log z combofix
- Kod: Zaznacz wszystko
ComboFix 08-08-27.01 - Izabela 2008-08-27 21:13:54.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1250.1.1045.18.499 [GMT 1:00]
Running from: E:\panda\ComboFix.exe
* Created a new restore point
[color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color]
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
E:\Documents and Settings\All Users\Menu Start\Programy\AlphaWipe Tracks Cleaner 2008
E:\Documents and Settings\All Users\Menu Start\Programy\AlphaWipe Tracks Cleaner 2008\AlphaWipe Tracks Cleaner 2008 on the Web.lnk
E:\Documents and Settings\All Users\Menu Start\Programy\AlphaWipe Tracks Cleaner 2008\AlphaWipe Tracks Cleaner 2008.lnk
E:\Documents and Settings\All Users\Menu Start\Programy\AlphaWipe Tracks Cleaner 2008\Uninstall AlphaWipe Tracks Cleaner 2008.lnk
E:\Documents and Settings\All Users\Menu Start\Programy\Antivirus XP 2008
E:\Documents and Settings\All Users\Menu Start\Programy\Antivirus XP 2008.lnk
E:\Documents and Settings\All Users\Menu Start\Programy\Antivirus XP 2008\Antivirus XP 2008.lnk
E:\Documents and Settings\All Users\Menu Start\Programy\Antivirus XP 2008\How to Register Antivirus XP 2008.lnk
E:\Documents and Settings\All Users\Menu Start\Programy\Antivirus XP 2008\License Agreement.lnk
E:\Documents and Settings\All Users\Menu Start\Programy\Antivirus XP 2008\Register Antivirus XP 2008.lnk
E:\Documents and Settings\All Users\Menu Start\Programy\Antivirus XP 2008\Uninstall.lnk
E:\Documents and Settings\Izabela\Cookies\izabela@ad.yieldmanager[2].txt
E:\Documents and Settings\Izabela\Cookies\izabela@cubics[2].txt
E:\Documents and Settings\Izabela\Cookies\izabela@serving-sys[3].txt
E:\Documents and Settings\Izabela\Cookies\izabela@tradedoubler[2].txt
E:\Documents and Settings\Izabela\Cookies\izabela@www.remax-ireland[2].txt
E:\Documents and Settings\Izabela\Dane aplikacji\Microsoft\Internet Explorer\Quick Launch\Antivirus XP 2008.lnk
E:\Program Files\AlphaWipe Tracks Cleaner 2008
E:\Program Files\AlphaWipe Tracks Cleaner 2008\alphawipe.url
E:\Program Files\AlphaWipe Tracks Cleaner 2008\interface\English.lng
E:\Program Files\AlphaWipe Tracks Cleaner 2008\pkill.exe
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ebay_tb.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ebay_tb.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\googl.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\googl_10.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\googl_10.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\googl_11.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\googl_11.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\googl_deskbar.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\googl_deskbar.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\groups.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_autocomplete.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_autocomplete.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_bho.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_bho.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_cache.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_cache.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_cookies.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_cookies.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_ext.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_ext.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_favorites.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_favorites.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_menuext.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_menuext.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_pubwiz.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_pubwiz.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_sassist.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_sassist.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_typedurls.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie_typedurls.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie7_autocomplete.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\ie7_autocomplete.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\mozilla.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\mozilla.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\mozilla_bookmarks.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\mozilla_bookmarks.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\mozilla_cache.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\mozilla_cache.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\mozilla_cookies.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\mozilla_cookies.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\mozilla_formhistory.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\mozilla_formhistory.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\mozilla_gtb.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\mozilla_gtb.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\mozilla_lochistory.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\mozilla_lochistory.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\mozilla_signons.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\mozilla_signons.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\msn_tb.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\msn_tb.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera_autocomplete.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera_autocomplete.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera_bookmarks.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera_bookmarks.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera_cache.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera_cache.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera_contacts.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera_contacts.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera_cookies.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera_cookies.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera_notes.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera_notes.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera9_autocomplete.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera9_autocomplete.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera9_bookmarks.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera9_bookmarks.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera9_cache.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera9_cache.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera9_contacts.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera9_contacts.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera9_cookies.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera9_cookies.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera9_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera9_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera9_notes.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\opera9_notes.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\tb_googl.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\tb_yahoo.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\tb_yahoo.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\yahoo_mess.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\yahoo_mess.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\yahoo_tb.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\browsers\yahoo_tb.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acdsee30_history.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acdsee30_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acdsee30_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acdsee40_history.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acdsee40_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acdsee40_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acdsee50_history.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acdsee50_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acdsee50_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acdsee60_history.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acdsee60_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acdsee60_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acdsee70_history.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acdsee70_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acdsee70_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acdsee80_history.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acdsee80_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acdsee80_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acroread40_history.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acroread40_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acroread40_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acroread50_history.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acroread50_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acroread50_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acroread60_history.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acroread60_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\acroread60_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\aftp_rhistory.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\aftp_rhistory.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\aim60.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\aim60.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\aim60.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\aph60_history.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\aph60_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\aph60_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\aph70_history.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\aph70_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\aph70_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\axiaw_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\axiaw_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\ccftp_rhistory.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\ccftp_rhistory.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\ccga_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\ccga_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\cftp_rhistory.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\cftp_rhistory.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\cftphe_rhistory.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\cftphe_rhistory.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\cftppe_rhistory.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\cftppe_rhistory.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\divx.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\divx.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\dm.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\dm.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\dm.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\emule_logs.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\emule_logs.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\emule_logs.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\far.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\far.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\far.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\frontpage_mru.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\frontpage_mru.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\gr.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\gr.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\groups.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\htmlhelp.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\htmlhelp_cfiles_mru.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\htmlhelp_cfiles_mru.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\htmlhelp_pfiles_mru.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\htmlhelp_pfiles_mru.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\htmlhelp_rfiles_mru.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\htmlhelp_rfiles_mru.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\icq2002a.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\icq2002a.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\icq2003a.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\icq2003a.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\icq2003b.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\icq2003b.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\im.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\innosetup_mru.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\innosetup_mru.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\innosetup_mru.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\mdw30.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\mdw30.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\mdw40.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\mdw40.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\mdwmx.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\mdwmx.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\mfmx.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\mfmx.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\mfwmx.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\mfwmx.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\miranda.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\miranda.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\miranda.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\mphe30_history.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\mphe30_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\mphe30_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\msnm_rf.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\msnm_rf.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\msnm_rf.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\nerobr_history.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\nerobr_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\nerobr_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\oe.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\oe.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\oe_dbx.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\oe_dbx.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\picozip_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\picozip_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\vdub_mru.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\vdub_mru.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\vdub_mru.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wa.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wa.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wa.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wace_mru.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wace_mru.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\winace_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\winace_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wmp.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wmp_mru.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wmp_mru.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wrar_archistory.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wrar_archistory.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wrar_archistory.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wrar_dialogedithistory.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wrar_dialogedithistory.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wrar_dialogedithistory.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wzip_archistory.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wzip_archistory.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wzip_archistory.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wzip_dirhistory.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wzip_dirhistory.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\wzip_dirhistory.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\za_logs.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\za_logs.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\zipmagic_history.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\zipmagic_history.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\msoffice\zl.bmp
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_compdesc.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_compdesc.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_lastvisitedmru.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_lastvisitedmru.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_logonuname.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_logonuname.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_mapnetdrivemru.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_mapnetdrivemru.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_opensavemru.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_opensavemru.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_openwithhist.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_openwithhist.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_recentdocs.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_recentdocs.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_run.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_run.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_streammru.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_streammru.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_userassist.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_userassist.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_wallpapermru.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_wallpapermru.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_wgcrawlerprinters.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_wgcrawlerprinters.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_wgcrawlershares.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\e_wgcrawlershares.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\groups.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\r_run.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\r_run.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\t_bitbucket.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\t_bitbucket.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\t_temp.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\t_temp.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\w_arpcache.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\w_arpcache.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\w_bagmru.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\w_bagmru.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\w_muicache.en
E:\Program Files\AlphaWipe Tracks Cleaner 2008\Plugins\windows\w_muicache.js
E:\Program Files\AlphaWipe Tracks Cleaner 2008\unins000.dat
E:\Program Files\AlphaWipe Tracks Cleaner 2008\unins000.exe
E:\Program Files\AlphaWipe Tracks Cleaner 2008\unins001.dat
E:\Program Files\AlphaWipe Tracks Cleaner 2008\unins001.exe
E:\WINDOWS\system32\lphcgngj0eace.exe
E:\WINDOWS\system32\phcgngj0eace.bmp
E:\WINDOWS\system32\pphcgngj0eace.exe
.
((((((((((((((((((((((((( Files Created from 2008-07-27 to 2008-08-27 )))))))))))))))))))))))))))))))
.
2008-08-27 20:03 . 2008-08-27 21:16 <DIR> d--h----- E:\Documents and Settings\Administrator\Ustawienia lokalne
2008-08-27 20:03 . 2008-06-28 18:38 <DIR> d-------- E:\Documents and Settings\Administrator\Ulubione
2008-08-27 20:03 . 2008-06-28 17:44 <DIR> d--h----- E:\Documents and Settings\Administrator\Szablony
2008-08-27 20:03 . 2008-06-28 18:38 <DIR> d-------- E:\Documents and Settings\Administrator\Pulpit
2008-08-27 20:03 . 2008-06-28 18:38 <DIR> d-------- E:\Documents and Settings\Administrator\Moje dokumenty
2008-08-27 20:03 . 2008-06-28 18:38 <DIR> dr------- E:\Documents and Settings\Administrator\Menu Start
2008-08-27 20:03 . 2008-06-28 18:38 <DIR> dr-h----- E:\Documents and Settings\Administrator\Dane aplikacji
2008-08-27 20:03 . 2008-08-27 20:03 <DIR> d-------- E:\Documents and Settings\Administrator
2008-08-27 19:08 . 2007-07-12 14:49 178,872 --a------ E:\WINDOWS\system32\drivers\PavProc.sys
2008-08-27 19:08 . 2007-05-23 16:40 38,968 --a------ E:\WINDOWS\system32\drivers\ShlDrv51.sys
2008-08-27 17:32 . 2008-08-27 19:08 <DIR> d-------- E:\Program Files\Common Files\Panda Software
2008-08-27 17:29 . 2008-08-27 21:10 <DIR> d-------- E:\panda
2008-08-27 16:52 . 2008-08-27 16:56 <DIR> d-------- E:\Documents and Settings\Izabela\Dane aplikacji\U3
2008-08-26 22:13 . 2008-08-26 22:13 <DIR> d-------- E:\Program Files\Panda Security
2008-08-26 22:13 . 2008-06-19 17:24 28,544 --a------ E:\WINDOWS\system32\drivers\pavboot.sys
2008-08-26 20:30 . 2008-08-26 20:41 <DIR> d-------- E:\Program Files\SkanerOnline
2008-08-26 19:40 . 2008-08-26 19:40 29 --a------ E:\WINDOWS\system32\tyrighpf.tmp
2008-08-13 14:14 . 2008-08-13 14:21 <DIR> d-------- E:\Documents and Settings\Izabela\Dane aplikacji\Samsung
2008-08-13 14:09 . 2008-08-13 14:14 <DIR> d-------- E:\Documents and Settings\Izabela\Phone Browser
2008-08-13 13:59 . 2006-05-03 22:53 174,592 --a------ E:\WINDOWS\system32\framedyn.dll
2008-08-13 13:58 . 2008-08-13 13:58 <DIR> d-------- E:\WINDOWS\system32\Samsung_USB_Drivers
2008-08-13 13:58 . 2006-07-24 16:05 5,632 --a------ E:\WINDOWS\system32\drivers\StarOpen.sys
2008-08-13 13:58 . 2005-08-28 20:51 766 --a------ E:\WINDOWS\system32\Uninstall.ico
2008-08-10 14:09 . 2008-08-10 14:09 <DIR> d-------- E:\Documents and Settings\Izabela\Dane aplikacji\AdobeAUM
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-08-27 19:58 --------- d-----w E:\Documents and Settings\Izabela\Dane aplikacji\Skype
2008-08-27 19:07 --------- d-----w E:\Documents and Settings\All Users\Dane aplikacji\Downloaded Installations
2008-08-27 15:50 --------- d-----w E:\Documents and Settings\Izabela\Dane aplikacji\skypePM
2008-08-26 13:24 --------- d-----w E:\Program Files\Winamp
2008-08-23 13:04 --------- d-----w E:\Documents and Settings\All Users\Dane aplikacji\ZoomBrowser
2008-08-13 12:57 --------- d--h--w E:\Program Files\InstallShield Installation Information
2008-07-22 11:43 --------- d-----w E:\Program Files\Common Files\Adobe
2008-07-19 18:54 --------- d-----w E:\Documents and Settings\Izabela\Dane aplikacji\Media Player Classic
2008-07-19 18:50 --------- d-----w E:\Program Files\K-Lite Codec Pack
2008-07-19 12:35 --------- d-----w E:\Program Files\Windows Live
2008-07-19 11:02 --------- d-----w E:\Program Files\Microsoft SQL Server Compact Edition
2008-07-19 10:57 --------- dcsh--w E:\Program Files\Common Files\WindowsLiveInstaller
2008-07-19 10:52 --------- d-----w E:\Documents and Settings\All Users\Dane aplikacji\WLInstaller
2008-07-18 18:38 587,264 ----a-w E:\WINDOWS\WLXPGSS.SCR
2008-07-18 14:55 --------- d-----w E:\Program Files\Skype
2008-07-18 14:55 --------- d-----w E:\Program Files\Common Files\Skype
2008-07-18 14:55 --------- d-----w E:\Documents and Settings\All Users\Dane aplikacji\Skype
2008-07-18 13:31 --------- d-----w E:\Program Files\Google
2008-07-17 23:06 --------- d-----w E:\Program Files\MSXML 4.0
2008-07-02 09:47 --------- d-----w E:\Documents and Settings\Izabela\Dane aplikacji\DivX
2008-07-01 20:14 --------- d-----w E:\Program Files\Alwil Software
2008-07-01 20:08 --------- d-----w E:\Program Files\REALTEK RTL8187B Wireless LAN Driver
2008-07-01 20:06 737,280 ----a-w E:\WINDOWS\iun6002.exe
2008-06-30 21:00 --------- d-----w E:\Documents and Settings\Izabela\Dane aplikacji\Nokia Multimedia Player
2008-06-30 20:45 --------- d-----w E:\Documents and Settings\Izabela\Dane aplikacji\Nokia
2008-06-30 19:56 --------- d-----w E:\Documents and Settings\Izabela\Dane aplikacji\Leadertech
2008-06-30 18:44 --------- d-----w E:\Documents and Settings\Izabela\Dane aplikacji\AdobeUM
2008-06-30 18:42 --------- d-----w E:\Program Files\Nokia
2008-06-30 18:39 --------- d-----w E:\Program Files\Common Files\PCSuite
2008-06-30 18:39 --------- d-----w E:\Program Files\Common Files\Nokia
2008-06-30 18:39 --------- d-----w E:\Documents and Settings\Izabela\Dane aplikacji\PC Suite
2008-06-30 18:39 --------- d-----w E:\Documents and Settings\All Users\Dane aplikacji\PC Suite
2008-06-30 17:38 --------- d-----w E:\Documents and Settings\Izabela\Dane aplikacji\ZoomBrowser EX
2008-06-30 17:34 --------- d-----w E:\Program Files\Canon
2008-06-30 17:31 --------- d-----w E:\Program Files\Common Files\Canon
2008-06-28 20:06 --------- d-----w E:\Documents and Settings\Izabela\Dane aplikacji\Gadu-Gadu
2008-06-28 20:01 --------- d-----w E:\Program Files\Gadu-Gadu
2008-06-28 19:53 --------- d-----w E:\Program Files\Realtek
2008-06-28 19:50 --------- d-----w E:\Program Files\DIFX
2008-06-28 19:49 --------- d-----w E:\Program Files\Atheros
2008-06-28 19:49 --------- d-----w E:\Documents and Settings\All Users\Dane aplikacji\Atheros
2008-06-28 19:47 --------- d-----w E:\Program Files\ltmoh
2008-06-28 19:24 --------- d-----w E:\Program Files\SubEdit-Player
2008-06-28 19:23 --------- d-----w E:\Program Files\Common Files\InstallShield
2008-06-28 19:16 --------- d-----w E:\Program Files\Intel
2008-06-28 19:14 --------- d-----w E:\Program Files\Camera Assistant Software for Toshiba
2008-06-28 19:14 --------- d-----w E:\Documents and Settings\Izabela\Dane aplikacji\InstallShield
2008-06-28 19:12 315,392 ----a-w E:\WINDOWS\HideWin.exe
2008-06-28 16:48 --------- d-----w E:\Program Files\microsoft frontpage
2008-06-28 16:47 --------- d-----w E:\Program Files\Usługi online
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="E:\WINDOWS\system32\ctfmon.exe" [2006-03-02 13:00 15360]
"Gadu-Gadu"="E:\Program Files\Gadu-Gadu\gg.exe" [2007-07-09 08:39 2119104]
"PcSync"="E:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2006-06-27 15:21 1449984]
"Skype"="E:\Program Files\Skype\Phone\Skype.exe" [2008-05-30 14:54 21718312]
"swg"="E:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-07-20 10:08 68856]
"MsnMsgr"="E:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 10:34 5724184]
"MSMSGS"="E:\Program Files\Messenger\msmsgs.exe" [2004-08-03 23:55 1667584]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Camera Assistant Software"="E:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" [2007-10-25 16:41 413696]
"IgfxTray"="E:\WINDOWS\system32\igfxtray.exe" [2008-02-05 11:34 141848]
"HotKeysCmds"="E:\WINDOWS\system32\hkcmd.exe" [2008-02-05 11:34 162328]
"Persistence"="E:\WINDOWS\system32\igfxpers.exe" [2008-02-05 11:34 137752]
"PCSuiteTrayApplication"="E:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE" [2006-06-15 11:36 229376]
"Adobe Photo Downloader"="E:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" [2005-06-06 22:46 57344]
"avast!"="E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 15:38 78008]
"RTHDCPL"="RTHDCPL.EXE" [2008-05-13 17:50 16862720 E:\WINDOWS\RTHDCPL.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="E:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 13:00 15360]
E:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
Adobe Reader Speed Launch.lnk - E:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-24 06:05:26 29696]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.YV12"= yv12vfw.dll
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"E:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"E:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"E:\\Program Files\\Gadu-Gadu\\gg.exe"=
"E:\\Program Files\\Skype\\Phone\\Skype.exe"=
R0 pavboot;pavboot;E:\WINDOWS\system32\drivers\pavboot.sys [2008-06-19 17:24]
R1 aswSP;avast! Self Protection;E:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 15:35]
R1 ShldDrv;Panda File Shield Driver;E:\WINDOWS\system32\DRIVERS\ShlDrv51.sys [2007-05-23 16:40]
R2 aswFsBlk;aswFsBlk;E:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 15:37]
R2 PavProc;Panda Process Protection Driver;E:\WINDOWS\system32\DRIVERS\PavProc.sys [2007-07-12 14:49]
R3 RTL8187B;Realtek RTL8187B bezprzewodowe 802.11b/g 54Mbps USB 2.0 karta sieciowa ;E:\WINDOWS\system32\DRIVERS\RTL8187B.sys [2007-12-27 01:20]
R3 WSIMD;wsimd Service;E:\WINDOWS\system32\DRIVERS\wsimd.sys [2007-12-13 19:31]
S2 uvnvpoum;uvnvpoum;E:\WINDOWS\system32\drivers\uvnvpoum.sys []
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
\Shell\AutoRun\command - F:\LaunchU3.exe -a
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{08026204-7450-11dd-9bb5-001b9eeba60d}]
\Shell\AutoRun\command - F:\LaunchU3.exe -a
*Newly Created Service* - CATCHME
*Newly Created Service* - PROCEXP90
.
- - - - ORPHANS REMOVED - - - -
HKLM-Run-lphcgngj0eace - E:\WINDOWS\system32\lphcgngj0eace.exe
HKLM-Run-SMrhclngj0eace - E:\Program Files\rhclngj0eace\rhclngj0eace.exe
.
------- Supplementary Scan -------
.
R0 -: HKCU-Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
O16 -: {68282C51-9459-467B-95BF-3C0E89627E55} - hxxp://www.mks.com.pl/skaner/SkanerOnline.cab
E:\WINDOWS\Downloaded Program Files\SkanerOnline.inf
E:\WINDOWS\system32\SkanerOnlineUninstall.exe
E:\WINDOWS\system32\SkanerOnline.dll
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-27 21:18:37
Windows 5.1.2600 Dodatek Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-08-27 21:20:01
ComboFix-quarantined-files.txt 2008-08-27 20:19:57
Pre-Run: 161,202,790,400 bajtów wolnych
Post-Run: 162,228,047,872 bajtów wolnych
464 --- E O F --- 2008-08-14 12:32:25
moj log z hijack
- Kod: Zaznacz wszystko
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:49:26, on 2008-08-27
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Safe mode
Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\Explorer.EXE
E:\panda\doktor\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Pomocnik rejestracji usługi Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - e:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - E:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - e:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Camera Assistant Software] "E:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
O4 - HKLM\..\Run: [IgfxTray] E:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] E:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] E:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [PCSuiteTrayApplication] E:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [Adobe Photo Downloader] "E:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [avast!] E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [lphcgngj0eace] E:\WINDOWS\system32\lphcgngj0eace.exe
O4 - HKLM\..\Run: [KLEIMELM] %systemroot%\KLEIMELM.exe
O4 - HKLM\..\Run: [SMrhclngj0eace] E:\Program Files\rhclngj0eace\rhclngj0eace.exe
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = E:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: Wpis w blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - E:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Wpis w blogu w Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - E:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - E:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - E:\WINDOWS\system32\agrsmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - E:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Google Updater Service (gusvc) - Google - E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - E:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 - Service: ServiceLayer - Nokia. - E:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
--
End of file - 5557 bytes
