Problem z wirusami kido, krap.g, magania.auui.

**Posty:** 9 · przez **chinczyk3000** 21 Lut 2009, 20:00

Witam,
Mam problemy z komputerem. Co chwile kaspersky wyświetla mi komunikaty ze wirusach i trojanach, skanuje katalogi windowsa i się restartuje. Znajduje trojana Magania.auui w pliku windowsa nmdfgds0.dll i chce go usunąć ale nie może. Poniżej wklejam logi z combofixa i hijackthis. Prosze o pomoc.

Combofix
http://wklejto.pl/27067

HijackThis
http://wklejto.pl/27066

Pozdrawiam

**Posty:** 18165 · przez **wojtas** 22 Lut 2009, 12:50

Wykonaj to co jest podane w tym temacie

Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu C:\SDFix wrzuc zawartość pliku Report.txt + log z combofixa oraz daj loga z hijacka
oraz Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

**Posty:** 9 · przez **chinczyk3000** 22 Lut 2009, 14:37

zrobiłem tak jak mi poleciłeś, poniżej logi, z tym przeskanowanie on-line miałem problem bo mi wyskakuje komunikat ze mam zainstalowana na kompie wersje 8.0 i nie przeskanuje tego, wiec z tego raportu nie ma.

SDFix
http://wklejto.pl/27126

ComboFix
http://wklejto.pl/27127

HijackThis
http://wklejto.pl/27128

pozdrawiam

**Posty:** 18165 · przez **wojtas** 22 Lut 2009, 16:30

masz 2 antywirusy wywal jednego..

Otworz notatnik i wklej w nim to:

File::
C:\hyetn1i.exe

Registry::
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7c3877d7-fb9a-11dd-9aed-0019e0795341}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e6df0cdc-f8e3-11dd-9ae6-0019e0795341}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f7c5a124-fab1-11dd-9aec-0019e0795341}]

>>Plik>>Zapisz jako... >>> CFScript
Przeciągnij i upuść plik CFScript.txt na plik ComboFix.exe
-->

Ma się rozpocząć usuwanie. (i powstanie log).Daj ten log, który powstanie w trakcie usuwania.

**Posty:** 9 · przez **chinczyk3000** 22 Lut 2009, 17:41

log z combofixa
http://wklejto.pl/27143

**Posty:** 18165 · przez **wojtas** 22 Lut 2009, 18:58

1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp

oraz skasuj folder C:\Qoobox
2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
5. Wykonaj skan Dr. Web CureIt
6. Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

i tym:

FixIEDef.

**Posty:** 9 · przez **chinczyk3000** 23 Lut 2009, 11:27

Mam tylko log z FixIEDef http://wklejto.pl/27177, z kaspersky to samo co ostatnio.

**Posty:** 18165 · przez **wojtas** 23 Lut 2009, 12:21

a skan tym:

http://www.ewido.net/en/onlinescan/

**Posty:** 9 · przez **chinczyk3000** 24 Lut 2009, 08:34

Tu nie działa stronka
"The page you requested is currently not available. We are sorry for the inconvenience! "

**Posty:** 18165 · przez **wojtas** 24 Lut 2009, 18:07

moze wwdc ci blokuje odblokuj w nim porty i sprobuj

**Posty:** 9 · przez **chinczyk3000** 02 Mar 2009, 19:16

nie działa ten link nadal. próbowałem na innym kompie i tez strona niedostepna.

**Posty:** 18165 · przez **wojtas** 02 Mar 2009, 20:11

daj jeszcze nowego loga z combofixa.. nie masz firewalla ? jesli masz to wylacz na czas skanowania firewalla , antywirusa , odbezpiecz porty w wwdc

**Posty:** 9 · przez **chinczyk3000** 03 Mar 2009, 10:27

combofix
http://wklejto.pl/27829

**Posty:** 18165 · przez **wojtas** 03 Mar 2009, 23:56

wklej do notatnika

Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{04350a54-06a0-11de-9b0f-0019e0795341}]

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4aa25bf7-0420-11de-9b09-0019e0795341}]

w notatniku u góry>>>plik zapisz jako>>>Zmien rozszerzenie z TXT na Wszystkie pliki *.* >>> Zapisz pod nazwą FIX.REG

Klikasz dwa razy na powstały plik fix i dodajesz go do rejestru....

**Posty:** 9 · przez **chinczyk3000** 04 Mar 2009, 00:20

zrobione

**Posty:** 18165 · przez **wojtas** 04 Mar 2009, 19:52

i jak sytuacja?

**Posty:** 9 · przez **chinczyk3000** 05 Mar 2009, 01:45

już nic nie wyskakuje o tych wirusach. komp działa dużo szybciej i nie muli

Dziękuje za pomoc

pozdrawiam

Dodano Dzisiaj, 00:46:
już nic nie wyskakuje o tych wirusach. komp działa dużo szybciej i nie muli

Dziękuje za pomoc

pozdrawiam

**Posty:** 8 · przez **Gumka23** 02 Sie 2009, 13:17

Zeby nie zakladac nowego tematu.'

Od jakiegos czasu mam problem z Magania, Kaspersky, Avast ani inne malware cleanery nie moga sobie poradzic i od czasu do czasu Kaspersky pokazuje komunikat o Magani.

Prosze o pomoc.

Daje log z rsit'a.

Kod: Zaznacz wszystko: Logfile of random's system information tool 1.06 (written by random/random) Run by Administrator at 2009-08-02 13:15:27 Microsoft Windows XP Professional Dodatek Service Pack 3 System drive D: has 36 GB (72%) free of 50 GB Total RAM: 2047 MB (76% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:15:32, on 2009-08-02 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2900.5512) Boot mode: Normal Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\Explorer.EXE D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe D:\WINDOWS\system32\ctfmon.exe H:\Program Files\Mozilla Firefox\firefox.exe D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe D:\Program Files\Common Files\ArchestrA\NTServApp.exe D:\Program Files\Java\jre6\bin\jqs.exe D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE D:\WINDOWS\system32\nvsvc32.exe D:\Program Files\Common Files\ArchestrA\slssvc.exe D:\WINDOWS\system32\svchost.exe D:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe D:\WINDOWS\system32\wbem\wmiapsrv.exe D:\WINDOWS\System32\svchost.exe D:\Documents and Settings\Administrator\Pulpit\RSIT.exe D:\Program Files\trend micro\Administrator.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://download.gigabyte.com.tw/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [AVP] "D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe" O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O9 - Extra button: Statystyki ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1248718110531 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: D:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,D:\PROGRA~1\Kaspersky Lab\Kaspersky Anti-Virus 2009\mzvkbd.dll O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - D:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe O23 - Service: FS Service Control - Wonderware Corporation - D:\Program Files\Common Files\ArchestrA\NTServApp.exe O23 - Service: Menedżer Google Desktop 5.8.809.23506 (GoogleDesktopManager-092308-165331) - Google - D:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - D:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe O23 - Service: Wonderware SuiteLink (slssvc) - Invensys Systems, Inc. - D:\Program Files\Common Files\ArchestrA\slssvc.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - D:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe O23 - Service: Wonderware NetDDE Helper (WWNetDDE) - Invensys Systems, Inc. - D:\Program Files\Common Files\ArchestrA\wwnetdde.exe -- End of file - 5888 bytes ======Scheduled tasks folder====== D:\WINDOWS\tasks\Ad-Aware Update (Weekly).job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] AcroIEHlprObj Class - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2005-09-24 63136] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}] IEVkbdBHO Class - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll [2009-07-27 62728] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - D:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-06-21 41368] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] JQSIEStartDetectorImpl Class - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-06-21 73728] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"=D:\WINDOWS\system32\NvCpl.dll [2006-04-16 7569408] "AVP"=D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe [2009-07-27 201992] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"=D:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr] D:\WINDOWS\ALCMTR.EXE [2008-06-19 57344] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite] D:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search] D:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-05-06 30192] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] D:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] D:\WINDOWS\system32\NvCpl.dll [2006-04-16 7569408] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] D:\WINDOWS\system32\NvMcTray.dll [2006-04-16 86016] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] nwiz.exe /install [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL] D:\WINDOWS\RTHDCPL.EXE [2008-12-09 18063872] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] D:\Program Files\Java\jre6\bin\jusched.exe [2009-06-21 148888] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] D:\Program Files\Winamp\winampa.exe [2009-04-10 37888] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFast Schedule] C:\Program Files\WinFast\WFDTV\WFWIZ.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\D:^Documents and Settings^Administrator^Menu Start^Programy^Autostart^OpenOffice.org 2.4.lnk] H:\PROGRA~1\OPENOF~1.4\program\QUICKS~1.EXE [2008-01-21 393216] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\D:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Reader Speed Launch.lnk] D:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE [2005-09-24 29696] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "F-Secure Gatekeeper Handler Starter"=2 "aaLogger"=2 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLS"="D:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,D:\PROGRA~1\Kaspersky Lab\Kaspersky Anti-Virus 2009\mzvkbd.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon] D:\WINDOWS\system32\klogon.dll [2008-04-25 206088] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableTaskMgr"=0 "DisableLockWorkstation"=0 "DisableChangePassword"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "undockwithoutlogon"=1 "ShutdownWithoutLogon"=1 "NoDispCPL"=0 "NoDispSettingsPage"=0 "NoDispScrSavPage"=0 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 "NoLogoff"=0 "NoClose"=0 "HideClock"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"= "HonorAutoRunSetting"= "NoResolveTrack"= "NoViewContextMenu"= "NoFileAssociate"= "NoFind"= "NoRun"= "NoClose"= "StartMenuLogoff"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "I:\programy\Gadu-Gadu\gg.exe"="I:\programy\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program główny" "D:\Program Files\Common Files\ArchestrA\aaLogger.exe"="D:\Program Files\Common Files\ArchestrA\aaLogger.exe:*:Enabled:aaLogger.exe" "D:\Program Files\Common Files\ArchestrA\slssvc.exe"="D:\Program Files\Common Files\ArchestrA\slssvc.exe:*:Enabled:Slssvc.exe" "D:\Program Files\Wonderware\InTouch\wm.exe"="D:\Program Files\Wonderware\InTouch\wm.exe:*:Enabled:wm.exe" "D:\Program Files\Wonderware\InTouch\view.exe"="D:\Program Files\Wonderware\InTouch\view.exe:*:Enabled:view.exe" "D:\WINDOWS\system32\mmc.exe"="D:\WINDOWS\system32\mmc.exe:*:Enabled:mmc.exe" "D:\Program Files\Common Files\ArchestrA\DASAgent.exe"="D:\Program Files\Common Files\ArchestrA\DASAgent.exe:*:Enabled:DASAgent.exe" "D:\WINDOWS\system32\OPCEnum.exe"="D:\WINDOWS\system32\OPCEnum.exe:*:Enabled:OPCEnum.exe" "D:\WINDOWS\system32\dllhost.exe"="D:\WINDOWS\system32\dllhost.exe:*:Enabled:dllhost.exe" "D:\Program Files\Skype\Phone\Skype.exe"="D:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype" "D:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files\Kaspersky Anti-Virus 2009\Polish\setup.exe"="D:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files\Kaspersky Anti-Virus 2009\Polish\setup.exe:*:Enabled:Kaspersky Anti-Virus 2009 Setup" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "D:\Program Files\Common Files\ArchestrA\aaLogger.exe"="D:\Program Files\Common Files\ArchestrA\aaLogger.exe:*:Enabled:aaLogger.exe" "D:\Program Files\Common Files\ArchestrA\slssvc.exe"="D:\Program Files\Common Files\ArchestrA\slssvc.exe:*:Enabled:Slssvc.exe" "D:\Program Files\Wonderware\InTouch\wm.exe"="D:\Program Files\Wonderware\InTouch\wm.exe:*:Enabled:wm.exe" "D:\Program Files\Wonderware\InTouch\view.exe"="D:\Program Files\Wonderware\InTouch\view.exe:*:Enabled:view.exe" "D:\WINDOWS\system32\mmc.exe"="D:\WINDOWS\system32\mmc.exe:*:Enabled:mmc.exe" "D:\Program Files\Common Files\ArchestrA\DASAgent.exe"="D:\Program Files\Common Files\ArchestrA\DASAgent.exe:*:Enabled:DASAgent.exe" "D:\WINDOWS\system32\OPCEnum.exe"="D:\WINDOWS\system32\OPCEnum.exe:*:Enabled:OPCEnum.exe" "D:\WINDOWS\system32\dllhost.exe"="D:\WINDOWS\system32\dllhost.exe:*:Enabled:dllhost.exe" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{352f9423-3b33-11de-bd50-00241d05b260}] shell\AutoRun\command - K:\abk.bat shell\explore\command - K:\abk.bat shell\open\command - K:\abk.bat [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{352f9424-3b33-11de-bd50-00241d05b260}] shell\AutoRun\command - L:\abk.bat shell\explore\command - L:\abk.bat shell\open\command - L:\abk.bat [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{54dd1e6c-699f-11de-be38-00241d05b260}] shell\AutoRun\command - K:\86l2qw.bat shell\open\command - K:\86l2qw.bat ======List of files/folders created in the last 1 months====== 2009-08-02 13:15:27 ----D---- D:\rsit 2009-08-02 13:15:27 ----D---- D:\Program Files\trend micro 2009-08-02 12:58:28 ----D---- D:\WINDOWS\system32\appmgmt 2009-08-02 12:37:35 ----D---- D:\WINDOWS\Minidump 2009-08-02 12:36:19 ----A---- D:\rollback.ini 2009-08-02 12:29:51 ----D---- D:\Program Files\Exterminate It! 2009-08-02 12:25:05 ----D---- D:\Program Files\Common Files\ParetoLogic 2009-07-31 20:26:22 ----N---- D:\WINDOWS\system32\SET95.tmp 2009-07-31 20:26:22 ----N---- D:\WINDOWS\system32\SET93.tmp 2009-07-31 20:26:22 ----N---- D:\WINDOWS\system32\SET90.tmp 2009-07-31 20:26:22 ----N---- D:\WINDOWS\system32\SET8F.tmp 2009-07-31 20:26:22 ----N---- D:\WINDOWS\system32\SET8E.tmp 2009-07-31 20:26:22 ----N---- D:\WINDOWS\system32\SET8C.tmp 2009-07-31 20:26:22 ----N---- D:\WINDOWS\system32\SET8B.tmp 2009-07-31 20:26:18 ----D---- D:\WINDOWS\ie8updates 2009-07-31 20:26:10 ----A---- D:\WINDOWS\imsins.BAK 2009-07-29 20:47:59 ----A---- D:\WINDOWS\system32\oeminfo.ini 2009-07-29 20:21:53 ----D---- D:\WINDOWS\WBEM 2009-07-29 20:20:26 ----HDC---- D:\WINDOWS\ie8 2009-07-29 16:34:48 ----HDC---- D:\WINDOWS\$NtUninstallKB972260$ 2009-07-28 17:28:22 ----D---- D:\WINDOWS\system32\KB905474 2009-07-28 10:23:58 ----A---- D:\WINDOWS\system32\MRT.exe 2009-07-28 10:06:02 ----N---- D:\WINDOWS\system32\spmsg2.dll 2009-07-28 10:05:55 ----HDC---- D:\WINDOWS\$NtUninstallXPSEPSCLP$ 2009-07-28 10:03:02 ----D---- D:\WINDOWS\system32\XPSViewer 2009-07-28 10:03:00 ----D---- D:\Program Files\MSBuild 2009-07-28 10:02:59 ----D---- D:\WINDOWS\system32\en-US 2009-07-28 10:02:54 ----D---- D:\Program Files\Reference Assemblies 2009-07-28 10:01:55 ----N---- D:\WINDOWS\system32\xpssvcs.dll 2009-07-28 10:01:55 ----N---- D:\WINDOWS\system32\xpsshhdr.dll 2009-07-28 10:01:55 ----N---- D:\WINDOWS\system32\prntvpt.dll 2009-07-28 10:00:08 ----SHD---- D:\Config.Msi 2009-07-28 09:50:42 ----A---- D:\WINDOWS\system32\wmpns.dll 2009-07-28 09:49:52 ----D---- D:\WINDOWS\Prefetch 2009-07-28 09:39:41 ----HDC---- D:\WINDOWS\$NtUninstallKB971633$ 2009-07-28 09:39:24 ----HDC---- D:\WINDOWS\$NtUninstallKB970238$ 2009-07-28 09:39:05 ----HDC---- D:\WINDOWS\$NtUninstallKB969897$ 2009-07-28 09:38:47 ----HDC---- D:\WINDOWS\$NtUninstallKB968537$ 2009-07-28 09:38:31 ----HDC---- D:\WINDOWS\$NtUninstallKB967715$ 2009-07-28 09:38:16 ----HDC---- D:\WINDOWS\$NtUninstallKB961501$ 2009-07-28 09:38:03 ----HDC---- D:\WINDOWS\$NtUninstallKB961371$ 2009-07-28 09:37:49 ----HDC---- D:\WINDOWS\$NtUninstallKB960803$ 2009-07-28 09:37:35 ----HDC---- D:\WINDOWS\$NtUninstallKB960225$ 2009-07-28 09:37:18 ----HDC---- D:\WINDOWS\$NtUninstallKB959426$ 2009-07-28 09:37:01 ----HDC---- D:\WINDOWS\$NtUninstallKB958687$ 2009-07-28 09:36:49 ----HDC---- D:\WINDOWS\$NtUninstallKB958644$ 2009-07-28 09:36:35 ----HDC---- D:\WINDOWS\$NtUninstallKB957097$ 2009-07-28 09:36:22 ----HDC---- D:\WINDOWS\$NtUninstallKB956803$ 2009-07-28 09:36:07 ----HDC---- D:\WINDOWS\$NtUninstallKB956802$ 2009-07-28 09:35:44 ----HDC---- D:\WINDOWS\$NtUninstallKB956572$ 2009-07-28 09:35:23 ----HDC---- D:\WINDOWS\$NtUninstallKB955069$ 2009-07-28 09:35:07 ----HDC---- D:\WINDOWS\$NtUninstallKB954600$ 2009-07-28 09:34:53 ----HDC---- D:\WINDOWS\$NtUninstallKB952954$ 2009-07-28 09:34:40 ----HDC---- D:\WINDOWS\$NtUninstallKB952287$ 2009-07-28 09:34:23 ----HDC---- D:\WINDOWS\$NtUninstallKB952004$ 2009-07-28 09:34:07 ----HDC---- D:\WINDOWS\$NtUninstallKB951748$ 2009-07-28 09:33:53 ----HDC---- D:\WINDOWS\$NtUninstallKB951376-v2$ 2009-07-28 09:33:40 ----HDC---- D:\WINDOWS\$NtUninstallKB951066$ 2009-07-28 09:33:26 ----HDC---- D:\WINDOWS\$NtUninstallKB950974$ 2009-07-28 09:33:14 ----HDC---- D:\WINDOWS\$NtUninstallKB950762$ 2009-07-28 09:33:00 ----HDC---- D:\WINDOWS\$NtUninstallKB946648$ 2009-07-28 09:32:49 ----HDC---- D:\WINDOWS\$NtUninstallKB938464-v2$ 2009-07-28 09:32:32 ----HDC---- D:\WINDOWS\$NtUninstallKB923561$ 2009-07-28 09:29:32 ----N---- D:\WINDOWS\system32\msxml6r.dll 2009-07-28 09:29:31 ----N---- D:\WINDOWS\system32\msxml6.dll 2009-07-28 09:29:24 ----N---- D:\WINDOWS\system32\comsdupd.exe 2009-07-28 09:29:23 ----N---- D:\WINDOWS\system32\smtpapi.dll 2009-07-28 09:29:23 ----N---- D:\WINDOWS\system32\rwnh.dll 2009-07-28 09:29:22 ----N---- D:\WINDOWS\system32\ativvaxx.dll 2009-07-28 09:29:22 ----N---- D:\WINDOWS\system32\ativtmxx.dll 2009-07-28 09:29:22 ----N---- D:\WINDOWS\system32\ati3duag.dll 2009-07-28 09:29:22 ----N---- D:\WINDOWS\system32\ati3d1ag.dll 2009-07-28 09:29:22 ----N---- D:\WINDOWS\system32\ati2dvag.dll 2009-07-28 09:29:22 ----N---- D:\WINDOWS\system32\ati2dvaa.dll 2009-07-28 09:29:22 ----N---- D:\WINDOWS\system32\ati2cqag.dll 2009-07-28 09:29:22 ----N---- D:\WINDOWS\system32\aaclient.dll 2009-07-28 09:29:21 ----N---- D:\WINDOWS\system32\dot3msm.dll 2009-07-28 09:29:21 ----N---- D:\WINDOWS\system32\dot3gpclnt.dll 2009-07-28 09:29:21 ----N---- D:\WINDOWS\system32\dot3dlg.dll 2009-07-28 09:29:21 ----N---- D:\WINDOWS\system32\dot3cfg.dll 2009-07-28 09:29:21 ----N---- D:\WINDOWS\system32\dot3api.dll 2009-07-28 09:29:21 ----N---- D:\WINDOWS\system32\dimsroam.dll 2009-07-28 09:29:21 ----N---- D:\WINDOWS\system32\dimsntfy.dll 2009-07-28 09:29:21 ----N---- D:\WINDOWS\system32\dhcpqec.dll 2009-07-28 09:29:21 ----N---- D:\WINDOWS\system32\credssp.dll 2009-07-28 09:29:21 ----N---- D:\WINDOWS\system32\bitsprx4.dll 2009-07-28 09:29:21 ----N---- D:\WINDOWS\system32\azroles.dll 2009-07-28 09:29:20 ----N---- D:\WINDOWS\system32\eapsvc.dll 2009-07-28 09:29:20 ----N---- D:\WINDOWS\system32\eapqec.dll 2009-07-28 09:29:20 ----N---- D:\WINDOWS\system32\eappprxy.dll 2009-07-28 09:29:20 ----N---- D:\WINDOWS\system32\eapphost.dll 2009-07-28 09:29:20 ----N---- D:\WINDOWS\system32\eappgnui.dll 2009-07-28 09:29:20 ----N---- D:\WINDOWS\system32\eappcfg.dll 2009-07-28 09:29:20 ----N---- D:\WINDOWS\system32\eapp3hst.dll 2009-07-28 09:29:20 ----N---- D:\WINDOWS\system32\eapolqec.dll 2009-07-28 09:29:20 ----N---- D:\WINDOWS\system32\dot3ui.dll 2009-07-28 09:29:20 ----N---- D:\WINDOWS\system32\dot3svc.dll 2009-07-28 09:29:19 ----N---- D:\WINDOWS\system32\kbdbhc.dll 2009-07-28 09:29:19 ----N---- D:\WINDOWS\system32\hsfcisp2.dll 2009-07-28 09:29:18 ----N---- D:\WINDOWS\system32\mmcex.dll 2009-07-28 09:29:18 ----N---- D:\WINDOWS\system32\microsoft.managementconsole.dll 2009-07-28 09:29:18 ----N---- D:\WINDOWS\system32\mdmxsdk.dll 2009-07-28 09:29:18 ----N---- D:\WINDOWS\system32\l2gpstore.dll 2009-07-28 09:29:18 ----N---- D:\WINDOWS\system32\kmsvc.dll 2009-07-28 09:29:18 ----N---- D:\WINDOWS\system32\kbdpash.dll 2009-07-28 09:29:18 ----N---- D:\WINDOWS\system32\kbdnepr.dll 2009-07-28 09:29:18 ----N---- D:\WINDOWS\system32\kbdiultn.dll 2009-07-28 09:29:17 ----N---- D:\WINDOWS\system32\onex.dll 2009-07-28 09:29:17 ----N---- D:\WINDOWS\system32\napstat.exe 2009-07-28 09:29:17 ----N---- D:\WINDOWS\system32\napmontr.dll 2009-07-28 09:29:17 ----N---- D:\WINDOWS\system32\napipsec.dll 2009-07-28 09:29:17 ----N---- D:\WINDOWS\system32\mtxparhd.dll 2009-07-28 09:29:17 ----N---- D:\WINDOWS\system32\msshavmsg.dll 2009-07-28 09:29:17 ----N---- D:\WINDOWS\system32\mssha.dll 2009-07-28 09:29:17 ----N---- D:\WINDOWS\system32\mmcperf.exe 2009-07-28 09:29:17 ----N---- D:\WINDOWS\system32\mmcfxcommon.dll 2009-07-28 09:29:16 ----N---- D:\WINDOWS\system32\slserv.exe 2009-07-28 09:29:16 ----N---- D:\WINDOWS\system32\slrundll.exe 2009-07-28 09:29:16 ----N---- D:\WINDOWS\system32\slgen.dll 2009-07-28 09:29:16 ----N---- D:\WINDOWS\system32\slextspk.dll 2009-07-28 09:29:16 ----N---- D:\WINDOWS\system32\slcoinst.dll 2009-07-28 09:29:16 ----N---- D:\WINDOWS\system32\setupn.exe 2009-07-28 09:29:16 ----N---- D:\WINDOWS\system32\s3gnb.dll 2009-07-28 09:29:16 ----N---- D:\WINDOWS\system32\rhttpaa.dll 2009-07-28 09:29:16 ----N---- D:\WINDOWS\system32\rasqec.dll 2009-07-28 09:29:16 ----N---- D:\WINDOWS\system32\qutil.dll 2009-07-28 09:29:16 ----N---- D:\WINDOWS\system32\qcliprov.dll 2009-07-28 09:29:16 ----N---- D:\WINDOWS\system32\qagentrt.dll 2009-07-28 09:29:16 ----N---- D:\WINDOWS\system32\qagent.dll 2009-07-28 09:29:16 ----N---- D:\WINDOWS\system32\photometadatahandler.dll 2009-07-28 09:29:15 ----N---- D:\WINDOWS\system32\tspkg.dll 2009-07-28 09:29:15 ----N---- D:\WINDOWS\system32\tsgqec.dll 2009-07-28 09:29:14 ----N---- D:\WINDOWS\system32\windowscodecsext.dll 2009-07-28 09:29:14 ----N---- D:\WINDOWS\system32\windowscodecs.dll 2009-07-28 09:29:14 ----N---- D:\WINDOWS\system32\verclsid.exe 2009-07-28 09:29:13 ----N---- D:\WINDOWS\system32\wmphoto.dll 2009-07-28 09:29:13 ----N---- D:\WINDOWS\system32\wlanapi.dll 2009-07-28 09:29:13 ----N---- D:\WINDOWS\slrundll.exe 2009-07-28 09:29:13 ----A---- D:\WINDOWS\system32\xmllite.dll 2009-07-28 09:29:12 ----D---- D:\WINDOWS\system32\pl-pl 2009-07-28 09:29:11 ----D---- D:\WINDOWS\l2schemas 2009-07-28 09:29:10 ----D---- D:\WINDOWS\system32\pl 2009-07-28 09:29:10 ----D---- D:\WINDOWS\system32\bits 2009-07-28 09:26:48 ----D---- D:\WINDOWS\ServicePackFiles 2009-07-28 09:25:29 ----D---- D:\WINDOWS\network diagnostic 2009-07-28 09:23:27 ----HDC---- D:\WINDOWS\$NtServicePackUninstall$ 2009-07-28 09:18:00 ----D---- D:\Program Files\SGJ 2009-07-27 23:15:02 ----HDC---- D:\WINDOWS\$NtUninstallKB951376-v2_0$ 2009-07-27 23:14:59 ----HDC---- D:\WINDOWS\$NtUninstallKB952954_0$ 2009-07-27 23:14:55 ----HDC---- D:\WINDOWS\$NtUninstallKB959426_0$ 2009-07-27 23:14:51 ----HDC---- D:\WINDOWS\$NtUninstallKB946648_0$ 2009-07-27 23:14:48 ----HDC---- D:\WINDOWS\$NtUninstallKB956803_0$ 2009-07-27 23:14:44 ----HDC---- D:\WINDOWS\$NtUninstallKB935448$ 2009-07-27 23:14:40 ----HDC---- D:\WINDOWS\$NtUninstallKB955839$ 2009-07-27 23:14:35 ----HDC---- D:\WINDOWS\$NtUninstallKB950974_0$ 2009-07-27 23:14:31 ----HDC---- D:\WINDOWS\$NtUninstallKB960225_0$ 2009-07-27 23:14:28 ----HDC---- D:\WINDOWS\$NtUninstallKB973346$ 2009-07-27 23:14:18 ----HDC---- D:\WINDOWS\$NtUninstallKB956572_0$ 2009-07-27 23:14:11 ----HDC---- D:\WINDOWS\$NtUninstallKB961501_0$ 2009-07-27 23:14:02 ----HDC---- D:\WINDOWS\$NtUninstallKB969897_0$ 2009-07-27 23:13:57 ----HDC---- D:\WINDOWS\$NtUninstallKB938464-v2_0$ 2009-07-27 23:13:52 ----HDC---- D:\WINDOWS\$NtUninstallKB971633_0$ 2009-07-27 23:13:48 ----HDC---- D:\WINDOWS\$NtUninstallKB952069_WM9$ 2009-07-27 23:13:44 ----HDC---- D:\WINDOWS\$NtUninstallKB952004_0$ 2009-07-27 23:13:39 ----HDC---- D:\WINDOWS\$NtUninstallKB941569$ 2009-07-27 23:13:30 ----HDC---- D:\WINDOWS\$NtUninstallKB950762_0$ 2009-07-27 23:13:26 ----HDC---- D:\WINDOWS\$NtUninstallKB957097_0$ 2009-07-27 23:13:22 ----HDC---- D:\WINDOWS\$NtUninstallKB923689$ 2009-07-27 23:13:04 ----HDC---- D:\WINDOWS\$NtUninstallKB958687_0$ 2009-07-27 23:13:00 ----HDC---- D:\WINDOWS\$NtUninstallKB952287_0$ 2009-07-27 23:12:53 ----HDC---- D:\WINDOWS\$NtUninstallKB967715_0$ 2009-07-27 23:12:49 ----HDC---- D:\WINDOWS\$NtUninstallKB951066_0$ 2009-07-27 23:12:44 ----HDC---- D:\WINDOWS\$NtUninstallKB951748_0$ 2009-07-27 23:12:39 ----HDC---- D:\WINDOWS\$NtUninstallKB970238_0$ 2009-07-27 23:12:35 ----HDC---- D:\WINDOWS\$NtUninstallKB960803_0$ 2009-07-27 23:12:31 ----HDC---- D:\WINDOWS\$NtUninstallKB968537_0$ 2009-07-27 23:12:27 ----HDC---- D:\WINDOWS\$NtUninstallKB954600_0$ 2009-07-27 23:12:23 ----HDC---- D:\WINDOWS\$NtUninstallKB958644_0$ 2009-07-27 23:12:19 ----HDC---- D:\WINDOWS\$NtUninstallKB961371_0$ 2009-07-27 23:12:14 ----HDC---- D:\WINDOWS\$NtUninstallKB955069_0$ 2009-07-27 23:12:10 ----HDC---- D:\WINDOWS\$NtUninstallKB956802_0$ 2009-07-27 23:12:06 ----HDC---- D:\WINDOWS\$NtUninstallKB944338-v2$ 2009-07-27 23:11:59 ----HDC---- D:\WINDOWS\$NtUninstallKB923561_0$ 2009-07-27 20:43:26 ----D---- D:\Documents and Settings\All Users\Dane aplikacji\Windows Genuine Advantage 2009-07-27 20:12:03 ----D---- D:\WINDOWS\system32\PreInstall 2009-07-27 20:12:01 ----HDC---- D:\WINDOWS\$NtUninstallKB898461$ 2009-07-27 20:12:01 ----HD---- D:\WINDOWS\$hf_mig$ 2009-07-27 20:11:49 ----N---- D:\WINDOWS\system32\spmsg.dll 2009-07-27 20:11:46 ----HDC---- D:\WINDOWS\$MSI31Uninstall_KB893803v2$ 2009-07-27 20:09:08 ----A---- D:\WINDOWS\system32\wups2.dll 2009-07-27 20:09:08 ----A---- D:\WINDOWS\system32\wucltui.dll.mui 2009-07-27 20:09:07 ----A---- D:\WINDOWS\system32\wuaueng.dll.mui 2009-07-27 20:09:05 ----D---- D:\WINDOWS\system32\SoftwareDistribution 2009-07-27 20:09:05 ----A---- D:\WINDOWS\system32\wuapi.dll.mui 2009-07-27 18:14:19 ----D---- D:\Program Files\Kaspersky Lab 2009-07-27 18:14:19 ----D---- D:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab 2009-07-27 18:11:01 ----HD---- D:\kleaner.tmp 2009-07-27 18:02:12 ----D---- D:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files 2009-07-27 12:45:34 ----D---- D:\Program Files\CCleaner 2009-07-27 12:43:17 ----A---- D:\WINDOWS\system32\DfSdkBt64.exe 2009-07-27 12:43:17 ----A---- D:\WINDOWS\system32\DfSdkBt.exe 2009-07-27 12:43:13 ----D---- D:\Program Files\Ashampoo 2009-07-27 10:58:38 ----A---- D:\WINDOWS\system32\MFC71.dll 2009-07-27 10:58:38 ----A---- D:\WINDOWS\system32\aswBoot.exe 2009-07-27 10:58:36 ----D---- D:\Program Files\Alwil Software 2009-07-26 20:22:43 ----HDC---- D:\Documents and Settings\All Users\Dane aplikacji\~0 2009-07-26 20:22:39 ----D---- D:\Documents and Settings\All Users\Dane aplikacji\Lavasoft 2009-07-20 21:08:06 ----D---- D:\Program Files\MoorHunt 2009-07-13 16:45:42 ----RSH---- D:\WINDOWS\system32\nmdfgds0.dll 2009-07-04 12:13:09 ----A---- D:\WINDOWS\AhnRpta.exe ======List of files/folders modified in the last 1 months====== 2009-08-02 13:15:28 ----D---- D:\WINDOWS\Temp 2009-08-02 13:15:27 ----RD---- D:\Program Files 2009-08-02 12:58:52 ----D---- D:\WINDOWS\system32\CatRoot2 2009-08-02 12:58:28 ----D---- D:\WINDOWS\system32 2009-08-02 12:58:27 ----SHD---- D:\WINDOWS\Installer 2009-08-02 12:57:55 ----SD---- D:\WINDOWS\Tasks 2009-08-02 12:55:03 ----D---- D:\WINDOWS 2009-08-02 12:25:05 ----D---- D:\Program Files\Common Files 2009-08-01 20:52:49 ----RSHDC---- D:\WINDOWS\system32\dllcache 2009-08-01 20:52:43 ----D---- D:\WINDOWS\system32\drivers 2009-07-31 22:01:18 ----D---- D:\WINDOWS\system32\CatRoot 2009-07-31 20:26:39 ----HD---- D:\WINDOWS\inf 2009-07-31 20:26:34 ----D---- D:\Program Files\Internet Explorer 2009-07-31 20:26:02 ----D---- D:\WINDOWS\Help 2009-07-31 20:24:33 ----D---- D:\WINDOWS\Debug 2009-07-29 21:07:55 ----A---- D:\WINDOWS\SchedLgU.Txt 2009-07-29 20:51:09 ----D---- D:\WINDOWS\AppPatch 2009-07-29 20:21:59 ----D---- D:\WINDOWS\system32\config 2009-07-29 20:21:25 ----D---- D:\WINDOWS\Media 2009-07-29 20:04:50 ----D---- D:\Program Files\7-Zip 2009-07-28 10:58:15 ----D---- D:\WINDOWS\Microsoft.NET 2009-07-28 10:58:11 ----RSD---- D:\WINDOWS\assembly 2009-07-28 10:28:36 ----A---- D:\WINDOWS\system32\PerfStringBackup.INI 2009-07-28 10:05:04 ----D---- D:\WINDOWS\system32\mui 2009-07-28 10:02:58 ----RSD---- D:\WINDOWS\Fonts 2009-07-28 10:02:30 ----D---- D:\WINDOWS\system32\spool 2009-07-28 10:01:14 ----D---- D:\WINDOWS\WinSxS 2009-07-28 09:49:34 ----D---- D:\WINDOWS\system32\Setup 2009-07-28 09:49:33 ----D---- D:\WINDOWS\system32\wbem 2009-07-28 09:48:52 ----D---- D:\WINDOWS\security 2009-07-28 09:33:10 ----D---- D:\Program Files\Messenger 2009-07-28 09:29:31 ----D---- D:\Program Files\Windows Media Player 2009-07-28 09:29:24 ----D---- D:\WINDOWS\ehome 2009-07-28 09:29:23 ----D---- D:\WINDOWS\system32\inetsrv 2009-07-28 09:29:23 ----D---- D:\WINDOWS\ime 2009-07-28 09:29:12 ----D---- D:\WINDOWS\system32\usmt 2009-07-28 09:29:10 ----D---- D:\WINDOWS\PeerNet 2009-07-28 09:29:10 ----D---- D:\Program Files\Movie Maker 2009-07-28 09:26:42 ----D---- D:\WINDOWS\system32\Restore 2009-07-28 09:26:42 ----D---- D:\WINDOWS\system32\npp 2009-07-28 09:26:41 ----D---- D:\WINDOWS\msagent 2009-07-28 09:26:39 ----D---- D:\WINDOWS\srchasst 2009-07-28 09:26:39 ----D---- D:\Program Files\NetMeeting 2009-07-28 09:26:38 ----D---- D:\WINDOWS\system32\Com 2009-07-28 09:26:36 ----D---- D:\Program Files\Windows NT 2009-07-28 09:26:36 ----D---- D:\Program Files\Outlook Express 2009-07-28 09:26:33 ----D---- D:\Program Files\Common Files\System 2009-07-28 09:26:21 ----D---- D:\WINDOWS\system32\oobe 2009-07-28 09:26:20 ----D---- D:\WINDOWS\system 2009-07-28 09:24:31 ----D---- D:\WINDOWS\system32\ReinstallBackups 2009-07-27 20:43:46 ----SD---- D:\WINDOWS\Downloaded Program Files 2009-07-27 20:33:08 ----D---- D:\WINDOWS\SoftwareDistribution 2009-07-27 19:30:16 ----RAH---- D:\WINDOWS\system32\cdplayer.exe.manifest 2009-07-27 10:59:58 ----D---- D:\Program Files\F-Secure Internet Security 2009-07-27 10:59:46 ----D---- D:\Documents and Settings\All Users\Dane aplikacji\f-secure 2009-07-26 20:29:42 ----DC---- D:\WINDOWS\system32\DRVSTORE 2009-07-18 18:05:06 ----N---- D:\WINDOWS\system32\mshtml.dll 2009-07-18 18:05:06 ----A---- D:\WINDOWS\system32\shdocvw.dll 2009-07-05 10:41:23 ----D---- D:\Documents and Settings\Administrator\Dane aplikacji\Skype 2009-07-05 10:15:48 ----D---- D:\Documents and Settings\Administrator\Dane aplikacji\skypePM 2009-07-04 11:30:48 ----A---- D:\WINDOWS\win.ini 2009-07-04 11:30:48 ----A---- D:\WINDOWS\system.ini 2009-07-03 18:59:41 ----N---- D:\WINDOWS\system32\occache.dll 2009-07-03 18:59:38 ----N---- D:\WINDOWS\system32\jsproxy.dll 2009-07-03 18:59:37 ----N---- D:\WINDOWS\system32\iepeers.dll 2009-07-03 18:59:36 ----N---- D:\WINDOWS\system32\iedkcs32.dll 2009-07-03 13:01:06 ----N---- D:\WINDOWS\system32\ie4uinit.exe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 AmdK8;Sterownik procesora AMD; D:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520] R1 aswSP;avast! Self Protection; D:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768] R1 KLIF;Kaspersky Lab Driver; D:\WINDOWS\system32\DRIVERS\klif.sys [2009-07-27 213520] R2 aswFsBlk;aswFsBlk; D:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560] R2 DgiVecp;Team MFP Comm Driver; D:\WINDOWS\System32\Drivers\DgiVecp.sys [2005-03-14 41984] R2 Sentinel;Sentinel; D:\WINDOWS\System32\Drivers\SENTINEL.SYS [2006-12-21 90688] R3 HDAudBus;Sterownik magistrali Microsoft UAA dla High Definition Audio; D:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); D:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-12-11 4959232] R3 klim5;Kaspersky Anti-Virus NDIS Filter; D:\WINDOWS\system32\DRIVERS\klim5.sys [2008-03-25 24592] R3 nv;nv; D:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-04-16 3661280] R3 NVENETFD;NVIDIA nForce Networking Controller Driver; D:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-11-27 58368] R3 nvnetbus;NVIDIA Network Bus Enumerator; D:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-11-27 19968] R3 usbehci;Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft; D:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208] R3 usbhub;Koncentrator z obsługą USB2; D:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520] R3 usbohci;Sterownik Miniport otwartego kontrolera hosta USB Microsoft; D:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-14 17152] S3 asb4aw9x;asb4aw9x; D:\WINDOWS\system32\drivers\asb4aw9x.sys [] S3 AVPsys;AVPsys; \??\D:\WINDOWS\system32\drivers\cdaudio.sys [] S3 CCDECODE;Dekoder napisów; D:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024] S3 gdrv;gdrv; \??\D:\WINDOWS\gdrv.sys [] S3 MSTEE;Konwerter strumieni Tee/Sink-to-Sink Microsoft Streaming; D:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504] S3 NABTSFEC;Koder-dekoder NABTS/FEC VBI; D:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248] S3 NdisIP;Połączenie TV/wideo firmy Microsoft; D:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880] S3 SLIP;BDA Slip De-Framer; D:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136] S3 streamip;BDA IPSink; D:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232] S3 TSP;TSP; \??\D:\WINDOWS\system32\drivers\klif.sys [] S3 usbprint;Klasa PRINTER USB Microsoft; D:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856] S3 usbscan;Sterownik skanera USB; D:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104] S3 USBSTOR;Sterownik magazynu masowego USB; D:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368] S3 WFUSBIILE;WinFast PalmTop/Novo TV Pro Video; D:\WINDOWS\system32\drivers\wfremora.sys [] S3 WSTCODEC;Kodery-dekodery teletekstu w standardzie światowym; D:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200] S4 Aavmker4;avast! Asynchronous Virus Monitor; D:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944] S4 aswMon2;avast! Standard Shield Support; D:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032] S4 aswRdr;aswRdr; D:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152] S4 aswTdi;avast! Network Shield Support; D:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376] S4 IntelIde;IntelIde; D:\WINDOWS\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AVP;Kaspersky Anti-Virus; D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe [2009-07-27 201992] R2 FS Service Control;FS Service Control; D:\Program Files\Common Files\ArchestrA\NTServApp.exe [2008-07-16 32845] R2 JavaQuickStarterService;Java Quick Starter; D:\Program Files\Java\jre6\bin\jqs.exe [2009-06-21 152984] R2 MDM;Machine Debug Manager; D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120] R2 NVSvc;NVIDIA Display Driver Service; D:\WINDOWS\system32\nvsvc32.exe [2006-04-16 143426] R2 slssvc;Wonderware SuiteLink; D:\Program Files\Common Files\ArchestrA\slssvc.exe [2008-07-16 40960] R2 UleadBurningHelper;Ulead Burning Helper; D:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2004-12-13 49152] R2 UMWdf;Windows User Mode Driver Framework; D:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912] S3 aspnet_state;ASP.NET State Service; D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632] S3 DfSdkS;Defragmentation-Service; D:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe [2009-01-09 410976] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; D:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104] S3 GoogleDesktopManager-092308-165331;Menedżer Google Desktop 5.8.809.23506; D:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-05-06 30192] S3 idsvc;Windows CardSpace; D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664] S3 ose;Office Source Engine; D:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136] S3 WWNetDDE;Wonderware NetDDE Helper; D:\Program Files\Common Files\ArchestrA\wwnetdde.exe [2008-07-16 80688] S4 aaLogger;ArchestrA Logger; D:\Program Files\Common Files\ArchestrA\aaLogger.exe [2008-07-16 229446] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096] -----------------EOF-----------------

Z gory wielkie dzieki za pomoc!!

**Posty:** 18165 · przez **wojtas** 02 Sie 2009, 16:21

załoz nowy temat daj loga z OTL