a jak zainstalowac nakladkowo?
ComboFix 08-08-05.05 - aa 2008-08-06 19:15:10.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.96 [GMT 2:00]
Running from: C:\Documents and Settings\aa\Pulpit\ComboFix.exe
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
C:\Program Files\myglobalsearch
C:\Program Files\myglobalsearch\bar\1.bin\M9FFXTBR.JAR
C:\Program Files\myglobalsearch\bar\1.bin\M9FFXTBR.MANIFEST
C:\Program Files\myglobalsearch\bar\1.bin\M9NTSTBR.JAR
C:\Program Files\myglobalsearch\bar\1.bin\M9NTSTBR.MANIFEST
C:\Program Files\myglobalsearch\bar\1.bin\M9PLUGIN.DLL
C:\Program Files\myglobalsearch\bar\1.bin\NPMYGLSH.DLL
C:\Program Files\myglobalsearch\bar\Cache\000480E8.bin
C:\Program Files\myglobalsearch\bar\Cache\0007756C.bin
C:\Program Files\myglobalsearch\bar\Cache\000BA320.bin
C:\Program Files\myglobalsearch\bar\Cache\0017565F.bin
C:\Program Files\myglobalsearch\bar\Cache\0022F01C
C:\Program Files\myglobalsearch\bar\Cache\00240D3F.bin
C:\Program Files\myglobalsearch\bar\Cache\002448DD.bin
C:\Program Files\myglobalsearch\bar\Cache\0027FAE9.bin
C:\Program Files\myglobalsearch\bar\Cache\002FB3EF.bin
C:\Program Files\myglobalsearch\bar\Cache\004BB6CA.bin
C:\Program Files\myglobalsearch\bar\Cache\00575760.bin
C:\Program Files\myglobalsearch\bar\Cache\files.ini
C:\Program Files\myglobalsearch\bar\History\search
C:\Program Files\myglobalsearch\bar\Settings\prevcfg.htm
C:\setup.exe
C:\WINDOWS\start.exe
C:\WINDOWS\system\taskmgr.exe
C:\WINDOWS\system32\actskn43.ocx
C:\WINDOWS\system32\msvcrl.dll
C:\WINDOWS\Web\default.htt
.
((((((((((((((((((((((((( Files Created from 2008-07-06 to 2008-08-06 )))))))))))))))))))))))))))))))
.
2008-08-06 11:04 . 2008-08-06 11:16 96,559 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\klin.dat
2008-08-06 11:04 . 2008-08-06 11:16 87,855 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\klick.dat
2008-08-06 11:02 . 2008-08-06 14:57 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab
2008-08-06 11:02 . 2008-08-06 11:27 673,824 --ahs---- C:\WINDOWS\SYSTEM32\DRIVERS\fidbox.dat
2008-08-06 11:02 . 2008-08-06 11:27 344,096 --ahs---- C:\WINDOWS\SYSTEM32\DRIVERS\fidbox2.dat
2008-08-06 11:02 . 2008-08-06 11:27 7,392 --ahs---- C:\WINDOWS\SYSTEM32\DRIVERS\fidbox.idx
2008-08-06 11:02 . 2008-08-06 11:27 3,304 --ahs---- C:\WINDOWS\SYSTEM32\DRIVERS\fidbox2.idx
2008-08-06 10:23 . 2008-08-06 10:23 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files
2008-08-06 09:30 . 2008-08-06 09:30 <DIR> d-------- C:\WINDOWS\Pliki Instalatora aktualizacji Windows Update
2008-08-05 20:59 . 2008-08-05 20:59 <DIR> d-------- C:\Program Files\Trend Micro
2008-08-05 14:08 . 2008-08-05 14:08 <DIR> d-------- C:\Program Files\DAEMON Tools Lite
2008-08-04 13:59 . 2008-08-06 08:48 <DIR> d-------- C:\Program Files\DAEMON Tools Toolbar
2008-08-04 13:55 . 2008-08-04 13:55 <DIR> d-------- C:\Documents and Settings\aa\Dane aplikacji\DAEMON Tools
2008-07-21 16:32 . 2008-07-21 17:54 116 --a------ C:\WINDOWS\wininit.ini
2008-07-21 14:26 . 1998-03-05 11:25 1,022,976 --a------ C:\WINDOWS\SYSTEM32\SierraNW.dll
2008-07-21 14:26 . 1998-03-05 11:34 231,936 --a------ C:\WINDOWS\SYSTEM32\SNWValid.dll
2008-07-21 14:25 . 2008-07-21 17:45 437 --a------ C:\WINDOWS\SIERRA.INI
2008-07-20 17:30 . 1999-05-19 00:19 211,416 --a------ C:\WINDOWS\SYSTEM32\NPSExec.exe
2008-07-20 17:27 . 2008-07-20 17:27 <DIR> d-------- C:\Program Files\Electronic Arts
2008-07-19 12:36 . 2008-07-20 17:30 485 --a------ C:\WINDOWS\EReg072.dat
2008-07-17 13:05 . 2008-07-17 13:05 98,304 --a------ C:\WINDOWS\SYSTEM32\CmdLineExt.dll
2008-07-06 11:50 . 2008-08-06 13:04 <DIR> d-------- C:\Pobrane przez USD
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-08-06 16:11 --------- d-----w C:\Program Files\FlashGet
2008-08-06 16:11 --------- d-----w C:\Documents and Settings\aa\Dane aplikacji\uTorrent
2008-08-06 14:17 --------- d-----w C:\Documents and Settings\aa\Dane aplikacji\Skype
2008-08-06 10:30 --------- d-----w C:\Program Files\Google
2008-08-06 09:20 266,720 ----a-w C:\WINDOWS\SYSTEM32\SkanerOnlineUninstall.exe
2008-08-06 09:20 230,872 ----a-w C:\WINDOWS\java.exe
2008-08-06 09:19 202,716 ----a-w C:\WINDOWS\OMCAMLCH.EXE
2008-08-06 09:19 184,788 ----a-w C:\WINDOWS\SYSTEM32\updcrl.exe
2008-08-06 09:18 501,214 ----a-w C:\WINDOWS\SYSTEM32\nwiz.exe
2008-08-06 09:18 223,706 ----a-w C:\WINDOWS\OMCAMUNS.EXE
2008-08-06 09:18 189,908 ----a-w C:\WINDOWS\SYSTEM32\CMMGR32.EXE
2008-08-05 17:16 --------- d-----w C:\Program Files\Kalendarz XP
2008-08-05 11:43 --------- d-----w C:\Program Files\Opera
2008-08-04 13:53 --------- d-----w C:\Documents and Settings\aa\Dane aplikacji\skypePM
2008-08-04 12:08 --------- d-----w C:\Program Files\MoorHunt
2008-08-04 12:00 26,656 ----a-w C:\Documents and Settings\aa\Dane aplikacji\GDIPFONTCACHEV1.DAT
2008-08-04 11:56 717,296 ----a-w C:\WINDOWS\system32\drivers\sptd.sys
2008-08-02 19:29 --------- d-----w C:\Program Files\The All-Seeing Eye
2008-08-02 18:09 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-06-20 17:42 246,784 ----a-w C:\WINDOWS\SYSTEM32\mswsock.dll
2008-06-20 17:42 246,784 ----a-w C:\WINDOWS\SYSTEM32\dllcache\mswsock.dll
2008-06-20 17:42 148,992 ----a-w C:\WINDOWS\SYSTEM32\dllcache\dnsapi.dll
2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\SYSTEM32\dllcache\tcpip.sys
2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\SYSTEM32\dllcache\afd.sys
2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\SYSTEM32\dllcache\tcpip6.sys
2008-06-18 19:38 --------- d-----w C:\Program Files\ZodiacEdit
2008-06-14 18:01 273,024 ------w C:\WINDOWS\system32\drivers\bthport.sys
2008-06-14 18:01 273,024 ------w C:\WINDOWS\SYSTEM32\dllcache\bthport.sys
2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\SYSTEM32\dllcache\rmcast.sys
2008-05-07 05:16 1,291,264 ----a-w C:\WINDOWS\SYSTEM32\quartz.dll
2008-05-07 05:16 1,291,264 ----a-w C:\WINDOWS\SYSTEM32\dllcache\quartz.dll
2008-02-08 18:17 32 ----a-w C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat
2007-07-30 12:36 774,144 ----a-w C:\Program Files\RngInterstitial.dll
2004-07-01 16:34 266 --sha-w C:\Program Files\desktop.ini
2004-07-01 16:34 11,232 ---ha-w C:\Program Files\folder.htt
2004-03-11 11:27 218,586 ----a-w C:\Program Files\Uninstall_CDS.exe
2005-10-27 15:04 2 --sha-w C:\WINDOWS\SYSTEM\cmd.com
2005-10-27 15:04 2 --sha-w C:\WINDOWS\SYSTEM\netstat.com
2005-10-27 15:04 2 --sha-w C:\WINDOWS\SYSTEM\ping.com
2005-10-27 15:04 2 --sha-w C:\WINDOWS\SYSTEM\regedit.com
2005-10-27 15:04 2 --sha-w C:\WINDOWS\SYSTEM\taskkill.com
2005-10-27 15:04 2 --sha-w C:\WINDOWS\SYSTEM\tasklist.com
2005-10-27 15:04 2 --sha-w C:\WINDOWS\SYSTEM\tracert.com
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SlowFile Icon Overlay]
@="{7D688A77-C613-11D0-999B-00C04FD655E1}"
[HKEY_CLASSES_ROOT\CLSID\{7D688A77-C613-11D0-999B-00C04FD655E1}]
2007-10-25 18:57 8483328 --a------ C:\WINDOWS\SYSTEM32\SHELL32.DLL
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:44 15360]
"C:\Program Files\NetMeter\NetMeter.exe"="C:\Program Files\NetMeter\NetMeter.exe" [2002-10-23 21:06 390620]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2003-05-02 15:19 4640768]
"nwiz"="nwiz.exe" [2008-08-06 11:18 501214 C:\WINDOWS\SYSTEM32\nwiz.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 00:44 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.yv12"= yv12vfw.dll
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Kalendarz XP.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Kalendarz XP.lnk
backup=C:\WINDOWS\pss\Kalendarz XP.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2006-08-30 17:52 333274 C:\Program Files\QuickTime\qttask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
-ra------ 2005-10-26 16:17 337370 C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
--a------ 2007-07-17 19:41 246754 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
--a------ 2008-08-06 11:18 501214 C:\WINDOWS\SYSTEM32\nwiz.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"NBJ"="C:\PROGRAM FILES\AHEAD\NERO BACKITUP\NBJ.EXE"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"nwiz"=nwiz.exe /install
"SetFirst"=omcamuns setfirst
"Share-to-Web Namespace Daemon"=C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
"StillImageMonitor"=C:\WINDOWS\SYSTEM32\STIMON.EXE
"RemoteControl"="C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"
"CamMonitor"=C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
"NvCplDaemon"=RUNDLL32.EXE C:\WINDOWS\SYSTEM32\nvcpl.dll,NvStartup
"Autolaunch"=omcamlch
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\setup\disabledrunkeys]
"EPSON Stylus C62 Series"=C:\WINDOWS\SYSTEM32\E_S10IC2.EXE /P23 "EPSON Stylus C62 Series" /O7 "EPUSB1:" /M "Stylus C62"
"LoadPowerProfile"=Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
"WinampAgent"=C:\Program Files\Winamp\winampa.exe
"NvCplDaemon"=RUNDLL32.EXE C:\WINDOWS\SYSTEM32\nvcpl.dll,NvStartup
"nwiz"=nwiz.exe /install
"NvMediaCenter"=RUNDLL32.EXE C:\WINDOWS\SYSTEM32\nvmctray.dll,NvTaskbarInit
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices-]
"SchedulingAgent"=mstask.exe
"MOSearch"=C:\PROGRA~1\COMMON~1\SYSTEM\MOSEARCH\BIN\MOSEARCH.EXE
"SAgent2ExePath"=C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
"MDM7"="C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\VS7DEBUG\MDM.EXE"
"LoadPowerProfile"=Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Gadu-Gadu\\gg.exe"=
"C:\\Program Files\\Tlen.pl\\tlen.exe"=
"C:\\Program Files\\The All-Seeing Eye\\eye.exe"=
"C:\\Program Files\\Gadu-Gadu\\ggphone\\ggphone.exe"=
"C:\\Program Files\\Java\\jre1.5.0_06\\bin\\javaw.exe"=
"C:\\Program Files\\VoipStunt.com\\VoipStunt\\VoipStunt.exe"=
"C:\\Program Files\\Opera\\Opera.exe"=
"D:\\Gry\\call of duty\\CoD\\CoDMP.exe"=
"C:\\WINDOWS\\System32\\dplaysvr.exe"=
"C:\\Program Files\\BearShare\\BearShare.exe"=
"C:\\Program Files\\uTorrent\\utorrent.exe"=
"C:\\Program Files\\AIDA32 - Enterprise System Information\\aida32.bin"=
"D:\\Gry\\samolot symulator\\FlightGear\\bin\\win32\\fgfs.exe"=
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"D:\\Ferguson\\SBCL\\sbcl plff team\\sbcl plff team\\SBCL v1.1b.exe"=
"D:\\Gry\\nfs3hp\\nfs3.exe"=
"D:\\Gry\\nfs 5 porshe 2000\\Need_For_Speed_5_-_Porsche_Unleashed\\Porsche.exe"=
"D:\\Gry\\nigh\\KOR_www.elemanyak.net_by_MehiriyeT\\KOR_www.elemanyak.net_by_MehiriyeT\\KOR_www.elemanyak.net_by_MehiriyeT\\king.exe"=
"D:\\Gry\\moto\\motogp2\\MotoGP2\\gp2\\motogp2.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"10403:TCP"= 10403:TCP:BitComet 10403 TCP
"10403:UDP"= 10403:UDP:BitComet 10403 UDP
R1 nltdi;nltdi;C:\WINDOWS\system32\drivers\nltdi.sys [2007-04-23 13:03]
R3 axsaki;axsaki;C:\WINDOWS\system32\DRIVERS\axsaki.sys [2003-03-30 21:38]
R3 axskbus;axskbus;C:\WINDOWS\system32\DRIVERS\axskbus.sys [2003-03-28 11:58]
S2 OMSCAN;OMSCAN;C:\WINDOWS\system32\drivers\omcamsti.sys []
S3 jnv4_mib;jnv4_mib;C:\DOCUME~1\aa\USTAWI~1\Temp\jnv4_mib.sys []
S3 k510bus;Sony Ericsson K510 Driver driver (WDM);C:\WINDOWS\system32\DRIVERS\k510bus.sys [2006-08-30 18:00]
S3 k510mdfl;Sony Ericsson K510 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\k510mdfl.sys [2006-08-30 18:00]
S3 k510mdm;Sony Ericsson K510 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\k510mdm.sys [2006-08-30 18:00]
S3 k510mgmt;Sony Ericsson K510 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\k510mgmt.sys [2006-08-30 18:00]
S3 k510obex;Sony Ericsson K510 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\k510obex.sys [2006-08-30 18:00]
S3 OVT511;Dual Mode USB Camera;C:\WINDOWS\system32\Drivers\omcamvid.sys [2001-03-02 19:21]
*Newly Created Service* - CATCHME
*Newly Created Service* - PROCEXP90
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
"C:\PROGRA~1\OUTLOO~1\setup50.exe" /APP:OE /CALLER:WIN9X /user /install
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
"C:\PROGRA~1\OUTLOO~1\setup50.exe" /APP:OE /CALLER:WIN9X /user /install
"C:\PROGRA~1\OUTLOO~1\setup50.exe" /APP:OE /CALLER:IE50 /user /install
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
"C:\PROGRA~1\OUTLOO~1\setup50.exe" /APP:WAB /CALLER:WIN9X /user /install
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
"C:\PROGRA~1\OUTLOO~1\setup50.exe" /APP:WAB /CALLER:WIN9X /user /install
"C:\PROGRA~1\OUTLOO~1\setup50.exe" /APP:WAB /CALLER:IE50 /user /install
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}]
C:\WINDOWS\SYSTEM32\updcrl.exe -e -u C:\WINDOWS\SYSTEM\verisignpub1.crl
.
- - - - ORPHANS REMOVED - - - -
MSConfigStartUp-BitTorrent - C:\Program Files\BitTorrent\bittorrent.exe
MSConfigStartUp-XSC SIP Client - C:\Program Files\WWTelcoPhone\WWTelcoPhone.exe
.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\aa\Dane aplikacji\Mozilla\Firefox\Profiles\v1tl5d93.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.pl/
FF -: plugin - C:\Program Files\Adobe\Acrobat 7.0\Reader\browser\nppdf32.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_06\bin\NPJava11.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_06\bin\NPJava12.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_06\bin\NPJava13.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_06\bin\NPJava14.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_06\bin\NPJava32.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_06\bin\NPJPI150_06.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_06\bin\NPOJI610.dll
FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npbittorrent.dll
FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\NPMyGlSh.dll
FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npracplug.dll
FF -: plugin - C:\Program Files\Opera\program\plugins\nppl3260.dll
FF -: plugin - C:\Program Files\Opera\program\plugins\nprpjplug.dll
FF -: plugin - C:\Program Files\Real\RealArcade\Plugins\Mozilla\npracplug.dll
FF -: plugin - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-06 19:18:28
Windows 5.1.2600 Dodatek Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"C:\\Program Files\\NetMeter\\NetMeter.exe"="C:\\Program Files\\NetMeter\\NetMeter.exe"
.
Completion time: 2008-08-06 19:21:43
ComboFix-quarantined-files.txt 2008-08-06 17:21:36
ComboFix2.txt 2007-04-17 16:31:22
Pre-Run: 3,304,316,928 bajtów wolnych
Post-Run: 3,294,056,448 bajtów wolnych
261 --- E O F --- 2008-07-09 10:47:43