Ctfnom.exe

[kali2114]

taki o to blad nie wiem co mam zrobic;/

log combofix:

ComboFix 09-01-19.05 - Administrator 2009-01-20 21:38:59.1 - NTFSx86Microsoft Windows XP Professional  5.1.2600.2.1250.1.1045.18.2047.1469 [GMT 1:00]Uruchomiony z: c:\downloads\ComboFix.exe * Utworzono nowy punkt przywracania.(((((((((((((((((((((((((((((((((((((((   Usunięto   ))))))))))))))))))))))))))))))))))))))))))))))))).c:\documents and settings\Administrator\Dane aplikacji\BITSc:\documents and settings\Administrator\Dane aplikacji\BITS\BITS.inic:\documents and settings\Administrator\Dane aplikacji\BITS\DHTTable.datc:\documents and settings\Administrator\Dane aplikacji\BITS\ProxyList.inic:\documents and settings\Administrator\Dane aplikacji\BITS\UPnP.inic:\program files\FlashGet Networkc:\program files\FlashGet Network\FlashGet universal\btcore.dllc:\program files\FlashGet Network\FlashGet universal\btwrap.dllc:\program files\FlashGet Network\FlashGet universal\BugReport.dllc:\program files\FlashGet Network\FlashGet universal\BugReport.exec:\program files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htmc:\program files\FlashGet Network\FlashGet universal\ComDlls\bhoCATCH.dllc:\program files\FlashGet Network\FlashGet universal\ComDlls\Bhocfg.inic:\program files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htmc:\program files\FlashGet Network\FlashGet universal\ComDlls\ComDlls.inic:\program files\FlashGet Network\FlashGet universal\ComDlls\flashget.xpic:\program files\FlashGet Network\FlashGet universal\ComDlls\FlashgetXpi.dllc:\program files\FlashGet Network\FlashGet universal\ComDlls\IFlashgetXpi.xptc:\program files\FlashGet Network\FlashGet universal\dbghelp.dllc:\program files\FlashGet Network\FlashGet universal\DBTrans.dllc:\program files\FlashGet Network\FlashGet universal\dbtrans_verbose.logc:\program files\FlashGet Network\FlashGet universal\DBTransC.exec:\program files\FlashGet Network\FlashGet universal\ed2kwrap.dllc:\program files\FlashGet Network\FlashGet universal\explorerbar.dllc:\program files\FlashGet Network\FlashGet universal\fgoption.inic:\program files\FlashGet Network\FlashGet universal\FGVer.dllc:\program files\FlashGet Network\FlashGet universal\flashget.exec:\program files\FlashGet Network\FlashGet universal\gt.exec:\program files\FlashGet Network\FlashGet universal\hashgen.dllc:\program files\FlashGet Network\FlashGet universal\Help\license.txtc:\program files\FlashGet Network\FlashGet universal\Help\Readme.txtc:\program files\FlashGet Network\FlashGet universal\Help\WHATSNEW.TXTc:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddBatchLinksDlg.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddBTTask.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\Added.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddEMTask.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddHpFpLink.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddLinksDlg.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddLinksDlgEx.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\AddLinksModern.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\BrowserPlugins.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\BTOption.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\CategoryView.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ComfirmWhenExitDialog.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\CommonDlg.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ConfirmInvalidLinks.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ContextMenu.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\DefaultDownloadsDialog.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\DeleteFilesDialog.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\DetailStatus.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\EMOption.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\EMServers.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ExplorerPane.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ExtensionRuleDlg.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FG2SearchTopPlugin.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FileListCtrl.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FileRemovedDialog.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FindTaskDialog.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FlashgetAbout.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FlashGetDlg.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\FSUStatusBar.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\GarageLoginDialog.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\GarageView.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\HotResource.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\HpFpOption.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\Info.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\LogsOutput.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\MACReader.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\MainMenu.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\MainToolbar.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\MonitorOption.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\NormalOption.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\NotifyOption.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\Option.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\P4PPluginMain.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\ProxySetting.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\SearchBar.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\Security.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\SecurityOption.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\SecurityScan.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\SecurityToolbar.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\Shutdown.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\StatusBar.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\TaskDefOption.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\TaskListView.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\TaskNotify.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\UserListCtrl.inic:\program files\FlashGet Network\FlashGet universal\Langs\FGXL_ENG\XpEnhance.inic:\program files\FlashGet Network\FlashGet universal\libupnp.dllc:\program files\FlashGet Network\FlashGet universal\LiveUpdateUI.dllc:\program files\FlashGet Network\FlashGet universal\modules\ComHelper\ComHelper.dllc:\program files\FlashGet Network\FlashGet universal\modules\ComHelper\Info.inic:\program files\FlashGet Network\FlashGet universal\modules\Downstat\Downstat.dllc:\program files\FlashGet Network\FlashGet universal\modules\Downstat\Info.inic:\program files\FlashGet Network\FlashGet universal\modules\P4pclient\Info.inic:\program files\FlashGet Network\FlashGet universal\modules\P4pclient\P4pclient.dllc:\program files\FlashGet Network\FlashGet universal\modules\P4pclient\Thumbs.dbc:\program files\FlashGet Network\FlashGet universal\modules\SearchTop\Info.inic:\program files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource.inic:\program files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource\iexplorer.bmpc:\program files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource\resource.bmpc:\program files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource\resource.xmlc:\program files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource\search.bmpc:\program files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource\subscribe.bmpc:\program files\FlashGet Network\FlashGet universal\modules\SearchTop\Resource\Thumbs.dbc:\program files\FlashGet Network\FlashGet universal\modules\SearchTop\SearchTop.dllc:\program files\FlashGet Network\FlashGet universal\modules\Security\FunctionalRepair.bmpc:\program files\FlashGet Network\FlashGet universal\modules\Security\Info.inic:\program files\FlashGet Network\FlashGet universal\modules\Security\Scanning.bmpc:\program files\FlashGet Network\FlashGet universal\modules\Security\Security.bmpc:\program files\FlashGet Network\FlashGet universal\modules\Security\SECURITY.dllc:\program files\FlashGet Network\FlashGet universal\modules\Security\Security.xmlc:\program files\FlashGet Network\FlashGet universal\modules\Security\SystemFix.bmpc:\program files\FlashGet Network\FlashGet universal\modules\SnapShot\Info.inic:\program files\FlashGet Network\FlashGet universal\modules\SnapShot\SamplerCli.dllc:\program files\FlashGet Network\FlashGet universal\modules\SnapShot\SnapShot.dllc:\program files\FlashGet Network\FlashGet universal\modules\tasknotifier\Info.inic:\program files\FlashGet Network\FlashGet universal\modules\tasknotifier\tasknotifier.dllc:\program files\FlashGet Network\FlashGet universal\P2PCfg.inic:\program files\FlashGet Network\FlashGet universal\P2PCore.dllc:\program files\FlashGet Network\FlashGet universal\p2pprot.dllc:\program files\FlashGet Network\FlashGet universal\p2snetio.dllc:\program files\FlashGet Network\FlashGet universal\p2spmgr.dllc:\program files\FlashGet Network\FlashGet universal\p2spmgr.inic:\program files\FlashGet Network\FlashGet universal\p2sprot.dllc:\program files\FlashGet Network\FlashGet universal\p2spwrap.dllc:\program files\FlashGet Network\FlashGet universal\p4spmgr.inic:\program files\FlashGet Network\FlashGet universal\Profiles\config.datc:\program files\FlashGet Network\FlashGet universal\Profiles\tasks.datc:\program files\FlashGet Network\FlashGet universal\Skins\close_default.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\close_press.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\close_select.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\max_default.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\max_press.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\max_select.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\min_default.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\min_press.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\min_select.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\notify.wavc:\program files\FlashGet Network\FlashGet universal\Skins\notify_board.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\notify_icon.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarCT\Back.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarCT\Backward.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarCT\BrowserBarCT.xmlc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarCT\FlashgetResource.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarCT\Forward.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarCT\Home.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarDisableCT\Backward.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarDisableCT\BrowserBarDisableCT.xmlc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarDisableCT\Forward.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarDisableCT\Home.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\BrowserBarDisableCT\Resource.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Available.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\CategoryTreeCT.xmlc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Downloaded.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Downloading.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Favorite.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Flashget.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Release.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Rubbish.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\CategoryTreeCT\Search.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\ExpBar\Expbar.xmlc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\ExpBar\garage.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\ExpBar\resource.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\ExpBar\transfer.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\BT.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\EM.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\GlobalOptionCT.xmlc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\HpFp.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\Monitor.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\Normal.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\Notify.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\Proxy.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\GlobalOptionCT\TaskDef.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\Info.inic:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\About.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\DeleteTask.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\folder.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\MainMenuCT.xmlc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\MoveDownTask.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\MoveUpTask.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\NewTask.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\open.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\Option.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\PauseTask.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\Resource.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\StartTask.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainMenuCT\TaskProperties.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\About.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\DeleteTask.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\Folder.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\MainToolbarCT.xmlc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\NewTask.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\Open.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\Option.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\PauseTask.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\Resource.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\StartTask.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarCT\TaskProperties.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\About.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\DeleteTask.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\Folder.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\MainToolbarDisableCT.xmlc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\NewTask.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\Open.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\Option.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\PauseTask.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\Resource.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\StartTask.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\MainToolbarDisableCT\TaskProperties.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\Monitor\InfoBkg.Bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\Monitor\MonitorBkg.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\OutpuLogCT\Down.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\OutpuLogCT\Error.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\OutpuLogCT\Normal.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\OutpuLogCT\OutpuLogCT.xmlc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\OutpuLogCT\Up.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\All.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Book.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Bt.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Game.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Movie.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Music.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Phone.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Picture.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\SobarIconCT.xmlc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\SobarIconCT\Software.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Error.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\hashing.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\OK.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Pause.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Pin.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Schedule.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Start.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\TaskListCT.xmlc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Upload.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\ShadowGrayBlue\TaskListCT\Wait.bmpc:\program files\FlashGet Network\FlashGet universal\Skins\Thumbs.dbc:\program files\FlashGet Network\FlashGet universal\storage.dllc:\program files\FlashGet Network\FlashGet universal\SysOpt.exec:\program files\FlashGet Network\FlashGet universal\transaction.logc:\program files\FlashGet Network\FlashGet universal\uninst.exec:\program files\FlashGet Network\FlashGet universal\zlib.dllc:\windows\AppPatch\Custom\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdbc:\windows\system32\AutoRun.inf.(((((((((((((((((((((((((   Pliki utworzone od 2008-12-20 do 2009-01-20  ))))))))))))))))))))))))))))))).2009-01-20 21:33 . 2009-01-20 21:33	<DIR>	d--------	c:\program files\Dragonmount Networks2008-12-31 00:06 . 2008-12-31 00:06	<DIR>	d--------	c:\documents and settings\Administrator\Dane aplikacji\InstallShield2008-12-30 17:49 . 2008-12-30 19:37	<DIR>	d--------	c:\program files\ĐÂÁúľÔ2008-12-30 14:59 . 2008-12-30 14:59	<DIR>	d--------	c:\program files\Google2008-12-30 14:59 . 2008-12-30 14:59	<DIR>	d--------	C:\profiles2008-12-30 14:59 . 2009-01-20 21:31	<DIR>	d--------	C:\Downloads2008-12-30 01:05 . 2008-12-30 01:05	<DIR>	d--------	c:\program files\Hamachi2008-12-30 01:05 . 2009-01-20 21:06	<DIR>	d--------	c:\documents and settings\Administrator\Dane aplikacji\Hamachi2008-12-30 01:05 . 2008-12-30 01:05	25,280	--a------	c:\windows\system32\drivers\hamachi.sys2008-12-27 17:22 . 2009-01-20 11:16	664	--a------	c:\windows\system32\d3d9caps.dat2008-12-26 23:16 . 2008-12-30 01:05	<DIR>	d--------	C:\Temp2008-12-26 23:15 . 2008-12-26 23:15	<DIR>	d--------	c:\program files\Xilisoft2008-12-26 23:04 . 2008-12-26 23:04	<DIR>	d--------	c:\program files\Common Files\Download Manager2008-12-26 02:28 . 2008-12-26 02:28	<DIR>	d--------	c:\documents and settings\All Users\Dane aplikacji\ipla2008-12-26 02:28 . 2008-12-26 02:30	<DIR>	d--------	c:\documents and settings\Administrator\Dane aplikacji\ipla2008-12-26 02:27 . 2008-12-26 02:27	<DIR>	d--------	c:\program files\ipla2008-12-26 02:27 . 2008-12-26 02:27	1,700,352	--a------	c:\windows\system32\gdiplus.dll2008-12-25 15:11 . 2001-08-17 22:02	9,600	--a------	c:\windows\system32\drivers\hidusb.sys2008-12-23 20:26 . 2008-12-24 03:26	<DIR>	d--------	C:\Fraps2008-12-23 20:26 . 2008-12-23 23:20	<DIR>	d-a------	c:\documents and settings\All Users\Dane aplikacji\TEMP2008-12-22 13:01 . 2008-12-22 13:01	<DIR>	d--------	c:\windows\system32\Adobe2008-12-20 00:30 . 2008-12-20 00:30	81,920	--a------	c:\windows\system32\frapsvid.dll.((((((((((((((((((((((((((((((((((((((((   Sekcja Find3M   )))))))))))))))))))))))))))))))))))))))))))))))))))).2009-01-20 20:33	---------	d-----w	c:\program files\Dragonmount Networks2009-01-06 15:52	---------	d-----w	c:\program files\NAPI-PROJEKT2008-12-30 23:06	---------	d--h--w	c:\program files\InstallShield Installation Information2008-12-27 20:53	---------	d-----w	c:\documents and settings\Administrator\Dane aplikacji\GanymedeNet2008-12-26 21:03	---------	d-----w	c:\program files\Ganymede2008-12-20 09:10	---------	d-----w	c:\program files\Gadu-Gadu2008-12-19 07:03	---------	d-----w	c:\documents and settings\Administrator\Dane aplikacji\teamspeak22008-12-05 12:18	---------	d-----w	c:\program files\Teamspeak2_RC22008-12-01 15:36	---------	d-----w	c:\program files\Common Files\Adobe AIR2008-12-01 15:36	---------	d-----w	c:\program files\Common Files\Adobe2008-11-27 19:26	183,112	----a-w	c:\windows\system32\PnkBstrB.exe2008-11-27 19:26	138,184	----a-w	c:\windows\system32\drivers\PnkBstrK.sys2008-11-21 13:52	---------	d-----w	c:\documents and settings\Administrator\Dane aplikacji\Ahead2008-11-21 13:09	107,888	----a-w	c:\windows\system32\CmdLineExt.dll2008-11-21 13:09	---------	d--h--r	c:\documents and settings\Administrator\Dane aplikacji\SecuROM2008-11-21 10:16	---------	d-----w	c:\documents and settings\All Users\Dane aplikacji\LightScribe2008-11-21 10:11	---------	d-----w	c:\program files\Common Files\LightScribe2008-11-21 10:09	---------	d-----w	c:\program files\Common Files\Ahead2008-11-21 10:09	---------	d-----w	c:\documents and settings\All Users\Dane aplikacji\Ahead2008-11-21 10:07	---------	d-----w	c:\program files\Nero2008-11-21 10:07	---------	d-----w	c:\documents and settings\All Users\Dane aplikacji\Nero2008-11-20 22:01	---------	d-----w	c:\documents and settings\Administrator\Dane aplikacji\DivX2008-11-20 21:58	---------	d-----w	c:\program files\ygoow2008-11-20 15:58	66,872	----a-w	c:\windows\system32\PnkBstrA.exe2008-11-20 15:51	5,686	----a-w	c:\windows\system32\ealregsnapshot1.reg2008-11-20 15:51	---------	d-----w	c:\program files\Common Files\InstallShield2008-11-20 15:51	---------	d-----w	c:\documents and settings\Administrator\Dane aplikacji\Leadertech2008-11-17 08:08	315,392	----a-w	c:\windows\HideWin.exe2008-10-28 22:36	823,296	----a-w	c:\windows\system32\divx_xx0c.dll2008-10-28 22:36	823,296	----a-w	c:\windows\system32\divx_xx07.dll2008-10-28 22:35	815,104	----a-w	c:\windows\system32\divx_xx0a.dll2008-10-28 22:35	802,816	----a-w	c:\windows\system32\divx_xx11.dll2008-10-28 22:35	684,032	----a-w	c:\windows\system32\DivX.dll2008-03-09 06:25	236	---ha-w	c:\program files\Common Files\dx.reg.------- Sigcheck -------2007-07-10 14:06  642560  ce594e18fe0d0af804f1f3694921ce62	c:\windows\system32\user32.dll2007-07-13 23:56  814592  ce7193c5f7c01b19768e066087c1c919	c:\windows\system32\wininet.dll2007-07-28 02:15  360576  0fb6743e937c7bb248b2530a5a77abc6	c:\windows\system32\drivers\tcpip.sys2007-07-26 18:30  2145792  316acc3ac43fc855204ce5e775f66b91	c:\windows\system32\ntoskrnl.exe2007-07-13 23:42  974848  32f67215c57df2c401bf93b7ee65987f	c:\windows\explorer.exe.(((((((((((((((((((((((((((((((((((((   Wpisy startowe rejestru   ))))))))))))))))))))))))))))))))))))))))))))))))))..*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane  REGEDIT4[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360]"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-08-23 455968]"IPLA!"="c:\program files\ipla\ipla.exe" [2008-12-23 2794232]"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-01-01 68856][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2008-11-02 167936]"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]"SecurDisc"="c:\program files\Nero\Nero 7\InCD\NBHGui.exe" [2007-06-25 1629480]"InCD"="c:\program files\Nero\Nero 7\InCD\InCD.exe" [2007-06-25 1057064]"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]"SkyTel"="SkyTel.EXE" [2006-05-16 c:\windows\SkyTel.exe]"RTHDCPL"="RTHDCPL.EXE" [2007-01-30 c:\windows\RTHDCPL.exe][HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360][HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]"nltide_2"="shell32" [X]"nltide_3"="advpack.dll" [2007-07-27 c:\windows\system32\advpack.dll]c:\documents and settings\Administrator\Menu Start\Programy\Autostart\hamachi.lnk - c:\program files\Hamachi\hamachi.exe [2008-12-30 625952][HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]"DisableStatusMessages"= 1 (0x1)[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]"NoSMMyPictures"= 1 (0x1)"NoSMConfigurePrograms"= 1 (0x1)"NoSMHelp"= 1 (0x1)"NoResolveTrack"= 1 (0x1)[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]"NoSMMyPictures"= 1 (0x1)"NoSMConfigurePrograms"= 1 (0x1)"NoSMHelp"= 1 (0x1)"NoResolveTrack"= 1 (0x1)[HKEY_LOCAL_MACHINE\software\microsoft\security center]"AntiVirusDisableNotify"=dword:00000001"AntiVirusOverride"=dword:00000001[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\system32\\sessmgr.exe"="f:\\Metin2\\metin2.bin"="c:\\Program Files\\Gadu-Gadu\\gg.exe"="f:\\q3 instagib\\q3.exe"="f:\\Metin2\\Metin.exe"="c:\\WINDOWS\\system32\\dpvsetup.exe"="f:\\PES 2009\\pes2009.exe"="c:\\Documents and Settings\\Administrator\\Pulpit\\q3 instagib\\q3.exe"="f:\\Quake III Arena\\quake3.exe"="f:\\Rainbow Six\\Binaries\\R6Vegas_Game.exe"="f:\\Rainbow Six\\Binaries\\R6Vegas_Launcher.exe"="c:\\Program Files\\Opera\\opera.exe"="c:\\Program Files\\Dragonmount Networks\\dIRC\\dIRC.exe"=S3 SetupNTGLM7X;SetupNTGLM7X;\??\g:\ntglm7x.sys --> g:\NTGLM7X.sys [?][HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G]\Shell\AutoRun\command - G:\Setup.exe[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2a13cf7a-b610-11dd-90f4-0019db8167ef}]\Shell\AutoRun\command - I:\gxhqyn.exe\Shell\explore\Command - I:\gxhqyn.exe\Shell\open\Command - I:\gxhqyn.exe[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2a13cf7b-b610-11dd-90f4-0019db8167ef}]\Shell\AutoRun\command - gxhqyn.exe\Shell\explore\Command - gxhqyn.exe\Shell\open\Command - gxhqyn.exe[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{35947c2c-c5ed-11dd-912d-0019db8167ef}]\Shell\AutoRun\command - I:\AutoRun.exe[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9791eb89-c605-11dd-912e-0019db8167ef}]\Shell\AutoRun\command - I:\gxhqyn.exe\Shell\explore\Command - I:\gxhqyn.exe\Shell\open\Command - I:\gxhqyn.exe[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]"c:\program files\Common Files\LightScribe\LSRunOnce.exe".- - - - USUNIĘTO PUSTE WPISY - - - -HKLM-Run-WinampAgent - c:\program files\Winamp\winampa.exeHKLM-Run-FlashGet - c:\program files\FlashGet Network\FlashGet universal\FlashGet.exeHKLM-Explorer_Run-ctfmom - c:\windows\system32\ctfnom.exe.------- Skan uzupełniający -------.uStart Page = about:blankIE: &Download All by FlashGet - c:\program files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htmIE: &Download by FlashGet - c:\program files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm.**************************************************************************catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.netRootkit scan 2009-01-20 21:39:54Windows 5.1.2600 Dodatek Service Pack 2 NTFSskanowanie ukrytych procesów ...  skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ...  skanowanie pomyślnie ukończoneukryte pliki: 0**************************************************************************.--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------[HKEY_USERS\Administrator\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]"??"=hex:7e,cc,1f,ef,06,0c,29,66,64,7e,35,bb,a0,66,a7,31,dd,72,40,56,01,d7,7b,   a2,d3,03,b5,8e,94,15,3d,42,8d,9e,df,b5,62,85,f9,0f,9c,8f,d0,59,fe,0a,57,fd,\"??"=hex:52,2a,67,8d,f7,d7,ca,6c,89,d4,fe,91,14,8a,15,dc[HKEY_USERS\Administrator\Software\SecuROM\License information*]"datasecu"=hex:5b,d9,ed,ea,0e,13,3a,ed,ff,36,df,74,94,e1,79,c9,e3,96,1d,1a,86,   73,79,7b,18,dc,99,c1,e8,9c,19,7d,98,5a,3c,d8,be,1f,6f,5e,30,31,18,a5,4f,25,\"rkeysecu"=hex:d7,fb,b5,c7,c2,68,21,a5,01,68,2f,93,2f,37,f9,d4.--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------- - - - - - - > 'winlogon.exe'(860)c:\windows\system32\Ati2evxx.dllc:\windows\system32\cscui.dll.Czas ukończenia: 2009-01-20 21:40:29ComboFix-quarantined-files.txt  2009-01-20 20:40:28Przed: 1 831 522 304 bajtów wolnychPo: 2,962,141,184 bajtów wolnychWindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe[boot loader]timeout=2default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS[operating systems]c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdconsmulti(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /usepmtimer447

[Kolobos]

Usun z dysku:

c:\program files\ĐÂÁúľÔ

 

Podlacz zainfekowane pendrive'y i uzyj Flash Disinfector.

 

Wklej do notatnika:

REGEDIT4

 

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2a13cf7a-b610-11dd-90f4-0019db8167ef}]

 

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2a13cf7b-b610-11dd-90f4-0019db8167ef}]

 

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9791eb89-c605-11dd-912e-0019db8167ef}]

 

Zapisz jako fix.reg i uruchom.

 

Zablokuj tez dostep do klucza mountpoints2:

http://www.searchengines.pl/Infekcje-z-pen...ych-t94761.html

Opis masz na dole strony.

[kali2114]

Pomogło dziekuje :):):)