Problem z pendrive

[matiz]

Witam,
mam problem z pendrive'm - chcąc otworzyć swojego pena na kompie wyskakuje mi komunikat żebym wybrał program do otwarcia zawartości tego pen'a ... na innych pendrive'ach nigdy tak nie miałem , zawsze normalnie wchodziło mi po dwóch kliknięciach ... a teraz prosi o zaznaczenie programu z listy ... czemu tak się dzieje ?

Pzdr

[Okocza]

matiz, wstaw log z combofixa

[matiz]

Kod: Zaznacz wszystko

ComboFix 08-10-25.01 - Mateusz 2008-10-27  0:36:06.25 - [color=red][b]FAT32[/b][/color]x86
Microsoft Windows XP Professional  5.1.2600.2.1250.1.1045.18.256 [GMT 1:00]
Uruchomiony z: C:\Programy\ComboFix.exe

[COLOR=RED][B]UWAGA - TEN KOMPUTER NIE MA ZAINSTALOWANEJ KONSOLI ODZYSKIWANIA !![/B][/COLOR]
.

(((((((((((((((((((((((((((((((((((((((   Usunięto   )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Filmy\napisy\Desktop_.ini
C:\Program Files\Usługi online\Desktop_.ini
C:\Programy\Nero 8 Ultra Edition v8.1.1.0\Desktop_.ini
C:\Programy\Nero 8 Ultra Edition v8.1.1.0\Lek\Desktop_.ini
C:\Programy\Różne programy\backups\Desktop_.ini
C:\Programy\Różne programy\Desktop_.ini
C:\Różności\Desktop_.ini

.
(((((((((((((((((((((((((   Pliki utworzone od 2008-09-26 do 2008-10-26  )))))))))))))))))))))))))))))))
.

2008-10-26 14:57 . 2008-10-26 14:57   <DIR>   d--------   C:\Filmy
2008-10-26 14:54 . 2008-10-26 14:54   <DIR>   d--------   C:\Impreza u Kasii
2008-10-26 14:40 . 2008-10-26 14:40   <DIR>   d--------   C:\Prison Brek sezon 4
2008-10-17 09:45 . 2008-10-26 18:37   54,156   --ah-----   C:\WINDOWS\QTFont.qfn
2008-10-17 09:45 . 2008-10-17 09:45   1,409   --a------   C:\WINDOWS\QTFont.for
2008-10-02 18:35 . 2008-10-02 18:35   <DIR>   d--------   C:\Documents and Settings\Mateusz\imapa

.
((((((((((((((((((((((((((((((((((((((((   Sekcja Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-21 21:36   ---------   d-----w   C:\Documents and Settings\Mateusz\Dane aplikacji\EurekaLog
2008-09-14 18:11   ---------   d-----w   C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab
2007-12-27 21:19   32   ----a-w   C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat
2006-10-13 21:50   74   ----a-w   C:\Documents and Settings\Mateusz\FIX.REG
.

------- Sigcheck -------

2006-04-20 13:51  359808  b4e29943b4b04bd5e7381546848e6669   C:\WINDOWS\system32\drivers\tcpip.sys
2006-04-20 13:51  359808  1dbf125862891817f374f407626967f4   C:\WINDOWS\system32\dllcache\tcpip.sys
2004-08-03 21:14  359040  9f4b36614a0fc234525ba224957de55c   C:\WINDOWS\$NtUninstallKB893066$\tcpip.sys
2005-05-25 21:04  359808  88763a98a4c26c409741b4aa162720c9   C:\WINDOWS\$NtUninstallKB913446$\tcpip.sys
2005-05-25 21:07  359936  63fdfea54eb53de2d863ee454937ce1e   C:\WINDOWS\$hf_mig$\KB893066\SP2QFE\tcpip.sys
2006-01-13 18:07  360448  5562cc0a47b2aef06d3417b733f3c195   C:\WINDOWS\$hf_mig$\KB913446\SP2QFE\tcpip.sys
2006-04-20 14:18  360576  b2220c618b42a2212a59d91ebd6fc4b4   C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys
2006-01-13 03:28  359808  583e063fdc888ca30d05c2724b0d7ef4   C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys
.
(((((((((((((((((((((((((((((((((((((   Wpisy startowe rejestru   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Disc Detector"="C:\Program Files\Creative\ShareDLL\CtNotify.exe" [1999-08-30 189952]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"NewsUpd"="C:\Program Files\Creative\News\NewsUpd.EXE" [2000-08-04 44032]
"ZSSnp211"="C:\WINDOWS\ZSSnp211.exe" [2006-07-14 49152]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-07-15 4112384]
"WooCnxMon"="C:\PROGRA~1\NEOSTR~1\CnxMon.exe" [2003-10-16 24576]
"SpeedTouch USB Diagnostics"="C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" [2004-01-26 866816]
"WOOWATCH"="C:\PROGRA~1\NEOSTR~1\Watch.exe" [2003-10-16 20480]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-05-16 79224]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2008-02-21 185896]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.3ivx"= 3ivxVfWCodec.dll
"vidc.3iv2"= 3ivxVfWCodec.dll
"msacm.divxa32"= divxa32.acm
"VIDC.HFYU"= huffyuv.dll
"VIDC.i263"= i263_32.drv
"msacm.imc"= imc32.acm
"VIDC.VP31"= vp31vfw.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^LUMIX Simple Viewer.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\LUMIX Simple Viewer.lnk
backup=C:\WINDOWS\pss\LUMIX Simple Viewer.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Microsoft Office.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Mateusz^Menu Start^Programy^Autostart^Adobe Gamma.lnk]
path=C:\Documents and Settings\Mateusz\Menu Start\Programy\Autostart\Adobe Gamma.lnk
backup=C:\WINDOWS\pss\Adobe Gamma.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AQQ]
--a------ 2008-09-18 13:56 1674736 C:\PROGRA~1\WapSter\WAPSTE~1\AQQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
--a------ 2006-11-12 11:48 157592 C:\Program Files\DAEMON Tools\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DeviceDiscovery]
--a------ 2002-12-02 20:56 40960 C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Domino]
--a------ 2006-07-04 14:16 49152 C:\WINDOWS\Domino.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
-ra------ 2002-12-17 11:40 49152 C:\Program Files\Hewlett-Packard\HP Software Update\hpwuSchd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Konnekt]
--a------ 2005-05-24 22:41 503808 C:\Program Files\Konnekt\konnekt.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
--a------ 2007-09-20 09:51 1836328 C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2007-03-01 15:57 153136 C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Picasa Media Detector]
--a------ 2008-02-26 03:23 443968 C:\Program Files\Picasa2\PicasaMediaDetector.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2007-04-27 09:41 282624 C:\Program Files\QuickTime\qttask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
--a------ 2008-02-21 16:46 185896 C:\Program Files\Common Files\Real\Update_OB\realsched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
--a------ 2007-04-25 17:44 35328 D:\Program Files\Winamp\winampa.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOTASKBARICON]
--------- 2003-10-16 19:07 53248 C:\PROGRA~1\NEOSTR~1\TaskBarIcon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
--a------ 2004-07-15 11:42 843776 C:\WINDOWS\system32\nwiz.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\BearShare\\BearShare.exe"=
"C:\\Program Files\\Gadu-Gadu\\gg.exe"=
"C:\\Program Files\\eMule\\emule.exe"=
"C:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
"C:\\Program Files\\SopCast\\SopCast.exe"=
"C:\\Program Files\\WapSter\\AQQ\\AQQ.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=
"C:\\Program Files\\WapSter\\WapSter AQQ\\AQQ.exe"=

R0 AFPAnsi;G-DATA Ukrywacz Ansi;C:\WINDOWS\system32\Drivers\AFPAnsi.sys [2002-10-09 43904]
R0 FO_PAnt;FotoOffice VirtualDisc Driver;C:\WINDOWS\system32\Drivers\FO_PAnt.sys [2003-07-17 89216]
R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 78416]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 20560]
S3 ATE_PROCMON;ATE_PROCMON;C:\Program Files\Anti Trojan Elite\ATEPMon.sys [ ]
S3 HookCentre;HookCentre;C:\WINDOWS\system32\drivers\HookCentre.sys [2005-04-26 12738]
S3 ZDCndis5;ZDCndis5 Protocol Driver;C:\WINDOWS\system32\ZDCndis5.SYS [ ]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3cb79528-a385-11dd-b418-000e50562a5d}]
\Shell\AutoRun\command - pv6mxu.bat
\Shell\explore\Command - pv6mxu.bat
\Shell\open\Command - pv6mxu.bat

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3ecfc88c-bbee-11dc-b02f-000e50562a5d}]
\Shell\AutoRun\command - 6x8be16.cmd
\Shell\explore\Command - 6x8be16.cmd
\Shell\open\Command - 6x8be16.cmd
.
Zawartość folderu 'Zaplanowane zadania'

2008-05-14 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2007-01-10 15:42]
.
- - - - USUNIĘTO PUSTE WPISY - - - -

MSConfigStartUp-Komunikator - C:\Program Files\Tlen.pl\tlen.exe
MSConfigStartUp-LanguageShortcut - C:\Program Files\CyberLink\PowerDVD\Language\Language.exe
MSConfigStartUp-RemoteControl - C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe


.
------- Skan uzupełniający -------
.
FireFox -: Profile - C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\g9lmhmdm.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://pl.start.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl:official
.

**************************************************************************
skanowanie ukrytych procesów ...

skanowanie ukrytych wpisów autostartu ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
  Disc Detector = C:\Program Files\Creative\ShareDLL\CtNotify.exe?X???Z???????????? C?????Disc Detector?B???A???????A?? ????B???@?$?@?? C?????U?@?????????@?B???A???????A???????B???@?????P???$?@?? ?????????w??????????@???????????????????B???????????????????????????????????B

skanowanie ukrytych plików ...

skanowanie pomyślnie ukończone
ukryte pliki:

**************************************************************************
.
Czas ukończenia: 2008-10-27  0:40:13
ComboFix-quarantined-files.txt  2008-10-26 23:40:10

Przed: 105 218 048 bajtów wolnych
Po: 111,345,664 bajtów wolnych

160


[Magik]

wklej do notatnika

Kod: Zaznacz wszystko

Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3cb79528-a385-11dd-b418-000e50562a5d}]

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3ecfc88c-bbee-11dc-b02f-000e50562a5d}]

zapisz jako fix.reg i odpal

Kod: Zaznacz wszystko

C:\Documents and Settings\Mateusz\FIX.REG

sam go tworzyles?? usun


Poza tym nic ciekawego