straszne zamulenie komputera i neta

[Mati92]

Mam mały problem ponieważ od jakiś 2 dni strasznie zamula mi kompa i neta dla pewności daje loga:

Logfile of HijackThis v1.99.1
Scan saved at 21:11:55, on 2007-06-11
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\ctfmon.exe
D:\PROGRAMY\Gadu-Gadu\gg.exe
D:\PROGRAMY\AutoConnect\AutoConnect.exe
D:\PROGRAMY\Alcohol 120\StarWind\StarWindService.exe
D:\PROGRAMY\Winamp\winampa.exe
D:\PROGRAMY\Winamp\winamp.exe
D:\PROGRAMY\Mozilla Firefox\firefox.exe
D:\PROGRAMY\Odkurzacz\odkurzacz.exe
D:\PROGRAMY\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TP
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRAMY\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\system32\msconfig.exe /auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "D:\PROGRAMY\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [AutoConnect] D:\PROGRAMY\AutoConnect\AutoConnect.exe
O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [INTERNATIONAL] International*
O11 - Options group: [TABS] Tabbed Browsing
O17 - HKLM\System\CCS\Services\Tcpip\..\{966C6A50-011C-4C85-93EF-322B57F87F3A}: NameServer = 194.204.152.34 217.98.63.164
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~1\Office12\GR99D3~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - D:\PROGRAMY\Alcohol 120\StarWind\StarWindService.exe

[wojtas]

daj loga z:

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

[Mati92]

wojtas19162 proszę:

ComboFix 07-06-11.3 - C:\Documents and Settings\User\Pulpit\ComboFix.exe
"User" - 2007-06-11 22:26:24 - Dodatek Service Pack 2 NTFS


((((((((((((((((((((((((( Files Created from 2007-05-11 to 2007-06-11 )))))))))))))))))))))))))))))))


2007-06-11 22:25 49,152 --a------ C:\WINDOWS\nircmd.exe
2007-06-11 21:22 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2007-06-11 21:21 58,624 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2007-06-11 21:21 10,624 --a------ C:\WINDOWS\system32\drivers\gameenum.sys
2007-06-11 21:20 77,312 --a------ C:\WINDOWS\system32\usbui.dll
2007-06-11 21:19 9,936 --a------ C:\WINDOWS\system\LZEXPAND.DLL
2007-06-11 21:19 9,168 --a------ C:\WINDOWS\system\VER.DLL
2007-06-11 21:19 83,456 --a------ C:\WINDOWS\system\OLECLI.DLL
2007-06-11 21:19 8,704 --a------ C:\WINDOWS\system32\batt.dll
2007-06-11 21:19 75,776 --a------ C:\WINDOWS\system32\storprop.dll
2007-06-11 21:19 71,680 --a------ C:\WINDOWS\NOTEPAD.EXE
2007-06-11 21:19 70,096 --a------ C:\WINDOWS\system\AVICAP.DLL
2007-06-11 21:19 69,552 --a------ C:\WINDOWS\system\MMSYSTEM.DLL
2007-06-11 21:19 5,120 --a------ C:\WINDOWS\system\SHELL.DLL
2007-06-11 21:19 33,376 --a------ C:\WINDOWS\system\COMMDLG.DLL
2007-06-11 21:19 24,064 --a------ C:\WINDOWS\system\OLESVR.DLL
2007-06-11 21:19 19,200 --a------ C:\WINDOWS\system\TAPI.DLL
2007-06-11 21:19 15,360 --a------ C:\WINDOWS\TASKMAN.EXE
2007-06-11 21:19 13,312 --a------ C:\WINDOWS\system32\irclass.dll
2007-06-11 21:19 127,008 --a------ C:\WINDOWS\system\MSVIDEO.DLL
2007-06-11 21:19 11,264 --a------ C:\WINDOWS\system32\drivers\irenum.sys
2007-06-11 21:19 109,488 --a------ C:\WINDOWS\system\AVIFILE.DLL
2007-06-11 21:19 <DIR> dr-h----- C:\DOCUME~1\DEFAUL~1\Ustawienia lokalne
2007-06-11 21:19 <DIR> dr------- C:\Program Files
2007-06-11 21:19 <DIR> dr------- C:\DOCUME~1\DEFAUL~1\Menu Start
2007-06-11 21:19 <DIR> dr------- C:\DOCUME~1\ALLUSE~1\Menu Start
2007-06-11 21:19 <DIR> dr------- C:\DOCUME~1\ALLUSE~1\Dokumenty
2007-06-11 21:19 <DIR> d--hs---- C:\WINDOWS\Installer
2007-06-11 21:19 <DIR> d--h----- C:\DOCUME~1\DEFAUL~1\Szablony
2007-06-11 21:19 <DIR> d--h----- C:\DOCUME~1\ALLUSE~1\Szablony
2007-06-11 21:19 <DIR> d-------- C:\Program Files\Common Files\SpeechEngines
2007-06-11 21:19 <DIR> d-------- C:\Program Files\Common Files\ODBC
2007-06-11 21:19 <DIR> d-------- C:\DOCUME~1\DEFAUL~1\Ulubione
2007-06-11 21:19 <DIR> d-------- C:\DOCUME~1\DEFAUL~1\Pulpit
2007-06-11 21:19 <DIR> d-------- C:\DOCUME~1\DEFAUL~1\Moje dokumenty
2007-06-11 21:19 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Ulubione
2007-06-11 21:19 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Pulpit
2007-06-11 21:17 <DIR> dr-h----- C:\DOCUME~1\DEFAUL~1\Dane aplikacji
2007-06-11 21:17 <DIR> dr-h----- C:\DOCUME~1\ALLUSE~1\Dane aplikacji
2007-06-11 21:17 <DIR> d-------- C:\WINDOWS\system32\CatRoot2
2007-06-11 21:17 <DIR> d-------- C:\WINDOWS\system32\CatRoot
2007-06-11 21:16 <DIR> d--hs---- C:\System Volume Information
2007-06-11 21:16 <DIR> d-------- C:\Documents and Settings
2007-06-11 21:14 <DIR> dr--s---- C:\WINDOWS\Fonts
2007-06-11 21:14 <DIR> dr------- C:\WINDOWS\Web
2007-06-11 21:14 <DIR> d--h----- C:\WINDOWS\inf
2007-06-11 21:14 <DIR> d---s---- C:\WINDOWS\Downloaded Program Files
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\WinSxS
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\twain_32
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\wins
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\wbem
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\usmt
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\spool
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\ShellExt
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\Setup
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\ras
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\PreInstall
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\pl-pl
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\npp
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\mui
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\inetsrv
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\IME
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\icsxml
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\ias
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\export
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\drivers\etc
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\drivers\disdn
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\drivers
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\dhcp
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\config
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\3com_dmi
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\3076
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\2052
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\1054
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\1045
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\1042
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\1041
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\1037
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\1033
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\1031
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\1028
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32\1025
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system32
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\system
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\security
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\Resources
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\repair
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\Provisioning
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\PeerNet
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\PCHealth
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\Offline Web Pages
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\mui
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\msapps
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\Media
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\ime
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\Help
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\Driver Cache
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\Debug
2007-06-11 21:14 <DIR> d-------- C:\WINDOWS\Cursors


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-06-11 18:09:44 47,898 ----a-w C:\WINDOWS\system32\perfc015.dat
2007-06-11 18:09:44 352,770 ----a-w C:\WINDOWS\system32\perfh015.dat
2007-03-24 23:47:44 8,192 ----a-w C:\WINDOWS\system32\tsbyuv.dll
2007-03-24 23:47:44 8,192 ----a-w C:\WINDOWS\system32\streamci.dll
2007-03-24 23:47:44 57,856 ----a-w C:\WINDOWS\system32\dvdplay.exe
2007-03-24 23:47:44 55,296 ----a-w C:\WINDOWS\system32\dmutil.dll
2007-03-24 23:47:44 47,616 ----a-w C:\WINDOWS\system32\iyuv_32.dll
2007-03-24 23:47:44 35,328 ----a-w C:\WINDOWS\system32\pid.dll
2007-03-24 23:47:44 20,992 ----a-w C:\WINDOWS\system32\hid.dll
2007-03-24 23:47:44 17,408 ----a-w C:\WINDOWS\system32\msyuv.dll
2007-03-24 23:38:31 218,624 ----a-w C:\WINDOWS\system32\uxtheme.dll
2007-03-24 23:38:30 140,800 ----a-w C:\WINDOWS\system32\sfc_os.dll
2007-03-24 23:37:26 991,744 ----a-w C:\WINDOWS\system32\syssetup.dll
2007-03-24 23:37:22 24,576 ----a-w C:\WINDOWS\system32\nlsdl.dll
2007-03-24 23:37:20 26,112 ----a-w C:\WINDOWS\system32\idndl.dll
2007-03-24 23:37:20 23,552 ----a-w C:\WINDOWS\system32\normaliz.dll
2007-03-24 23:37:15 413,696 ----a-w C:\WINDOWS\system32\vbscript.dll
2007-03-24 23:37:09 156,160 ----a-w C:\WINDOWS\system32\msls31.dll
2007-03-24 23:37:08 48,128 ----a-w C:\WINDOWS\system32\mshtmler.dll
2007-03-24 23:37:00 45,568 ----a-w C:\WINDOWS\system32\mshta.exe
2007-03-24 23:36:59 40,960 ----a-w C:\WINDOWS\system32\licmgr10.dll
2007-03-24 23:36:51 36,352 ----a-w C:\WINDOWS\system32\imgutil.dll
2007-03-24 23:36:49 55,296 ----a-w C:\WINDOWS\system32\iesetup.dll
2007-03-24 23:36:38 78,336 ----a-w C:\WINDOWS\system32\ieencode.dll
2007-03-24 23:36:30 17,408 ----a-w C:\WINDOWS\system32\corpol.dll
2007-03-24 23:36:28 71,680 ----a-w C:\WINDOWS\system32\admparse.dll
2007-03-24 23:18:16 714,240 ----a-w C:\WINDOWS\system32\sxs.dll
2007-03-24 23:18:10 65,536 ----a-w C:\WINDOWS\system32\nwwks.dll
2007-03-24 23:18:10 64,000 ----a-w C:\WINDOWS\system32\nwapi32.dll
2007-03-24 23:18:10 143,360 ----a-w C:\WINDOWS\system32\nwprovau.dll
2007-03-24 23:18:07 728,576 ----a-w C:\WINDOWS\system32\lsasrv.dll
2007-03-24 23:18:07 132,096 ----a-w C:\WINDOWS\system32\wkssvc.dll
2007-03-24 23:17:56 617,472 ----a-w C:\WINDOWS\system32\comctl32.dll
2007-03-24 23:17:43 100,352 ----a-w C:\WINDOWS\system32\6to4svc.dll
2007-03-24 23:17:38 72,704 ----a-w C:\WINDOWS\system32\hlink.dll
2007-03-24 23:17:24 1,439,744 ----a-w C:\WINDOWS\system32\query.dll
2007-03-24 23:16:46 28,672 ----a-w C:\WINDOWS\system32\verclsid.exe
2007-03-24 23:16:31 49,152 ----a-w C:\WINDOWS\system32\wdigest.dll
2007-03-24 23:16:27 66,560 ----a-w C:\WINDOWS\system32\mtxclu.dll
2007-03-24 23:16:15 68,096 ----a-w C:\WINDOWS\system32\webclnt.dll
2007-03-24 23:16:12 280,064 ----a-w C:\WINDOWS\system32\gdi32.dll
2007-03-24 23:16:10 1,092,608 ----a-w C:\WINDOWS\system32\esent.dll
2007-03-24 23:16:07 85,504 ----a-w C:\WINDOWS\system32\pintool.exe
2007-03-24 23:16:06 96,792 ----a-w C:\WINDOWS\system32\basecsp.dll
2007-03-24 23:16:06 26,112 ----a-w C:\WINDOWS\system32\bcsprsrc.dll
2007-03-24 23:16:06 151,552 ----a-w C:\WINDOWS\system32\ifxcardm.dll
2007-03-24 23:16:06 133,120 ----a-w C:\WINDOWS\system32\axaltocm.dll
2007-03-24 23:16:04 582,144 ----a-w C:\WINDOWS\system32\rpcrt4.dll
2007-03-24 23:15:59 80,896 ----a-w C:\WINDOWS\system32\fontsub.dll
2007-03-24 23:15:59 117,760 ----a-w C:\WINDOWS\system32\t2embed.dll
2007-03-24 23:15:57 1,839,616 ----a-w C:\WINDOWS\system32\win32k.sys
2007-03-24 23:15:50 171,520 ----a-w C:\WINDOWS\system32\msconfig.exe
2007-03-24 23:15:34 19,968 ----a-w C:\WINDOWS\system32\linkinfo.dll
2007-03-24 23:15:27 184,320 ----a-w C:\WINDOWS\system32\ipsecsvc.dll
2007-03-24 23:15:25 2,068,480 ----a-w C:\WINDOWS\system32\cdosys.dll
2007-03-24 23:15:18 123,904 ----a-w C:\WINDOWS\system32\umpnpmgr.dll
2007-03-24 23:15:15 197,632 ----a-w C:\WINDOWS\system32\netman.dll
2007-03-24 23:15:05 55,808 ----a-w C:\WINDOWS\system32\twext.dll
2007-03-24 23:15:00 249,344 ----a-w C:\WINDOWS\system32\tapisrv.dll
2007-03-24 23:14:58 57,856 ----a-w C:\WINDOWS\system32\spoolsv.exe
2007-03-24 23:14:56 297,984 ----a-w C:\WINDOWS\system32\kerberos.dll
2007-03-24 23:14:51 73,728 ----a-w C:\WINDOWS\system32\mscms.dll
2007-03-24 23:14:51 254,976 ----a-w C:\WINDOWS\system32\icm32.dll
2007-03-24 23:14:48 41,472 ----a-w C:\WINDOWS\system32\hhsetup.dll
2007-03-24 23:14:48 155,136 ----a-w C:\WINDOWS\system32\itircl.dll
2007-03-24 23:14:48 137,216 ----a-w C:\WINDOWS\system32\itss.dll
2007-03-24 23:14:47 10,752 ----a-w C:\WINDOWS\hh.exe
2007-03-24 23:14:19 578,560 ----a-w C:\WINDOWS\system32\user32.dll
2007-03-24 23:14:10 62,464 ----a-w C:\WINDOWS\system32\authz.dll
2007-03-24 23:13:59 96,768 ----a-w C:\WINDOWS\system32\srvsvc.dll
2007-03-24 23:13:57 297,472 ----a-w C:\WINDOWS\system32\MSCTF.dll
2007-03-24 23:12:59 586,240 ----a-w C:\WINDOWS\system32\mlang.dll
2007-03-24 22:31:33 4,096 ----a-w C:\WINDOWS\system32\wmvdmoe2.dll
2007-03-24 22:31:33 4,096 ----a-w C:\WINDOWS\system32\wmvdmod.dll
2007-03-24 22:31:29 1,329,152 ----a-w C:\WINDOWS\system32\wmspdmoe.dll
2007-03-24 22:31:28 603,648 ----a-w C:\WINDOWS\system32\wmspdmod.dll
2007-03-24 22:31:27 99,840 ----a-w C:\WINDOWS\system32\wmpshell.dll
2007-03-24 22:31:27 8,277,504 ----a-w C:\WINDOWS\system32\wmploc.dll
2007-03-24 22:31:27 4,096 ----a-w C:\WINDOWS\system32\wmsdmoe2.dll
2007-03-24 22:31:27 4,096 ----a-w C:\WINDOWS\system32\wmsdmod.dll
2007-03-24 22:31:16 314,880 ----a-w C:\WINDOWS\system32\wmpdxm.dll
2007-03-24 22:31:15 242,688 ----a-w C:\WINDOWS\system32\wmpasf.dll
2007-03-24 22:30:58 937,984 ----a-w C:\WINDOWS\system32\wmnetmgr.dll
2007-03-24 22:30:57 37,376 ----a-w C:\WINDOWS\system32\wmdmps.dll
2007-03-24 22:30:57 33,792 ----a-w C:\WINDOWS\system32\wmdmlog.dll
2007-03-24 22:30:57 258,560 ----a-w C:\WINDOWS\system32\wmerror.dll
2007-03-24 22:30:57 222,208 ----a-w C:\WINDOWS\system32\wmasf.dll
2007-03-24 22:30:57 157,184 ----a-w C:\WINDOWS\system32\wmidx.dll
2007-03-24 22:30:56 1,117,696 ----a-w C:\WINDOWS\system32\wmadmoe.dll
2007-03-24 22:30:55 757,248 ----a-w C:\WINDOWS\system32\wmadmod.dll
2007-03-24 22:30:51 321,536 ----a-w C:\WINDOWS\system32\mswmdm.dll
2007-03-24 22:30:51 211,456 ----a-w C:\WINDOWS\system32\qasf.dll
2007-03-24 22:30:50 414,720 ----a-w C:\WINDOWS\system32\msscp.dll
2007-03-24 22:30:50 27,136 ----a-w C:\WINDOWS\system32\mspmsnsv.dll
2007-03-24 22:30:50 175,616 ----a-w C:\WINDOWS\system32\mspmsp.dll
2007-03-24 22:30:49 4,096 ----a-w C:\WINDOWS\system32\mpg4dmod.dll
2007-03-24 22:30:49 4,096 ----a-w C:\WINDOWS\system32\mp4sdmod.dll
2007-03-24 22:30:49 179,712 ----a-w C:\WINDOWS\system32\msnetobj.dll
2007-03-24 22:30:48 991,744 ----a-w C:\WINDOWS\system32\drmv2clt.dll
2007-03-24 22:30:48 4,096 ----a-w C:\WINDOWS\system32\mp43dmod.dll


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{53707962-6F74-2D53-2644-206D7942484F}=D:\PROGRAMY\Spybot - Search & Destroy\SDHelper.dll [2005-05-31 01:04]
{72853161-30C5-4D22-B7F9-0BBC1D38A37E}=C:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL [2006-10-27 00:48]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpeedTouch USB Diagnostics"="C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" [2004-01-26 11:38]
"WOOWATCH"="C:\PROGRA~1\NEOSTR~1\Watch.exe" [2003-10-16 18:07]
"nod32kui"="C:\Program Files\Eset\nod32kui.exe" [2007-06-11 19:51]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:44]
"Gadu-Gadu"="D:\PROGRAMY\Gadu-Gadu\gg.exe" [2007-05-10 16:36]
"AutoConnect"="D:\PROGRAMY\AutoConnect\AutoConnect.exe" [2004-08-28 20:27]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
"nltide_2"=regsvr32 /s /n /i:U shell32
"nltide_3"=rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"DisableStatusMessages"=1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"=1 (0x1)
"ForceClassicControlPanel"=1 (0x1)
"NoSMMyPictures"=1 (0x1)
"NoSMConfigurePrograms"=1 (0x1)
"ClearRecentDocsOnExit"=1 (0x1)
"NoRecentDocsMenu"=1 (0x1)
"NoRecentDocsHistory"=1 (0x1)
"NoStartBanner"=1 (0x1)
"NoInstrumentation"=1 (0x1)
"NoStartMenuMFUprogramsList"=1 (0x1)
"NoLowDiskSpaceChecks"=1 (0x1)
"NoResolveTrack"=1 (0x1)
"LinkResolveIgnoreLinkInfo"=1 (0x1)
"NoResolveSearch"=1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"=1 (0x1)
"ForceClassicControlPanel"=1 (0x1)
"NoSMMyPictures"=1 (0x1)
"NoSMConfigurePrograms"=1 (0x1)
"ClearRecentDocsOnExit"=1 (0x1)
"NoRecentDocsMenu"=1 (0x1)
"NoRecentDocsHistory"=1 (0x1)
"NoStartBanner"=1 (0x1)
"NoInstrumentation"=1 (0x1)
"NoStartMenuMFUprogramsList"=1 (0x1)
"NoLowDiskSpaceChecks"=1 (0x1)
"NoResolveTrack"=1 (0x1)
"LinkResolveIgnoreLinkInfo"=1 (0x1)
"NoResolveSearch"=1 (0x1)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"="C:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL" [2006-10-27 00:48]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Reader Synchronizer.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Synchronizer.lnk
backup=C:\WINDOWS\pss\Adobe Reader Synchronizer.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtiPTA]
atiptaxx.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odkurzacz-MCD]
D:\PROGRAMY\Odkurzacz\odk_mcd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
SOUNDMAN.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
D:\PROGRAMY\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
D:\PROGRAMY\Winamp\winampa.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOTASKBARICON]
C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalService WebClient LmHosts upnphost SSDPSRV

*Newly Created Service* - AMON
*Newly Created Service* - NOD32KRN
*Newly Created Service* - SPTD
*Newly Created Service* - STARWINDSERVICE

**************************************************************************

catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-06-11 22:37:24
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

**************************************************************************

Completion time: 2007-06-11 22:39:30

--- E O F ---

[wojtas]

logi masz czyste