Problem z portem usb

[poohx77]

Witam. Nie mogę od jakiegoś czasu otworzyć żadnych urządzeń podłączanych do USB. Wyskakuje mi okno z wyborem program do otwarcia urządzenia...Nieważne czy jest to Pendrive czy telefon. Help...

[Wojtasgls]

Na sam poczatek sprawdzil bym kompa pod wzgledem wirusow. Czesty objaw nie mozliwosc otwierania dyskow itp.

hj + combo fix logi zaposc

hijackthis-silent-runners-obsluga-i-umieszczanie-vt9452.html
jak-generujemy-logi-z-combofixa-oraz-dssa-vt95026.html

Czy to wyglada mniej wiecej.. podlaczasz np. pendriva wyskakuje komunikat ze znajduje nowy sprzet. Wchodzisz w moj komputer otwierasz pamiec przenosna i ci wyskakuje wtedy ta komenda jakim programem to otworzyc?

[poohx77]

wkładam pena i komp znajduje normalnie dysk wymienny ale nie mogę żadnym sposobem go otworzyć.
HJ:

Kod: Zaznacz wszystko

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:54:58 , on 2008-10-17
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\MULTI-MEDIA OPTICAL MOUSE\MULTI-MEDIA OPTICAL MOUSE\1.4\MOUSE32A.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\DAEMON Tools Pro\DTProAgent.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkId=54843
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\MULTI-MEDIA OPTICAL MOUSE\MULTI-MEDIA OPTICAL MOUSE\1.4\MOUSE32A.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Dodaj do listy blokowanych banerów - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Statystyki ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mks.com.pl
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{8C6C8487-C48C-4905-BA31-9070839E39C7}: NameServer = 213.241.79.37 83.238.255.76
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: Usługa bramy warstwy aplikacji (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe

--
End of file - 6295 bytes


combofix:

Kod: Zaznacz wszystko

ComboFix 08-10-16.08 - PooH 2008-10-17 13:59:47.3 - NTFSx86
Microsoft Windows XP Home Edition  5.1.2600.3.1250.1.1045.18.2582 [GMT 2:00]
Uruchomiony z: C:\Documents and Settings\PooH\Pulpit\ComboFix.exe
* Utworzono nowy punkt przywracania
.

(((((((((((((((((((((((((((((((((((((((   Usunięto   )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\autorun.inf
E:\Autorun.inf
F:\Autorun.inf

.
(((((((((((((((((((((((((   Pliki utworzone od 2008-09-17 do 2008-10-17  )))))))))))))))))))))))))))))))
.

2008-10-15 13:18 . 2008-10-15 13:18   <DIR>   d--------   C:\Program Files\Common Files\Adobe
2008-10-15 13:17 . 2008-03-05 15:56   3,786,760   --a------   C:\WINDOWS\system32\D3DX9_37.dll
2008-10-15 13:17 . 2008-03-05 15:56   1,420,824   --a------   C:\WINDOWS\system32\D3DCompiler_37.dll
2008-10-15 13:17 . 2008-03-05 16:03   479,752   --a------   C:\WINDOWS\system32\XAudio2_0.dll
2008-10-15 13:17 . 2008-02-05 23:07   462,864   --a------   C:\WINDOWS\system32\d3dx10_37.dll
2008-10-15 13:17 . 2008-03-05 16:03   238,088   --a------   C:\WINDOWS\system32\xactengine3_0.dll
2008-10-15 13:17 . 2008-03-05 16:00   25,608   --a------   C:\WINDOWS\system32\X3DAudio1_3.dll
2008-10-14 16:42 . 2008-10-14 16:42   <DIR>   d--------   C:\Documents and Settings\PooH\Dane aplikacji\Sony
2008-10-14 16:42 . 2008-10-14 16:42   <DIR>   d--------   C:\Documents and Settings\All Users\Dane aplikacji\Sony
2008-10-14 16:39 . 2008-10-14 16:39   <DIR>   d--------   C:\Program Files\Sony
2008-10-14 16:24 . 2008-10-14 16:24   <DIR>   d--------   C:\Program Files\Avanquest update
2008-10-14 16:24 . 2008-10-14 16:24   <DIR>   d--------   C:\Documents and Settings\All Users\Dane aplikacji\BVRP Software
2008-10-09 17:16 . 2008-10-09 17:16   <DIR>   d--------   C:\Program Files\Kaspersky Lab
2008-10-09 17:16 . 2008-10-17 14:05   <DIR>   d--------   C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab
2008-10-09 17:16 . 2008-10-15 13:18   3,903,008   --ahs----   C:\WINDOWS\system32\drivers\fidbox.dat
2008-10-09 17:16 . 2008-10-17 14:02   589,856   --ahs----   C:\WINDOWS\system32\drivers\fidbox2.dat
2008-10-09 17:16 . 2008-10-09 17:27   96,976   --a------   C:\WINDOWS\system32\drivers\klin.dat
2008-10-09 17:16 . 2008-10-09 17:27   87,855   --a------   C:\WINDOWS\system32\drivers\klick.dat
2008-10-09 17:16 . 2008-10-15 13:18   33,668   --ahs----   C:\WINDOWS\system32\drivers\fidbox.idx
2008-10-09 17:16 . 2008-10-17 14:00   5,192   --ahs----   C:\WINDOWS\system32\drivers\fidbox2.idx
2008-10-09 15:58 . 2008-10-09 15:58   <DIR>   d--------   C:\Program Files\Gigabyte
2008-10-09 15:58 . 1998-10-03 03:00   327,168   --a------   C:\WINDOWS\IsUninst.exe
2008-10-07 12:31 . 2008-09-17 09:55   201,050   --a------   C:\WINDOWS\system32\nvapps.nvb
2008-10-06 19:24 . 2008-10-07 12:42   <DIR>   d--------   C:\WINDOWS\nview
2008-10-06 19:24 . 2008-09-16 21:27   453,152   --a------   C:\WINDOWS\system32\NVUNINST.EXE
2008-10-06 19:24 . 2008-09-17 09:55   453,152   --a------   C:\WINDOWS\system32\nvudisp.exe
2008-10-06 19:24 . 2008-10-17 14:05   195,261   --a------   C:\WINDOWS\system32\nvapps.xml
2008-10-06 19:24 . 2008-09-17 09:55   18,394   --a------   C:\WINDOWS\system32\nvdisp.nvu
2008-10-06 18:55 . 2008-10-06 18:55   <DIR>   d--------   C:\Program Files\SystemRequirementsLab
2008-10-06 18:55 . 2008-10-06 18:55   <DIR>   d--------   C:\Documents and Settings\PooH\SystemRequirementsLab
2008-10-05 16:53 . 2008-10-05 16:53   <DIR>   d--------   C:\!KillBox
2008-10-05 10:10 . 2008-10-05 10:10   361,728   --a------   C:\WINDOWS\system32\TuneUpDefragService.exe
2008-10-05 10:10 . 2008-07-18 15:05   28,416   --a------   C:\WINDOWS\system32\uxtuneup.dll
2008-10-05 10:09 . 2008-10-05 10:11   <DIR>   d--------   C:\Program Files\TuneUp Utilities 2008
2008-10-04 22:26 . 2008-10-04 22:26   862   --a------   C:\WINDOWS\wininit.ini
2008-10-04 16:50 . 2008-10-04 16:50   <DIR>   d--------   C:\Program Files\Lavalys
2008-10-04 14:41 . 2008-10-09 17:01   <DIR>   d--------   C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy

.
((((((((((((((((((((((((((((((((((((((((   Sekcja Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-17 05:24   ---------   d-----w   C:\Documents and Settings\PooH\Dane aplikacji\uTorrent
2008-10-15 12:56   ---------   d-----w   C:\Documents and Settings\PooH\Dane aplikacji\Skype
2008-10-14 14:39   ---------   d-----w   C:\Program Files\Sony Ericsson
2008-10-14 14:24   ---------   d--h--w   C:\Program Files\InstallShield Installation Information
2008-10-14 14:23   ---------   d-----w   C:\Documents and Settings\All Users\Dane aplikacji\Sony Ericsson
2008-10-13 18:46   ---------   d-----w   C:\Program Files\NAPI-PROJEKT
2008-10-12 22:39   ---------   d-----w   C:\Documents and Settings\PooH\Dane aplikacji\Corel
2008-10-11 14:03   ---------   d-----w   C:\Program Files\Winamp
2008-10-09 15:15   ---------   d-----w   C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files
2008-10-09 15:01   ---------   d-----w   C:\Program Files\SkanerOnline
2008-10-09 14:59   ---------   d-----w   C:\Documents and Settings\All Users\Dane aplikacji\F-Secure
2008-10-06 17:25   ---------   d-----w   C:\Program Files\Common Files\Wise Installation Wizard
2008-10-06 17:25   ---------   d-----w   C:\Program Files\AGEIA Technologies
2008-10-04 20:26   ---------   d-----w   C:\Program Files\BearShare
2008-10-04 12:29   ---------   d-----w   C:\Documents and Settings\All Users\Dane aplikacji\Lavasoft
2008-10-04 11:56   53,448   ----a-w   C:\WINDOWS\system32\wuauclt.exe
2008-10-04 11:26   ---------   d-----w   C:\Documents and Settings\PooH\Dane aplikacji\Apple Computer
2008-09-17 21:27   ---------   d-----w   C:\Program Files\uTorrent
2008-09-09 20:26   ---------   d-----w   C:\Documents and Settings\PooH\Dane aplikacji\skypePM
2008-09-04 07:31   288,024   ----a-w   C:\WINDOWS\system32\PhysXCplUI.exe
2008-08-31 13:53   ---------   d-----w   C:\Program Files\Panda Security
2008-08-29 06:57   70,936   ----a-w   C:\WINDOWS\system32\PhysXLoader.dll
2008-08-26 15:02   ---------   d-----w   C:\Documents and Settings\PooH\Dane aplikacji\THQ
2008-07-18 20:10   94,920   ----a-w   C:\WINDOWS\system32\cdm.dll
2008-07-18 20:10   45,768   ----a-w   C:\WINDOWS\system32\wups2.dll
2008-07-18 20:10   36,552   ----a-w   C:\WINDOWS\system32\wups.dll
2008-07-18 20:09   563,912   ----a-w   C:\WINDOWS\system32\wuapi.dll
2008-07-18 20:09   325,832   ----a-w   C:\WINDOWS\system32\wucltui.dll
2008-07-18 20:09   205,000   ----a-w   C:\WINDOWS\system32\wuweb.dll
2008-07-18 20:09   1,811,656   ----a-w   C:\WINDOWS\system32\wuaueng.dll
2008-01-05 19:37   32   ----a-w   C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat
2007-11-05 16:27   1   ----a-w   C:\Documents and Settings\PooH\SI.bin
2007-09-17 18:06   476,752   ----a-w   C:\Documents and Settings\All Users\Dane aplikacji\pswi_preloaded.exe
2007-10-27 18:29   88   --sh--r   C:\WINDOWS\system32\5662E81A33.sys
2007-11-27 18:53   88   --sh--r   C:\WINDOWS\system32\DD0710FBDB.sys
2007-12-14 20:27   3,454   --sha-w   C:\WINDOWS\system32\KGyGaAvL.sys
.

------- Sigcheck -------

2008-04-14 19:21  112128  9a19ba6d99b8ec3db5b3eff71b0a0bb5   C:\WINDOWS\ServicePackFiles\i386\wuauclt.exe
2008-10-04 13:56  53448  c6de6191dc719d185fea9d1960f6a0c6   C:\WINDOWS\system32\wuauclt.exe
2008-07-18 22:10  53448  d316e28958873859b88d72cf47ad1ea5   C:\WINDOWS\system32\dllcache\wuauclt.exe
.
(((((((((((((((((((((((((((((((((((((   Wpisy startowe rejestru   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Pro Agent"="C:\Program Files\DAEMON Tools Pro\DTProAgent.exe" [2007-09-06 136136]
"Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" [2008-02-20 360448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpeedTouch USB Diagnostics"="C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" [2004-08-06 877568]
"LWBMOUSE"="C:\Program Files\MULTI-MEDIA OPTICAL MOUSE\MULTI-MEDIA OPTICAL MOUSE\1.4\MOUSE32A.EXE" [2004-11-24 365568]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-05-27 413696]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2008-09-17 13574144]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2008-09-17 86016]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 39792]
"AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [2008-04-25 201992]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.iac2"= C:\PROGRA~1\ACEMEG~1\SystemS\Intel\iac25_32.ax
"vidc.ffds"= C:\PROGRA~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll
"msacm.avis"= ff_acm.acm
"msacm.sl_anet"= C:\PROGRA~1\ACEMEG~1\SystemS\sl_anet.acm
"vidc.yv12"= C:\PROGRA~1\ACEMEG~1\SystemS\ATI\atiyuv12.DLL
"vidc.divx"= C:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivX520.dll
"vidc.iyuv"= C:\PROGRA~1\ACEMEG~1\SystemS\Intel\iyuv_32.dll
"vidc.yvu9"= C:\PROGRA~1\ACEMEG~1\SystemS\Intel\Iyvu9_32.dll
"vidc.uyvy"= C:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll
"vidc.yuy2"= C:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll
"vidc.yvyu"= C:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]
--a------ 2008-07-22 20:42 116040 C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google IME Autoupdater]
--a------ 2008-01-07 12:15 251376 C:\Program Files\Google\Google Pinyin\GooglePinyinDaemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2006-01-12 15:40 155648 C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2008-06-10 04:27 144784 C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
--a------ 2008-09-17 09:55 1657376 C:\WINDOWS\system32\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
-r------- 2006-10-30 05:49 16269312 C:\WINDOWS\RTHDCPL.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
-r------- 2006-05-16 04:04 2879488 C:\WINDOWS\SkyTel.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Tweak UI]
--a------ 2003-03-25 06:49 106544 C:\WINDOWS\system32\tweakui.cpl

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"WebClient"=2 (0x2)
"LmHosts"=2 (0x2)
"NVSvc"=2 (0x2)
"seclogon"=2 (0x2)
"FSAUA"=3 (0x3)
"ERSvc"=2 (0x2)
"wscsvc"=2 (0x2)
"SharedAccess"=2 (0x2)
"WMPNetworkSvc"=3 (0x3)
"TuneUp.Defrag"=3 (0x3)
"ose"=3 (0x3)
"odserv"=3 (0x3)
"Apple Mobile Device"=2 (0x2)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" /tray
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=

R0 klbg;Kaspersky Lab Boot Guard Driver;C:\WINDOWS\system32\drivers\klbg.sys [2008-01-29 32784]
R0 pavboot;pavboot;C:\WINDOWS\system32\drivers\pavboot.sys [2008-06-19 28544]
R3 KLFLTDEV;Kaspersky Lab KLFltDev;C:\WINDOWS\system32\DRIVERS\klfltdev.sys [2008-03-13 26640]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\DRIVERS\klim5.sys [2008-03-25 24592]
S3 s3017bus;Sony Ericsson Device 3017 driver (WDM);C:\WINDOWS\system32\DRIVERS\s3017bus.sys [2007-12-10 83880]
S3 s3017mdfl;Sony Ericsson Device 3017 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\s3017mdfl.sys [2007-12-10 15016]
S3 s3017mdm;Sony Ericsson Device 3017 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\s3017mdm.sys [2007-12-10 110632]
S3 s3017mgmt;Sony Ericsson Device 3017 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\s3017mgmt.sys [2007-12-10 104616]
S3 s3017nd5;Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (NDIS);C:\WINDOWS\system32\DRIVERS\s3017nd5.sys [2007-12-10 25512]
S3 s3017obex;Sony Ericsson Device 3017 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\s3017obex.sys [2007-12-10 100648]
S3 s3017unic;Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (WDM);C:\WINDOWS\system32\DRIVERS\s3017unic.sys [2007-12-10 110120]
S4 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-10-05 361728]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G]
\Shell\AutoRun\command - G:\Autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\J]
\Shell\AutoRun\command - J:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{40c98f7b-f50f-11dc-998d-000e50b4ebe2}]
\Shell\AutoRun\command - vva0hc0p.cmd
\Shell\explore\Command - vva0hc0p.cmd
\Shell\open\Command - vva0hc0p.cmd

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7a65d99c-9521-11dd-b451-000e50b4ebe2}]
\Shell\AutoRun\command - vva0hc0p.cmd
\Shell\explore\Command - vva0hc0p.cmd
\Shell\open\Command - vva0hc0p.cmd
.
Zawartość folderu 'Zaplanowane zadania'

2008-10-17 C:\WINDOWS\Tasks\Konserwacja jednym kliknięciem.job
- C:\Program Files\TuneUp Utilities 2008\OneClickStarter.exe [2008-08-27 12:09]
.
- - - - USUNIĘTO PUSTE WPISY - - - -

HKU-Default-Run-CTFMON.EXE - C:\WINDOWS\system32\CTFMON.EXE
MSConfigStartUp-CTFMON - C:\WINDOWS\system32\ctfmon.exe
MSConfigStartUp-iTunesHelper - C:\Program Files\iTunes\iTunesHelper.exe
MSConfigStartUp-kamsoft - C:\WINDOWS\system32\ckvo.exe
MSConfigStartUp-SpybotSD TeaTimer - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe


.
------- Skan uzupełniający -------
.
FireFox -: Profile - C:\Documents and Settings\PooH\Dane aplikacji\Mozilla\Firefox\Profiles\1jx97o8u.default\
FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://google.pl
FF -: plugin - C:\Documents and Settings\PooH\Dane aplikacji\Mozilla\Firefox\Profiles\1jx97o8u.default\extensions\SignPlugin@bph.pl\plugins\NPSignPlugin.dll
FF -: plugin - C:\Program Files\Adobe\Acrobat 7.0\Reader\browser\nppdf32.dll
FF -: plugin - C:\Program Files\DivX\DivX Content Uploader\npUpload.dll
FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npganymedenet.dll
FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npoctoshape.dll
FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\NPSignPlugin.dll
FF -: plugin - C:\Program Files\QuickTime\Plugins\npqtplugin8.dll
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-17 14:05:35
Windows 5.1.2600 Dodatek Service Pack 3 NTFS

skanowanie ukrytych procesów ...

skanowanie ukrytych wpisów autostartu ...

skanowanie ukrytych plików ...

skanowanie pomyślnie ukończone
ukryte pliki: 0

**************************************************************************
.
------------------------ Pozostałe uruchomione procesy ------------------------
.
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\UAService7.exe
C:\WINDOWS\system32\rundll32.exe
.
**************************************************************************
.
Czas ukończenia: 2008-10-17 14:07:49 - komputer został uruchomiony ponownie
ComboFix-quarantined-files.txt  2008-10-17 12:07:44

Przed: 8 853 090 304 bajtów wolnych
Po: 8,848,252,928 bajtów wolnych

WindowsXP-KB310994-SP2-Home-BootDisk-PLK.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect /usepmtimer

253   --- E O F ---   2008-09-09 20:45:09