To mi pomogło, a co do loga... to proszę
Oto log:
ComboFix 08-01-17.5 - Darek 2008-01-18 8:14:48.3 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.497 [GMT 1:00]
Running from: C:\Documents and Settings\Darek\Pulpit\ComboFix.exe
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((( Files Created from 2007-12-18 to 2008-01-18 )))))))))))))))))))))))))))))))
.
2008-01-17 13:02 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe
2008-01-16 22:34 . 2008-01-16 22:34 <DIR> d-------- C:\Program Files\Alwil Software
2008-01-16 22:34 . 2007-12-04 14:04 837,496 --a------ C:\WINDOWS\system32\aswBoot.exe
2008-01-16 22:34 . 2004-01-09 10:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx
2008-01-16 22:34 . 2007-12-04 13:54 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr
2008-01-16 22:34 . 2007-12-04 15:55 94,544 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2008-01-16 22:34 . 2007-12-04 15:56 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2008-01-16 22:34 . 2007-12-04 15:51 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2008-01-16 22:34 . 2007-12-04 15:49 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2008-01-16 22:34 . 2007-12-04 15:53 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2008-01-16 19:23 . 2008-01-16 19:23 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-01-16 19:23 . 2008-01-16 19:23 1,409 --a------ C:\WINDOWS\QTFont.for
2008-01-11 15:36 . 2008-01-11 15:36 <DIR> d-------- C:\Program Files\Common Files\PCSuite
2008-01-11 15:36 . 2008-01-11 15:36 <DIR> d-------- C:\Program Files\Common Files\Nokia
2008-01-11 15:35 . 2008-01-11 15:35 <DIR> d-------- C:\Program Files\PC Connectivity Solution
2008-01-11 15:33 . 2007-02-22 10:15 137,216 --a------ C:\WINDOWS\system32\drivers\nmwcd.sys
2008-01-11 15:33 . 2007-02-22 10:15 65,536 --a------ C:\WINDOWS\system32\nmwcdcocls.dll
2008-01-11 15:33 . 2007-02-22 10:15 12,288 --a------ C:\WINDOWS\system32\drivers\nmwcdcm.sys
2008-01-11 15:33 . 2007-02-22 10:15 12,288 --a------ C:\WINDOWS\system32\drivers\nmwcdcj.sys
2008-01-11 15:33 . 2007-02-22 10:15 8,320 --a------ C:\WINDOWS\system32\drivers\nmwcdc.sys
2008-01-07 15:22 . 2008-01-07 19:45 <DIR> d-------- C:\Program Files\Mozilla Firefox 3 Beta 2
2007-12-30 14:31 . 2007-12-30 14:31 <DIR> d--h----- C:\WINDOWS\PIF
2007-12-30 14:18 . 2007-12-30 14:18 <DIR> d-------- C:\Program Files\Rockstar Games
2007-12-29 20:34 . 2005-12-22 14:45 493,440 --a------ C:\WINDOWS\system32\drivers\WlanBZ64.SYS
2007-12-29 20:34 . 2005-12-22 14:45 402,432 --a------ C:\WINDOWS\system32\drivers\WlanBZXP.sys
2007-12-29 20:34 . 2005-12-22 14:45 25,214 --a------ C:\WINDOWS\WLANUTL.ICO
2007-12-29 16:22 . 2007-12-29 16:22 719,229 --a------ C:\WINDOWS\Counter Strike 1.6 Reloaded Uninstaller.exe
2007-12-29 16:20 . 2007-12-29 16:21 <DIR> d-------- C:\Program Files\Counter Strike 1.6 Reloaded
2007-12-26 20:35 . 2007-10-31 00:33 380,416 --------- C:\WINDOWS\system32\SET210.tmp
2007-12-26 20:35 . 2007-10-31 00:32 354,304 --------- C:\WINDOWS\system32\SET20D.tmp
2007-12-26 20:35 . 2007-10-31 00:28 177,152 --------- C:\WINDOWS\system32\SET20F.tmp
2007-12-26 20:35 . 2007-10-31 00:32 80,896 --------- C:\WINDOWS\system32\SET20C.tmp
2007-12-26 20:35 . 2007-10-31 00:32 6,656 --------- C:\WINDOWS\system32\SET20B.tmp
2007-12-26 20:33 . 2006-12-29 00:31 19,569 --a------ C:\WINDOWS\005107_.tmp
2007-12-26 19:43 . 2006-12-29 00:31 19,569 --a------ C:\WINDOWS\000001_.tmp
2007-12-26 19:39 . 2007-12-26 19:40 <DIR> d-------- C:\45e66d438d814bd03f4081871e0b
2007-12-26 19:30 . 2007-12-26 19:30 <DIR> d-------- C:\WINDOWS\l2schemas
2007-12-26 19:30 . 2007-10-31 00:31 539,136 --a------ C:\WINDOWS\system32\SET13F0.tmp
2007-12-26 19:30 . 2007-10-31 00:33 380,416 --a------ C:\WINDOWS\system32\SET140E.tmp
2007-12-26 19:30 . 2007-10-31 00:32 354,304 --a------ C:\WINDOWS\system32\SET13BF.tmp
2007-12-26 19:30 . 2007-10-31 00:28 177,152 --a------ C:\WINDOWS\system32\SET13F2.tmp
2007-12-26 19:30 . 2007-10-31 00:32 80,896 --a------ C:\WINDOWS\system32\SET13BA.tmp
2007-12-26 19:30 . 2007-10-31 00:32 6,656 --a------ C:\WINDOWS\system32\SET13B5.tmp
2007-12-26 19:29 . 2007-12-26 19:29 <DIR> d-------- C:\WINDOWS\ServicePackFiles
2007-12-26 19:29 . 2007-10-31 00:31 471,552 --a------ C:\WINDOWS\system32\SET792.tmp
2007-12-26 19:29 . 2007-10-31 00:31 95,744 --a------ C:\WINDOWS\system32\SET798.tmp
2007-12-26 19:27 . 2006-12-29 00:31 19,569 --a------ C:\WINDOWS\003213_.tmp
2007-12-25 19:42 . 2007-12-25 19:42 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Last.fm
2007-12-25 19:41 . 2008-01-10 17:14 <DIR> d-------- C:\Program Files\Last.fm
2007-12-25 19:30 . 2007-12-26 21:14 <DIR> d-------- C:\Program Files\Opera
2007-12-23 19:41 . 2007-12-23 19:41 <DIR> d-------- C:\Program Files\Common Files\Ahead
2007-12-23 19:41 . 2004-07-20 17:24 1,568,768 --------- C:\WINDOWS\system32\ImagX7.dll
2007-12-23 19:41 . 2004-07-20 17:24 476,320 --------- C:\WINDOWS\system32\ImagXpr7.dll
2007-12-23 19:41 . 2004-07-20 17:24 471,040 --------- C:\WINDOWS\system32\ImagXRA7.dll
2007-12-23 19:41 . 2004-07-09 09:43 364,544 --------- C:\WINDOWS\system32\TwnLib4.dll
2007-12-23 19:41 . 2004-07-20 17:24 262,144 --------- C:\WINDOWS\system32\ImagXR7.dll
2007-12-23 19:41 . 2001-07-09 11:50 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe
2007-12-23 19:41 . 2000-06-26 11:45 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll
2007-12-23 19:41 . 2001-06-26 08:15 38,912 --------- C:\WINDOWS\system32\picn20.dll
2007-12-19 07:24 . 2007-12-19 07:24 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\FLEXnet
2007-12-19 07:18 . 2007-12-19 07:18 <DIR> d-------- C:\Program Files\Bonjour
2007-12-19 07:14 . 2007-12-19 07:14 <DIR> d-------- C:\Program Files\Common Files\Macrovision Shared
2007-12-18 22:37 . 2007-12-18 22:37 <DIR> d-------- C:\Program Files\WYSIWYG Web Builder 4.0
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-18 07:04 --------- d-----w C:\Program Files\Mozilla Thunderbird
2008-01-17 06:55 --------- d-----w C:\Program Files\WAV to MP3 Encoder
2008-01-15 14:43 --------- d-----w C:\Documents and Settings\Darek\Dane aplikacji\Nokia
2008-01-11 14:43 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Installations
2008-01-11 14:33 --------- d-----w C:\Program Files\Nokia
2008-01-11 14:19 --------- d-----w C:\Documents and Settings\Darek\Dane aplikacji\PC Suite
2008-01-04 21:04 --------- d-----w C:\Program Files\Gadu-Gadu
2008-01-02 18:44 --------- d-----w C:\Program Files\AutoCAD 2007
2007-12-30 15:39 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Test Drive Unlimited
2007-12-30 13:18 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-29 09:58 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help
2007-12-26 20:06 --------- d-----w C:\Program Files\Winamp
2007-12-23 18:41 --------- d-----w C:\Program Files\Ahead
2007-12-23 12:59 --------- d-----w C:\Program Files\Common Files\Adobe
2007-12-18 21:37 737,280 ----a-w C:\WINDOWS\iun6002.exe
2007-12-16 20:48 --------- d-----w C:\Program Files\Winamp Toolbar
2007-12-16 20:48 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar
2007-12-12 06:14 --------- d-----w C:\Program Files\Electronic Arts
2007-12-10 20:05 --------- d-----w C:\Program Files\Audacity
2007-12-01 11:19 --------- d-----w C:\Program Files\DC++
2007-11-28 19:26 --------- d-----w C:\Documents and Settings\Darek\Dane aplikacji\Nokia Multimedia Player
2007-11-20 13:24 --------- d-----w C:\Documents and Settings\Darek\Dane aplikacji\Printer Info Cache
2007-11-20 13:24 --------- d-----w C:\Documents and Settings\Darek\Dane aplikacji\Image Zone Express
2007-11-19 14:54 --------- d-----w C:\Program Files\PDFCreator
2007-11-07 09:29 723,968 ----a-w C:\WINDOWS\system32\lsasrv.dll
2007-11-06 08:20 831,048 ----a-w C:\WINDOWS\system32\WudfUpdate_01005.dll
2007-10-30 23:35 217,118 ----a-w C:\WINDOWS\AppPatch\SET69E.tmp
2007-10-30 23:35 217,118 ------w C:\WINDOWS\AppPatch\SET204.tmp
2007-10-30 23:35 217,118 ------w C:\WINDOWS\AppPatch\SET16A9.tmp
2007-10-30 23:35 198,736 ----a-w C:\WINDOWS\AppPatch\SET69D.tmp
2007-10-30 23:35 198,736 ------w C:\WINDOWS\AppPatch\SET203.tmp
2007-10-30 23:35 198,736 ------w C:\WINDOWS\AppPatch\SET16A8.tmp
2007-10-30 23:35 1,199,128 ----a-w C:\WINDOWS\AppPatch\SET69C.tmp
2007-10-30 23:35 1,199,128 ------w C:\WINDOWS\AppPatch\SET202.tmp
2007-10-30 23:35 1,199,128 ------w C:\WINDOWS\AppPatch\SET16A7.tmp
2007-10-30 23:33 56,832 ----a-w C:\WINDOWS\system32\SET385.tmp
2007-10-30 23:33 56,832 ------w C:\WINDOWS\system32\SET161.tmp
2007-10-30 23:33 56,832 ------w C:\WINDOWS\system32\SET15F9.tmp
2007-10-30 23:33 507,904 ----a-w C:\WINDOWS\system32\SET266.tmp
2007-10-30 23:33 507,904 ------w C:\WINDOWS\system32\SETF4.tmp
2007-10-30 23:33 507,904 ------w C:\WINDOWS\system32\SET1591.tmp
2007-10-30 23:33 380,416 ------w C:\WINDOWS\system32\SET16B9.tmp
2007-10-30 23:33 33,280 ----a-w C:\WINDOWS\system32\SET417.tmp
2007-10-30 23:33 33,280 ------w C:\WINDOWS\system32\SET18E.tmp
2007-10-30 23:33 33,280 ------w C:\WINDOWS\system32\SET1626.tmp
2007-10-30 23:33 32,768 ----a-w C:\WINDOWS\system32\SET35A.tmp
2007-10-30 23:33 32,768 ------w C:\WINDOWS\system32\SET15E4.tmp
2007-10-30 23:33 32,768 ------w C:\WINDOWS\system32\SET14D.tmp
2007-10-30 23:33 29,696 ----a-w C:\WINDOWS\system32\SET456.tmp
2007-10-30 23:33 29,696 ------w C:\WINDOWS\system32\SET19A.tmp
2007-10-30 23:33 29,696 ------w C:\WINDOWS\system32\SET1632.tmp
2007-10-30 23:33 265,728 ----a-w C:\WINDOWS\system32\SET45D.tmp
2007-10-30 23:33 265,728 ------w C:\WINDOWS\system32\SET19C.tmp
2007-10-30 23:33 265,728 ------w C:\WINDOWS\system32\SET1634.tmp
2007-10-30 23:33 23,552 ----a-w C:\WINDOWS\system32\SET273.tmp
2007-10-30 23:33 23,552 ------w C:\WINDOWS\system32\SETF8.tmp
2007-10-30 23:33 23,552 ------w C:\WINDOWS\system32\SET1595.tmp
2007-10-30 23:33 206,848 ----a-w C:\WINDOWS\system32\SET28F.tmp
2007-10-30 23:33 206,848 ------w C:\WINDOWS\system32\SET15A1.tmp
2007-10-30 23:33 206,848 ------w C:\WINDOWS\system32\SET104.tmp
2007-10-30 23:33 17,408 ----a-w C:\WINDOWS\system32\SET435.tmp
2007-10-30 23:33 17,408 ------w C:\WINDOWS\system32\SET195.tmp
2007-10-30 23:33 17,408 ------w C:\WINDOWS\system32\SET162C.tmp
2007-10-30 23:32 99,328 ----a-w C:\WINDOWS\system32\SET262.tmp
2007-10-30 23:32 99,328 ------w C:\WINDOWS\system32\SETF1.tmp
2007-10-30 23:32 99,328 ------w C:\WINDOWS\system32\SET158E.tmp
2007-10-30 23:32 96,768 ----a-w C:\WINDOWS\system32\SET32F.tmp
2007-10-30 23:32 96,768 ------w C:\WINDOWS\system32\SET15D4.tmp
2007-10-30 23:32 96,768 ------w C:\WINDOWS\system32\SET13C.tmp
2007-10-30 23:32 92,672 ----a-w C:\WINDOWS\system32\SET25C.tmp
2007-10-30 23:32 92,672 ------w C:\WINDOWS\system32\SETEC.tmp
2007-10-30 23:32 92,672 ------w C:\WINDOWS\system32\SET1589.tmp
2007-10-30 23:32 90,112 ----a-w C:\WINDOWS\system32\SET296.tmp
2007-10-30 23:32 90,112 ------w C:\WINDOWS\system32\SET15A3.tmp
2007-10-30 23:32 90,112 ------w C:\WINDOWS\system32\SET106.tmp
2007-10-30 23:32 83,456 ----a-w C:\WINDOWS\system32\SET347.tmp
2007-10-30 23:32 83,456 ------w C:\WINDOWS\system32\SET15DB.tmp
2007-10-30 23:32 83,456 ------w C:\WINDOWS\system32\SET143.tmp
2007-10-30 23:32 82,432 ----a-w C:\WINDOWS\system32\SET24F.tmp
2007-10-30 23:32 82,432 ------w C:\WINDOWS\system32\SETE9.tmp
2007-10-30 23:32 82,432 ------w C:\WINDOWS\system32\SET1586.tmp
2007-10-30 23:32 80,896 ------w C:\WINDOWS\system32\SET16B5.tmp
2007-10-30 23:32 8,461,312 ----a-w C:\WINDOWS\system32\SET2DF.tmp
2007-10-30 23:32 8,461,312 ------w C:\WINDOWS\system32\SET15BA.tmp
2007-10-30 23:32 8,461,312 ------w C:\WINDOWS\system32\SET11D.tmp
2007-10-30 23:32 8,192 ----a-w C:\WINDOWS\system32\SET249.tmp
2007-10-30 23:32 8,192 ------w C:\WINDOWS\system32\SETE7.tmp
2007-10-30 23:32 8,192 ------w C:\WINDOWS\system32\SET1584.tmp
2007-10-30 23:32 79,872 ----a-w C:\WINDOWS\system32\SET321.tmp
2007-10-30 23:32 79,872 ------w C:\WINDOWS\system32\SET15D1.tmp
2007-10-30 23:32 79,872 ------w C:\WINDOWS\system32\SET139.tmp
2007-10-30 23:32 78,848 ----a-w C:\WINDOWS\system32\SET3C2.tmp
2007-10-30 23:32 78,848 ------w C:\WINDOWS\system32\SET177.tmp
2007-10-30 23:32 78,848 ------w C:\WINDOWS\system32\SET160F.tmp
2007-10-30 23:32 75,264 ----a-w C:\WINDOWS\system32\SET2C5.tmp
2007-10-30 23:32 75,264 ------w C:\WINDOWS\system32\SET15B4.tmp
2007-10-30 23:32 75,264 ------w C:\WINDOWS\system32\SET117.tmp
2007-10-30 23:32 74,752 ----a-w C:\WINDOWS\system32\SET34A.tmp
2007-10-30 23:32 74,752 ------w C:\WINDOWS\system32\SET15DC.tmp
2007-10-30 23:32 74,752 ------w C:\WINDOWS\system32\SET144.tmp
.
((((((((((((((((((((((((((((( snapshot@2008-01-17_13.06.20,60 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-01-17 12:09:28 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_65c.dat
+ 2008-01-17 12:09:15 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_74c.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
2007-10-04 21:06 1135968 --a------ C:\Program Files\Winamp Toolbar\winamptb.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= C:\Program Files\Winamp Toolbar\winamptb.dll [2007-10-04 21:06 1135968]
[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 13:00 15360]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector" [ ]
"NVIDIA nTune"="C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-04-04 13:20 81920]
"MsServer"="msfun80.exe" []
"PC Suite Tray"="C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" [2007-12-10 10:12 695808]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2004-12-22 10:09 77824 C:\WINDOWS\SOUNDMAN.EXE]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-09-17 00:07 8491008]
"nwiz"="nwiz.exe" [2007-09-17 00:07 1626112 C:\WINDOWS\system32\nwiz.exe]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 01:41 49152]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 23:47 31016]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11 132496]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-06-29 05:24 286720]
"Gainward"="C:\Program Files\VDOTool\TBPanel.exe" [2007-06-26 13:58 2165272]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-09-17 00:07 81920]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648]
"IMJPMIG8.2"="msime82.exe" []
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 13:00 15360]
"Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-11-07 17:35 1294336]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-09-28 02:17 443968]
C:\Documents and Settings\Darek\Menu Start\Programy\Autostart\
Last.fm Helper.lnk - C:\Program Files\Last.fm\LastFMHelper.exe [2007-12-26 21:17:44]
C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 01:48:00]
Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-23 00:01:00]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2006-02-19 03:21:22]
HP Photosmart Premier - Szybkie uruchomienie.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe [2006-02-10 06:56:20]
Przyspieszenie uruchomienia programu AutoCAD.lnk - C:\Program Files\Common Files\Autodesk Shared\acstart17.exe [2006-03-05 14:43:54]
TAB 4.1.lnk - C:\Program Files\LAE\TAB4.1\TAB.exe [2007-05-04 15:48:44]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSetFolders"= 0 (0x0)
"NoTrayContextMenu"= 0 (0x0)
"NoSimpleStartMenu"= 0 (0x0)
"NoStartMenuPinnedList"= 0 (0x0)
"NoStartMenuMFUprogramsList"= 0 (0x0)
"NoStartMenuMorePrograms"= 0 (0x0)
"NoUserNameInStartMenu"= 0 (0x0)
R0 NIPALK;NIPALK;C:\WINDOWS\system32\drivers\nipalk.sys [2007-02-15 22:59]
R0 nipbcfk;National Instruments Class Upper Filter Driver;C:\WINDOWS\system32\drivers\nipbcfk.sys [2007-02-15 17:23]
R0 pe3ah4nc;DiRT Environment Driver (pe3ah4nc);C:\WINDOWS\system32\drivers\pe3ah4nc.sys [2007-05-18 20:53]
R0 ps6ah4nc;DiRT Synchronization Driver (ps6ah4nc);C:\WINDOWS\system32\drivers\ps6ah4nc.sys [2007-05-18 20:52]
R2 cvintdrv;cvintdrv;C:\WINDOWS\system32\drivers\cvintdrv.sys [2007-02-21 10:00]
R2 NiViPxiK;NI-VISA PXI Driver;C:\WINDOWS\system32\drivers\NiViPxiKl.sys [2007-02-23 10:25]
S2 pr2ah4nc;DiRT Drivers Auto Removal (pr2ah4nc);C:\WINDOWS\system32\pr2ah4nc.exe svc []
S3 nidimk;nidimk;C:\WINDOWS\system32\drivers\nidimkl.sys [2007-02-21 22:20]
S3 niorbk;niorbk;C:\WINDOWS\system32\drivers\niorbkl.sys [2007-02-21 21:39]
S3 nipalfwedl;nipalfwedl;C:\WINDOWS\system32\drivers\nipalfwedl.sys [2007-02-15 23:00]
S3 nipalusbedl;nipalusbedl;C:\WINDOWS\system32\drivers\nipalusbedl.sys [2007-02-15 23:00]
S3 NiViFWK;NI-VISA FireWire Driver;C:\WINDOWS\system32\drivers\NiViFWKl.sys [2007-02-22 10:42]
S3 NiViPciK;NI-VISA PCI Driver;C:\WINDOWS\system32\drivers\NiViPciKl.sys [2007-02-23 10:25]
S3 SG762_XP;SAGEM 802.11g XG762 1211B Driver;C:\WINDOWS\system32\DRIVERS\WlanBZXP.sys [2005-12-22 14:45]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\J]
\Shell\AutoRun\command - J:\LaunchU3.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5d2311ae-6301-11dc-bb86-806d6172696f}]
\Shell\AutoRun\command - F:\Autorun.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fbff932e-669e-11dc-bb95-0014853f5d6f}]
\Shell\AutoRun\command - J:\LaunchU3.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fbff932f-669e-11dc-bb95-0014853f5d6f}]
\Shell\Auto\command - K:\fun.xls.exe
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL fun.xls.exe
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-18 08:17:06
Windows 5.1.2600 Dodatek Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
IMJPMIG8.2 = msime82.exe???.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
MsServer = msfun80.exe???.
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-01-18 8:17:38
ComboFix-quarantined-files.txt 2008-01-18 07:17:24
ComboFix2.txt 2008-01-17 12:17:39
ComboFix3.txt 2008-01-17 12:06:52
.
2008-01-09 20:18:38 --- E O F ---