GMER: http://www.wklej.org/id/414368/
OTL: http://www.wklej.org/id/414371/
Extras: http://www.wklej.org/id/414372/
Pozdrawiam
Molu
Aktualizacje na programosy.pl:
EverNote • Qimage • Cypheros TS-Doctor • GridinSoft Anti-Malware • Loaris Trojan Remover • Monkey′s Audio • Mozilla Firefox • Atlantis Word Processor • Machinery HDR Effects
-
- Ogłoszenie:
Zamulony internet i komputer
7 posty(ów) • Strona 1 z 1
Zamulony internet i komputer
przez Molu 07 Lis 2010, 16:28
GMER: http://www.wklej.org/id/414368/
OTL: http://www.wklej.org/id/414371/
Extras: http://www.wklej.org/id/414372/
Pozdrawiam
Molu
Zamulony internet i komputer
przez wojtas 07 Lis 2010, 16:39
przeskanuj kompa :
http://support.kaspersky.com/downloads/utils/tdsskiller.zip
oraz :
http://www.fixitpc.pl/index.php?/topic/8-dezynfekcja-zbior-narzedzi-usuwajacych/page__p__6557&#entry6557
i daj raport
http://support.kaspersky.com/downloads/utils/tdsskiller.zip
oraz :
http://www.fixitpc.pl/index.php?/topic/8-dezynfekcja-zbior-narzedzi-usuwajacych/page__p__6557&#entry6557
i daj raport
-
wojtas - *mod
- Posty: 18165
- Dołączenie: 13 Sty 2006, 16:00
- Miejscowość: Krzeszyce
- Pochwały: 1656
Zamulony internet i komputer
przez Molu 07 Lis 2010, 16:58
Raport z MBRcheck:
- Kod: Zaznacz wszystko
MBRCheck, version 1.2.3
(c) 2010, AD
Command-line:
Windows Version: Windows XP Home Edition
Windows Information: Dodatek Service Pack 2 (build 2600)
Logical Drives Mask: 0x0000000d
Kernel Drivers (total 131):
0x804D7000 \WINDOWS\system32\ntkrnlpa.exe
0x806E2000 \WINDOWS\system32\hal.dll
0xBA5A8000 \WINDOWS\system32\KDCOM.DLL
0xBA4B8000 \WINDOWS\system32\BOOTVID.dll
0xB9F95000 klmdb.sys
0xB9F66000 ACPI.sys
0xBA5AA000 \WINDOWS\system32\DRIVERS\WMILIB.SYS
0xBA0A8000 isapnp.sys
0xB9F55000 pci.sys
0xBA670000 pciide.sys
0xBA328000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
0xBA0B8000 MountMgr.sys
0xB9F36000 ftdisk.sys
0xBA330000 PartMgr.sys
0xBA0C8000 VolSnap.sys
0xB9F1E000 atapi.sys
0xBA0D8000 jraid.sys
0xB9F06000 \WINDOWS\system32\DRIVERS\SCSIPORT.SYS
0xBA0E8000 disk.sys
0xBA0F8000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
0xB9EE6000 fltMgr.sys
0xB9ED4000 sr.sys
0xBA108000 PxHelp20.sys
0xB9EBD000 KSecDD.sys
0xB9EAA000 WudfPf.sys
0xB9E1D000 Ntfs.sys
0xB9DF0000 NDIS.sys
0xBA5AC000 speedfan.sys
0xBA338000 sfhlp02.sys
0xB9DDF000 sfdrv01.sys
0xB9DC4000 Mup.sys
0xBA5AE000 JGOGO.sys
0xBA671000 giveio.sys
0xBA340000 BTHidMgr.sys
0xB9299000 \SystemRoot\system32\DRIVERS\intelppm.sys
0xB8C82000 \SystemRoot\system32\DRIVERS\nv4_mini.sys
0xB8C6E000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
0xBA3F0000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0xB8C4B000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0xBA3F8000 \SystemRoot\system32\DRIVERS\usbehci.sys
0xB8C26000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0xB8C11000 \SystemRoot\system32\DRIVERS\Rtenicxp.sys
0xB9289000 \SystemRoot\system32\DRIVERS\cdrom.sys
0xB8C00000 \SystemRoot\system32\DRIVERS\serial.sys
0xB9D8C000 \SystemRoot\system32\DRIVERS\serenum.sys
0xBA400000 \SystemRoot\system32\DRIVERS\fdc.sys
0xBA61C000 \SystemRoot\system32\DRIVERS\ASACPI.sys
0xB8BEC000 \SystemRoot\system32\DRIVERS\parport.sys
0xB9279000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0xBA408000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0xBA410000 \SystemRoot\system32\DRIVERS\mouclass.sys
0xB9269000 \SystemRoot\System32\Drivers\VcommMgr.sys
0xB9D88000 \SystemRoot\system32\DRIVERS\vbtenum.sys
0xBA418000 \SystemRoot\system32\DRIVERS\blueletaudio.sys
0xB8BC8000 \SystemRoot\system32\DRIVERS\portcls.sys
0xB9259000 \SystemRoot\system32\DRIVERS\drmk.sys
0xB8BA5000 \SystemRoot\system32\DRIVERS\ks.sys
0xBA420000 \SystemRoot\system32\DRIVERS\BlueletSCOAudio.sys
0xBA7C7000 \SystemRoot\system32\DRIVERS\audstub.sys
0xBA61E000 \SystemRoot\System32\Drivers\RootMdm.sys
0xBA428000 \SystemRoot\System32\Drivers\Modem.SYS
0xBA318000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0xB9D84000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0xB8B8E000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0xBA198000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0xB98B4000 \SystemRoot\system32\DRIVERS\raspptp.sys
0xBA430000 \SystemRoot\system32\DRIVERS\TDI.SYS
0xB8B7D000 \SystemRoot\system32\DRIVERS\psched.sys
0xB98A4000 \SystemRoot\system32\DRIVERS\msgpc.sys
0xBA438000 \SystemRoot\system32\DRIVERS\ptilink.sys
0xBA440000 \SystemRoot\system32\DRIVERS\raspti.sys
0xB9803000 \SystemRoot\system32\DRIVERS\btnetdrv.sys
0xBA448000 \SystemRoot\system32\DRIVERS\VComm.sys
0xB9894000 \SystemRoot\system32\DRIVERS\termdd.sys
0xBA620000 \SystemRoot\system32\DRIVERS\swenum.sys
0xB8B24000 \SystemRoot\system32\DRIVERS\update.sys
0xB97FF000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0xB9884000 \SystemRoot\System32\Drivers\NDProxy.SYS
0xB9864000 \SystemRoot\system32\DRIVERS\usbhub.sys
0xBA626000 \SystemRoot\system32\DRIVERS\USBD.SYS
0xB6592000 \SystemRoot\system32\drivers\ADIHdAud.sys
0xB657B000 \SystemRoot\system32\drivers\AEAudio.sys
0xB651B000 \SystemRoot\system32\drivers\Senfilt.sys
0xBA3C0000 \SystemRoot\system32\DRIVERS\flpydisk.sys
0xBA640000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0xB5BF5000 \SystemRoot\System32\Drivers\Null.SYS
0xBA642000 \SystemRoot\System32\Drivers\Beep.SYS
0xBA3D0000 \SystemRoot\System32\drivers\vga.sys
0xBA644000 \SystemRoot\System32\Drivers\mnmdd.SYS
0xBA646000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0xBA3D8000 \SystemRoot\System32\Drivers\Msfs.SYS
0xBA3E0000 \SystemRoot\System32\Drivers\Npfs.SYS
0xB8B20000 \SystemRoot\system32\DRIVERS\rasacd.sys
0xB5B4E000 \SystemRoot\system32\DRIVERS\ipsec.sys
0xB5AF6000 \SystemRoot\system32\DRIVERS\tcpip.sys
0xB5EC1000 \SystemRoot\System32\Drivers\aswTdi.SYS
0xB5AD5000 \SystemRoot\system32\DRIVERS\ipnat.sys
0xB5AAD000 \SystemRoot\system32\DRIVERS\netbt.sys
0xB5EB1000 \SystemRoot\system32\DRIVERS\wanarp.sys
0xB5A8B000 \SystemRoot\System32\drivers\afd.sys
0xB5EA1000 \SystemRoot\system32\DRIVERS\netbios.sys
0xBA3E8000 \SystemRoot\System32\Drivers\StarOpen.SYS
0xB59C0000 \SystemRoot\system32\DRIVERS\rdbss.sys
0xB5951000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0xB5E07000 \SystemRoot\System32\Drivers\Fips.SYS
0xB5930000 \SystemRoot\System32\Drivers\aswSP.SYS
0xB608F000 \SystemRoot\System32\Drivers\Aavmker4.SYS
0xB6087000 \SystemRoot\system32\DRIVERS\usbprint.sys
0xB4A67000 \SystemRoot\System32\Drivers\Udfs.SYS
0xB4A4F000 \SystemRoot\System32\Drivers\dump_atapi.sys
0xBA65C000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS
0xBF800000 \SystemRoot\System32\win32k.sys
0xB5F69000 \SystemRoot\System32\drivers\Dxapi.sys
0xB605F000 \SystemRoot\System32\watchdog.sys
0xBF000000 \SystemRoot\System32\drivers\dxg.sys
0xBA6C6000 \SystemRoot\System32\drivers\dxgthk.sys
0xBF012000 \SystemRoot\System32\nv4_disp.dll
0xBFFA0000 \SystemRoot\System32\ATMFD.DLL
0xB6057000 \SystemRoot\system32\DRIVERS\aswFsBlk.sys
0xBA570000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0xB4721000 \SystemRoot\System32\Drivers\aswMon2.SYS
0xB439C000 \SystemRoot\system32\drivers\wdmaud.sys
0xBA1B8000 \SystemRoot\system32\drivers\sysaudio.sys
0xB40FF000 \SystemRoot\system32\DRIVERS\mrxdav.sys
0xBA608000 \SystemRoot\System32\Drivers\ParVdm.SYS
0xB3FA1000 \SystemRoot\System32\Drivers\HTTP.sys
0xB42FE000 \SystemRoot\system32\DRIVERS\secdrv.sys
0xB3DE2000 \SystemRoot\system32\DRIVERS\srv.sys
0xB3DD0000 \SystemRoot\SYSTEM32\DRIVERS\WibuKey.sys
0xB3B88000 \SystemRoot\System32\Drivers\aswRdr.SYS
0x7C900000 \WINDOWS\system32\ntdll.dll
Processes (total 54):
0 System Idle Process
4 System
808 C:\WINDOWS\system32\smss.exe
864 csrss.exe
896 C:\WINDOWS\system32\winlogon.exe
940 C:\WINDOWS\system32\services.exe
952 C:\WINDOWS\system32\lsass.exe
1120 C:\WINDOWS\system32\svchost.exe
1168 svchost.exe
1292 C:\WINDOWS\system32\svchost.exe
1332 C:\WINDOWS\system32\svchost.exe
1412 svchost.exe
1516 svchost.exe
1588 C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
1600 C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
1792 C:\Program Files\Alwil Software\Avast4\ashServ.exe
1944 C:\WINDOWS\explorer.exe
208 C:\Program Files\Analog Devices\Core\smax4pnp.exe
228 C:\WINDOWS\system32\rundll32.exe
296 C:\Program Files\Common Files\Real\Update_OB\realsched.exe
320 C:\Program Files\QuickTime\QTTask.exe
328 C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
276 C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
264 C:\WINDOWS\system32\rundll32.exe
396 C:\Program Files\Java\jre6\bin\jusched.exe
408 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
456 C:\WINDOWS\system32\ctfmon.exe
476 C:\Program Files\Gadu-Gadu\gg.exe
484 C:\Program Files\Messenger\msmsgs.exe
504 C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe
520 C:\Documents and Settings\W
696 C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
740 C:\PROGRA~1\WinZip\WZQKPICK.EXE
1320 C:\WINDOWS\system32\spoolsv.exe
1724 svchost.exe
1832 C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
1900 svchost.exe
136 C:\Program Files\Java\jre6\bin\jqs.exe
160 C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe
268 C:\WINDOWS\system32\nvsvc32.exe
388 C:\Program Files\Google\Update\GoogleUpdate.exe
620 C:\WINDOWS\Installer\MSI512.tmp
792 C:\WINDOWS\system32\svchost.exe
2228 C:\Program Files\Canon\CAL\CALMAIN.exe
2428 C:\WINDOWS\system32\wuauclt.exe
2852 unsecapp.exe
2860 C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
2896 wmiprvse.exe
2928 C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
3256 alg.exe
4000 C:\Program Files\opera.exe
4016 C:\WINDOWS\system32\wuauclt.exe
724 C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
384 C:\Documents and Settings\W
\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS)
PhysicalDrive0 Model Number: WDCWD800JD-00LSA0, Rev: 06.01D06
Size Device Name MBR Status
--------------------------------------------
74 GB \\.\PhysicalDrive0 Windows XP MBR code detected
SHA1: 858845D53EA37CAD905BAB010542C912FBC33C8C
Done!
Zamulony internet i komputer
przez Molu 07 Lis 2010, 18:50
TDSS:
Dodano Dzisiaj, 12:30:
GMER:
http://www.wklej.org/id/414891/
OTL:
http://www.wklej.org/id/414892/
Extras:
http://www.wklej.org/id/414893/
Pozdrawiam
Molu
- Kod: Zaznacz wszystko
2010/11/07 17:42:29.0140 TDSS rootkit removing tool 2.4.6.0 Nov 3 2010 10:11:43
2010/11/07 17:42:29.0140 ================================================================================
2010/11/07 17:42:29.0140 SystemInfo:
2010/11/07 17:42:29.0140
2010/11/07 17:42:29.0140 OS Version: 5.1.2600 ServicePack: 2.0
2010/11/07 17:42:29.0140 Product type: Workstation
2010/11/07 17:42:29.0140 ComputerName: MOLENDA-561466F
2010/11/07 17:42:29.0140 UserName: Właściciel
2010/11/07 17:42:29.0140 Windows directory: C:\WINDOWS
2010/11/07 17:42:29.0140 System windows directory: C:\WINDOWS
2010/11/07 17:42:29.0140 Processor architecture: Intel x86
2010/11/07 17:42:29.0140 Number of processors: 2
2010/11/07 17:42:29.0140 Page size: 0x1000
2010/11/07 17:42:29.0140 Boot type: Normal boot
2010/11/07 17:42:29.0140 ================================================================================
2010/11/07 17:42:29.0343 Initialize success
2010/11/07 17:42:47.0359 ================================================================================
2010/11/07 17:42:47.0359 Scan started
2010/11/07 17:42:47.0359 Mode: Manual;
2010/11/07 17:42:47.0359 ================================================================================
2010/11/07 17:42:47.0687 Aavmker4 (7e9ac7c353e49ea7e8b53c64c9814c27) C:\WINDOWS\system32\drivers\Aavmker4.sys
2010/11/07 17:42:47.0781 ACPI (a966410ecf83b81f3b0b8e07a71957d4) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2010/11/07 17:42:47.0812 ACPIEC (66a42b7db194e24b973bbcce840a0f3f) C:\WINDOWS\system32\drivers\ACPIEC.sys
2010/11/07 17:42:47.0859 ADIHdAudAddService (ab0d9669bab1009e48cc91117e59912b) C:\WINDOWS\system32\drivers\ADIHdAud.sys
2010/11/07 17:42:47.0921 AEAudio (03be587e90c8b37c7ff1fe2e9c1d1c90) C:\WINDOWS\system32\drivers\AEAudio.sys
2010/11/07 17:42:47.0953 aec (1ee7b434ba961ef845de136224c30fec) C:\WINDOWS\system32\drivers\aec.sys
2010/11/07 17:42:48.0000 AFD (55e6e1c51b6d30e54335750955453702) C:\WINDOWS\System32\drivers\afd.sys
2010/11/07 17:42:48.0140 aswFsBlk (b4d09e666cb1d72f2cfab3f8fb395518) C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys
2010/11/07 17:42:48.0171 aswMon2 (9c9a6c6e8805c43c372ad9aabea39fd9) C:\WINDOWS\system32\drivers\aswMon2.sys
2010/11/07 17:42:48.0187 aswRdr (4f25bb4a1299006ac04fa02d25a0e62d) C:\WINDOWS\system32\drivers\aswRdr.sys
2010/11/07 17:42:48.0203 aswSP (f8abcec435cb0f918c12fd84b6eaee11) C:\WINDOWS\system32\drivers\aswSP.sys
2010/11/07 17:42:48.0234 aswTdi (95c9ccf994e7c39322aa2ca44a6f8382) C:\WINDOWS\system32\drivers\aswTdi.sys
2010/11/07 17:42:48.0250 AsyncMac (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
2010/11/07 17:42:48.0281 atapi (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys
2010/11/07 17:42:48.0312 Atmarpc (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
2010/11/07 17:42:48.0343 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
2010/11/07 17:42:48.0390 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
2010/11/07 17:42:48.0421 BlueletAudio (0744aa40fe6fa9c471fa59ccb5ca1f73) C:\WINDOWS\system32\DRIVERS\blueletaudio.sys
2010/11/07 17:42:48.0453 BlueletSCOAudio (01d1832f2b13dfaf7384884f7c3e0124) C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys
2010/11/07 17:42:48.0531 BT (51eff72092088948933298c12ed23fd1) C:\WINDOWS\system32\DRIVERS\btnetdrv.sys
2010/11/07 17:42:48.0718 Btcsrusb (3efdd3cc9118f6290398d94a72458b00) C:\WINDOWS\system32\Drivers\btcusb.sys
2010/11/07 17:42:48.0812 BthEnum (d24b8d1784c68a25060fffbe8ed34b76) C:\WINDOWS\system32\DRIVERS\BthEnum.sys
2010/11/07 17:42:48.0859 BTHidEnum (e69d9e7854095a9c81acee40d766fe2d) C:\WINDOWS\system32\DRIVERS\vbtenum.sys
2010/11/07 17:42:48.0890 BTHidMgr (a9164c2a39bd917b9f42ae087560ac3d) C:\WINDOWS\system32\Drivers\BTHidMgr.sys
2010/11/07 17:42:48.0921 BTHMODEM (9df0adf74ce1d6371ed60cf92eb1d9a6) C:\WINDOWS\system32\DRIVERS\bthmodem.sys
2010/11/07 17:42:48.0953 BthPan (10355270be12641b9764235da39dcf0f) C:\WINDOWS\system32\DRIVERS\bthpan.sys
2010/11/07 17:42:49.0000 BTHPORT (754db723ad08874ab46d7d307caf2209) C:\WINDOWS\system32\Drivers\BTHport.sys
2010/11/07 17:42:49.0031 BTHUSB (f06d4cb9918b462a84d9ac00027efc30) C:\WINDOWS\system32\Drivers\BTHUSB.sys
2010/11/07 17:42:49.0078 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
2010/11/07 17:42:49.0109 CCDECODE (6163ed60b684bab19d3352ab22fc48b2) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
2010/11/07 17:42:49.0187 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
2010/11/07 17:42:49.0218 Cdfs (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys
2010/11/07 17:42:49.0250 Cdrom (af9c19b3100fe010496b1a27181fbf72) C:\WINDOWS\system32\DRIVERS\cdrom.sys
2010/11/07 17:42:49.0437 Disk (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys
2010/11/07 17:42:49.0484 dmboot (3b809ffad55dcebdb156d5ca1bd3da65) C:\WINDOWS\system32\drivers\dmboot.sys
2010/11/07 17:42:49.0531 dmio (27725b6501201c3080ba73048bce389a) C:\WINDOWS\system32\drivers\dmio.sys
2010/11/07 17:42:49.0750 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
2010/11/07 17:42:49.0796 DMusic (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys
2010/11/07 17:42:49.0875 drmkaud (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys
2010/11/07 17:42:49.0921 Fastfat (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys
2010/11/07 17:42:49.0953 Fdc (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\DRIVERS\fdc.sys
2010/11/07 17:42:49.0968 Fips (c5fb298257c0a6514ea17835e774ea0a) C:\WINDOWS\system32\drivers\Fips.sys
2010/11/07 17:42:49.0984 Flpydisk (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
2010/11/07 17:42:50.0046 FltMgr (3d234fb6d6ee875eb009864a299bea29) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
2010/11/07 17:42:50.0078 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
2010/11/07 17:42:50.0078 Ftdisk (ed6d921d8ab423138fb35beee6d6a6cb) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
2010/11/07 17:42:50.0140 giveio (77ebf3e9386daa51551af429052d88d0) C:\WINDOWS\system32\giveio.sys
2010/11/07 17:42:50.0250 Gpc (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys
2010/11/07 17:42:50.0281 GVCplDrv (f22bf7f345df95c09942951246aaa28d) C:\WINDOWS\system32\drivers\GVCplDrv.sys
2010/11/07 17:42:50.0312 hamachi (64b48a0d899deca24c424a2cac3ecffa) C:\WINDOWS\system32\DRIVERS\hamachi.sys
2010/11/07 17:42:50.0359 HDAudBus (cbc3def409549672b915fb9403d63f74) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
2010/11/07 17:42:50.0390 HidUsb (1de6783b918f540149aa69943bdfeba8) C:\WINDOWS\system32\DRIVERS\hidusb.sys
2010/11/07 17:42:50.0484 HTTP (9f8b0f4276f618964fd118be4289b7cd) C:\WINDOWS\system32\Drivers\HTTP.sys
2010/11/07 17:42:50.0687 i8042prt (2656fdfe0a7916c3a16f374454c55dd9) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
2010/11/07 17:42:50.0796 Imapi (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys
2010/11/07 17:42:50.0875 intelppm (78a353438791c6d04c64013a5abec6bd) C:\WINDOWS\system32\DRIVERS\intelppm.sys
2010/11/07 17:42:50.0890 Ip6Fw (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
2010/11/07 17:42:50.0937 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
2010/11/07 17:42:50.0953 IpInIp (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys
2010/11/07 17:42:50.0984 IpNat (e2168cbc7098ffe963c6f23f472a3593) C:\WINDOWS\system32\DRIVERS\ipnat.sys
2010/11/07 17:42:51.0015 IPSec (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys
2010/11/07 17:42:51.0046 IRENUM (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys
2010/11/07 17:42:51.0078 isapnp (01a9e68528f4f34e5702123d27c67bd4) C:\WINDOWS\system32\DRIVERS\isapnp.sys
2010/11/07 17:42:51.0125 JGOGO (c995c0e8b4503fac38793bb0236ad246) C:\WINDOWS\system32\DRIVERS\JGOGO.sys
2010/11/07 17:42:51.0140 JRAID (f561c67e8e9c598051d4f83296fd1201) C:\WINDOWS\system32\DRIVERS\jraid.sys
2010/11/07 17:42:51.0171 Kbdclass (cc13db862f929ae33f64c3bedc01cd31) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
2010/11/07 17:42:51.0203 kmixer (ba5deda4d934e6288c2f66caf58d2562) C:\WINDOWS\system32\drivers\kmixer.sys
2010/11/07 17:42:51.0234 KSecDD (674d3e5a593475915dc6643317192403) C:\WINDOWS\system32\drivers\KSecDD.sys
2010/11/07 17:42:51.0359 Lavasoft Kernexplorer (32da3fde01f1bb080c2e69521dd8881e) C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys
2010/11/07 17:42:51.0484 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
2010/11/07 17:42:51.0515 Modem (15f33d12d604d0198ce5561f102cd9c5) C:\WINDOWS\system32\drivers\Modem.sys
2010/11/07 17:42:51.0546 Mouclass (69c12b99ae8b6b99ec314e9b99833728) C:\WINDOWS\system32\DRIVERS\mouclass.sys
2010/11/07 17:42:51.0781 MountMgr (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys
2010/11/07 17:42:51.0890 MRxDAV (29414447eb5bde2f8397dc965dbb3156) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
2010/11/07 17:42:51.0953 MRxSmb (fb6c89bb3ce282b08bdb1e3c179e1c39) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
2010/11/07 17:42:52.0000 Msfs (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys
2010/11/07 17:42:52.0046 MSKSSRV (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys
2010/11/07 17:42:52.0078 MSPCLOCK (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2010/11/07 17:42:52.0109 MSPQM (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys
2010/11/07 17:42:52.0171 mssmbios (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
2010/11/07 17:42:52.0687 MSTEE (bf13612142995096ab084f2db7f40f77) C:\WINDOWS\system32\drivers\MSTEE.sys
2010/11/07 17:42:52.0765 MTsensor (d48659bb24c48345d926ecb45c1ebdf5) C:\WINDOWS\system32\DRIVERS\ASACPI.sys
2010/11/07 17:42:52.0796 Mup (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys
2010/11/07 17:42:52.0828 NABTSFEC (5c8dc6429c43dc6177c1fa5b76290d1a) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
2010/11/07 17:42:52.0875 NDIS (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys
2010/11/07 17:42:52.0921 NdisIP (520ce427a8b298f54112857bcf6bde15) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
2010/11/07 17:42:52.0953 NdisTapi (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
2010/11/07 17:42:53.0000 Ndisuio (34d6cd56409da9a7ed573e1c90a308bf) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
2010/11/07 17:42:53.0015 NdisWan (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
2010/11/07 17:42:53.0031 NDProxy (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys
2010/11/07 17:42:53.0046 NetBIOS (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS\netbios.sys
2010/11/07 17:42:53.0078 NetBT (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS\netbt.sys
2010/11/07 17:42:53.0171 nmwcd (696b37ea78f9d9767a2f18ba0304a51a) C:\WINDOWS\system32\drivers\nmwcd.sys
2010/11/07 17:42:53.0218 nmwcdc (bbb6010fc01d9239d88fcdf133e03ff0) C:\WINDOWS\system32\drivers\nmwcdc.sys
2010/11/07 17:42:53.0265 nmwcdcj (4c3726467d67483f054c88f058e9c153) C:\WINDOWS\system32\drivers\nmwcdcj.sys
2010/11/07 17:42:53.0359 nmwcdcm (4c3726467d67483f054c88f058e9c153) C:\WINDOWS\system32\drivers\nmwcdcm.sys
2010/11/07 17:42:53.0359 Npfs (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys
2010/11/07 17:42:53.0421 Ntfs (19a811ef5f1ed5c926a028ce107ff1af) C:\WINDOWS\system32\drivers\Ntfs.sys
2010/11/07 17:42:53.0468 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
2010/11/07 17:42:53.0656 nv (129d596d624b79cdb82dbc78218df65f) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
2010/11/07 17:42:53.0859 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
2010/11/07 17:42:53.0890 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
2010/11/07 17:42:53.0968 Parport (2ff48d8fdc815a8492fb2bd81e6999c2) C:\WINDOWS\system32\DRIVERS\parport.sys
2010/11/07 17:42:53.0984 PartMgr (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys
2010/11/07 17:42:54.0000 ParVdm (453ec2c2a20a1382f564541918520eeb) C:\WINDOWS\system32\drivers\ParVdm.sys
2010/11/07 17:42:54.0031 PCI (5fd05c92ec56f696eaa50b68cef1b84a) C:\WINDOWS\system32\DRIVERS\pci.sys
2010/11/07 17:42:54.0062 PCIIde (548cf2d6369eae441a4c6baa75bc4f0a) C:\WINDOWS\system32\DRIVERS\pciide.sys
2010/11/07 17:42:54.0093 Pcmcia (2849812217ecec059cb45f80eb6e52d4) C:\WINDOWS\system32\drivers\Pcmcia.sys
2010/11/07 17:42:54.0203 PptpMiniport (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERS\raspptp.sys
2010/11/07 17:42:54.0234 PSched (48671f327553dcf1d27f6197f622a668) C:\WINDOWS\system32\DRIVERS\psched.sys
2010/11/07 17:42:54.0250 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
2010/11/07 17:42:54.0328 PxHelp20 (49452bfcec22f36a7a9b9c2181bc3042) C:\WINDOWS\system32\Drivers\PxHelp20.sys
2010/11/07 17:42:54.0421 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
2010/11/07 17:42:54.0437 Rasl2tp (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
2010/11/07 17:42:54.0468 RasPppoe (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
2010/11/07 17:42:54.0515 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
2010/11/07 17:42:54.0546 Rdbss (03b965b1ca47f6ef60eb5e51cb50e0af) C:\WINDOWS\system32\DRIVERS\rdbss.sys
2010/11/07 17:42:54.0578 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
2010/11/07 17:42:54.0609 RDPWD (b54cd38a9ebfbf2b3561426e3fe26f62) C:\WINDOWS\system32\drivers\RDPWD.sys
2010/11/07 17:42:54.0656 redbook (bddcece9acdad26841c987d10376f6f7) C:\WINDOWS\system32\DRIVERS\redbook.sys
2010/11/07 17:42:54.0703 RFCOMM (99c4b74981a1413f142a3903130088cb) C:\WINDOWS\system32\DRIVERS\rfcomm.sys
2010/11/07 17:42:54.0734 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys
2010/11/07 17:42:54.0781 RTLE8023xp (b98455f2197fb560bde2c13d894db79d) C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
2010/11/07 17:42:54.0828 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
2010/11/07 17:42:54.0859 SenFiltService (b6a6b409fda9d9ebd3aadb838d3d7173) C:\WINDOWS\system32\drivers\Senfilt.sys
2010/11/07 17:42:54.0906 serenum (a2d868aeeff612e70e213c451a70cafb) C:\WINDOWS\system32\DRIVERS\serenum.sys
2010/11/07 17:42:54.0937 Serial (859bc6f8c3d58cfda9181e9926c7ddb9) C:\WINDOWS\system32\DRIVERS\serial.sys
2010/11/07 17:42:54.0968 sfdrv01 (00de597b81b381053cb5b21a7f20e365) C:\WINDOWS\system32\drivers\sfdrv01.sys
2010/11/07 17:42:55.0000 sfhlp02 (64b9ab76f1b16eb059cb6cdd906c067a) C:\WINDOWS\system32\drivers\sfhlp02.sys
2010/11/07 17:42:55.0062 Sfloppy (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys
2010/11/07 17:42:55.0125 SLIP (5caeed86821fa2c6139e32e9e05ccdc9) C:\WINDOWS\system32\DRIVERS\SLIP.sys
2010/11/07 17:42:55.0203 speedfan (5d6401db90ec81b71f8e2c5c8f0fef23) C:\WINDOWS\system32\speedfan.sys
2010/11/07 17:42:55.0265 splitter (0ce218578fff5f4f7e4201539c45c78f) C:\WINDOWS\system32\drivers\splitter.sys
2010/11/07 17:42:55.0343 sr (6145ca23bccda679a772ec0af42d6eb5) C:\WINDOWS\system32\DRIVERS\sr.sys
2010/11/07 17:42:55.0406 Srv (7a4f147cc6b133f905f6e65e2f8669fb) C:\WINDOWS\system32\DRIVERS\srv.sys
2010/11/07 17:42:55.0421 StarOpen (306521935042fc0a6988d528643619b3) C:\WINDOWS\system32\drivers\StarOpen.sys
2010/11/07 17:42:55.0453 streamip (284c57df5dc7abca656bc2b96a667afb) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
2010/11/07 17:42:55.0468 swenum (03c1bae4766e2450219d20b993d6e046) C:\WINDOWS\system32\DRIVERS\swenum.sys
2010/11/07 17:42:55.0500 swmidi (94abc808fc4b6d7d2bbf42b85e25bb4d) C:\WINDOWS\system32\drivers\swmidi.sys
2010/11/07 17:42:55.0609 sysaudio (650ad082d46bac0e64c9c0e0928492fd) C:\WINDOWS\system32\drivers\sysaudio.sys
2010/11/07 17:42:55.0656 Tcpip (2a5554fc5b1e04e131230e3ce035c3f9) C:\WINDOWS\system32\DRIVERS\tcpip.sys
2010/11/07 17:42:55.0703 TDPIPE (38d437cf2d98965f239b0abcd66dcb0f) C:\WINDOWS\system32\drivers\TDPIPE.sys
2010/11/07 17:42:55.0718 TDTCP (ed0580af02502d00ad8c4c066b156be9) C:\WINDOWS\system32\drivers\TDTCP.sys
2010/11/07 17:42:55.0750 TermDD (a540a99c281d933f3d69d55e48727f47) C:\WINDOWS\system32\DRIVERS\termdd.sys
2010/11/07 17:42:55.0812 Udfs (12f70256f140cd7d52c58c7048fde657) C:\WINDOWS\system32\drivers\Udfs.sys
2010/11/07 17:42:55.0921 Update (ced744117e91bdc0beb810f7d8608183) C:\WINDOWS\system32\DRIVERS\update.sys
2010/11/07 17:42:55.0968 usbehci (15e993ba2f6946b2bfbbfcd30398621e) C:\WINDOWS\system32\DRIVERS\usbehci.sys
2010/11/07 17:42:56.0000 usbhub (c72f40947f92cea56a8fb532edf025f1) C:\WINDOWS\system32\DRIVERS\usbhub.sys
2010/11/07 17:42:56.0031 usbprint (a42369b7cd8886cd7c70f33da6fcbcf5) C:\WINDOWS\system32\DRIVERS\usbprint.sys
2010/11/07 17:42:56.0078 usbscan (a6bc71402f4f7dd5b77fd7f4a8ddba85) C:\WINDOWS\system32\DRIVERS\usbscan.sys
2010/11/07 17:42:56.0109 USBSTOR (6cd7b22193718f1d17a47a1cd6d37e75) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
2010/11/07 17:42:56.0140 usbuhci (f8fd1400092e23c8f2f31406ef06167b) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
2010/11/07 17:42:56.0171 VComm (9ebee4a060c5364a31aeaa04eac2af1e) C:\WINDOWS\system32\DRIVERS\VComm.sys
2010/11/07 17:42:56.0203 VcommMgr (d1ddff84dc3060456c8bc0c47af8cbb2) C:\WINDOWS\system32\Drivers\VcommMgr.sys
2010/11/07 17:42:56.0234 VgaSave (8a60edd72b4ea5aea8202daf0e427925) C:\WINDOWS\System32\drivers\vga.sys
2010/11/07 17:42:56.0265 VolSnap (ecd173739b8ec10a814cc18653df5a36) C:\WINDOWS\system32\drivers\VolSnap.sys
2010/11/07 17:42:56.0296 Wanarp (984ef0b9788abf89974cfed4bfbaacbc) C:\WINDOWS\system32\DRIVERS\wanarp.sys
2010/11/07 17:42:56.0343 wdmaud (efd235ca22b57c81118c1aeb4798f1c1) C:\WINDOWS\system32\drivers\wdmaud.sys
2010/11/07 17:42:56.0406 WIBUKEY (afcea7939925378f867dde6af76f3924) C:\WINDOWS\system32\DRIVERS\WibuKey.sys
2010/11/07 17:42:56.0484 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\Drivers\wpdusb.sys
2010/11/07 17:42:56.0531 WSTCODEC (d5842484f05e12121c511aa93f6439ec) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
2010/11/07 17:42:56.0578 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
2010/11/07 17:42:56.0656 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
2010/11/07 17:42:56.0828 ================================================================================
2010/11/07 17:42:56.0828 Scan finished
2010/11/07 17:42:56.0828 ================================================================================
Dodano Dzisiaj, 12:30:
GMER:
http://www.wklej.org/id/414891/
OTL:
http://www.wklej.org/id/414892/
Extras:
http://www.wklej.org/id/414893/
Pozdrawiam
Molu
Zamulony internet i komputer
przez wojtas 08 Lis 2010, 20:42
Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:
Kliknij wykonaj skrypt. I potwierdź reset komputera .
Wykonaj
1.Uruchom OTL z opcji sprzątanie.
2. wykonaj optymalizację Windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
4. zrób pełny skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie ) i daj na forum raport
Zaktualizuj zabezpieczenia:
>>> Adobe Reader (bez Free McAfee® Security Scan Plus)
>>> Internet Explorer 8
>>> Service Pack 3
>>> Java™ 6 Update 22
>>> Mozilla Firefox
>>> Adobe Flash Player
na koniec Daj loga z Combofixa i ten skan malwarebytes
Autor postu otrzymał pochwałę
:OTL
DRV - File not found [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\WACICI~1\USTAWI~1\Temp\cpuz130\cpuz_x32.sys -- (cpuz130)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\btkrnbdg.sys -- (BTKRNBDG)
O3 - HKU\S-1-5-21-1060284298-1935655697-725345543-1003\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
:Files
C:\Program Files\Mozilla Firefox\extensions\{BEE3E87E-E1C6-4bfe-BE9D-48E84271AB34}
:Commands
[emptytemp]
[emptyflash]
[clearallrestorepoints]
Kliknij wykonaj skrypt. I potwierdź reset komputera .
Wykonaj
1.Uruchom OTL z opcji sprzątanie.
2. wykonaj optymalizację Windowsa
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
4. zrób pełny skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie ) i daj na forum raport
Zaktualizuj zabezpieczenia:
>>> Adobe Reader (bez Free McAfee® Security Scan Plus)
>>> Internet Explorer 8
>>> Service Pack 3
>>> Java™ 6 Update 22
>>> Mozilla Firefox
>>> Adobe Flash Player
na koniec Daj loga z Combofixa i ten skan malwarebytes
Autor postu otrzymał pochwałę
-
wojtas - *mod
- Posty: 18165
- Dołączenie: 13 Sty 2006, 16:00
- Miejscowość: Krzeszyce
- Pochwały: 1656
-
Zamulony internet i komputer
przez Molu 11 Lis 2010, 18:50
Na początku miałem problemy z aktualizacją MAM i skanowałem starą wersją
Log przed aktualizacją:
http://wklej.org/id/416972/
Po aktualizacji:
http://wklej.org/id/416973/
Ponieważ problem z praktycznie zniknął chyba zrezygnuję z combofixa bo jeszcze się coś pokrzaczy.
Pozdrawiam
Molu
Log przed aktualizacją:
http://wklej.org/id/416972/
Po aktualizacji:
http://wklej.org/id/416973/
Ponieważ problem z praktycznie zniknął chyba zrezygnuję z combofixa bo jeszcze się coś pokrzaczy.
Pozdrawiam
Molu
7 posty(ów) • Strona 1 z 1
Kto jest na forum
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 11 gości