Zamulanie przeglądarką ie 8, doscan.exe

**Posty:** 3 · przez **noka** 15 Wrz 2009, 17:03

Witam

Mój koputer zaczął sie zamulać :
a) wydaje mi się, że to coś z IE. Proces IE duż pamięci zżera, procesor nie zajęty, a jednka nie można myszką nic zrobić na ekranie i się ekran nie odświeża. Typowe
b) drugi objaw to przy uruchomieniu komputera proces doscan.exe zajmuje prawie cały procesor i pamięć -> na jakiś czas mam komputer wyłączony z użytku.

Podejrzewam jakieś robaki - bo sporo grzebałem ostatnio po necie

Logi HiJackthis

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 16:52:38, on 2009-09-15 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\ASUSKBService.exe C:\WINDOWS\ATKKBService.exe C:\Program Files\Symantec AntiVirus\DefWatch.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Multimedia Keyboard Driver\V5\KMWDSrv.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe c:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe C:\lotus\notes\ntmulti.exe C:\oracle\product\10.2.0\client_1\bin\omtsreco.exe C:\WINDOWS\system32\PSIService.exe C:\Program Files\Symantec AntiVirus\SavRoam.exe C:\WINDOWS\System32\tcpsvcs.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\StkCSrv.exe C:\Program Files\Symantec AntiVirus\Rtvscan.exe C:\WINDOWS\System32\wbem\wmiapsrv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\TortoiseSVN\bin\TSVNCache.exe C:\WINDOWS\system32\VTTimer.exe C:\WINDOWS\ATK0100\HControl.exe C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe C:\WINDOWS\ATK0100\ATKOSD.exe C:\Program Files\VIA\RAID\raid_tool.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\PROGRA~1\SYMANT~1\VPTray.exe C:\Program Files\Quicknote\kartki.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\2\bgsmsnd.exe C:\Program Files\Multimedia Keyboard Driver\V5\StartAutorun.exe C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Multimedia Keyboard Driver\V5\KMConfig.exe C:\Program Files\Gadu-Gadu\gg.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Multimedia Keyboard Driver\V5\KMProcess.exe C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe C:\WINDOWS\system32\sistray.exe C:\WINDOWS\system32\msfeedssync.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe C:\Program Files\Skype\Plugin Manager\SkypePM.exe C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe C:\Program Files\PC Connectivity Solution\Transports\NclToBTSrv.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE C:\Lotus\notes\NLNOTES.EXE C:\Lotus\notes\ntaskldr.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Install\Antywirusy\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = ftp=10.2.0.10:8080;http=10.2.0.10:8080;https=10.2.0.10:8080;socks=10.20.0.10:8080 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.winuel.com.pl;10.0.*;10.100.*;<local> R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O1 - Hosts: wnim wnim.winuel.com.pl O1 - Hosts: du2test 10.15.16.200 O1 - Hosts: du2dev 10.15.16.201 O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll O4 - HKLM\..\Run: [Skrót do strony właściwości High Definition Audio] HDAShCut.exe O4 - HKLM\..\Run: [VTTimer] VTTimer.exe O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe O4 - HKLM\..\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1 O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\system32\JMRaidTool.exe boot O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [RaidTool] C:\Program Files\VIA\RAID\raid_tool.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe O4 - HKLM\..\Run: [kartki] C:\Program Files\Quicknote\kartki.exe O4 - HKLM\..\Run: [CafeNews] C:\Program Files\CafeNews\CN.exe /autostart O4 - HKLM\..\Run: [bgsmsnd.exe] C:\WINDOWS\System32\spool\DRIVERS\W32X86\2\bgsmsnd.exe O4 - HKLM\..\Run: [KMConfig] "C:\Program Files\Multimedia Keyboard Driver\V5\StartAutorun.exe" KMConfig.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Cobian Backup 9] "C:\Program Files\Cobian Backup 9\Cobian.exe" O4 - HKLM\..\Run: [Corel File Shell Monitor] C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe" /NoDialog O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Bluetooth Manager.lnk = ? O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://www.winuel.com.pl O16 - DPF: {631FF594-EC25-4CFF-B869-402DF294E1D6} (Instalator oprogramowania Onet.pl) - http://slimak.onet.pl/_m/kamerzysta/OnetInstalator012s.ocx O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1120196866533 O16 - DPF: {CAFECAFE-0013-0001-0026-ABCDEFABCDEF} (JInitiator 1.3.1.26) - O16 - DPF: {CAFECAFE-0013-0001-0029-ABCDEFABCDEF} (JInitiator 1.3.1.29) - http://10.0.10.245:54112/forms/jinitiator/jinit.exe O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://kamera.man.koszalin.pl/activex/AMC.cab O16 - DPF: {E008A543-CEFB-4559-912F-C27C2B89F13B} (Domino Web Access 7 Control) - http://www.winuel.com.pl/dwa7W.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: ASUS Keyboard Service (ASUSKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ASUSKBService.exe O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe O23 - Service: Usługa Google Update (gupdate1c9f660ed4d0b74) (gupdate1c9f660ed4d0b74) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Multimedia Keyboard Driver\V5\KMWDSrv.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: IBM Rational ClearQuest Mail Service (MailService) - IBM Corporation - C:\Rational\ClearQuest\mailservice.exe O23 - Service: Multi-user Cleanup Service - IBM Corp - C:\lotus\notes\ntmulti.exe O23 - Service: OracleMTSRecoveryService - Oracle Corporation - C:\oracle\product\10.2.0\client_1\bin\omtsreco.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\WINDOWS\System32\StkCSrv.exe O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe -- End of file - 13081 bytes

**Posty:** 8001 · przez **Okocza** 15 Wrz 2009, 17:12

noka, zastosuj combofixa i daj z niego log.

**Posty:** 3 · przez **noka** 15 Wrz 2009, 18:57

Jest i combofix.. Strasznie długo się generował około 40 min.

Kod: Zaznacz wszystko: ComboFix 09-09-14.02 - NOKA 2009-09-15 17:47.1.2 - NTFSx86 Uruchomiony z: c:\install\Antywirusy\ComboFix.exe AV: Symantec AntiVirus Corporate Edition *On-access scanning disabled* (Outdated) {FB06448E-52B8-493A-90F3-E43226D3305C} UWAGA - TEN KOMPUTER NIE MA ZAINSTALOWANEJ KONSOLI ODZYSKIWANIA !! . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\bot.txt c:\documents and settings\NOKA\Dane aplikacji\.# c:\documents and settings\NOKA\Dane aplikacji\.#\MBX@58C@3D37C8.### c:\documents and settings\NOKA\Dane aplikacji\.#\MBX@58C@3D37D8.### c:\documents and settings\NOKA\Dane aplikacji\.#\MBX@58C@3D37E8.### c:\documents and settings\NOKA\Dane aplikacji\.#\MBX@84C@3D37C8.### c:\documents and settings\NOKA\Dane aplikacji\.#\MBX@84C@3D37D8.### c:\documents and settings\NOKA\Dane aplikacji\.#\MBX@84C@3D37E8.### c:\documents and settings\NOKA\Dane aplikacji\.#\MBX@8F0@3D37C8.### c:\documents and settings\NOKA\Dane aplikacji\.#\MBX@8F0@3D37D8.### c:\documents and settings\NOKA\Dane aplikacji\.#\MBX@8F0@3D37E8.### c:\documents and settings\NOKA\Dane aplikacji\.#\MBX@A7C@3D37C8.### c:\documents and settings\NOKA\Dane aplikacji\.#\MBX@A7C@3D37D8.### c:\documents and settings\NOKA\Dane aplikacji\.#\MBX@A7C@3D37E8.### c:\documents and settings\NOKA\Dane aplikacji\.#\MBX@E40@3D37C8.### c:\documents and settings\NOKA\Dane aplikacji\.#\MBX@E40@3D37D8.### c:\documents and settings\NOKA\Dane aplikacji\.#\MBX@E40@3D37E8.### c:\documents and settings\NOKA\Dane aplikacji\Microsoft\Clip Organizer\mstore10.mgc c:\documents and settings\NOKA\Dane aplikacji\Microsoft\Clip Organizer\Offic10.MGC c:\documents and settings\NOKA\Dane aplikacji\Microsoft\Installer\{656D5B05-0409-41EE-BBEE-D9C4D6388972}\NewShortcut10_EF434C52D88243DB8777EC7B10D8943C.exe c:\documents and settings\NOKA\Dane aplikacji\Microsoft\Installer\{656D5B05-0409-41EE-BBEE-D9C4D6388972}\NewShortcut11_EF434C52D88243DB8777EC7B10D8943C.exe c:\documents and settings\NOKA\Dane aplikacji\Microsoft\Installer\{656D5B05-0409-41EE-BBEE-D9C4D6388972}\NewShortcut14_656D5B05040941EEBBEED9C4D6388972.exe c:\documents and settings\NOKA\Dane aplikacji\Microsoft\Installer\{656D5B05-0409-41EE-BBEE-D9C4D6388972}\NewShortcut15_656D5B05040941EEBBEED9C4D6388972.exe c:\documents and settings\NOKA\Dane aplikacji\Microsoft\Installer\{656D5B05-0409-41EE-BBEE-D9C4D6388972}\NewShortcut16_EF434C52D88243DB8777EC7B10D8943C_1.exe c:\documents and settings\NOKA\Dane aplikacji\Microsoft\Installer\{656D5B05-0409-41EE-BBEE-D9C4D6388972}\NewShortcut8_656D5B05040941EEBBEED9C4D6388972.exe c:\documents and settings\NOKA\Dane aplikacji\Microsoft\Installer\{656D5B05-0409-41EE-BBEE-D9C4D6388972}\NewShortcut9_656D5B05040941EEBBEED9C4D6388972.exe c:\documents and settings\NOKA\Dane aplikacji\Microsoft\Installer\{F85B6E83-276C-4932-9B3C-F64F8D0576F9}\ARPPRODUCTICON.exe c:\documents and settings\TT\Dane aplikacji\Microsoft\Installer\{F85B6E83-276C-4932-9B3C-F64F8D0576F9}\ARPPRODUCTICON.exe c:\install\OBRBKA~1\KURSpa~1.exe c:\recycler\S-1-5-21-2088321146-317472893-988572150-3067 c:\windows\Installer\1c0e9.msp c:\windows\Installer\1c0fe.msp c:\windows\Installer\1c113.msp c:\windows\Installer\548f804.msi c:\windows\Installer\576d8.msp c:\windows\Installer\576ed.msp c:\windows\Installer\WinRMSrv.msi c:\windows\system32\iAlmcoin.dll . ((((((((((((((((((((((((( Pliki utworzone od 2009-08-15 do 2009-09-15 ))))))))))))))))))))))))))))))) . 2009-09-09 07:14 . 2009-06-21 21:48 153088 -c----w- c:\windows\system32\dllcache\triedit.dll 2009-08-27 19:13 . 2009-09-02 11:32 -------- d-----w- c:\documents and settings\NOKA\Ustawienia lokalne\Dane aplikacji\Corel 2009-08-27 15:47 . 2009-09-02 11:28 88 --sh--r- c:\windows\system32\E7707505B1.sys 2009-08-27 15:47 . 2009-09-02 11:28 2828 --sha-w- c:\windows\system32\KGyGaAvL.sys 2009-08-27 15:46 . 2009-08-27 15:47 -------- d-----w- c:\documents and settings\NOKA\Dane aplikacji\Corel 2009-08-27 15:45 . 2009-08-27 15:45 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Corel 2009-08-27 15:35 . 2009-08-27 15:39 -------- d-----w- c:\program files\Common Files\Corel 2009-08-27 15:21 . 2009-08-27 15:35 -------- d-----w- c:\program files\Corel 2009-08-27 15:20 . 2009-08-27 15:20 -------- d-----w- c:\documents and settings\NOKA\Dane aplikacji\InstallShield 2009-08-19 09:46 . 2009-08-19 09:46 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache 2009-08-17 10:03 . 2009-08-27 12:35 -------- d-----w- C:\MultiAgent . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-09-15 16:34 . 2007-07-04 14:36 -------- d-----w- c:\documents and settings\NOKA\Dane aplikacji\Skype 2009-09-15 16:01 . 2007-06-27 08:14 -------- d-----w- c:\program files\Symantec AntiVirus 2009-09-15 14:05 . 2008-03-06 21:59 -------- d-----w- c:\documents and settings\NOKA\Dane aplikacji\skypePM 2009-09-12 18:58 . 2007-10-08 19:09 -------- d-----w- c:\documents and settings\NOKA\Dane aplikacji\PC Suite 2009-08-13 15:03 . 2009-08-13 14:52 -------- d-----w- c:\program files\PLAY ONLINE 2009-08-05 09:01 . 2003-02-23 13:16 205312 ----a-w- c:\windows\system32\mswebdvd.dll 2009-07-17 19:04 . 2002-11-08 17:03 58880 ----a-w- c:\windows\system32\atl.dll 2009-07-13 21:43 . 2002-11-08 16:56 286208 ----a-w- c:\windows\system32\wmpdxm.dll 2009-07-03 16:59 . 2004-02-06 16:09 915456 ----a-w- c:\windows\system32\wininet.dll 2009-06-26 11:34 . 2009-06-26 11:36 410984 ----a-w- c:\windows\system32\deploytk.dll 2009-06-25 08:27 . 2002-11-08 17:03 301568 ----a-w- c:\windows\system32\kerberos.dll 2009-06-25 08:27 . 2002-11-08 17:02 56832 ----a-w- c:\windows\system32\secur32.dll 2009-06-25 08:27 . 2001-10-30 12:00 732160 ----a-w- c:\windows\system32\lsasrv.dll 2009-06-25 08:27 . 2001-10-30 12:00 54272 ----a-w- c:\windows\system32\wdigest.dll 2009-06-25 08:27 . 2001-10-30 12:00 147456 ----a-w- c:\windows\system32\schannel.dll 2009-06-25 08:27 . 2001-10-30 12:00 136192 ----a-w- c:\windows\system32\msv1_0.dll 2009-06-24 11:18 . 2001-10-30 12:00 92928 ----a-w- c:\windows\system32\drivers\ksecdd.sys 2009-06-23 09:15 . 2007-07-04 15:14 73520 ------w- c:\documents and settings\NOKA\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT 2009-06-23 07:28 . 2001-10-30 12:00 98044 ----a-w- c:\windows\system32\perfc015.dat 2009-06-23 07:28 . 2001-10-30 12:00 521586 ----a-w- c:\windows\system32\perfh015.dat . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal] @="{C5994560-53D9-4125-87C9-F193FC689CB2}" [HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}] 2008-01-16 16:52 80384 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified] @="{C5994561-53D9-4125-87C9-F193FC689CB2}" [HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}] 2008-01-16 16:52 80384 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict] @="{C5994562-53D9-4125-87C9-F193FC689CB2}" [HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}] 2008-01-16 16:52 80384 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked] @="{C5994563-53D9-4125-87C9-F193FC689CB2}" [HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}] 2008-01-16 16:52 80384 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly] @="{C5994564-53D9-4125-87C9-F193FC689CB2}" [HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}] 2008-01-16 16:52 80384 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted] @="{C5994565-53D9-4125-87C9-F193FC689CB2}" [HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}] 2008-01-16 16:52 80384 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded] @="{C5994566-53D9-4125-87C9-F193FC689CB2}" [HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}] 2008-01-16 16:52 80384 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored] @="{C5994567-53D9-4125-87C9-F193FC689CB2}" [HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}] 2008-01-16 16:52 80384 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned] @="{C5994568-53D9-4125-87C9-F193FC689CB2}" [HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}] 2008-01-16 16:52 80384 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-02-01 21898024] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-06-26 39408] "Gadu-Gadu"="c:\program files\Gadu-Gadu\gg.exe" [2007-05-10 2111176] "PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2009-03-20 1312256] "Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 7\PcSync2.exe" [2009-03-12 1347584] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "HControl"="c:\windows\ATK0100\HControl.exe" [2006-04-17 110592] "Power_Gear"="c:\program files\ASUS\Power4 Gear\BatteryLife.exe" [2006-03-06 86016] "JMB36X Configure"="c:\windows\system32\JMRaidTool.exe" [2006-07-12 352256] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-11-22 815104] "SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-10-09 729088] "RaidTool"="c:\program files\VIA\RAID\raid_tool.exe" [2004-10-11 589824] "ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2006-03-07 53408] "vptray"="c:\progra~1\SYMANT~1\VPTray.exe" [2006-04-21 125072] "kartki"="c:\program files\Quicknote\kartki.exe" [2004-08-01 1560064] "bgsmsnd.exe"="c:\windows\System32\spool\DRIVERS\W32X86\2\bgsmsnd.exe" [2006-06-01 106496] "KMConfig"="c:\program files\Multimedia Keyboard Driver\V5\StartAutorun.exe" [2007-03-06 212992] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696] "Cobian Backup 9"="c:\program files\Cobian Backup 9\Cobian.exe" [2009-01-22 579584] "Corel File Shell Monitor"="c:\program files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe" [2008-01-15 16200] "Skrót do strony właściwości High Definition Audio"="HDAShCut.exe" - c:\windows\system32\HdAShCut.exe [2005-01-07 61952] "VTTimer"="VTTimer.exe" - c:\windows\system32\VTTimer.exe [2005-03-08 53248] "VTTrayp"="VTtrayp.exe" - c:\windows\system32\VTTrayp.exe [2005-11-01 163840] "SkyTel"="SkyTel.EXE" - c:\windows\SkyTel.exe [2006-05-16 2879488] "RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2006-07-21 16261632] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360] c:\documents and settings\All Users\Menu Start\Programy\Autostart\ Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2005-6-16 49152] Service Manager.lnk - c:\program files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe [2005-5-3 81920] Utility Tray.lnk - c:\windows\system32\sistray.exe [2005-2-18 331776] [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009 R2 KMWDSERVICE;Keyboard And Mouse Communication Service;c:\program files\Multimedia Keyboard Driver\V5\KMWDSrv.exe [2007-05-08 2179072] R2 SavRoam;SAVRoam;c:\program files\Symantec AntiVirus\SavRoam.exe [2006-04-21 119952] R2 StkSSrv;Syntek AVStream USB2.0 WebCam Service;c:\windows\system32\StkCSrv.exe [2007-04-06 24576] R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2009-04-24 101936] S0 xfilt;VIA SATA IDE Hot-plug Driver;c:\windows\system32\drivers\xfilt.sys [2007-02-16 11264] S1 SiSEsc;SISLIB_ESC;c:\windows\system32\sisesc.sys [2005-02-18 28416] S2 gupdate1c9f660ed4d0b74;Usługa Google Update (gupdate1c9f660ed4d0b74);c:\program files\Google\Update\GoogleUpdate.exe [2009-06-26 133104] S3 ASNDIS5;ASNDIS5 Protocol Driver;c:\windows\system32\ASNDIS5.sys [2006-01-30 16269] S3 ATKXPDisplayName;ATKXPDisplayName;c:\windows\system32\drivers\ATKACPI.sys [2004-07-27 7680] S3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [2007-04-06 36608] S3 SISNPF;SIS Netgroup Packet Filter;c:\windows\system32\drivers\SISNPF.sys --> c:\windows\system32\drivers\SISNPF.sys [?] S3 StkCMini;Syntek AVStream USB2.0 1.3M WebCam;c:\windows\system32\drivers\StkCMini.sys [2007-04-06 1324544] S3 SynMini;USB2.0 1.3M Web Cam;c:\windows\system32\drivers\SynMini.sys [2006-05-05 720470] S3 SynScan;USB2.0 1.3M Web Cam Still Image;c:\windows\system32\drivers\SynScan.sys [2006-05-05 8278] S3 WBMS;Winbond Memory Stick Storage (MS) Device Driver;c:\windows\system32\drivers\wbms.sys [2004-02-03 30208] S3 WBSD;Winbond Secure Digital Storage (SD/MMC) Device Driver;c:\windows\system32\drivers\wbsd.sys [2004-02-03 25600] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] "c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP . Zawartość folderu 'Zaplanowane zadania' 2009-09-15 c:\windows\Tasks\Google Software Updater.job - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-06-26 13:18] 2009-09-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-06-26 13:20] 2009-09-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-06-26 13:20] 2009-09-15 c:\windows\Tasks\User_Feed_Synchronization-{11EA3F52-4E9C-4053-900D-777E8DB8EB93}.job - c:\windows\system32\msfeedssync.exe [2006-10-17 02:31] . . ------- Skan uzupełniający ------- . uStart Page = hxxp://www.gazeta.pl/0,0.html uInternet Settings,ProxyServer = ftp=10.2.0.10:8080;http=10.2.0.10:8080;https=10.2.0.10:8080;socks=10.20.0.10:8080 uInternet Settings,ProxyOverride = *.winuel.com.pl;10.0.*;10.100.*;<local> IE: E&ksport do programu Microsoft Excel - c:\progra~1\MICROS~4\OFFICE11\EXCEL.EXE/3000 DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab DPF: {631FF594-EC25-4CFF-B869-402DF294E1D6} - hxxp://slimak.onet.pl/_m/kamerzysta/OnetInstalator012s.ocx DPF: {CAFECAFE-0013-0001-0029-ABCDEFABCDEF} - hxxp://10.0.10.245:54112/forms/jinitiator/jinit.exe DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} - hxxp://kamera.man.koszalin.pl/activex/AMC.cab . - - - - USUNIĘTO PUSTE WPISY - - - - HKCU-Run-Komunikator - c:\program files\Tlen.pl\tlen.exe HKLM-Run-CafeNews - c:\program files\CafeNews\CN.exe HKU-Default-Run-Nokia.PCSync - c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe HKU-Default-Run-Windows Serces Agnt - rfqgefjqc.exe AddRemove-CafeNews - c:\program files\CafeNews\cn-uninst.exe AddRemove-FolderLock6 - c:\program files\Folder Lock\Uninstall.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-09-15 18:33 Windows 5.1.2600 Dodatek Service Pack 3 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . --------------------- ZABLOKOWANE KLUCZE REJESTRU --------------------- [HKEY_USERS\S-1-5-21-2088321146-317472893-988572150-2761\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*] "??"=hex:31,29,8b,f7,a2,20,d5,27,64,69,b5,3f,98,f9,32,ed,03,da,17,7e,6a,35,62, 82,46,95,76,00,25,aa,f5,9d,64,96,4d,2b,f1,35,ad,47,6a,99,02,8f,05,5a,f4,b3,\ "??"=hex:56,89,38,c4,0b,65,fc,b7,b2,29,c2,6c,bb,d9,91,a2 [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101" [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation] "Enabled"=dword:00000001 [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32] @="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe" [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" [HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}] @Denied: (A 2) (Everyone) @="IFlashBroker3" [HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*] "OODEFRAG08.00.00.01WORKSTATION"="DF898D16BED0C1D3ACF931F26BB81D6F0C7F7B3811A9CF3D04C81BA4A91E33DA2CA005E4EEA179B15EDD8F656E9566C12BF6C5AFED8156913097A25B1EF7989EAFCD8E84A1889864FA41ABE66440D3F8B1017D70B7BD23A8D05D52774CD4D43A09D008F4793E14286FFB1DD6CBDB207EFA2F8DDAEA0B57C0CA0507FC50080EDE4C8EE6F94D5E373C1E0C8B5BD7ECDC455337F413FEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74C8EDD5E5BE2F6E667A6A0AC4980AC7933A2D97226D213B555FEBC9E127BECC74C98B8E69198378F3CEB73B8C193204E04AF5D447B26BD481C4DE546F06E0828594BF0243388CB20C420E0E043477A10BA5B23E6BB4A00ED189557A384CDB00D7BB57D6B1F61C2A91287BA33F3DD57CBF520AB1B413718791D8F49450D14DE35D766D3FE2D3EEE4B5F8DDE375E5CC57872E65DCB67FE6FD689C0C71CD300F19F0E21CAF4B82C4BBB2CD10EC90D3CF71F324A82BA89AA0F847F6449EEA747EEE2805B213AA3AAF2C23C27ED1A91EBC2DF7A9CC9FC0B332816E5E5A3D5DA117E25573FF50BCD30A8BF9A95892C02CEA06BD2E2C47AD0888B326667114045F9E9A3FCAB4C7B21A550A210D74BD77439AE880954E9EFC40EB1156EBEB3EE419024AE21340FF289E8F2F0AF5F86C788F4B0122F5D956E5519B28DB0F50D782CD9BD2A361F892B75C8BC44CACD707C5C420AF49A9E035CF27751FE234985C56ACDF10E74656C32590CFEC9FBFAA14A9551C6B562EDD7EF92E5EDE0012CE716E0591BE6D6B64B6DADEA2F421E7319D85C481468E5D29736B09810BD47C26379FB5B39D51C751F116C136703D0F53623DE41C3384609AE91C7B5E235B8660C56A8A7EE0E4738C5291524617779F5BFF8CB4BCA636603EAB55CD935FADA24D9E65B8786D81FC97C14ACB50098401C5FFE59E6C4BBF0E27DAB72917A5678BF26B70A356A1230A769043B4EC7FB9041A1ACBE0CEE295304FE5013E1C7A220ACB1ACAE632B29488615024A6CE1C41B78F74D3A232BA3BE70E8D4CCC159CDA215A0F9C833FC237BC96CE5EB009B2CD28237020C8A003B276A993D329A0FDD165778A9D93E36989F0EBE60B26E6400F1589A3C779395914765D262574E69E65604A699E910D3B551A241F3351253A173A43F46C586BA5D9A0BBBF1D6AC91168060F7FB8229753AEF870C7710369E061748A43AC51BE167E3B55E6BCDFD50A9F767A255B37D607A1D751A14639CA537E0D4B1884480211028F829A45EFD96765FC43D810E74F9DE41554E4A527AE7D09A132F7498D8B0482F96EFC42D5C766225DA412C2AEA4FE30747EBEC84780A864F7FCA961B39F0968609664B6539A5E8F4409058A2B0911A5D1D1B222633561BCEC796D9A82C6195007BA806342E811A41BCEDDB94" . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- - - - - - - - > 'winlogon.exe'(1016) c:\windows\system32\igfxdev.dll . Czas ukończenia: 2009-09-15 18:43 ComboFix-quarantined-files.txt 2009-09-15 16:42 Przed: 30 542 077 952 bajtów wolnych Po: 32 518 512 640 bajtów wolnych 259 --- E O F --- 2009-09-09 07:29

Dodano Dzisiaj, 11:16:
Hop hop !!!

Czy ktoś mógłby rzucić okiem na te logi ????

Massive thanks

**Posty:** 18165 · przez **wojtas** 17 Wrz 2009, 19:59

2. wykonaj optymalizację windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem]
4. zrób skan Malwarebytes Anti-Malware (usuń co znajdzie )

Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.