Prośba O Sprawdzenie Loga

[GreenGo]

Byłby wdzięczny za sprawdzenie 8O

 

 

» Naciśnij aby pokazać/ukryć tekst oznaczony jako spoiler « - "ComboFix"

ComboFix 08-09-22.06 - GreenGo 2008-09-24 16:03:07.1 - NTFSx86

Uruchomiony z: D:\Documents and Settings\GreenGo\Pulpit\ComboFix.exe

 

UWAGA - TEN KOMPUTER NIE MA ZAINSTALOWANEJ KONSOLI ODZYSKIWANIA !!

.

 

((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

D:\Program Files\myglobalsearch

D:\WINDOWS\system32\systeminfo3.dll

 

.

((((((((((((((((((((((((( Pliki utworzone od 2008-08-24 do 2008-09-24 )))))))))))))))))))))))))))))))

.

 

2008-09-22 17:01 . 2008-09-22 17:01 54,156 --ah----- D:\WINDOWS\QTFont.qfn

2008-09-22 17:01 . 2008-09-22 17:01 1,409 --a------ D:\WINDOWS\QTFont.for

2008-09-13 15:28 . 2008-09-13 15:30 <DIR> d-------- D:\WINDOWS\system32\NtmsData

2008-09-13 01:12 . 2008-09-13 01:12 <DIR> d-------- D:\Program Files\Hamachi

2008-09-13 01:12 . 2008-09-17 02:36 <DIR> d-------- D:\Documents and Settings\GreenGo\Dane aplikacji\Hamachi

2008-09-13 01:12 . 2008-09-13 01:12 25,280 --a------ D:\WINDOWS\system32\drivers\hamachi.sys

2008-09-09 18:17 . 2008-09-09 18:17 <DIR> d-------- D:\Program Files\Common Files\Wise Installation Wizard

2008-09-09 17:37 . 2006-03-02 14:00 221,184 --a------ D:\WINDOWS\system32\wmpns.dll

2008-09-09 16:52 . 2008-09-09 16:52 <DIR> d-------- D:\WINDOWS\system32\pl

2008-09-09 16:52 . 2008-09-09 16:52 <DIR> d-------- D:\WINDOWS\system32\bits

2008-09-09 16:52 . 2008-09-09 16:52 <DIR> d-------- D:\WINDOWS\l2schemas

2008-09-09 16:47 . 2008-09-09 16:52 <DIR> d-------- D:\WINDOWS\ServicePackFiles

2008-09-08 16:53 . 2008-09-08 16:54 <DIR> d-------- D:\Program Files\Common Files\Corel

2008-09-08 15:11 . 2008-09-08 15:11 <DIR> d-------- D:\Documents and Settings\GreenGo\Dane aplikacji\Corel

2008-09-08 15:11 . 2008-10-17 16:08 88 -r-hs---- D:\WINDOWS\system32\21C27D0324.sys

2008-09-08 15:10 . 2008-09-08 15:10 <DIR> d-------- D:\Documents and Settings\All Users\Dane aplikacji\Corel

2008-09-08 15:06 . 2008-09-10 15:28 3,140 --ahs---- D:\WINDOWS\system32\KGyGaAvL.sys

2008-09-08 15:05 . 2008-09-08 15:05 <DIR> d-------- D:\Documents and Settings\GreenGo\Dane aplikacji\InstallShield

2008-08-25 20:52 . 2008-08-25 20:52 <DIR> d-------- D:\Documents and Settings\All Users\Dane aplikacji\nView_Profiles

2008-08-25 20:50 . 2008-09-24 16:08 81,191 --a------ D:\WINDOWS\system32\nvapps.xml

2008-08-25 20:49 . 2008-08-25 20:52 <DIR> d-------- D:\WINDOWS\NV26762680.TMP

2008-08-25 20:49 . 2006-08-11 15:42 208,896 --a------ D:\WINDOWS\system32\nvudisp.exe

2008-08-25 20:37 . 2008-08-25 20:37 <DIR> d-------- D:\WINDOWS\AS_SCRIPTS

2008-08-24 23:52 . 2008-08-25 13:57 8 --a------ D:\WINDOWS\system32\nvModes.dat

2008-08-24 16:43 . 2008-08-24 16:46 <DIR> d-------- D:\WINDOWS\NV9762472.TMP

2008-08-24 16:42 . 2008-08-24 16:42 <DIR> d-------- D:\NVIDIA

2008-08-24 16:40 . 2008-08-24 16:40 <DIR> d-------- D:\WINDOWS\Logs

2008-08-24 16:39 . 2008-08-24 16:40 <DIR> d-------- D:\Program Files\DRX

2008-08-24 16:38 . 2008-08-24 16:38 <DIR> d-------- D:\Program Files\SystemRequirementsLab

2008-08-24 13:31 . 2004-08-18 10:34 442,368 -ra------ D:\WINDOWS\system32\vp6vfw.dll

 

.

(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-09-24 14:06 802,848 --sha-w D:\WINDOWS\system32\drivers\fidbox2.dat

2008-09-24 14:06 8,016 --sha-w D:\WINDOWS\system32\drivers\fidbox2.idx

2008-09-24 14:06 43,292 --sha-w D:\WINDOWS\system32\drivers\fidbox.idx

2008-09-24 14:06 4,598,304 --sha-w D:\WINDOWS\system32\drivers\fidbox.dat

2008-09-24 13:37 --------- d-----w D:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab

2008-09-24 12:52 --------- d-----w D:\Program Files\FlashGet

2008-09-20 15:18 --------- d-----w D:\Documents and Settings\GreenGo\Dane aplikacji\uTorrent

2008-09-17 07:40 --------- d-----w D:\Documents and Settings\GreenGo\Dane aplikacji\Tlen.pl

2008-09-09 16:16 --------- d-----w D:\Documents and Settings\All Users\Dane aplikacji\Lavasoft

2008-09-09 16:07 --------- d-----w D:\Documents and Settings\GreenGo\Dane aplikacji\OpenOffice.ux.pl2

2008-09-09 14:23 81,920 ----a-w D:\Documents and Settings\GreenGo\Dane aplikacji\ezpinst.exe

2008-09-09 14:23 47,360 ----a-w D:\Documents and Settings\GreenGo\Dane aplikacji\pcouffin.sys

2008-09-09 14:23 --------- d-----w D:\Documents and Settings\GreenGo\Dane aplikacji\Vso

2008-08-06 17:23 96,976 ----a-w D:\WINDOWS\system32\drivers\klin.dat

2006-05-03 09:06 163,328 --sh--r D:\WINDOWS\system32\flvDX.dll

2007-02-21 10:47 31,232 --sh--r D:\WINDOWS\system32\msfDX.dll

.

 

((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="D:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NvCplDaemon"="D:\WINDOWS\system32\NvCpl.dll" [2006-08-11 7630848]

"AVP"="E:\Programy\Kaspersky\avp.exe" [2008-04-25 201992]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="D:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"vidc.I420"= i420vfw.dll

"VIDC.YV12"= yv12vfw.dll

 

[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Reader Speed Launch.lnk]

path=D:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk

backup=D:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

 

[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Start^Programy^Autostart^ASUS WiFi-AP Solo.lnk]

path=D:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ASUS WiFi-AP Solo.lnk

backup=D:\WINDOWS\pss\ASUS WiFi-AP Solo.lnkCommon Startup

 

[HKLM\~\startupfolder\D:^Documents and Settings^GreenGo^Menu Start^Programy^Autostart^Adobe Gamma.lnk]

path=D:\Documents and Settings\GreenGo\Menu Start\Programy\Autostart\Adobe Gamma.lnk

backup=D:\WINDOWS\pss\Adobe Gamma.lnkStartup

 

[HKLM\~\startupfolder\D:^Documents and Settings^GreenGo^Menu Start^Programy^Autostart^AutoBackup Launcher.lnk]

path=D:\Documents and Settings\GreenGo\Menu Start\Programy\Autostart\AutoBackup Launcher.lnk

backup=D:\WINDOWS\pss\AutoBackup Launcher.lnkStartup

 

[HKLM\~\startupfolder\D:^Documents and Settings^GreenGo^Menu Start^Programy^Autostart^hamachi.lnk]

path=D:\Documents and Settings\GreenGo\Menu Start\Programy\Autostart\hamachi.lnk

backup=D:\WINDOWS\pss\hamachi.lnkStartup

 

[HKLM\~\startupfolder\D:^Documents and Settings^GreenGo^Menu Start^Programy^Autostart^OpenOffice.ux.pl 2.3.1.lnk]

path=D:\Documents and Settings\GreenGo\Menu Start\Programy\Autostart\OpenOffice.ux.pl 2.3.1.lnk

backup=D:\WINDOWS\pss\OpenOffice.ux.pl 2.3.1.lnkStartup

 

[HKLM\~\startupfolder\D:^Documents and Settings^GreenGo^Menu Start^Programy^Autostart^Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk]

path=D:\Documents and Settings\GreenGo\Menu Start\Programy\Autostart\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk

backup=D:\WINDOWS\pss\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnkStartup

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ai Quicker Help]

E:\Programy\D [X]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]

D:\WINDOWS\system32\dumprep 0 -k [X]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]

--a------ 2007-10-08 21:50 219520 E:\Programy\Alcohol 120\AxCmd.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]

--a------ 2007-09-20 15:35 202024 D:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Corel File Shell Monitor]

-ra------ 2008-01-15 15:18 16200 E:\Programy\Corel\CorelIOMonitor.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Corel Photo Downloader]

-ra------ 2007-12-14 13:35 531784 D:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]

--a------ 2008-04-14 19:21 15360 D:\WINDOWS\system32\ctfmon.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EdHTML]

--a------ 2003-03-24 17:38 1443328 E:\Programy\EdHTML\EdHTML.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]

--a------ 2006-10-27 00:47 31016 E:\Programy\MS Office\Office12\GrooveMonitor.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\JMB36X Configure]

-r------- 2006-04-25 04:52 385024 D:\WINDOWS\system32\JMRaidTool.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]

--a--c--- 2007-09-20 09:51 1836328 D:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

--a--c--- 2007-03-01 15:57 153136 D:\Program Files\Common Files\Nero\Lib\NeroCheck.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]

--a------ 2006-08-11 15:43 7630848 D:\WINDOWS\system32\nvcpl.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]

--a------ 2006-08-11 15:43 86016 D:\WINDOWS\system32\nvmctray.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]

--a------ 2007-05-11 02:08 2512392 D:\WINDOWS\system32\oodtray.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

--a--c--- 2007-10-19 21:16 286720 D:\Program Files\QuickTime\QTTask.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]

--a--c--- 2007-08-31 17:46 1460560 D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]

--a------ 2008-04-07 21:17 1271032 E:\Gry\Steam_\Steam.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

--a--c--- 2007-09-25 01:11 132496 D:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]

--a------ 2008-08-04 01:02 36352 E:\Programy\Winamp\winampa.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]

-r---c--- 2005-05-03 12:43 69632 D:\WINDOWS\Alcmtr.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]

--a------ 2006-08-11 15:43 1519616 D:\WINDOWS\system32\nwiz.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]

-r------- 2006-04-17 09:34 16143872 D:\WINDOWS\RTHDCPL.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]

"SQLWriter"=2 (0x2)

"ose"=3 (0x3)

"odserv"=3 (0x3)

"Nero BackItUp Scheduler 3"=2 (0x2)

"MySql"=2 (0x2)

"MSSQL$SQLEXPRESS"=2 (0x2)

"Adobe LM Service"=3 (0x3)

"aawservice"=2 (0x2)

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]

"DisableMonitoring"=dword:00000001

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"D:\\Program Files\\uTorrent\\uTorrent.exe"=

"E:\\Programy\\Tlen.pl\\tlen.exe"=

"E:\\Programy\\totalcmd\\TOTALCMD.EXE"=

"E:\\Programy\\Kaspersky\\avp.exe"=

"E:\\Programy\\MS Office\\Office12\\OUTLOOK.EXE"=

"E:\\Programy\\MS Office\\Office12\\GROOVE.EXE"=

"E:\\Programy\\MS Office\\Office12\\ONENOTE.EXE"=

"E:\\Programy\\uTorrent\\utorrent.exe"=

"E:\\Programy\\NAPI-PROJEKT\\napisy.exe"=

"E:\\Gry\\Steam_\\SteamApps\\greenmerlin\\counter-strike\\hl.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"E:\\Gry\\Starcraft\\StarCraft.exe"=

"D:\\WINDOWS\\system32\\dplaysvr.exe"=

"E:\\Gry\\Steam_\\SteamApps\\greenmerlin\\half-life\\hl.exe"=

"D:\\Program Files\\Gadu-Gadu\\gg.exe"=

"C:\\usr\\apache\\Apache.exe"=

"C:\\usr\\SMTP Server\\localsrv.exe"=

"D:\\WINDOWS\\system32\\dpvsetup.exe"=

"F:\\Instale\\Heros\\h3blade.exe"=

"F:\\Instale\\Heros\\Heroes3.exe"=

"D:\\Documents and Settings\\All Users\\Dane aplikacji\\Kaspersky Lab Setup Files\\Kaspersky Anti-Virus 2009\\Polish\\setup.exe"=

 

R3 USBSTOR;Sterownik magazynu masowego USB;D:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 20:45]

S0 klbg;Kaspersky Lab Boot Guard Driver;D:\WINDOWS\system32\drivers\klbg.sys [2008-01-29 18:29]

S3 klim5;Kaspersky Anti-Virus NDIS Filter;D:\WINDOWS\system32\DRIVERS\klim5.sys [2008-03-25 20:07]

S3 RTLWUSB;Realtek RTL8187 Wireless 802.11g 54Mbps USB 2.0 Network Adapter;D:\WINDOWS\system32\DRIVERS\RTL8187.sys [2006-05-22 13:35]

 

.

Zawartość folderu 'Zaplanowane zadania'

.

- - - - USUNIĘTO PUSTE WPISY - - - -

 

MSConfigStartUp-DAEMON Tools - E:\Programy\DAEMON Tools\daemon.exe

MSConfigStartUp-DAEMON Tools Pro Agent - E:\Programy\DAEMON Tools Pro\DTProAgent.exe

MSConfigStartUp-Orb - D:\Program Files\Winamp Remote\bin\OrbTray.exe

MSConfigStartUp-StxTrayMenu - D:\Program Files\Seagate\SystemTray\StxMenuMgr.exe

MSConfigStartUp-Twoje TVN24 - E:\Programy\Pasek TVN24\PasekTVN24.exe

 

 

.

------- Skan uzupełniający -------

.

FireFox -: Profile - D:\Documents and Settings\GreenGo\Dane aplikacji\Mozilla\Firefox\Profiles\ra0gog1v.default\

FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.wp.pl/

FF -: plugin - D:\Program Files\DivX\DivX Content Uploader\npUpload.dll

FF -: plugin - D:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

FF -: plugin - E:\Programy\Acrobat\Reader\browser\nppdf32.dll

FF -: plugin - E:\Programy\Real Alternative\browser\plugins\nppl3260.dll

FF -: plugin - E:\Programy\Real Alternative\browser\plugins\nprpjplug.dll

.

 

**************************************************************************

 

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-09-24 16:08:29

Windows 5.1.2600 Dodatek Service Pack 3 NTFS

 

skanowanie ukrytych procesów ...

 

skanowanie ukrytych wpisów autostartu ...

 

skanowanie ukrytych plików ...

 

skanowanie pomyślnie ukończone

ukryte pliki: 0

 

**************************************************************************

 

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\MySql]

"ImagePath"="c:\usr/MYSQL/bin/mysqld.exe"

.

------------------------ Pozostałe uruchomione procesy ------------------------

.

D:\WINDOWS\system32\nvsvc32.exe

D:\WINDOWS\system32\oodag.exe

D:\WINDOWS\system32\PSIService.exe

E:\Programy\Alcohol 120\StarWind\StarWindServiceAE.exe

D:\WINDOWS\system32\imapi.exe

.

**************************************************************************

.

Czas ukończenia: 2008-09-24 16:12:11 - komputer został uruchomiony ponownie

ComboFix-quarantined-files.txt 2008-09-24 14:12:06

 

Przed: 966˙090˙752 bajt˘w wolnych

Po: 1,521,754,112 bajt˘w wolnych

 

228 --- E O F --- 2008-09-24 12:47:24

 

 

» Naciśnij aby pokazać/ukryć tekst oznaczony jako spoiler « - "HijackThis"

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 15:40:55, on 2008-09-24

Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16705)

Boot mode: Normal

 

Running processes:

D:\WINDOWS\System32\smss.exe

D:\WINDOWS\system32\winlogon.exe

D:\WINDOWS\system32\services.exe

D:\WINDOWS\system32\lsass.exe

D:\WINDOWS\system32\svchost.exe

D:\WINDOWS\System32\svchost.exe

D:\WINDOWS\system32\spoolsv.exe

D:\WINDOWS\Explorer.EXE

D:\WINDOWS\system32\ctfmon.exe

E:\Programy\Kaspersky\avp.exe

D:\WINDOWS\system32\nvsvc32.exe

E:\Programy\Kaspersky\avp.exe

D:\WINDOWS\system32\oodag.exe

D:\WINDOWS\system32\PSIService.exe

E:\Programy\Alcohol 120\StarWind\StarWindServiceAE.exe

D:\WINDOWS\System32\svchost.exe

D:\WINDOWS\system32\wuauclt.exe

D:\Program Files\Mozilla Firefox\firefox.exe

E:\Programy\HijackThis\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Programy\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - E:\Programy\Kaspersky\ievkbd.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - E:\Programy\MSOFFI~1\Office12\GRA8E1~1.DLL

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\PROGRA~1\FlashGet\jccatch.dll

O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\fgiebar.dll

O4 - HKLM\..\Run: [AVP] "E:\Programy\Kaspersky\avp.exe"

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://E:\Programy\MSOFFI~1\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Ściągnij przy pomocy FlashGet'a - D:\Program Files\FlashGet\jc_link.htm

O8 - Extra context menu item: Ściągnij wszystko przy pomocy FlashGet'a - D:\Program Files\FlashGet\jc_all.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra button: Statystyki ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - E:\Programy\Kaspersky\SCIEPlgn.dll

O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\Programy\MSOFFI~1\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\Programy\MSOFFI~1\Office12\ONBttnIE.dll

O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\Programy\OFFICE~1\OFFICE11\REFIEBAR.DLL

O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe

O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1191864969812

O17 - HKLM\System\CCS\Services\Tcpip\..\{E84B2A5E-03D0-4E5A-B615-3D428111ABB8}: NameServer = 192.168.2.1

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - E:\Programy\MSOFFI~1\Office12\GR99D3~1.DLL

O20 - AppInit_DLLs: E:\Programy\KASPER~1\mzvkbd.dll

O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - E:\Programy\Kaspersky\avp.exe

O23 - Service: Macromedia Licensing Service - Unknown owner - D:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe

O23 - Service: NMIndexingService - Nero AG - D:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe

O23 - Service: O&O Defrag - O&O Software GmbH - D:\WINDOWS\system32\oodag.exe

O23 - Service: ProtexisLicensing - Unknown owner - D:\WINDOWS\system32\PSIService.exe

O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - E:\Programy\Alcohol 120\StarWind\StarWindServiceAE.exe

 

--

End of file - 6175 bytes

[Kolobos]

Wyglada ok.