prosze o sprawdzenie

[Artur44]

komp mi sie resetuje

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:08:38, on 2007-11-26
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\TPSrv.exe
C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\pavsrv51.exe
C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\AVENGINE.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\APVXDWIN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Documents and Settings\def\Moje dokumenty\Kompozycje\Kursory\CursorXP.exe
C:\Program Files\Kalendarz XP\Kalendarz.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\PsCtrls.exe
C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\PavFnSvr.exe
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
c:\program files\panda software\panda antivirus + firewall 2007\firewall\PSHOST.EXE
C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\PsImSvc.exe
C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\WebProxy.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\psimreal.exe
C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\avciman.exe
F:\Programy\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [AVPDWIN] "C:\Program Files\Panda Software\Panda Demo\pandasft.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CursorXP] C:\Documents and Settings\def\Moje dokumenty\Kompozycje\Kursory\CursorXP.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Kalendarz XP.lnk = C:\Program Files\Kalendarz XP\Kalendarz.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Panda Software Controller - Panda Software International - C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\PsCtrls.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software International - C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software International - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\pavsrv51.exe
O23 - Service: Panda Host Service (PSHost) - Panda Software International - c:\program files\panda software\panda antivirus + firewall 2007\firewall\PSHOST.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software International - C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\PsImSvc.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Software International - C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\TPSrv.exe

--
End of file - 4770 bytes

[Kuba1]

Popraw loga w tagi i dołącz ComboFix.

[Artur44]

to z ComboFix

ComboFix 07-11-19.4 - def 2007-11-27 14:23:14.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.123 [GMT 1:00]
Running from: F:\Programy\ComboFix\ComboFix.exe
.

((((((((((((((((((((((((( Files Created from 2007-10-27 to 2007-11-27 )))))))))))))))))))))))))))))))
.

2007-11-10 09:58 <DIR> d-------- C:\Program Files\Creative
2007-11-10 09:50 10,624 --a------ C:\WINDOWS\system32\drivers\gameenum.sys
2007-11-10 09:50 10,624 --a--c--- C:\WINDOWS\system32\dllcache\gameenum.sys
2007-11-10 09:49 40,704 --a------ C:\WINDOWS\system32\drivers\es1371mp.sys
2007-11-10 09:49 40,704 --a--c--- C:\WINDOWS\system32\dllcache\es1371mp.sys
2007-11-09 18:12 <DIR> d-------- C:\WINDOWS\system32\Futuremark
2007-11-09 18:12 21,664 --a------ C:\WINDOWS\system32\drivers\Entech.sys
2007-11-09 18:12 3,972 --------- C:\WINDOWS\system32\drivers\PciBus.sys
2007-11-04 14:38 <DIR> d-------- C:\Documents and Settings\def\Dane aplikacji\Systweak
2007-11-03 15:20 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\NVIDIA
2007-11-03 15:10 208,896 --a------ C:\WINDOWS\system32\NVUNINST.EXE
2007-11-03 15:10 208,896 --a------ C:\WINDOWS\system32\nvudisp.exe
2007-11-03 15:10 88,566 --a------ C:\WINDOWS\system32\nvapps.xml
2007-11-03 15:10 17,056 --a------ C:\WINDOWS\system32\nvdisp.nvu
2007-11-03 14:41 <DIR> d-------- C:\Program Files\Lavasoft
2007-11-03 14:41 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Lavasoft
2007-11-03 14:40 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-27 13:22 1,224 ----a-w C:\WINDOWS\system32\drivers\APPFLTR.CFG.bck
2007-11-27 13:22 1,224 ----a-w C:\WINDOWS\system32\drivers\APPFLTR.CFG
2007-11-27 13:09 --------- d-----w C:\Program Files\Kalendarz XP
2007-11-27 13:06 221,444 ----a-w C:\WINDOWS\system32\drivers\APPFCONT.DAT.bck
2007-11-27 13:06 221,444 ----a-w C:\WINDOWS\system32\drivers\APPFCONT.DAT
2007-11-27 13:05 --------- d-----w C:\Program Files\Gadu-Gadu
2007-11-27 13:02 --------- d-----w C:\Program Files\eMule
2007-11-10 13:50 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-11-10 13:50 --------- d-----w C:\Program Files\Common Files\InstallShield
2007-10-18 13:20 --------- d-----w C:\Program Files\Ahead
2007-10-18 13:19 --------- d-----w C:\Program Files\Common Files\Ahead
2007-10-08 13:05 --------- d-----w C:\Program Files\7-Zip
2007-09-30 11:03 --------- d-----w C:\Program Files\Panda Software
2007-09-30 11:00 --------- d-----w C:\Program Files\Common Files\Panda Software
2007-09-28 16:41 --------- d-----w C:\Documents and Settings\def\Dane aplikacji\InstallShield
2007-09-28 15:57 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\nView_Profiles
2007-09-28 15:53 219,648 ----a-w C:\WINDOWS\system32\uxtheme.dll
2007-09-28 14:33 --------- d-----w C:\Documents and Settings\def\Dane aplikacji\Gadu-Gadu
2007-09-27 13:26 --------- d-----w C:\Program Files\microsoft frontpage
2007-09-27 13:23 --------- d-----w C:\Program Files\Usługi online
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CursorXP"="C:\Documents and Settings\def\Moje dokumenty\Kompozycje\Kursory\CursorXP.exe" [2005-01-19 16:34]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe" [2003-09-01 22:42]
"AVPDWIN"="C:\Program Files\Panda Software\Panda Demo\pandasft.exe" []
"APVXDWIN"="C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\APVXDWIN.exe" [2007-03-30 14:52]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50]
"NvCplDaemon"="RUNDLL32.exe" [2004-08-03 23:44 C:\WINDOWS\system32\rundll32.exe]
"nwiz"="nwiz.exe" [2006-10-22 12:22 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="RUNDLL32.exe" [2004-08-03 23:44 C:\WINDOWS\system32\rundll32.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 23:44]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
Kalendarz XP.lnk - C:\Program Files\Kalendarz XP\Kalendarz.exe [2007-09-29 14:46:57]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avldr]
avldr.dll 2007-02-15 19:02 50736 C:\WINDOWS\system32\avldr.dll

R1 APPFLT;App Filter Plugin;\??\C:\WINDOWS\system32\Drivers\APPFLT.SYS
R1 DSAFLT;DSA Filter Plugin;\??\C:\WINDOWS\system32\Drivers\DSAFLT.SYS
R1 FNETMON;NetMon Filter Plugin;\??\C:\WINDOWS\system32\Drivers\fnetmon.SYS
R1 IDSFLT;Ids Filter Plugin;\??\C:\WINDOWS\system32\Drivers\IDSFLT.SYS
R1 NETFLTDI;Panda Net Driver [TDI Layer];\??\C:\WINDOWS\system32\Drivers\NETFLTDI.SYS
R1 ShldDrv;Panda File Shield Driver;\??\C:\WINDOWS\system32\DRIVERS\ShlDrv51.sys
R1 SMSFLT;SMS Filter Plugin;\??\C:\WINDOWS\system32\Drivers\SMSFLT.SYS
R1 WNMFLT;Wifi Monitor Filter Plugin;\??\C:\WINDOWS\system32\Drivers\WNMFLT.SYS
R2 cpoint;Panda CPoint Driver;C:\WINDOWS\system32\Drivers\cpoint.sys
R2 PavProc;Panda Process Protection Driver;\??\C:\WINDOWS\system32\DRIVERS\PavProc.sys
R3 AvFlt;Antivirus Filter Driver;C:\WINDOWS\system32\drivers\av5flt.sys
R3 NETIMFLT;PANDA NDIS IM Filter Miniport;C:\WINDOWS\system32\DRIVERS\netimflt.sys
R3 PavSRK.sys;PavSRK.sys;\??\C:\WINDOWS\system32\PavSRK.sys
S1 ensqio;ensqio;C:\WINDOWS\system32\DRIVERS\ensqio.sys
S1 sbpcint4;SB AudioPCI 128;C:\WINDOWS\system32\DRIVERS\sbpcint4.sys
S3 PavTPK.sys;PavTPK.sys;\??\C:\WINDOWS\system32\PavTPK.sys
S3 RivaTuner32;RivaTuner32;\??\F:\Programy\RivaTuner v2.06\RivaTuner32.sys

*Newly Created Service* - CATCHME
.
**************************************************************************

catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-27 14:25:16
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-11-27 14:26:20
.
--- E O F ---

[Dzi@dek]

Czysto.