pomocy trojan gen 32

**Posty:** 26 · przez **navan** 27 Wrz 2007, 18:35

Wyskoczyl mi komunikat z avasta o wirusie trojan gen32 czy cos podobnego, wykryl go w pliku c:\windows\system32\drivers\mch...

nie pamietam dokladnej nazy bo usunolem go ale to nic nie daje za kazdym razem (tzn uruchomieniem) wyskakuje znow i jak to z trojanami bywa dzieja sie dziwne rzeczy pomocy. Zalaczam logi.

GMER

Kod: Zaznacz wszystko: GMER 1.0.11.11390 - http://www.gmer.net Rootkit 2007-09-27 18:23:44 Windows 5.1.2600 Dodatek Service Pack 2 ---- System - GMER 1.0.11 ---- SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys ZwConnectPort SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys ZwCreateFile SSDT \SystemRoot\system32\drivers\iksysflt.sys ZwCreateKey SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys ZwCreatePort SSDT \SystemRoot\system32\drivers\iksysflt.sys ZwCreateProcess SSDT \SystemRoot\system32\drivers\iksysflt.sys ZwCreateProcessEx SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys ZwCreateSection SSDT BAFAA01C ZwCreateThread SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys ZwDeleteFile SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys ZwDeleteKey SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys ZwDeleteValueKey SSDT sptd.sys ZwEnumerateKey SSDT sptd.sys ZwEnumerateValueKey SSDT sptd.sys ZwOpenKey SSDT BAFAA008 ZwOpenProcess SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys ZwOpenSection SSDT BAFAA00D ZwOpenThread SSDT sptd.sys ZwQueryKey SSDT sptd.sys ZwQueryValueKey SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys ZwSetContextThread SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys ZwSetInformationFile SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys ZwSetValueKey SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys ZwShutdownSystem SSDT BAFAA017 ZwTerminateProcess SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys ZwWriteFile SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys ZwWriteFileGather SSDT BAFAA012 ZwWriteVirtualMemory ---- Devices - GMER 1.0.11 ---- Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_READ 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA 89DCA1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_PNP 89DCA1E8 Device \Driver\NetBT \Device\NetBT_Tcpip_{B71775C2-5F98-475C-83CB-2BCA7843F305} IRP_MJ_CREATE 8980F5F8 Device \Driver\NetBT \Device\NetBT_Tcpip_{B71775C2-5F98-475C-83CB-2BCA7843F305} IRP_MJ_CLOSE 8980F5F8 Device \Driver\NetBT \Device\NetBT_Tcpip_{B71775C2-5F98-475C-83CB-2BCA7843F305} IRP_MJ_DEVICE_CONTROL 8980F5F8 Device \Driver\NetBT \Device\NetBT_Tcpip_{B71775C2-5F98-475C-83CB-2BCA7843F305} IRP_MJ_INTERNAL_DEVICE_CONTROL 8980F5F8 Device \Driver\NetBT \Device\NetBT_Tcpip_{B71775C2-5F98-475C-83CB-2BCA7843F305} IRP_MJ_CLEANUP 8980F5F8 Device \Driver\NetBT \Device\NetBT_Tcpip_{B71775C2-5F98-475C-83CB-2BCA7843F305} IRP_MJ_PNP 8980F5F8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CREATE 89B457A0 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CLOSE 89B457A0 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_DEVICE_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_POWER 89B457A0 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_SYSTEM_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_PNP 89B457A0 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_CREATE 89B457A0 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_CLOSE 89B457A0 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_DEVICE_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_POWER 89B457A0 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_SYSTEM_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_PNP 89B457A0 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_CREATE 89B457A0 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_CLOSE 89B457A0 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_DEVICE_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_INTERNAL_DEVICE_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_POWER 89B457A0 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_SYSTEM_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_PNP 89B457A0 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_CREATE 89B457A0 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_CLOSE 89B457A0 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_DEVICE_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_INTERNAL_DEVICE_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_POWER 89B457A0 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_SYSTEM_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_PNP 89B457A0 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_CREATE 89B4E1E8 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_CLOSE 89B4E1E8 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_DEVICE_CONTROL 89B4E1E8 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_INTERNAL_DEVICE_CONTROL 89B4E1E8 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_POWER 89B4E1E8 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_SYSTEM_CONTROL 89B4E1E8 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_PNP 89B4E1E8 Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_CREATE [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_CREATE_NAMED_PIPE [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_CLOSE [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_READ [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_WRITE [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_QUERY_INFORMATION [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_SET_INFORMATION [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_QUERY_EA [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_SET_EA [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_FLUSH_BUFFERS [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_QUERY_VOLUME_INFORMATION [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_SET_VOLUME_INFORMATION [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_DIRECTORY_CONTROL [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_FILE_SYSTEM_CONTROL [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_DEVICE_CONTROL [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_INTERNAL_DEVICE_CONTROL [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_SHUTDOWN [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_LOCK_CONTROL [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_CLEANUP [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_CREATE_MAILSLOT [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_QUERY_SECURITY [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_SET_SECURITY [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_POWER [BA6CF712] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_SYSTEM_CONTROL [BA6F22C8] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_DEVICE_CHANGE [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_QUERY_QUOTA [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_SET_QUOTA [BA6F5AD2] sptd.sys Device \Driver\PCI_NTPNP9004 \Device\00000048 IRP_MJ_PNP [BA6F3238] sptd.sys Device \Driver\usbstor \Device\00000070 IRP_MJ_CREATE 890967A0 Device \Driver\usbstor \Device\00000070 IRP_MJ_CLOSE 890967A0 Device \Driver\usbstor \Device\00000070 IRP_MJ_READ 890967A0 Device \Driver\usbstor \Device\00000070 IRP_MJ_WRITE 890967A0 Device \Driver\usbstor \Device\00000070 IRP_MJ_DEVICE_CONTROL 890967A0 Device \Driver\usbstor \Device\00000070 IRP_MJ_INTERNAL_DEVICE_CONTROL 890967A0 Device \Driver\usbstor \Device\00000070 IRP_MJ_POWER 890967A0 Device \Driver\usbstor \Device\00000070 IRP_MJ_SYSTEM_CONTROL 890967A0 Device \Driver\usbstor \Device\00000070 IRP_MJ_PNP 890967A0 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_READ 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_WRITE 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_FLUSH_BUFFERS 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_DEVICE_CONTROL 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_INTERNAL_DEVICE_CONTROL 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SHUTDOWN 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CLEANUP 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_POWER 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SYSTEM_CONTROL 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_PNP 89E3C1E8 Device \Driver\usbstor \Device\00000071 IRP_MJ_CREATE 890967A0 Device \Driver\usbstor \Device\00000071 IRP_MJ_CLOSE 890967A0 Device \Driver\usbstor \Device\00000071 IRP_MJ_READ 890967A0 Device \Driver\usbstor \Device\00000071 IRP_MJ_WRITE 890967A0 Device \Driver\usbstor \Device\00000071 IRP_MJ_DEVICE_CONTROL 890967A0 Device \Driver\usbstor \Device\00000071 IRP_MJ_INTERNAL_DEVICE_CONTROL 890967A0 Device \Driver\usbstor \Device\00000071 IRP_MJ_POWER 890967A0 Device \Driver\usbstor \Device\00000071 IRP_MJ_SYSTEM_CONTROL 890967A0 Device \Driver\usbstor \Device\00000071 IRP_MJ_PNP 890967A0 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_READ 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_WRITE 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_FLUSH_BUFFERS 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_DEVICE_CONTROL 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_INTERNAL_DEVICE_CONTROL 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SHUTDOWN 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CLEANUP 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_POWER 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SYSTEM_CONTROL 89E3C1E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_PNP 89E3C1E8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE 89AE71E8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSE 89AE71E8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_READ 89AE71E8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE 89AE71E8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS 89AE71E8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 89AE71E8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL 89AE71E8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN 89AE71E8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER 89AE71E8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL 89AE71E8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP 89AE71E8 Device \Driver\usbstor \Device\00000072 IRP_MJ_CREATE 890967A0 Device \Driver\usbstor \Device\00000072 IRP_MJ_CLOSE 890967A0 Device \Driver\usbstor \Device\00000072 IRP_MJ_READ 890967A0 Device \Driver\usbstor \Device\00000072 IRP_MJ_WRITE 890967A0 Device \Driver\usbstor \Device\00000072 IRP_MJ_DEVICE_CONTROL 890967A0 Device \Driver\usbstor \Device\00000072 IRP_MJ_INTERNAL_DEVICE_CONTROL 890967A0 Device \Driver\usbstor \Device\00000072 IRP_MJ_POWER 890967A0 Device \Driver\usbstor \Device\00000072 IRP_MJ_SYSTEM_CONTROL 890967A0 Device \Driver\usbstor \Device\00000072 IRP_MJ_PNP 890967A0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE 89AE71E8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSE 89AE71E8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_READ 89AE71E8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE 89AE71E8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS 89AE71E8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL 89AE71E8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL 89AE71E8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN 89AE71E8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER 89AE71E8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL 89AE71E8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP 89AE71E8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE 89DCB1E8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLOSE 89DCB1E8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CONTROL 89DCB1E8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL 89DCB1E8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_POWER 89DCB1E8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SYSTEM_CONTROL 89DCB1E8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP 89DCB1E8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CREATE 89DCB1E8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CLOSE 89DCB1E8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_DEVICE_CONTROL 89DCB1E8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_INTERNAL_DEVICE_CONTROL 89DCB1E8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_POWER 89DCB1E8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_SYSTEM_CONTROL 89DCB1E8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_PNP 89DCB1E8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE 89DCB1E8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLOSE 89DCB1E8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CONTROL 89DCB1E8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL 89DCB1E8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_POWER 89DCB1E8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SYSTEM_CONTROL 89DCB1E8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP 89DCB1E8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_CREATE 89DCB1E8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_CLOSE 89DCB1E8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_DEVICE_CONTROL 89DCB1E8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_INTERNAL_DEVICE_CONTROL 89DCB1E8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_POWER 89DCB1E8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_SYSTEM_CONTROL 89DCB1E8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_PNP 89DCB1E8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CREATE 8980F5F8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLOSE 8980F5F8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_DEVICE_CONTROL 8980F5F8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_INTERNAL_DEVICE_CONTROL 8980F5F8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLEANUP 8980F5F8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_PNP 8980F5F8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_CREATE 89B457A0 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_CLOSE 89B457A0 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_DEVICE_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_POWER 89B457A0 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_SYSTEM_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_PNP 89B457A0 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_CREATE 89B457A0 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_CLOSE 89B457A0 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_DEVICE_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_POWER 89B457A0 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_SYSTEM_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_PNP 89B457A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_NAMED_PIPE 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLOSE 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_READ 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_WRITE 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_INFORMATION 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_INFORMATION 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_EA 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_EA 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FLUSH_BUFFERS 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_VOLUME_INFORMATION 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_VOLUME_INFORMATION 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DIRECTORY_CONTROL 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FILE_SYSTEM_CONTROL 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CONTROL 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_INTERNAL_DEVICE_CONTROL 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SHUTDOWN 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_LOCK_CONTROL 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLEANUP 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_MAILSLOT 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_SECURITY 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_SECURITY 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_POWER 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SYSTEM_CONTROL 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CHANGE 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_QUOTA 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_QUOTA 890977A0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP 890977A0 Device \Driver\usbstor \Device\0000006e IRP_MJ_CREATE 890967A0 Device \Driver\usbstor \Device\0000006e IRP_MJ_CLOSE 890967A0 Device \Driver\usbstor \Device\0000006e IRP_MJ_READ 890967A0 Device \Driver\usbstor \Device\0000006e IRP_MJ_WRITE 890967A0 Device \Driver\usbstor \Device\0000006e IRP_MJ_DEVICE_CONTROL 890967A0 Device \Driver\usbstor \Device\0000006e IRP_MJ_INTERNAL_DEVICE_CONTROL 890967A0 Device \Driver\usbstor \Device\0000006e IRP_MJ_POWER 890967A0 Device \Driver\usbstor \Device\0000006e IRP_MJ_SYSTEM_CONTROL 890967A0 Device \Driver\usbstor \Device\0000006e IRP_MJ_PNP 890967A0 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_CREATE 89B457A0 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_CLOSE 89B457A0 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_DEVICE_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_INTERNAL_DEVICE_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_POWER 89B457A0 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_SYSTEM_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_PNP 89B457A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_NAMED_PIPE 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLOSE 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_READ 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_WRITE 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_INFORMATION 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_INFORMATION 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_EA 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_EA 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FLUSH_BUFFERS 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DIRECTORY_CONTROL 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CONTROL 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SHUTDOWN 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_LOCK_CONTROL 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLEANUP 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_MAILSLOT 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_SECURITY 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_SECURITY 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_POWER 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SYSTEM_CONTROL 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CHANGE 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_QUOTA 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_QUOTA 890977A0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP 890977A0 Device \Driver\usbstor \Device\0000006f IRP_MJ_CREATE 890967A0 Device \Driver\usbstor \Device\0000006f IRP_MJ_CLOSE 890967A0 Device \Driver\usbstor \Device\0000006f IRP_MJ_READ 890967A0 Device \Driver\usbstor \Device\0000006f IRP_MJ_WRITE 890967A0 Device \Driver\usbstor \Device\0000006f IRP_MJ_DEVICE_CONTROL 890967A0 Device \Driver\usbstor \Device\0000006f IRP_MJ_INTERNAL_DEVICE_CONTROL 890967A0 Device \Driver\usbstor \Device\0000006f IRP_MJ_POWER 890967A0 Device \Driver\usbstor \Device\0000006f IRP_MJ_SYSTEM_CONTROL 890967A0 Device \Driver\usbstor \Device\0000006f IRP_MJ_PNP 890967A0 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_CREATE 89B457A0 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_CLOSE 89B457A0 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_DEVICE_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_INTERNAL_DEVICE_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_POWER 89B457A0 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_SYSTEM_CONTROL 89B457A0 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_PNP 89B457A0 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_CREATE 89B4E1E8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_CLOSE 89B4E1E8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_DEVICE_CONTROL 89B4E1E8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_INTERNAL_DEVICE_CONTROL 89B4E1E8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_POWER 89B4E1E8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_SYSTEM_CONTROL 89B4E1E8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_PNP 89B4E1E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE 89E3C1E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_READ 89E3C1E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_WRITE 89E3C1E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_FLUSH_BUFFERS 89E3C1E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_DEVICE_CONTROL 89E3C1E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_INTERNAL_DEVICE_CONTROL 89E3C1E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SHUTDOWN 89E3C1E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CLEANUP 89E3C1E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_POWER 89E3C1E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SYSTEM_CONTROL 89E3C1E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_PNP 89E3C1E8 Device \Driver\ax21l0mz \Device\Scsi\ax21l0mz1Port2Path0Target0Lun0 IRP_MJ_CREATE 89AD61E8 Device \Driver\ax21l0mz \Device\Scsi\ax21l0mz1Port2Path0Target0Lun0 IRP_MJ_CLOSE 89AD61E8 Device \Driver\ax21l0mz \Device\Scsi\ax21l0mz1Port2Path0Target0Lun0 IRP_MJ_DEVICE_CONTROL 89AD61E8 Device \Driver\ax21l0mz \Device\Scsi\ax21l0mz1Port2Path0Target0Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 89AD61E8 Device \Driver\ax21l0mz \Device\Scsi\ax21l0mz1Port2Path0Target0Lun0 IRP_MJ_POWER 89AD61E8 Device \Driver\ax21l0mz \Device\Scsi\ax21l0mz1Port2Path0Target0Lun0 IRP_MJ_SYSTEM_CONTROL 89AD61E8 Device \Driver\ax21l0mz \Device\Scsi\ax21l0mz1Port2Path0Target0Lun0 IRP_MJ_PNP 89AD61E8 Device \Driver\ax21l0mz \Device\Scsi\ax21l0mz1 IRP_MJ_CREATE 89AD61E8 Device \Driver\ax21l0mz \Device\Scsi\ax21l0mz1 IRP_MJ_CLOSE 89AD61E8 Device \Driver\ax21l0mz \Device\Scsi\ax21l0mz1 IRP_MJ_DEVICE_CONTROL 89AD61E8 Device \Driver\ax21l0mz \Device\Scsi\ax21l0mz1 IRP_MJ_INTERNAL_DEVICE_CONTROL 89AD61E8 Device \Driver\ax21l0mz \Device\Scsi\ax21l0mz1 IRP_MJ_POWER 89AD61E8 Device \Driver\ax21l0mz \Device\Scsi\ax21l0mz1 IRP_MJ_SYSTEM_CONTROL 89AD61E8 Device \Driver\ax21l0mz \Device\Scsi\ax21l0mz1 IRP_MJ_PNP 89AD61E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CREATE 88FDB590 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLOSE 88FDB590 Device \FileSystem\Cdfs \Cdfs IRP_MJ_READ 88FDB590 Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_INFORMATION 88FDB590 Device \FileSystem\Cdfs \Cdfs IRP_MJ_SET_INFORMATION 88FDB590 Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_VOLUME_INFORMATION 88FDB590 Device \FileSystem\Cdfs \Cdfs IRP_MJ_DIRECTORY_CONTROL 88FDB590 Device \FileSystem\Cdfs \Cdfs IRP_MJ_FILE_SYSTEM_CONTROL 88FDB590 Device \FileSystem\Cdfs \Cdfs IRP_MJ_DEVICE_CONTROL 88FDB590 Device \FileSystem\Cdfs \Cdfs IRP_MJ_SHUTDOWN 88FDB590 Device \FileSystem\Cdfs \Cdfs IRP_MJ_LOCK_CONTROL 88FDB590 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLEANUP 88FDB590 Device \FileSystem\Cdfs \Cdfs IRP_MJ_PNP 88FDB590 ---- Files - GMER 1.0.11 ---- ADS C:\Documents and Settings\All Users\Dane aplikacji\TEMP:05EE1EEF ADS ... ADS ... ---- EOF - GMER 1.0.11 ----

**Posty:** 8694 · przez **Red** 27 Wrz 2007, 18:37

navan napisał(a):c:\windows\system32\drivers\mch...

jak wyskakuje znowu ,to podaj pełną nazwę.

**Posty:** 26 · przez **navan** 27 Wrz 2007, 18:41

SR

Kod: Zaznacz wszystko: "Silent Runners.vbs", revision 52, http://www.silentrunners.org/ Operating System: Windows XP SP2 Output limited to non-default values, except where indicated by "{++}" Startup items buried in registry: --------------------------------- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++} "CTFMON.EXE" = "C:\WINDOWS\system32\ctfmon.exe" [MS] "skrzynka bogiego" = "C:\Program Files\skrzynka bogiego\skrzynka.exe" ["bogi"] "Gadu-Gadu" = ""C:\Program Files\Gadu-Gadu\gg.exe" /tray" ["Gadu-Gadu S.A."] HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++} "NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup" [MS] "nwiz" = "nwiz.exe /install" ["NVIDIA Corporation"] "NvMediaCenter" = "RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit" [MS] "SunJavaUpdateSched" = ""C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"" ["Sun Microsystems, Inc."] "avast!" = "C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" ["ALWIL Software"] "WinampAgent" = "C:\Program Files\Winamp\winampa.exe" [null data] "Encrypted Disk Auto Mount" = "rundll32.exe edshell.dll,MountAll" [MS] "MSConfig" = "C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto" [MS] "SDTray" = ""C:\Program Files\Spyware Doctor\SDTrayApp.exe"" ["PC Tools"] "avgnt" = ""C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min" ["Avira GmbH"] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {02478D38-C3F9-4efb-9B51-7695ECA05670}\(Default) = (no title provided) -> {HKLM...CLSID} = "Yahoo! Companion BHO" \InProcServer32\(Default) = "C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_1.dll" ["Yahoo! Inc."] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided) -> {HKLM...CLSID} = "Adobe PDF Reader Link Helper" \InProcServer32\(Default) = "C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"] {3049C3E9-B461-4BC5-8870-4C09146192CA}\(Default) = (no title provided) -> {HKLM...CLSID} = "RealPlayer Download and Record Plugin for Internet Explorer" \InProcServer32\(Default) = "C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll" ["RealPlayer"] {72853161-30C5-4D22-B7F9-0BBC1D38A37E}\(Default) = (no title provided) -> {HKLM...CLSID} = "Groove GFS Browser Helper" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [MS] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided) -> {HKLM...CLSID} = "SSVHelper Class" \InProcServer32\(Default) = "C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll" ["Sun Microsystems, Inc."] {D3138B39-C8A6-440B-9D42-50F766AEA8C7}\(Default) = (no title provided) -> {HKLM...CLSID} = "MU Online Toolbar Helper" \InProcServer32\(Default) = "C:\Program Files\MU Online Toolbar\v3.2.0.0\MU_Online_Toolbar.dll" [null data] HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ "{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania" -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania" \InProcServer32\(Default) = "deskpan.dll" [file not found] "{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu" -> {HKLM...CLSID} = "HyperTerminal Icon Ext" \InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."] "{EFA24E62-B078-11d0-89E4-00C04FC9E26E}" = "History Band" -> {HKLM...CLSID} = "History Band" \InProcServer32\(Default) = "C:\WINDOWS\system32\shdocvw.dll" [MS] "{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class" -> {HKLM...CLSID} = "DesktopContext Class" \InProcServer32\(Default) = "C:\WINDOWS\system32\nvcpl.dll" ["NVIDIA Corporation"] "{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper" -> {HKLM...CLSID} = "NVIDIA CPL Extension" \InProcServer32\(Default) = "C:\WINDOWS\system32\nvcpl.dll" ["NVIDIA Corporation"] "{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer" -> {HKLM...CLSID} = "Desktop Explorer" \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu" -> {HKLM...CLSID} = "nView Desktop Context Menu" \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{472083B0-C522-11CF-8763-00608CC02F24}" = "avast" -> {HKLM...CLSID} = "avast" \InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"] "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] "{72853161-30C5-4D22-B7F9-0BBC1D38A37E}" = "Groove GFS Browser Helper" -> {HKLM...CLSID} = "Groove GFS Browser Helper" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [MS] "{2A541AE1-5BF6-4665-A8A3-CFA9672E4291}" = "Groove GFS Explorer Bar" -> {HKLM...CLSID} = "Groove Folder Synchronization" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [MS] "{A449600E-1DC6-4232-B948-9BD794D62056}" = "Groove GFS Stub Icon Handler" -> {HKLM...CLSID} = "Groove GFS Stub Icon Handler" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [MS] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}" = "Groove GFS Stub Execution Hook" -> {HKLM...CLSID} = "Groove GFS Stub Execution Hook" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [MS] "{6C467336-8281-4E60-8204-430CED96822D}" = "Groove GFS Context Menu Handler" -> {HKLM...CLSID} = "Groove GFS Context Menu Handler" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [MS] "{387E725D-DC16-4D76-B310-2C93ED4752A0}" = "Groove XML Icon Handler" -> {HKLM...CLSID} = "Groove XML Icon Handler" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [MS] "{16F3DD56-1AF5-4347-846D-7C10C4192619}" = "Groove Explorer Icon Overlay 3 (GFS Folder)" -> {HKLM...CLSID} = "Groove Explorer Icon Overlay 3 (GFS Folder)" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [MS] "{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}" = "Groove Explorer Icon Overlay 2 (GFS Stub)" -> {HKLM...CLSID} = "Groove Explorer Icon Overlay 2 (GFS Stub)" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [MS] "{2916C86E-86A6-43FE-8112-43ABE6BF8DCC}" = "Groove Explorer Icon Overlay 4 (GFS Unread Mark)" -> {HKLM...CLSID} = "Groove Explorer Icon Overlay 4 (GFS Unread Mark)" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [MS] "{99FD978C-D287-4F50-827F-B2C658EDA8E7}" = "Groove Explorer Icon Overlay 1 (GFS Unread Stub)" -> {HKLM...CLSID} = "Groove Explorer Icon Overlay 1 (GFS Unread Stub)" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [MS] "{920E6DB1-9907-4370-B3A0-BAFC03D81399}" = "Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)" -> {HKLM...CLSID} = "Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [MS] "{0006F045-0000-0000-C000-000000000046}" = "Microsoft Office Outlook Custom Icon Handler" -> {HKLM...CLSID} = "Outlook File Icon Extension" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\OLKFSTUB.DLL" [MS] "{00020D75-0000-0000-C000-000000000046}" = "Microsoft Office Outlook Desktop Icon Handler" -> {HKLM...CLSID} = "Microsoft Office Outlook" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\MLSHEXT.DLL" [MS] "{5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C}" = "Microsoft Office OneNote Namespace Extension for Windows Desktop Search" -> {HKLM...CLSID} = "Microsoft Office OneNote Namespace Extension for Windows Desktop Search" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\ONFILTER.DLL" [MS] "{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\Program Files\Microsoft Office\Office12\msohevi.dll" [MS] "{993BE281-6695-4BA5-8A2A-7AACBFAAB69E}" = "Microsoft Office Metadata Handler" -> {HKLM...CLSID} = "Microsoft Office Metadata Handler" \InProcServer32\(Default) = "C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll" [MS] "{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97}" = "Microsoft Office Thumbnail Handler" -> {HKLM...CLSID} = "Microsoft Office Thumbnail Handler" \InProcServer32\(Default) = "C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll" [MS] "{AD392E40-428C-459F-961E-9B147782D099}" = "UltraISO" -> {HKLM...CLSID} = "UIContextMenu Class" \InProcServer32\(Default) = "C:\Program Files\UltraISO\isoshell.dll" ["EZB Systems, Inc."] "{8932AEFE-9DB6-4f43-AFB2-5682F55E773A}" = "VPCHostCopyHook" -> {HKLM...CLSID} = "VPCHostCopyHook" \InProcServer32\(Default) = "C:\Program Files\Microsoft Virtual PC\VPCShExH.DLL" [MS] "{793FEE91-6A71-11d3-BFDB-000000000000}" = "Paragon Encrypted Disk Shell Extension" -> {HKLM...CLSID} = "Paragon Encrypted Disk Shell Extension" \InProcServer32\(Default) = "edshell.dll" [null data] "{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}" = "Shell Extensions for RealOne Player" -> {HKLM...CLSID} = "RealOne Player Context Menu Class" \InProcServer32\(Default) = "C:\Program Files\Real\RealPlayer\rpshell.dll" ["RealNetworks, Inc."] "{45AC2688-0253-4ED8-97DE-B5370FA7D48A}" = "Shell Extension for Malware scanning" -> {HKLM...CLSID} = "Shell Extension for Malware scanning" \InProcServer32\(Default) = "C:\Program Files\Avira\AntiVir PersonalEdition Classic\shlext.dll" ["Avira GmbH"] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\ <<!>> "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}" = "Groove GFS Stub Execution Hook" -> {HKLM...CLSID} = "Groove GFS Stub Execution Hook" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [MS] HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ "WPDShServiceObj" = "{AAA288BA-9A4C-45B0-95D7-94D524869DB5}" -> {HKLM...CLSID} = "WPDShServiceObj Class" \InProcServer32\(Default) = "C:\WINDOWS\system32\WPDShServiceObj.dll" [MS] HKLM\Software\Classes\PROTOCOLS\Filter\ <<!>> text/xml\CLSID = "{807563E5-5146-11D5-A672-00B0D022E945}" -> {HKLM...CLSID} = "Microsoft Office InfoPath XML Mime Filter" \InProcServer32\(Default) = "C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL" [MS] HKLM\Software\Classes\Folder\shellex\ColumnHandlers\ {F9DB5320-233E-11D1-9F84-707F02C10627}\(Default) = "PDF Column Info" -> {HKLM...CLSID} = "PDF Shell Extension" \InProcServer32\(Default) = "C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll" ["Adobe Systems, Inc."] HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ avast\(Default) = "{472083B0-C522-11CF-8763-00608CC02F24}" -> {HKLM...CLSID} = "avast" \InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"] PandoShellExt\(Default) = "{9C150845-2A2D-44CC-90B3-AA03480AA3D2}" -> {HKLM...CLSID} = "PDShellExt Class" \InProcServer32\(Default) = "C:\Program Files\Pando Networks\Pando\PandoShellExt.dll" ["Pando Networks"] Shell Extension for Malware scanning\(Default) = "{45AC2688-0253-4ED8-97DE-B5370FA7D48A}" -> {HKLM...CLSID} = "Shell Extension for Malware scanning" \InProcServer32\(Default) = "C:\Program Files\Avira\AntiVir PersonalEdition Classic\shlext.dll" ["Avira GmbH"] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] XXX Groove GFS Context Menu Handler XXX\(Default) = "{6C467336-8281-4E60-8204-430CED96822D}" -> {HKLM...CLSID} = "Groove GFS Context Menu Handler" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [MS] HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\ PandoShellExt\(Default) = "{9C150845-2A2D-44CC-90B3-AA03480AA3D2}" -> {HKLM...CLSID} = "PDShellExt Class" \InProcServer32\(Default) = "C:\Program Files\Pando Networks\Pando\PandoShellExt.dll" ["Pando Networks"] UltraISO\(Default) = "{AD392E40-428C-459F-961E-9B147782D099}" -> {HKLM...CLSID} = "UIContextMenu Class" \InProcServer32\(Default) = "C:\Program Files\UltraISO\isoshell.dll" ["EZB Systems, Inc."] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] XXX Groove GFS Context Menu Handler XXX\(Default) = "{6C467336-8281-4E60-8204-430CED96822D}" -> {HKLM...CLSID} = "Groove GFS Context Menu Handler" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [MS] HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\ avast\(Default) = "{472083B0-C522-11CF-8763-00608CC02F24}" -> {HKLM...CLSID} = "avast" \InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"] Shell Extension for Malware scanning\(Default) = "{45AC2688-0253-4ED8-97DE-B5370FA7D48A}" -> {HKLM...CLSID} = "Shell Extension for Malware scanning" \InProcServer32\(Default) = "C:\Program Files\Avira\AntiVir PersonalEdition Classic\shlext.dll" ["Avira GmbH"] UltraISO\(Default) = "{AD392E40-428C-459F-961E-9B147782D099}" -> {HKLM...CLSID} = "UIContextMenu Class" \InProcServer32\(Default) = "C:\Program Files\UltraISO\isoshell.dll" ["EZB Systems, Inc."] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] XXX Groove GFS Context Menu Handler XXX\(Default) = "{6C467336-8281-4E60-8204-430CED96822D}" -> {HKLM...CLSID} = "Groove GFS Context Menu Handler" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [MS] HKLM\Software\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\ XXX Groove GFS Context Menu Handler XXX\(Default) = "{6C467336-8281-4E60-8204-430CED96822D}" -> {HKLM...CLSID} = "Groove GFS Context Menu Handler" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [MS] Group Policies {policy setting}: -------------------------------- Note: detected settings may not have any effect. HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\ "shutdownwithoutlogon" = (REG_DWORD) hex:0x00000001 {Shutdown: Allow system to be shut down without having to log on} "undockwithoutlogon" = (REG_DWORD) hex:0x00000001 {Devices: Allow undock without having to log on} Active Desktop and Wallpaper: ----------------------------- Active Desktop may be disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState Displayed if Active Desktop enabled and wallpaper not set by Group Policy: HKCU\Software\Microsoft\Internet Explorer\Desktop\General\ "Wallpaper" = "C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp" Displayed if Active Desktop disabled and wallpaper not set by Group Policy: HKCU\Control Panel\Desktop\ "Wallpaper" = "C:\Documents and Settings\Właściciel\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp" Enabled Screen Saver: --------------------- HKCU\Control Panel\Desktop\ "SCRNSAVE.EXE" = "C:\WINDOWS\system32\sstext3d.scr" [MS] Enabled Scheduled Tasks: ------------------------ "At1" -> launches: "C:\WINDOWS\dr.exe" [file not found] "At2" -> launches: "C:\WINDOWS\system32\wunauclt.exe" [file not found] "At3" -> launches: "C:\WINDOWS\system32\wunauclt.exe" [file not found] "At4" -> launches: "C:\WINDOWS\dr.exe" [file not found] "At5" -> launches: "C:\WINDOWS\user32.exe" [file not found] "At6" -> launches: "C:\WINDOWS\system32\wunauclt.exe" [file not found] Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] 000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS] 000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] Transport Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: %SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 13 %SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05 Toolbars, Explorer Bars, Extensions: ------------------------------------ Toolbars HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ "{EF99BD32-C1FB-11D2-892F-0090271D4F88}" -> {HKLM...CLSID} = "&Yahoo! Companion" \InProcServer32\(Default) = "C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_1.dll" ["Yahoo! Inc."] "{B9D1647F-A66A-4695-B249-07901A45FF59}" -> {HKLM...CLSID} = "MU Online Toolbar" \InProcServer32\(Default) = "C:\Program Files\MU Online Toolbar\v3.2.0.0\MU_Online_Toolbar.dll" [null data] HKLM\Software\Microsoft\Internet Explorer\Toolbar\ "{EF99BD32-C1FB-11D2-892F-0090271D4F88}" = (no title provided) -> {HKLM...CLSID} = "&Yahoo! Companion" \InProcServer32\(Default) = "C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_1.dll" ["Yahoo! Inc."] "{B9D1647F-A66A-4695-B249-07901A45FF59}" = "MU Online Toolbar" -> {HKLM...CLSID} = "MU Online Toolbar" \InProcServer32\(Default) = "C:\Program Files\MU Online Toolbar\v3.2.0.0\MU_Online_Toolbar.dll" [null data] Explorer Bars HKLM\Software\Microsoft\Internet Explorer\Explorer Bars\ HKLM\Software\Classes\CLSID\{2A541AE1-5BF6-4665-A8A3-CFA9672E4291}\(Default) = "Groove Folder Synchronization" Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar] InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [MS] HKLM\Software\Classes\CLSID\{FF059E31-CC5A-4E2E-BF3B-96E929D65503}\(Default) = "&Poszukaj" Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar] InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL" [MS] Extensions (Tools menu items, main toolbar menu buttons) HKLM\Software\Microsoft\Internet Explorer\Extensions\ {08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ "MenuText" = "Sun Java Console" "CLSIDExtension" = "{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}" -> {HKCU...CLSID} = "Java Plug-in 1.6.0_01" \InProcServer32\(Default) = "C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll" ["Sun Microsystems, Inc."] -> {HKLM...CLSID} = "Java Plug-in 1.6.0_01" \InProcServer32\(Default) = "C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll" ["Sun Microsystems, Inc."] {2670000A-7350-4F3C-8081-5663EE0C6C49}\ "ButtonText" = "Wyślij do programu OneNote" "MenuText" = "Wyślij &do programu OneNote" "CLSIDExtension" = "{48E73304-E1D6-4330-914C-F5F514E3486C}" -> {HKLM...CLSID} = "Send to OneNote from Internet Explorer button" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll" [MS] {92780B25-18CC-41C8-B9BE-3C9C571A8263}\ "ButtonText" = "Research" {FB5F1910-F110-11D2-BB9E-00C04F795683}\ "ButtonText" = "Messenger" "MenuText" = "Windows Messenger" "Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS] Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ AntiVir PersonalEdition Classic Guard, AntiVirService, ""C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe"" ["Avira GmbH"] AntiVir PersonalEdition Classic Scheduler, AntiVirScheduler, ""C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe"" ["Avira GmbH"] avast! Antivirus, avast! Antivirus, ""C:\Program Files\Alwil Software\Avast4\ashServ.exe"" ["ALWIL Software"] avast! iAVS4 Control Service, aswUpdSv, ""C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"" ["ALWIL Software"] Comodo Application Agent, CmdAgent, "C:\Program Files\Comodo\Firewall\cmdagent.exe" ["COMODO"] crauto, crauto, "C:\WINDOWS\system32\drivers\crauto.exe" [null data] LightScribeService Direct Disc Labeling Service, LightScribeService, ""C:\Program Files\Common Files\LightScribe\LSSrvc.exe"" ["Hewlett-Packard Company"] NVIDIA Display Driver Service, NVSvc, "C:\WINDOWS\system32\nvsvc32.exe" ["NVIDIA Corporation"] Spyware Doctor Auxiliary Service, sdAuxService, "C:\Program Files\Spyware Doctor\svcntaux.exe" ["PC Tools"] Spyware Doctor Service, sdCoreService, "C:\Program Files\Spyware Doctor\swdsvc.exe" ["PC Tools"] Print Monitors: --------------- HKLM\System\CurrentControlSet\Control\Print\Monitors\ hpzsnt10\Driver = "hpzsnt10.dll" ["HP"] Send To Microsoft OneNote Monitor\Driver = "msonpmon.dll" [MS] ---------- (launch time: 2007-09-27 18:24:35) <<!>>: Suspicious data at a malware launch point. + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + To search all directories of local fixed drives for DESKTOP.INI DLL launch points, use the -supp parameter or answer "No" at the first message box and "Yes" at the second message box. ---------- (total run time: 46 seconds, including 6 seconds for message boxes)

i co z tym zrobic!?

xD

**Posty:** 8694 · przez **Red** 27 Wrz 2007, 18:51

Czy ty masz dwa antywirusy w systemie?

i ponawiam:

Red napisał(a):c:\windows\system32\drivers\mch...

jak wyskakuje znowu ,to podaj pełną nazwę.

**Posty:** 26 · przez **navan** 27 Wrz 2007, 18:55

jeden mam ikonka avasta zostala. avira skanuje. Oki juz jak skonczy skanowac uruchomie w awaryjnym i dam. Sprawdzalem na 2 kompie i tam nie ma tego pliku

**Posty:** 18165 · przez **wojtas** 27 Wrz 2007, 19:46

wklej do notatnika

schtasks /delete /TN At1 /F
schtasks /delete /TN At2 /F
schtasks /delete /TN At3 /F
schtasks /delete /TN At4 /F
schtasks /delete /TN At5 /F
schtasks /delete /TN At6 /F

Z menu Notatnika >>> Plik >>> Zapisz jako >>> Ustaw rozszerzenie na "Wszystkie pliki" >>> Zapisz jako FIX.BAT uruchom powstaly plik

start>uruchom>msconfig>zakladka uruchamianie odznacz wpisy od avasta

daj loga z combofixa

**Posty:** 8694 · przez **Red** 27 Wrz 2007, 20:56

Daj dokładny wpis o który prosiłem.Na ten moment nic nie wskazuje na to że masz infekcję.

**Posty:** 26 · przez **navan** 12 Paź 2007, 10:04

Ale infekcja byla, przepraszam zapomnialem o 4um bo byl format. Mialem cala bande rootkitow przez jakies demo frapsa ;/ nic dziwnego ze logi nie wygladly podejzanie.. ale zawieszal mi sie pulpit system poprawnie pingowal do wp.pl ale internet nie dzialal tzn przegladarki ani nic oprocz gg system strasznie zamulal jakby mial procka 100 xD. Na 2 gim kompie tez mialem zainstalowanego tego frapsa i bylo to samo od groma zarazonych pilikow znalazl jak przeskanowalem z linuxa i pliki ktorych wcale nie powinno byc. Thx za pomoc ;]

pomocy trojan gen 32

pomocy trojan gen 32

Kto jest na forum