witam, czy mógłby mi ktoś przeanalizować log'a?
kompletnie nie wiem co z tym zrobić
komp jest strasznie zamulony - dosłownie z dnia na dzień zgłupiał - poza tym nie uruchamia się "mój komputer". wczoraj jeszcze "krzyczał" że nie może znaleźć jakiegoś pliku "/idlist,"572:2772,"
ComboFix 10-02-09.04 - A@D 2010-02-10 19:00:26.2.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.48.1045.18.2046.1506 [GMT 1:00]
Uruchomiony z: c:\documents and settings\A@D\Pulpit\ComboFix.exe
AV: avast! antivirus 4.7.1001 [VPS 100210-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.
Zainfekowana kopia c:\windows\system32\userinit.exe została znaleziona. Problem naprawiono
Plik odzyskano z - c:\windows\ERDNT\cache\userinit.exe
.
((((((((((((((((((((((((( Pliki utworzone od 2010-01-10 do 2010-02-10 )))))))))))))))))))))))))))))))
.
2010-02-10 14:24 . 2010-02-10 14:36 -------- d-----w- c:\documents and settings\A@D\Ustawienia lokalne\Dane aplikacji\IObitCom
2010-02-10 14:24 . 2010-02-10 14:24 -------- d-----w- c:\program files\IObitCom
2010-02-10 14:24 . 2010-02-10 14:24 -------- d-----w- c:\program files\Conduit
2010-02-10 14:24 . 2010-02-10 14:24 -------- d-----w- c:\documents and settings\A@D\Ustawienia lokalne\Dane aplikacji\Conduit
2010-02-10 14:24 . 2009-11-04 15:49 635664 ----a-w- c:\documents and settings\A@D\Dane aplikacji\IObit\Common\TB_Helper.exe
2010-02-10 12:43 . 2010-02-10 12:43 2243260 ---ha-w- c:\windows\system32\wbem\spython.bin
2010-02-10 10:04 . 2006-12-20 11:39 1212416 ----a-w- c:\windows\system32\Incinerator.dll
2010-02-10 10:04 . 2006-03-28 00:54 41472 ----a-w- c:\windows\system32\iolobtdfg.exe
2010-02-10 10:04 . 2005-09-12 12:20 25264 ----a-w- c:\windows\system32\smrgdf.exe
2010-02-10 10:04 . 2010-02-10 10:04 -------- d-----w- c:\program files\iolo
2010-02-09 17:38 . 2010-02-09 17:38 -------- d-----w- c:\program files\Trend Micro
2010-02-08 17:39 . 2010-02-08 17:39 -------- d-----w- c:\documents and settings\A@D\Ustawienia lokalne\Dane aplikacji\Installer3708
2010-02-08 17:36 . 2010-02-08 17:36 -------- d-----w- c:\documents and settings\A@D\Ustawienia lokalne\Dane aplikacji\Installer3860
2010-02-03 09:30 . 2010-02-03 09:30 -------- d-----w- c:\program files\DreamWorks Interactive
2010-02-01 20:35 . 2010-02-01 20:35 -------- d-----w- c:\documents and settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Google
2010-02-01 15:33 . 2010-02-01 15:33 -------- d-----w- c:\documents and settings\LocalService\Ustawienia lokalne\Dane aplikacji\Google
2010-01-21 13:15 . 2010-01-21 13:15 -------- d-----w- c:\documents and settings\A@D\Dane aplikacji\FreeCDRipper
2010-01-21 12:43 . 2010-01-21 12:43 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\LightScribe
2010-01-21 11:54 . 2010-01-21 12:15 -------- d-----w- c:\documents and settings\A@D\Dane aplikacji\Audacity
2010-01-21 07:39 . 2010-01-21 07:39 -------- d-----w- c:\program files\Vogue Mechanics
2010-01-19 17:33 . 2010-02-10 17:42 -------- d-----w- C:\Downloads
2010-01-19 17:08 . 2010-01-19 17:08 -------- d-----w- c:\program files\Photodex Presenter
2010-01-19 17:08 . 2010-01-19 17:08 -------- d-----w- c:\documents and settings\A@D\Dane aplikacji\Netscape
2010-01-19 17:08 . 2010-01-19 17:08 131072 ----a-w- c:\documents and settings\A@D\Dane aplikacji\Netscape\Plugins\npPxPlay.dll
2010-01-19 17:08 . 2010-01-19 17:08 131072 ----a-w- c:\documents and settings\A@D\Dane aplikacji\Mozilla\Plugins\npPxPlay.dll
2010-01-19 17:08 . 2010-01-19 17:08 -------- d-----w- c:\program files\Photodex
2010-01-19 17:08 . 2010-01-19 17:08 -------- d-----w- c:\documents and settings\A@D\Dane aplikacji\Photodex
2010-01-19 17:00 . 2010-01-19 17:00 -------- d-----w- c:\program files\Bonjour
2010-01-19 16:54 . 2010-01-19 16:54 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2010-01-19 15:49 . 2010-01-19 15:49 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\FLEXnet
2010-01-18 21:24 . 2010-01-18 21:24 -------- d-----w- c:\documents and settings\A@D\Ustawienia lokalne\Dane aplikacji\GHISLER
2010-01-16 17:58 . 2009-11-21 16:03 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-10 17:47 . 2010-01-05 21:03 -------- d-----w- c:\program files\FlashGet
2010-02-10 17:21 . 2010-01-05 17:48 -------- d-----w- c:\program files\blueconnect
2010-02-10 14:24 . 2010-01-05 21:45 -------- d-----w- c:\documents and settings\A@D\Dane aplikacji\IObit
2010-02-10 14:13 . 2010-01-05 18:58 -------- d-----w- c:\documents and settings\A@D\Dane aplikacji\Ahead
2010-02-10 11:12 . 2010-01-05 19:02 -------- d-----w- c:\documents and settings\A@D\Dane aplikacji\uTorrent
2010-02-08 10:41 . 2010-01-05 21:40 -------- d-----w- c:\documents and settings\A@D\Dane aplikacji\vlc
2010-02-03 09:55 . 2004-08-04 12:00 84916 ----a-w- c:\windows\system32\perfc015.dat
2010-02-03 09:55 . 2004-08-04 12:00 493500 ----a-w- c:\windows\system32\perfh015.dat
2010-02-01 15:33 . 2010-01-05 20:59 -------- d-----w- c:\program files\Google
2010-01-21 13:14 . 2010-01-21 13:14 -------- d-----w- c:\program files\Free Audio Pack
2010-01-21 13:14 . 2010-01-21 13:14 -------- d-----w- c:\documents and settings\A@D\Dane aplikacji\FreeAudioPack
2010-01-21 10:00 . 2010-01-05 21:04 -------- d-----w- c:\program files\eMule
2010-01-20 12:59 . 2010-01-05 21:40 -------- d-----w- c:\documents and settings\A@D\Dane aplikacji\dvdcss
2010-01-19 17:00 . 2010-01-05 19:41 -------- d-----w- c:\program files\Common Files\Adobe
2010-01-19 15:55 . 2010-01-05 17:34 42944 ----a-w- c:\documents and settings\A@D\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
2010-01-08 17:29 . 2010-01-08 17:29 -------- d-----w- c:\program files\Real Alternative
2010-01-08 17:29 . 2010-01-08 17:29 -------- d-----w- c:\program files\Media Player Classic
2010-01-07 18:25 . 2010-01-07 18:25 -------- d-----w- c:\program files\Hewlett-Packard
2010-01-07 18:25 . 2010-01-07 18:25 -------- d--h--w- c:\program files\Zenographics
2010-01-07 15:37 . 2010-01-07 15:37 -------- d-----w- c:\documents and settings\A@D\Dane aplikacji\Media Player Classic
2010-01-07 15:36 . 2010-01-05 16:52 76487 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-01-06 19:35 . 2010-01-06 19:35 -------- d-----w- c:\program files\eMaestro!_eng
2010-01-06 19:33 . 2010-01-06 19:33 -------- d-----w- c:\program files\MSBuild
2010-01-06 19:32 . 2010-01-06 19:32 -------- d-----w- c:\program files\Reference Assemblies
2010-01-06 19:30 . 2010-01-06 19:30 -------- d-----w- c:\program files\MSXML 6.0
2010-01-06 18:34 . 2010-01-06 18:34 -------- d-----w- c:\program files\MSXML 4.0
2010-01-05 21:53 . 2010-01-05 21:32 -------- d-----w- c:\program files\SubEdit-Player
2010-01-05 21:45 . 2010-01-05 21:45 -------- d-----w- c:\program files\IObit
2010-01-05 21:44 . 2010-01-05 19:38 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Spybot - Search & Destroy
2010-01-05 21:29 . 2010-01-05 19:02 -------- d-----w- c:\program files\uTorrent
2010-01-05 21:26 . 2010-01-05 21:26 -------- d-----w- c:\program files\VideoLAN
2010-01-05 21:18 . 2010-01-05 21:11 -------- d-----w- c:\program files\ALLPlayer
2010-01-05 21:17 . 2010-01-05 21:11 -------- d-----w- c:\program files\NAPI-PROJEKT
2010-01-05 21:05 . 2010-01-05 21:05 -------- d-----w- c:\program files\CDex
2010-01-05 21:05 . 2010-01-05 21:05 -------- d-----w- c:\program files\Audacity 1.3 Beta (Unicode)
2010-01-05 21:02 . 2010-01-05 21:02 -------- d-----w- c:\program files\K-Lite Codec Pack
2010-01-05 21:00 . 2010-01-05 21:00 -------- d-----w- c:\program files\RocketDock
2010-01-05 20:56 . 2010-01-05 19:11 1468 ----a-w- c:\windows\unins000.dat
2010-01-05 19:41 . 2010-01-05 19:41 -------- d-----w- c:\program files\Windows Media Connect 2
2010-01-05 19:12 . 2010-01-05 19:12 -------- d-----w- c:\program files\Alwil Software
2010-01-05 19:03 . 2010-01-05 19:03 -------- d-----w- c:\program files\Gadu-Gadu
2010-01-05 19:01 . 2010-01-05 19:01 -------- d-----w- c:\program files\Microsoft.NET
2010-01-05 18:59 . 2010-01-05 18:59 -------- d-----w- c:\program files\Common Files\LightScribe
2010-01-05 18:58 . 2010-01-05 18:58 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Ahead
2010-01-05 18:58 . 2010-01-05 18:56 -------- d-----w- c:\program files\Common Files\Ahead
2010-01-05 18:56 . 2010-01-05 18:56 -------- d-----w- c:\program files\Nero
2010-01-05 18:56 . 2010-01-05 18:56 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Nero
2010-01-05 18:24 . 2010-01-05 17:35 -------- d-----w- c:\program files\ATI Technologies
2010-01-05 18:17 . 2010-01-05 17:35 -------- d-----w- c:\program files\ATI
2010-01-05 18:00 . 2010-01-05 21:02 85504 ----a-w- c:\windows\system32\ff_vfw.dll
2010-01-05 17:59 . 2010-01-05 17:59 2907 ----a-w- c:\windows\system32\unins000.dat
2010-01-05 17:59 . 2010-01-05 17:59 716153 ----a-w- c:\windows\system32\unins000.exe
2010-01-05 17:48 . 2010-01-05 17:48 -------- d-----w- c:\documents and settings\A@D\Dane aplikacji\Program Files
2010-01-05 17:48 . 2010-01-05 17:21 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-01-05 17:42 . 2010-01-05 17:42 0 ----a-w- c:\windows\ativpsrm.bin
2010-01-05 17:39 . 2010-01-05 17:39 -------- d-----w- c:\documents and settings\A@D\Dane aplikacji\ATI
2010-01-05 17:37 . 2010-01-05 17:21 -------- d-----w- c:\program files\Common Files\InstallShield
2010-01-05 17:35 . 2010-01-05 17:35 10134 ----a-r- c:\documents and settings\A@D\Dane aplikacji\Microsoft\Installer\{20820A45-02A1-144C-21A3-A1812C5DDE23}\ARPPRODUCTICON.exe
2010-01-05 17:34 . 2010-01-05 17:34 -------- d-----w- c:\program files\MobilityDotNET
2010-01-05 17:24 . 2010-01-05 17:21 -------- d-----w- c:\program files\Realtek
2010-01-05 17:23 . 2010-01-05 17:23 -------- d-----w- c:\documents and settings\A@D\Dane aplikacji\InstallShield
2010-01-05 17:23 . 2010-01-05 17:17 16376 ----a-w- c:\windows\gdrv.sys
2010-01-05 17:18 . 2010-01-05 17:18 -------- d-----w- c:\program files\Intel
2010-01-05 17:18 . 2010-01-05 17:18 -------- d-----w- c:\program files\Yahoo!
2010-01-05 17:04 . 2010-01-05 17:04 315392 ----a-w- c:\windows\HideWin.exe
2010-01-05 16:53 . 2010-01-05 16:53 -------- d-----w- c:\program files\microsoft frontpage
2010-01-05 16:52 . 2010-01-05 16:52 -------- d-----w- c:\program files\Usługi online
2010-01-05 16:50 . 2010-01-05 16:50 21856 ----a-w- c:\windows\system32\emptyregdb.dat
2009-12-31 16:50 . 2004-08-04 12:00 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-21 19:08 . 2004-08-04 12:00 916480 ------w- c:\windows\system32\wininet.dll
2009-12-17 07:42 . 2010-01-05 16:49 345088 ----a-w- c:\windows\system32\mspaint.exe
2009-12-14 07:10 . 2004-08-04 12:00 33280 ----a-w- c:\windows\system32\csrsrv.dll
2009-12-12 14:15 . 2010-01-05 21:02 178176 ----a-w- c:\windows\system32\unrar.dll
2009-12-09 10:11 . 2004-08-04 12:00 2146816 ------w- c:\windows\system32\ntoskrnl.exe
2009-12-09 10:11 . 2004-08-04 00:39 2025472 ------w- c:\windows\system32\ntkrnlpa.exe
2009-12-04 18:22 . 2004-08-04 12:00 455424 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2009-11-27 17:14 . 2004-08-04 12:00 1295360 ----a-w- c:\windows\system32\quartz.dll
2009-11-27 17:14 . 2004-08-04 00:44 17920 ----a-w- c:\windows\system32\msyuv.dll
2009-11-27 16:09 . 2004-08-04 12:00 84992 ----a-w- c:\windows\system32\avifil32.dll
2009-11-27 16:09 . 2004-08-04 12:00 28672 ----a-w- c:\windows\system32\msvidc32.dll
2009-11-27 16:09 . 2004-08-04 12:00 11264 ----a-w- c:\windows\system32\msrle32.dll
2009-11-27 16:09 . 2004-08-04 00:44 48128 ----a-w- c:\windows\system32\iyuv_32.dll
2009-11-27 16:09 . 2001-10-26 17:29 8704 ----a-w- c:\windows\system32\tsbyuv.dll
2009-11-21 16:03 . 2004-08-04 12:00 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2008-03-09 06:25 . 2010-01-05 17:59 236 ----a-w- c:\program files\Common Files\dx.reg
.
((((((((((((((((((((((((((((( SnapShot@2010-02-10_17.21.44 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-02-10 18:05 . 2010-02-10 18:05 16384 c:\windows\Temp\Perflib_Perfdata_580.dat
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{31c7d459-9cc3-44f2-9dca-fc11795309b4}"= "c:\program files\IObitCom\tbIObi.dll" [2009-11-09 2331672]
[HKEY_CLASSES_ROOT\clsid\{31c7d459-9cc3-44f2-9dca-fc11795309b4}]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{31c7d459-9cc3-44f2-9dca-fc11795309b4}]
2009-11-09 17:38 2331672 ----a-w- c:\program files\IObitCom\tbIObi.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{31c7d459-9cc3-44f2-9dca-fc11795309b4}"= "c:\program files\IObitCom\tbIObi.dll" [2009-11-09 2331672]
[HKEY_CLASSES_ROOT\clsid\{31c7d459-9cc3-44f2-9dca-fc11795309b4}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{31C7D459-9CC3-44F2-9DCA-FC11795309B4}"= "c:\program files\IObitCom\tbIObi.dll" [2009-11-09 2331672]
[HKEY_CLASSES_ROOT\clsid\{31c7d459-9cc3-44f2-9dca-fc11795309b4}]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-07-18 451872]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-01 153136]
"ALLUpdate"="c:\program files\ALLPlayer\ALLUpdate.exe" [2009-06-04 869888]
"Advanced SystemCare 3"="c:\program files\IObit\Advanced SystemCare 3\AWC.exe" [2010-01-06 2335952]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-02-01 39408]
"SMSystemAnalyzer"="c:\program files\iolo\System Mechanic 6\SMSystemAnalyzer.exe" [2006-12-20 557056]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-09-19 16844800]
"UIExec"="c:\program files\blueconnect\UIExec.exe" [2009-07-20 132608]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"OrderReminder"="c:\program files\Hewlett-Packard\OrderReminder\OrderReminder.exe" [2006-01-30 98304]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\All Users\Menu Start\Programy\Autostart\
Adobe Reader Synchronizer.lnk - c:\program files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-23 734872]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0smrgdf c:\program files\iolo\System Mechanic 6
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"e:\\moh\\MOHAA.EXE"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Gadu-Gadu\\gg.exe"=
"c:\\Program Files\\FlashGet\\flashget.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"e:\\moh\\moh_Breakthrough.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
R2 UI Assistant Service;UI Assistant Service;c:\program files\blueconnect\AssistantServices.exe [2010-01-05 241664]
S2 gupdate;Usługa Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-02-01 135664]
S3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [2010-01-05 9728]
--- Inne Usługi/Sterowniki w Pamięci ---
*Deregistered* - BMLoad
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2007-07-18 16:53 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Zawartość folderu 'Zaplanowane zadania'
2010-02-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-01 15:33]
2010-02-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-01 15:33]
2010-02-10 c:\windows\Tasks\User_Feed_Synchronization-{B026E8D7-9254-4BF7-BF2D-4E138EFD6FA0}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 03:31]
.
.
------- Skan uzupełniający -------
.
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2384137
IE: &Stáhnout &vše FlashGetem - c:\program files\FlashGet\jc_all.htm
IE: &Stáhnout FlashGetem - c:\program files\FlashGet\jc_link.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&ksport do programu Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Funkcja Google Sidewiki - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
.
.
------- Skojarzenia plików -------
.
JSEFile=NOTEPAD.EXE %1
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-10 19:07
Windows 5.1.2600 Dodatek Service Pack 3 NTFS
skanowanie ukrytych procesów ...
skanowanie ukrytych wpisów autostartu ...
skanowanie ukrytych plików ...
skanowanie pomyślnie ukończone
ukryte pliki: 0
**************************************************************************
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------
- - - - - - - > 'winlogon.exe'(760)
c:\windows\system32\Ati2evxx.dll
- - - - - - - > 'explorer.exe'(3052)
c:\windows\system32\WININET.dll
c:\program files\RocketDock\RocketDock.dll
c:\progra~1\WINDOW~2\wmpband.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Pozostałe uruchomione procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Photodex\ProShowGold\ScsiAccess.exe
c:\program files\Alwil Software\Avast4\ashMaiSv.exe
c:\program files\Alwil Software\Avast4\ashWebSv.exe
c:\windows\system32\wscntfy.exe
c:\windows\RTHDCPL.EXE
c:\program files\Common Files\Ahead\Lib\NMIndexingService.exe
c:\program files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
c:\windows\system32\imapi.exe
.
**************************************************************************
.
Czas ukończenia: 2010-02-10 19:11:14 - komputer został uruchomiony ponownie
ComboFix-quarantined-files.txt 2010-02-10 18:11
ComboFix2.txt 2010-02-10 17:22
Przed: 19 065 077 760 bajtów wolnych
Po: 19 030 294 528 bajtów wolnych
- - End Of File - - BD47DE2AE7C1AABE8BE5D91D0A824531
log.txt
