użycie procesora 100%...

[Chałwa]

Witam. Podczas pracy na komputerze użycie procesora zawsze wykazuje 100% niezależnie czy mam włączone jakieś aplikacje czy poprostu komputer jest włączony. Codziennie scanuje system ad-awarem i myślę, że to nie wina spywarów i innych takich aplikacji.
Log z hijacka

Kod: Zaznacz wszystko

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:44:37, on 2007-12-26
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\PnkBstrA.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXE
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\GigaByte\VGA Utility Manager\G-VGA.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Last.fm\LastFMHelper.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\oDC\Downloads\Wolfenstein Enemy Territory\ET Minimalizer\etmin.exe
C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.triple.pl:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [ATIPTA] atiptaxx.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [AudioHQ] C:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXE
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [VGAUtil] C:\Program Files\GigaByte\VGA Utility Manager\G-VGA.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Last.fm Helper.lnk = C:\Program Files\Last.fm\LastFMHelper.exe
O4 - Global Startup: Color Calibration.lnk = ?
O4 - Global Startup: MagicTune3.5.lnk = ?
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 3.76\AMVConverter\grab.html
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 3.76\MediaManager\grab.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{3FA28DAB-C984-46EB-B2BF-08C0AEF7583D}: NameServer = 83.142.120.242
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset  - C:\Program Files\Eset\nod32krn.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\System32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

--
End of file - 6730 bytes


[wojtas]

Wykonaj to co jest podane w tym temacie

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

jaki proces zabiera 100%?

daj loga z combofixa

[Chałwa]

Kod: Zaznacz wszystko

2007-12-26 15:55 . 2007-12-26 15:55   <DIR>   d--------   C:\Documents and Settings\Senator\Dane aplikacji\Grisoft
2007-12-26 15:54 . 2007-12-26 15:54   <DIR>   d--------   C:\Documents and Settings\All Users\Dane aplikacji\Grisoft
2007-12-26 15:54 . 2007-05-30 13:10   10,872   --a------   C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-12-26 15:44 . 2007-12-26 15:44   <DIR>   d--h-----   C:\WINDOWS\$hf_mig$
2007-12-26 12:41 . 2007-12-26 12:41   <DIR>   d--------   C:\Program Files\Trend Micro
2007-12-25 14:15 . 2007-12-25 14:24   <DIR>   d--------   C:\Program Files\Kuma Games
2007-12-24 17:27 . 2003-11-17 11:49   154,624   --a------   C:\WINDOWS\system32\fmod.dll
2007-12-24 17:23 . 2002-03-27 14:54   217,088   --a------   C:\WINDOWS\system32\libmySQL.dll
2007-12-24 17:23 . 2002-03-29 10:13   102,400   --a------   C:\WINDOWS\system32\TrackerNET.dll
2007-12-23 18:24 . 2007-12-23 18:24   <DIR>   d--------   C:\WINDOWS\solcache
2007-12-23 18:21 . 2007-12-23 18:24   <DIR>   d--------   C:\SIERRA
2007-12-23 18:21 . 2007-12-23 18:24   <DIR>   d--------   C:\Program Files\Sierra On-Line
2007-12-23 18:21 . 1998-10-30 22:21   1,022,976   --a------   C:\WINDOWS\system32\SierraNW.dll
2007-12-23 18:21 . 1998-10-30 22:21   231,936   --a------   C:\WINDOWS\system32\SNWValid.dll
2007-12-23 18:21 . 2007-12-23 18:24   503   --a------   C:\WINDOWS\SIERRA.INI
2007-12-23 11:52 . 2007-12-23 11:52   <DIR>   d--h-----   C:\Originals
2007-12-23 11:52 . 2007-12-23 11:55   174   --ah-----   C:\Picasa.ini
2007-12-23 11:48 . 2007-12-24 10:42   <DIR>   d--------   C:\Program Files\Picasa2
2007-12-21 14:46 . 2007-12-21 14:46   617   --a------   C:\WINDOWS\eReg.dat
2007-12-21 14:29 . 2007-12-21 14:29   <DIR>   d--------   C:\Program Files\EA Games
2007-12-12 21:08 . 2007-12-12 21:08   0   --a------   C:\WINDOWS\ativpsrm.bin
2007-12-12 15:30 . 2007-12-12 15:30   451,072   --a------   C:\WINDOWS\Radeon Omega Drivers v3.8.421 Uninstall.exe
2007-12-12 15:03 . 2007-12-12 15:03   <DIR>   d--------   C:\Program Files\YAWn.NET
2007-12-11 20:48 . 2007-12-13 20:12   <DIR>   d--------   C:\Program Files\Panzer Elite Action
2007-12-09 22:05 . 2003-03-26 17:01   438,392   --a------   C:\alarm_02.wav
2007-12-09 22:04 . 2003-04-06 16:52   332,798   --a------   C:\flame_pilot.wav
2007-12-09 22:04 . 2003-04-06 16:52   321,634   --a------   C:\flame_burn.wav
2007-12-09 22:04 . 2003-04-06 16:52   127,812   --a------   C:\flame_fire.wav
2007-12-09 22:04 . 2003-04-06 16:52   29,268   --a------   C:\flame_up.wav
2007-12-09 22:03 . 2003-05-08 19:32   66,410   --a------   C:\b.wav
2007-12-09 22:03 . 2003-05-08 19:31   65,258   --a------   C:\21b.wav
2007-12-09 22:03 . 2003-05-08 19:32   63,722   --a------   C:\21aa.wav
2007-12-09 22:03 . 2003-05-08 19:31   62,314   --a------   C:\21a.wav
2007-12-05 22:15 . 2007-12-05 22:15   248   --a------   C:\WINDOWS\RomeTW.ini
2007-12-04 19:59 . 2007-12-04 19:59   <DIR>   d--------   C:\Program Files\Activision
2007-12-02 16:44 . 2007-12-02 16:44   <DIR>   d--h-----   C:\Program Files\Zenographics
2007-12-02 16:44 . 2007-12-02 16:44   <DIR>   d--------   C:\Program Files\Hewlett-Packard
2007-12-02 16:44 . 2006-07-30 18:00   442,368   -ra------   C:\WINDOWS\system32\zshp1018.exe
2007-12-02 16:44 . 2006-07-30 18:00   143,360   -ra------   C:\WINDOWS\apptune1018.exe
2007-12-02 16:44 . 2006-07-30 18:00   129,092   -ra------   C:\WINDOWS\system32\hp1018.img
2007-12-02 16:44 . 2006-07-30 18:00   106,496   -ra------   C:\WINDOWS\system32\vshp1018.dll
2007-12-02 16:44 . 2006-07-30 18:00   102,400   -ra------   C:\WINDOWS\system32\zlhp1018.dll
2007-12-02 16:44 . 2006-07-30 18:00   86,016   -ra------   C:\WINDOWS\system32\ZSPOOL.DLL
2007-12-02 16:44 . 2006-07-30 18:00   28,672   -ra------   C:\WINDOWS\system32\zlm.dll
2007-12-02 16:44 . 2006-07-30 18:00   28,672   -ra------   C:\WINDOWS\system32\IMF32.DLL
2007-12-02 16:44 . 2006-07-30 18:00   24,576   -ra------   C:\WINDOWS\system32\ZTAG32.DLL
2007-12-02 16:44 . 2006-07-30 18:00   7,564   -ra------   C:\WINDOWS\system32\ZSHP1018.HLP
2007-12-01 16:04 . 2007-12-01 16:15   <DIR>   d--------   C:\Program Files\SopCast
2007-11-27 15:11 . 2007-11-27 15:11   149,167   --a------   C:\hahahhaha.jpg

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-26 15:41   23,040   ----a-w   C:\WINDOWS\system32\drivers\GVTDrv.sys
2007-12-26 12:15   ---------   d-----w   C:\Program Files\Valve
2007-12-26 12:09   ---------   d-----w   C:\Program Files\EA SPORTS
2007-12-26 11:41   ---------   d-----w   C:\Program Files\oDC
2007-12-26 11:01   22,328   ----a-w   C:\WINDOWS\system32\drivers\PnkBstrK.sys
2007-12-25 15:39   ---------   d-----w   C:\Documents and Settings\Senator\Dane aplikacji\Hamachi
2007-12-24 11:17   ---------   d-----w   C:\Program Files\Teamspeak2_RC2
2007-12-23 14:01   ---------   d--h--w   C:\Program Files\InstallShield Installation Information
2007-12-18 16:44   ---------   d-----w   C:\Program Files\THQ
2007-12-15 07:43   ---------   d-----w   C:\Program Files\Last.fm
2007-12-14 14:54   ---------   d-----w   C:\Documents and Settings\Senator\Dane aplikacji\BearShare
2007-12-12 14:32   ---------   d-----w   C:\Program Files\MultiRes
2007-12-12 14:30   ---------   d-----w   C:\Program Files\Radeon Omega Drivers
2007-12-04 19:38   11,973   ----a-w   C:\WINDOWS\system32\drivers\secdrv.sys
2007-12-04 15:06   ---------   d-----w   C:\Program Files\Counter Strike 1.6 Reloaded
2007-12-01 19:44   ---------   d-----w   C:\Program Files\mIRC
2007-11-24 13:00   ---------   d-----w   C:\Program Files\Gadu-Gadu
2007-11-14 21:27   ---------   d-----w   C:\Documents and Settings\Senator\Dane aplikacji\NeroDCTemplates
2007-11-13 16:14   ---------   d-----w   C:\Program Files\Xvid
2007-11-10 20:07   ---------   d-----w   C:\Program Files\Cinemaware
2007-11-09 22:55   ---------   d-----w   C:\Program Files\Borland
2007-11-09 22:55   ---------   d-----w   C:\Program Files\Alpha-Net
2007-10-30 16:56   ---------   d-----w   C:\Documents and Settings\Senator\Dane aplikacji\GRETECH
2007-10-30 16:56   ---------   d-----w   C:\Documents and Settings\All Users\Dane aplikacji\GRETECH
2007-10-30 16:55   ---------   d-----w   C:\Program Files\GRETECH
2007-10-28 16:29   ---------   d-----w   C:\Documents and Settings\Senator\Dane aplikacji\Lavasoft
2007-10-28 16:28   ---------   d-----w   C:\Program Files\Lavasoft
2007-10-15 15:18   319   ----a-w   C:\drmHeader.bin
.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 23:44]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="atiptaxx.exe" [2006-02-22 02:05 C:\WINDOWS\system32\atiptaxx.exe]
"CTHelper"="CTHELPER.EXE" []
"AudioHQ"="C:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXE" [2000-05-11 00:00]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2006-11-12 11:48]
"VGAUtil"="C:\Program Files\GigaByte\VGA Utility Manager\G-VGA.exe" [2004-09-17 12:32]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-06-29 05:24]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-03 23:44]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
Color Calibration.lnk - C:\Program Files\SEC\MagicTune3.5_Client\GammaTray.exe [2007-07-28 17:16:49]
MagicTune3.5.lnk - C:\Program Files\SEC\MagicTune3.5_Client\MagicTuneTray.exe [2007-07-28 17:17:04]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Senator^Menu Start^Programy^Autostart^Last.fm Helper.lnk]
path=C:\Documents and Settings\Senator\Menu Start\Programy\Autostart\Last.fm Helper.lnk
backup=C:\WINDOWS\pss\Last.fm Helper.lnkStartup
         
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2006-10-26 23:47   31016   --a------   C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
         
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]
2006-05-18 10:29   49152   --a------   C:\Program Files\CyberLink\PowerDVD\Language\Language.exe
         
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
         C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
         
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
         C:\Program Files\Messenger\msmsgs.exe /background
         
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
         C:\Program Files\MSN Messenger\MsnMsgr.Exe /background
         
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2001-07-09 09:50   155648   --a------   C:\WINDOWS\system32\NeroCheck.exe
         
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OrderReminder]
2006-07-30 18:00   98304   -ra------   C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
         
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Picasa Media Detector]
2006-04-20 00:17   421888   --a------   C:\Program Files\Picasa2\PicasaMediaDetector.exe
         
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
2005-12-07 21:57   30208   ---------   C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

R1 VIAPFD;VIAPFD;C:\WINDOWS\system32\Drivers\VIAPFD.SYS [2001-05-04 08:24]
R2 GVCplDrv;GVCplDrv;C:\WINDOWS\system32\drivers\GVCplDrv.sys [2004-05-02 09:47]
R3 GVTDrv;GVTDrv;C:\WINDOWS\system32\drivers\GVTDrv.sys [2007-12-26 16:41]
S1 atitray;atitray;C:\Program Files\Radeon Omega Drivers\v3.8.360\ATI Tray Tools\atitray.sys []

*Newly Created Service* - AVGASCLN

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"C:\Program Files\Common Files\LightScribe\LSRunOnce.exe"
.
Contents of the 'Scheduled Tasks' folder
"2007-12-25 17:31:14 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-26 16:41:36
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

**************************************************************************
.
Completion time: 2007-12-26 16:44:32 - machine was rebooted

[wojtas]

log urwany nie odpowiedziales na pytanie. popraw