-06 20:30:29 2600960 --a------ C:\WINDOWS\system32\BCGCBPRO800.dll<BCGCBP~1.DLL> 2007-03-06 20:30:28 348160 --a------ C:\WINDOWS\system32\msvcr71.dll 2007-03-06 20:30:28 499712 --a------ C:\WINDOWS\system32\msvcp71.dll 2007-03-06 20:30:28 1047552 --a------ C:\WINDOWS\system32\mfc71u.dll 2007-03-06 20:30:28 1060864 --a------ C:\WINDOWS\system32\mfc71.dll 2007-03-06 20:30:28 1568768 --a------ C:\WINDOWS\system32\imagX7.dll 2007-03-05 23:38:04 3968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2007-03-05 23:37:58 0 d-------- C:\Program Files\Grisoft 2007-03-05 23:22:46 298104 --a------ C:\WINDOWS\system32\imon.dll 2007-03-05 23:22:46 15424 --a------ C:\WINDOWS\system32\drivers\nod32drv.sys 2007-03-05 23:22:46 512096 --a------ C:\WINDOWS\system32\drivers\amon.sys 2007-03-05 18:12:56 639224 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2007-03-04 19:19:33 0 d-------- C:\Program Files\Kaspersky Lab<KASPER~1> 2007-03-04 19:12:29 0 d-------- C:\Program Files\Pointstone<POINTS~1> 2007-03-04 19:12:28 0 d-------- C:\Program Files\Common Files\Pointstone<POINTS~1> 2007-03-03 11:20:03 0 d-------- C:\Program Files\Warblade 2007-03-01 20:52:41 0 d-------- C:\Program Files\Codec 2007-03-01 00:20:54 0 d-------- C:\Program Files\AutoConnect<AUTOCO~1> 2007-02-28 19:32:20 0 d-------- C:\Program Files\uTorrent 2007-02-28 17:58:23 3072 --a------ C:\WINDOWS\system32\drivers\audstub.sys 2007-02-28 17:57:52 58624 --a------ C:\WINDOWS\system32\drivers\redbook.sys 2007-02-28 17:57:21 44672 --a------ C:\WINDOWS\system32\drivers\UAGP35.SYS 2007-02-28 17:57:11 27165 --a------ C:\WINDOWS\system32\drivers\fetnd5.sys 2007-02-28 17:57:08 77312 --a------ C:\WINDOWS\system32\usbui.dll 2007-02-28 17:57:04 10624 --a------ C:\WINDOWS\system32\drivers\gameenum.sys 2007-02-28 17:55:19 6144 -ra------ C:\WINDOWS\system32\kbdtuq.dll 2007-02-28 17:55:19 6144 -ra------ C:\WINDOWS\system32\kbdtuf.dll 2007-02-28 17:55:19 5632 -ra------ C:\WINDOWS\system32\kbdazel.dll 2007-02-28 17:55:18 5632 -ra------ C:\WINDOWS\system32\kbdmon.dll 2007-02-28 17:55:18 5632 -ra------ C:\WINDOWS\system32\kbdkyr.dll 2007-02-28 17:55:16 8192 -ra------ C:\WINDOWS\system32\kbdhept.dll 2007-02-28 17:55:16 6656 -ra------ C:\WINDOWS\system32\kbdhela3.dll 2007-02-28 17:55:16 6144 -ra------ C:\WINDOWS\system32\kbdhela2.dll 2007-02-28 17:55:16 5632 -ra------ C:\WINDOWS\system32\kbdhe319.dll 2007-02-28 17:55:16 5632 -ra------ C:\WINDOWS\system32\kbdhe220.dll 2007-02-28 17:55:16 5632 -ra------ C:\WINDOWS\system32\kbdhe.dll 2007-02-28 17:55:16 6144 -ra------ C:\WINDOWS\system32\kbdgkl.dll 2007-02-28 17:55:15 6144 -ra------ C:\WINDOWS\system32\kbdlv1.dll 2007-02-28 17:55:15 6144 -ra------ C:\WINDOWS\system32\kbdlv.dll 2007-02-28 17:55:15 5632 -ra------ C:\WINDOWS\system32\kbdlt1.dll 2007-02-28 17:55:15 5632 -ra------ C:\WINDOWS\system32\kbdlt.dll 2007-02-28 17:55:15 6144 -ra------ C:\WINDOWS\system32\kbdest.dll 2007-02-28 17:55:08 6656 -ra------ C:\WINDOWS\system32\kbdycl.dll 2007-02-28 17:55:08 6656 -ra------ C:\WINDOWS\system32\kbdsl1.dll 2007-02-28 17:55:08 6656 -ra------ C:\WINDOWS\system32\kbdsl.dll 2007-02-28 17:55:08 5632 -ra------ C:\WINDOWS\system32\kbdro.dll 2007-02-28 17:55:08 5632 -ra------ C:\WINDOWS\system32\kbdhu1.dll 2007-02-28 17:55:08 6656 -ra------ C:\WINDOWS\system32\kbdhu.dll 2007-02-28 17:55:08 6656 -ra------ C:\WINDOWS\system32\kbdcz2.dll 2007-02-28 17:55:08 6656 -ra------ C:\WINDOWS\system32\kbdcz1.dll 2007-02-28 17:55:08 7168 -ra------ C:\WINDOWS\system32\kbdcz.dll 2007-02-28 17:55:08 6656 -ra------ C:\WINDOWS\system32\kbdcr.dll 2007-02-28 17:55:08 6656 -ra------ C:\WINDOWS\system32\KBDAL.DLL 2007-02-28 17:55:07 24661 --a------ C:\WINDOWS\system32\spxcoins.dll 2007-02-28 17:55:07 13312 --a------ C:\WINDOWS\system32\irclass.dll 2007-02-28 17:55:07 103424 --a------ C:\WINDOWS\system32\EqnClass.Dll 2007-02-28 17:55:07 85532 --a------ C:\WINDOWS\system32\dgsetup.dll 2007-02-28 17:55:07 176157 --a------ C:\WINDOWS\system32\dgrpsetu.dll 2007-02-28 17:55:06 9168 --a------ C:\WINDOWS\system\VER.DLL 2007-02-28 17:55:06 19200 --a------ C:\WINDOWS\system\TAPI.DLL 2007-02-28 17:55:06 5120 --a------ C:\WINDOWS\system\SHELL.DLL 2007-02-28 17:55:06 24064 --a------ C:\WINDOWS\system\OLESVR.DLL 2007-02-28 17:55:06 83456 --a------ C:\WINDOWS\system\OLECLI.DLL 2007-02-28 17:55:06 127008 --a------ C:\WINDOWS\system\MSVIDEO.DLL 2007-02-28 17:55:05 15360 --a------ C:\WINDOWS\TASKMAN.EXE 2007-02-28 17:55:05 11264 --a------ C:\WINDOWS\system32\drivers\irenum.sys 2007-02-28 17:55:05 9936 --a------ C:\WINDOWS\system\LZEXPAND.DLL 2007-02-28 17:55:05 33376 --a------ C:\WINDOWS\system\COMMDLG.DLL 2007-02-28 17:55:05 109488 --a------ C:\WINDOWS\system\AVIFILE.DLL 2007-02-28 17:55:05 70096 --a------ C:\WINDOWS\system\AVICAP.DLL 2007-02-28 17:55:04 8704 --a------ C:\WINDOWS\system32\batt.dll 2007-02-28 17:55:04 69552 --a------ C:\WINDOWS\system\MMSYSTEM.DLL 2007-02-28 17:55:04 70144 --a------ C:\WINDOWS\NOTEPAD.EXE 2007-02-28 17:55:03 75776 --a------ C:\WINDOWS\system32\storprop.dll 2007-02-28 17:46:52 0 --a------ C:\WINDOWS\nsreg.dat 2007-02-28 17:36:04 208896 --a------ C:\WINDOWS\system32\nvudisp.exe 2007-02-28 17:35:51 208896 --a------ C:\WINDOWS\system32\NVUNINST.EXE 2007-02-28 17:16:46 6400 --a------ C:\WINDOWS\system32\drivers\splitter.sys 2007-02-28 17:16:44 82944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys 2007-02-28 17:16:42 52864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys 2007-02-28 17:16:41 54272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys 2007-02-28 17:16:39 142464 --a------ C:\WINDOWS\system32\drivers\aec.sys 2007-02-28 17:16:37 171776 --a------ C:\WINDOWS\system32\drivers\kmixer.sys 2007-02-28 17:16:36 2944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys 2007-02-28 17:16:34 60800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys 2007-02-28 17:16:32 7552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys 2007-02-28 17:16:30 4992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys 2007-02-28 17:16:27 5376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2007-02-28 17:16:22 4096 --a------ C:\WINDOWS\system32\ksuser.dll 2007-02-28 17:16:22 145792 --a------ C:\WINDOWS\system32\drivers\portcls.sys 2007-02-28 17:16:21 60288 --a------ C:\WINDOWS\system32\drivers\drmk.sys 2007-02-28 17:16:07 266240 --a------ C:\WINDOWS\CMIUninstall.exe<CMIUNI~1.EXE> 2007-02-28 17:16:07 225280 --a------ C:\WINDOWS\CmiRmRedundDir.exe<CMIRMR~1.EXE> 2007-02-28 17:16:07 28672 --a------ C:\WINDOWS\CMIRmDriver.dll<CMIRMD~1.DLL> 2007-02-28 17:15:40 26880 --a------ C:\WINDOWS\system32\drivers\VIAAGP1.SYS 2007-02-28 17:15:21 306688 --a------ C:\WINDOWS\IsUninst.exe 2007-02-28 17:15:04 5824 --a------ C:\WINDOWS\system32\drivers\ASUSHWIO.SYS 2007-02-28 17:08:36 463168 --a------ C:\WINDOWS\system32\drivers\ar5211.sys 2007-02-28 17:08:36 463168 --a------ C:\WINDOWS\system32\ar5211.sys 2007-02-28 17:08:34 36864 --a------ C:\WINDOWS\system32\acs.exe 2007-02-28 17:08:29 17801 --a------ C:\WINDOWS\system32\drivers\AegisP.sys 2007-02-28 17:08:28 249856 --a------ C:\WINDOWS\system32\wgapi.dll 2007-02-28 17:08:28 237568 --a------ C:\WINDOWS\system32\wcapi.dll 2007-02-28 17:08:28 77824 --a------ C:\WINDOWS\system32\athcfg11res.dll<ATHCFG~1.DLL> 2007-02-28 17:08:28 385024 --a------ C:\WINDOWS\system32\athcfg11.dll 2007-02-28 17:08:28 192512 --a------ C:\WINDOWS\system32\AegisI5.exe 2007-02-28 17:08:28 1396835 --a------ C:\WINDOWS\system32\AegisE5.dll 2007-02-28 17:08:25 0 d-------- C:\Program Files\TP-LINK 2007-02-28 17:08:01 0 d-------- C:\temp 2007-02-28 17:04:34 112128 --a------ C:\WINDOWS\system32\mapi32.dll 2007-02-28 17:02:35 11264 --a------ C:\WINDOWS\system32\atrace.dll 2007-02-28 17:02:28 12288 --a------ C:\WINDOWS\system32\nmevtmsg.dll 2007-02-28 17:02:27 16384 --a------ C:\WINDOWS\system32\icfgnt5.dll 2007-02-28 17:02:27 67584 --a------ C:\WINDOWS\system32\acctres.dll 2007-02-28 17:02:23 120320 --a------ C:\WINDOWS\system32\wuweb.dll 2007-02-28 17:02:23 36864 --a------ C:\WINDOWS\system32\wups.dll 2007-02-28 17:02:23 113664 --a------ C:\WINDOWS\system32\wucltui.dll 2007-02-28 17:02:23 6656 --a------ C:\WINDOWS\system32\wuauserv.dll 2007-02-28 17:02:23 184320 --a------ C:\WINDOWS\system32\wuaueng1.dll 2007-02-28 17:02:23 1134592 --a------ C:\WINDOWS\system32\wuaueng.dll 2007-02-28 17:02:23 168960 --a------ C:\WINDOWS\system32\wuauclt1.exe 2007-02-28 17:02:23 112128 --a------ C:\WINDOWS\system32\wuauclt.exe 2007-02-28 17:02:22 431616 --a------ C:\WINDOWS\system32\wuapi.dll 2007-02-28 17:02:22 18944 --a------ C:\WINDOWS\system32\qmgrprxy.dll 2007-02-28 17:02:22 382464 --a------ C:\WINDOWS\system32\qmgr.dll 2007-02-28 17:02:22 7168 --a------ C:\WINDOWS\system32\bitsprx3.dll 2007-02-28 17:02:22 8192 --a------ C:\WINDOWS\system32\bitsprx2.dll 2007-02-28 17:02:19 0 d-------- C:\Program Files\Movie Maker<MOVIEM~1> 2007-02-28 17:02:16 45568 --a------ C:\WINDOWS\system32\safrslv.dll 2007-02-28 17:02:16 29696 --a------ C:\WINDOWS\system32\safrdm.dll 2007-02-28 17:02:16 43520 --a------ C:\WINDOWS\system32\safrcdlg.dll 2007-02-28 17:02:16 43520 --a------ C:\WINDOWS\system32\racpldlg.dll 2007-02-28 17:02:13 22528 --a------ C:\WINDOWS\system32\fltMc.exe 2007-02-28 17:02:13 16896 --a------ C:\WINDOWS\system32\fltlib.dll 2007-02-28 17:02:13 124800 --a------ C:\WINDOWS\system32\drivers\fltMgr.sys 2007-02-28 17:02:12 171008 --a------ C:\WINDOWS\system32\srsvc.dll 2007-02-28 17:02:12 240128 --a------ C:\WINDOWS\system32\srrstr.dll 2007-02-28 17:02:12 67584 --a------ C:\WINDOWS\system32\srclient.dll 2007-02-28 17:02:12 34560 --a------ C:\WINDOWS\system32\mnmdd.dll 2007-02-28 17:02:12 32768 --a------ C:\WINDOWS\system32\isrdbg32.dll 2007-02-28 17:02:12 81920 --a------ C:\WINDOWS\system32\ils.dll 2007-02-28 17:02:12 73472 --a------ C:\WINDOWS\system32\drivers\sr.sys 2007-02-28 17:02:11 28672 --a------ C:\WINDOWS\system32\nmmkcert.dll 2007-02-28 17:02:11 105984 --a------ C:\WINDOWS\system32\msoert2.dll 2007-02-28 17:02:11 252928 --a------ C:\WINDOWS\system32\msoeacct.dll 2007-02-28 17:02:11 69632 --a------ C:\WINDOWS\system32\msconf.dll 2007-02-28 17:02:11 32768 --a------ C:\WINDOWS\system32\mnmsrvc.exe 2007-02-28 17:02:11 49664 --a------ C:\WINDOWS\system32\inetres.dll 2007-02-28 17:02:11 678400 --a------ C:\WINDOWS\system32\inetcomm.dll 2007-02-28 17:02:10 192000 --a------ C:\WINDOWS\system32\schedsvc.dll 2007-02-28 17:02:10 12288 --a------ C:\WINDOWS\system32\mstinit.exe 2007-02-28 17:02:10 278528 --a------ C:\WINDOWS\system32\mstask.dll 2007-02-28 17:02:10 86016 --a------ C:\WINDOWS\system32\isign32.dll 2007-02-28 17:02:10 278528 --a------ C:\WINDOWS\system32\inetcfg.dll 2007-02-28 17:02:10 65536 --a------ C:\WINDOWS\system32\icwphbk.dll 2007-02-28 17:02:10 73728 --a------ C:\WINDOWS\system32\icwdial.dll 2007-02-28 17:01:31 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat<EMPTYR~1.DAT> 2007-02-28 17:00:59 5632 --a------ C:\WINDOWS\system32\write.exe 2007-02-28 17:00:54 44544 --a------ C:\WINDOWS\system32\hticons.dll 2007-02-28 17:00:54 73216 --a------ C:\WINDOWS\system32\avwav.dll 2007-02-28 17:00:54 16384 --a------ C:\WINDOWS\system32\avmeter.dll 2007-02-28 17:00:53 35328 --a------ C:\WINDOWS\system32\winchat.exe 2007-02-28 17:00:53 231424 --a------ C:\WINDOWS\system32\avtapi.dll 2007-02-28 17:00:48 605696 --a------ C:\WINDOWS\system32\getuname.dll 2007-02-28 17:00:48 80896 --a------ C:\WINDOWS\system32\charmap.exe 2007-02-28 17:00:47 119808 --a------ C:\WINDOWS\system32\winmine.exe 2007-02-28 17:00:47 57344 --a------ C:\WINDOWS\system32\sol.exe 2007-02-28 17:00:47 128000 --a------ C:\WINDOWS\system32\mshearts.exe 2007-02-28 17:00:47 55808 --a------ C:\WINDOWS\system32\freecell.exe 2007-02-28 17:00:47 115200 --a------ C:\WINDOWS\system32\calc.exe 2007-02-28 17:00:46 1225 --a------ C:\WINDOWS\system32\usrlogon.cmd 2007-02-28 17:00:46 17920 --a------ C:\WINDOWS\system32\tsshutdn.exe 2007-02-28 17:00:46 16384 --a------ C:\WINDOWS\system32\tskill.exe 2007-02-28 17:00:46 15360 --a------ C:\WINDOWS\system32\tsdiscon.exe 2007-02-28 17:00:46 15360 --a------ C:\WINDOWS\system32\tscon.exe 2007-02-28 17:00:46 15360 --a------ C:\WINDOWS\system32\shadow.exe 2007-02-28 17:00:46 16384 --a------ C:\WINDOWS\system32\rwinsta.exe 2007-02-28 17:00:46 9728 --a------ C:\WINDOWS\system32\reset.exe 2007-02-28 17:00:46 33792 --a------ C:\WINDOWS\system32\regini.exe 2007-02-28 17:00:46 4608 --a------ C:\WINDOWS\system32\rdpcfgex.dll 2007-02-28 17:00:46 22528 --a------ C:\WINDOWS\system32\qwinsta.exe 2007-02-28 17:00:46 17408 --a------ C:\WINDOWS\system32\qappsrv.exe 2007-02-28 17:00:46 22528 --a------ C:\WINDOWS\system32\msg.exe 2007-02-28 17:00:46 15872 --a------ C:\WINDOWS\system32\logoff.exe 2007-02-28 17:00:45 25088 --a------ C:\WINDOWS\system32\mtxlegih.dll 2007-02-28 17:00:45 4096 --a------ C:\WINDOWS\system32\mtxex.dll 2007-02-28 17:00:45 20480 --a------ C:\WINDOWS\system32\mtxdm.dll 2007-02-28 17:00:45 5120 --a------ C:\WINDOWS\system32\dcomcnfg.exe 2007-02-28 17:00:45 15872 --a------ C:\WINDOWS\system32\cdmodem.dll 2007-02-28 17:00:44 54272 --a------ C:\WINDOWS\system32\stclient.dll 2007-02-28 17:00:44 147456 --a------ C:\WINDOWS\system32\comsnap.dll 2007-02-28 17:00:44 82432 --a------ C:\WINDOWS\system32\comrepl.dll 2007-02-28 17:00:44 25600 --a------ C:\WINDOWS\system32\comaddin.dll 2007-02-28 17:00:40 187904 --a------ C:\WINDOWS\system32\accwiz.exe 2007-02-28 17:00:39 539136 --a------ C:\WINDOWS\system32\spider.exe 2007-02-28 17:00:39 132608 --a------ C:\WINDOWS\system32\sndrec32.exe 2007-02-28 17:00:39 345088 --a------ C:\WINDOWS\system32\mspaint.exe 2007-02-28 17:00:39 124928 --a------ C:\WINDOWS\system32\mplay32.exe 2007-02-28 17:00:39 349696 --a------ C:\WINDOWS\system32\hypertrm.dll 2007-02-28 17:00:39 103424 --a------ C:\WINDOWS\system32\clipbrd.exe 2007-02-28 17:00:38 94720 --a------ C:\WINDOWS\system32\tscfgwmi.dll 2007-02-28 17:00:38 141824 --a------ C:\WINDOWS\system32\sessmgr.exe 2007-02-28 17:00:38 60928 --a------ C:\WINDOWS\system32\remotepg.dll 2007-02-28 17:00:38 67072 --a------ C:\WINDOWS\system32\rdshost.exe 2007-02-28 17:00:38 13824 --a------ C:\WINDOWS\system32\rdsaddin.exe 2007-02-28 17:00:38 147968 --a------ C:\WINDOWS\system32\rdchost.dll 2007-02-28 17:00:38 655360 --a------ C:\WINDOWS\system32\mstscax.dll 2007-02-28 17:00:38 408576 --a------ C:\WINDOWS\system32\mstsc.exe 2007-02-28 17:00:38 21896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys 2007-02-28 17:00:38 12040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys 2007-02-28 17:00:38 139400 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys 2007-02-28 17:00:37 44544 --a------ C:\WINDOWS\system32\tscupgrd.exe 2007-02-28 17:00:37 296448 --a------ C:\WINDOWS\system32\termsrv.dll 2007-02-28 17:00:37 87176 --a------ C:\WINDOWS\system32\rdpwsx.dll 2007-02-28 17:00:37 19968 --a------ C:\WINDOWS\system32\rdpsnd.dll 2007-02-28 17:00:37 62464 --a------ C:\WINDOWS\system32\rdpclip.exe 2007-02-28 17:00:37 20992 --a------ C:\WINDOWS\system32\qprocess.exe 2007-02-28 17:00:37 90112 --a------ C:\WINDOWS\system32\mtxoci.dll 2007-02-28 17:00:37 161280 --a------ C:\WINDOWS\system32\msdtcuiu.dll 2007-02-28 17:00:37 425472 --a------ C:\WINDOWS\system32\msdtcprx.dll 2007-02-28 17:00:37 11264 --a------ C:\WINDOWS\system32\icaapi.dll 2007-02-28 17:00:37 38912 --a------ C:\WINDOWS\system32\cfgbkend.dll 2007-02-28 17:00:36 11776 --a------ C:\WINDOWS\system32\xolehlp.dll 2007-02-28 17:00:36 949248 --a------ C:\WINDOWS\system32\msdtctm.dll 2007-02-28 17:00:36 58880 --a------ C:\WINDOWS\system32\msdtclog.dll 2007-02-28 17:00:36 6144 --a------ C:\WINDOWS\system32\msdtc.exe 2007-02-28 17:00:36 62464 --a------ C:\WINDOWS\system32\colbact.dll 2007-02-28 17:00:35 1251840 --a------ C:\WINDOWS\system32\comsvcs.dll 2007-02-28 17:00:35 110080 --a------ C:\WINDOWS\system32\clbcatex.dll 2007-02-28 17:00:35 628224 --a------ C:\WINDOWS\system32\catsrvut.dll 2007-02-28 17:00:35 85504 --a------ C:\WINDOWS\system32\catsrvps.dll 2007-02-28 17:00:35 229888 --a------ C:\WINDOWS\system32\catsrv.dll 2007-02-28 17:00:34 540160 --a------ C:\WINDOWS\system32\comuid.dll 2007-02-28 17:00:34 501248 --a------ C:\WINDOWS\system32\clbcatq.dll 2007-02-28 17:00:29 56320 --a------ C:\WINDOWS\system32\servdeps.dll 2007-02-28 17:00:29 17920 --a------ C:\WINDOWS\system32\mmfutil.dll 2007-02-28 17:00:29 58880 --a------ C:\WINDOWS\system32\licwmi.dll 2007-02-28 17:00:29 187904 --a------ C:\WINDOWS\system32\cmprops.dll 2007-02-28 17:00:24 40840 --a------ C:\WINDOWS\system32\drivers\termdd.sys 2007-02-28 17:00:24 196864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys 2007-02-23 20:44:10 0 d-------- C:\Program Files\Sunbelt Software 2007-02-22 14:56:32 0 d-------- C:\KAV 2007-02-21 12:08:45 0 d-------- C:\Program Files\Common Files\DirectX 2007-02-20 00:02:57 0 d--h----- C:\WINDOWS\system32\GroupPolicy 2007-02-18 16:53:15 0 d-------- C:\programy -- Find3M Report --------------------------------------------------------------- 2007-03-17 13:30:47 0 d-------- C:\Documents and Settings\Administrator.XXX-FF6634FF602\Dane aplikacji\uTorrent 2007-03-16 23:43:28 0 d---s---- C:\Documents and Settings\Administrator.XXX-FF6634FF602\Dane aplikacji\Microsoft<MICROS~1> 2007-03-16 18:23:42 0 d-------- C:\Documents and Settings\Administrator.XXX-FF6634FF602\Dane aplikacji\BSplayer Pro<BSPLAY~1> 2007-03-16 14:50:33 0 d-------- C:\Program Files\DAEMON Tools<DAEMON~1> 2007-03-16 14:42:50 0 d-------- C:\Program Files\Mozilla Firefox<MOZILL~1> 2007-03-15 23:17:44 0 d-------- C:\Program Files\NAPI-PROJEKT<NAPI-P~1> 2007-03-15 22:30:23 0 d-------- C:\Program Files\BT Engine 2007-03-12 17:33:50 0 d-------- C:\Documents and Settings\Administrator.XXX-FF6634FF602\Dane aplikacji\Sun 2007-03-11 22:01:07 0 d-------- C:\Program Files\Java 2007-03-06 20:34:15 0 d-------- C:\Documents and Settings\Administrator.XXX-FF6634FF602\Dane aplikacji\Ahead 2007-03-06 20:31:35 0 d-------- C:\Program Files\Nero 2007-03-04 19:13:49 0 d-------- C:\Documents and Settings\Administrator.XXX-FF6634FF602\Dane aplikacji\Pointstone<POINTS~1> 2007-03-04 18:31:31 448004 --a------ C:\WINDOWS\system32\perfh015.dat 2007-03-04 18:31:31 74230 --a------ C:\WINDOWS\system32\perfc015.dat 2007-03-02 20:43:48 0 d-------- C:\Program Files\SubEdit-Player<SUBEDI~1> 2007-02-28 17:54:53 62 --ahs---- C:\Documents and Settings\Administrator.XXX-FF6634FF602\Dane aplikacji\desktop.ini 2007-02-28 17:47:11 0 d-------- C:\Documents and Settings\Administrator.XXX-FF6634FF602\Dane aplikacji\Macromedia<MACROM~1> 2007-02-28 17:46:49 0 d-------- C:\Documents and Settings\Administrator.XXX-FF6634FF602\Dane aplikacji\Mozilla 2007-02-28 17:16:17 0 d-------- C:\Program Files\C-Media 3D Audio<C-MEDI~1> 2007-02-28 17:06:49 0 d-------- C:\Documents and Settings\Administrator.XXX-FF6634FF602\Dane aplikacji\Identities<IDENTI~1> 2007-02-28 17:01:00 0 d-------- C:\Program Files\Messenger<MESSEN~1> 2007-02-28 07:11:56 0 d-------- C:\Program Files\BSplayer Pro<BSPLAY~1> 2007-02-18 06:07:24 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard<WISEIN~1> 2007-02-18 06:05:58 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1> 2007-02-17 18:01:32 0 d-------- C:\Program Files\3D Driving-School 2007-02-15 23:12:27 0 d-------- C:\Program Files\GSpot 2007-02-10 19:24:11 0 d-------- C:\Program Files\Ashampoo 2007-02-08 23:57:00 0 d-------- C:\Program Files\Shut Down-O-Matic<SHUTDO~1> 2007-02-02 22:59:41 0 d-------- C:\Program Files\NetMeter 2007-01-29 15:44:13 0 d-------- C:\Program Files\Alcohol Soft<ALCOHO~1> 2007-01-29 14:57:13 0 d-------- C:\Program Files\Common Files\InstallShield<INSTAL~1> 2007-01-21 22:07:55 0 d-------- C:\Program Files\DivX 2007-01-21 00:51:11 0 d-------- C:\Program Files\Lavalys 2007-01-07 23:45:15 0 -rahs---- C:\MSDOS.SYS 2007-01-07 23:45:15 0 -rahs---- C:\IO.SYS 2007-01-07 23:45:15 0 --a------ C:\CONFIG.SYS 2007-01-07 23:45:15 0 --a------ C:\AUTOEXEC.BAT -- Registry Dump --------------------------------------------------------------- [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe" "Gadu-Gadu"="\"E:\\programy\\Gadu-Gadu\\gg.exe\" /tray" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "TWCU"="\"C:\\Program Files\\TP-LINK\\TWCU\\TWCU.exe\" -nogui" "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup" "nod32kui"="\"C:\\Program Files\\Eset\\nod32kui.exe\" /WAITSERVICE" "!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized" "DAEMON Tools"="\"C:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033" "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_11\\bin\\jusched.exe\"" "RivaTunerStartupDaemon"="\"C:\\Program Files\\RivaTuner v2.0 Final Release\\RivaTuner.exe\" /S" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "RivaTunerStartupDaemon"="\"C:\\Program Files\\RivaTuner v2.0 Final Release\\RivaTuner.exe\" /S" "Cmaudio"="RunDll32 cmicnfg.cpl,CMICtrlWnd" "NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit" "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup" "nwiz"="nwiz.exe /install" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AutoConnect] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="AutoConnect" "hkey"="HKCU" "command"="C:\\Program Files\\AutoConnect\\AutoConnect.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5" [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "DisableRegistryTools"=dword:00000000 [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] HTTPFilter REG_MULTI_SZ HTTPFilter\0\0 LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ DnsCache\0\0 DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 termsvcs REG_MULTI_SZ TermService\0\0 -- End of ComboScan: finished at 2007-03-17 at 14:26:46 ------------------------

Kod: Zaznacz wszystko: ComboScan v20070306.20 run by Administrator on 2007-03-17 at 14:26:18 Supplementary logfile - please post this as an attachment with your post. -------------------------------------------------------------------------------- -- System Information ---------------------------------------------------------- Microsoft Windows XP Professional (build 2600) SP 2.0 Architecture: X86; Language: Polish CPU 0: AMD Sempron(tm) 2400+ Percentage of Memory in Use: 26% Physical Memory (total/avail): 767.48 MiB / 564.82 MiB Pagefile Memory (total/avail): 1877.72 MiB / 1630.73 MiB Virtual Memory (total/avail): 2047.88 MiB / 1997.89 MiB C: is Fixed (NTFS) - 5.3 GiB total, 0.94 GiB free. D: is Fixed (NTFS) - 2.66 GiB total, 2.36 GiB free. E: is Fixed (NTFS) - 29.3 GiB total, 5.54 GiB free. F: is CDROM (No Media) G: is CDROM (No Media) -- Security Center ------------------------------------------------------------- AUOptions is disabled. Windows Internal Firewall is disabled. -- Environment Variables ------------------------------------------------------- ALLUSERSPROFILE=C:\Documents and Settings\All Users.WINDOWS APPDATA=C:\Documents and Settings\Administrator.XXX-FF6634FF602\Dane aplikacji CLIENTNAME=Console CommonProgramFiles=C:\Program Files\Common Files COMPUTERNAME=XXX-FF6634FF602 ComSpec=C:\WINDOWS\system32\cmd.exe FP_NO_HOST_CHECK=NO HOMEDRIVE=C: HOMEPATH=\Documents and Settings\Administrator.XXX-FF6634FF602 LOGONSERVER=\\XXX-FF6634FF602 NUMBER_OF_PROCESSORS=1 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH PROCESSOR_ARCHITECTURE=x86 PROCESSOR_IDENTIFIER=x86 Family 6 Model 8 Stepping 1, AuthenticAMD PROCESSOR_LEVEL=6 PROCESSOR_REVISION=0801 ProgramFiles=C:\Program Files PROMPT=$P$G SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\DOCUME~1\ADMINI~1.XXX\USTAWI~1\Temp TMP=C:\DOCUME~1\ADMINI~1.XXX\USTAWI~1\Temp USERDOMAIN=XXX-FF6634FF602 USERNAME=Administrator USERPROFILE=C:\Documents and Settings\Administrator.XXX-FF6634FF602 windir=C:\WINDOWS -- User Profiles --------------------------------------------------------------- Administrator.XXX-FF6634FF602 [I](admin)[/I] -- Add/Remove Programs --------------------------------------------------------- --> C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf Archiwizator WinRAR --> C:\Program Files\WinRAR\uninstall.exe µTorrent --> "C:\Program Files\uTorrent\uninstall.exe" AVG Anti-Spyware 7.5 --> C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe BS.player --> "C:\Program Files\Webteh\BSplayerPro\uninstall.exe" BT Engine 4.8 --> "C:\Program Files\BT Engine\unins000.exe" C-Media 3D Audio --> C:\WINDOWS\CMIUnInstall.exe Codec 8.0 --> "C:\Program Files\Codec\Uninstall\unins000.exe" EVEREST Home Edition v2.20 --> "C:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe" HijackThis 1.99.1 --> E:\programy\HijackThis.exe /uninstall J2SE Runtime Environment 5.0 Update 11 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110} Mozilla Firefox (2.0.0.2) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe NAPIPROJEKT 1.0.4.3 --> "C:\Program Files\NAPI-PROJEKT\unins000.exe" Nero 7 Lite v7.5.9.0 --> "C:\Program Files\Nero\unins000.exe" NOD32 FiX v2.1 --> "C:\Program Files\Eset\unins000.exe" NVIDIA Drivers --> C:\WINDOWS\system32\nvudisp.exe UninstallGUI RivaTuner v2.0 Final Release --> "C:\Program Files\RivaTuner v2.0 Final Release\uninstall.exe" SubEdit-Player --> "C:\Program Files\SubEdit-Player\unins000.exe" System Antywirusowy NOD32 --> C:\Program Files\Eset\Setup\setup.exe /UNINSTALL System Cleaner 5 --> C:\Program Files\Pointstone\System Cleaner 5\Uninstall.exe TP-LINK Wireless Client Installation Program --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{28006915-2739-4EBE-B5E8-49B25D32EB33}\setup.exe" -l0x9 -removeonly Warblade v1.2Y.6 --> "C:\Program Files\Warblade\unins000.exe" -- End of ComboScan: finished at 2007-03-17 at 14:26:46 ------------------------

i silentrunners:

Kod: Zaznacz wszystko: "Silent Runners.vbs", revision R50, http://www.silentrunners.org/ Operating System: Windows XP SP2 Output limited to non-default values, except where indicated by "{++}" Startup items buried in registry: --------------------------------- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++} "CTFMON.EXE" = "C:\WINDOWS\system32\ctfmon.exe" [MS] "Gadu-Gadu" = ""E:\programy\Gadu-Gadu\gg.exe" /tray" ["Gadu-Gadu S.A."] HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++} "TWCU" = ""C:\Program Files\TP-LINK\TWCU\TWCU.exe" -nogui" ["TP-LINK TECHNOLOGIES CO., LTD"] "NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup" [MS] "nod32kui" = ""C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE" ["Eset "] "!AVG Anti-Spyware" = ""C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized" ["Anti-Malware Development a.s."] "DAEMON Tools" = ""C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033" ["DT Soft Ltd."] "SunJavaUpdateSched" = ""C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"" ["Sun Microsystems, Inc."] "RivaTunerStartupDaemon" = ""C:\Program Files\RivaTuner v2.0 Final Release\RivaTuner.exe" /S" [empty string] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided) -> {HKLM...CLSID} = "SSVHelper Class" \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll" ["Sun Microsystems, Inc."] HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ "{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu" -> {HKLM...CLSID} = "HyperTerminal Icon Ext" \InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."] "{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class" -> {HKLM...CLSID} = "DesktopContext Class" \InProcServer32\(Default) = "C:\WINDOWS\system32\nvcpl.dll" ["NVIDIA Corporation"] "{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper" -> {HKLM...CLSID} = "NVIDIA CPL Extension" \InProcServer32\(Default) = "C:\WINDOWS\system32\nvcpl.dll" ["NVIDIA Corporation"] "{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer" -> {HKLM...CLSID} = "Desktop Explorer" \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu" -> {HKLM...CLSID} = "nView Desktop Context Menu" \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] "{363E9C24-C4C3-4116-81A4-6D86B459CBE3}" = "Pointstone Shredder Context Menu Shell Extension" -> {HKLM...CLSID} = "Pointstone Shredder Context Menu Shell Extension" \InProcServer32\(Default) = "C:\PROGRA~1\COMMON~1\POINTS~1\Shredder\SDShlExt.dll" ["Pointstone Software, LLC"] "{B089FE88-FB52-11D3-BDF1-0050DA34150D}" = "NOD32 Context Menu Shell Extension" -> {HKLM...CLSID} = "NOD32 Context Menu Shell Extension" \InProcServer32\(Default) = "C:\Program Files\Eset\nodshex.dll" [null data] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\ <<!>> "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}" = "AVG Anti-Spyware 7.5" -> {HKLM...CLSID} = "CShellExecuteHookImpl Object" \InProcServer32\(Default) = "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll" ["Anti-Malware Development a.s."] HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ AVG Anti-Spyware\(Default) = "{8934FCEF-F5B8-468f-951F-78A921CD3920}" -> {HKLM...CLSID} = "CContextScan Object" \InProcServer32\(Default) = "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll" ["Anti-Malware Development a.s."] NOD32 Context Menu Shell Extension\(Default) = "{B089FE88-FB52-11D3-BDF1-0050DA34150D}" -> {HKLM...CLSID} = "NOD32 Context Menu Shell Extension" \InProcServer32\(Default) = "C:\Program Files\Eset\nodshex.dll" [null data] Pointstone Shredder\(Default) = "{363E9C24-C4C3-4116-81A4-6D86B459CBE3}" -> {HKLM...CLSID} = "Pointstone Shredder Context Menu Shell Extension" \InProcServer32\(Default) = "C:\PROGRA~1\COMMON~1\POINTS~1\Shredder\SDShlExt.dll" ["Pointstone Software, LLC"] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\ AVG Anti-Spyware\(Default) = "{8934FCEF-F5B8-468f-951F-78A921CD3920}" -> {HKLM...CLSID} = "CContextScan Object" \InProcServer32\(Default) = "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll" ["Anti-Malware Development a.s."] Pointstone Shredder\(Default) = "{363E9C24-C4C3-4116-81A4-6D86B459CBE3}" -> {HKLM...CLSID} = "Pointstone Shredder Context Menu Shell Extension" \InProcServer32\(Default) = "C:\PROGRA~1\COMMON~1\POINTS~1\Shredder\SDShlExt.dll" ["Pointstone Software, LLC"] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\ NOD32 Context Menu Shell Extension\(Default) = "{B089FE88-FB52-11D3-BDF1-0050DA34150D}" -> {HKLM...CLSID} = "NOD32 Context Menu Shell Extension" \InProcServer32\(Default) = "C:\Program Files\Eset\nodshex.dll" [null data] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] Group Policies {GPedit.msc branch and setting}: ----------------------------------------------- Note: detected settings may not have any effect. HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\ "DisableRegistryTools" = (REG_DWORD) hex:0x00000000 {User Configuration|Administrative Templates|System| Prevent access to registry editing tools} HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\ "shutdownwithoutlogon" = (REG_DWORD) hex:0x00000001 {Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| Shutdown: Allow system to be shut down without having to log on} "undockwithoutlogon" = (REG_DWORD) hex:0x00000001 {Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| Devices: Allow undock without having to log on} Active Desktop and Wallpaper: ----------------------------- Active Desktop may be disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState Displayed if Active Desktop enabled and wallpaper not set by Group Policy: HKCU\Software\Microsoft\Internet Explorer\Desktop\General\ "Wallpaper" = "C:\WINDOWS\web\wallpaper\Idylla.bmp" Displayed if Active Desktop disabled and wallpaper not set by Group Policy: HKCU\Control Panel\Desktop\ "Wallpaper" = "C:\WINDOWS\web\wallpaper\Idylla.bmp" Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] 000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS] 000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] Transport Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: C:\WINDOWS\system32\imon.dll ["Eset "], 01 - 05, 11 %SystemRoot%\system32\mswsock.dll [MS], 06 - 08, 12 - 25 %SystemRoot%\system32\rsvpsp.dll [MS], 09 - 10 Toolbars, Explorer Bars, Extensions: ------------------------------------ Extensions (Tools menu items, main toolbar menu buttons) HKLM\Software\Microsoft\Internet Explorer\Extensions\ {08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ "MenuText" = "Sun Java Console" "CLSIDExtension" = "{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}" -> {HKCU...CLSID} = "Java Plug-in 1.5.0_11" \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll" ["Sun Microsystems, Inc."] -> {HKLM...CLSID} = "Java Plug-in 1.5.0_11" \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll" ["Sun Microsystems, Inc."] {FB5F1910-F110-11D2-BB9E-00C04F795683}\ "ButtonText" = "Messenger" "MenuText" = "Windows Messenger" "Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS] Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ AVG Anti-Spyware Guard, AVG Anti-Spyware Guard, "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe" ["Anti-Malware Development a.s."] NOD32 Kernel Service, NOD32krn, ""C:\Program Files\Eset\nod32krn.exe"" ["Eset "] NVIDIA Display Driver Service, NVSvc, "C:\WINDOWS\system32\nvsvc32.exe" ["NVIDIA Corporation"] TP-LINK Configuration Service, ACS, "C:\WINDOWS\system32\acs.exe" [null data] ---------- <<!>>: Suspicious data at a malware launch point. + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + The search for DESKTOP.INI DLL launch points on all local fixed drives took 56 seconds. ---------- (total run time: 226 seconds)

**Posty:** 18165 · przez **wojtas** 17 Mar 2007, 16:30

w logach jest ok

straszna zamuła neta <log>

straszna zamuła neta <log>

Kto jest na forum