Problem z komputerem

**Posty:** 204 · przez **Dodge321** 21 Sie 2008, 11:46

Witam pisze w imieniu usera Bambosza, ponieważ coś stało mu sie z kompem.. konkretnie gg mu dobrze działa a przeglądarki itp. nie... żadna strona mu sie nie ładuje. Prosił mnie żebym wstawił tutaj logi:

1. Z HJ:

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:32:53, on 2008-08-21 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.20861) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Icecast2 Win32\icecastService.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\PnkBstrB.exe C:\WINDOWS\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\FlashGet\flashget.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\RALINK\Common\RaUI.exe C:\Program Files\Xfire\xfire.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://users.iptelecom.net.ua/~codecs/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb124\Dealio.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: Skype Control Class - {9018F6A8-2495-45DF-9F16-C738F8F3C8FF} - C:\WINDOWS\system32\SkypeComm.dll O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb124\Dealio.dll Bambosz 11:34:40 O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [Microsoft Updates] svehost.exe O4 - HKLM\..\Run: [Flashget] C:\Program Files\FlashGet\flashget.exe /min O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe O4 - HKLM\..\RunServices: [Microsoft Updates] svehost.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [CubeDesktop] C:\Program Files\CubeDesktop\CubeDesktop.exe O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\byzato.exe -AutoStart O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user') O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe O4 - Global Startup: Xfire.lnk = C:\Program Files\Xfire\xfire.exe O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html O8 - Extra context menu item: &Ściągnij przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: &Ściągnij wszystko przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\Bartek\Dane aplikacji\Dealio\kb124\res\DealioSearch.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb124\Dealio.dll O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb124\Dealio.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: c:\progra~1\agnitum\outpos~1\wl_hook.dll,wbsys.dll O23 - Service: Icecast-trunk Streaming Media Server (Icecast-trunk) - Unknown owner - C:\Program Files\Icecast2 Win32\icecastService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe -- End of file - 7865 bytes

Bardzo prosiłbym o pomoc w imieniu usera Bambosza . Z góry wielkie thx

**Posty:** 35 · przez **huber2t** 21 Sie 2008, 11:57

fix w hijackthis

O2 - BHO: Skype Control Class - {9018F6A8-2495-45DF-9F16-C738F8F3C8FF} - C:\WINDOWS\system32\SkypeComm.dll
O4 - HKLM\..\Run: [Microsoft Updates] svehost.exe
O4 - HKLM\..\RunServices: [Microsoft Updates] svehost.exe

Pobierz ComboFix, ale nie uruchamiaj
Otwórz notatnik i wklej do niego:

Kod: Zaznacz wszystko: File:: C:\WINDOWS\svchost.exe

Plik -> zapisz jako -> CFScript.txt.
Przeciągnij i upuść ikonkę CFScript.txt na ikonkę ComboFix.exe tak jak tu->

Rozpocznie się usuwanie i powstanie log, który dasz na forum.

Logi dajesz na wklej.eu lub na http://wklej.org a w poście dajesz tylko link

**Posty:** 204 · przez **Dodge321** 21 Sie 2008, 12:16

http://www.wklej.org/id/71/ prosze o to log

PS Bambosza zdziwił ten plik... 2008-08-17 00:14 . 2008-08-17 00:15 20 --a------ C:\WINDOWS\disney.ini co to może być?

**Posty:** 35 · przez **huber2t** 21 Sie 2008, 12:20

Log wyglada na czysty

usuń ręcznie folder C: \Qoobox , usuń instalkę Combofix z dysku.

Przeczyść komputer Ccleanerem

Wyłącz i włącz przywracanie systemu na wszystkich dyskach. Instrukcja

Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum

lub

Dr.WEB CureIt!

**Posty:** 204 · przez **Dodge321** 21 Sie 2008, 12:24

plik svchost.exe.vir nie chce sie usunac, odmowa dostepu

**Posty:** 35 · przez **huber2t** 21 Sie 2008, 12:32

Poaj nam ścieżkę do niego

**Posty:** 99 · przez **alamakota** 21 Sie 2008, 12:34

C:\WINDOWS\disney.ini

Witam,
Szukając odpowiedzi na Twoje pytanie natknęłam sie na taką oto stronę:

http://disney.go.com/DisneyInteractive/

Disney Interactive Studios - Video Games,wpis jest od tego własnie programiku.
A program ten powinien się znajdować w tej lokalizacji:

C: \ Program Files \ Disney Interactive

oczywiście jeśli jeszcze nie został usunięty.

**Posty:** 2647 · przez **Bambosz** 21 Sie 2008, 12:48

huber2t napisał(a):Poaj nam ścieżkę do niego

juz usunalem :wink:

ale poprawy nie ma, ogolnie jest to troche dziwna sytuacja, chwile po podlaczeniu sie do sieci (dzieje sie tak niezaleznie od sieci do ktorej sie podlacze) net chodzi przez ok.2 minuty, po tym czasie chodzi dalej, ale strony juz sie nie otwieraja :cry:

**Posty:** 8001 · przez **Okocza** 21 Sie 2008, 12:48

zastosuj sdfixa i wwdc - na forum są linki do nich

**Posty:** 2647 · przez **Bambosz** 21 Sie 2008, 15:54

okocza napisał(a):sdfixa

Raport:

Kod: Zaznacz wszystko: [b]SDFix: Version 1.218 [/b] Run by Administrator on 2008-08-21 at 13:16 Microsoft Windows XP [Wersja 5.1.2600] Running From: C:\SDfix\SDFix [b]Checking Services [/b]: Restoring Default Security Values Restoring Default Hosts File Rebooting [b]Checking Files [/b]: Trojan Files Found: C:\WINDOWS\svchost.exe - Deleted Removing Temp Files [b]ADS Check [/b]: [b]Final Check [/b]: catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-08-21 13:20:10 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden services & system hive ... [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg] "s1"=dword:2df9c43f "s2"=dword:110480d0 "h0"=dword:00000002 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC] "h0"=dword:00000001 "hdf12"=hex:75,bc,8b,4e,f0,bb,1d,60,f1,b7,b1,18,c3,79,b7,e6,b0,16,8e,d0,67,.. "p0"="D:\Program Files\DAEMON Tools Pro\" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001] "a0"=hex:20,01,00,00,81,3e,51,ec,81,38,fa,23,21,e6,47,d5,df,e8,19,14,c7,.. "hdf12"=hex:ea,60,7d,84,d5,fe,b8,38,62,92,fc,a5,9f,37,c9,60,ce,c1,24,b2,a1,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0] "hdf12"=hex:a5,a6,d4,1d,8c,1a,cd,34,ea,b7,d8,a8,be,84,83,9f,b4,fc,c8,ef,46,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq1] "hdf12"=hex:38,77,37,8b,08,fb,27,bb,87,8b,48,a9,4b,f7,d8,3b,cf,8d,fe,22,51,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "h0"=dword:00000000 "khjeh"=hex:67,d7,ec,a1,4d,22,ae,55,e8,13,00,a7,8e,02,a3,21,6a,55,fc,81,42,.. "p0"="C:\Program Files\DAEMON Tools Lite\" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,0c,30,44,ec,7c,4d,78,6b,64,ce,fc,9c,10,20,d1,72,02,.. "khjeh"=hex:95,61,1d,06,e9,c6,8c,a3,f5,ae,06,31,05,90,fd,a4,f8,b0,69,f2,33,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:a2,26,60,8b,37,3d,c1,af,0d,fc,14,33,fb,a9,6a,7d,39,a8,19,50,38,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41] "khjeh"=hex:ca,85,65,76,00,79,f6,d3,11,68,01,9e,f7,7a,5d,9a,86,bf,2b,ea,33,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC] "h0"=dword:00000001 "hdf12"=hex:75,bc,8b,4e,f0,bb,1d,60,f1,b7,b1,18,c3,79,b7,e6,b0,16,8e,d0,67,.. "p0"="D:\Program Files\DAEMON Tools Pro\" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001] "a0"=hex:20,01,00,00,81,3e,51,ec,81,38,fa,23,21,e6,47,d5,df,e8,19,14,c7,.. "hdf12"=hex:ea,60,7d,84,d5,fe,b8,38,62,92,fc,a5,9f,37,c9,60,ce,c1,24,b2,a1,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0] "hdf12"=hex:a5,a6,d4,1d,8c,1a,cd,34,ea,b7,d8,a8,be,84,83,9f,b4,fc,c8,ef,46,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq1] "hdf12"=hex:38,77,37,8b,08,fb,27,bb,87,8b,48,a9,4b,f7,d8,3b,cf,8d,fe,22,51,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "h0"=dword:00000000 "khjeh"=hex:67,d7,ec,a1,4d,22,ae,55,e8,13,00,a7,8e,02,a3,21,6a,55,fc,81,42,.. "p0"="C:\Program Files\DAEMON Tools Lite\" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,0c,30,44,ec,7c,4d,78,6b,64,ce,fc,9c,10,20,d1,72,02,.. "khjeh"=hex:95,61,1d,06,e9,c6,8c,a3,f5,ae,06,31,05,90,fd,a4,f8,b0,69,f2,33,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:a2,26,60,8b,37,3d,c1,af,0d,fc,14,33,fb,a9,6a,7d,39,a8,19,50,38,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41] "khjeh"=hex:ca,85,65,76,00,79,f6,d3,11,68,01,9e,f7,7a,5d,9a,86,bf,2b,ea,33,.. scanning hidden registry entries ... [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher] "TracesProcessed"=dword:00000068 "TracesSuccessful"=dword:00000001 scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 [b]Remaining Services [/b]: Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "C:\\WINDOWS\\system32\\PnkBstrA.exe"="C:\\WINDOWS\\system32\\PnkBstrA.exe:*:Enabled:PnkBstrA" "C:\\WINDOWS\\system32\\PnkBstrB.exe"="C:\\WINDOWS\\system32\\PnkBstrB.exe:*:Enabled:PnkBstrB" "C:\\Program Files\\BitLord\\BitLord.exe"="C:\\Program Files\\BitLord\\BitLord.exe:*:Enabled:BitLord" "C:\\Program Files\\uTorrent\\uTorrent.exe"="C:\\Program Files\\uTorrent\\uTorrent.exe:*:Enabled:uTorrent" "C:\\Program Files\\BitTornado\\btdownloadgui.exe"="C:\\Program Files\\BitTornado\\btdownloadgui.exe:*:Enabled:btdownloadgui" "C:\\Program Files\\BitLord2\\BitLord.exe"="C:\\Program Files\\BitLord2\\BitLord.exe:*:Enabled: " "C:\\Program Files\\Azureus\\Azureus.exe"="C:\\Program Files\\Azureus\\Azureus.exe:*:Enabled:Azureus" "C:\\Program Files\\The All-Seeing Eye\\eye.exe"="C:\\Program Files\\The All-Seeing Eye\\eye.exe:*:Enabled:Yahoo! All-Seeing Eye" "C:\\Program Files\\Xfire\\xfire.exe"="C:\\Program Files\\Xfire\\xfire.exe:*:Enabled:Xfire" "C:\\Program Files\\FlashGet\\flashget.exe"="C:\\Program Files\\FlashGet\\flashget.exe:*:Enabled:Flashget" "C:\\Program Files\\Gadu-Gadu\\gg.exe"="C:\\Program Files\\Gadu-Gadu\\gg.exe:*:Enabled:Gadu-Gadu - program g˘wny" "C:\\Program Files\\mIRC\\mirc.exe"="C:\\Program Files\\mIRC\\mirc.exe:*:Enabled:mIRC" "C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Firefox" "C:\\Program Files\\DC++\\DCPlusPlus.exe"="C:\\Program Files\\DC++\\DCPlusPlus.exe:*:Enabled:DC++" "C:\\Program Files\\eMule\\byzato.exe"="C:\\Program Files\\eMule\\byzato.exe:*:Enabled:eMule" "C:\\Program Files\\Puzzle Quest\\Puzzle Quest.exe"="C:\\Program Files\\Puzzle Quest\\Puzzle Quest.exe:*:Enabled:Puzzle Quest" "C:\\WINDOWS\\system32\\dpnsvr.exe"="C:\\WINDOWS\\system32\\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server" "C:\\Program Files\\SHOUTcast\\sc_serv.exe"="C:\\Program Files\\SHOUTcast\\sc_serv.exe:*:Enabled:sc_serv" "C:\\Program Files\\Icecast2 Win32\\Icecast2win.exe"="C:\\Program Files\\Icecast2 Win32\\Icecast2win.exe:*:Enabled:Icecast2win" "C:\\Program Files\\Cyanide\\GameCenter\\GameCenter.exe"="C:\\Program Files\\Cyanide\\GameCenter\\GameCenter.exe:*:Enabled:GameCenter" "D:\\Program Files\\Empire Interactive\\FlatOut Ultimate Carnage\\Fouc.exe"="D:\\Program Files\\Empire Interactive\\FlatOut Ultimate Carnage\\Fouc.exe:*:Enabled:FlatOut Ultimate Carnage" "C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" [b]Remaining Files [/b]: File Backups: - C:\SDfix\SDFix\backups\backups.zip [b]Files with Hidden Attributes [/b]: Sun 13 Apr 2008 1,599,488 ..SH. --- "C:\Documents and Settings\Bartek\Pulpit\Rhu8Y4_cfdg.exe" Mon 25 Feb 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp" Wed 7 May 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\05030212059e1b9876d47b8cf2fa5e95\BIT3.tmp" Mon 11 Aug 2008 4,490 ...HR --- "C:\Documents and Settings\Bartek\Dane aplikacji\SecuROM\UserData\securom_v7_01.bak" [b]Finished![/b]

CF:

Kod: Zaznacz wszystko: ComboFix 08-08-19.06 - Bartek 2008-08-21 15:36:07.5 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.988 [GMT 2:00] Running from: C:\Documents and Settings\Bartek\Pulpit\ComboFix.exe [color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color] . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_POWERMANAGER -------\Service_PowerManager ((((((((((((((((((((((((( Files Created from 2008-07-21 to 2008-08-21 ))))))))))))))))))))))))))))))) . 2008-08-21 13:14 . 2008-01-22 14:21 <DIR> d--h----- C:\Documents and Settings\Administrator.KOMPUTER_XP\Ustawienia lokalne 2008-08-21 13:14 . 2008-01-22 14:21 <DIR> d-------- C:\Documents and Settings\Administrator.KOMPUTER_XP\Ulubione 2008-08-21 13:14 . 2008-01-22 13:25 <DIR> d--h----- C:\Documents and Settings\Administrator.KOMPUTER_XP\Szablony 2008-08-21 13:14 . 2008-01-22 14:21 <DIR> d-------- C:\Documents and Settings\Administrator.KOMPUTER_XP\Pulpit 2008-08-21 13:14 . 2008-01-22 14:21 <DIR> d-------- C:\Documents and Settings\Administrator.KOMPUTER_XP\Moje dokumenty 2008-08-21 13:14 . 2008-01-22 14:21 <DIR> dr------- C:\Documents and Settings\Administrator.KOMPUTER_XP\Menu Start 2008-08-21 13:14 . 2008-01-22 14:21 <DIR> dr-h----- C:\Documents and Settings\Administrator.KOMPUTER_XP\Dane aplikacji 2008-08-21 13:14 . 2008-08-21 13:14 <DIR> d-------- C:\Documents and Settings\Administrator.KOMPUTER_XP 2008-08-21 12:59 . 2008-08-21 12:59 <DIR> d-------- C:\SDfix 2008-08-13 00:08 . 2008-08-13 00:08 42,320 --a------ C:\WINDOWS\system32\xfcodec.dll 2008-08-08 23:26 . 2008-08-08 23:26 <DIR> d-------- C:\Program Files\Cyanide 2008-08-06 23:20 . 2008-08-10 20:09 <DIR> d-------- C:\Documents and Settings\Bartek\Dane aplikacji\Moje pliki zapisu Bitwy o —r˘dziemie 2008-08-06 17:38 . 2008-08-06 17:38 <DIR> d-------- C:\Nowy folder 2008-08-04 21:32 . 2008-08-04 21:32 <DIR> d-------- C:\Program Files\Ontrack 2008-08-04 21:32 . 2001-03-02 11:41 634 --a------ C:\WINDOWS\system32\MAPISVC.INF 2008-08-03 23:34 . <DIR> C:\Documents and Settings\Bartek\Dane aplikacji\Moje pliki Bitwy o —r˘dziemiet II 2008-08-03 15:26 . 2008-08-03 15:30 171 --a------ C:\WINDOWS\icecast2.ini 2008-08-03 15:14 . 2008-08-03 15:14 <DIR> d-------- C:\Program Files\Icecast2 Win32 2008-08-03 14:49 . 2008-08-03 15:02 <DIR> d-------- C:\Program Files\SHOUTcast . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-08-21 13:39 --------- d-----w C:\Program Files\eMule 2008-08-21 13:39 --------- d-----w C:\Documents and Settings\Bartek\Dane aplikacji\Skype 2008-08-21 13:37 --------- d-----w C:\Program Files\FlashGet 2008-08-21 09:36 --------- d-----w C:\Program Files\Xfire 2008-08-21 09:23 --------- d-----w C:\Documents and Settings\Bartek\Dane aplikacji\skypePM 2008-08-20 15:43 --------- d-----w C:\Documents and Settings\Bartek\Dane aplikacji\foobar2000 2008-08-19 13:15 --------- d-----w C:\Documents and Settings\Bartek\Dane aplikacji\Xfire 2008-08-17 18:37 --------- d-----w C:\Program Files\NAPI-PROJEKT 2008-08-17 11:36 --------- d-----w C:\Program Files\foobar2000 2008-08-16 22:15 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-08-15 18:46 --------- d-----w C:\Program Files\thriXXX 2008-08-15 18:46 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Ubisoft 2008-08-14 09:34 --------- d-----w C:\Program Files\English Translator 3 2008-08-10 18:09 --------- d-----w C:\Documents and Settings\Bartek\Dane aplikacji\Moje pliki zapisu Bitwy o Śródziemie 2008-08-03 21:38 --------- d-----w C:\Documents and Settings\Bartek\Dane aplikacji\Moje pliki Bitwy o Śródziemie™ II 2008-08-03 13:26 --------- d-----w C:\Program Files\Winamp 2008-07-31 17:14 --------- d-----w C:\Program Files\Deutsch Translator 2 2008-07-16 16:44 --------- d-----w C:\Program Files\Dziobas Rar Player 2008-07-16 16:40 --------- d-----w C:\Program Files\Xvid 2008-07-16 16:37 --------- d-----w C:\Program Files\MediaInfo 2008-07-14 10:55 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Codemasters 2008-07-11 17:16 --------- d-----r C:\Program Files\SubEdit-Player 2008-07-08 16:56 --------- d-----w C:\Documents and Settings\Bartek\Dane aplikacji\uTorrent 2008-07-04 23:19 --------- d-----w C:\Program Files\CureROM 2008-07-04 19:43 --------- d--h--r C:\Documents and Settings\Bartek\Dane aplikacji\SecuROM 2008-07-04 19:41 --------- d-----w C:\Program Files\DAEMON Tools Lite 2008-07-04 12:43 --------- d-----w C:\Documents and Settings\Bartek\Dane aplikacji\dvdcss 2008-07-03 18:36 --------- d-----w C:\Program Files\OpenAL 2008-07-02 18:31 --------- d-----w C:\Program Files\Asystent Plusfon 601i 2008-06-30 18:01 --------- d-----w C:\Documents and Settings\Bartek\Dane aplikacji\Mp3tag 2008-06-30 18:00 --------- d-----w C:\Program Files\Mp3tag 2008-06-30 15:02 --------- d-----w C:\Program Files\CubeDesktop 2008-06-30 14:52 --------- d-----w C:\Program Files\AlienGUIse 2008-06-30 12:47 --------- d-----w C:\Documents and Settings\Bartek\Dane aplikacji\Consultia 2008-06-30 10:53 --------- d-----w C:\Program Files\UltraStar 2008-06-30 09:21 --------- d-----w C:\Program Files\DVD Shrink 2008-06-30 09:20 --------- d-----w C:\Program Files\Aston 2008-06-30 09:20 --------- d-----w C:\Documents and Settings\Bartek\Dane aplikacji\Aston 2008-06-30 09:20 --------- d-----w C:\Documents and Settings\a\Dane aplikacji\Aston 2008-06-29 10:07 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\DVD Shrink 2008-06-27 17:35 --------- d-----w C:\Documents and Settings\Bartek\Dane aplikacji\Vso 2008-06-26 08:04 --------- d-----w C:\Program Files\Free WMA to MP3 Converter 2008-06-26 08:02 --------- d-----w C:\Program Files\ImTOO 2008-06-25 15:31 --------- d-----w C:\Program Files\ePSXe 2008-06-25 09:36 --------- d-----w C:\Program Files\The KMPlayer 2008-06-25 08:53 --------- d-----w C:\Program Files\Real Desktop 2008-06-23 08:31 --------- d-----w C:\Program Files\Skype 2008-06-23 08:31 --------- d-----w C:\Program Files\Common Files\Skype 2008-06-23 08:31 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Skype 2008-06-21 19:40 --------- d-----w C:\Documents and Settings\Bartek\Dane aplikacji\Hamachi 2008-06-21 11:11 --------- d-----w C:\Program Files\Puzzle Quest 2008-04-18 16:35 22,328 ----a-w C:\Documents and Settings\Bartek\Dane aplikacji\PnkBstrK.sys 2008-01-29 17:51 47,360 ----a-w C:\Documents and Settings\Bartek\Dane aplikacji\pcouffin.sys 2008-01-22 11:31 16,384 --sha-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat 2008-01-22 11:31 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\index.dat 2008-01-22 11:31 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\MSHist012008012220080123\index.dat 2008-01-22 11:31 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{57BCA5FA-5DBB-45a2-B558-1755C3F6253B}"= "C:\Program Files\Winamp Toolbar\winamptb.dll" [2008-03-20 00:36 1267040] [HKEY_CLASSES_ROOT\clsid\{57bca5fa-5dbb-45a2-b558-1755c3f6253b}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLTBSearch.1] [HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLTBSearch] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 10:21 1694208] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 01:44 15360] "Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-11-14 12:54 2131392] "Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2008-05-30 15:54 21718312] "eMuleAutoStart"="C:\Program Files\eMule\byzato.exe" [2007-05-13 16:57 5308416] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-12-05 02:41 8523776] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-12-05 02:41 81920] "Flashget"="C:\Program Files\FlashGet\flashget.exe" [2007-09-25 10:10 2007088] "au"="C:\Program Files\Dealio\DealioAU.exe" [2007-10-09 12:47 492896] "RTHDCPL"="RTHDCPL.EXE" [2007-07-05 10:08 16380416 C:\WINDOWS\RTHDCPL.exe] "nwiz"="nwiz.exe" [2007-12-05 02:41 1626112 C:\WINDOWS\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 01:44 15360] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "nltide_2"="shell32" [X] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ Ralink Wireless Utility.lnk - C:\Program Files\RALINK\Common\RaUI.exe [2008-02-21 18:54:15 1142784] Xfire.lnk - C:\Program Files\Xfire\xfire.exe [2008-08-13 00:08:52 3065168] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WB] 2001-12-20 23:34 24576 C:\Program Files\AlienGUIse\fastload.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.XFR1"= xfcodec.dll "msacm.l3fhg"= mp3fhg.acm "msacm.divxa32"= divxa32.acm "VIDC.X264"= x264vfw.dll "VIDC.HFYU"= huffyuv.dll "vidc.i263"= i263_32.drv [HKLM\~\startupfolder\C:^Documents and Settings^Bartek^Menu Start^Programy^Autostart^hamachi.lnk] path=C:\Documents and Settings\Bartek\Menu Start\Programy\Autostart\hamachi.lnk backup=C:\WINDOWS\pss\hamachi.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^Bartek^Menu Start^Programy^Autostart^Xfire.lnk] path=C:\Documents and Settings\Bartek\Menu Start\Programy\Autostart\Xfire.lnk backup=C:\WINDOWS\pss\Xfire.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite] --a------ 2008-04-01 11:39 523208 C:\Program Files\DAEMON Tools Lite\daemon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Pro Agent] --a------ 2007-06-22 14:45 168904 D:\Program Files\DAEMON Tools Pro\DTProAgent.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eMuleAutoStart] --a------ 2007-05-13 16:57 5308416 C:\Program Files\eMule\byzato.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Flashget] --a------ 2007-09-25 10:10 2007088 C:\Program Files\FlashGet\flashget.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadu-Gadu] --a------ 2007-11-14 12:54 2131392 C:\Program Files\Gadu-Gadu\gg.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] --a------ 2006-01-12 17:40 192000 C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] --a------ 2008-07-09 23:33 36352 C:\Program Files\Winamp\winampa.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "C:\\WINDOWS\\system32\\PnkBstrA.exe"= "C:\\WINDOWS\\system32\\PnkBstrB.exe"= "C:\\Program Files\\BitLord\\BitLord.exe"= "C:\\Program Files\\uTorrent\\uTorrent.exe"= "C:\\Program Files\\BitTornado\\btdownloadgui.exe"= "C:\\Program Files\\BitLord2\\BitLord.exe"= "C:\\Program Files\\Azureus\\Azureus.exe"= "C:\\Program Files\\The All-Seeing Eye\\eye.exe"= "C:\\Program Files\\Xfire\\xfire.exe"= "C:\\Program Files\\FlashGet\\flashget.exe"= "C:\\Program Files\\Gadu-Gadu\\gg.exe"= "C:\\Program Files\\mIRC\\mirc.exe"= "C:\\Program Files\\Mozilla Firefox\\firefox.exe"= "C:\\Program Files\\DC++\\DCPlusPlus.exe"= "C:\\Program Files\\eMule\\byzato.exe"= "C:\\Program Files\\Puzzle Quest\\Puzzle Quest.exe"= "C:\\WINDOWS\\system32\\dpnsvr.exe"= "C:\\Program Files\\SHOUTcast\\sc_serv.exe"= "C:\\Program Files\\Icecast2 Win32\\Icecast2win.exe"= "C:\\Program Files\\Cyanide\\GameCenter\\GameCenter.exe"= "D:\\Program Files\\Empire Interactive\\FlatOut Ultimate Carnage\\Fouc.exe"= "C:\\Program Files\\Skype\\Phone\\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "50910:TCP"= 50910:TCP:eMule "24214:UDP"= 24214:UDP:eMule R2 Icecast-trunk;Icecast-trunk Streaming Media Server;C:\Program Files\Icecast2 Win32\icecastService.exe C:\Program Files\Icecast2 Win32 [] S3 qcusbser;ZTE USB Device for Legacy Serial Communication;C:\WINDOWS\system32\DRIVERS\ZTEusbmdm.sys [2007-04-04 09:54] . . ------- Supplementary Scan ------- . FireFox -: Profile - C:\Documents and Settings\Bartek\Dane aplikacji\Mozilla\Firefox\Profiles\[u]0[/u]rxuet22.default\ FF -: plugin - C:\Program Files\Adobe\Acrobat 6.0\Reader\browser\nppdf32.dll FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npclntax_ZangoSA.dll FF -: plugin - C:\Program Files\thriXXX\WebLaunch\Binaries\npWebLaunch.dll FF -: plugin - C:\Program Files\Yahoo!\Common\npyaxmpb.dll . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-08-21 15:38:50 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . ------------------------ Other Running Processes ------------------------ . C:\Program Files\Icecast2 Win32\icecastService.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\PnkBstrB.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\FlashGet\flashget.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe . ************************************************************************** . Completion time: 2008-08-21 15:40:29 - machine was rebooted ComboFix-quarantined-files.txt 2008-08-21 13:40:26 ComboFix2.txt 2008-08-21 10:12:53 Pre-Run: 2,549,731,328 bajtów wolnych Post-Run: 2,542,772,224 bajt˘w wolnych 230 --- E O F --- 2008-08-16 15:54:07

**Posty:** 8001 · przez **Okocza** 21 Sie 2008, 15:58

1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp

2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
5. Przeskanuj komputer pod względem Trojanów tym programem
6. Wstaw na forum screen z zakładki uruchamianie (start – uruchom – msconfig – uruchamianie) może uda się cos wyrzucic stamtąd.

**Posty:** 2647 · przez **Bambosz** 21 Sie 2008, 16:23

okocza napisał(a):6. Wstaw na forum screen z zakładki uruchamianie (start – uruchom – msconfig – uruchamianie) może uda się cos wyrzucic stamtąd.

http://up.programosy.pl/view/bez_tytulu_183.png.html
wszystkie nizej wylaczone

**Posty:** 8001 · przez **Okocza** 21 Sie 2008, 16:27

nwiz
dealioau
msmsgs
xfire

i bedzie ok