przeskanowałem combofix'em:
ComboFix 16-07-25.01 - Jan 2016-07-26 12:41:30.1.4 - x86
Microsoft Windows XP Professional 5.1.2600.3.1250.48.1045.18.2047.1501 [GMT 2:00]
Uruchomiony z: c:\documents and settings\Jan\Pulpit\ComboFix.exe
AV: Kaspersky Internet Security *Disabled/Updated* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *Disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
.
UWAGA - TEN KOMPUTER NIE MA ZAINSTALOWANEJ KONSOLI ODZYSKIWANIA !!
.
.
((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Default User\Cookies\# DECRYPT MY FILES #.vbs
c:\documents and settings\Jan\Cookies\# DECRYPT MY FILES #.vbs
c:\documents and settings\NetworkService\Cookies\# DECRYPT MY FILES #.vbs
c:\windows\msmqinst.log
c:\windows\system32\SET1574.tmp
c:\windows\system32\SET375.tmp
c:\windows\system32\SET376.tmp
c:\windows\system32\TZLog.log
F:\AUTORUN.INF
.
.
((((((((((((((((((((((((( Pliki utworzone od 2016-06-26 do 2016-07-26 )))))))))))))))))))))))))))))))
.
.
2016-07-26 10:29 . 2016-07-26 10:29 -------- d-----w- c:\program files\RansomwareScreenUnlocker
2016-07-26 09:20 . 2016-07-26 09:20 -------- d-----w- c:\documents and settings\Jan\Dane aplikacji\PRO PC Cleaner
2016-07-26 09:12 . 2016-07-26 09:12 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Malwarebytes
2016-07-26 08:55 . 2016-07-26 09:01 53168 ----a-w- c:\windows\system32\drivers\klhk.sys
2016-07-26 08:55 . 2015-12-07 17:54 150408 ----a-w- c:\windows\system32\drivers\klflt.sys
2016-07-26 08:01 . 2016-07-26 08:01 -------- d-----w- c:\windows\system32\wbem\Repository
2016-07-26 04:11 . 2016-07-26 10:29 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Kaspersky Lab
2016-07-26 04:11 . 2016-07-26 08:55 -------- d-----w- c:\program files\Kaspersky Lab
2016-07-22 08:50 . 2016-07-26 08:01 -------- d-----w- c:\program files\Realtek(2)
2016-07-22 08:50 . 2016-07-26 08:01 -------- d-----w- c:\program files\InstallShield Installation Information(2)
2016-07-11 07:20 . 2016-07-11 07:20 -------- d-----w- c:\program files\Common Files\Adobe
2016-07-11 07:18 . 2016-07-11 07:22 -------- d-----w- c:\documents and settings\Jan\Ustawienia lokalne\Dane aplikacji\Adobe
2016-07-08 06:50 . 2016-07-08 06:50 -------- d-----w- c:\program files\Hewlett-Packard
2016-07-08 06:50 . 2016-07-08 06:50 -------- d-----w- c:\program files\HP Photo Creations
2016-07-08 06:50 . 2016-07-08 06:50 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Visan
2016-07-08 06:50 . 2016-07-08 06:50 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\HP Photo Creations
2016-07-08 06:50 . 2016-07-26 08:38 -------- d-----w- c:\documents and settings\Jan\Dane aplikacji\HpUpdate
2016-07-08 06:50 . 2012-12-16 00:47 417464 ----a-w- c:\windows\system32\HPWia1_DJ1510.dll
2016-07-08 06:50 . 2012-12-16 00:47 2525368 ----a-w- c:\windows\system32\HPScanTRDrv_DJ1510.dll
2016-07-08 06:50 . 2012-12-16 00:47 271032 ----a-w- c:\windows\system32\hpinkstsc111LM.dll
2016-07-08 06:50 . 2012-12-16 00:47 222904 ----a-w- c:\windows\system32\hpinkcoic111.dll
2016-07-08 06:50 . 2012-12-15 22:45 2220216 ----a-w- c:\windows\system32\hpinkinsc111.exe
2016-07-08 06:50 . 2012-12-16 00:47 536760 ----a-w- c:\windows\system32\hpinkstsc111.dll
2016-07-08 06:50 . 2016-07-08 06:50 -------- d-----w- c:\program files\HP
2016-07-01 04:21 . 2016-07-25 06:01 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2016-06-30 08:33 . 2013-09-23 18:25 630272 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2016-06-30 08:33 . 2013-09-23 18:25 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2016-06-30 08:33 . 2013-09-23 18:25 2006016 -c----w- c:\windows\system32\dllcache\iertutil.dll
2016-06-30 08:33 . 2013-09-23 18:25 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2016-06-30 08:33 . 2013-09-23 18:25 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2016-06-30 08:33 . 2013-09-23 18:25 522240 -c----w- c:\windows\system32\dllcache\jsdbgui.dll
2016-06-30 08:33 . 2013-09-23 18:25 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2016-06-30 04:30 . 2016-07-13 14:43 -------- d-----w- c:\windows\system32\MRT
2016-06-30 04:22 . 2016-07-25 06:01 -------- d-sh--w- c:\documents and settings\Jan\PrivacIE
2016-06-30 04:20 . 2016-06-30 04:20 -------- d-sh--w- c:\documents and settings\Jan\IETldCache
2016-06-29 13:19 . 2016-06-29 13:20 -------- dc-h--w- c:\windows\ie8
2016-06-29 12:08 . 2010-09-18 06:53 953856 -c----w- c:\windows\system32\dllcache\mfc40u.dll
2016-06-29 12:08 . 2014-02-26 23:28 13312 -c----w- c:\windows\system32\dllcache\xp_eos.exe
2016-06-29 12:08 . 2014-02-26 23:28 13312 ------w- c:\windows\system32\xp_eos.exe
2016-06-29 12:08 . 2011-07-15 13:29 456320 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2016-06-29 12:08 . 2010-08-23 16:12 617472 -c----w- c:\windows\system32\dllcache\comctl32.dll
2016-06-29 12:07 . 2009-11-21 16:03 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2016-06-29 12:06 . 2010-06-14 14:31 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe
2016-06-29 12:06 . 2010-08-27 08:03 119808 -c----w- c:\windows\system32\dllcache\t2embed.dll
2016-06-29 12:06 . 2009-10-15 16:33 81920 -c----w- c:\windows\system32\dllcache\fontsub.dll
2016-06-29 12:05 . 2009-03-06 14:22 285696 -c----w- c:\windows\system32\dllcache\pdh.dll
2016-06-29 12:05 . 2009-02-09 11:25 111104 -c----w- c:\windows\system32\dllcache\services.exe
2016-06-29 12:05 . 2009-02-06 10:10 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2016-06-29 12:05 . 2009-02-09 10:53 686592 -c----w- c:\windows\system32\dllcache\advapi32.dll
2016-06-29 12:05 . 2009-02-09 10:53 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2016-06-29 12:05 . 2009-02-09 10:53 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2016-06-29 12:05 . 2009-02-09 10:53 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2016-06-29 12:05 . 2009-06-21 21:48 153088 -c----w- c:\windows\system32\dllcache\triedit.dll
2016-06-29 12:04 . 2013-02-12 00:32 12928 -c----w- c:\windows\system32\dllcache\usb8023x.sys
2016-06-29 12:04 . 2013-02-12 00:32 12928 -c----w- c:\windows\system32\dllcache\usb8023.sys
2016-06-29 12:03 . 2011-04-21 13:37 105472 -c----w- c:\windows\system32\dllcache\mup.sys
2016-06-29 12:03 . 2008-05-08 14:02 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys
2016-06-29 12:03 . 2008-05-01 14:37 331776 -c----w- c:\windows\system32\dllcache\msadce.dll
2016-06-29 12:03 . 2013-07-17 00:58 123008 -c----w- c:\windows\system32\dllcache\usbvideo.sys
2016-06-29 12:03 . 2013-07-17 00:58 46848 -c----w- c:\windows\system32\dllcache\irbus.sys
2016-06-29 12:03 . 2013-07-17 00:58 60160 -c----w- c:\windows\system32\dllcache\usbaudio.sys
2016-06-29 12:02 . 2012-07-04 14:05 139784 -c----w- c:\windows\system32\dllcache\rdpwd.sys
2016-06-29 12:02 . 2013-08-09 00:55 144128 -c----w- c:\windows\system32\dllcache\usbport.sys
2016-06-29 12:02 . 2013-08-09 00:55 32384 -c----w- c:\windows\system32\dllcache\usbccgp.sys
2016-06-29 12:02 . 2013-08-09 00:55 5376 -c----w- c:\windows\system32\dllcache\usbd.sys
2016-06-29 12:02 . 2009-03-18 11:02 30336 -c----w- c:\windows\system32\dllcache\usbehci.sys
2016-06-29 12:02 . 2012-05-28 18:17 536576 -c----w- c:\windows\system32\dllcache\msado15.dll
2016-06-29 12:02 . 2010-06-18 13:36 3558912 -c----w- c:\windows\system32\dllcache\moviemk.exe
2016-06-29 11:59 . 2010-12-09 15:15 726528 -c----w- c:\windows\system32\dllcache\ntdll.dll
2016-06-29 11:59 . 2013-07-04 07:33 2151424 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2016-06-29 11:59 . 2013-07-04 07:34 2194816 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2016-06-29 11:59 . 2013-07-04 07:33 2030080 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2016-06-29 11:59 . 2013-07-04 07:34 2071424 -c----w- c:\windows\system32\dllcache\ntkrnlpa.exe
2016-06-29 11:58 . 2011-07-08 14:02 10496 -c----w- c:\windows\system32\dllcache\ndistapi.sys
2016-06-29 11:57 . 2012-01-11 19:07 3072 -c----w- c:\windows\system32\dllcache\iacenc.dll
2016-06-29 11:57 . 2012-01-11 19:07 3072 ------w- c:\windows\system32\iacenc.dll
2016-06-29 11:57 . 2013-11-27 20:21 40960 -c----w- c:\windows\system32\dllcache\ndproxy.sys
2016-06-29 11:57 . 2010-10-11 14:59 45568 -c----w- c:\windows\system32\dllcache\wab.exe
2016-06-29 10:42 . 2016-06-29 10:42 -------- d-----w- c:\documents and settings\Jan\Ustawienia lokalne\Dane aplikacji\NVIDIA
2016-06-29 10:37 . 2016-06-29 10:37 -------- d-----w- c:\program files\Microsoft.NET
2016-06-29 10:36 . 2014-07-02 20:43 15286272 ----a-w- c:\windows\system32\nvcompiler.dll
2016-06-29 10:36 . 2014-07-02 20:43 11169792 ----a-w- c:\windows\system32\nvopencl.dll
2016-06-29 10:36 . 2014-07-02 20:43 1054552 ----a-w- c:\windows\system32\nvdispco3234052.dll
2016-06-29 10:36 . 2014-07-02 20:43 906584 ----a-w- c:\windows\system32\nvdispgenco3234052.dll
2016-06-29 10:36 . 2014-07-02 20:43 2977568 ----a-w- c:\windows\system32\nvcuvid.dll
2016-06-29 10:36 . 2014-07-02 20:43 2747392 ----a-w- c:\windows\system32\nvapi.dll
2016-06-29 10:36 . 2014-07-02 20:43 23658496 ----a-w- c:\windows\system32\nvoglnt.dll
2016-06-29 10:36 . 2014-07-02 20:43 11108352 ----a-w- c:\windows\system32\nvcuda.dll
2016-06-29 10:35 . 2016-06-29 10:41 -------- d-----w- c:\program files\NVIDIA Corporation
2016-06-29 10:24 . 2016-06-29 10:24 -------- d-----w- c:\windows\ServicePackFiles
2016-06-29 10:24 . 2008-04-14 20:51 294912 ------w- c:\program files\Windows Media Player\dlimport.exe
2016-06-29 10:24 . 2008-04-14 20:51 294912 -c----w- c:\windows\system32\dllcache\dlimport.exe
2016-06-29 10:22 . 2006-12-28 22:31 19569 ----a-w- c:\windows\002893_.tmp
2016-06-29 10:09 . 2016-06-29 10:09 -------- d-----w- C:\NVIDIA
2016-06-29 09:56 . 2013-07-03 01:59 14976 ----a-w- c:\windows\system32\drivers\usbscan.sys
2016-06-29 09:55 . 2016-07-08 06:50 -------- dc----w- c:\windows\system32\DRVSTORE
2016-06-29 09:55 . 2016-07-08 06:50 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\HP
2016-06-29 09:53 . 2016-06-30 04:19 -------- d-----w- c:\windows\system32\pl-PL
2016-06-29 09:52 . 2016-06-29 09:52 -------- d-----w- c:\program files\MSBuild
2016-06-29 09:52 . 2016-07-01 12:25 -------- d-----w- c:\windows\system32\XPSViewer
2016-06-29 09:52 . 2016-06-29 09:52 -------- d-----w- c:\program files\Reference Assemblies
2016-06-29 09:52 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2016-06-29 09:52 . 2006-06-29 11:07 14048 ------w- c:\windows\system32\spmsg2.dll
2016-06-29 09:51 . 2009-01-07 16:21 26144 ----a-w- c:\windows\system32\spupdsvc.exe
2016-06-29 09:51 . 2016-06-29 09:51 -------- d-----w- c:\program files\MSXML 6.0
2016-06-29 09:27 . 2016-07-08 06:50 -------- d-----w- c:\documents and settings\Jan\Ustawienia lokalne\Dane aplikacji\HP
2016-06-29 09:00 . 2016-07-26 08:01 -------- d-----w- c:\documents and settings\Jan\Dane aplikacji\Thunderbird
2016-06-29 09:00 . 2016-06-29 09:00 -------- d-----w- c:\documents and settings\Jan\Ustawienia lokalne\Dane aplikacji\Thunderbird
2016-06-29 09:00 . 2016-07-22 11:07 -------- d-----w- c:\program files\Mozilla Thunderbird
2016-06-29 08:47 . 2016-06-29 08:47 -------- d-----w- c:\documents and settings\Jan\Ustawienia lokalne\Dane aplikacji\Mozilla
2016-06-29 07:48 . 2016-06-29 07:48 -------- d-----w- c:\documents and settings\Jan\Dane aplikacji\Corel
2016-06-29 07:45 . 2016-06-29 07:45 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Corel
2016-06-29 07:43 . 2016-06-29 07:43 -------- d-----w- c:\program files\Common Files\Corel
2016-06-29 07:41 . 2016-06-29 07:41 -------- d-----w- c:\program files\Corel
2016-06-29 06:26 . 2016-07-26 08:01 -------- d-----w- c:\documents and settings\Jan\Dane aplikacji\Plus Internet
2016-06-29 06:26 . 2012-03-13 05:03 144408 ----a-w- c:\windows\system32\drivers\zgdcnet.sys
2016-06-29 06:26 . 2012-03-13 05:03 114456 ----a-w- c:\windows\system32\drivers\zgdcvousb.sys
2016-06-29 06:26 . 2012-03-13 05:03 114456 ----a-w- c:\windows\system32\drivers\zgdcnmea.sys
2016-06-29 06:26 . 2012-03-13 05:03 114456 ----a-w- c:\windows\system32\drivers\zgdcmdm.sys
2016-06-29 06:26 . 2012-03-13 05:03 15896 ----a-w- c:\windows\system32\drivers\massfilter_LTE.sys
2016-06-29 06:26 . 2012-03-13 05:03 114456 ----a-w- c:\windows\system32\drivers\zgdcdiag.sys
2016-06-29 06:26 . 2012-03-13 05:03 114456 ----a-w- c:\windows\system32\drivers\zgdcat.sys
2016-06-29 06:26 . 2016-06-29 06:26 -------- d-----w- c:\program files\Plus Internet
2016-06-29 05:14 . 2008-04-13 22:17 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-07-26 09:01 . 2015-06-06 06:48 66976 ----a-w- c:\windows\system32\drivers\kldisk.sys
2016-06-08 07:34 . 2016-06-08 07:34 20608 ----a-w- c:\windows\system32\drivers\BRGSp50.sys
2016-06-08 07:34 . 2016-06-08 07:34 17664 ----a-w- c:\windows\system32\drivers\ZDPSp50.sys
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[7] 2008-04-14 . CD928E84EF8FAB1BFB5791E28F7D4E0B . 4096 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\ksuser.dll
.
c:\windows\System32\ksuser.dll ... - brak elementu !!
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AutoEJCD_0ACE20FF"="c:\program files\AutoInstall\ZD1211B_Auto_Install_CD_Only_Gen_0ACE20FF\AutoEJCD.EXE" [2016-06-08 40960]
"Plus Internet"="c:\program files\Plus Internet\PlusInternetChecker.exe" [2012-03-13 497016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2014-07-02 15724320]
"NvMediaCenter"="NvMCTray.dll" [2014-07-02 376096]
"nwiz"="c:\program files\NVIDIA Corporation\nview\nwiz.exe" [2014-07-02 2593056]
"NvBackend"="c:\program files\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-07-25 2403104]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2013-05-30 96056]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-12-19 1022152]
"ZDWLan_Utility"="c:\program files\WLAN_Software\ZD1211B\ZDWLan.EXE" [2008-08-21 487424]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Jan\Menu Start\Programy\Autostart\
Powiadomienia monitorowania tuszu - HP Deskjet 1510 series.lnk - c:\windows\system32\RunDll32.exe "c:\program files\HP\HP Deskjet 1510 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN39O19G1C05YR;CONNECTION=USB;MONITOR=1; [2007-10-29 33280]
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NetService\\NvNetworkService.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
.
R0 cm_km;Kaspersky Lab ZAO Cryptographic Module x86 (Weak);c:\windows\system32\drivers\cm_km.sys [2015-07-06 201912]
R0 klbackupdisk;Kaspersky Lab klbackupdisk;c:\windows\system32\drivers\klbackupdisk.sys [2015-06-06 46776]
R1 klbackupflt;Kaspersky Lab klbackupflt;c:\windows\system32\drivers\klbackupflt.sys [2015-06-27 57712]
R1 klhk;Kaspersky Lab service driver;c:\windows\system32\drivers\klhk.sys [2016-07-26 53168]
R1 klpd;Kaspersky Lab format recognizer driver;c:\windows\system32\drivers\klpd.sys [2015-12-07 39304]
R1 kltdf;kltdf;c:\windows\system32\drivers\kltdf.sys [2015-06-10 73912]
R1 kltdi;kltdi;c:\windows\system32\drivers\kltdi.sys [2015-06-11 54328]
R1 kneps;kneps;c:\windows\system32\drivers\kneps.sys [2015-06-23 156856]
R2 kldisk;kldisk;c:\windows\system32\drivers\kldisk.sys [2015-06-06 66976]
R2 NvNetworkService;NVIDIA Network Service;c:\program files\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-06-29 1720608]
R3 klflt;Kaspersky Lab Kernel DLL;c:\windows\system32\drivers\klflt.sys [2016-07-26 150408]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [2013-04-19 36448]
R3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\drivers\klkbdflt.sys [2015-06-04 36024]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2015-06-07 37040]
R3 zgdcat;ZTE Datacard AT Port;c:\windows\system32\drivers\zgdcat.sys [2016-06-29 114456]
R3 zgdcdiag;ZTE Datacard Diagnostics Port;c:\windows\system32\drivers\zgdcdiag.sys [2016-06-29 114456]
R3 zgdcmdm;ZTE Datacard Modem;c:\windows\system32\drivers\zgdcmdm.sys [2016-06-29 114456]
R3 zgdcnet;ZTE Datacard Network Adapter;c:\windows\system32\drivers\zgdcnet.sys [2016-06-29 144408]
R3 zgdcnmea;ZTE Datacard NMEA Port;c:\windows\system32\drivers\zgdcnmea.sys [2016-06-29 114456]
S2 AVP16.0.0;Usługa Kaspersky Anti-Virus 16.0.0;c:\program files\Kaspersky Lab\Kaspersky Internet Security 16.0.0 (1)\avp.exe [2015-12-07 194000]
S3 massfilter_lte;LTE Device Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter_LTE.sys [2016-06-29 15896]
S3 ZD1211BU(Atheros);Atheros ZD1211B IEEE 802.11 Wireless LAN Driver (USB)(Atheros);c:\windows\system32\drivers\ZD1211BU.SYS [2016-06-08 735232]
.
Zawartość folderu 'Zaplanowane zadania'
.
2016-07-26 c:\windows\Tasks\At1.job
- c:\program files\HP\HP Deskjet 1510 series\Bin\HPCustPartic.exe [2014-03-06 09:59]
.
2016-07-08 c:\windows\Tasks\At2.job
- c:\program files\HP\HP Deskjet 1510 series\Bin\HPCustPartic.exe [2014-03-06 09:59]
.
2016-07-26 c:\windows\Tasks\At3.job
- c:\program files\HP\HP Deskjet 1510 series\Bin\HPCustPartic.exe [2014-03-06 09:59]
.
2016-07-25 c:\windows\Tasks\At4.job
- c:\program files\HP\HP Deskjet 1510 series\Bin\HPCustPartic.exe [2014-03-06 09:59]
.
2016-06-30 c:\windows\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — co miesiąc.job
- c:\windows\system32\xp_eos.exe [2016-06-29 23:28]
.
2016-07-26 c:\windows\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job
- c:\windows\system32\xp_eos.exe [2016-06-29 23:28]
.
.
------- Skan uzupełniający -------
.
uStart Page = hxxp://www.bing.com/search?srch=106&FORM=AS6&q=google
TCP: Interfaces\{AEDD8FC2-F98E-4BC8-84B6-EC29A5EE62FF}: NameServer = 212.2.96.53 212.2.96.54
FF - ProfilePath - c:\documents and settings\Jan\Dane aplikacji\Mozilla\Firefox\Profiles\weuxxto3.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.onet.pl/
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2016-07-26 12:45
Windows 5.1.2600 Dodatek Service Pack 3 NTFS
.
skanowanie ukrytych procesów ...
.
skanowanie ukrytych wpisów autostartu ...
.
skanowanie ukrytych plików ...
.
skanowanie pomyślnie ukończone
ukryte pliki: 0
.
**************************************************************************
.
Czas ukończenia: 2016-07-26 12:45:47
ComboFix-quarantined-files.txt 2016-07-26 10:45
.
Przed: 85 754 961 920 bajtów wolnych
Po: 87 052 967 936 bajtów wolnych
.
- - End Of File - - 89D6709FC302F746C4A60084B8745027
32052574BF9F325AE309ABC7BFD04460
jeżeli komuś się zachce mi pomóc to
dziękuję
