Warning ! win 32/privacyremover.m64 detected on your compute

**Posty:** 55 · przez **losyart** 12 Wrz 2008, 15:36

WItam przegladając wiadomo jakie strony zaaplikowałem sobie parę wirusów i teraz zamiast zwykłej tapety mam napis Warning Spyware detected on your computer i dalej

Warning ! Win 32/Adware.Virtumonde detected on your com,upter

Warning ! Win 32/PrivacyRemover.M64 detected on your computer

Na razie niby nic sie nie dzieje w internecie szpukować mogę tylko jak włączam kompa znaczy resetuje itp to na dzień dobry Avast 4 krotnie krzyczy że znaleziono wirusa przenosze do kwarantanny ale co dalej ??? Proszę o pomoc

**Posty:** 8001 · przez **Okocza** 12 Wrz 2008, 15:47

specjalne-narzedzia-czyszczace-vt96631.html

na początek zastosuj smitfraud fix i combofix

**Posty:** 684 · przez **djarta** 12 Wrz 2008, 16:02

na początek zastosuj smitfraud fix

SmitFraudFix jest tu zdecydowanie niepotrzebny! Wszystko usuniemy ComboFixem.

===========================
K.

**Posty:** 8001 · przez **Okocza** 12 Wrz 2008, 16:03

djarta napisał(a):SmitFraudFix jest tu zdecydowanie niepotrzebny!

losyart napisał(a):zamiast zwykłej tapety mam napis Warning Spyware detected

wiesz co to jest infekcja smitfraud :?:

**Posty:** 684 · przez **djarta** 12 Wrz 2008, 16:08

wiesz co to jest infekcja smitfraud

Wiem, ale ComboFix też to usuwa, po co używać 2 nardzędzi jak można użyć 1?

========================
K.

**Posty:** 8001 · przez **Okocza** 12 Wrz 2008, 16:10

djarta napisał(a):ale ComboFix też to usuwa, po co używać 2 nardzędzi jak można użyć 1?

akurat Twoje ukochane combo nie usuwa wszystkiego tak gwoli ścisłości.

**Posty:** 684 · przez **djarta** 12 Wrz 2008, 16:11

akurat Twoje ukochane combo nie usuwa wszystkiego tak gwoli ścisłości.

Heh, Ty chyba żartujesz co nie?
1. To nie moje ukochane "Combo".
2. ComboFix usuwa więcej infekcji niż jakiekolwiek narzędzie.
3. Sam się przekonasz.

============================
K.

**Posty:** 55 · przez **losyart** 12 Wrz 2008, 16:59

Przeskanowałem SDFixem ale combo w tym linku co podaliście nie ma albo jestem ślepy ściągnąłem z instalki.pl ale okazało się że jakiś niewypał

**Posty:** 684 · przez **djarta** 12 Wrz 2008, 17:11

Przeskanowałem SDFixem

Gdzie raport z SDFixa?

Ściągnij -----> ComboFixa,przeskanuj daj log.

=========================================
K.

**Posty:** 55 · przez **losyart** 12 Wrz 2008, 17:19

Kod: Zaznacz wszystko: SmitFraudFix v2.349 Scan done at 16:35:24,56, 2008-09-12 Run from C:\Documents and Settings\Artur\Pulpit\SmitfraudFix OS: Microsoft Windows XP [Wersja 5.1.2600] - Windows_NT The filesystem type is NTFS Fix run in normal mode »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» Killing process »»»»»»»»»»»»»»»»»»»»»»»» hosts 127.0.0.1 localhost »»»»»»»»»»»»»»»»»»»»»»»» VACFix VACFix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix S!Ri's WS2Fix: LSP not Found. »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix GenericRenosFix by S!Ri »»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files »»»»»»»»»»»»»»»»»»»»»»»» IEDFix IEDFix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» 404Fix 404Fix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» AntiXPVSTFix AntiXPVSTFix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» RK »»»»»»»»»»»»»»»»»»»»»»»» DNS Description: Realtek RTL8168/8111 PCI-E Gigabit Ethernet NIC - Sterownik miniport Harmonogramu pakietów DNS Server Search Order: 217.173.176.6 DNS Server Search Order: 217.173.176.50 DNS Server Search Order: 158.75.33.142 DNS Server Search Order: 195.114.173.153 DNS Server Search Order: 195.136.250.200 HKLM\SYSTEM\CCS\Services\Tcpip\..\{1073CE6F-31B2-4EA6-B45A-8DBB23C7C41C}: DhcpNameServer=217.173.176.6 217.173.176.50 158.75.33.142 195.114.173.153 195.136.250.200 HKLM\SYSTEM\CS1\Services\Tcpip\..\{1073CE6F-31B2-4EA6-B45A-8DBB23C7C41C}: DhcpNameServer=217.173.176.6 217.173.176.50 158.75.33.142 195.114.173.153 195.136.250.200 HKLM\SYSTEM\CS2\Services\Tcpip\..\{1073CE6F-31B2-4EA6-B45A-8DBB23C7C41C}: DhcpNameServer=217.173.176.6 217.173.176.50 158.75.33.142 195.114.173.153 195.136.250.200 HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=217.173.176.6 217.173.176.50 158.75.33.142 195.114.173.153 195.136.250.200 HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=217.173.176.6 217.173.176.50 158.75.33.142 195.114.173.153 195.136.250.200 HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=217.173.176.6 217.173.176.50 158.75.33.142 195.114.173.153 195.136.250.200 »»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System !!!Attention, following keys are not inevitably infected!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "System"="" »»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning Registry Cleaning done. »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» End

A co do Combo to nie mogę uruchomić wyskakuje taki błąd C:\ 327882R2FWJFW\pv.cfexe nie jest prawidłową aplikacją systemu Win32

**Posty:** 8001 · przez **Okocza** 12 Wrz 2008, 17:21

losyart, wstaw w tagi 'code' log :!:

**Posty:** 684 · przez **djarta** 12 Wrz 2008, 17:22

1) Zapisz go tak: Combo-Fix.exe, z kreseczką pomiędzy.
2) Wyłącz wszystkie programy.
3) Zmień wstecz datę o parę miesięcy/lat.
4) Rób wszystko w trybie awaryjnym.

==========================
K.

**Posty:** 55 · przez **losyart** 12 Wrz 2008, 18:01

djarta napisał(a):1) Zapisz go tak: Combo-Fix.exe, z kreseczką pomiędzy.
2) Wyłącz wszystkie programy.
3) Zmień wstecz datę o parę miesięcy/lat.
4) Rób wszystko w trybie awaryjnym.

==========================
K.

Ad 1 nie wiem jak
Ad 2 Zrobiłem tak
Ad 3 Zroboione
Ad 4 Robię

i...tera wyskoczyło co innego mianowicie You cannot rename ComboFix as ComboFix(3) Please use another name preferably made up alphanumeric characters

Nie wiem czy to coś da ale zeskanowałem hijackthisem z własnej inicjatywy

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:52:45, on 2008-09-12 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Safe mode with network support Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Spyware Doctor\pctsAuxs.exe C:\Program Files\Spyware Doctor\pctsSvc.exe C:\Program Files\Spyware Doctor\pctsTray.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\WINDOWS\system32\wbem\wmiprvse.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyPl.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.1.2.dll O2 - BHO: MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyPl.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O3 - Toolbar: MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyPl.dll O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Gainward] C:\Program Files\VDOTool\TBPanel.exe /A O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" O4 - HKLM\..\Run: [lphc9ntj0ev8v] C:\WINDOWS\system32\lphc9ntj0ev8v.exe O4 - HKLM\..\Run: [inrhccntj0ev8v] C:\Documents and Settings\Artur\Ustawienia lokalne\Temp\.tt53.tmp.exe /CR=221D9CBA90454C2DBE53B4615A879740F8751C303AB4E1C36705A499F1FC37C681F8AF55FD3B38220F04E3B93260BF64D77F755977EADFC1F12135F0F3FA23FA8467F920E96145A65C83937589FB83C489 O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background O4 - HKCU\..\Run: [Performance Center] C:\Program Files\Ascentive\Performance Center\ApcMain.exe -m O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [Vidalia] "C:\Program Files\Vidalia Bundle\Vidalia\vidalia.exe" O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe O9 - Extra button: Europa Casino - {4C826F10-D34B-4ba8-B609-1FB8C6482A05} - C:\Casino\Europa Casino\casino.exe O9 - Extra 'Tools' menuitem: Europa Casino - {4C826F10-D34B-4ba8-B609-1FB8C6482A05} - C:\Casino\Europa Casino\casino.exe O9 - Extra button: UltimateBet - {94148DB5-B42D-4915-95DA-2CBB4F7095BF} - C:\Program Files\UltimateBet\UltimateBet.exe O9 - Extra 'Tools' menuitem: UltimateBet - {94148DB5-B42D-4915-95DA-2CBB4F7095BF} - C:\Program Files\UltimateBet\UltimateBet.exe O9 - Extra button: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe O9 - Extra 'Tools' menuitem: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\Microgaming\Poker\UnibetpokerMPP\MPPoker.exe O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.1.2.dll/206 (file missing) O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: Ghost Navigator - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Ghost Navigator2_8_1\Ghost (file missing) O9 - Extra 'Tools' menuitem: Ghost Navigator - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Ghost Navigator2_8_1\Ghost (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin3.valueactive.com/Register/Branding/olr3313/OCX/v1018/flashax.cab O16 - DPF: {F7EDBBEA-1AD2-4EBF-AA07-D453CC29EE65} (Flash Casino Helper Object) - https://casinoshare.microgaming.com/casinoshare/flashax2.cab O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe (file missing) O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: ScsiAccess - Unknown owner - C:\WINDOWS\system32\ScsiAccess.EXE O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe -- End of file - 10726 bytes

**Posty:** 684 · przez **djarta** 12 Wrz 2008, 18:10

You cannot rename ComboFix as ComboFix(3) Please use another name preferably made up alphanumeric characters

Heh, usuń wszystkie ComboFixy.

1) Usuń tego ComboFixa i pobierz ponownie -----> ComboFixa.
2) Po pobraniu zapisz go tak: Combo-Fix.exe, z kreseczką pomiędzy. Prawoklik "Zmień nazwę".
3) Wyłącz wszystkie programy.
4) Zmień wstecz datę o parę miesięcy/lat.
5) Rób wszystko w trybie awaryjnym.

===============================
K.

**Posty:** 55 · przez **losyart** 12 Wrz 2008, 19:44

Niby wsyztsko spoko git ale zostawiłem tego combo włączoneo wyszedłem sobie a jak przyszedłem to zmrożone było i musiałem resetować dodatkowo po włączeniu na nowo zaczęły się pojawiać bardzo dziwne komunikaty typu instrukcja spod "0x7c92ae24" odwołuje się do pamięci pod adresem 0x00200070 Pamięć nie może być read i wtedy po nciśnięciu ok podobny komunikat tylko że inne cyferki wtf ???

**Posty:** 684 · przez **djarta** 13 Wrz 2008, 10:27

1) Daj log z ---> SRENG
2) Przeskanuj obszar swojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

===========================
K.

**Posty:** 55 · przez **losyart** 13 Wrz 2008, 12:53

Kod: Zaznacz wszystko: [CODE] 2008-09-13,12:19:49 System Repair Engineer 2.6.11.992 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Dodatek Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed Follow item(s) have been selected: All Boot Items (Including Registry, Startup Folders, Services and so on) Browser Add-ons Running Processes (Including process model information) File Associations Winsock Provider Autorun.Inf HOSTS File Process Privileges Scan Boot Items Registry [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <CTFMON.EXE><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher] <Gadu-Gadu><"C:\Program Files\Gadu-Gadu\gg.exe" /tray> [(Verified)Gadu-Gadu sp. z o.o.] <NVIDIA nTune><"C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear> [File is missing] <BitComet><"C:\Program Files\BitComet\BitComet.exe" /tray> [(Verified)Comet Network Technology Co Ltd.] <Orb><"C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background> [Orb Networks] <SpybotSD TeaTimer><C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe> [(Verified)Safer Networking Ltd.] <Vidalia><"C:\Program Files\Vidalia Bundle\Vidalia\vidalia.exe"> [File is missing] <MSMSGS><"C:\Program Files\Messenger\msmsgs.exe" /background> [(Verified)Microsoft Windows XP Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <RTHDCPL><RTHDCPL.EXE> [(Verified)Microsoft Windows Hardware Compatibility Publisher] <Gainward><C:\Program Files\VDOTool\TBPanel.exe /A> [(Verified)"PALIT MICROSYSTEMS,INC."] <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [(Verified)Microsoft Windows Hardware Compatibility Publisher] <nwiz><nwiz.exe /install> [] <avast!><C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe> [(Verified)ALWIL Software] <SunJavaUpdateSched><"C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"> [(Verified)"Sun Microsystems, Inc."] <NvMediaCenter><RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit> [(Verified)Microsoft Windows Hardware Compatibility Publisher] <NeroFilterCheck><C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe> [(Verified)Nero AG] <SecurDisc><C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe> [(Verified)Nero AG] <InCD><C:\Program Files\Nero\Nero 7\InCD\InCD.exe> [(Verified)Nero AG] <HP Software Update><C:\Program Files\HP\HP Software Update\HPWuSchd2.exe> [Hewlett-Packard Co.] <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [(Verified)"RealNetworks, Inc."] <QuickTime Task><"C:\Program Files\QuickTime\qttask.exe" -atboottime> [Apple Computer, Inc.] <ISTray><"C:\Program Files\Spyware Doctor\pctsTray.exe"> [(Verified)PC Tools] <KernelFaultCheck><%systemroot%\system32\dumprep 0 -k> [File is missing] <RemoteControl><"C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"> [(Verified)CyberLink] <LanguageShortcut><"C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"> [(Verified)CyberLink] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Windows Component Publisher] <Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Publisher] <UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] <LightScribe Control Panel><"C:\Program Files\Common Files\LightScribe\LSRunOnce.exe"> [(Verified)Hewlett-Packard Company] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser> [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub> [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <Książka adresowa 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] <N/A><C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install> [(Verified)Microsoft Corporation] ================================== Startup Folders [Adobe Reader Speed Launch] <C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk --> C:\PROGRA~1\Adobe\ACROBA~2.0\Reader\READER~1.EXE [Adobe Systems Incorporated]><N> ================================== Services [Ad-Aware 2007 Service / aawservice][Running/Auto Start] <"C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe"><Lavasoft> [avast! iAVS4 Control Service / aswUpdSv][Running/Auto Start] <"C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"><ALWIL Software> [avast! Antivirus / avast! Antivirus][Running/Auto Start] <"C:\Program Files\Alwil Software\Avast4\ashServ.exe"><ALWIL Software> [avast! Mail Scanner / avast! Mail Scanner][Running/Manual Start] <"C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service><ALWIL Software> [avast! Web Scanner / avast! Web Scanner][Running/Manual Start] <"C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service><ALWIL Software> [InCD Helper / InCDsrv][Running/Auto Start] <C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe><Nero AG> [Kodak Camera Connection Software / KodakCCS][Running/Auto Start] <C:\WINDOWS\system32\drivers\KodakCCS.exe><Eastman Kodak Company> [LightScribeService Direct Disc Labeling Service / LightScribeService][Running/Auto Start] <"C:\Program Files\Common Files\LightScribe\LSSrvc.exe"><Hewlett-Packard Company> [NBService / NBService][Stopped/Manual Start] <C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe><Nero AG> [NMIndexingService / NMIndexingService][Stopped/Manual Start] <"C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe"><Nero AG> [nTune Service / nTuneService][Running/Auto Start] <C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe /StartService><NVIDIA> [NVIDIA Display Driver Service / NVSvc][Running/Auto Start] <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation> [Pml Driver HPZ12 / Pml Driver HPZ12][Running/Auto Start] <C:\WINDOWS\system32\HPZipm12.exe><HP> [PnkBstrA / PnkBstrA][Stopped/Auto Start] <C:\WINDOWS\system32\PnkBstrA.exe><N/A> [PsExec / PSEXESVC][Stopped/Manual Start] <C:\WINDOWS\PSEXESVC.EXE><(File is missing)> [Cyberlink RichVideo Service(CRVS) / RichVideo][Running/Auto Start] <"C:\Program Files\CyberLink\Shared Files\RichVideo.exe"><> [ScsiAccess / ScsiAccess][Running/Auto Start] <C:\WINDOWS\system32\ScsiAccess.EXE><N/A> [PC Tools Auxiliary Service / sdAuxService][Running/Auto Start] <C:\Program Files\Spyware Doctor\pctsAuxs.exe><PC Tools> [PC Tools Security Service / sdCoreService][Running/Auto Start] <C:\Program Files\Spyware Doctor\pctsSvc.exe><PC Tools> ================================== Drivers [Sterownik procesora AMD / AmdK8][Running/System Start] <system32\DRIVERS\AmdK8.sys><Advanced Micro Devices> [AMD Low Level Device Driver / AmdLLD][Running/Manual Start] <system32\DRIVERS\AmdLLD.sys><AMD, Inc.> [Cardex / Cardex][Stopped/Manual Start] <\??\C:\WINDOWS\system32\drivers\TBPANEL.SYS><Windows (R) 2000 DDK provider> [catchme / catchme][Stopped/Manual Start] <\??\C:\ComboFix\catchme.sys><N/A> [Kodak Camera Proxy / DcCam][Running/System Start] <system32\DRIVERS\DcCam.sys><Eastman Kodak Company> [DcFpoint / DcFpoint][Stopped/Manual Start] <system32\DRIVERS\DcFpoint.sys><Eastman Kodak Company> [Kodak DCFS2K Driver / DCFS2K][Running/Auto Start] <system32\drivers\dcfs2k.sys><Eastman Kodak Company> [Legacy Polling Service / DcLps][Stopped/Manual Start] <system32\DRIVERS\DcLps.sys><Eastman Kodak Company> [DcPTP / DcPTP][Stopped/Manual Start] <system32\DRIVERS\DcPTP.sys><Eastman Kodak Company> [DualCoreCenter / DualCoreCenter][Stopped/Manual Start] <\??\C:\Program Files\MSI\DualCoreCenter\NTGLM7X.sys><MICRO-STAR INT'L CO., LTD.> [Exportit / Exportit][Stopped/System Start] <system32\DRIVERS\exportit.sys><Eastman Kodak Company> [FT2593 Filter / FT2593][Stopped/Manual Start] <system32\DRIVERS\FT2593.sys><Compuware Corporation> [GMSIPCI / GMSIPCI][Stopped/Manual Start] <\??\J:\INSTALL\GMSIPCI.SYS><N/A> [Hamachi Network Interface / hamachi][Stopped/Manual Start] <system32\DRIVERS\hamachi.sys><LogMeIn, Inc.> [Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start] <system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider> [IEEE-1284.4 Driver HPZid412 / HPZid412][Stopped/Manual Start] <system32\DRIVERS\HPZid412.sys><HP> [Print Class Driver for IEEE-1284.4 HPZipr12 / HPZipr12][Stopped/Manual Start] <system32\DRIVERS\HPZipr12.sys><HP> [USB to IEEE-1284.4 Translation Driver HPZius12 / HPZius12][Stopped/Manual Start] <system32\DRIVERS\HPZius12.sys><HP> [File Security Driver / IKFileSec][Running/Boot Start] <\SystemRoot\system32\drivers\ikfilesec.sys><PCTools Research Pty Ltd.> [System Filter Driver / IKSysFlt][Running/System Start] <system32\drivers\iksysflt.sys><PCTools Research Pty Ltd.> [System Security Driver / IKSysSec][Running/System Start] <system32\drivers\iksyssec.sys><PCTools Research Pty Ltd.> [InCD File System / InCDfs][Running/Disabled] <system32\drivers\InCDFs.sys><Nero AG> [InCDPass / InCDPass][Running/System Start] <system32\drivers\InCDPass.sys><Nero AG> [InCD Reader / incdrm][Running/System Start] <system32\drivers\InCDRm.sys><Nero AG> [Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start] <system32\drivers\RtkHDAud.sys><Realtek Semiconductor Corp.> [Sterownik Zapory systemu Windows IPv6 / Ip6Fw][Stopped/Manual Start] <system32\DRIVERS\Ip6Fw.sys><N/A> [nv / nv][Running/Manual Start] <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation> [NVR0Dev / NVR0Dev][Running/Manual Start] <\??\C:\WINDOWS\nvoclock.sys><NVidia Corp.> [Sterownik bezpośredniego połączenia kablowego / Ptilink][Running/Manual Start] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [PxHelp20 / PxHelp20][Running/Boot Start] <\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions> [Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver / RTLE8023xp][Running/Manual Start] <system32\DRIVERS\Rtenicxp.sys><Realtek Semiconductor Corporation> [RushTopDevice2 / RushTopDevice2][Stopped/Manual Start] <\??\C:\Program Files\MSI\DualCoreCenter\RushTop.sys><Your Corporation> [Secdrv / Secdrv][Stopped/Manual Start] <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.> [sptd / sptd][Running/Boot Start] <\SystemRoot\System32\Drivers\sptd.sys><N/A> [vnccom / vnccom][Running/Auto Start] <System32\Drivers\vnccom.SYS><RDV Soft> [vncdrv / vncdrv][Running/Manual Start] <system32\DRIVERS\vncdrv.sys><RDV Soft> ================================== Browser Add-ons [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated> [RealPlayer Download and Record Plugin for Internet Explorer] {3049C3E9-B461-4BC5-8870-4C09146192CA} <C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll, RealPlayer> [BitComet Helper] {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} <C:\Program Files\BitComet\tools\BitCometBHO_1.2.1.2.dll, BitComet> [MyPlayCity Toolbar] {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} <C:\Program Files\MyPlayCity\tbMyPl.dll, Conduit Ltd.> [Spybot-S&D IE Protection] {53707962-6F74-2D53-2644-206D7942484F} <C:\PROGRA~1\SPYBOT~1\SDHelper.dll, Safer Networking Limited> [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll, Sun Microsystems, Inc.> [Java Plug-in 1.6.0_07] {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll, Sun Microsystems, Inc.> [PokerStars] {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} <C:\Program Files\PokerStars\PokerStarsUpdate.exe, PokerStars> [Titan Poker] {49783ED4-258D-4f9f-BE11-137C18D3E543} <C:\Poker\Titan Poker\casino.exe, > [Europa Casino] {4C826F10-D34B-4ba8-B609-1FB8C6482A05} <C:\Casino\Europa Casino\casino.exe, > [UltimateBet] {94148DB5-B42D-4915-95DA-2CBB4F7095BF} <C:\Program Files\UltimateBet\UltimateBet.exe, UltimateBet> [CDPoker] {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} <C:\Poker\CDPoker\casino.exe, > [PartyPoker.com] {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} <C:\Program Files\PartyGaming\PartyPoker\RunApp.exe, > [Unibet Poker] {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} <C:\Microgaming\Poker\UnibetpokerMPP\MPPoker.exe, Microgaming> [BitComet] {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} <, N/A> [Spybot-S&D IE Protection] {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} <C:\PROGRA~1\SPYBOT~1\SDHelper.dll, Safer Networking Limited> [Ghost Navigator] {ECC5777A-6E88-BFCE-13CE-81F134789E7B} <C:\Program Files\Ghost Navigator2_8_1\Ghost, N/A> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation> [MyPlayCity Toolbar] {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} <C:\Program Files\MyPlayCity\tbMyPl.dll, Conduit Ltd.> [Java Plug-in 1.6.0_07] {8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll, Sun Microsystems, Inc.> [Java Plug-in 1.6.0_03] {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll, Sun Microsystems, Inc.> [Java Plug-in 1.6.0_07] {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll, Sun Microsystems, Inc.> [Java Plug-in 1.6.0_07] {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll, Sun Microsystems, Inc.> [FlashXControl Object] {D8089245-3211-40F6-819B-9E5E92CD61A2} <C:\WINDOWS\system32\FlashAX\FlashAX.ocx, Microgaming Systems> [Flash Casino Helper Object] {F7EDBBEA-1AD2-4EBF-AA07-D453CC29EE65} <C:\WINDOWS\system32\FlashAX2\FlashAX2.ocx, Microgaming Systems> [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated> [RealPlayer Download and Record Plugin for Internet Explorer] {3049C3E9-B461-4BC5-8870-4C09146192CA} <C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll, RealPlayer> [BitComet Helper] {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} <C:\Program Files\BitComet\tools\BitCometBHO_1.2.1.2.dll, BitComet> [MyPlayCity Toolbar] {4724C5D8-DFA7-417A-A2F5-1EABFEE9B4AC} <C:\Program Files\MyPlayCity\tbMyPl.dll, Conduit Ltd.> [Spybot-S&D IE Protection] {53707962-6F74-2D53-2644-206D7942484F} <C:\PROGRA~1\SPYBOT~1\SDHelper.dll, Safer Networking Limited> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [Active Desktop Mover] {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A> [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll, Sun Microsystems, Inc.> [SopCore Control] {8FEFF364-6A5F-4966-A917-A3AC28411659} <C:\PROGRA~1\SopCast\sopocx.ocx, SopCast.com> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx, Adobe Systems, Inc.> [Flash Casino Helper Object] {F7EDBBEA-1AD2-4EBF-AA07-D453CC29EE65} <C:\WINDOWS\system32\FlashAX2\FlashAX2.ocx, Microgaming Systems> [&D&ownload &with BitComet] <res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm, N/A> [&D&ownload all video with BitComet] <res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm, N/A> [&D&ownload all with BitComet] <res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm, N/A> [E&xport to Microsoft Excel] <res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000, N/A> ================================== Running Processes [PID: 636 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 704 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 728 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 772 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 784 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 948 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 1024 / USŁUGA SIECIOWA][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 1056 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\WINDOWS\system32\wups2.dll] [Microsoft Corporation, 7.2.6001.784 (winmain_oob/wu_wsuswlc(wmbla).080718-1904)] [PID: 1148 / USŁUGA SIECIOWA][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 1308 / USŁUGA LOKALNA][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 1380 / SYSTEM][C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe] [Lavasoft, 7,0,2,6] [C:\Program Files\Lavasoft\Ad-Aware 2007\CEAPI.dll] [Lavasoft, 7,0,2,6] [C:\Program Files\Lavasoft\Ad-Aware 2007\PKArchive85u.dll] [PKWARE, Inc., 8.4.1045.0] [C:\Program Files\Lavasoft\Ad-Aware 2007\Update.dll] [, 7, 0, 2, 6] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 1428 / SYSTEM][C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnS.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnOS.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Alwil Software\Avast4\aswCmnB.dll] [ALWIL Software, 4, 8, 1169, 0] [PID: 1480 / SYSTEM][C:\Program Files\Alwil Software\Avast4\ashServ.exe] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswAux.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Alwil Software\Avast4\aswCmnB.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnOS.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswEngin.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswScan.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnS.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\ashBase.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\ashTask.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswInteg.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswIdle.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\Aavm4h.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\Polish\Base.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\AhResMai.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\ahResMes.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\AhResNS.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\AhResOut.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\ahResP2P.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\AhResStd.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\AhResWS.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\ashSSqlt.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswRes.dll] [ALWIL Software, 4, 8, 1169, 0] [PID: 1748 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\WINDOWS\system32\HpTcpMon.dll] [Hewlett Packard, 5.01.00.011] [C:\WINDOWS\system32\hpzjrd01.dll] [Hewlett Packard, 2.01.00.003] [C:\WINDOWS\system32\HPTcpMUI.dll] [Microsoft Corporation, 5.01.00.011] [C:\WINDOWS\system32\hptcpmib.dll] [Hewlett Packard, 5.01.00.011] [C:\WINDOWS\system32\hpzlnt12.dll] [HP, 2.335.5.0] [PID: 1944 / SYSTEM][C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe] [Nero AG, 5, 5, 2, 8] [C:\Program Files\Nero\Nero 7\InCD\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Nero\Nero 7\InCD\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Common Files\Ahead\Lib\AdvrCntr2.dll] [Nero AG, 9,4,2, 10850] [C:\Program Files\Common Files\Ahead\Lib\DriveLocker.dll] [Nero AG, 1, 0, 0, 20] [C:\Program Files\Nero\Nero 7\InCD\incdshx.dll] [Nero AG, 5, 5, 2, 8] [C:\Program Files\Nero\Nero 7\InCD\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 1964 / SYSTEM][C:\WINDOWS\system32\drivers\KodakCCS.exe] [Eastman Kodak Company, 1.1.5100.0] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 1992 / SYSTEM][C:\Program Files\Common Files\LightScribe\LSSrvc.exe] [Hewlett-Packard Company, 1.6.43.1] [C:\Program Files\Common Files\LightScribe\LSSProxy.dll] [Hewlett-Packard Company, 1.6.43.1] [C:\Program Files\Common Files\LightScribe\LSLog.dll] [Hewlett-Packard Company, 1.6.43.1] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 200 / SYSTEM][C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe] [NVIDIA, 5.05.40] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\NVIDIA Corporation\nTune\nTuneServiceENU.dll] [NVIDIA, 5.05.40] [C:\Program Files\NVIDIA Corporation\nTune\nvsulib.dll] [NVIDIA, 5.05.40] [C:\WINDOWS\system32\nvapi.dll] [NVIDIA Corporation, 6.14.11.6921] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\WINDOWS\system32\odbcbcp.dll] [Microsoft Corporation, 2000.085.1117.00 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\netfxperf.dll] [Microsoft Corporation, 1.1.4322.573] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400)] [C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\perfcounter.dll] [Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400)] [C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll] [Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400)] [C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_perf.dll] [Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [PID: 216 / SYSTEM][C:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.11.6921] [C:\WINDOWS\system32\nvapi.dll] [NVIDIA Corporation, 6.14.11.6921] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 224 / SYSTEM][C:\WINDOWS\system32\HPZipm12.exe] [HP, 10, 1, 1, 6] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 288 / SYSTEM][C:\Program Files\CyberLink\Shared Files\RichVideo.exe] [, 1.1.0808 ] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 352 / SYSTEM][C:\WINDOWS\system32\ScsiAccess.EXE] [N/A, ] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 436 / SYSTEM][C:\Program Files\Spyware Doctor\pctsAuxs.exe] [PC Tools, 5, 5, 1, 0] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 464 / SYSTEM][C:\Program Files\Spyware Doctor\pctsSvc.exe] [PC Tools, 5.5.1.9] [C:\Program Files\Spyware Doctor\rtl100.bpl] [Borland Software Corporation, 10.0.2288.42451] [C:\Program Files\Spyware Doctor\vcl100.bpl] [Borland Software Corporation, 10.0.2288.42451] [C:\Program Files\Spyware Doctor\SysAccess.dll] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\ikdll.dll] [PCTools Research Pty Ltd., 5.0.2.1040 built by: WinDDK] [C:\Program Files\Spyware Doctor\CommOM.dll] [PC Tools, 5.5.1.4] [C:\Program Files\Spyware Doctor\CommLib.dll] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\commhlpr.dll] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\RegHelper.dll] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\inethlpr.dll] [PC Tools, 5.5.1.3] [C:\Program Files\Spyware Doctor\filehlpr.dll] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\sdcore.dll] [PC Tools, 5.5.1.3] [C:\Program Files\Spyware Doctor\FileStorage.sdp] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\Settings.sdp] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\IDBLib.sdp] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\SDInfo.sdp] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\SDExtra.sdp] [PC Tools, 5.5.1.2] [C:\Program Files\Spyware Doctor\PCTWSC.dll] [PC Tools, 1, 0, 0, 12] [C:\Program Files\Spyware Doctor\Immunizer.sdp] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\Localizer.sdp] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\NfyMan.sdp] [PC Tools, 5.5.1.1] [C:\Program Files\Spyware Doctor\quarantine.sdp] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\BH.dll] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\RebootManager.sdp] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\scaneng.sdp] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\stasks.sdp] [PC Tools, 5.5.1.1] [C:\Program Files\Spyware Doctor\SystemMonitor.sdp] [PC Tools, 5.5.1.4] [C:\Program Files\Spyware Doctor\whitelist.sdp] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\plugins\Browsers.SDP] [PC Tools, 5.5.1.1] [C:\Program Files\Spyware Doctor\plugins\grfiles.SDP] [PC Tools, 5.5.1.2] [C:\Program Files\Spyware Doctor\plugins\grImmunizer.SDP] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\plugins\grregistry.SDP] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\PCToolsComponents.bpl] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\SH.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Spyware Doctor\plugins\Network.SDP] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\plugins\Process.SDP] [PC Tools, 5.5.1.1] [C:\Program Files\Spyware Doctor\plugins\ScriptEngine.SDP] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\plugins\StartUp.SDP] [PC Tools, 5.5.1.0] [PID: 540 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 576 / USŁUGA LOKALNA][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: DNSRV(bld4act)] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 2132 / SYSTEM][C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\ashBase.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Alwil Software\Avast4\aswCmnOS.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnB.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnS.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\ashTask.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswAux.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\Aavm4h.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\AhResMai.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Alwil Software\Avast4\Polish\Base.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswEngin.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswScan.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\Polish\Lang.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Alwil Software\Avast4\Polish\langmai.dll] [ALWIL Software, 4, 8, 1169, 0] [PID: 2148 / SYSTEM][C:\Program Files\Alwil Software\Avast4\ashWebSv.exe] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\ashBase.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Alwil Software\Avast4\aswCmnOS.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnB.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnS.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\Aavm4h.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\ashTask.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswAux.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Alwil Software\Avast4\Polish\Base.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\ashWsFtr.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswScan.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\PROGRA~1\ALWILS~1\Avast4\AhResWs.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\aswEngin.dll] [ALWIL Software, 4, 8, 1169, 0] [PID: 2312 / USŁUGA LOKALNA][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 2924 / Artur][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [C:\Program Files\WinRAR\rarext.dll] [N/A, ] [C:\Program Files\Nero\Nero 7\Nero CoverDesigner\CoverEdExtension.dll] [Nero AG, 2, 9, 1, 0] [C:\Program Files\Nero\Nero 7\Nero CoverDesigner\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Nero\Nero 7\Nero CoverDesigner\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Nero\Nero 7\Nero CoverDesigner\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Nero\Nero 7\Nero BackItUp\NBShell.dll] [Nero AG, 2, 9, 1, 0] [C:\Program Files\Nero\Nero 7\Nero BackItUp\MFC71U.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Nero\Nero 7\InCD\InCDshx.dll] [Nero AG, 5, 5, 2, 8] [C:\Program Files\Nero\Nero 7\InCD\InCDAPI2.dll] [Nero AG, 5, 5, 2, 8] [C:\Program Files\Nero\Nero 7\InCD\NBHApi.dll] [Nero AG, 5, 5, 2, 8] [C:\Program Files\Alwil Software\Avast4\ashShell.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0] [PID: 2940 / Artur][C:\Program Files\Spyware Doctor\pctsTray.exe] [PC Tools, 5.5.1.1] [C:\Program Files\Spyware Doctor\rtl100.bpl] [Borland Software Corporation, 10.0.2288.42451] [C:\Program Files\Spyware Doctor\vcl100.bpl] [Borland Software Corporation, 10.0.2288.42451] [C:\Program Files\Spyware Doctor\SysAccess.dll] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\ikdll.dll] [PCTools Research Pty Ltd., 5.0.2.1040 built by: WinDDK] [C:\Program Files\Spyware Doctor\CommOM.dll] [PC Tools, 5.5.1.4] [C:\Program Files\Spyware Doctor\CommLib.dll] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\PCToolsComponents.bpl] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\sdinfo.sdp] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\cdialogs.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Spyware Doctor\pwindow.dll] [PC Tools, 5.5.1.0] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [PID: 3180 / Artur][C:\WINDOWS\RTHDCPL.EXE] [Realtek Semiconductor Corp., 2.1.3.6] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [PID: 3308 / Artur][C:\Program Files\VDOTool\TBPanel.exe] [Palit Microsystems, Inc., 5.9] [C:\Program Files\VDOTool\TBManage.dll] [N/A, ] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\WINDOWS\system32\NvCpl.dll] [NVIDIA Corporation, 6.14.11.6921] [C:\WINDOWS\system32\NVRSPL.DLL] [NVIDIA Corporation, 6.14.11.6906] [C:\WINDOWS\system32\nvapi.dll] [NVIDIA Corporation, 6.14.11.6921] [C:\Program Files\VDOTool\GwLib.DLL] [Gainward, 1, 0, 0, 6] [C:\WINDOWS\nvgpio.dll] [NVIDIA Corporation, 2.0.0.1] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [PID: 3348 / Artur][C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe] [ALWIL Software, 4, 8, 1169, 0] [C:\PROGRA~1\ALWILS~1\Avast4\aswCmnOS.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\PROGRA~1\ALWILS~1\Avast4\ashBase.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\PROGRA~1\ALWILS~1\Avast4\aswCmnB.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\PROGRA~1\ALWILS~1\Avast4\aswCmnS.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\PROGRA~1\ALWILS~1\Avast4\ashTask.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\PROGRA~1\ALWILS~1\Avast4\aswAux.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\PROGRA~1\ALWILS~1\Avast4\Aavm4h.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Alwil Software\Avast4\Polish\Base.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Alwil Software\Avast4\Polish\Lang.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\PROGRA~1\ALWILS~1\Avast4\AavmRpch.dll] [ALWIL Software, 4, 8, 1169, 0] [c:\program files\alwil software\avast4\ahruimai.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\PROGRA~1\ALWILS~1\Avast4\ashUInt.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\PROGRA~1\ALWILS~1\Avast4\XT1922.dll] [Codejock Software, 1, 9, 4, 0] [c:\program files\alwil software\avast4\ahruimes.dll] [ALWIL Software, 4, 8, 1169, 0] [c:\program files\alwil software\avast4\ahruins.dll] [ALWIL Software, 4, 8, 1169, 0] [c:\program files\alwil software\avast4\ahruiout.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\WINDOWS\system32\MAPI32.dll] [Microsoft Corporation, 1.0.2536.0 (XPClient.010817-1148)] [c:\program files\alwil software\avast4\ahruip2p.dll] [ALWIL Software, 4, 8, 1169, 0] [c:\program files\alwil software\avast4\ahruistd.dll] [ALWIL Software, 4, 8, 1169, 0] [c:\program files\alwil software\avast4\ahruiws.dll] [ALWIL Software, 4, 8, 1169, 0] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [PID: 3400 / Artur][C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe] [Sun Microsystems, Inc., 6.0.70.6] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 3408 / Artur][C:\WINDOWS\system32\RUNDLL32.EXE] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\WINDOWS\system32\NvMcTray.dll] [NVIDIA Corporation, 6.14.11.6921] [C:\WINDOWS\system32\nvapi.dll] [NVIDIA Corporation, 6.14.11.6921] [C:\WINDOWS\system32\NVRSPL.DLL] [NVIDIA Corporation, 6.14.11.6906] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [PID: 3464 / Artur][C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe] [Nero AG, 5, 5, 2, 8] [C:\Program Files\Nero\Nero 7\InCD\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Nero\Nero 7\InCD\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Nero\Nero 7\InCD\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Nero\Nero 7\InCD\NBHStr.dll] [Nero AG, 5, 5, 2, 8] [C:\Program Files\Nero\Nero 7\InCD\NBHApi.dll] [Nero AG, 5, 5, 2, 8] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [PID: 3552 / Artur][C:\Program Files\Nero\Nero 7\InCD\InCD.exe] [Nero AG, 5, 5, 2, 8] [C:\Program Files\Nero\Nero 7\InCD\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Nero\Nero 7\InCD\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Nero\Nero 7\InCD\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Nero\Nero 7\InCD\InCDgui.dll] [Nero AG, 5, 5, 2, 8] [C:\Program Files\Common Files\Ahead\Lib\AdvrCntr2.dll] [Nero AG, 9,4,2, 10850] [C:\Program Files\Common Files\Ahead\Lib\ShellManager.dll] [Nero AG, 7.9.4.2] [C:\Program Files\Nero\Nero 7\InCD\InCDAPI2.dll] [Nero AG, 5, 5, 2, 8] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [PID: 3580 / Artur][C:\Program Files\HP\HP Software Update\HPWuSchd2.exe] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [PID: 3592 / Artur][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.1.45] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [PID: 3628 / Artur][C:\Program Files\QuickTime\qttask.exe] [Apple Computer, Inc., 6.4] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [C:\WINDOWS\system32\QuickTime.qts] [Apple Computer, Inc., 6.4] [C:\WINDOWS\system32\QuickTime\QuickTime3GPP.qtx] [Apple Computer, Inc., 6.4] [C:\WINDOWS\system32\QuickTime\QuickTimeAuthoring.qtx] [Apple Computer, Inc., 6.4] [C:\WINDOWS\system32\QuickTime\QuickTimeCapture.qtx] [Apple Computer, Inc., 6.4] [C:\WINDOWS\system32\QuickTime\QuickTimeEffects.qtx] [Apple Computer, Inc., 6.4] [C:\WINDOWS\system32\QuickTime\QuickTimeEssentials.qtx] [Apple Computer, Inc., 6.4] [C:\WINDOWS\system32\QuickTime\QuickTimeImage.qtx] [Apple Computer, Inc., 6.4] [C:\WINDOWS\system32\QuickTime\QuickTimeInternetExtras.qtx] [Apple Computer, Inc., 6.4] [C:\WINDOWS\system32\QuickTime\QuickTimeMPEG.qtx] [Apple Computer, Inc, 6.4] [C:\WINDOWS\system32\QuickTime\QuickTimeMPEG4.qtx] [Apple Computer, Inc., 6.4] [C:\WINDOWS\system32\QuickTime\QuickTimeMPEG4Authoring.qtx] [Apple Computer, Inc., 6.4] [C:\WINDOWS\system32\QuickTime\QuickTimeMusic.qtx] [Apple Computer, Inc., 6.4] [C:\WINDOWS\system32\QuickTime\QuickTimeStreaming.qtx] [Apple Computer, Inc., 6.4] [C:\WINDOWS\system32\QuickTime\QuickTimeStreamingAuthoring.qtx] [Apple Computer, Inc., 6.4] [C:\WINDOWS\system32\QuickTime\QuickTimeStreamingExtras.qtx] [Apple Computer, Inc., 6.4] [PID: 3660 / Artur][C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe] [Cyberlink Corp., 7.00.2406] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Cyberlink\PowerDVD\CLRCEngine3.dll] [CyberLink Corp., 7.00.1711 ] [C:\Program Files\Cyberlink\PowerDVD\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [PID: 3808 / Artur][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [PID: 3860 / Artur][C:\Program Files\Gadu-Gadu\gg.exe] [Gadu-Gadu S.A., 7,7,0,3725] [C:\Program Files\Gadu-Gadu\Crypto.dll] [sms-express.com, 1, 0, 0, 0] [C:\Program Files\Gadu-Gadu\LIBEAY32.dll] [The OpenSSL Project, http://www.openssl.org/, 0.9.8e] [C:\Program Files\Gadu-Gadu\MSVCR71.dll] [Microsoft Corporation, 7.10.6030.0] [C:\Program Files\Gadu-Gadu\SSLEAY32.dll] [The OpenSSL Project, http://www.openssl.org/, 0.9.8e] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [C:\Program Files\Gadu-Gadu\dbghelp.dll] [Microsoft Corporation, 6.2.0013.1 (DbgBuild.030619-2209)] [C:\Program Files\Gadu-Gadu\libcurl.dll] [N/A, ] [C:\Program Files\Gadu-Gadu\libssl32.dll] [The OpenSSL Project, http://www.openssl.org/, 0.9.8e] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Gadu-Gadu\Lang.PL.dll] [Gadu-Gadu S.A., 7,7,0,2976] [C:\Program Files\Gadu-Gadu\archives.dll] [n0ne, 1, 0, 0, 2] [C:\Program Files\Gadu-Gadu\GGMedia.dll] [Gadu-Gadu S.A., 7,6,0,3433] [C:\Program Files\Gadu-Gadu\libiax2.dll] [N/A, ] [C:\Program Files\Gadu-Gadu\libjb.dll] [N/A, ] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx] [Adobe Systems, Inc., 9,0,47,0] [C:\WINDOWS\system32\Macromed\Common\SwSupport.dll] [Adobe Systems, Inc., 10.2r22] [PID: 3924 / Artur][C:\Program Files\Winamp Remote\bin\OrbTray.exe] [Orb Networks, 2, 2008, 105, 1830] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Winamp Remote\bin\LangRes.dll] [Orb Networks, 1, 2008, 0110, 1401] [C:\Program Files\Winamp Remote\bin\CabDirectory.dll] [Orb Networks, 1, 2007, 313, 1100] [C:\Program Files\Winamp Remote\bin\Cab.dll] [, 1, 2008, 118, 1500] [C:\Program Files\Winamp Remote\bin\CabClient.dll] [Orb Networks, 2, 2007, 1219, 1130] [C:\Program Files\Winamp Remote\bin\LIBEAY32.dll] [The OpenSSL Project, http://www.openssl.org/, 0.9.8e] [C:\Program Files\Winamp Remote\bin\SSLEAY32.dll] [The OpenSSL Project, http://www.openssl.org/, 0.9.8e] [C:\Program Files\Winamp Remote\bin\ZLIB1.dll] [, 1.2.3] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [PID: 3944 / Artur][C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe] [Safer Networking Limited, 1, 5, 2, 16] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Spybot - Search & Destroy\advcheck.dll] [Safer Networking Limited, 1, 5, 4, 5] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [PID: 3996 / Artur][C:\Program Files\Messenger\msmsgs.exe] [Microsoft Corporation, 4.7.3001] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [PID: 528 / Artur][C:\Program Files\Winamp Remote\bin\Orb.exe] [Orb Networks, Inc., 1, 2007, 731, 1315] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Winamp Remote\bin\OrbMedia.dll] [, 2, 2007, 1126, 1830] [C:\Program Files\Winamp Remote\bin\sqlite3.dll] [, 3, 4, 1, 0] [C:\Program Files\Winamp Remote\bin\LIBEAY32.dll] [The OpenSSL Project, http://www.openssl.org/, 0.9.8e] [C:\Program Files\Winamp Remote\bin\id3lib.dll] [http://www.id3lib.org/, 3.8.3] [C:\Program Files\Winamp Remote\bin\ogg.dll] [N/A, ] [C:\Program Files\Winamp Remote\bin\Cab.dll] [, 1, 2008, 118, 1500] [C:\Program Files\Winamp Remote\bin\OrbRequestProxy.dll] [Orb Networks, 2, 2007, 920, 1800] [C:\Program Files\Winamp Remote\bin\OrbContacts.dll] [Orb Networks, 2, 2007, 1102, 1200] [C:\WINDOWS\system32\MAPI32.dll] [Microsoft Corporation, 1.0.2536.0 (XPClient.010817-1148)] [C:\Program Files\Winamp Remote\bin\OrbDMS.dll] [Orb Networks, Inc., 1, 2007, 1212, 1600] [C:\Program Files\Winamp Remote\bin\OrbImageProcessing.dll] [Orb Networks, 2, 2007, 920, 1500] [C:\Program Files\Winamp Remote\bin\OrbIR.dll] [Microsoft Corporation, 1, 2007, 429, 1700] [C:\Program Files\Winamp Remote\bin\OrbPVR.dll] [, 1, 2007, 1108, 1200] [C:\Program Files\Winamp Remote\bin\LangRes.dll] [Orb Networks, 1, 2008, 0110, 1401] [C:\Program Files\Winamp Remote\bin\OrbRTSPServer.dll] [Orb Networks, 2, 2007, 1113, 1600] [C:\Program Files\Winamp Remote\bin\OrbStats.dll] [Orb Networks, 2, 2007, 620, 1553] [C:\Program Files\Winamp Remote\bin\OrbStreamer.dll] [Orb Networks, 2, 2007, 1220, 1200] [C:\Program Files\Winamp Remote\bin\OrbTVXML.dll] [Orb Networks, 1, 2007, 1001, 1830] [C:\Program Files\Winamp Remote\bin\LIBEXPAT.dll] [N/A, ] [C:\Program Files\Winamp Remote\bin\OrbWebServer.dll] [, 2, 2007, 920, 1000] [C:\Program Files\Winamp Remote\bin\TVGrabber.dll] [, 1, 2005, 1122, 1700] [C:\WINDOWS\system32\msdmo.dll] [, ] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [PID: 2448 / Artur][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 7.2.6001.784 (winmain_oob/wu_wsuswlc(wmbla).080718-1904)] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\WINDOWS\system32\wups2.dll] [Microsoft Corporation, 7.2.6001.784 (winmain_oob/wu_wsuswlc(wmbla).080718-1904)] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [PID: 2580 / Artur][C:\Program Files\Mozilla Firefox\firefox.exe] [Mozilla Corporation, 1.9.0.1] [C:\Program Files\Mozilla Firefox\xul.dll] [Mozilla Foundation, 1.9.0.1] [C:\Program Files\Mozilla Firefox\sqlite3.dll] [sqlite.org, 3.5.9] [C:\Program Files\Mozilla Firefox\MOZCRT19.dll] [Mozilla Foundation, 8.00.0000] [C:\Program Files\Mozilla Firefox\js3250.dll] [Netscape Communications Corporation, 4.0] [C:\Program Files\Mozilla Firefox\nspr4.dll] [Mozilla Foundation, 4.7.1] [C:\Program Files\Mozilla Firefox\smime3.dll] [Mozilla Foundation, 3.12.0.3 Basic ECC] [C:\Program Files\Mozilla Firefox\nss3.dll] [Mozilla Foundation, 3.12.0.3 Basic ECC] [C:\Program Files\Mozilla Firefox\nssutil3.dll] [Mozilla Foundation, 3.12.0.3 Basic ECC] [C:\Program Files\Mozilla Firefox\plc4.dll] [Mozilla Foundation, 4.7.1] [C:\Program Files\Mozilla Firefox\plds4.dll] [Mozilla Foundation, 4.7.1] [C:\Program Files\Mozilla Firefox\ssl3.dll] [Mozilla Foundation, 3.12.0.3 Basic ECC] [C:\Program Files\Mozilla Firefox\xpcom.dll] [Mozilla Foundation, 1.9.0.1] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Mozilla Firefox\components\browserdirprovider.dll] [Mozilla Foundation, 1.9.0.1] [C:\Program Files\Mozilla Firefox\softokn3.dll] [Mozilla Foundation, 3.12.0.3 Basic ECC] [C:\Program Files\Mozilla Firefox\nssdbm3.dll] [Mozilla Foundation, 3.12.0.3 Basic ECC] [C:\Program Files\Mozilla Firefox\freebl3.dll] [Mozilla Foundation, 3.12.0.3 Basic ECC] [C:\Program Files\Mozilla Firefox\nssckbi.dll] [Mozilla Foundation, 1.70] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [C:\Program Files\Mozilla Firefox\components\brwsrcmp.dll] [Mozilla Foundation, 1.9.0.1] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\icm32.dll] [Microsoft Corporation, 5.1.2600.2709 (xpsp_sp2_gdr.050628-1518)] [C:\Program Files\Microsoft Office\Office10\msohev.dll] [Microsoft Corporation, 10.0.2609] [PID: 568 / Artur][C:\Documents and Settings\Artur\Pulpit\SREngLdr.EXE] [Smallfrogs Studio, 2.6.11.992] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [PID: 3704 / Artur][C:\Documents and Settings\Artur\Pulpit\SREdbb510c9.EXE] [Smallfrogs Studio, 2.6.11.992] [C:\Program Files\Spyware Doctor\smumhook.dll] [PC Tools, 5.5.1.1] [C:\Program Files\Gadu-Gadu\ggwhook.dll] [Gadu-Gadu S.A., 7,6,0,1578] [C:\Documents and Settings\Artur\Pulpit\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] ================================== File Associations .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %*] .COM OK. ["%1" %*] .PIF OK. ["%1" %*] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %*] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock Provider N/A ================================== Autorun.Inf N/A ================================== HOSTS File 127.0.0.1 localhost ================================== Process Privileges Scan Special Privileges Enabled: SeLoadDriverPrivilege [PID = 200, C:\PROGRAM FILES\NVIDIA CORPORATION\NTUNE\NTUNESERVICE.EXE] Special Privileges Enabled: SeSystemtimePrivilege [PID = 200, C:\PROGRAM FILES\NVIDIA CORPORATION\NTUNE\NTUNESERVICE.EXE] Special Privileges Enabled: SeLoadDriverPrivilege [PID = 224, C:\WINDOWS\SYSTEM32\HPZIPM12.EXE] Special Privileges Enabled: SeSystemtimePrivilege [PID = 224, C:\WINDOWS\SYSTEM32\HPZIPM12.EXE] Special Privileges Enabled: SeLoadDriverPrivilege [PID = 352, C:\WINDOWS\SYSTEM32\SCSIACCESS.EXE] Special Privileges Enabled: SeSystemtimePrivilege [PID = 352, C:\WINDOWS\SYSTEM32\SCSIACCESS.EXE] Special Privileges Enabled: SeSystemtimePrivilege [PID = 3580, C:\PROGRAM FILES\HP\HP SOFTWARE UPDATE\HPWUSCHD2.EXE] Special Privileges Enabled: SeDebugPrivilege [PID = 3580, C:\PROGRAM FILES\HP\HP SOFTWARE UPDATE\HPWUSCHD2.EXE] Special Privileges Enabled: SeLoadDriverPrivilege [PID = 3580, C:\PROGRAM FILES\HP\HP SOFTWARE UPDATE\HPWUSCHD2.EXE] Special Privileges Enabled: SeSystemtimePrivilege [PID = 3628, C:\PROGRAM FILES\QUICKTIME\QTTASK.EXE] Special Privileges Enabled: SeDebugPrivilege [PID = 3628, C:\PROGRAM FILES\QUICKTIME\QTTASK.EXE] Special Privileges Enabled: SeLoadDriverPrivilege [PID = 3628, C:\PROGRAM FILES\QUICKTIME\QTTASK.EXE] Special Privileges Enabled: SeSystemtimePrivilege [PID = 3924, C:\PROGRAM FILES\WINAMP REMOTE\BIN\ORBTRAY.EXE] Special Privileges Enabled: SeDebugPrivilege [PID = 3924, C:\PROGRAM FILES\WINAMP REMOTE\BIN\ORBTRAY.EXE] Special Privileges Enabled: SeLoadDriverPrivilege [PID = 3924, C:\PROGRAM FILES\WINAMP REMOTE\BIN\ORBTRAY.EXE] Special Privileges Enabled: SeSystemtimePrivilege [PID = 528, C:\PROGRAM FILES\WINAMP REMOTE\BIN\ORB.EXE] Special Privileges Enabled: SeLoadDriverPrivilege [PID = 528, C:\PROGRAM FILES\WINAMP REMOTE\BIN\ORB.EXE] Special Privileges Enabled: SeSystemtimePrivilege [PID = 568, C:\DOCUMENTS AND SETTINGS\ARTUR\PULPIT\SRENGLDR.EXE] Special Privileges Enabled: SeDebugPrivilege [PID = 568, C:\DOCUMENTS AND SETTINGS\ARTUR\PULPIT\SRENGLDR.EXE] Special Privileges Enabled: SeLoadDriverPrivilege [PID = 568, C:\DOCUMENTS AND SETTINGS\ARTUR\PULPIT\SRENGLDR.EXE] ================================== API HOOK Entrypoint Error: LoadLibraryExW (Dangerous Level: High, Hooked by Module: 0x00FEFF42) Entrypoint Error: FreeLibrary (Dangerous Level: High, Hooked by Module: 0x7170002D) ================================== Hidden Process N/A ================================== [/CODE]

**Posty:** 684 · przez **djarta** 13 Wrz 2008, 12:57

W logu nic nie widzę.
Przeskanuj Kasperskym.

========================
K.

**Posty:** 55 · przez **losyart** 13 Wrz 2008, 13:47

Piszę że nie powiodło się załadowanie Kaspersky Online formantu ActiveX Należy posiadać uprawnienia administracyjne na tym kopmuterze i należy również ustawić poziom zabezpieczeń na średni poziom ustawiłem ale tego pierwszego nie potrafię pote m nacisnąl niby żeby pobrał formant i wyskoczyło takie cos

BŁĄD
Żądany URL nie może zostać sprowadzony

--------------------------------------------------------------------------------

Podczas sprowadzania URL-a: http://www.kaspersky.pl/resources/virusscanner/kavwebscan.html

wystąpił następujący błąd:

Nie można zrealizować połączenia
System zwrócił następującą wartość:
(110) Connection timed outSerwer źródłowy lub sieć mogą być nieczynne. Spróbuj ponowić żądanie później.

--------------------------------------------------------------------------------

Generated Sat, 13 Sep 2008 11:47:01 GMT by proxy.tvk.torun.pl (squid/3.0.STABLE7)

**Posty:** 684 · przez **djarta** 13 Wrz 2008, 14:01

Spróbuj przeskanować tym --> Dr.WEB CureIt!

=======================
K.

Warning ! win 32/privacyremover.m64 detected on your compute

Warning ! win 32/privacyremover.m64 detected on your compute

Wirusy

Wirusy

Wirusy

Wirusy

Wirusy

Wirusy

Re: wirusy

Wirusy

Re: wirusy

Wirusy

Wirusy

Re: wirusy

Wirusy

Re: wirusy

Wirusy

Re: wirusy

Wirusy

Re: wirusy

Wirusy

Kto jest na forum