Mamo mój komputer jest zepsuty! ;)
#1
Chciałem w jednym temacie no ale cóż chyba nie widać, więc zakładam nowy:
do problemow jakie opisalem w innych tematach- zadnego z nich nie udalo mi sie rozwiazac wlasciwie doszlo ze:
np. nie moge otworzyc folderu ze sciagnietym plikiem (samo sciaganie strasznie zawiesza komputer) z poziomu przegladarki tylko musze sam robic recznie


wogle zwolnilo wczytywanie sie stron...
otwarcie kazdej aplikacji trwa juz teraz nawet po kilka minut...



jak pisalem: windows update:
Cytat: [Numer błędu: 0x8DDD0002]
Aby zainstalować aktualizacje z tej witryny, musisz zalogować się na komputerze jako administrator lub członek grupy Administratorzy. W przypadku korzystania z systemu Windows XP, aby sprawdzić, czy jesteś administratorem, przejdź do apletu Konta użytkowników w Panelu sterowania.

Uwaga: jeżeli ten komputer jest podłączony do sieci, ustawienia zasad sieci mogą uniemożliwić korzystanie z tej witryny. Aby uzyskać pomoc dotyczącą aktualizacji, skontaktuj się z administratorem systemu.



i wiele wiele innych :/

niby nic nie zmienialem... no bo przeciez kilka aktualizacji comodo + to ze wylaczenie comodo calkowite (z procesow nawet) nie pomaga raczej nie wskazuje zeby to on byl winowajca?

Podobno sajakies programy (hijack, combofix?) - tylko ze ja za bardzo nie potrafie czytac tych logow:/

Na prawde bardzo was prosze o pomoc; nie mam sily juz na kolejnego formata ktory i tak nie daje gwarancji ze cos pomoze
Odpowiedz
#2
combofix

[Aby zobaczyć linki, zarejestruj się tutaj]

program nie tylko tworzy logi jak napisałeś ale również usuwa wiele śmieci..
Odpowiedz
#3
Co do twojego problemu z WU

[Aby zobaczyć linki, zarejestruj się tutaj]


Nie dawaj na razie loga z combofix, tylko z

[Aby zobaczyć linki, zarejestruj się tutaj]

Zapoznaj się z regulaminem działu
"Nie jestem konsumentem mieszczącym się w standardzie
Nie jestem gatunkiem skazanym na wymarcie
Nie jestem obiektem medialnego hałasu
Jestem nielegalnym zabójcą czasu"
Odpowiedz
#4
Creer fakt nie powinien..

adam1226 skorzystaj najpierw z opcji przywracania systemu.. przywróć system do chwili gdy wszystko było ok.
Odpowiedz
#5
@adam1226

Jeżeli nie wynika to z problemów systemowych to być może związane jest to z twoim zestawem zabezpieczającym.
Spróbuj na próbę zrezygnować z Defense+ a więc wyinstalować(samo wyłączenie nie wystarczy) a jeżeli koniecznie chcesz mieć ten firewall z HIPS to usuń GW.
Wydaje mi się, że jednoczesne używanie dwóch hipsów a więc GW i Defense+ może powodować problemy.
Odpowiedz
#6
tak jak pisalem : tymczasowoe calkowite wylaczenie comodo nie rozwiazalo moich problemow... ale sprobuje wylaczyc

co do combofix czy jesli zrobie tylko loga i tu go wkleje to bedzie to niebezpieczne?
Odpowiedz
#7
adam1226 napisał(a):co do combofix czy jesli zrobie tylko loga i tu go wkleje to bedzie to niebezpieczne?


raczej nie ale zaraz ktoś napisze że tak więc decyzja należy do Ciebie Tongue
Odpowiedz
#8
Wklejenie loga na forum nie stwarza dla nas żadnego zagrożenia, co innego użycie Combofix dla Twojego systemu - tutaj już może być różnie.
Odpowiedz
#9
nie moge wylaczyc tego defense+ :/
Odpowiedz
#10
odinstaluj comodo.. najlepszy sposób.. Smile
Odpowiedz
#11
no ale przeciez musze miec jakis firewall? :/
a troche regul juz potworzylem - preferuje tryb wlasnych zasad :/

podaje log z poleconego programu:

Kod:
Logfile of random''s system information tool 1.06 (written by random/random)
Run by adam at 2009-07-08 21:35:18
Microsoft Windows XP Professional Dodatek Service Pack 3
System drive C: has 10 GB (58%) free of 17 GB
Total RAM: 767 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:35:59, on 2009-07-08
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\geswall\gswserv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\geswall\gswui.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\NetLimiter 2 Pro\nlsvc.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\AutoConnect\AutoConnect.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
D:\Instalki\ECBarre_V_01_b.exe
C:\Program Files\VIA\RAID\vialogsv.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
D:\Komunikatory\Tlen.pl\tlen.exe
D:\Instalki\NOWE\RSIT.exe
C:\Program Files\trend micro\adam.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\Program Files\geswall\gswui.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe
O4 - Startup: Skrót do ECBarre_V_01_b.lnk = D:\Instalki\ECBarre_V_01_b.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra ''Tools'' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra ''Tools'' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{89D895F6-5108-45E4-A107-D2F8DB12F99D}: NameServer = 213.241.79.37 83.238.255.76
O20 - AppInit_DLLs:
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: GeSWall service (gswserv) - GentleSecurity S.a.r.l. - C:\Program Files\geswall\gswserv.exe
O23 - Service: NetLimiter (nlsvc) - Locktime Software - C:\Program Files\NetLimiter 2 Pro\nlsvc.exe
O23 - Service: VRAID Log Service - Unknown owner - C:\Program Files\VIA\RAID\vialogsv.exe

--
End of file - 4800 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-10-16 333192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} - Ask Toolbar - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-10-16 333192]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-02-03 61440]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"AudioDeck"=C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe [2007-08-09 528384]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2009-07-05 1793808]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AutoConnect"=C:\Program Files\AutoConnect\AutoConnect.exe [2004-08-28 295424]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
DSLMON.lnk - C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

C:\Documents and Settings\adam\Menu Start\Programy\Autostart
Skrót do ECBarre_V_01_b.lnk - D:\Instalki\ECBarre_V_01_b.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-02-04 155648]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\muzapp.exe"="C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 2 months======

2009-07-08 21:31:40 ----D---- C:\Program Files\trend micro
2009-07-08 21:31:39 ----D---- C:\rsit
2009-07-08 20:02:39 ----D---- C:\Documents and Settings\adam\Dane aplikacji\Locktime
2009-07-08 19:54:34 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Hagel Technologies
2009-07-08 19:50:41 ----D---- C:\Program Files\DU Meter
2009-07-08 19:48:19 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Locktime
2009-07-08 19:48:13 ----D---- C:\Program Files\NetLimiter 2 Pro
2009-07-08 19:38:41 ----D---- C:\Program Files\NetMeter
2009-07-06 18:03:24 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Adobe
2009-07-06 18:02:33 ----D---- C:\Program Files\Common Files\Adobe
2009-07-06 18:02:32 ----D---- C:\Program Files\Adobe
2009-07-02 12:51:58 ----D---- C:\WINDOWS\ie8updates
2009-07-02 12:47:45 ----D---- C:\WINDOWS\WBEM
2009-07-02 12:42:42 ----HDC---- C:\WINDOWS\ie8
2009-06-28 21:18:01 ----A---- C:\WINDOWS\IsUn0415.exe
2009-06-28 17:40:36 ----D---- C:\Program Files\Mozilla Firefox
2009-06-28 16:42:07 ----D---- C:\Program Files\MozBackup
2009-06-26 11:45:05 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2009-06-26 11:44:44 ----HDC---- C:\WINDOWS\$NtUninstallKB923689$
2009-06-26 11:44:11 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP10$
2009-06-25 18:51:52 ----A---- C:\WINDOWS\system32\UDBDef.exe
2009-06-25 18:51:47 ----D---- C:\Program Files\DiskTrix
2009-06-24 22:48:23 ----A---- C:\WINDOWS\system32\LAME_MP3.dll
2009-06-24 22:47:57 ----A---- C:\WINDOWS\IFinst26.exe
2009-06-24 22:47:52 ----D---- C:\Program Files\XviD
2009-06-24 22:47:20 ----A---- C:\WINDOWS\system32\MTXSYNCICON.dll
2009-06-24 22:47:20 ----A---- C:\WINDOWS\system32\MTTELECHIP.dll
2009-06-24 22:47:20 ----A---- C:\WINDOWS\system32\MSFLib.dll
2009-06-24 22:47:20 ----A---- C:\WINDOWS\system32\MSCLib.dll
2009-06-24 22:47:19 ----A---- C:\WINDOWS\system32\MK_Lyric.dll
2009-06-24 22:47:19 ----A---- C:\WINDOWS\system32\MaXMLProto.dll
2009-06-24 22:47:19 ----A---- C:\WINDOWS\system32\MASetupWizard.dll
2009-06-24 22:47:19 ----A---- C:\WINDOWS\system32\MASetupCleaner.exe
2009-06-24 22:47:19 ----A---- C:\WINDOWS\system32\MaJUtilLib.dll
2009-06-24 22:47:19 ----A---- C:\WINDOWS\system32\MaJGUILib.dll
2009-06-24 22:47:18 ----A---- C:\WINDOWS\system32\MACXMLProto.dll
2009-06-24 22:47:14 ----A---- C:\WINDOWS\system32\MAMACExtract.dll
2009-06-24 22:47:08 ----A---- C:\WINDOWS\system32\MaDRM.dll
2009-06-24 22:47:05 ----D---- C:\Program Files\Samsung
2009-06-24 22:07:43 ----A---- C:\WINDOWS\system32\setb4.tmp
2009-06-24 22:01:17 ----D---- C:\WINDOWS\RegisteredPackages
2009-06-22 20:27:05 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Comodo
2009-06-22 20:27:02 ----A---- C:\WINDOWS\system32\guard32.dll
2009-06-22 20:26:57 ----D---- C:\Program Files\COMODO
2009-06-21 23:22:41 ----D---- C:\WINDOWS\geswall
2009-06-21 23:22:11 ----D---- C:\WINDOWS\system32\GroupPolicy
2009-06-21 23:22:07 ----D---- C:\Program Files\geswall
2009-06-18 11:31:41 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2009-06-18 11:30:14 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2009-06-17 20:35:21 ----D---- C:\WINDOWS\system32\appmgmt
2009-06-17 20:31:14 ----D---- C:\Program Files\Common Files\Hewlett-Packard
2009-06-17 19:36:50 ----D---- C:\Program Files\HP
2009-06-17 19:36:43 ----HD---- C:\Config.Msi
2009-06-17 19:30:40 ----D---- C:\temp
2009-06-16 16:03:15 ----A---- C:\AILog.txt
2009-06-16 12:56:12 ----N---- C:\WINDOWS\system32\difxapi.dll
2009-06-16 12:46:52 ----D---- C:\Program Files\VIA
2009-06-16 12:33:44 ----A---- C:\WINDOWS\IsUninst.exe
2009-06-16 12:23:29 ----D---- C:\WINDOWS\vnDrvBas
2009-06-16 11:29:42 ----D---- C:\WINDOWS\Prefetch
2009-06-16 11:26:50 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-06-16 11:26:30 ----HDC---- C:\WINDOWS\$NtUninstallKB969897$
2009-06-16 11:26:14 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-06-16 11:25:38 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-06-16 11:25:22 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-06-16 11:25:09 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
2009-06-16 11:24:56 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-06-16 11:24:45 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-06-16 11:24:33 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-06-16 11:24:22 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-06-16 11:24:08 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-06-16 11:23:55 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-06-16 11:23:42 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-06-16 11:23:28 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-06-16 11:23:04 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-06-16 11:22:48 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-06-16 11:22:34 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-06-16 11:22:01 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-06-16 11:21:43 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-06-16 11:21:25 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-06-16 11:21:07 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-06-16 11:20:54 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-06-16 11:20:42 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-06-16 11:20:31 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-06-16 11:20:16 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-06-16 11:19:45 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-06-16 11:19:17 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2009-06-16 11:19:02 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-06-16 11:11:53 ----D---- C:\WINDOWS\system32\pl-pl
2009-06-16 11:11:51 ----D---- C:\WINDOWS\l2schemas
2009-06-16 11:11:50 ----D---- C:\WINDOWS\system32\pl
2009-06-16 11:11:49 ----D---- C:\WINDOWS\system32\bits
2009-06-16 11:07:04 ----D---- C:\WINDOWS\ServicePackFiles
2009-06-16 11:03:28 ----D---- C:\WINDOWS\network diagnostic
2009-06-16 11:01:18 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-06-16 10:55:55 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2009-06-15 11:10:33 ----D---- C:\WINDOWS\pss
2009-06-13 21:59:11 ----D---- C:\Program Files\Avira
2009-06-13 21:59:11 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Avira
2009-06-12 10:08:06 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2_0$
2009-06-12 10:07:26 ----HDC---- C:\WINDOWS\$NtUninstallKB952954_0$
2009-06-12 10:06:50 ----HDC---- C:\WINDOWS\$NtUninstallKB959426_0$
2009-06-12 10:06:40 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$
2009-06-12 10:06:24 ----HDC---- C:\WINDOWS\$NtUninstallKB961373_0$
2009-06-12 10:06:08 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$
2009-06-12 10:05:54 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2009-06-12 10:05:34 ----HDC---- C:\WINDOWS\$NtUninstallKB950974_0$
2009-06-12 10:05:15 ----HDC---- C:\WINDOWS\$NtUninstallKB960225_0$
2009-06-12 10:03:24 ----HDC---- C:\WINDOWS\$NtUninstallKB956572_0$
2009-06-12 10:02:42 ----HDC---- C:\WINDOWS\$NtUninstallKB961501_0$
2009-06-12 10:01:09 ----HDC---- C:\WINDOWS\$NtUninstallKB969897_0$
2009-06-12 10:00:38 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2_0$
2009-06-12 10:00:14 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-06-12 09:59:26 ----HDC---- C:\WINDOWS\$NtUninstallKB952004_0$
2009-06-12 09:58:46 ----HDC---- C:\WINDOWS\$NtUninstallKB969898$
2009-06-12 09:57:54 ----HDC---- C:\WINDOWS\$NtUninstallKB950762_0$
2009-06-12 09:57:24 ----HDC---- C:\WINDOWS\$NtUninstallKB957097_0$
2009-06-12 09:56:20 ----HDC---- C:\WINDOWS\$NtUninstallKB958687_0$
2009-06-12 09:55:10 ----HDC---- C:\WINDOWS\$NtUninstallKB952287_0$
2009-06-12 09:53:46 ----HDC---- C:\WINDOWS\$NtUninstallKB967715_0$
2009-06-12 09:52:27 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2009-06-12 09:52:00 ----HDC---- C:\WINDOWS\$NtUninstallKB951066_0$
2009-06-12 09:50:18 ----HDC---- C:\WINDOWS\$NtUninstallKB951748_0$
2009-06-12 09:47:28 ----A---- C:\WINDOWS\system32\MRT.exe
2009-06-12 09:47:17 ----HDC---- C:\WINDOWS\$NtUninstallKB970238_0$
2009-06-12 09:47:09 ----HDC---- C:\WINDOWS\$NtUninstallKB960803_0$
2009-06-12 09:47:00 ----HDC---- C:\WINDOWS\$NtUninstallKB968537_0$
2009-06-12 09:46:52 ----HDC---- C:\WINDOWS\$NtUninstallKB954600_0$
2009-06-12 09:46:43 ----HDC---- C:\WINDOWS\$NtUninstallKB958644_0$
2009-06-12 09:46:34 ----HDC---- C:\WINDOWS\$NtUninstallKB955069_0$
2009-06-12 09:46:25 ----HDC---- C:\WINDOWS\$NtUninstallKB956802_0$
2009-06-12 09:46:17 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2009-06-12 09:46:06 ----HDC---- C:\WINDOWS\$NtUninstallKB923561_0$
2009-06-11 23:28:09 ----D---- C:\Documents and Settings\adam\Dane aplikacji\Malwarebytes
2009-06-11 23:28:03 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
2009-06-11 19:33:54 ----A---- C:\WINDOWS\system32\RootkitReveal.txt
2009-06-11 15:21:23 ----D---- C:\Documents and Settings\adam\Dane aplikacji\WinRAR
2009-06-11 15:20:46 ----D---- C:\Program Files\WinRAR
2009-06-11 15:16:58 ----A---- C:\WINDOWS\NeroDigital.ini
2009-06-11 14:45:35 ----SHD---- C:\RECYCLER
2009-06-10 10:59:00 ----D---- C:\Documents and Settings\adam\Dane aplikacji\Gadu-Gadu
2009-06-10 01:55:16 ----HD---- C:\WINDOWS\PIF
2009-06-10 01:20:05 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2009-06-10 01:19:19 ----D---- C:\WINDOWS\system32\PreInstall
2009-06-10 01:19:17 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-06-10 01:19:11 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-06-10 01:19:10 ----HD---- C:\WINDOWS\$hf_mig$
2009-06-10 01:09:23 ----D---- C:\Documents and Settings\adam\Dane aplikacji\COWON
2009-06-10 01:08:46 ----D---- C:\Program Files\Common Files\COWON
2009-06-10 01:08:44 ----D---- C:\Program Files\JetAudio
2009-06-10 00:34:17 ----A---- C:\WINDOWS\system32\TwnLib20.dll
2009-06-10 00:33:56 ----N---- C:\WINDOWS\system32\ImagXRA7.dll
2009-06-10 00:33:55 ----N---- C:\WINDOWS\system32\ImagXR7.dll
2009-06-10 00:33:55 ----N---- C:\WINDOWS\system32\ImagXpr7.dll
2009-06-10 00:33:54 ----N---- C:\WINDOWS\system32\ImagX7.dll
2009-06-10 00:33:52 ----A---- C:\WINDOWS\system32\NeroCheck.exe
2009-06-10 00:33:39 ----D---- C:\Program Files\Common Files\Ahead
2009-06-10 00:33:37 ----D---- C:\Program Files\Ahead
2009-06-10 00:29:33 ----D---- C:\Program Files\AutoConnect
2009-06-10 00:16:31 ----D---- C:\Program Files\ESET
2009-06-10 00:00:42 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\ATI
2009-06-10 00:00:42 ----D---- C:\Documents and Settings\adam\Dane aplikacji\ATI
2009-06-09 23:50:49 ----RSD---- C:\WINDOWS\assembly
2009-06-09 23:50:05 ----D---- C:\WINDOWS\Microsoft.NET
2009-06-09 23:38:51 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2009-06-09 23:38:22 ----D---- C:\Program Files\ATI Technologies
2009-06-09 23:37:47 ----D---- C:\Program Files\Common Files\InstallShield
2009-06-09 23:37:24 ----D---- C:\ATI
2009-06-09 23:33:32 ----A---- C:\WINDOWS\system32\h323log.txt
2009-06-09 23:16:01 ----D---- C:\Documents and Settings\adam\Dane aplikacji\Macromedia
2009-06-09 23:16:00 ----D---- C:\Documents and Settings\adam\Dane aplikacji\Adobe
2009-06-09 22:54:46 ----D---- C:\Documents and Settings\adam\Dane aplikacji\Opera
2009-06-09 22:54:20 ----D---- C:\Program Files\Opera
2009-06-09 22:49:29 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-06-09 22:49:29 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy
2009-06-09 22:40:49 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-06-09 22:40:42 ----D---- C:\Program Files\AskBarDis
2009-06-09 22:40:42 ----D---- C:\Documents and Settings\adam\Dane aplikacji\Mozilla
2009-06-09 22:40:30 ----A---- C:\WINDOWS\system32\usbui.dll
2009-06-09 22:39:38 ----A---- C:\WINDOWS\imsins.BAK
2009-06-09 22:39:35 ----SHD---- C:\WINDOWS\Installer
2009-06-09 22:39:35 ----D---- C:\Program Files\Common Files\ODBC
2009-06-09 22:39:35 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-06-09 22:39:35 ----A---- C:\WINDOWS\ODBCINST.INI
2009-06-09 22:39:32 ----RD---- C:\Program Files
2009-06-09 22:39:32 ----D---- C:\Program Files\Common Files\SpeechEngines
2009-06-09 22:39:32 ----D---- C:\Program Files\Common Files\Microsoft Shared
2009-06-09 22:39:32 ----D---- C:\Program Files\Common Files
2009-06-09 22:39:30 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-06-09 22:39:30 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-06-09 22:39:30 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-06-09 22:39:28 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-06-09 22:39:28 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-06-09 22:39:28 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-06-09 22:39:28 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-06-09 22:39:28 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-06-09 22:39:28 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-06-09 22:39:28 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-06-09 22:39:28 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-06-09 22:39:28 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-06-09 22:39:28 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-06-09 22:39:28 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-06-09 22:39:28 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-06-09 22:39:27 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-06-09 22:39:27 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-06-09 22:39:27 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-06-09 22:39:27 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-06-09 22:39:27 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-06-09 22:39:26 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-06-09 22:39:26 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-06-09 22:39:25 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-06-09 22:39:25 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-06-09 22:39:25 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-06-09 22:39:25 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-06-09 22:39:25 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-06-09 22:39:22 ----A---- C:\WINDOWS\system32\kbdycl.dll
2009-06-09 22:39:22 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2009-06-09 22:39:22 ----A---- C:\WINDOWS\system32\kbdsl.dll
2009-06-09 22:39:22 ----A---- C:\WINDOWS\system32\kbdro.dll
2009-06-09 22:39:22 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2009-06-09 22:39:22 ----A---- C:\WINDOWS\system32\kbdhu.dll
2009-06-09 22:39:22 ----A---- C:\WINDOWS\system32\kbdcz2.dll
2009-06-09 22:39:22 ----A---- C:\WINDOWS\system32\kbdcz1.dll
2009-06-09 22:39:22 ----A---- C:\WINDOWS\system32\kbdcz.dll
2009-06-09 22:39:22 ----A---- C:\WINDOWS\system32\kbdcr.dll
2009-06-09 22:39:22 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2009-06-09 22:39:21 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-06-09 22:39:21 ----A---- C:\WINDOWS\system32\irclass.dll
2009-06-09 22:39:21 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-06-09 22:39:21 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-06-09 22:39:21 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-06-09 22:39:19 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-06-09 22:39:19 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-06-09 22:39:19 ----A---- C:\WINDOWS\system32\batt.dll
2009-06-09 22:39:18 ----A---- C:\WINDOWS\notepad.exe
2009-06-09 22:39:17 ----A---- C:\WINDOWS\system32\storprop.dll
2009-06-09 22:39:13 ----ASH---- C:\Documents and Settings\All Users\Dane aplikacji\desktop.ini
2009-06-09 22:39:08 ----RA---- C:\WINDOWS\SET8.tmp
2009-06-09 22:39:06 ----RA---- C:\WINDOWS\SET4.tmp
2009-06-09 22:39:05 ----RA---- C:\WINDOWS\SET3.tmp
2009-06-09 22:39:01 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-09 22:39:01 ----D---- C:\WINDOWS\system32\CatRoot
2009-06-09 22:38:55 ----SD---- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft
2009-06-09 22:38:45 ----A---- C:\WINDOWS\setuplog.txt
2009-06-09 22:38:43 ----SHD---- C:\System Volume Information
2009-06-09 22:38:43 ----D---- C:\Documents and Settings
2009-06-09 22:37:51 ----SH---- C:\boot.ini
2009-06-09 22:37:36 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-06-09 22:37:34 ----HDC---- C:\WINDOWS\$NtUninstallKB943232$
2009-06-09 22:37:24 ----D---- C:\Program Files\Zone Labs
2009-06-09 22:36:06 ----D---- C:\WINDOWS\Internet Logs
2009-06-09 22:34:38 ----D---- C:\WINDOWS\OemDir
2009-06-09 22:34:30 ----D---- C:\WINDOWS\WinSxS
2009-06-09 22:34:30 ----D---- C:\WINDOWS\system32\usmt
2009-06-09 22:34:30 ----D---- C:\WINDOWS\system32\inetsrv
2009-06-09 22:34:30 ----D---- C:\WINDOWS\system32\IME
2009-06-09 22:34:30 ----D---- C:\WINDOWS\system32\3com_dmi
2009-06-09 22:34:30 ----D---- C:\WINDOWS\system32\3076
2009-06-09 22:34:30 ----D---- C:\WINDOWS\system32\2052
2009-06-09 22:34:30 ----D---- C:\WINDOWS\system32\1054
2009-06-09 22:34:30 ----D---- C:\WINDOWS\system32\1045
2009-06-09 22:34:30 ----D---- C:\WINDOWS\system32\1042
2009-06-09 22:34:30 ----D---- C:\WINDOWS\system32\1041
2009-06-09 22:34:30 ----D---- C:\WINDOWS\system32\1037
2009-06-09 22:34:30 ----D---- C:\WINDOWS\system32\1033
2009-06-09 22:34:30 ----D---- C:\WINDOWS\system32\1031
2009-06-09 22:34:30 ----D---- C:\WINDOWS\system32\1028
2009-06-09 22:34:30 ----D---- C:\WINDOWS\system32\1025
2009-06-09 22:34:30 ----D---- C:\WINDOWS\Provisioning
2009-06-09 22:34:30 ----D---- C:\WINDOWS\PeerNet
2009-06-09 22:34:30 ----D---- C:\WINDOWS\pchealth
2009-06-09 22:34:30 ----D---- C:\WINDOWS\mui
2009-06-09 22:34:30 ----D---- C:\WINDOWS\ime
2009-06-09 22:34:30 ----D---- C:\WINDOWS\ehome
2009-06-09 22:34:29 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-06-09 22:34:29 ----RSD---- C:\WINDOWS\Fonts
2009-06-09 22:34:29 ----RD---- C:\WINDOWS\Web
2009-06-09 22:34:29 ----HD---- C:\WINDOWS\inf
2009-06-09 22:34:29 ----D---- C:\WINDOWS\twain_32
2009-06-09 22:34:29 ----D---- C:\WINDOWS\Temp
2009-06-09 22:34:29 ----D---- C:\WINDOWS\system32\wins
2009-06-09 22:34:29 ----D---- C:\WINDOWS\system32\wbem
2009-06-09 22:34:29 ----D---- C:\WINDOWS\system32\spool
2009-06-09 22:34:29 ----D---- C:\WINDOWS\system32\ShellExt
2009-06-09 22:34:29 ----D---- C:\WINDOWS\system32\Setup
2009-06-09 22:34:29 ----D---- C:\WINDOWS\system32\ras
2009-06-09 22:34:29 ----D---- C:\WINDOWS\system32\oobe
2009-06-09 22:34:29 ----D---- C:\WINDOWS\system32\npp
2009-06-09 22:34:29 ----D---- C:\WINDOWS\system32\mui
2009-06-09 22:34:29 ----D---- C:\WINDOWS\system32\icsxml
2009-06-09 22:34:29 ----D---- C:\WINDOWS\system32\ias
2009-06-09 22:34:29 ----D---- C:\WINDOWS\system32\export
2009-06-09 22:34:29 ----D---- C:\WINDOWS\system32\drivers
2009-06-09 22:34:29 ----D---- C:\WINDOWS\system32\dhcp
2009-06-09 22:34:29 ----D---- C:\WINDOWS\system32\config
2009-06-09 22:34:29 ----D---- C:\WINDOWS\system32
2009-06-09 22:34:29 ----D---- C:\WINDOWS\system
2009-06-09 22:34:29 ----D---- C:\WINDOWS\security
2009-06-09 22:34:29 ----D---- C:\WINDOWS\Resources
2009-06-09 22:34:29 ----D---- C:\WINDOWS\repair
2009-06-09 22:34:29 ----D---- C:\WINDOWS\msapps
2009-06-09 22:34:29 ----D---- C:\WINDOWS\msagent
2009-06-09 22:34:29 ----D---- C:\WINDOWS\Media
2009-06-09 22:34:29 ----D---- C:\WINDOWS\java
2009-06-09 22:34:29 ----D---- C:\WINDOWS\Help
2009-06-09 22:34:29 ----D---- C:\WINDOWS\Driver Cache
2009-06-09 22:34:29 ----D---- C:\WINDOWS\Debug
2009-06-09 22:34:29 ----D---- C:\WINDOWS\Cursors
2009-06-09 22:34:29 ----D---- C:\WINDOWS\Connection Wizard
2009-06-09 22:34:29 ----D---- C:\WINDOWS\Config
2009-06-09 22:34:29 ----D---- C:\WINDOWS\AppPatch
2009-06-09 22:34:29 ----D---- C:\WINDOWS\addins
2009-06-09 22:34:29 ----D---- C:\WINDOWS
2009-06-09 22:29:15 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-06-09 22:26:22 ----A---- C:\WINDOWS\Fast800.ini
2009-06-09 22:26:22 ----A---- C:\WINDOWS\adidsl.ini
2009-06-09 22:26:19 ----A---- C:\WINDOWS\adirasx64.exe
2009-06-09 22:26:19 ----A---- C:\WINDOWS\adiras.exe
2009-06-09 22:26:18 ----A---- C:\WINDOWS\system32\IPDETECT.EXE
2009-06-09 22:26:18 ----A---- C:\WINDOWS\system32\adadix32.dll
2009-06-09 22:26:16 ----A---- C:\WINDOWS\system32\unaddrv.x64.exe
2009-06-09 22:26:16 ----A---- C:\WINDOWS\system32\unaddrv.exe
2009-06-09 22:26:16 ----A---- C:\WINDOWS\system32\coclassfast.dll
2009-06-09 22:26:16 ----A---- C:\WINDOWS\system32\ADADIX2K.DLL
2009-06-09 22:26:16 ----A---- C:\WINDOWS\system32\ADADIX16.DLL
2009-06-09 22:26:16 ----A---- C:\WINDOWS\enddisk32.exe
2009-06-09 22:26:16 ----A---- C:\WINDOWS\autoclk.exe
2009-06-09 22:25:59 ----D---- C:\Program Files\SAGEM
2009-06-09 22:25:56 ----D---- C:\Documents and Settings\adam\Dane aplikacji\InstallShield
2009-06-09 21:55:15 ----A---- C:\WINDOWS\adiras.ini
2009-06-09 21:55:10 ----HD---- C:\Program Files\InstallShield Installation Information
2009-06-09 21:49:35 ----AD---- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
2009-06-09 21:49:30 ----D---- C:\Program Files\SpywareBlaster
2009-06-09 21:49:30 ----A---- C:\WINDOWS\system32\MSSTDFMT.DLL
2009-06-09 21:46:15 ----A---- C:\WINDOWS\system32\MSVCR71.dll
2009-06-09 21:46:15 ----A---- C:\WINDOWS\system32\MSVCP71.dll
2009-06-09 21:46:15 ----A---- C:\WINDOWS\system32\MFC71.dll
2009-06-09 21:46:07 ----D---- C:\Program Files\Alwil Software
2009-06-09 21:43:38 ----D---- C:\Program Files\IZArc
2009-06-09 21:42:25 ----D---- C:\Documents and Settings\adam\Dane aplikacji\Identities
2009-06-09 21:42:24 ----HD---- C:\Program Files\Uninstall Information
2009-06-09 21:42:18 ----SD---- C:\Documents and Settings\adam\Dane aplikacji\Microsoft
2009-06-09 21:42:18 ----ASH---- C:\Documents and Settings\adam\Dane aplikacji\desktop.ini
2009-06-09 21:41:15 ----D---- C:\WINDOWS\SoftwareDistribution
2009-06-09 21:41:14 ----SD---- C:\WINDOWS\system32\Microsoft
2009-06-09 21:41:14 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-06-09 21:37:50 ----D---- C:\WINDOWS\system32\xircom
2009-06-09 21:37:50 ----D---- C:\Program Files\xerox
2009-06-09 21:37:50 ----D---- C:\Program Files\microsoft frontpage
2009-06-09 21:37:33 ----A---- C:\WINDOWS\control.ini
2009-06-09 21:37:33 ----A---- C:\AUTOEXEC.BAT
2009-06-09 21:37:20 ----A---- C:\WINDOWS\OEWABLog.txt
2009-06-09 21:37:19 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-06-09 21:36:35 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-06-09 21:36:35 ----RD---- C:\WINDOWS\Offline Web Pages
2009-06-09 21:36:35 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-06-09 21:36:30 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-06-09 21:36:26 ----HD---- C:\Program Files\WindowsUpdate
2009-06-09 21:36:25 ----D---- C:\Program Files\Usługi online
2009-06-09 21:36:13 ----D---- C:\WINDOWS\system32\DirectX
2009-06-09 21:35:57 ----A---- C:\WINDOWS\system32\atrace.dll
2009-06-09 21:35:55 ----A---- C:\WINDOWS\system32\desktop.ini
2009-06-09 21:35:55 ----A---- C:\WINDOWS\desktop.ini
2009-06-09 21:35:50 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-06-09 21:35:49 ----A---- C:\WINDOWS\system32\acctres.dll
2009-06-09 21:35:48 ----D---- C:\Program Files\Common Files\Services
2009-06-09 21:35:46 ----SD---- C:\WINDOWS\Tasks
2009-06-09 21:35:46 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-06-09 21:35:45 ----D---- C:\Program Files\Common Files\MSSoap
2009-06-09 21:35:42 ----D---- C:\WINDOWS\system32\Macromed
2009-06-09 21:35:42 ----D---- C:\WINDOWS\srchasst
2009-06-09 21:35:40 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-06-09 21:35:40 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-06-09 21:35:40 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-06-09 21:35:40 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-06-09 21:35:39 ----A---- C:\WINDOWS\system32\wups.dll
2009-06-09 21:35:39 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-06-09 21:35:39 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-06-09 21:35:39 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-06-09 21:35:39 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-06-09 21:35:39 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-06-09 21:35:39 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-06-09 21:35:39 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-06-09 21:35:39 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-06-09 21:35:36 ----D---- C:\Program Files\Movie Maker
2009-06-09 21:35:33 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-06-09 21:35:33 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-06-09 21:35:33 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-06-09 21:35:33 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-06-09 21:35:30 ----D---- C:\WINDOWS\system32\Restore
2009-06-09 21:35:30 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-06-09 21:35:30 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-06-09 21:35:30 ----A---- C:\WINDOWS\system32\srclient.dll
2009-06-09 21:35:30 ----A---- C:\WINDOWS\system32\fltmc.exe
2009-06-09 21:35:30 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-06-09 21:35:29 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-06-09 21:35:29 ----A---- C:\WINDOWS\system32\msconf.dll
2009-06-09 21:35:29 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-06-09 21:35:29 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-06-09 21:35:29 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-06-09 21:35:29 ----A---- C:\WINDOWS\system32\ils.dll
2009-06-09 21:35:27 ----D---- C:\Program Files\NetMeeting
2009-06-09 21:35:27 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-06-09 21:35:27 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-06-09 21:35:26 ----A---- C:\WINDOWS\system32\inetres.dll
2009-06-09 21:35:26 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-06-09 21:35:25 ----D---- C:\Program Files\Outlook Express
2009-06-09 21:35:25 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-06-09 21:35:24 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-06-09 21:35:24 ----A---- C:\WINDOWS\system32\mstask.dll
2009-06-09 21:35:24 ----A---- C:\WINDOWS\system32\isign32.dll
2009-06-09 21:35:24 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-06-09 21:35:24 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-06-09 21:35:24 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-06-09 21:35:20 ----D---- C:\Program Files\Common Files\System
2009-06-09 21:35:18 ----D---- C:\Program Files\Internet Explorer
2009-06-09 21:34:52 ----D---- C:\Program Files\ComPlus Applications
2009-06-09 21:34:51 ----A---- C:\WINDOWS\vbaddin.ini
2009-06-09 21:34:51 ----A---- C:\WINDOWS\vb.ini
2009-06-09 21:34:50 ----D---- C:\WINDOWS\Registration
2009-06-09 21:34:48 ----D---- C:\Program Files\Windows Media Player
2009-06-09 21:34:45 ----D---- C:\Program Files\Messenger
2009-06-09 21:34:42 ----D---- C:\Program Files\MSN Gaming Zone
2009-06-09 21:34:42 ----A---- C:\WINDOWS\system32\write.exe
2009-06-09 21:34:34 ----A---- C:\WINDOWS\system32\winchat.exe
2009-06-09 21:34:34 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-06-09 21:34:34 ----A---- C:\WINDOWS\system32\hticons.dll
2009-06-09 21:34:34 ----A---- C:\WINDOWS\system32\avwav.dll
2009-06-09 21:34:34 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-06-09 21:34:34 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-06-09 21:34:28 ----A---- C:\WINDOWS\system32\winmine.exe
2009-06-09 21:34:28 ----A---- C:\WINDOWS\system32\sol.exe
2009-06-09 21:34:28 ----A---- C:\WINDOWS\system32\getuname.dll
2009-06-09 21:34:28 ----A---- C:\WINDOWS\system32\charmap.exe
2009-06-09 21:34:28 ----A---- C:\WINDOWS\system32\calc.exe
2009-06-09 21:34:27 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-06-09 21:34:27 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-06-09 21:34:27 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-06-09 21:34:27 ----A---- C:\WINDOWS\system32\tskill.exe
2009-06-09 21:34:27 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-06-09 21:34:27 ----A---- C:\WINDOWS\system32\tscon.exe
2009-06-09 21:34:27 ----A---- C:\WINDOWS\system32\shadow.exe
2009-06-09 21:34:27 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-06-09 21:34:27 ----A---- C:\WINDOWS\system32\reset.exe
2009-06-09 21:34:27 ----A---- C:\WINDOWS\system32\regini.exe
2009-06-09 21:34:27 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-06-09 21:34:27 ----A---- C:\WINDOWS\system32\freecell.exe
2009-06-09 21:34:26 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-06-09 21:34:26 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-06-09 21:34:26 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-06-09 21:34:26 ----A---- C:\WINDOWS\system32\msg.exe
2009-06-09 21:34:26 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-06-09 21:34:26 ----A---- C:\WINDOWS\system32\logoff.exe
2009-06-09 21:34:26 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-06-09 21:34:25 ----A---- C:\WINDOWS\system32\stclient.dll
2009-06-09 21:34:25 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-06-09 21:34:25 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-06-09 21:34:25 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-06-09 21:34:25 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-06-09 21:34:25 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-06-09 21:34:25 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-06-09 21:34:25 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-06-09 21:34:21 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-06-09 21:34:20 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-06-09 21:34:20 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-06-09 21:34:20 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-06-09 21:34:19 ----D---- C:\Program Files\Windows NT
2009-06-09 21:34:19 ----A---- C:\WINDOWS\system32\spider.exe
2009-06-09 21:34:19 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-06-09 21:34:19 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-06-09 21:34:19 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-06-09 21:34:18 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2009-06-09 21:34:18 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-06-09 21:34:18 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-06-09 21:34:18 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-06-09 21:34:18 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-06-09 21:34:18 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-06-09 21:34:18 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-06-09 21:34:18 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-06-09 21:34:18 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-06-09 21:34:17 ----D---- C:\WINDOWS\system32\MsDtc
2009-06-09 21:34:17 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-06-09 21:34:17 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-06-09 21:34:17 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-06-09 21:34:17 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-06-09 21:34:17 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-06-09 21:34:17 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-06-09 21:34:17 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-06-09 21:34:17 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-06-09 21:34:17 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-06-09 21:34:17 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-06-09 21:34:16 ----D---- C:\WINDOWS\system32\Com
2009-06-09 21:34:16 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-06-09 21:34:16 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-06-09 21:34:16 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-06-09 21:34:16 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-06-09 21:34:15 ----A---- C:\WINDOWS\system32\comuid.dll
2009-06-09 21:34:15 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-06-09 21:34:15 ----A---- C:\WINDOWS\system32\colbact.dll
2009-06-09 21:34:15 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-06-09 21:34:15 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-06-09 21:34:15 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-06-09 21:34:15 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-06-09 21:34:15 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-06-09 21:34:10 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-06-09 21:34:10 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-06-09 21:34:10 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-06-09 21:34:10 ----A---- C:\WINDOWS\system32\cmprops.dll

======List of files/folders modified in the last 2 months======

2009-06-16 11:36:15 ----A---- C:\WINDOWS\win.ini
2009-06-16 11:36:15 ----A---- C:\WINDOWS\system.ini
2009-05-13 07:06:02 ----A---- C:\WINDOWS\system32\wininet.dll
2009-05-13 07:06:02 ----A---- C:\WINDOWS\system32\mshtml.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK7;Sterownik procesora AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41856]
R1 AvgArCln;Avg Anti-Rootkit Clean Driver; C:\WINDOWS\System32\DRIVERS\AvgArCln.sys [2007-01-18 3968]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2009-07-08 132040]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2009-07-05 25160]
R1 is-VQFCHdrv;is-VQFCHdrv; C:\WINDOWS\system32\DRIVERS\38235019.sys [2008-07-08 148496]
R1 nltdi;nltdi; \??\C:\WINDOWS\system32\drivers\nltdi.sys []
R1 SAVRKBootTasks;Boot Tasks Driver; \??\C:\WINDOWS\system32\SAVRKBootTasks.sys []
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-03-24 55640]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-02-04 3488768]
R3 e4usbaw;USB ADSL2 WAN Adapter; C:\WINDOWS\system32\DRIVERS\e4usbaw.sys [2007-01-04 104344]
R3 FETNDIS;Sterownik NT karty VIA PCI 10/100Mb Fast Ethernet; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
R3 hidusb;Sterownik Microsoft klasy HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Sterownik myszy HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-26 12160]
R3 ms_mpu401;Sterownik portu MIDI UART Microsoft MPU-401; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944]
R3 usbehci;Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Koncentrator z obsługą USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Sterownik Miniport uniwersalnego kontrolera hosta USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VIAudio;Vinyl AC''97 Audio Controller (WDM); C:\WINDOWS\system32\drivers\vinyl97.sys [2007-06-27 207488]
S2 E4LOADER;General Purpose USB Driver (e4ldr.sys); C:\WINDOWS\System32\Drivers\e4ldr.sys [2007-01-04 69656]
S3 esihdrv;esihdrv; \??\C:\DOCUME~1\adam\USTAWI~1\Temp\esihdrv.sys []
S3 FETND5BV;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys [2005-03-18 42496]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2004-06-22 51088]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2004-06-22 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2004-06-22 21744]
S3 MEMSWEEP2;MEMSWEEP2; \??\C:\WINDOWS\system32\CF32.tmp []
S3 usbccgp;Rodzajowy sterownik nadrzędny USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Klasa PRINTER USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Sterownik skanera USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Sterownik magazynu masowego USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2005-01-28 18944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-05-11 185089]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-02-04 602112]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2009-07-05 707152]
R2 gswserv;GeSWall service; C:\Program Files\geswall\gswserv.exe [2009-01-04 970752]
R2 nlsvc;NetLimiter; C:\Program Files\NetLimiter 2 Pro\nlsvc.exe [2007-03-21 516096]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
R2 VRAID Log Service;VRAID Log Service; C:\Program Files\VIA\RAID\vialogsv.exe [2008-09-24 52888]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2009-02-03 593920]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]

-----------------EOF-----------------
Odpowiedz
#12
Outpost Firewall Free, Online Armor Personal Firewall 3.5.0.14 Free i wiele innych w wersji free.. chyba że musisz mieć comodo..
Odpowiedz
#13
Możesz odinstalować comodo, a potem zainstalować go bez defense +.

Cytat: O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\ AskBarDi s\bar\bin\askBar.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll



Usuń zaznaczone na czerwono.
Wpisy skasuj w hijacku.
Przeskanuj system za pomocą

[Aby zobaczyć linki, zarejestruj się tutaj]

Zapoznaj się z opisem

[Aby zobaczyć linki, zarejestruj się tutaj]

i daj z niego log.
"Nie jestem konsumentem mieszczącym się w standardzie
Nie jestem gatunkiem skazanym na wymarcie
Nie jestem obiektem medialnego hałasu
Jestem nielegalnym zabójcą czasu"
Odpowiedz
#14
Odinstaluj Askbar.
Odpowiedz
#15
dziwne jest to ze ten askbar to mam zintegrowany tylko z IE - ostatnio sie zaktualizowal do 8 i chyba przy okazji tej aktualizacji sie wlaczylo


co do comodo: ja go wlasnie instalowalem niby bez defense + !

ale jak znajde jutro troche czasu to poprosze o info jak zachowac posiadane ustawienia.


a musze musze wylaczyc programy podane w instrukcji?
co jesli ktorys z uzywanych powoduje problemy? czyli combofixem tego nie sprawdze?
Odpowiedz
#16
Wykonaj wszystkie polecenia w instrukcji i daj loga.
"Nie jestem konsumentem mieszczącym się w standardzie
Nie jestem gatunkiem skazanym na wymarcie
Nie jestem obiektem medialnego hałasu
Jestem nielegalnym zabójcą czasu"
Odpowiedz
#17
Kod:
ComboFix 09-07-08.02 - adam 2009-07-08 23:14.1 - NTFSx86
Microsoft Windows XP Professional5.1.2600.3.1250.48.1045.18.767.458 [GMT 2:00]
Uruchomiony z: d:\instalki\NOWE\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
.

((((((((((((((((((((((((( Pliki utworzone od 2009-06-08 do 2009-07-08)))))))))))))))))))))))))))))))
.

2009-07-08 19:31 . 2009-07-08 20:40    --------    d-----w-    c:\program files\trend micro
2009-07-08 19:31 . 2009-07-08 19:32    --------    d-----w-    C:\rsit
2009-07-08 18:23 . 2009-07-08 18:23    --------    d-----w-    c:\documents and settings\LocalService\Ustawienia lokalne\Dane aplikacji\Mozilla
2009-07-08 18:02 . 2009-07-08 18:02    --------    d-----w-    c:\documents and settings\adam\Dane aplikacji\Locktime
2009-07-08 18:02 . 2009-07-08 18:02    --------    d-----r-    c:\documents and settings\LocalService\Ulubione
2009-07-08 18:02 . 2009-07-08 18:02    --------    d-sh--w-    c:\documents and settings\LocalService\IETldCache
2009-07-08 17:54 . 2009-07-08 17:54    --------    d-----w-    c:\documents and settings\All Users\Dane aplikacji\Hagel Technologies
2009-07-08 17:50 . 2009-07-08 17:50    --------    d-----w-    c:\documents and settings\LocalService\Ustawienia lokalne\Dane aplikacji\Hagel Technologies
2009-07-08 17:50 . 2009-07-08 17:54    --------    d-----w-    c:\program files\DU Meter
2009-07-08 17:48 . 2009-07-08 17:48    --------    d-----w-    c:\documents and settings\All Users\Dane aplikacji\Locktime
2009-07-08 17:48 . 2009-07-08 17:48    --------    d-----w-    c:\program files\NetLimiter 2 Pro
2009-07-08 17:38 . 2009-07-08 17:54    --------    d-----w-    c:\program files\NetMeter
2009-07-07 18:46 . 2009-07-07 18:46    --------    d-sh--w-    c:\documents and settings\adam\IECompatCache
2009-07-07 18:42 . 2009-07-07 18:45    --------    d-sh--w-    c:\documents and settings\adam\PrivacIE
2009-07-06 16:02 . 2009-07-06 16:04    --------    d-----w-    c:\program files\Common Files\Adobe
2009-07-06 15:56 . 2009-07-06 16:52    --------    d-----w-    c:\documents and settings\adam\Ustawienia lokalne\Dane aplikacji\Adobe
2009-07-04 22:51 . 2009-07-04 22:51    3561743    ----a-w-    c:\documents and settings\All Users\Dane aplikacji\Malwarebytes\Malwarebytes'' Anti-Malware\mbam-setup.exe
2009-07-02 15:16 . 2009-07-02 15:16    --------    d-sh--w-    c:\documents and settings\adam\IETldCache
2009-07-02 10:53 . 2009-06-02 10:12    102912    -c----w-    c:\windows\system32\dllcache\iecompat.dll
2009-07-02 10:51 . 2009-07-02 10:53    --------    d-----w-    c:\windows\ie8updates
2009-07-02 10:51 . 2009-04-30 21:17    12800    -c----w-    c:\windows\system32\dllcache\xpshims.dll
2009-07-02 10:51 . 2009-04-30 21:17    1985024    -c----w-    c:\windows\system32\dllcache\iertutil.dll
2009-07-02 10:51 . 2009-04-30 21:17    246272    -c----w-    c:\windows\system32\dllcache\ieproxy.dll
2009-07-02 10:50 . 2009-04-30 21:17    11064832    -c----w-    c:\windows\system32\dllcache\ieframe.dll
2009-07-02 10:42 . 2009-07-02 10:50    --------    dc-h--w-    c:\windows\ie8
2009-06-28 19:18 . 1998-10-07 10:54    327168    ----a-w-    c:\windows\IsUn0415.exe
2009-06-28 14:42 . 2009-06-28 14:50    --------    d-----w-    c:\program files\MozBackup
2009-06-25 16:51 . 2006-08-04 17:24    10747    ----a-w-    c:\windows\system32\UDBDef.exe
2009-06-25 16:51 . 2009-06-25 16:51    --------    d-----w-    c:\program files\DiskTrix
2009-06-24 20:48 . 2005-05-03 07:33    299008    ----a-w-    c:\windows\system32\LAME_MP3.dll
2009-06-24 20:28 . 2008-04-13 18:45    26368    -c--a-w-    c:\windows\system32\dllcache\usbstor.sys
2009-06-22 18:26 . 2009-07-08 21:10    --------    d-----w-    c:\program files\COMODO
2009-06-21 21:22 . 2009-07-08 20:39    --------    d-----w-    c:\windows\geswall
2009-06-21 19:33 . 2009-06-21 19:33    --------    d-----w-    c:\documents and settings\adam\Ustawienia lokalne\Dane aplikacji\Identities
2009-06-17 19:02 . 2008-04-13 18:47    25856    -c--a-w-    c:\windows\system32\dllcache\usbprint.sys
2009-06-17 19:02 . 2008-04-13 18:47    25856    ----a-w-    c:\windows\system32\drivers\usbprint.sys
2009-06-17 19:01 . 2008-04-13 18:45    15104    -c--a-w-    c:\windows\system32\dllcache\usbscan.sys
2009-06-17 19:01 . 2008-04-13 18:45    15104    ----a-w-    c:\windows\system32\drivers\usbscan.sys
2009-06-17 18:55 . 2009-06-17 20:05    103511    ----a-w-    c:\windows\hpoins04.dat
2009-06-17 18:55 . 2004-06-22 06:06    17176    ------w-    c:\windows\hpomdl04.dat
2009-06-17 18:31 . 2009-06-17 18:31    --------    d-----w-    c:\program files\Common Files\Hewlett-Packard
2009-06-17 17:36 . 2009-06-17 17:37    --------    d-----w-    c:\program files\HP
2009-06-17 17:30 . 2009-06-17 17:31    --------    d-----w-    c:\temp\HP_WebRelease
2009-06-17 17:30 . 2009-06-17 17:30    --------    d-----w-    C:\temp
2009-06-17 17:27 . 2008-04-13 18:45    32128    -c--a-w-    c:\windows\system32\dllcache\usbccgp.sys
2009-06-17 17:27 . 2008-04-13 18:45    32128    ----a-w-    c:\windows\system32\drivers\usbccgp.sys
2009-06-16 11:11 . 2007-06-27 13:42    207488    ----a-r-    c:\windows\system32\drivers\vinyl97.sys
2009-06-16 11:00 . 2008-05-11 23:08    32768    ----a-w-    c:\windows\system\VRAIDlog.dll
2009-06-16 10:56 . 2007-04-11 14:35    331184    ------w-    c:\windows\system32\difxapi.dll
2009-06-16 10:54 . 2008-07-09 18:19    117248    ----a-w-    c:\windows\system32\drivers\viamraid.sys
2009-06-16 10:54 . 2009-05-05 07:58    13976    ----a-w-    c:\windows\system32\drivers\videX32.sys
2009-06-16 10:46 . 2009-06-16 11:11    --------    d-----w-    c:\program files\VIA
2009-06-16 10:34 . 2003-07-02 02:42    27904    ----a-w-    c:\windows\system32\drivers\VIAAGP1.SYS
2009-06-16 10:33 . 2003-06-18 14:48    306688    ----a-w-    c:\windows\IsUninst.exe
2009-06-16 10:33 . 2009-06-16 10:33    --------    d-----w-    c:\documents and settings\adam\WINDOWS
2009-06-16 10:23 . 2005-03-18 14:39    42496    ----a-w-    c:\windows\system32\drivers\fetnd5bv.sys
2009-06-16 10:23 . 2009-06-16 10:23    --------    d-----w-    c:\windows\vnDrvBas
2009-06-16 09:11 . 2009-07-02 15:16    --------    d-----w-    c:\windows\system32\pl-pl
2009-06-16 09:11 . 2009-06-16 09:11    --------    d-----w-    c:\windows\l2schemas
2009-06-16 09:11 . 2009-06-16 09:11    --------    d-----w-    c:\windows\system32\pl
2009-06-16 09:11 . 2009-06-16 09:11    --------    d-----w-    c:\windows\system32\bits
2009-06-16 09:07 . 2009-06-16 09:13    --------    d-----w-    c:\windows\ServicePackFiles
2009-06-14 18:13 . 2004-08-03 20:29    25471    ------w-    c:\windows\system32\drivers\watv10nt.sys
2009-06-14 18:13 . 2004-08-03 20:29    22271    ------w-    c:\windows\system32\drivers\watv06nt.sys
2009-06-14 18:13 . 2004-08-03 20:29    11935    ------w-    c:\windows\system32\drivers\wadv11nt.sys
2009-06-14 18:13 . 2004-08-03 20:29    11871    ------w-    c:\windows\system32\drivers\wadv09nt.sys
2009-06-14 18:13 . 2004-08-03 20:29    11807    ------w-    c:\windows\system32\drivers\wadv07nt.sys
2009-06-14 18:13 . 2004-08-03 20:29    11295    ------w-    c:\windows\system32\drivers\wadv08nt.sys
2009-06-14 18:13 . 2004-08-03 20:41    95424    ------w-    c:\windows\system32\drivers\slnthal.sys
2009-06-14 18:13 . 2004-08-03 20:41    13240    ------w-    c:\windows\system32\drivers\slwdmsup.sys
2009-06-14 18:13 . 2004-08-03 20:41    404990    ------w-    c:\windows\system32\drivers\slntamr.sys
2009-06-14 18:13 . 2004-08-03 20:41    129535    ------w-    c:\windows\system32\drivers\slnt7554.sys
2009-06-14 18:13 . 2004-08-03 20:29    166912    ------w-    c:\windows\system32\drivers\s3gnbm.sys
2009-06-14 18:12 . 2004-08-03 20:41    13776    ------w-    c:\windows\system32\drivers\recagent.sys
2009-06-14 18:12 . 2004-08-03 20:41    180360    ------w-    c:\windows\system32\drivers\ntmtlfax.sys
2009-06-14 18:12 . 2004-08-03 20:29    1897408    ------w-    c:\windows\system32\drivers\nv4_mini.sys
2009-06-14 18:12 . 2002-04-03 12:35    403    -c----w-    c:\windows\system32\dllcache\npdrmv2.zip
2009-06-14 18:12 . 2001-10-26 15:48    22060    -c----w-    c:\windows\system32\dllcache\npds.zip
2009-06-14 18:12 . 2004-08-03 20:41    126686    ------w-    c:\windows\system32\drivers\mtlmnt5.sys
2009-06-14 18:12 . 2004-08-03 20:41    1309184    ------w-    c:\windows\system32\drivers\mtlstrm.sys
2009-06-14 18:12 . 2004-08-03 20:29    452736    ------w-    c:\windows\system32\drivers\mtxparhm.sys
2009-06-14 18:12 . 2004-08-03 20:41    11868    ------w-    c:\windows\system32\drivers\mdmxsdk.sys
2009-06-14 18:12 . 2004-08-03 20:41    1041536    ------w-    c:\windows\system32\drivers\hsfdpsp2.sys
2009-06-14 18:12 . 2004-08-03 20:41    685056    ------w-    c:\windows\system32\drivers\hsfcxts2.sys
2009-06-14 18:12 . 2004-08-03 20:41    220032    ------w-    c:\windows\system32\drivers\hsfbs2s2.sys
2009-06-13 19:59 . 2009-03-30 08:33    96104    ----a-w-    c:\windows\system32\drivers\avipbb.sys
2009-06-13 19:59 . 2009-03-24 14:08    55640    ----a-w-    c:\windows\system32\drivers\avgntflt.sys
2009-06-13 19:59 . 2009-02-13 10:29    22360    ----a-w-    c:\windows\system32\drivers\avgntmgr.sys
2009-06-13 19:59 . 2009-02-13 10:17    45416    ----a-w-    c:\windows\system32\drivers\avgntdd.sys
2009-06-13 19:59 . 2009-06-13 19:59    --------    d-----w-    c:\program files\Avira
2009-06-13 19:59 . 2009-06-13 19:59    --------    d-----w-    c:\documents and settings\All Users\Dane aplikacji\Avira
2009-06-11 23:02 . 2009-07-08 21:17    958715936    --sha-w-    c:\windows\system32\drivers\fidbox.dat
2009-06-11 23:02 . 2008-07-08 12:54    148496    ----a-w-    c:\windows\system32\drivers\38235019.sys
2009-06-11 21:28 . 2009-06-11 21:28    --------    d-----w-    c:\documents and settings\adam\Dane aplikacji\Malwarebytes
2009-06-11 21:28 . 2009-06-17 09:27    38160    ----a-w-    c:\windows\system32\drivers\mbamswissarmy.sys
2009-06-11 21:28 . 2009-06-17 09:27    19096    ----a-w-    c:\windows\system32\drivers\mbam.sys
2009-06-11 21:28 . 2009-06-11 21:28    --------    d-----w-    c:\documents and settings\All Users\Dane aplikacji\Malwarebytes
2009-06-11 20:46 . 2009-06-11 20:46    --------    d-s---w-    c:\documents and settings\adam\UserData
2009-06-11 19:54 . 2008-04-21 21:16    218112    -c----w-    c:\windows\system32\dllcache\wordpad.exe
2009-06-11 19:52 . 2009-02-06 10:10    227840    -c----w-    c:\windows\system32\dllcache\wmiprvse.exe
2009-06-11 19:52 . 2009-02-09 11:26    2190336    -c----w-    c:\windows\system32\dllcache\ntoskrnl.exe
2009-06-11 19:52 . 2009-03-06 14:22    285696    -c----w-    c:\windows\system32\dllcache\pdh.dll
2009-06-11 19:52 . 2009-02-09 11:25    111104    -c----w-    c:\windows\system32\dllcache\services.exe
2009-06-11 19:52 . 2009-02-09 10:53    401408    -c----w-    c:\windows\system32\dllcache\rpcss.dll
2009-06-11 19:52 . 2009-02-09 10:53    473600    -c----w-    c:\windows\system32\dllcache\fastprox.dll
2009-06-11 19:52 . 2009-02-09 10:53    686592    -c----w-    c:\windows\system32\dllcache\advapi32.dll
2009-06-11 19:52 . 2009-02-09 10:53    731136    -c----w-    c:\windows\system32\dllcache\lsasrv.dll
2009-06-11 19:52 . 2009-02-09 10:53    722944    -c----w-    c:\windows\system32\dllcache\ntdll.dll
2009-06-11 19:52 . 2009-02-09 10:53    453120    -c----w-    c:\windows\system32\dllcache\wmiprvsd.dll
2009-06-11 19:52 . 2009-02-09 11:26    2146816    -c----w-    c:\windows\system32\dllcache\ntkrnlmp.exe
2009-06-11 19:52 . 2009-02-09 11:26    2025472    -c----w-    c:\windows\system32\dllcache\ntkrpamp.exe
2009-06-11 19:36 . 2008-10-15 16:36    337408    -c----w-    c:\windows\system32\dllcache\netapi32.dll
2009-06-11 19:32 . 2008-05-08 14:02    203136    -c----w-    c:\windows\system32\dllcache\rmcast.sys
2009-06-11 19:17 . 2008-06-14 17:36    273024    -c----w-    c:\windows\system32\dllcache\bthport.sys
2009-06-11 19:17 . 2008-06-14 17:36    273024    ------w-    c:\windows\system32\drivers\bthport.sys
2009-06-11 18:51 . 2008-12-11 10:57    333952    -c----w-    c:\windows\system32\dllcache\srv.sys
2009-06-11 18:48 . 2008-10-24 11:21    455296    -c----w-    c:\windows\system32\dllcache\mrxsmb.sys
2009-06-11 18:48 . 2007-08-14 06:12    18816    ------w-    c:\windows\system32\SAVRKBootTasks.sys
2009-06-11 18:44 . 2008-04-11 19:06    691712    -c----w-    c:\windows\system32\dllcache\inetcomm.dll
2009-06-11 18:13 . 2007-01-18 12:00    3968    ----a-w-    c:\windows\system32\drivers\AvgArCln.sys
2009-06-10 08:59 . 2009-06-10 08:59    --------    d-----w-    c:\documents and settings\adam\Dane aplikacji\Gadu-Gadu
2009-06-10 08:36 . 2009-06-14 11:37    --------    d-----w-    c:\documents and settings\adam\Gadu-Gadu
2009-06-09 23:55 . 2009-06-09 23:55    --------    d--h--w-    c:\windows\PIF
2009-06-09 23:19 . 2009-01-07 16:21    26144    ----a-w-    c:\windows\system32\spupdsvc.exe
2009-06-09 23:19 . 2009-07-02 10:53    --------    d--h--w-    c:\windows\$hf_mig$

.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-08 21:09 . 2009-06-11 23:02    11237372    --sha-w-    c:\windows\system32\drivers\fidbox.idx
2009-07-08 20:38 . 2009-06-09 20:40    --------    d-----w-    c:\program files\AskBarDis
2009-06-24 21:14 . 2009-06-09 19:55    --------    d--h--w-    c:\program files\InstallShield Installation Information
2009-06-24 20:51 . 2009-06-24 20:47    --------    d-----w-    c:\program files\XviD
2009-06-24 20:47 . 2009-06-24 20:47    65024    ----a-w-    c:\windows\IFinst26.exe
2009-06-24 20:47 . 2009-06-24 20:47    --------    d-----w-    c:\program files\Samsung
2009-06-16 11:17 . 2001-10-26 16:15    74230    ----a-w-    c:\windows\system32\perfc015.dat
2009-06-16 11:17 . 2001-10-26 16:15    448004    ----a-w-    c:\windows\system32\perfh015.dat
2009-06-16 09:34 . 2009-06-09 19:47    13104    ----a-w-    c:\documents and settings\adam\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
2009-06-16 09:16 . 2009-06-09 19:36    86327    ----a-w-    c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-06-15 19:08 . 2009-06-09 19:49    --------    d---a-w-    c:\documents and settings\All Users\Dane aplikacji\TEMP
2009-06-15 08:54 . 2009-06-09 19:49    --------    d-----w-    c:\program files\SpywareBlaster
2009-06-12 18:10 . 2009-06-12 18:10    138175    ----a-w-    c:\windows\Internet Logs\vsmon_2nd_2009_06_12_20_04_43_small.dmp.zip
2009-06-10 14:43 . 2009-06-10 14:43    142954    ----a-w-    c:\windows\Internet Logs\vsmon_2nd_2009_06_10_16_38_09_small.dmp.zip
2009-06-09 20:58 . 2009-06-09 20:58    0    ----a-w-    c:\windows\nsreg.dat
2009-06-09 20:54 . 2009-06-09 20:54    --------    d-----w-    c:\program files\Opera
2009-06-09 20:51 . 2009-06-09 20:49    --------    d-----w-    c:\program files\Spybot - Search & Destroy
2009-06-09 20:51 . 2009-06-09 20:49    --------    d-----w-    c:\documents and settings\All Users\Dane aplikacji\Spybot - Search & Destroy
2009-06-09 20:40 . 2009-06-09 20:40    4212    ---ha-w-    c:\windows\system32\zllictbl.dat
2009-06-09 20:37 . 2009-06-09 20:37    --------    d-----w-    c:\program files\Zone Labs
2009-06-09 20:26 . 2009-06-09 20:26    33    ----a-w-    c:\windows\system32\drivers\adidsl.cfg
2009-06-09 20:25 . 2009-06-09 20:25    --------    d-----w-    c:\program files\SAGEM
2009-06-09 20:25 . 2009-06-09 20:25    --------    d-----w-    c:\documents and settings\adam\Dane aplikacji\InstallShield
2009-06-09 19:46 . 2009-06-09 19:46    --------    d-----w-    c:\program files\Alwil Software
2009-06-09 19:43 . 2009-06-09 19:43    --------    d-----w-    c:\program files\IZArc
2009-06-09 19:37 . 2009-06-09 19:37    --------    d-----w-    c:\program files\microsoft frontpage
2009-06-09 19:36 . 2009-06-09 19:36    --------    d-----w-    c:\program files\Usługi online
2009-06-09 19:34 . 2009-06-09 19:34    21856    ----a-w-    c:\windows\system32\emptyregdb.dat
2009-05-13 05:06 . 2004-08-03 22:44    915456    ----a-w-    c:\windows\system32\wininet.dll
2009-05-07 15:34 . 2004-08-03 22:44    347648    ----a-w-    c:\windows\system32\localspl.dll
2009-04-19 19:51 . 2004-08-03 22:37    1847424    ----a-w-    c:\windows\system32\win32k.sys
2009-04-15 14:54 . 2004-08-03 22:44    585216    ----a-w-    c:\windows\system32\rpcrt4.dll
.

((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AutoConnect"="c:\program files\AutoConnect\AutoConnect.exe" [2004-08-28 295424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-02-03 61440]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"AudioDeck"="c:\program files\VIA\VIAudioi\SBADeck\ADeck.exe" [2007-08-09 528384]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]

c:\documents and settings\adam\Menu Start\Programy\Autostart\
Skr˘t do ECBarre_V_01_b.lnk - d:\instalki\ECBarre_V_01_b.exe [2009-6-12 52224]

c:\documents and settings\All Users\Menu Start\Programy\Autostart\
DSLMON.lnk - c:\program files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2009-6-9 1205840]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

R0 viasraid;viasraid;c:\windows\system32\drivers\viasraid.sys [2008-02-04 77312]
R1 is-VQFCHdrv;is-VQFCHdrv;c:\windows\system32\drivers\38235019.sys [2009-06-12 148496]
R1 nltdi;nltdi;c:\windows\system32\drivers\nltdi.sys [2007-04-23 82200]
R1 SAVRKBootTasks;Boot Tasks Driver;c:\windows\system32\SAVRKBootTasks.sys [2009-06-11 18816]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2009-06-13 108289]
R2 VRAID Log Service;VRAID Log Service;c:\program files\VIA\RAID\vialogsv.exe [2009-06-16 52888]
R3 e4usbaw;USB ADSL2 WAN Adapter;c:\windows\system32\drivers\e4usbaw.sys [2009-06-09 104344]
S2 E4LOADER;General Purpose USB Driver (e4ldr.sys);c:\windows\system32\drivers\e4ldr.sys [2009-06-09 69656]
S3 esihdrv;esihdrv;\??\c:\docume~1\adam\USTAWI~1\Temp\esihdrv.sys --> c:\docume~1\adam\USTAWI~1\Temp\esihdrv.sys [?]
S3 MEMSWEEP2;MEMSWEEP2;\??\c:\windows\system32\CF32.tmp --> c:\windows\system32\CF32.tmp [?]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
- - - - USUNIĘTO PUSTE WPISY - - - -

ShellIconOverlayIdentifiers-{F6ACC71C-420B-4a95-905C-C7534706813C} - (no file)


.
------- Skan uzupełniający -------
.
TCP: {89D895F6-5108-45E4-A107-D2F8DB12F99D} = 213.241.79.37 83.238.255.76
FF - ProfilePath - c:\documents and settings\adam\Dane aplikacji\Mozilla\Firefox\Profiles\27celudo.Adam\
FF - prefs.js: browser.startup.homepage - hxxp://www.piraten-battle.de/index.php?art=user&page=uebersicht&num=geb_bauen&gebaeude=28&c=456964924
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-08 23:17
Windows 5.1.2600 Dodatek Service Pack 3 NTFS

skanowanie ukrytych procesów ...

skanowanie ukrytych wpisów autostartu ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
AudioDeck = c:\program files\VIA\VIAudioi\SBADeck\ADeck.exe 1????????????????????????????????????????????????

skanowanie ukrytych plików ...

skanowanie pomyślnie ukończone
ukryte pliki: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\CF32.tmp"
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------

- - - - - - - > ''winlogon.exe''(692)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > ''explorer.exe''(3672)
c:\windows\system32\WININET.dll
c:\windows\system32\webcheck.dll
.
Czas ukończenia: 2009-07-08 23:19
ComboFix-quarantined-files.txt2009-07-08 21:19

Przed: 10 341 941 248 bajtów wolnych
Po: 10 385 670 144 bajtów wolnych

WindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

245    --- E O F ---    2009-07-02 10:54

ApplicUnsaf.Win32.Hide.~AB(ID = 0x5143db) D:\Instalki\NOWE\ComboFix.exe:UPX:Unsfx:32788R22FWJFW\hidec.exe


a to mi znalazlo skanowanie przy reinstalacji comodo...


poki co reinstalacja programow zabezpieczajacych co nieco pomogla.. (chyba - moge normalnie sciagac pliki przez przegladrke) natomiast nadal "czuje" ze jest cos nie tak bo np. dalej nie dziala mi zapamietywanie hasel( autologowanie) w firefoxie
Odpowiedz
#18
Adam tym że Comodo wykryło coś w combofix to norma i nie ma się co przejmować.. gwarantuje Ci że combofix nie jest wirusem.. Smile
Odpowiedz
#19
tak myslalem, tylko ze zawsze nawet do najbardziej zaufanego programu moze przyczepic sie wirus, wiec wolalem sie upewnic...
Odpowiedz
#20
Nic tutaj nie widać. Kosmetycznie, start => uruchom => cdm, wpisz
sc delete MEMSWEEP2
Przeskanuj kopma Dr.WEB CureIt, lecz/usuń jak coś znajdzie i wklej log

[Aby zobaczyć linki, zarejestruj się tutaj]

... WEB+CureIt!
Odpowiedz


Skocz do:


Użytkownicy przeglądający ten wątek: 1 gości