z win xp sp2

**Posty:** 128 · przez **arusiek** 13 Lis 2007, 22:25

Witam wszystkich. Mam problem związany z windows xp sp2 ?;> Ten error wyskakuje podczas odpalania jakiegoś folderu nie wiem czy to wylicza, na który ? Różnie to jest.

Kod: Zaznacz wszystko: OS: Windows XP Professional, SP2 CPU: AuthenticAMD, AMD AMD Duron(tm) p, MMX @ 1800 MHz Application data: VmVyc2lvbjogV2xGQlhVSlFWRlphUkU1RFJrTlZKQ2xTT3lRN1ZpQXN BQWRWUHlFOEl6QnpaSHQrZHpNa0lqc2tJelpGY25SOWVHcC9SemM3Uj NKNGIzRkRNUT09DQpJbWFnZUJhc2U6IDEwNTMwMDAwDQpFaXA6IDY1N kNFQjANCkVheDogMzUwMDAwMA0KRWN4OiAxMDZGNEEzQw0KRWR4OiAw DQpFYng6IDANCkVzaTogMTA2RjQ5ODQNCkVkaTogM0M2MDAwMA0KRWJ wOiAzMTNFNjRDDQpFc3A6IDMxM0U1MjANCi0xDQpDb2RlID0gWzIwNF 0NCi0gMA0KLSAyMDQNCi0gMjI3DQotIDANCi0gW10NCj4gQzpcV0lOR E9XU1xFeHBsb3Jlci5FWEUNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxu dGRsbC5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxrZXJuZWwzMi5 kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxBRFZBUEkzMi5kbGwNCj 4gQzpcV0lORE9XU1xzeXN0ZW0zMlxSUENSVDQuZGxsDQo+IEM6XFdJT kRPV1Ncc3lzdGVtMzJcU2VjdXIzMi5kbGwNCj4gQzpcV0lORE9XU1xz eXN0ZW0zMlxCUk9XU0VVSS5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0 zMlxHREkzMi5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxVU0VSMz IuZGxsDQo+IEM6XFdJTkRPV1Ncc3lzdGVtMzJcbXN2Y3J0LmRsbA0KP iBDOlxXSU5ET1dTXHN5c3RlbTMyXG9sZTMyLmRsbA0KPiBDOlxXSU5E T1dTXHN5c3RlbTMyXFNITFdBUEkuZGxsDQo+IEM6XFdJTkRPV1Ncc3l zdGVtMzJcT0xFQVVUMzIuZGxsDQo+IEM6XFdJTkRPV1Ncc3lzdGVtMz JcU0hET0NWVy5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxDUllQV DMyLmRsbA0KPiBDOlxXSU5ET1dTXHN5c3RlbTMyXE1TQVNOMS5kbGwN Cj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxDUllQVFVJLmRsbA0KPiBDOlx XSU5ET1dTXHN5c3RlbTMyXFdJTlRSVVNULmRsbA0KPiBDOlxXSU5ET1 dTXHN5c3RlbTMyXElNQUdFSExQLmRsbA0KPiBDOlxXSU5ET1dTXHN5c 3RlbTMyXE5FVEFQSTMyLmRsbA0KPiBDOlxXSU5ET1dTXHN5c3RlbTMy XFdJTklORVQuZGxsDQo+IEM6XFdJTkRPV1Ncc3lzdGVtMzJcV0xEQVA zMi5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxWRVJTSU9OLmRsbA 0KPiBDOlxXSU5ET1dTXHN5c3RlbTMyXFNIRUxMMzIuZGxsDQo+IEM6X FdJTkRPV1Ncc3lzdGVtMzJcVXhUaGVtZS5kbGwNCj4gQzpcV0lORE9X U1xzeXN0ZW0zMlxTaGltRW5nLmRsbA0KPiBDOlxXSU5ET1dTXEFwcFB hdGNoXEFjR2VucmFsLkRMTA0KPiBDOlxXSU5ET1dTXHN5c3RlbTMyXF dJTk1NLmRsbA0KPiBDOlxXSU5ET1dTXHN5c3RlbTMyXE1TQUNNMzIuZ GxsDQo+IEM6XFdJTkRPV1Ncc3lzdGVtMzJcVVNFUkVOVi5kbGwNCj4g QzpcV0lORE9XU1xXaW5TeFNceDg2X01pY3Jvc29mdC5XaW5kb3dzLkN vbW1vbi1Db250cm9sc182NTk1YjY0MTQ0Y2NmMWRmXzYuMC4yNjAwLj I5ODJfeC13d19hYzNmOWMwM1xjb21jdGwzMi5kbGwNCj4gQzpcV0lOR E9XU1xzeXN0ZW0zMlxjb21jdGwzMi5kbGwNCj4gQzpcV0lORE9XU1xz eXN0ZW0zMlxhcHBIZWxwLmRsbA0KPiBDOlxXSU5ET1dTXHN5c3RlbTM yXENMQkNBVFEuRExMDQo+IEM6XFdJTkRPV1Ncc3lzdGVtMzJcQ09NUm VzLmRsbA0KPiBDOlxXSU5ET1dTXFN5c3RlbTMyXGNzY3VpLmRsbA0KP iBDOlxXSU5ET1dTXFN5c3RlbTMyXENTQ0RMTC5kbGwNCj4gQzpcV0lO RE9XU1xTeXN0ZW0zMlx0aGVtZXVpLmRsbA0KPiBDOlxXSU5ET1dTXFN 5c3RlbTMyXE1TSU1HMzIuZGxsDQo+IEM6XFdJTkRPV1Ncc3lzdGVtMz JceHBzcDJyZXMuZGxsDQo+IEM6XFdJTkRPV1NcU3lzdGVtMzJcbXN1d GIuZGxsDQo+IEM6XFdJTkRPV1NcU3lzdGVtMzJcTVNDVEYuZGxsDQo+ IEM6XFdJTkRPV1Ncc3lzdGVtMzJcV0lOU1BPT0wuRFJWDQo+IEM6XFd JTkRPV1Ncc3lzdGVtMzJcdXJsbW9uLmRsbA0KPiBDOlxXSU5ET1dTXH N5c3RlbTMyXG50c2hydWkuZGxsDQo+IEM6XFdJTkRPV1Ncc3lzdGVtM zJcQVRMLkRMTA0KPiBDOlxXSU5ET1dTXHN5c3RlbTMyXGJyb3dzZWxj LmRsbA0KPiBDOlxQcm9ncmFtIEZpbGVzXEFkb2JlXEFjcm9iYXQgNi4 wIENFXFJlYWRlclxBY3RpdmVYXEFjcm9JRUhlbHBlci5kbGwNCg0KQW RvYmUgU3lzdGVtcyBJbmNvcnBvcmF0ZWQNCkFkb2JlIEFjcm9iYXQgS UUgSGVscGVyIFZlcnNpb24gNi4wIGZvciBBY3RpdmllWA0KNi4wLjEu MjAwMzExMDMwMA0KQWNyb0lFSGVscGVyDQpDb3B5cmlnaHQgMTk4NC0 yMDAzIEFkb2JlIFN5c3RlbXMgSW5jb3Jwb3JhdGVkIGFuZCBpdHMgbG ljZW5zb3JzLiBBbGwgcmlnaHRzIHJlc2VydmVkLg0KQWNyb0lFSGVsc GVyLkRMTA0KNiwgMCwgMCwgMA0KQWNyb0lFSGVscGVyIExpYnJhcnkN Cg0KPiBDOlxQcm9ncmFtIEZpbGVzXEdldFJpZ2h0XHh4MmdyLmRsbA0 KR2V0UmlnaHQncyBJRSAmIE5TIENsaWNrIE1vbml0b3JpbmcuICB3d3 cuZ2V0cmlnaHQuY29tDQpIZWFkbGlnaHQgU29mdHdhcmUsIEluYy4NC kdldFJpZ2h0J3MgSUUgJiBOUyBDbGljayBNb25pdG9yaW5nLiAgd3d3 LmdldHJpZ2h0LmNvbQ0KNi4zDQpYWDJHUg0KQ29weXJpZ2h0IKkgSGV hZGxpZ2h0IFNvZnR3YXJlLCBJbmMuDQpYWDJHUi5ETEwNCjYuMw0KR2 V0UmlnaHQNCg0KPiBDOlxXSU5ET1dTXHN5c3RlbTMyXGNvbWRsZzMyL mRsbA0KPiBDOlxXSU5ET1dTXHN5c3RlbTMyXFdTMl8zMi5kbGwNCj4g QzpcV0lORE9XU1xzeXN0ZW0zMlxXUzJIRUxQLmRsbA0KPiBDOlxXSU5 ET1dTXHN5c3RlbTMyXEROU0FQSS5kbGwNCj4gQzpcV0lORE9XU1xzeX N0ZW0zMlxyYXNhZGhscC5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0zM lxTWFMuRExMDQo+IEM6XFdJTkRPV1Ncc3lzdGVtMzJcRFVTRVIuZGxs DQo+IEM6XFdJTkRPV1Ncc3lzdGVtMzJcTElOS0lORk8uZGxsDQo+IEM 6XFByb2dyYW0gRmlsZXNcTWFya0FueVxDb250ZW50U2FmZXJcTWFDU1 Byb0hvb2suRExMDQoNCk1hcmtBbnkgQ28uLCBMdGQuDQpNYUNTUHJvS G9vaw0KMSwgNCwgMCwgMg0KTWFDU1Byb0hvb2sNCkNvcHlyaWdodCA/ IDIwMDQNCk1hQ1NQcm9Ib29rLmRsbA0KMSwgNCwgMCwgMg0KQ29udGV udFNBRkVSDQoNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxzaGRvY2xjLm RsbA0KPiBDOlxXSU5ET1dTXHN5c3RlbTMyXHJzYWVuaC5kbGwNCj4gQ zpcV0lORE9XU1xzeXN0ZW0zMlxXSU5TVEEuZGxsDQo+IEM6XFdJTkRP V1NcU3lzdGVtMzJcd2ViY2hlY2suZGxsDQo+IEM6XFdJTkRPV1NcU3l zdGVtMzJcV1NPQ0szMi5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMl xTRVRVUEFQSS5kbGwNCj4gQzpcV0lORE9XU1xTeXN0ZW0zMlxzdG9ia mVjdC5kbGwNCj4gQzpcV0lORE9XU1xTeXN0ZW0zMlxCYXRNZXRlci5k bGwNCj4gQzpcV0lORE9XU1xTeXN0ZW0zMlxQT1dSUFJPRi5kbGwNCj4 gQzpcV0lORE9XU1xTeXN0ZW0zMlxXVFNBUEkzMi5kbGwNCj4gQzpcV0 lORE9XU1xzeXN0ZW0zMlx3ZG1hdWQuZHJ2DQo+IEM6XFdJTkRPV1Ncc 3lzdGVtMzJcbXNhY20zMi5kcnYNCj4gQzpcV0lORE9XU1xzeXN0ZW0z MlxtaWRpbWFwLmRsbA0KPiBDOlxXSU5ET1dTXHN5c3RlbTMyXE5FVFN IRUxMLmRsbA0KPiBDOlxXSU5ET1dTXHN5c3RlbTMyXHJ0dXRpbHMuZG xsDQo+IEM6XFdJTkRPV1Ncc3lzdGVtMzJcY3JlZHVpLmRsbA0KPiBDO lxXSU5ET1dTXHN5c3RlbTMyXGlwaGxwYXBpLmRsbA0KPiBDOlxXSU5E T1dTXHN5c3RlbTMyXG1zaS5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0 zMlxNUFIuZGxsDQo+IEM6XFdJTkRPV1NcU3lzdGVtMzJcZHJwcm92Lm RsbA0KPiBDOlxXSU5ET1dTXFN5c3RlbTMyXG50bGFubWFuLmRsbA0KP iBDOlxXSU5ET1dTXFN5c3RlbTMyXE5FVFVJMC5kbGwNCj4gQzpcV0lO RE9XU1xTeXN0ZW0zMlxORVRVSTEuZGxsDQo+IEM6XFdJTkRPV1NcU3l zdGVtMzJcTkVUUkFQLmRsbA0KPiBDOlxXSU5ET1dTXFN5c3RlbTMyXF NBTUxJQi5kbGwNCj4gQzpcV0lORE9XU1xTeXN0ZW0zMlxkYXZjbG50L mRsbA0KPiBDOlxXSU5ET1dTXHN5c3RlbTMyXE1TR0lOQS5kbGwNCj4g QzpcV0lORE9XU1xzeXN0ZW0zMlxPREJDMzIuZGxsDQo+IEM6XFdJTkR PV1Ncc3lzdGVtMzJcb2RiY2ludC5kbGwNCj4gQzpcV0lORE9XU1xXaW 5TeFNceDg2X01pY3Jvc29mdC5XaW5kb3dzLkdkaVBsdXNfNjU5NWI2N DE0NGNjZjFkZl8xLjAuMjYwMC4yMTgwX3gtd3dfNTIyZjlmODJcZ2Rp cGx1cy5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxsYW1lQUNNLmF jbQ0KVGhpcyBpcyBhbiBBQ00gZHJpdmVyIGZvciBXaW4zMiB1c2luZy BMYW1lIHRvIGVuY29kZQ0KaHR0cDovL3d3dy5tcDNkZXYub3JnLw0KT GFtZSBNUDMgY29kZWMgZW5naW5lDQowLjkuMQ0KbGFtZUFDTQ0KQ29w eXJpZ2h0IKkgMjAwMiBTdGV2ZSBMaG9tbWUsIENvcHlyaWdodCCpIDI wMDItMjAwNCBUaGUgTEFNRSBQcm9qZWN0DQpMR1BMIChzZWUgZ251Lm 9yZykNCmxhbWVBQ00uYWNtDQowLjkuMQ0KTGFtZSBNUDMgY29kZWMNC g0KPiBDOlxXSU5ET1dTXHN5c3RlbTMyXFVSTC5kbGwNCj4gQzpcUHJv Z3JhbSBGaWxlc1xWSUF1ZGlvaVxTQkFEZWNrXEV4dGVuZERsbC5kbGw NCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxtc2Rtby5kbGwNCg0KNi41Lj I2MDAuMjE4MA0KNi41LjI2MDAuMjE4MA0KDQo+IEM6XFdJTkRPV1Ncc 3lzdGVtMzJcZGRyYXcuZGxsDQo+IEM6XFdJTkRPV1Ncc3lzdGVtMzJc RENJTUFOMzIuZGxsDQo+IEM6XFByb2dyYW0gRmlsZXNcQ29tbW9uIEZ pbGVzXEFoZWFkXExpYlxBZHZyQ250ci5kbGwNCg0KQWhlYWQgU29mdH dhcmUgQUcNCkFkdnJDbnRyIE1vZHVsZQ0KMSwyLDEyLCAyMzE0DQpBZ HZyQ250cg0KQ29weXJpZ2h0IChjKSAxOTk1LTIwMDMgQWhlYWQgU29m dHdhcmUgYW5kIGl0cyBsaWNlbnNvcnMNCkFkdnJDbnRyLkRMTA0KMSw yLDEyLCAyMzE0DQpBZHZyQ250ciBNb2R1bGUNCg0KPiBDOlxXSU5ET1 dTXHN5c3RlbTMyXHBlcmZvcy5kbGwNCj4gQzpcV0lORE9XU1xzeXN0Z W0zMlxhc3ljZmlsdC5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxt bGFuZy5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxtc2Ntcy5kbGw NCj4gQzpcUHJvZ3JhbSBGaWxlc1xBVEkgVGVjaG5vbG9naWVzXEFUSS 5BQ0VcYXRpYWNteHguZGxsDQoNCkFDRSBDb250ZXh0IE1lbnUNCjEsI DAsIDAsIDENCmF0aWFjbXh4DQpDb3B5cmlnaHQgMjAwNA0KYXRpYWNt eHguRExMDQoxLCAwLCAwLCAxDQpBQ0UgQ29udGV4dCBNZW51DQoNCj4 gQzpcV0lORE9XU1xTeXN0ZW0zMlxteWRvY3MuZGxsDQo+IEM6XFByb2 dyYW0gRmlsZXNcTWVnYXVwbG9hZFxNZWdhIE1hbmFnZXJcTWVnYUlFT W4uZGxsDQpWaXNpdCB1cyBhdCBodHRwOi8vd3d3Lm1lZ2FwdWxvYWQu Y29tDQpNZWdhdXBsb2FkIExpbWl0ZWQNCk1lZ2EgTWFuYWdlciBJRSB DbGljayBDYXRjaGVyDQoxLCAwLCAxLCA1DQpNZWdhIE1hbmFnZXIgSU UgQ2xpY2sgQ2F0Y2hlcg0KQ29weXJpZ2h0IChjKSAyMDA3IE1lZ2F1c GxvYWQgTGltaXRlZA0KQ29weXJpZ2h0IChjKSAyMDA3IE1lZ2F1cGxh b2QgTGltaXRlZA0KTWVnYU1ySUUuRExMDQoxLCAwLCAxLCA1DQpNZWd hIE1hbmFnZXIgSUUgQ2xpY2sgQ2F0Y2hlcg0KDQo+IEM6XFdJTkRPV1 Ncc3lzdGVtMzJcTVNWQ1A3MS5kbGwNCj4gQzpcV0lORE9XU1xzeXN0Z W0zMlxNU1ZDUjcxLmRsbA0KPiBDOlxQUk9HUkF+MVxNYXJrQW55XENP TlRFTn4xXE1BQ1NNQX4xLkRMTA0KTUFDU01HUiBXaW5kb3dzIDk4LCB NRSwgTlQgNC4wLCAyMDAwLCAmIFhQIHZlcmlvc24NCk1hcmtBbnkgQ2 9vcGVyYXRpb24uDQpNYXJrQW55IENvbnRlbnRzIFNhZmVyIExhdW5ja GVyDQoxLCA0LCAwLCAxDQpNQUNTTUdSLmRsbA0KQ29weXJpZ2h0IDIw MDMNCk1BQ1NNR1IuRExMDQoxLCA0LCAwLCAxDQpNQUNTTUdSIE1vZHV sZQ0KDQo+IEM6XFdJTkRPV1Ncc3lzdGVtMzJcQUNUWFBSWFkuRExMDQ o+IEM6XFdJTkRPV1NcU3lzdGVtMzJcbXN3c29jay5kbGwNCj4gQzpcV 0lORE9XU1xTeXN0ZW0zMlx3aW5ybnIuZGxsDQo+IEM6XFdJTkRPV1Nc U3lzdGVtMzJcTVNWRlczMi5kbGwNCj4gQzpcV0lORE9XU1xTeXN0ZW0 zMlxxZWRpdC5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxPZ2dEUy 5kbGwNCkVuam95DQpPZ2cgRGlyZWN0U2hvdyh0bSkgRmlsdGVyIENvb GxlY3Rpb24NCjAsIDksIDksIDUNCk9nZ0RTDQpDb3B5cmlnaHQgKEMp IDIwMDIgVG9iaWFzIFdhbGR2b2dlbA0KT2dnIGFuZCBWb3JiaXMgYXJ lIHJlZ2lzdGVyZWQgIHRyYWRlbWFya3Mgb2YgWGlwaCwgRGlyZWN0U2 hvdyBpcyBhIHJlZ2lzdGVyZWQgdHJhZGVtYXJrIG9mIE1pY3Jvc29md CBDb3JwLg0KT2dnRFMuRExMDQowLCA5LCA5LCA1DQpPZ2cgRGlyZWN0 U2hvdyh0bSkgRmlsdGVyIENvbGxlY3Rpb24NCg0KPiBDOlxXSU5ET1d TXHN5c3RlbTMyXHZvcmJpcy5kbGwNCj4gQzpcV0lORE9XU1xzeXN0ZW 0zMlxvZ2cuZGxsDQo+IEM6XFdJTkRPV1Ncc3lzdGVtMzJcdm9yYmlzZ W5jLmRsbA0KPiBDOlxXSU5ET1dTXHN5c3RlbTMyXE1TVkNQNjAuZGxs DQo+IEM6XFdJTkRPV1Ncc3lzdGVtMzJcRDNESU03MDAuRExMDQo+IEM 6XFByb2dyYW0gRmlsZXNcR2FkdS1HYWR1XGdnd2hvb2suZGxsDQo+IE M6XFdJTkRPV1Ncc3lzdGVtMzJccXVhcnR6LmRsbA0KPiBDOlxXSU5ET 1dTXHN5c3RlbTMyXGRldmVudW0uZGxsDQo+IEM6XFByb2dyYW0gRmls ZXNcSy1MaXRlIENvZGVjIFBhY2tcZmlsdGVyc1x2c2ZpbHRlci5kbGw NClZpc2l0IGh0dHA6Ly9nYWJlc3Qub3JnLyBmb3IgdXBkYXRlcy4NCk dhYmVzdA0KVm9iU3ViICYgVGV4dFN1YiBmaWx0ZXIgZm9yIERpcmVjd FNob3cvVmlydHVhbER1Yi9BdmlzeW50aA0KMSwgMCwgMSwgMw0KVlNG aWx0ZXINCkNvcHlyaWdodCAoQykgMjAwMS0yMDA2IEdhYmVzdA0KVlN GaWx0ZXIuRExMDQoxLCAwLCAxLCAzDQpWU0ZpbHRlcg0KDQo+IEM6XF Byb2dyYW0gRmlsZXNcU29ueVxTaGFyZWQgUGx1Zy1JbnNcRmlsZSBGb 3JtYXRzXE1DTVBFR1xtY3NwbXBlZy5heA0KDQpNYWluQ29uY2VwdCBB Rw0KTXBlZyBJL0lJIFNwbGl0dGVyDQoxLCAwLCAwLCA1Nw0KTUNTUE1 QRUcuQVgNCkNvcHlyaWdodCAoQykgMjAwMS0yMDA0IE1haW5Db25jZX B0IEFHDQpNQ1NQTVBFRy5BWA0KMSwgMCwgMCwgNTcNCk1QRUcgSS9JS SBTcGxpdHRlcg0KDQo+IEM6XFByb2dyYW0gRmlsZXNcU29ueVxTaGFy ZWQgUGx1Zy1JbnNcRmlsZSBGb3JtYXRzXE1DTVBFR1xtcGVnaW4uZGx sDQoNCk1haW5Db25jZXB0IEFHDQpNUEVHIEZpbGUgRGVjb2Rlcg0Kb2 ZmaWNpYWwgcmVsZWFzZSBidWlsZA0KbXBlZ2luDQpDb3B5cmlnaHSpI E1haW5Db25jZXB0IEFHIDIwMDAtMjAwNA0KbXBlZ2luLmRsbA0KMS4x LjEuMTM1IDIwMDQvMDkvMDgNCk1haW5Db25jZXB0riBNUEVHIEZpbGU gRGVjb2Rlcg0KTVBFRyBGaWxlIERlY29kZXINCg0KPiBDOlxQcm9ncm FtIEZpbGVzXEstTGl0ZSBDb2RlYyBQYWNrXGZpbHRlcnNcYXZpc3Bsa XR0ZXIuYXgNCmh0dHA6Ly9nYWJlc3Qub3JnLw0KR2FiZXN0DQpBdmkg U3BsaXR0ZXINCjEsIDAsIDAsIDcNCkF2aSBTcGxpdHRlcg0KQ29weXJ pZ2h0IChDKSAyMDAzLTIwMDYgR2FiZXN0DQpBdmlTcGxpdHRlci5heA 0KMSwgMCwgMCwgNw0KQXZpIFNwbGl0dGVyDQoNCj4gQzpcUHJvZ3Jhb SBGaWxlc1xLLUxpdGUgQ29kZWMgUGFja1xmaWx0ZXJzXHh2aWQuYXgN Cj4gQzpcV0lORE9XU1xzeXN0ZW0zMlxxZHZkLmRsbA0KPiBDOlxQcm9 ncmFtIEZpbGVzXEstTGl0ZSBDb2RlYyBQYWNrXGZpbHRlcnNcZGl2eG RlYy5heA0KRGl2WCBWaWRlbyBEZWNvZGVyIFJlbGVhc2VCdWlsZDogV G9wU2VjcmV0QnVpbGQgcHJvK3N0ZCANCkRpdlgsIEluYy4NCkRpdliu IERlY29kZXIgRmlsdGVyDQo2LjIuNS4zNA0KRGl2WGRlYy5heA0KQ29 weXJpZ2h0IKkgRGl2WCwgSW5jLiwgMjAwMS0yMDA2DQpEaXZYZGVjLm F4DQo2LjIuNS4zNA0KRGl2WK4gRGVjb2RlciBGaWx0ZXINCg0KPiBDO lxXSU5ET1dTXFN5c3RlbTMyXHN0aS5kbGwNCj4gQzpcV0lORE9XU1xT eXN0ZW0zMlxDRkdNR1IzMi5kbGwNCj4gQzpcV0lORE9XU1xTeXN0ZW0 zMlxzaG1lZGlhLmRsbA0KPiBDOlxXSU5ET1dTXFN5c3RlbTMyXEFWSU ZJTDMyLmRsbA0KPiBDOlxQUk9HUkF+MVxUUk9KQU5+MVxUcnNobGV4L mRsbA0KaHR0cDovL3d3dy5zaW1wbHlzdXAuY29tDQpTaW1wbHkgU3Vw ZXIgU29mdHdhcmUNClRyb2phbiBSZW1vdmVyIFNoZWxsIEV4dGVuc2l vbg0KMS4wLjguNDYNClRSU0hMRVgNCkNvcHlyaWdodCCpIDIwMDItMj AwNyBTaW1wbHkgU3VwZXIgU29mdHdhcmUNClRSU0hMRVguRExMDQoxL jAuOA0KVHJvamFuIFJlbW92ZXINCg0KPiBDOlxXSU5ET1dTXHN5c3Rl bTMyXG9sZXBybzMyLmRsbA0KPiBDOlxQcm9ncmFtIEZpbGVzXEVTRVR cRVNFVCBOT0QzMiBBbnRpdmlydXNcc2hlbGxFeHQuZGxsDQoNCkVTRV QNClNoZWxsIEV4dGVuc2lvbg0KMy4wLjU1MSANCnNoZWxsRXh0LmRsb A0KQ29weXJpZ2h0IChjKSBFc2V0IDE5OTIgLSAyMDA3LiBBbGwgcmln aHRzIHJlc2VydmVkLg0KTk9ELCBOT0QzMiwgQU1PTiwgRVNFVCBhcmU gcmVnaXN0ZXJlZCB0cmFkZW1hcmtzIG9mIEVTRVQuDQpzaGVsbEV4dC 5kbGwNCjMuMC41NTEgDQpFc2V0IFNtYXJ0IFNlY3VyaXR5DQoNCj4gQ zpcUHJvZ3JhbSBGaWxlc1xBbnRpVmlyZW5LaXRcU2hlbGxFeHQuZGxs DQoNCkFudGlWaXJ1c0tpdCBTaGVsbCBFeHRlbnNpb24NCjEwLCAwLCA wLCAwDQpTaGVsbEV4dGVuc2lvbg0KRyBEQVRBIFNvZnR3YXJlIEFHID E5ODggLSAyMDAwDQpTaGVsbEV4dC5ETEwNCjksIDAsIDAsIDANCkFud GlWaXJ1c0tpdA0KDQo+IEM6XFByb2dyYW0gRmlsZXNcV2luUkFSXHJh cmV4dC5kbGwNCj4gQzpcUFJPR1JBfjFcQUlNUDJcU3lzdGVtXEFJTVB fU34xLkRMTA0KTWFkZSBpbiBSdXNzaWENCkFJTVAgRGV2VGVhbQ0KQU lNUCBTaGVsbEV4dA0KMy4wLjAuMA0KYWltcF9zaGVsbC5kbGwNCkFJT VAgRGV2VGVhbQ0KYWltcF9zaGVsbC5kbGwNCjIrDQpBSU1QMg0KDQo+ IEM6XFdJTkRPV1Ncc3lzdGVtMzJcd21wc2hlbGwuZGxsDQo+IEM6XFd JTkRPV1Ncc3lzdGVtMzJceHZpZGNvcmUuZGxsDQo+IEM6XFByb2dyYW 0gRmlsZXNcQ29tbW9uIEZpbGVzXEFoZWFkXERTRmlsdGVyXE5lVmlkZ W8uYXgNCg0KTmVybyBBRw0KTVBFRy0xLzIvNCAmIEFWQyB2aWRlbyBk ZWNvZGVyIHcvIER4VkENCjMsMiwwLDIwYw0KQ29weXJpZ2h0IChjKSA yMDA1IE5lcm8gQUcgYW5kIGl0cyBsaWNlbnNvcnMNCk5lVmlkZW8uYX gNCjIsIDAsIDIsIDQ2DQpOZXJvIFN1aXRlDQo=

Potrafi mi ktoś pomoc z takim problemem ? Ja nie zabardzo wiem o co chodzi

pzdr

**Posty:** 3874 · przez **Wojtasgls** 13 Lis 2007, 22:38

niejestem pewnien ale wyglada mi na jakis syf.. Poczytaj i umieszcz logi:
http://forum.programosy.pl/hijackthis-amp-silent-runners-gtobsuga-i-umieszczanie-vt9452.html

**Posty:** 128 · przez **arusiek** 13 Lis 2007, 22:45

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 21:45:42, on 2007-11-13 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\VIAudioi\SBADeck\ADeck.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\AntiVirenKit\AVKPOP.EXE E:\Samsung Media Studio 5\SMSTray.exe C:\Program Files\MarkAny\ContentSafer\MAAgent.exe C:\Program Files\cFosSpeed\cFosSpeed.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE E:\Paula\nokia\NOKIAP~1\TRAYAP~1.EXE C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE C:\WINDOWS\system32\ctfmon.exe C:\Program Files\uTorrent\uTorrent.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Nikon\PictureProject\NkbMonitor.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\Program Files\AntiVirenKit\AVKService.exe C:\Program Files\AntiVirenKit\AVKWCtl.exe C:\Program Files\cFosSpeed\spd.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\Mozilla Firefox\firefox.exe E:\BitComet\BitComet.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Opera\Opera.exe C:\Program Files\GetRight\GetRight.exe C:\Documents and Settings\AruSieK\Pulpit\hijackthis_199\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.bearshare.com/pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza F2 - REG:system.ini: Shell= F2 - REG:system.ini: UserInit=userinit.exe O1 - Hosts: 88.87.7.3 L2authd.lineage2.com O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll O2 - BHO: GetRight IE Download Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1 O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [AVK Mail Checker] "C:\Program Files\AntiVirenKit\AVKPOP.EXE" O4 - HKLM\..\Run: [SMSTray] E:\Samsung Media Studio 5\SMSTray.exe O4 - HKLM\..\Run: [MAAgent] C:\Program Files\MarkAny\ContentSafer\MAAgent.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL O4 - HKLM\..\Run: [cFosSpeed] C:\Program Files\cFosSpeed\cFosSpeed.exe O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE O4 - HKLM\..\Run: [PCSuiteTrayApplication] E:\Paula\nokia\NOKIAP~1\TRAYAP~1.EXE O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [wsctf.exe] wsctf.exe O4 - HKCU\..\Run: [EXPLORER.EXE] EXPLORER.EXE O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe O8 - Extra context menu item: &Ściągnij przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: &Ściągnij wszystko przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: Download Link Using Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1185214374340 O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{DAE55B6B-F324-4266-97C7-74F3492D7CF1}: NameServer = 194.204.159.1,194.204.152.34 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\ O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: AVK Service (AVKService) - Unknown owner - C:\Program Files\AntiVirenKit\AVKService.exe O23 - Service: Strażnik AVK (AVKWCtl) - Unknown owner - C:\Program Files\AntiVirenKit\AVKWCtl.exe O23 - Service: cFosSpeed System Service (cFosSpeedS) - Unknown owner - C:\Program Files\cFosSpeed\spd.exe" -service (file missing) O23 - Service: Eset HTTP Server (EhttpSrv) - Unknown owner - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe

**Posty:** 18165 · przez **wojtas** 13 Lis 2007, 23:02

ktorego antywirusa uzywasz:

O23 - Service: AVK Service (AVKService) - Unknown owner - C:\Program Files\AntiVirenKit\AVKService.exe

czy:

O23 - Service: Eset HTTP Server (EhttpSrv) - Unknown owner - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe

??

skasuj te wpisy:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.bearshare.com/pl/
F2 - REG:system.ini: Shell=
F2 - REG:system.ini: UserInit=userinit.exe
O4 - HKCU\..\Run: [wsctf.exe] wsctf.exe
O4 - HKCU\..\Run: [EXPLORER.EXE] EXPLORER.EXE
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\

Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu SDFix wrzuc zawartość pliku Report.txt + log z combofixa oraz z hijacka

**Posty:** 128 · przez **arusiek** 14 Lis 2007, 00:00

Comboscan

Kod: Zaznacz wszystko: ComboFix 07-08-04.3 - "AruSieK" 2007-11-13 22:55:52.2 [GMT 1:00] - NTFS Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.Prawda ((((((((((((((((((((((((( Files Created from 2007-10-13 to 2007-11-13 ))))))))))))))))))))))))))))))) 2007-11-13 22:46 51,200 --a------ C:\WINDOWS\nircmd.exe 2007-11-13 22:25 <DIR> d-------- C:\WINDOWS\ERUNT 2007-11-13 22:21 <DIR> d--hs---- C:\WINDOWS\CSC 2007-11-12 17:55 <DIR> d-------- C:\gracek 2007-11-10 20:11 <DIR> d-------- C:\Program Files\NokiaFREE Unlock Codes Calculator 2007-11-10 20:07 <DIR> d-------- C:\Program Files\Common Files\Symantec Shared 2007-11-10 19:54 <DIR> d-------- C:\Program Files\Norton Security Scan 2007-11-10 16:48 <DIR> d-------- C:\Fido.2007.DvDRip.Eng-FxM 2007-11-07 17:59 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll 2007-11-07 17:59 75,264 --a------ C:\WINDOWS\system32\unacev2.dll 2007-11-07 17:59 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll 2007-11-07 17:59 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll 2007-11-07 17:59 153,088 --a------ C:\WINDOWS\system32\UNRAR3.dll 2007-11-07 17:59 <DIR> d-a------ C:\DOCUME~1\ALLUSE~1\DANEAP~1\TEMP 2007-11-07 17:58 <DIR> d-------- C:\Program Files\Trojan Remover 2007-11-07 17:58 <DIR> d-------- C:\DOCUME~1\AruSieK\DANEAP~1\Simply Super Software 2007-11-07 17:58 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\Simply Super Software 2007-11-07 08:55 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\ESET 2007-11-03 14:54 111,104 --a------ C:\WINDOWS\system32\uha.exe 2007-10-25 09:27 30,728 --a------ C:\WINDOWS\system32\drivers\epfwtdir.sys 2007-10-25 09:25 33,800 --a------ C:\WINDOWS\system32\drivers\eamon.sys 2007-10-25 09:25 27,144 --a------ C:\WINDOWS\system32\drivers\easdrv.sys 2007-10-20 17:54 <DIR> dr-hs---- C:\Recycled (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-11-13 22:55 --------- d-------- C:\DOCUME~1\AruSieK\DANEAP~1\uTorrent 2007-11-13 22:54 --------- d-------- C:\Program Files\cFosSpeed 2007-11-13 22:45 --------- d-------- C:\Program Files\GetRight 2007-11-13 22:43 --------- d--h----- C:\Program Files\InstallShield Installation Information 2007-11-13 22:43 --------- d-------- C:\Program Files\AntiVirenKit 2007-11-13 18:21 10 --a------ C:\WINDOWS\popcinfo.dat 2007-11-12 21:52 --------- d-------- C:\DOCUME~1\AruSieK\DANEAP~1\MegauploadToolbar 2007-11-11 12:50 --------- d-------- C:\Program Files\FlashGet 2007-11-02 19:20 --------- d-------- C:\Program Files\NAPI-PROJEKT 2007-11-01 20:23 --------- d-------- C:\DOCUME~1\AruSieK\DANEAP~1\Skype 2007-10-31 07:34 74450 --a------ C:\WINDOWS\system32\perfc015.dat 2007-10-31 07:34 448348 --a------ C:\WINDOWS\system32\perfh015.dat 2007-10-21 19:34 --------- d-------- C:\Program Files\AIMP2 2007-10-19 05:42 --------- d-------- C:\Program Files\SkanerOnline 2007-10-17 06:27 --------- d-------- C:\Program Files\HP 2007-10-17 06:27 --------- d-------- C:\Program Files\Common Files\HP 2007-09-26 17:35 --------- d-------- C:\Program Files\Common Files\PCSuite 2007-09-26 17:35 --------- d-------- C:\Program Files\Common Files\Nokia 2007-09-26 16:57 --------- d-------- C:\DOCUME~1\AruSieK\DANEAP~1\PC Suite 2007-09-13 16:04 --------- d-------- C:\Program Files\ATI Technologies 2007-09-13 15:58 --------- d-------- C:\DOCUME~1\AruSieK\DANEAP~1\ATI 2007-08-26 23:38 24 --a------ C:\WINDOWS\system.sys 2007-08-22 14:19 96768 -----c--- C:\WINDOWS\system32\dllcache\inseng.dll 2007-08-22 14:19 661504 -----c--- C:\WINDOWS\system32\dllcache\wininet.dll 2007-08-22 14:19 616448 -----c--- C:\WINDOWS\system32\dllcache\urlmon.dll 2007-08-22 14:19 55808 -----c--- C:\WINDOWS\system32\dllcache\extmgr.dll 2007-08-22 14:19 532480 -----c--- C:\WINDOWS\system32\dllcache\mstime.dll 2007-08-22 14:19 474112 -----c--- C:\WINDOWS\system32\dllcache\shlwapi.dll 2007-08-22 14:19 449024 -----c--- C:\WINDOWS\system32\dllcache\mshtmled.dll 2007-08-22 14:19 39424 -----c--- C:\WINDOWS\system32\dllcache\pngfilt.dll 2007-08-22 14:19 357888 -----c--- C:\WINDOWS\system32\dllcache\dxtmsft.dll 2007-08-22 14:19 3079168 -----c--- C:\WINDOWS\system32\dllcache\mshtml.dll 2007-08-22 14:19 251392 -----c--- C:\WINDOWS\system32\dllcache\iepeers.dll 2007-08-22 14:19 205312 -----c--- C:\WINDOWS\system32\dllcache\dxtrans.dll 2007-08-22 14:19 16384 -----c--- C:\WINDOWS\system32\dllcache\jsproxy.dll 2007-08-22 14:19 151552 -----c--- C:\WINDOWS\system32\dllcache\cdfview.dll 2007-08-22 14:19 1494528 -----c--- C:\WINDOWS\system32\dllcache\shdocvw.dll 2007-08-22 14:19 146432 -----c--- C:\WINDOWS\system32\dllcache\msrating.dll 2007-08-22 14:19 1055744 -----c--- C:\WINDOWS\system32\dllcache\danim.dll 2007-08-22 14:19 1022976 -----c--- C:\WINDOWS\system32\dllcache\browseui.dll 2007-08-21 11:30 18432 -----c--- C:\WINDOWS\system32\dllcache\iedw.exe 2007-08-21 07:18 683520 --a------ C:\WINDOWS\system32\inetcomm.dll 2007-08-21 07:18 683520 -----c--- C:\WINDOWS\system32\dllcache\inetcomm.dll 2007-08-13 15:31 4608 --a------ C:\WINDOWS\system32\w95inf32.dll 2007-08-13 15:31 2272 --a------ C:\WINDOWS\system32\w95inf16.dll ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AudioDeck"="C:\Program Files\VIAudioi\SBADeck\ADeck.exe" [2004-07-13 13:43] "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 01:41] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11] "SMSTray"="E:\Samsung Media Studio 5\SMSTray.exe" [2007-02-23 15:32] "MAAgent"="C:\Program Files\MarkAny\ContentSafer\MAAgent.exe" [2007-01-30 19:36] "CloneCDElbyCDFL"="C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" [2002-11-02 07:33] "cFosSpeed"="C:\Program Files\cFosSpeed\cFosSpeed.exe" [2007-08-10 15:26] "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 15:41] "DataLayer"="C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE" [2004-04-17 18:19] "PCSuiteTrayApplication"="E:\Paula\nokia\NOKIAP~1\TRAYAP~1.EXE" [2004-03-23 11:20] "egui"="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" [2007-10-25 09:26] "TrojanScanner"="C:\Program Files\Trojan Remover\Trjscan.exe" [2007-11-02 15:18] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 23:44] "uTorrent"="C:\Program Files\uTorrent\uTorrent.exe" [2007-08-05 19:06] "Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2005-03-31 10:18] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2006-02-19 03:21:22] NkbMonitor.exe.lnk - C:\Program Files\Nikon\PictureProject\NkbMonitor.exe [2007-07-31 10:19:00] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "ClearRecentDocsOnExit"=1 (0x1) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{88485281-8b4b-4f8d-9ede-82e29a064277}"= C:\PROGRA~1\MarkAny\CONTEN~1\MACSMA~1.DLL [2004-11-23 15:51 192512] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime R0 ElbyVCD;ElbyVCD;C:\WINDOWS\system32\DRIVERS\ElbyVCD.sys R0 videX32;videX32;C:\WINDOWS\system32\DRIVERS\videX32.sys R1 easdrv;easdrv;C:\WINDOWS\system32\DRIVERS\easdrv.sys R1 epfwtdir;epfwtdir;C:\WINDOWS\system32\DRIVERS\epfwtdir.sys R2 eamon;EAMON;C:\WINDOWS\system32\DRIVERS\eamon.sys R2 ekrn;Eset Service;"C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe" R3 ElbyCDFL;ElbyCDFL;C:\WINDOWS\system32\Drivers\ElbyCDFL.sys R3 ms_mpu401;Sterownik portu MIDI UART Microsoft MPU-401;C:\WINDOWS\system32\drivers\msmpu401.sys S3 EhttpSrv;Eset HTTP Server;"C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe" S3 PID_08A0;Labtec WebCam Pro(PID_08A0);C:\WINDOWS\system32\DRIVERS\LV302AV.SYS [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{374f1fe4-82d9-11dc-abe0-0020ed471a94}] 1\Command- J:\.\recycled\info.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL .\recycled\info.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5572788d-3701-11dc-ab8f-0020ed471a94}] 1\Command- J:\.\recycled\info.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL .\recycled\info.exe Contents of the 'Scheduled Tasks' folder 2007-11-12 23:00:00 C:\WINDOWS\Tasks\At1.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-13 08:00:00 C:\WINDOWS\Tasks\At10.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-13 09:00:00 C:\WINDOWS\Tasks\At11.job 2007-11-13 10:00:00 C:\WINDOWS\Tasks\At12.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-13 11:00:00 C:\WINDOWS\Tasks\At13.job 2007-11-13 12:00:00 C:\WINDOWS\Tasks\At14.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-13 13:00:00 C:\WINDOWS\Tasks\At15.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-13 14:00:00 C:\WINDOWS\Tasks\At16.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-13 15:00:00 C:\WINDOWS\Tasks\At17.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-13 16:00:00 C:\WINDOWS\Tasks\At18.job 2007-11-13 17:00:00 C:\WINDOWS\Tasks\At19.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-13 00:00:00 C:\WINDOWS\Tasks\At2.job 2007-11-13 18:00:00 C:\WINDOWS\Tasks\At20.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-13 19:00:01 C:\WINDOWS\Tasks\At21.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-13 20:00:00 C:\WINDOWS\Tasks\At22.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-13 21:00:00 C:\WINDOWS\Tasks\At23.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-12 22:00:00 C:\WINDOWS\Tasks\At24.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-12 23:00:00 C:\WINDOWS\Tasks\At25.job 2007-11-13 00:00:00 C:\WINDOWS\Tasks\At26.job 2007-11-13 01:00:00 C:\WINDOWS\Tasks\At27.job 2007-11-13 02:00:00 C:\WINDOWS\Tasks\At28.job 2007-11-13 03:00:00 C:\WINDOWS\Tasks\At29.job 2007-11-13 01:00:00 C:\WINDOWS\Tasks\At3.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-13 04:00:00 C:\WINDOWS\Tasks\At30.job - C:\WINDOWS\system32\2H6HeB5R.exe 2007-11-13 05:00:00 C:\WINDOWS\Tasks\At31.job - C:\WINDOWS\system32\2H6HeB5R.exe 2007-11-13 06:00:00 C:\WINDOWS\Tasks\At32.job 2007-11-13 07:00:00 C:\WINDOWS\Tasks\At33.job - C:\WINDOWS\system32\2H6HeB5R.exe 2007-11-13 08:00:00 C:\WINDOWS\Tasks\At34.job - C:\WINDOWS\system32\2H6HeB5R.exe 2007-11-13 09:00:00 C:\WINDOWS\Tasks\At35.job 2007-11-13 10:00:00 C:\WINDOWS\Tasks\At36.job - C:\WINDOWS\system32\2H6HeB5R.exe 2007-11-13 11:00:00 C:\WINDOWS\Tasks\At37.job - C:\WINDOWS\system32\2H6HeB5R.exe 2007-11-13 12:00:00 C:\WINDOWS\Tasks\At38.job - C:\WINDOWS\system32\2H6HeB5R.exe 2007-11-13 13:00:00 C:\WINDOWS\Tasks\At39.job - C:\WINDOWS\system32\2H6HeB5R.exe 2007-11-13 02:00:00 C:\WINDOWS\Tasks\At4.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-13 14:00:00 C:\WINDOWS\Tasks\At40.job - C:\WINDOWS\system32\2H6HeB5R.exe 2007-11-13 15:00:01 C:\WINDOWS\Tasks\At41.job 2007-11-13 16:00:05 C:\WINDOWS\Tasks\At42.job - C:\WINDOWS\system32\2H6HeB5R.exe 2007-11-13 17:00:01 C:\WINDOWS\Tasks\At43.job - C:\WINDOWS\system32\2H6HeB5R.exe 2007-11-13 18:00:01 C:\WINDOWS\Tasks\At44.job - C:\WINDOWS\system32\2H6HeB5R.exe 2007-11-13 19:00:02 C:\WINDOWS\Tasks\At45.job - C:\WINDOWS\system32\2H6HeB5R.exe 2007-11-13 20:00:01 C:\WINDOWS\Tasks\At46.job 2007-11-13 21:00:01 C:\WINDOWS\Tasks\At47.job - C:\WINDOWS\system32\2H6HeB5R.exe 2007-11-12 22:00:00 C:\WINDOWS\Tasks\At48.job - C:\WINDOWS\system32\2H6HeB5R.exe 2007-11-13 03:00:00 C:\WINDOWS\Tasks\At5.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-13 04:00:00 C:\WINDOWS\Tasks\At6.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-13 05:00:00 C:\WINDOWS\Tasks\At7.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-13 06:00:00 C:\WINDOWS\Tasks\At8.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-13 07:00:00 C:\WINDOWS\Tasks\At9.job - C:\WINDOWS\System32\7tT4J7yP.exe 2007-11-10 18:54:51 C:\WINDOWS\Tasks\Norton Security Scan.job - C:\Program Files\Norton Security Scan\Nss.exe ************************************************************************** catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-13 22:57:35 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden registry entries ... [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\A\1\5\1c] "Order"=hex:08,00,00,00,02,00,00,00,b8,01,00,00,01,00,00,00,04,00,00,00,8c,.. scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** Completion time: 2007-11-13 22:58:35 C:\ComboFix-quarantined-files.txt ... 2007-11-13 22:58 --- E O F ---

Hijack

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 23:00:01, on 2007-11-13 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\VIAudioi\SBADeck\ADeck.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe E:\Samsung Media Studio 5\SMSTray.exe C:\Program Files\MarkAny\ContentSafer\MAAgent.exe C:\Program Files\cFosSpeed\cFosSpeed.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE E:\Paula\nokia\NOKIAP~1\TRAYAP~1.EXE C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\WINDOWS\system32\ctfmon.exe C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\Program Files\cFosSpeed\spd.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\notepad.exe C:\Program Files\Opera\Opera.exe C:\Documents and Settings\AruSieK\Pulpit\hijackthis_199\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.bearshare.com/pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll O2 - BHO: GetRight IE Download Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1 O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [SMSTray] E:\Samsung Media Studio 5\SMSTray.exe O4 - HKLM\..\Run: [MAAgent] C:\Program Files\MarkAny\ContentSafer\MAAgent.exe O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL O4 - HKLM\..\Run: [cFosSpeed] C:\Program Files\cFosSpeed\cFosSpeed.exe O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE O4 - HKLM\..\Run: [PCSuiteTrayApplication] E:\Paula\nokia\NOKIAP~1\TRAYAP~1.EXE O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe O8 - Extra context menu item: &Ściągnij przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: &Ściągnij wszystko przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: Download Link Using Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1185214374340 O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{DAE55B6B-F324-4266-97C7-74F3492D7CF1}: NameServer = 194.204.159.1,194.204.152.34 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: cFosSpeed System Service (cFosSpeedS) - Unknown owner - C:\Program Files\cFosSpeed\spd.exe" -service (file missing) O23 - Service: Eset HTTP Server (EhttpSrv) - Unknown owner - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe

SDFix

Kod: Zaznacz wszystko: SDFix: Version 1.114 Run by Administrator on 2007-11-13 at 22:25 Microsoft Windows XP [Wersja 5.1.2600] Running From: C:\SDFix Safe Mode: Checking Services: Restoring Windows Registry Values Restoring Windows Default Hosts File Rebooting... Normal Mode: Checking Files: No Trojan Files Found Removing Temp Files... ADS Check: C:\WINDOWS No streams found. C:\WINDOWS\system32 No streams found. C:\WINDOWS\system32\svchost.exe No streams found. C:\WINDOWS\system32\ntoskrnl.exe No streams found. Final Check: catchme 0.3.1262.1 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-13 22:29:40 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden services & system hive ... [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg] "s1"=dword:2df9c43f "s2"=dword:110480d0 "h0"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools\" "h0"=dword:00000000 "khjeh"=hex:5e,a8,e7,e2,81,d7,82,46,d9,0d,1b,4d,d6,80,40,70,5b,90,bd,3f,bb,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,31,db,e5,2a,7e,25,6e,16,11,42,cb,10,6f,a1,ce,b5,97,.. "khjeh"=hex:f8,8b,fa,76,c5,a9,aa,ba,54,63,0c,7e,5c,44,6c,8a,51,60,ec,c2,20,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:70,ff,eb,68,c0,84,63,a3,c8,b5,25,f8,b7,d9,f2,9b,c6,8d,1c,ac,fd,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools\" "h0"=dword:00000000 "khjeh"=hex:5e,a8,e7,e2,81,d7,82,46,d9,0d,1b,4d,d6,80,40,70,5b,90,bd,3f,bb,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,31,db,e5,2a,7e,25,6e,16,11,42,cb,10,6f,a1,ce,b5,97,.. "khjeh"=hex:f8,8b,fa,76,c5,a9,aa,ba,54,63,0c,7e,5c,44,6c,8a,51,60,ec,c2,20,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:70,ff,eb,68,c0,84,63,a3,c8,b5,25,f8,b7,d9,f2,9b,c6,8d,1c,ac,fd,.. scanning hidden registry entries ... [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\A\1\5\1c] "Order"=hex:08,00,00,00,02,00,00,00,b8,01,00,00,01,00,00,00,04,00,00,00,8c,.. scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 Remaining Services: ------------------ Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\\Program Files\\AntiVirenKit\\AVKPop.exe"="C:\\Program Files\\AntiVirenKit\\AVKPop.exe:*:Enabled:AVK POP3 Server" "C:\\WINDOWS\\system32\\muzapp.exe"="C:\\WINDOWS\\system32\\muzapp.exe:*:Enabled:MUZ AOD APP player" "E:\\BitComet\\BitComet.exe"="E:\\BitComet\\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client" "C:\\Program Files\\Gadu-Gadu\\gg.exe"="C:\\Program Files\\Gadu-Gadu\\gg.exe:*:Enabled:Gadu-Gadu - program glowny" "C:\\Program Files\\NAPI-PROJEKT\\napisy.exe"="C:\\Program Files\\NAPI-PROJEKT\\napisy.exe:*:Enabled:www.napiprojekt.pl" "E:\\BearShare\\BearShare.exe"="E:\\BearShare\\BearShare.exe:*:Enabled:BearShare" "C:\\Program Files\\uTorrent\\uTorrent.exe"="C:\\Program Files\\uTorrent\\uTorrent.exe:*:Enabled:uTorrent" "C:\\Program Files\\FlashGet\\FlashGet.exe"="C:\\Program Files\\FlashGet\\FlashGet.exe:*:Enabled:Flashget" "D:\\eMule\\emule.exe"="D:\\eMule\\emule.exe:*:Enabled:eMule" "C:\\totalcmd\\TOTALCMD.EXE"="C:\\totalcmd\\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows" "I:\\miranda\\miranda32.exe"="I:\\miranda\\miranda32.exe:*:Enabled:Miranda IM" "C:\\Program Files\\BYOND\\bin\\byond.exe"="C:\\Program Files\\BYOND\\bin\\byond.exe:*:Enabled:byond" "C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype. The whole world can talk for free." "C:\\Program Files\\GetRight\\getright.exe"="C:\\Program Files\\GetRight\\getright.exe:*:Enabled:GetRightR Download Manager. www.GetRight.com" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" Remaining Files: --------------- Files with Hidden Attributes: Wed 1 Aug 2007 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak" Sat 6 Aug 2005 295,936 A..H. --- "C:\Documents and Settings\AruSieK\Pulpit\pierdoy\naruciak\Naruto Battle Arena 2\NarutoBattleArena2_debug.exe" Finished!

Używam ESET NOD32

pzdr

z win xp sp2

z win xp sp2

Kto jest na forum