Problem W Otwieraniem Dysku

[Kirk42]

Witam!

Mam problem otóż gdy chcę wejść w jakiś dysk otwiera mi sie on w osobnym oknie choć z opcjach folderow jest ustawione, że ma być w tym samym oknie. Jednak gdy klikne prawym przyciskiem na liscie pojawia się AUTO a nie OTWÓRZ, jak zrobić byc głowną opcją było OTWÓRZ?

Edytowane 16 Stycznia 2008 przez Kirk42

[barat]

W moim przypadku pomogło użycie programu ComboFix.exe (jest opisany tu na forum chyba).

Ogólnie to jest jakiś wirus, zmienia/ustawia autostarty dla windows, działa w tle.

Ja zrobiłem tak, że przeskanowałem skanerem MKS, przywalił się w końcu do tego wirusa, potem CTRL+ALT+DEL by wyłączyć go z procesów a potem już przez reszte skanowania by MKS go usuwał.

Potem ComboFix.exe i do dziś (odpukać) działa :)

[Kirk42]

zrobiłem tak jak powiedziałeś i teraz jako pogrubiona opcje (podwójne kliknięcie) wyświetla mi opcje WYSZUKAJ

[Leon$]

zrobiłem tak jak powiedziałeś i teraz jako pogrubiona opcje (podwójne kliknięcie) wyświetla mi opcje WYSZUKAJ

Zamiast otwórz-wyszukaj

 

Start >> Uruchom >> regsvr32 /i shell32

 

Co do Combofixa daj log na forum trzeba usunąć błędne wpisy rejestru

 

:)

[Kirk42]

Zamiast otwórz-wyszukaj

 

Start >> Uruchom >> regsvr32 /i shell32

To mi pomogło, a co do loga... to proszę

Oto log:

 

ComboFix 08-01-17.5 - Darek 2008-01-18 8:14:48.3 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.497 [GMT 1:00]

Running from: C:\Documents and Settings\Darek\Pulpit\ComboFix.exe

 

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

.

 

((((((((((((((((((((((((( Files Created from 2007-12-18 to 2008-01-18 )))))))))))))))))))))))))))))))

.

 

2008-01-17 13:02 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe

2008-01-16 22:34 . 2008-01-16 22:34 <DIR> d-------- C:\Program Files\Alwil Software

2008-01-16 22:34 . 2007-12-04 14:04 837,496 --a------ C:\WINDOWS\system32\aswBoot.exe

2008-01-16 22:34 . 2004-01-09 10:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx

2008-01-16 22:34 . 2007-12-04 13:54 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr

2008-01-16 22:34 . 2007-12-04 15:55 94,544 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys

2008-01-16 22:34 . 2007-12-04 15:56 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys

2008-01-16 22:34 . 2007-12-04 15:51 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys

2008-01-16 22:34 . 2007-12-04 15:49 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys

2008-01-16 22:34 . 2007-12-04 15:53 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys

2008-01-16 19:23 . 2008-01-16 19:23 54,156 --ah----- C:\WINDOWS\QTFont.qfn

2008-01-16 19:23 . 2008-01-16 19:23 1,409 --a------ C:\WINDOWS\QTFont.for

2008-01-11 15:36 . 2008-01-11 15:36 <DIR> d-------- C:\Program Files\Common Files\PCSuite

2008-01-11 15:36 . 2008-01-11 15:36 <DIR> d-------- C:\Program Files\Common Files\Nokia

2008-01-11 15:35 . 2008-01-11 15:35 <DIR> d-------- C:\Program Files\PC Connectivity Solution

2008-01-11 15:33 . 2007-02-22 10:15 137,216 --a------ C:\WINDOWS\system32\drivers\nmwcd.sys

2008-01-11 15:33 . 2007-02-22 10:15 65,536 --a------ C:\WINDOWS\system32\nmwcdcocls.dll

2008-01-11 15:33 . 2007-02-22 10:15 12,288 --a------ C:\WINDOWS\system32\drivers\nmwcdcm.sys

2008-01-11 15:33 . 2007-02-22 10:15 12,288 --a------ C:\WINDOWS\system32\drivers\nmwcdcj.sys

2008-01-11 15:33 . 2007-02-22 10:15 8,320 --a------ C:\WINDOWS\system32\drivers\nmwcdc.sys

2008-01-07 15:22 . 2008-01-07 19:45 <DIR> d-------- C:\Program Files\Mozilla Firefox 3 Beta 2

2007-12-30 14:31 . 2007-12-30 14:31 <DIR> d--h----- C:\WINDOWS\PIF

2007-12-30 14:18 . 2007-12-30 14:18 <DIR> d-------- C:\Program Files\Rockstar Games

2007-12-29 20:34 . 2005-12-22 14:45 493,440 --a------ C:\WINDOWS\system32\drivers\WlanBZ64.SYS

2007-12-29 20:34 . 2005-12-22 14:45 402,432 --a------ C:\WINDOWS\system32\drivers\WlanBZXP.sys

2007-12-29 20:34 . 2005-12-22 14:45 25,214 --a------ C:\WINDOWS\WLANUTL.ICO

2007-12-29 16:22 . 2007-12-29 16:22 719,229 --a------ C:\WINDOWS\Counter Strike 1.6 Reloaded Uninstaller.exe

2007-12-29 16:20 . 2007-12-29 16:21 <DIR> d-------- C:\Program Files\Counter Strike 1.6 Reloaded

2007-12-26 20:35 . 2007-10-31 00:33 380,416 --------- C:\WINDOWS\system32\SET210.tmp

2007-12-26 20:35 . 2007-10-31 00:32 354,304 --------- C:\WINDOWS\system32\SET20D.tmp

2007-12-26 20:35 . 2007-10-31 00:28 177,152 --------- C:\WINDOWS\system32\SET20F.tmp

2007-12-26 20:35 . 2007-10-31 00:32 80,896 --------- C:\WINDOWS\system32\SET20C.tmp

2007-12-26 20:35 . 2007-10-31 00:32 6,656 --------- C:\WINDOWS\system32\SET20B.tmp

2007-12-26 20:33 . 2006-12-29 00:31 19,569 --a------ C:\WINDOWS\005107_.tmp

2007-12-26 19:43 . 2006-12-29 00:31 19,569 --a------ C:\WINDOWS\000001_.tmp

2007-12-26 19:39 . 2007-12-26 19:40 <DIR> d-------- C:\45e66d438d814bd03f4081871e0b

2007-12-26 19:30 . 2007-12-26 19:30 <DIR> d-------- C:\WINDOWS\l2schemas

2007-12-26 19:30 . 2007-10-31 00:31 539,136 --a------ C:\WINDOWS\system32\SET13F0.tmp

2007-12-26 19:30 . 2007-10-31 00:33 380,416 --a------ C:\WINDOWS\system32\SET140E.tmp

2007-12-26 19:30 . 2007-10-31 00:32 354,304 --a------ C:\WINDOWS\system32\SET13BF.tmp

2007-12-26 19:30 . 2007-10-31 00:28 177,152 --a------ C:\WINDOWS\system32\SET13F2.tmp

2007-12-26 19:30 . 2007-10-31 00:32 80,896 --a------ C:\WINDOWS\system32\SET13BA.tmp

2007-12-26 19:30 . 2007-10-31 00:32 6,656 --a------ C:\WINDOWS\system32\SET13B5.tmp

2007-12-26 19:29 . 2007-12-26 19:29 <DIR> d-------- C:\WINDOWS\ServicePackFiles

2007-12-26 19:29 . 2007-10-31 00:31 471,552 --a------ C:\WINDOWS\system32\SET792.tmp

2007-12-26 19:29 . 2007-10-31 00:31 95,744 --a------ C:\WINDOWS\system32\SET798.tmp

2007-12-26 19:27 . 2006-12-29 00:31 19,569 --a------ C:\WINDOWS\003213_.tmp

2007-12-25 19:42 . 2007-12-25 19:42 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Last.fm

2007-12-25 19:41 . 2008-01-10 17:14 <DIR> d-------- C:\Program Files\Last.fm

2007-12-25 19:30 . 2007-12-26 21:14 <DIR> d-------- C:\Program Files\Opera

2007-12-23 19:41 . 2007-12-23 19:41 <DIR> d-------- C:\Program Files\Common Files\Ahead

2007-12-23 19:41 . 2004-07-20 17:24 1,568,768 --------- C:\WINDOWS\system32\ImagX7.dll

2007-12-23 19:41 . 2004-07-20 17:24 476,320 --------- C:\WINDOWS\system32\ImagXpr7.dll

2007-12-23 19:41 . 2004-07-20 17:24 471,040 --------- C:\WINDOWS\system32\ImagXRA7.dll

2007-12-23 19:41 . 2004-07-09 09:43 364,544 --------- C:\WINDOWS\system32\TwnLib4.dll

2007-12-23 19:41 . 2004-07-20 17:24 262,144 --------- C:\WINDOWS\system32\ImagXR7.dll

2007-12-23 19:41 . 2001-07-09 11:50 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe

2007-12-23 19:41 . 2000-06-26 11:45 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll

2007-12-23 19:41 . 2001-06-26 08:15 38,912 --------- C:\WINDOWS\system32\picn20.dll

2007-12-19 07:24 . 2007-12-19 07:24 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\FLEXnet

2007-12-19 07:18 . 2007-12-19 07:18 <DIR> d-------- C:\Program Files\Bonjour

2007-12-19 07:14 . 2007-12-19 07:14 <DIR> d-------- C:\Program Files\Common Files\Macrovision Shared

2007-12-18 22:37 . 2007-12-18 22:37 <DIR> d-------- C:\Program Files\WYSIWYG Web Builder 4.0

 

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-01-18 07:04 --------- d-----w C:\Program Files\Mozilla Thunderbird

2008-01-17 06:55 --------- d-----w C:\Program Files\WAV to MP3 Encoder

2008-01-15 14:43 --------- d-----w C:\Documents and Settings\Darek\Dane aplikacji\Nokia

2008-01-11 14:43 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Installations

2008-01-11 14:33 --------- d-----w C:\Program Files\Nokia

2008-01-11 14:19 --------- d-----w C:\Documents and Settings\Darek\Dane aplikacji\PC Suite

2008-01-04 21:04 --------- d-----w C:\Program Files\Gadu-Gadu

2008-01-02 18:44 --------- d-----w C:\Program Files\AutoCAD 2007

2007-12-30 15:39 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Test Drive Unlimited

2007-12-30 13:18 --------- d--h--w C:\Program Files\InstallShield Installation Information

2007-12-29 09:58 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help

2007-12-26 20:06 --------- d-----w C:\Program Files\Winamp

2007-12-23 18:41 --------- d-----w C:\Program Files\Ahead

2007-12-23 12:59 --------- d-----w C:\Program Files\Common Files\Adobe

2007-12-18 21:37 737,280 ----a-w C:\WINDOWS\iun6002.exe

2007-12-16 20:48 --------- d-----w C:\Program Files\Winamp Toolbar

2007-12-16 20:48 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar

2007-12-12 06:14 --------- d-----w C:\Program Files\Electronic Arts

2007-12-10 20:05 --------- d-----w C:\Program Files\Audacity

2007-12-01 11:19 --------- d-----w C:\Program Files\DC++

2007-11-28 19:26 --------- d-----w C:\Documents and Settings\Darek\Dane aplikacji\Nokia Multimedia Player

2007-11-20 13:24 --------- d-----w C:\Documents and Settings\Darek\Dane aplikacji\Printer Info Cache

2007-11-20 13:24 --------- d-----w C:\Documents and Settings\Darek\Dane aplikacji\Image Zone Express

2007-11-19 14:54 --------- d-----w C:\Program Files\PDFCreator

2007-11-07 09:29 723,968 ----a-w C:\WINDOWS\system32\lsasrv.dll

2007-11-06 08:20 831,048 ----a-w C:\WINDOWS\system32\WudfUpdate_01005.dll

2007-10-30 23:35 217,118 ----a-w C:\WINDOWS\AppPatch\SET69E.tmp

2007-10-30 23:35 217,118 ------w C:\WINDOWS\AppPatch\SET204.tmp

2007-10-30 23:35 217,118 ------w C:\WINDOWS\AppPatch\SET16A9.tmp

2007-10-30 23:35 198,736 ----a-w C:\WINDOWS\AppPatch\SET69D.tmp

2007-10-30 23:35 198,736 ------w C:\WINDOWS\AppPatch\SET203.tmp

2007-10-30 23:35 198,736 ------w C:\WINDOWS\AppPatch\SET16A8.tmp

2007-10-30 23:35 1,199,128 ----a-w C:\WINDOWS\AppPatch\SET69C.tmp

2007-10-30 23:35 1,199,128 ------w C:\WINDOWS\AppPatch\SET202.tmp

2007-10-30 23:35 1,199,128 ------w C:\WINDOWS\AppPatch\SET16A7.tmp

2007-10-30 23:33 56,832 ----a-w C:\WINDOWS\system32\SET385.tmp

2007-10-30 23:33 56,832 ------w C:\WINDOWS\system32\SET161.tmp

2007-10-30 23:33 56,832 ------w C:\WINDOWS\system32\SET15F9.tmp

2007-10-30 23:33 507,904 ----a-w C:\WINDOWS\system32\SET266.tmp

2007-10-30 23:33 507,904 ------w C:\WINDOWS\system32\SETF4.tmp

2007-10-30 23:33 507,904 ------w C:\WINDOWS\system32\SET1591.tmp

2007-10-30 23:33 380,416 ------w C:\WINDOWS\system32\SET16B9.tmp

2007-10-30 23:33 33,280 ----a-w C:\WINDOWS\system32\SET417.tmp

2007-10-30 23:33 33,280 ------w C:\WINDOWS\system32\SET18E.tmp

2007-10-30 23:33 33,280 ------w C:\WINDOWS\system32\SET1626.tmp

2007-10-30 23:33 32,768 ----a-w C:\WINDOWS\system32\SET35A.tmp

2007-10-30 23:33 32,768 ------w C:\WINDOWS\system32\SET15E4.tmp

2007-10-30 23:33 32,768 ------w C:\WINDOWS\system32\SET14D.tmp

2007-10-30 23:33 29,696 ----a-w C:\WINDOWS\system32\SET456.tmp

2007-10-30 23:33 29,696 ------w C:\WINDOWS\system32\SET19A.tmp

2007-10-30 23:33 29,696 ------w C:\WINDOWS\system32\SET1632.tmp

2007-10-30 23:33 265,728 ----a-w C:\WINDOWS\system32\SET45D.tmp

2007-10-30 23:33 265,728 ------w C:\WINDOWS\system32\SET19C.tmp

2007-10-30 23:33 265,728 ------w C:\WINDOWS\system32\SET1634.tmp

2007-10-30 23:33 23,552 ----a-w C:\WINDOWS\system32\SET273.tmp

2007-10-30 23:33 23,552 ------w C:\WINDOWS\system32\SETF8.tmp

2007-10-30 23:33 23,552 ------w C:\WINDOWS\system32\SET1595.tmp

2007-10-30 23:33 206,848 ----a-w C:\WINDOWS\system32\SET28F.tmp

2007-10-30 23:33 206,848 ------w C:\WINDOWS\system32\SET15A1.tmp

2007-10-30 23:33 206,848 ------w C:\WINDOWS\system32\SET104.tmp

2007-10-30 23:33 17,408 ----a-w C:\WINDOWS\system32\SET435.tmp

2007-10-30 23:33 17,408 ------w C:\WINDOWS\system32\SET195.tmp

2007-10-30 23:33 17,408 ------w C:\WINDOWS\system32\SET162C.tmp

2007-10-30 23:32 99,328 ----a-w C:\WINDOWS\system32\SET262.tmp

2007-10-30 23:32 99,328 ------w C:\WINDOWS\system32\SETF1.tmp

2007-10-30 23:32 99,328 ------w C:\WINDOWS\system32\SET158E.tmp

2007-10-30 23:32 96,768 ----a-w C:\WINDOWS\system32\SET32F.tmp

2007-10-30 23:32 96,768 ------w C:\WINDOWS\system32\SET15D4.tmp

2007-10-30 23:32 96,768 ------w C:\WINDOWS\system32\SET13C.tmp

2007-10-30 23:32 92,672 ----a-w C:\WINDOWS\system32\SET25C.tmp

2007-10-30 23:32 92,672 ------w C:\WINDOWS\system32\SETEC.tmp

2007-10-30 23:32 92,672 ------w C:\WINDOWS\system32\SET1589.tmp

2007-10-30 23:32 90,112 ----a-w C:\WINDOWS\system32\SET296.tmp

2007-10-30 23:32 90,112 ------w C:\WINDOWS\system32\SET15A3.tmp

2007-10-30 23:32 90,112 ------w C:\WINDOWS\system32\SET106.tmp

2007-10-30 23:32 83,456 ----a-w C:\WINDOWS\system32\SET347.tmp

2007-10-30 23:32 83,456 ------w C:\WINDOWS\system32\SET15DB.tmp

2007-10-30 23:32 83,456 ------w C:\WINDOWS\system32\SET143.tmp

2007-10-30 23:32 82,432 ----a-w C:\WINDOWS\system32\SET24F.tmp

2007-10-30 23:32 82,432 ------w C:\WINDOWS\system32\SETE9.tmp

2007-10-30 23:32 82,432 ------w C:\WINDOWS\system32\SET1586.tmp

2007-10-30 23:32 80,896 ------w C:\WINDOWS\system32\SET16B5.tmp

2007-10-30 23:32 8,461,312 ----a-w C:\WINDOWS\system32\SET2DF.tmp

2007-10-30 23:32 8,461,312 ------w C:\WINDOWS\system32\SET15BA.tmp

2007-10-30 23:32 8,461,312 ------w C:\WINDOWS\system32\SET11D.tmp

2007-10-30 23:32 8,192 ----a-w C:\WINDOWS\system32\SET249.tmp

2007-10-30 23:32 8,192 ------w C:\WINDOWS\system32\SETE7.tmp

2007-10-30 23:32 8,192 ------w C:\WINDOWS\system32\SET1584.tmp

2007-10-30 23:32 79,872 ----a-w C:\WINDOWS\system32\SET321.tmp

2007-10-30 23:32 79,872 ------w C:\WINDOWS\system32\SET15D1.tmp

2007-10-30 23:32 79,872 ------w C:\WINDOWS\system32\SET139.tmp

2007-10-30 23:32 78,848 ----a-w C:\WINDOWS\system32\SET3C2.tmp

2007-10-30 23:32 78,848 ------w C:\WINDOWS\system32\SET177.tmp

2007-10-30 23:32 78,848 ------w C:\WINDOWS\system32\SET160F.tmp

2007-10-30 23:32 75,264 ----a-w C:\WINDOWS\system32\SET2C5.tmp

2007-10-30 23:32 75,264 ------w C:\WINDOWS\system32\SET15B4.tmp

2007-10-30 23:32 75,264 ------w C:\WINDOWS\system32\SET117.tmp

2007-10-30 23:32 74,752 ----a-w C:\WINDOWS\system32\SET34A.tmp

2007-10-30 23:32 74,752 ------w C:\WINDOWS\system32\SET15DC.tmp

2007-10-30 23:32 74,752 ------w C:\WINDOWS\system32\SET144.tmp

.

 

((((((((((((((((((((((((((((( snapshot@2008-01-17_13.06.20,60 )))))))))))))))))))))))))))))))))))))))))

.

+ 2008-01-17 12:09:28 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_65c.dat

+ 2008-01-17 12:09:15 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_74c.dat

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

 

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]

2007-10-04 21:06 1135968 --a------ C:\Program Files\Winamp Toolbar\winamptb.dll

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}

 

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]

[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]

[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]

[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

 

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]

"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= C:\Program Files\Winamp Toolbar\winamptb.dll [2007-10-04 21:06 1135968]

 

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]

[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]

[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]

[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 13:00 15360]

"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector" [ ]

"NVIDIA nTune"="C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-04-04 13:20 81920]

"MsServer"="msfun80.exe" []

"PC Suite Tray"="C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" [2007-12-10 10:12 695808]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SoundMan"="SOUNDMAN.EXE" [2004-12-22 10:09 77824 C:\WINDOWS\SOUNDMAN.EXE]

"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-09-17 00:07 8491008]

"nwiz"="nwiz.exe" [2007-09-17 00:07 1626112 C:\WINDOWS\system32\nwiz.exe]

"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 01:41 49152]

"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 23:47 31016]

"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11 132496]

"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-06-29 05:24 286720]

"Gainward"="C:\Program Files\VDOTool\TBPanel.exe" [2007-06-26 13:58 2165272]

"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-09-17 00:07 81920]

"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648]

"IMJPMIG8.2"="msime82.exe" []

"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 13:00 15360]

"Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-11-07 17:35 1294336]

"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-09-28 02:17 443968]

 

C:\Documents and Settings\Darek\Menu Start\Programy\Autostart\

Last.fm Helper.lnk - C:\Program Files\Last.fm\LastFMHelper.exe [2007-12-26 21:17:44]

 

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\

Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 01:48:00]

Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-23 00:01:00]

HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2006-02-19 03:21:22]

HP Photosmart Premier - Szybkie uruchomienie.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe [2006-02-10 06:56:20]

Przyspieszenie uruchomienia programu AutoCAD.lnk - C:\Program Files\Common Files\Autodesk Shared\acstart17.exe [2006-03-05 14:43:54]

TAB 4.1.lnk - C:\Program Files\LAE\TAB4.1\TAB.exe [2007-05-04 15:48:44]

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

"NoSetFolders"= 0 (0x0)

"NoTrayContextMenu"= 0 (0x0)

"NoSimpleStartMenu"= 0 (0x0)

"NoStartMenuPinnedList"= 0 (0x0)

"NoStartMenuMFUprogramsList"= 0 (0x0)

"NoStartMenuMorePrograms"= 0 (0x0)

"NoUserNameInStartMenu"= 0 (0x0)

 

R0 NIPALK;NIPALK;C:\WINDOWS\system32\drivers\nipalk.sys [2007-02-15 22:59]

R0 nipbcfk;National Instruments Class Upper Filter Driver;C:\WINDOWS\system32\drivers\nipbcfk.sys [2007-02-15 17:23]

R0 pe3ah4nc;DiRT Environment Driver (pe3ah4nc);C:\WINDOWS\system32\drivers\pe3ah4nc.sys [2007-05-18 20:53]

R0 ps6ah4nc;DiRT Synchronization Driver (ps6ah4nc);C:\WINDOWS\system32\drivers\ps6ah4nc.sys [2007-05-18 20:52]

R2 cvintdrv;cvintdrv;C:\WINDOWS\system32\drivers\cvintdrv.sys [2007-02-21 10:00]

R2 NiViPxiK;NI-VISA PXI Driver;C:\WINDOWS\system32\drivers\NiViPxiKl.sys [2007-02-23 10:25]

S2 pr2ah4nc;DiRT Drivers Auto Removal (pr2ah4nc);C:\WINDOWS\system32\pr2ah4nc.exe svc []

S3 nidimk;nidimk;C:\WINDOWS\system32\drivers\nidimkl.sys [2007-02-21 22:20]

S3 niorbk;niorbk;C:\WINDOWS\system32\drivers\niorbkl.sys [2007-02-21 21:39]

S3 nipalfwedl;nipalfwedl;C:\WINDOWS\system32\drivers\nipalfwedl.sys [2007-02-15 23:00]

S3 nipalusbedl;nipalusbedl;C:\WINDOWS\system32\drivers\nipalusbedl.sys [2007-02-15 23:00]

S3 NiViFWK;NI-VISA FireWire Driver;C:\WINDOWS\system32\drivers\NiViFWKl.sys [2007-02-22 10:42]

S3 NiViPciK;NI-VISA PCI Driver;C:\WINDOWS\system32\drivers\NiViPciKl.sys [2007-02-23 10:25]

S3 SG762_XP;SAGEM 802.11g XG762 1211B Driver;C:\WINDOWS\system32\DRIVERS\WlanBZXP.sys [2005-12-22 14:45]

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\J]

\Shell\AutoRun\command - J:\LaunchU3.exe

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5d2311ae-6301-11dc-bb86-806d6172696f}]

\Shell\AutoRun\command - F:\Autorun.exe

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fbff932e-669e-11dc-bb95-0014853f5d6f}]

\Shell\AutoRun\command - J:\LaunchU3.exe

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fbff932f-669e-11dc-bb95-0014853f5d6f}]

\Shell\Auto\command - K:\fun.xls.exe

\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL fun.xls.exe

 

.

**************************************************************************

 

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-01-18 08:17:06

Windows 5.1.2600 Dodatek Service Pack 2 NTFS

 

scanning hidden processes ...

 

scanning hidden autostart entries ...

 

HKLM\Software\Microsoft\Windows\CurrentVersion\Run

IMJPMIG8.2 = msime82.exe???.

HKCU\Software\Microsoft\Windows\CurrentVersion\Run

MsServer = msfun80.exe???.

 

scanning hidden files ...

 

scan completed successfully

hidden files: 0

 

**************************************************************************

.

Completion time: 2008-01-18 8:17:38

ComboFix-quarantined-files.txt 2008-01-18 07:17:24

ComboFix2.txt 2008-01-17 12:17:39

ComboFix3.txt 2008-01-17 12:06:52

.

2008-01-09 20:18:38 --- E O F ---

[Kolobos]

Zainstaluj TweakUi i wylacz autostart dla wszystkich dyskow (cd/dvd mozesz zostawic). Usun pliki trojana z czegos co bylo podlaczone pod USB i mialo litere K: (wchodz przez prawoklik i exploruj, a nie autostart).

 

Pomysl tez o usunieciu plikow tmp z tych katalogow:

C:\WINDOWS\system32\*.tmp

C:\WINDOWS\*.tmp

 

 

Wklej do notatnika:

REGEDIT4

 

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fbff932f-669e-11dc-bb95-0014853f5d6f}]

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"MsServer"=-

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IMJPMIG8.2"=-

 

Zapisz jako fix.reg i uruchom.

Zrob tez skan przy pomocy SuperAntiSpyware oraz Dr.Web CureIt.