mój problem polega na tym, ze po wyszukiwaniu w google każdy link ładuje mi się jako http://abnow.com/
Może bylibyście w stanie mi pomóc? Będę niezmiernie wdzięczny.
Pozdrawiam
- Kod: Zaznacz wszystko
GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-03-20 21:53:51
Windows 5.1.2600 Dodatek Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 Hitachi_HTS722080K9A300 rev.DCBOCA1H
Running: tek4nftb.exe; Driver: C:\DOCUME~1\Domek\USTAWI~1\Temp\awndaaog.sys
---- Kernel code sections - GMER 1.0.15 ----
.INIT C:\WINDOWS\System32\drivers\afd.sys entry point in ".INIT" section [0xA927F822]
? C:\WINDOWS\System32\drivers\afd.sys suspicious PE modification
.text C:\Program Files\CyberLink\PowerDVD12\Common\NavFilter\000.fcl section is writeable [0xA84A2000, 0x2892, 0xE8000020]
.vmp2 C:\Program Files\CyberLink\PowerDVD12\Common\NavFilter\000.fcl entry point in ".vmp2" section [0xA84C5050]
---- User code sections - GMER 1.0.15 ----
.text C:\Program Files\Mozilla Firefox\firefox.exe[192] ntdll.dll!LdrLoadDll 7C91632D 5 Bytes JMP 01269720 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[192] kernel32.dll!VirtualAlloc 7C809AF1 5 Bytes JMP 0149E21B C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[192] kernel32.dll!MapViewOfFile 7C80B9A5 5 Bytes JMP 0149E1F4 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[192] GDI32.dll!CreateDIBSection 77F19E19 5 Bytes JMP 0149E17E C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[192] CRYPT32.dll!CryptMsgCountersignEncoded + 27A 77A82F52 7 Bytes JMP 35675637 C:\WINDOWS\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Dostawca usługi/Microsoft Corporation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[192] CRYPT32.dll!CertComparePublicKeyInfo + 1E8 77A8B751 7 Bytes JMP 35675697 C:\WINDOWS\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Dostawca usługi/Microsoft Corporation)
.text C:\Program Files\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe[952] kernel32.dll!SetUnhandledExceptionFilter 7C84495D 5 Bytes JMP 00CA1000 C:\Program Files\CyberLink\PowerDVD12\Common\Boomerang\BoomerangLib.dll (BoomerangLib.dll/CyberLink Corp.)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[2076] USER32.dll!SetWindowLongA 7E37C29D 5 Bytes JMP 106775F7 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[2076] USER32.dll!SetWindowLongW 7E37C2BB 5 Bytes JMP 10677589 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[2076] USER32.dll!GetWindowInfo 7E37C49C 5 Bytes JMP 1044FE0A C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[2076] USER32.dll!TrackPopupMenu 7E3B531E 5 Bytes JMP 104503C5 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[2076] CRYPT32.dll!CryptMsgCountersignEncoded + 27A 77A82F52 7 Bytes JMP 35675637 C:\WINDOWS\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Dostawca usługi/Microsoft Corporation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[2076] CRYPT32.dll!CertComparePublicKeyInfo + 1E8 77A8B751 7 Bytes JMP 35675697 C:\WINDOWS\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Dostawca usługi/Microsoft Corporation)
.text C:\Program Files\Microsoft Office\Office14\WINWORD.EXE[2528] kernel32.dll!SetUnhandledExceptionFilter 7C84495D 5 Bytes JMP 390085A4 C:\Program Files\Common Files\Microsoft Shared\office14\mso.dll (Microsoft Office 2010 component/Microsoft Corporation)
.text C:\Program Files\Microsoft Office\Office14\WINWORD.EXE[2528] ole32.dll!OleLoadFromStream 7751983B 5 Bytes JMP 395E940D C:\Program Files\Common Files\Microsoft Shared\office14\mso.dll (Microsoft Office 2010 component/Microsoft Corporation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[4032] CRYPT32.dll!CryptMsgCountersignEncoded + 27A 77A82F52 7 Bytes JMP 35675637 C:\WINDOWS\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Dostawca usługi/Microsoft Corporation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[4032] CRYPT32.dll!CertComparePublicKeyInfo + 1E8 77A8B751 7 Bytes JMP 35675697 C:\WINDOWS\system32\mswsock.dll (Microsoft Windows Sockets 2.0 Dostawca usługi/Microsoft Corporation)
---- Devices - GMER 1.0.15 ----
AttachedDevice \Driver\Tcpip \Device\Tcp ABTDI.sys (ABTDI/ArcaBit)
---- Modules - GMER 1.0.15 ----
Module (noname) (*** hidden *** ) BA1E8000-BA1F7000 (61440 bytes)
---- Threads - GMER 1.0.15 ----
Thread System [4:1108] 88D36540
Thread System [4:1112] 88D36540
Thread services.exe [1328:1932] 00D4EE96
---- Registry - GMER 1.0.15 ----
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@AppInit_DLLs
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@DeviceNotSelectedTimeout 15
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@GDIProcessHandleQuota 10000
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@Spooler yes
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@swapdisk
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@TransmissionRetryTimeout 90
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@USERProcessHandleQuota 10000
---- Files - GMER 1.0.15 ----
File C:\WINDOWS\$NtUninstallKB4241$\1185699713 0 bytes
File C:\WINDOWS\$NtUninstallKB4241$\2793359633 0 bytes
File C:\WINDOWS\$NtUninstallKB4241$\2793359633\@ 2048 bytes
File C:\WINDOWS\$NtUninstallKB4241$\2793359633\L 0 bytes
File C:\WINDOWS\$NtUninstallKB4241$\2793359633\L\wdshrnme 138496 bytes
File C:\WINDOWS\$NtUninstallKB4241$\2793359633\loader.tlb 2632 bytes
File C:\WINDOWS\$NtUninstallKB4241$\2793359633\U 0 bytes
File C:\WINDOWS\$NtUninstallKB4241$\2793359633\U\@00000001 45968 bytes
File C:\WINDOWS\$NtUninstallKB4241$\2793359633\U\@000000c0 2560 bytes
File C:\WINDOWS\$NtUninstallKB4241$\2793359633\U\@000000cb 3072 bytes
File C:\WINDOWS\$NtUninstallKB4241$\2793359633\U\@000000cf 1536 bytes
File C:\WINDOWS\$NtUninstallKB4241$\2793359633\U\@80000000 73728 bytes
File C:\WINDOWS\$NtUninstallKB4241$\2793359633\U\@800000c0 43008 bytes
File C:\WINDOWS\$NtUninstallKB4241$\2793359633\U\@800000cb 25600 bytes
File C:\WINDOWS\$NtUninstallKB4241$\2793359633\U\@800000cf 31232 bytes
---- EOF - GMER 1.0.15 ----
