Pokaż ukryte pliki i foldery nie działa

**Posty:** 23 · przez **undermess** 04 Gru 2008, 21:10

Gdy zaznaczam opcję Pokaż ukryte pliki i foldery i naciskam zastosuj polecenie nie jest wykonywane pomóżcie
gdy włączę opcje folderów ponownie opcja nie jest zaznaczona. Podejżewam że to błędy w rejestrze albo jakiś vir jest

**Posty:** 7838 · przez **Lukesh** 04 Gru 2008, 21:28

1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp

2.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
3.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem

A nastapnie wstaw logi z Combofixa - z podlaczonym pendrivem: jak-generujemy-logi-z-combofixa-oraz-rsita-vt95026.html

Autor postu otrzymał pochwałę

**Posty:** 1308 · przez **apg2312** 04 Gru 2008, 21:37

Sprawdź w kluczu:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
czy wartości:
ShowSuperHidden ma wartość 1
SuperHidden ma wartość 1
Hidden ma wartość 1
Jeśli jest inaczej popraw + restart.
Jesli po restarcie pokazywanie dalej nie dziala, a te wartosci wracaja do 0 lub 2, to znaczy, ze albo bawiles sie jakims programem do ukrywania, albo masz zainfekowany komputer.

**Posty:** 23 · przez **undermess** 04 Gru 2008, 22:00

dopiero combofix dał radę wcześniej już skanowałem ale teraz wyśle loga z drugiego skanu

Kod: Zaznacz wszystko: ComboFix 08-12-04.01 - kapi 2008-12-04 20:48:44.4 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1250.1.1045.18.513 [GMT 1:00] Uruchomiony z: c:\documents and settings\kapi\Pulpit\pobrane\ComboFix.exe * Utworzono nowy punkt przywracania . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . J:\autorun.inf J:\MS32DLL.dll.vbs . ((((((((((((((((((((((((( Pliki utworzone od 2008-11-04 do 2008-12-04 ))))))))))))))))))))))))))))))) . 2008-12-04 19:26 . 2008-12-04 19:26 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\13290 2008-12-04 19:23 . 2008-12-04 19:23 <DIR> d-------- c:\program files\iMesh Applications 2008-12-03 19:00 . 2008-12-03 19:00 410,984 --a------ c:\windows\system32\deploytk.dll 2008-12-02 18:58 . 2008-12-02 19:02 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Powerboat GT 2008-12-01 20:14 . 2003-07-20 19:17 5,174 --a------ c:\windows\system32\nppt9x.vxd 2008-12-01 20:14 . 2005-01-04 10:43 4,682 --a------ c:\windows\system32\npptNT2.sys 2008-12-01 18:33 . 2008-12-01 18:33 <DIR> d-------- c:\program files\NCSoft 2008-12-01 18:31 . 2008-12-01 18:31 <DIR> d-------- c:\documents and settings\kapi\Dane aplikacji\InstallShield 2008-12-01 18:29 . 2008-12-01 18:31 <DIR> d-------- c:\documents and settings\kapi\Dane aplikacji\GetRightToGo 2008-11-28 21:02 . 2001-01-12 18:47 122,884 --a------ c:\windows\UnGins.exe 2008-11-20 21:44 . 2008-11-20 21:44 42,320 --a------ c:\windows\system32\xfcodec.dll 2008-11-19 19:42 . 2008-11-19 19:43 <DIR> d-------- C:\Fraps 2008-11-19 19:42 . 2008-11-22 16:58 <DIR> d-a------ c:\documents and settings\All Users\Dane aplikacji\TEMP 2008-11-19 19:30 . 2008-11-19 19:30 <DIR> d-------- c:\program files\MSECache 2008-11-18 18:01 . 2008-11-29 13:52 <DIR> d-------- c:\program files\PokerStars 2008-11-18 13:07 . 2008-11-18 13:07 <DIR> d-------- c:\program files\Windows Media Bonus Pack for Windows XP 2008-11-18 13:07 . 2001-11-30 19:05 131,072 --a------ c:\windows\system32\dzip32.dll 2008-11-18 13:07 . 2001-11-30 19:05 110,592 --a------ c:\windows\system32\dunzip32.dll 2008-11-13 18:47 . 2008-09-04 18:17 1,106,944 --------- c:\windows\system32\dllcache\msxml3.dll 2008-11-13 18:47 . 2008-10-24 12:21 455,296 --------- c:\windows\system32\dllcache\mrxsmb.sys 2008-11-12 10:35 . 2008-11-12 10:35 <DIR> d-------- c:\program files\RAR Password Cracker 2008-11-09 22:01 . 2008-11-09 22:01 <DIR> d-------- c:\program files\Onimedia 2008-11-05 01:05 . 2008-11-05 01:05 <DIR> d-------- c:\documents and settings\NetworkService\Dane aplikacji\HPAppData 2008-11-04 19:10 . 2008-11-04 19:10 <DIR> d-------- c:\windows\system32\xlive 2008-11-04 18:46 . 2008-11-04 18:46 <DIR> d-------- c:\documents and settings\kapi\Dane aplikacji\Leadertech . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-12-04 19:55 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\Kaspersky Lab 2008-12-04 19:52 802,848 --sha-w c:\windows\system32\drivers\fidbox2.dat 2008-12-04 19:52 5,920 --sha-w c:\windows\system32\drivers\fidbox2.idx 2008-12-04 19:52 5,014,048 --sha-w c:\windows\system32\drivers\fidbox.dat 2008-12-04 19:52 42,348 --sha-w c:\windows\system32\drivers\fidbox.idx 2008-12-04 19:51 --------- d-----w c:\program files\Kalendarz XP 2008-12-04 14:47 --------- d-----w c:\program files\Xfire 2008-12-03 18:00 --------- d-----w c:\program files\Java 2008-12-02 21:17 196,608 ----a-w c:\windows\system32\drivers\nVivid.bin 2008-12-02 18:16 --------- d-----w c:\documents and settings\kapi\Dane aplikacji\Xfire 2008-12-02 18:00 110,592 ----a-w c:\windows\system32\OpenAL32.dll 2008-12-01 17:33 --------- d--h--w c:\program files\InstallShield Installation Information 2008-11-25 18:02 183,112 ----a-w c:\windows\system32\PnkBstrB.exe 2008-11-25 18:02 138,184 ----a-w c:\windows\system32\drivers\PnkBstrK.sys 2008-11-19 18:33 66,872 ----a-w c:\windows\system32\PnkBstrA.exe 2008-11-18 16:28 --------- d-----w c:\program files\Nowe Gadu-Gadu 2008-11-04 17:46 --------- d-----w c:\documents and settings\kapi\Dane aplikacji\Touchstone 2008-11-02 13:16 --------- d-----w c:\documents and settings\kapi\Dane aplikacji\Nowe Gadu-Gadu 2008-11-01 10:04 --------- d-----w c:\documents and settings\kapi\Dane aplikacji\Pogo Games 2008-10-30 20:30 22,328 ----a-w c:\documents and settings\kapi\Dane aplikacji\PnkBstrK.sys 2008-10-30 20:29 682,280 ----a-w c:\windows\system32\pbsvc.exe 2008-10-28 06:48 --------- d-----w c:\program files\SystemRequirementsLab 2008-10-27 16:00 --------- d-----w c:\documents and settings\LocalService\Dane aplikacji\Xfire 2008-10-27 15:59 --------- d-----w c:\documents and settings\NetworkService\Dane aplikacji\Xfire 2008-10-26 20:42 0 ---ha-w c:\windows\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf 2008-10-26 20:42 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_ggsemc_01005.Wdf 2008-10-26 20:31 21,672 ----a-w c:\windows\system32\drivers\ggsemc.sys 2008-10-26 20:31 13,352 ----a-w c:\windows\system32\drivers\ggflt.sys 2008-10-26 20:31 1,419,232 ----a-w c:\windows\system32\wdfcoinstaller01005.dll 2008-10-26 20:28 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\Sony Ericsson 2008-10-26 20:27 --------- d-----w c:\program files\Sony Ericsson 2008-10-26 18:46 --------- d-----w c:\program files\SpeedFan 2008-10-26 07:45 --------- d-----w c:\program files\Premium Clock 2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys 2008-10-21 16:09 --------- d-----w c:\program files\LizardTech 2008-10-20 16:43 --------- d-----w c:\documents and settings\kapi\Dane aplikacji\Mount&Blade 2008-10-20 15:00 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\NFS Underground 2008-10-16 21:52 --------- d-----w c:\program files\Drag Racer 3 2008-10-16 13:13 202,776 ----a-w c:\windows\system32\wuweb.dll 2008-10-16 13:13 202,776 ----a-w c:\windows\system32\dllcache\wuweb.dll 2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll 2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\dllcache\wuaueng.dll 2008-10-16 13:12 561,688 ----a-w c:\windows\system32\wuapi.dll 2008-10-16 13:12 561,688 ----a-w c:\windows\system32\dllcache\wuapi.dll 2008-10-16 13:12 323,608 ----a-w c:\windows\system32\wucltui.dll 2008-10-16 13:12 323,608 ----a-w c:\windows\system32\dllcache\wucltui.dll 2008-10-16 13:09 92,696 ----a-w c:\windows\system32\dllcache\cdm.dll 2008-10-16 13:09 92,696 ----a-w c:\windows\system32\cdm.dll 2008-10-16 13:09 51,224 ----a-w c:\windows\system32\wuauclt.exe 2008-10-16 13:09 51,224 ----a-w c:\windows\system32\dllcache\wuauclt.exe 2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2.dll 2008-10-16 13:08 34,328 ----a-w c:\windows\system32\wups.dll 2008-10-16 13:08 34,328 ----a-w c:\windows\system32\dllcache\wups.dll 2008-10-15 16:36 337,408 ------w c:\windows\system32\dllcache\netapi32.dll 2008-10-15 08:20 --------- d-----w c:\program files\directx 2008-10-14 14:14 --------- d-----w c:\documents and settings\kapi\Dane aplikacji\ArcSoft 2008-10-14 14:07 --------- d-----w c:\program files\ArcSoft 2008-10-09 21:36 --------- d-----w c:\program files\Counter-Strike Source 2008-10-07 19:41 --------- d-----w c:\program files\Prime95 2008-10-07 19:27 --------- d-----w c:\program files\Gigabyte 2008-10-07 19:15 7,296 ----a-w c:\windows\system32\drivers\AMD64CAx86.sys 2008-10-07 19:04 --------- d-----w c:\program files\Alexey V.Voronin 2008-10-06 20:05 --------- d-----w c:\program files\GameGain 2008-10-03 16:23 6,068,224 ------w c:\windows\system32\dllcache\ieframe.dll 2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll 2008-09-15 15:27 1,846,656 ----a-w c:\windows\system32\win32k.sys 2008-09-15 15:27 1,846,656 ------w c:\windows\system32\dllcache\win32k.sys 2008-09-10 01:15 1,307,648 ----a-w c:\windows\system32\msxml6.dll 2008-09-10 01:15 1,307,648 ------w c:\windows\system32\dllcache\msxml6.dll 2008-09-08 10:41 333,824 ------w c:\windows\system32\dllcache\srv.sys 2008-09-05 22:31 267,816 ------w c:\windows\system32\dllcache\wgaLogon.dll 2008-09-05 22:30 952,872 ------w c:\windows\system32\dllcache\WgaTray.exe 2008-09-04 17:17 1,106,944 ----a-w c:\windows\system32\msxml3.dll . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{58A81167-4ED6-495B-B0D6-D791D95DA342}] 2008-06-07 23:55 2404352 --a------ c:\program files\LING Toolbar\Slownik LING\toolbar2.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-12-23 143360] "H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\wcescomm.exe" [2006-11-13 1289000] "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-04-01 486856] "Nowe Gadu-Gadu"="c:\program files\Nowe Gadu-Gadu\gg.exe" [2008-11-21 6890088] "Google Update"="c:\documents and settings\kapi\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe" [2008-10-15 133104] "Gadu-Gadu"="c:\program files\Gadu-Gadu\gg.exe" [2008-03-20 2127296] "EXPLORER.EXE"="EXPLORER.EXE" [2008-04-14 c:\windows\explorer.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NVRaidService"="c:\windows\system32\nvraidservice.exe" [2005-01-17 84480] "ASUSGamerOSD"="c:\program files\ASUS\GamerOSD\GamerOSD.exe" [2007-07-12 380928] "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648] "Sunkist2k"="c:\program files\Multimedia Card Reader\shwicon2k.exe" [2004-08-06 135168] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-03 136600] "DrvIcon"="c:\program files\Vista Drive Icon\DrvIcon.exe" [2008-04-13 49152] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-16 13529088] "AVP"="c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe" [2008-04-25 201992] "EasyTuneV"="c:\program files\Gigabyte\ET5\GUI.exe" [2004-06-14 200704] "Premium Clock"="c:\program files\Premium Clock\Premium.exe" [2007-10-04 1122304] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-05-16 86016] "SoundMan"="SOUNDMAN.EXE" [2006-08-03 c:\windows\soundman.exe] "nwiz"="nwiz.exe" [2008-05-17 c:\windows\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "nltide_3"="advpack.dll" [2008-08-26 c:\windows\system32\advpack.dll] c:\documents and settings\kapi\Menu Start\Programy\Autostart\ Xfire.lnk - c:\program files\Xfire\xfire.exe [2008-11-20 2986320] c:\documents and settings\All Users\Menu Start\Programy\Autostart\ Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2008-08-20 113664] BlueSoleil.lnk - c:\program files\IVT Corporation\BlueSoleil\BlueSoleil.exe [2008-06-24 1183744] HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-03-11 210520] Kalendarz XP.lnk - c:\program files\Kalendarz XP\Kalendarz.exe [2008-06-15 882176] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "DisableStatusMessages"= 1 (0x1) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoSMMyPictures"= 1 (0x1) "NoSMConfigurePrograms"= 1 (0x1) "NoSMHelp"= 1 (0x1) [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoSMMyPictures"= 1 (0x1) "NoSMConfigurePrograms"= 1 (0x1) "NoSMHelp"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv] 2007-09-23 09:10 229376 c:\program files\Stardock\Object Desktop\WindowBlinds\WbSrv.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.XFR1"= xfcodec.dll [HKLM\~\startupfolder\C:^Documents and Settings^kapi^Menu Start^Programy^Autostart^Rejestrowanie produktów Corela.lnk] path=c:\documents and settings\kapi\Menu Start\Programy\Autostart\Rejestrowanie produktów Corela.lnk backup=c:\windows\pss\Rejestrowanie produktów Corela.lnkStartup [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "ASUS SmartDoctor"=c:\program files\ASUS\SmartDoctor\SmartDoctor.exe /start "Skype"="c:\program files\Skype\Phone\Skype.exe" /nosplash /minimized "Gadu-Gadu"="c:\program files\Gadu-Gadu\gg.exe" /tray "AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "HP Software Update"=c:\program files\HP\HP Software Update\HPWuSchd2.exe "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime "VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\program files\Microsoft ActiveSync\rapimgr.exe"= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager "c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager "c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application "c:\\Program Files\\iMesh Applications\\iMesh\\iMesh.exe"= "c:\\Program Files\\Azureus\\Azureus.exe"= "c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"= "c:\\Program Files\\SiSoftware\\SiSoftware Sandra Professional Business XII.SP1\\Win32\\RpcDataSrv.exe"= "c:\\Program Files\\SiSoftware\\SiSoftware Sandra Professional Business XII.SP1\\RpcSandraSrv.exe"= "c:\\Program Files\\Nowe Gadu-Gadu\\gg.exe"= "c:\\Program Files\\Metin2_PL\\metin2.bin"= "c:\\Program Files\\Common Files\\Ahead\\Nero Web\\SetupX.exe"= "d:\\Games\\RedFaction\\PF.exe"= "d:\\Program Files\\Metin2_PL\\metin2.bin"= "c:\\Program Files\\Joost\\xulrunner\\tvprunner.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\Program Files\\Ares\\Ares.exe"= "c:\\Program Files\\uTorrent\\uTorrent.exe"= "c:\\Program Files\\eMule\\eMule.exe"= "c:\\Program Files\\Valve\\hl.exe"= "c:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"= "c:\\Documents and Settings\\All Users\\Dane aplikacji\\Kaspersky Lab Setup Files\\Kaspersky Anti-Virus 2009\\Polish\\setup.exe"= "d:\\Program Files\\Counter-Strike Source\\hl2.exe"= "d:\\Program Files\\EA GAMES\\Need For Speed Underground\\Speed.exe"= "c:\\Program Files\\Sony Ericsson\\Update Service\\Update Service.exe"= "c:\\Program Files\\Xfire\\xfire.exe"= "c:\\WINDOWS\\system32\\PnkBstrA.exe"= "c:\\WINDOWS\\system32\\PnkBstrB.exe"= "d:\\Program Files\\NCsoft\\Exteel (US)\\System\\Exteel.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings] "AllowInboundEchoRequest"= 1 (0x1) R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2008-01-29 32784] R0 nvcchflt;NVIDIA Disk Cache Filter Driver;c:\windows\system32\DRIVERS\nvcchflt.sys [2007-10-17 16640] R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-06-15 78416] R2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2008-06-15 20560] R2 PStrip;PSTRIP;\??\c:\windows\system32\DRIVERS\PSTRIP.SYS [2007-07-15 27992] R2 SVKP;SVKP;\??\c:\windows\system32\SVKP.sys [2008-07-03 2368] R3 asusgsb;ASUS Virtual Video Capture Device Driver;c:\windows\system32\drivers\asusgsb.sys [2008-06-15 12416] R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\DRIVERS\klim5.sys [2008-03-25 24592] R3 MarkFun_NT;MarkFun_NT;\??\c:\program files\Gigabyte\ET5\markfun.w32 [2008-10-07 8236] R3 SunkFilt62;Alcor Micro Corp - 6362;\??\c:\windows\System32\Drivers\sunkfilt62.sys [2004-07-23 46536] R3 Video3D;ASUS Video3D Service;c:\windows\system32\Drivers\Video3D32.sys [2008-06-15 10752] S2 IKANLOADER2;General Purpose USB Driver (e4ldr.sys);c:\windows\system32\Drivers\e4ldr.sys [2008-08-29 64000] S3 AMD64CA;AMD64CA;\??\c:\windows\System32\Drivers\AMD64CAx86.sys [2008-10-07 7296] S3 BRTEV;BRTEV;c:\docume~1\kapi\USTAWI~1\Temp\BRTEV.exe [] S3 e4usbaw;USB ADSL2 WAN Adapter;c:\windows\system32\DRIVERS\e4usbaw.sys [2008-08-29 116992] S3 FGUARD32;FGUARD32;\??\c:\program files\Folder Guard 32-bit\FGUARD32.SYS [2008-07-14 54008] S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2008-10-26 13352] S3 SunkFilt6;Alcor Micro Corp - 6360;\??\c:\windows\System32\Drivers\sunkfilt6.sys [] S3 TXQWW;TXQWW;c:\docume~1\kapi\USTAWI~1\Temp\TXQWW.exe [] S3 u3kh;ASUS My Cinema U3000 Hybrid;c:\windows\system32\DRIVERS\u3kh.sys [2008-06-27 1719808] S3 u3khrc;ASUS Infrared Receiver;c:\windows\system32\DRIVERS\u3khrc.sys [2008-06-27 13568] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6cd335da-44f7-11dd-aa8e-000feaf27b53}] \Shell\AutoRun\command - L:\Autorun.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8e549af2-3bbd-11dd-aa77-000feaf27b53}] \Shell\AutoRun\command - xk2n.bat \Shell\explore\Command - xk2n.bat \Shell\open\Command - xk2n.bat [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8ef29e52-5347-11dd-aab3-000feaf27b53}] \Shell\AutoRun\command - J:\1u0o8bnq.cmd \Shell\explore\Command - J:\1u0o8bnq.cmd \Shell\open\Command - J:\1u0o8bnq.cmd *Newly Created Service* - MARKFUN_NT . Zawartość folderu 'Zaplanowane zadania' 2008-12-04 c:\windows\Tasks\1-Click Maintenance.job - c:\program files\TuneUp Utilities 2008\OneClickStarter.exe [2008-02-29 13:24] 2008-11-07 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34] 2008-12-03 c:\windows\Tasks\GoogleUpdateTaskUser.job - c:\documents and settings\kapi\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [2008-10-15 18:51] . . ------- Skan uzupełniający ------- . uStart Page = hxxp://search.imesh.com/pl/ IE: E&ksport do programu Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 IE: Pobierz z USDownloaderem - c:\documents and settings\kapi\Pulpit\programy\USD\Ext\downloadie.html FireFox -: Profile - c:\documents and settings\kapi\Dane aplikacji\Mozilla\Firefox\Profiles\odw4exes.default\ FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.organizujemy.pl/ FireFox -: user.js - STARTUP.HOMEPAGE - hxxp://www.organizujemy.pl/ FF -: plugin - c:\documents and settings\kapi\Ustawienia lokalne\Dane aplikacji\Google\Update\1.2.131.27\npGoogleOneClick6.dll FF -: plugin - c:\program files\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nppl3260.dll FF -: plugin - c:\program files\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nprpjplug.dll FF -: plugin - c:\program files\Adobe\Acrobat 6.0 CE\Reader\browser\nppdf32.dll FF -: plugin - c:\program files\Java\jre6\bin\new_plugin\npdeploytk.dll FF -: plugin - c:\program files\Java\jre6\bin\new_plugin\npjp2.dll FF -: plugin - c:\program files\Mozilla Firefox\plugins\npdeploytk.dll FF -: plugin - c:\program files\Mozilla Firefox\plugins\npdjvu.dll FF -: plugin - c:\program files\Mozilla Firefox\plugins\npganymedenet.dll FF -: plugin - c:\program files\Mozilla Firefox\plugins\npJoostPlugin.dll FF -: plugin - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-04 20:53:37 Windows 5.1.2600 Dodatek Service Pack 3 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\MarkFun_NT] "ImagePath"="\??\c:\program files\Gigabyte\ET5\markfun.w32" . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- - - - - - - - > 'winlogon.exe'(1412) c:\windows\system32\klogon.dll c:\program files\Stardock\Object Desktop\WindowBlinds\wbsrv.dll - - - - - - - > 'explorer.exe'(3628) c:\program files\Xfire\xfire_toucan_35044.dll c:\program files\Microsoft Office\OFFICE11\msohev.dll . ------------------------ Pozostałe uruchomione procesy ------------------------ . c:\windows\system32\rundll32.exe c:\program files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe c:\progra~1\MICROS~1\rapimgr.exe c:\program files\Premium Clock\tclock.exe c:\program files\IVT Corporation\BlueSoleil\BTNtService.exe c:\program files\Java\jre6\bin\jqs.exe c:\program files\Common Files\LightScribe\LSSrvc.exe c:\program files\CDBurnerXP\NMSAccessU.exe c:\windows\system32\nvsvc32.exe c:\windows\system32\PnkBstrA.exe c:\program files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe c:\program files\Common Files\Ahead\Lib\NMIndexingService.exe c:\windows\system32\wbem\unsecapp.exe c:\windows\system32\wbem\wmiapsrv.exe c:\program files\HP\Digital Imaging\bin\hpqste08.exe . ************************************************************************** . Czas ukończenia: 2008-12-04 20:57:58 - komputer został uruchomiony ponownie ComboFix-quarantined-files.txt 2008-12-04 19:57:49 Przed: 4 629 692 416 bajtów wolnych Po: 4,626,223,104 bajtów wolnych 332 --- E O F --- 2008-11-13 18:58:33

**Posty:** 7838 · przez **Lukesh** 04 Gru 2008, 22:25

Tak jak myslalem - infekcja z pendriva

. No ale poczekaj na kogos kumatego co do logow, moze poza tym co sam combo usunal wyczai cos jeszcze w tym logu

**Posty:** 18165 · przez **wojtas** 04 Gru 2008, 22:32

wklej do notatnika

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EXPLORER.EXE"=-

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8e549af2-3bbd-11dd-aa77-000feaf27b53}]

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8ef29e52-5347-11dd-aab3-000feaf27b53}]

w notatniku u góry>>>plik zapisz jako>>>Zmien rozszerzenie z TXT na Wszystkie pliki *.* >>> Zapisz pod nazwą FIX.REG

Klikasz dwa razy na powstały plik fix i dodajesz go do rejestru....

Autor postu otrzymał pochwałę

**Posty:** 23 · przez **undermess** 04 Gru 2008, 22:35

myślę że jest wszystko ok ale jeszcze na początku samoczynnie otwiera mi się folder moje dokumenty to jeszcze jakaś infekcja jest ale nie mam dziś zbytnio czasu żeby się bawić.
dzięki za pomoc i pozdrawiam

**Posty:** 18165 · przez **wojtas** 04 Gru 2008, 22:38

pamietaj wroc z logami jutro

nowy z hijacka i combofixa oraz Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

**Posty:** 23 · przez **undermess** 04 Gru 2008, 22:40

kasperskiego używam cały czas a logi z hijacka prosze:

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:40:26, on 2008-12-04 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.20900) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\nvraidservice.exe C:\Program Files\ASUS\GamerOSD\GamerOSD.exe C:\Program Files\Multimedia Card Reader\shwicon2k.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Vista Drive Icon\DrvIcon.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe C:\Program Files\Gigabyte\ET5\GUI.exe C:\Program Files\Premium Clock\Premium.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\Program Files\DAEMON Tools Lite\daemon.exe C:\Program Files\Nowe Gadu-Gadu\gg.exe C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe C:\PROGRA~1\MICROS~1\rapimgr.exe C:\Documents and Settings\kapi\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Kalendarz XP\Kalendarz.exe C:\Program Files\Xfire\xfire.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\PnkBstrA.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe C:\WINDOWS\system32\wbem\unsecapp.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\WINDOWS\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\ChomikBox\ChomikBox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.imesh.com/pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: TBSB07374 - {58A81167-4ED6-495B-B0D6-D791D95DA342} - C:\Program Files\LING Toolbar\Slownik LING\toolbar2.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: Slownik LING - {6D53ADB7-6AD5-4A59-BFE4-7B57D2F4AA89} - C:\Program Files\LING Toolbar\Slownik LING\toolbar2.dll O4 - HKLM\..\Run: [NVRaidService] C:\WINDOWS\system32\nvraidservice.exe O4 - HKLM\..\Run: [ASUSGamerOSD] C:\Program Files\ASUS\GamerOSD\GamerOSD.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [DrvIcon] C:\Program Files\Vista Drive Icon\DrvIcon.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe" O4 - HKLM\..\Run: [EasyTuneV] C:\Program Files\Gigabyte\ET5\GUI.exe O4 - HKLM\..\Run: [Premium Clock] C:\Program Files\Premium Clock\Premium.exe /autorun O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [Nowe Gadu-Gadu] "C:\Program Files\Nowe Gadu-Gadu\gg.exe" O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\kapi\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user') O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\xfire.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: BlueSoleil.lnk = ? O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Kalendarz XP.lnk = C:\Program Files\Kalendarz XP\Kalendarz.exe O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Pobierz z USDownloaderem - C:\Documents and Settings\kapi\Pulpit\programy\USD\Ext\downloadie.html O9 - Extra button: Statystyki ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~1\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~1\INetRepl.dll O9 - Extra 'Tools' menuitem: Utwórz Ulubione dla urządzenia przenośnego... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~1\INetRepl.dll O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe O9 - Extra button: Kolekcja wycinków HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Zaznaczanie HP Smart - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe O23 - Service: BRTEV - Unknown owner - C:\DOCUME~1\kapi\USTAWI~1\Temp\BRTEV.exe (file missing) O23 - Service: Indexing Service (CiSvc) - Unknown owner - C:\WINDOWS\system32\cisvc.exe (file missing) O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Professional Business XII.SP1\Win32\RpcDataSrv.exe O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Professional Business XII.SP1\RpcSandraSrv.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe O23 - Service: TXQWW - Unknown owner - C:\DOCUME~1\kapi\USTAWI~1\Temp\TXQWW.exe (file missing) -- End of file - 11203 bytes

**Posty:** 18165 · przez **wojtas** 04 Gru 2008, 23:00

wykonaj optymalizację windowsa
Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem