Wysłany: 10 Kwi 2009, 09:56Wysłany: 10 Kwi 2009, 10:21Wysłany: 10 Kwi 2009, 12:29Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:24:03, on 2009-04-10
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Razer\DeathAdder\razerhid.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
D:\PROGRA~1\WapSter\WAPSTE~1\AQQ.exe
D:\Program Files\AutoConnect\AutoConnect.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Razer\DeathAdder\razerofa.exe
F:\MOJE\Programy\system\bezpiecz\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [DeathAdder] C:\Program Files\Razer\DeathAdder\razerhid.exe
O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [AQQ] D:\PROGRA~1\WapSter\WAPSTE~1\AQQ.exe
O4 - HKCU\..\Run: [AutoConnect] D:\Program Files\AutoConnect\AutoConnect.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{25C4F181-B943-45D3-9F21-9B52A91F1DD7}: NameServer = 208.67.222.222 208.67.220.220
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
--
End of file - 3771 bytes
ComboFix 09-04-04.01 - kepa416 2009-04-10 12:25:41.5 - NTFSx86
Uruchomiony z: f:\moje\Programy\system\bezpiecz\ComboFix.exe
UWAGA - TEN KOMPUTER NIE MA ZAINSTALOWANEJ KONSOLI ODZYSKIWANIA !!
.
((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\kepa416\Dane aplikacji\EurekaLog
c:\documents and settings\kepa416\Dane aplikacji\EurekaLog\EurekaLog.ini
.
((((((((((((((((((((((((( Pliki utworzone od 2009-03-10 do 2009-04-10 )))))))))))))))))))))))))))))))
.
2009-04-09 16:58 . 2009-04-09 16:58 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\ATI
2009-04-09 16:55 . 2009-04-09 16:56 <DIR> d-------- c:\program files\ATI Technologies
2009-04-09 16:55 . 2009-03-17 21:05 593,920 --------- c:\windows\system32\ati2sgag.exe
2009-04-09 16:54 . 2009-04-09 16:54 <DIR> d-------- C:\ATI
2009-04-04 11:06 . 2009-04-09 16:58 <DIR> d-------- c:\documents and settings\kepa416\Dane aplikacji\ATI
2009-04-02 18:26 . 2009-04-08 18:35 45 --a------ c:\windows\system32\initdebug.nfo
2009-03-31 15:56 . 2009-03-31 15:56 2,560 --a------ c:\windows\_MSRSTRT.EXE
2009-03-30 20:35 . 2009-03-30 20:36 <DIR> d-------- c:\documents and settings\kepa416\Dane aplikacji\Thinstall
2009-03-30 17:21 . 2009-03-30 17:21 294 --a------ c:\windows\ODBC.INI
2009-03-30 16:53 . 2009-03-31 15:08 5,108 --a------ c:\windows\system32\oodbs.lor
2009-03-27 07:50 . 2009-04-10 12:19 <DIR> d-------- c:\documents and settings\kepa416\Dane aplikacji\Xfire
2009-03-21 00:26 . 2009-03-21 00:26 41,808 --a------ c:\windows\system32\xfcodec.dll
2009-03-19 23:19 . 2009-03-19 23:19 <DIR> d-------- c:\program files\Common Files\Wise Installation Wizard
2009-03-18 18:55 . 2009-03-18 18:55 <DIR> d-------- c:\program files\Alwil Software
2009-03-18 17:51 . 2006-01-10 10:50 24,576 -ra------ c:\windows\system32\AsIO.dll
2009-03-18 17:43 . 2009-03-18 17:43 <DIR> d-------- c:\program files\xp-AntiSpy
2009-03-16 23:33 . 2009-03-16 23:33 3,597,312 --a------ c:\windows\system32\drivers\ati2mtag.sys
2009-03-16 23:33 . 2009-03-16 23:33 3,597,312 --a--c--- c:\windows\system32\dllcache\ati2mtag.sys
2009-03-16 22:27 . 2009-03-16 22:27 442,368 --a------ c:\windows\system32\ATIDEMGX.dll
2009-03-16 22:26 . 2009-03-16 22:26 328,704 --a--c--- c:\windows\system32\dllcache\ati2dvag.dll
2009-03-16 22:26 . 2009-03-16 22:26 328,704 --a------ c:\windows\system32\ati2dvag.dll
2009-03-16 22:17 . 2009-03-16 22:17 307,200 --a------ c:\windows\system32\atiiiexx.dll
2009-03-16 22:17 . 2009-03-16 22:17 204,800 --a------ c:\windows\system32\atipdlxx.dll
2009-03-16 22:16 . 2009-03-16 22:16 155,648 --a------ c:\windows\system32\Oemdspif.dll
2009-03-16 22:16 . 2009-03-16 22:16 155,648 --a------ c:\windows\system32\ati2evxx.dll
2009-03-16 22:16 . 2009-03-16 22:16 43,520 --a------ c:\windows\system32\ati2edxx.dll
2009-03-16 22:16 . 2009-03-16 22:16 26,112 --a------ c:\windows\system32\Ati2mdxx.exe
2009-03-16 22:15 . 2009-03-16 22:15 602,112 --a------ c:\windows\system32\ati2evxx.exe
2009-03-16 22:13 . 2009-03-16 22:13 53,248 --a------ c:\windows\system32\ATIDDC.DLL
2009-03-16 22:06 . 2009-03-16 22:06 3,820,736 --a--c--- c:\windows\system32\dllcache\ati3duag.dll
2009-03-16 22:06 . 2009-03-16 22:06 3,820,736 --a------ c:\windows\system32\ati3duag.dll
2009-03-16 22:04 . 2009-03-16 22:04 11,563,008 --a------ c:\windows\system32\atioglxx.dll
2009-03-16 21:53 . 2009-03-16 21:53 3,107,788 --a------ c:\windows\system32\ativva5x.dat
2009-03-16 21:53 . 2009-03-16 21:53 2,675,328 --a--c--- c:\windows\system32\dllcache\ativvaxx.dll
2009-03-16 21:53 . 2009-03-16 21:53 2,675,328 --a------ c:\windows\system32\ativvaxx.dll
2009-03-16 21:53 . 2009-03-16 21:53 887,724 --a------ c:\windows\system32\ativva6x.dat
2009-03-16 21:53 . 2009-04-10 12:22 173,776 --a------ c:\windows\system32\ativvaxx.cap
2009-03-16 21:40 . 2009-03-16 21:40 49,664 --a------ c:\windows\system32\atimpc32.dll
2009-03-16 21:40 . 2009-03-16 21:40 49,664 --a------ c:\windows\system32\amdpcom32.dll
2009-03-16 21:36 . 2009-03-16 21:36 475,136 --a------ c:\windows\system32\atikvmag.dll
2009-03-16 21:35 . 2009-03-16 21:35 303,104 --a------ c:\windows\system32\atiok3x2.dll
2009-03-16 21:35 . 2009-03-16 21:35 131,072 --a------ c:\windows\system32\atiadlxx.dll
2009-03-16 21:35 . 2009-03-16 21:35 45,056 --a------ c:\windows\system32\aticalrt.dll
2009-03-16 21:34 . 2009-03-16 21:34 53,248 --a------ c:\windows\system32\drivers\ati2erec.dll
2009-03-16 21:34 . 2009-03-16 21:34 45,056 --a------ c:\windows\system32\aticalcl.dll
2009-03-16 21:34 . 2009-03-16 21:34 17,408 --a------ c:\windows\system32\atitvo32.dll
2009-03-16 21:33 . 2009-03-16 21:33 3,264,512 --a------ c:\windows\system32\aticaldd.dll
2009-03-16 21:28 . 2009-03-16 21:28 630,784 --a--c--- c:\windows\system32\dllcache\ati2cqag.dll
2009-03-16 21:28 . 2009-03-16 21:28 630,784 --a------ c:\windows\system32\ati2cqag.dll
2009-03-13 22:27 . 2009-04-09 17:54 189,072 --a------ c:\windows\system32\PnkBstrB.xtr
2009-03-13 22:02 . 2009-04-09 17:27 138,920 --a------ c:\windows\system32\drivers\PnkBstrK.sys
2009-03-13 22:01 . 2009-04-09 17:54 189,072 --a------ c:\windows\system32\PnkBstrB.exe
2009-03-13 22:01 . 2009-03-17 16:56 75,064 --a------ c:\windows\system32\PnkBstrA.exe
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-10 10:17 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\uTorrent
2009-04-09 12:42 --------- d-----w c:\program files\Mozilla Thunderbird
2009-04-05 17:51 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\teamspeak2
2009-04-03 14:13 --------- d--h--w c:\program files\InstallShield Installation Information
2009-04-03 12:24 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\Ahead
2009-03-20 16:54 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\gtk-2.0
2009-03-19 06:02 --------- d-----w c:\program files\Common Files\Adobe
2009-03-18 15:43 361,600 ----a-w c:\windows\system32\drivers\tcpip.sys
2009-03-17 14:36 22,328 ----a-w c:\documents and settings\kepa416\Dane aplikacji\PnkBstrK.sys
2009-03-03 19:56 118,784 ----a-w c:\windows\system32\atibtmon.exe
2009-02-27 14:36 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\Microsoft Help
2009-02-27 13:10 25,992 ----a-w c:\windows\system32\pgdfgsvc.exe
2009-02-26 07:50 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\id Software
2009-02-26 07:48 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\id Software
2009-02-21 23:08 32 ----a-w c:\documents and settings\All Users\Dane aplikacji\ezsid.dat
2009-02-18 17:55 294,912 ----a-w c:\windows\system32\ATIODE.exe
2009-02-17 17:34 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\BESTplayer
2009-02-16 18:52 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\Ventrilo
2009-02-15 20:52 --------- d-----w c:\program files\HP
2009-02-15 20:52 --------- d-----w c:\program files\Hewlett-Packard
2009-02-15 20:52 --------- d-----w c:\program files\Common Files\HP
2009-02-15 20:39 --------- d-----w c:\documents and settings\kepa416\Dane aplikacji\HP
2009-02-15 20:32 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\HP
2009-02-03 20:52 45,056 ----a-w c:\windows\system32\ATIODCLI.exe
2009-01-24 23:42 107,888 ----a-w c:\windows\system32\CmdLineExt.dll
2009-01-17 02:30 219,648 ----a-w c:\windows\system32\uxtheme.dll
2008-12-29 15:18 16,384 --sha-w c:\windows\system32\config\systemprofile\Cookies\index.dat
2008-12-29 15:18 32,768 --sha-w c:\windows\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\index.dat
2008-12-29 15:18 32,768 --sha-w c:\windows\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\MSHist012008122920081230\index.dat
2008-12-29 15:18 32,768 --sha-w c:\windows\system32\config\systemprofile\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat
.
------- Sigcheck -------
2009-03-18 17:43 361600 eec9730f9cc03819111d90e6caa2dcc9 c:\windows\system32\dllcache\tcpip.sys
2009-03-18 17:43 361600 eec9730f9cc03819111d90e6caa2dcc9 c:\windows\system32\drivers\tcpip.sys
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AQQ"="d:\progra~1\WapSter\WAPSTE~1\AQQ.exe" [2009-02-25 4879360]
"AutoConnect"="d:\program files\AutoConnect\AutoConnect.exe" [2004-08-28 295424]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DeathAdder"="c:\program files\Razer\DeathAdder\razerhid.exe" [2008-09-05 159744]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
"AdslTaskBar"="stmctrl.dll" [2006-09-25 c:\windows\system32\stmctrl.dll]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SynchronousMachineGroupPolicy"= 1 (0x1)
"SynchronousUserGroupPolicy"= 1 (0x1)
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoStrCmpLogical"= 0 (0x0)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMBalloonTip"= 0 (0x0)
"MemCheckBoxInRunDlg"= 0 (0x0)
"NoResolveTrack"= 0 (0x0)
"NoWelcomeScreen"= 0 (0x0)
"NoRecentDocsNetHood"= 0 (0x0)
"ForceClassicControlPanel"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.divxa32"= msaud32_divx.acm
"VIDC.XFR1"= xfcodec.dll
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"d:\\Program Files\\Xfire\\Xfire.exe"=
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-03-18 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-03-18 20560]
R3 AtiHdmiService;ATI Function Driver for HDMI Service;c:\windows\system32\drivers\AtiHdmi.sys [2008-12-29 93696]
R3 DAdderFltr;DeathAdder Mouse;c:\windows\system32\drivers\dadder.sys [2008-12-29 22784]
R3 Stmatm;ATM/ADSL miniport;c:\windows\system32\drivers\stmatm.sys [2009-01-16 57600]
R3 TaurusUsb;ADSL Modem USB Service;c:\windows\system32\drivers\torususb.sys [2009-01-16 685693]
S1 ntiomin;ntiomin; [x]
S3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:\windows\system32\drivers\l151x86.sys [2008-12-29 39424]
S3 sterownik;sterownik;\??\c:\docume~1\kepa416\USTAWI~1\Temp\IXP000.TMP\sterownik.sys --> c:\docume~1\kepa416\USTAWI~1\Temp\IXP000.TMP\sterownik.sys [?]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"
.
.
------- Skan uzupełniający -------
.
uStart Page = about:blank
TCP: {25C4F181-B943-45D3-9F21-9B52A91F1DD7} = 208.67.222.222 208.67.220.220
FF - ProfilePath - c:\documents and settings\kepa416\Dane aplikacji\Mozilla\Firefox\Profiles\21tsvm33.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.angela.pl/p3589,xthermal-80mm-btf-80-pro-led-bialy.html
FF - plugin: c:\documents and settings\All Users\Dane aplikacji\id Software\QuakeLive\npquakezero.dll
.
**************************************************************************
catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-04-10 12:26:28
Windows 5.1.2600 Dodatek Service Pack 3 NTFS
skanowanie ukrytych procesów ...
skanowanie ukrytych wpisów autostartu ...
skanowanie ukrytych plików ...
skanowanie pomyślnie ukończone
ukryte pliki: 0
**************************************************************************
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG11.00.00.01WORKSTATION"="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"
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------
- - - - - - - > 'winlogon.exe'(536)
c:\windows\system32\Ati2evxx.dll
.
Czas ukończenia: 2009-04-10 12:27:12
ComboFix-quarantined-files.txt 2009-04-10 10:27:10
Przed: 14 019 141 632 bajtów wolnych
Po: 14,015,774,720 bajtów wolnych
176 --- E O F --- 2009-02-27 14:04:12