Nie Widze Nic Na D:\

jayeti · 5 Lutego 2010

Witam! Mam problem otoz ostatnio na serwerze pojawilo mi sie 16 500plikow (serwer z samba zapis/odczyt) wchodze do siebie na kompa Win XP patrze a tu nie widac w ogole dysku D tzn ok wchodze na D ale nie ma zadnych plikow, dodam ze system wlasnie tam stoi, zadnego antywira nie moge zaintalowac bo zaraz wylacza sie instalka.

A jak juz puscilem skaner online mks to nic nie wykryl bo nie widzial plikow na D:/ choc one tam sa.

Edytowane 5 Lutego 2010 przez Kolobos

**ULLISSES** · 5 Lutego 2010

1. Przeczytaj przyklejony temat.

D:\WINDOWS\system32\devldr32.exe

D:\DOCUME~1\rafal\USTAWI~1\Temp\winwpgmi.exe

D:\DOCUME~1\rafal\USTAWI~1\Temp\winepouko.exe

D:\DOCUME~1\rafal\USTAWI~1\Temp\w29c898.exe

?

3. Tryb awaryjny, instalacja Aviry + Spybota (tudzież MBAM lub DrWeb).

jayeti · 5 Lutego 2010

no niestety wywala blue screen cos tam ..0007B jak chce wejsc w awaryjny mam laptopa i PC i na obu to samo...

kasperkiego nie da sie zainstalowac w ogole jak wykrywa ze szukam go w necie to odcina neta tzn zamula tak ze wkoncu strona sie nie wczytuje...

ma ktos jakis pomysl oprocz formata calego dysku?

**ULLISSES** · 5 Lutego 2010

1. Jak masz jakieś pojęcie o tym, co powinno znajdować się na partycji systemowej, a co nie, to odpal pierwszego lepszego Linuxa livecd (np Ubuntu), dostań się na dyski i pousuwaj wszystkie podejrzane pliki.

Dziwaczne pliki z rozszerzeniem exe oraz wszelkie autorun.inf.

Na dysku C w przypadku XP ważne jest tylko:

Documents and SettingsProgram filesWindowsboot.inibootfont.binNTDETECT.COMntldr

Resztę teoretycznie możesz spokojnie skasować. Na pozostałych dyskach nie powinno być żadnych plików luzem (poza Twoimi).

Usuń przy okazji foldery:

C:\Documents and Settings\User\Ustawienia lokalne\Temp

C:\Documents and Settings\User\Ustawienia lokalne\Temporary Internet Files

C:\WINDOWS\Temp

Gdzie User to nazwa Twojego konta w Windows.

2. Jak masz płytkę z XP pod ręką, to skorzystaj z opcji naprawy - puszczasz instalkę i podczas niej, po wybraniu dysku z Windows masz "Wciśnij R aby naprawić bieżącą instalację Windows". Jak masz jakiegoś MX7 lub innego obciętego Windowsa, to tej opcji może nie być.

3. Pobierz ten plik, zapisz na dysku (gdziekolwiek) i uruchom. Powinno trochę posprzątać na dysku. Na chwilę zniknie pulpit.

jayeti · 5 Lutego 2010

pojecie mniej wiecej mam sciagne tylko linuxa 8O ale czy linux widzi partycje NTFS?

co do R to zawsze kiedy to wciskalem wyskakiwal mi CMD i to wszystko...

**ULLISSES** · 5 Lutego 2010

Bo to nie to R. Jest "drugie" R. Wtedy instalka leci tak samo, ale nie kasuje Twoich danych i ustawień. Tak to wygląda w wersji angielskiej. PL-ki nie mogę natrafić na Google. Ty mówisz natomiast o tym.

Nowsze distra bez problemu obsługują NTFS (odczyt/zapis). Nie wiem jak 9.10, ale w 9.04 dostęp do dysków jest od razu na pulpicie po odpaleniu opcji "Uruchom system bez instalacji na dysku" (czy jak to tam leci).

Jak obsługa Total Commander lub Norton Commander nie jest Ci obca, to na Avira Rescue CD jest dostęp do konsoli oraz programu Midnight Commander. Tam na pewno jest dostęp do wszystkich partycji w systemie - nawet na dyskach SATA. Nie trzeba nic moutować i klepać po konsoli. Odplasz płytkę opcjami 4 lub 5 (w zależności od rozdzielczości), przełączasz na Opcje, potem Console, potem MC[Enter] i jesteś. Dyski są w /MNT.

Kolobos · 5 Lutego 2010

Moze jednak zastosuj sie do tego zanim zaczniesz zabawy z linuksami itp: http://forum.purepc.pl/Centrum-Bezpieczens...aj-t312048.html

**ULLISSES** · 5 Lutego 2010

Racja. W sumie log OTL by nie zawadził.

Ważne:

Jak udało Ci się zainstalować Avirę, to nie odpalaj GMER - nie wiem, czy na każdym kompie, ale na moim zupełnie nie chcą współpracować. Avira nawet po zatrzymaniu ochrony, dostaje szału i na priorytecie realtime coś próbuje grzebać zmulając całkowicie kompa. Dziś przez przypadek odpaliłem i skończyło się na [reset] po zwisie z napisem "trwa wylogowanie".

jayeti · 6 Lutego 2010

a wiec avire rowniez kickuje

OTL logfile created on: 2010-02-06 21:56:30 - Run 1OTL by OldTimer - Version 3.1.28.0	 Folder = D:\Documents and Settings\rafal\Moje dokumenty\PobieranieWindows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstationInternet Explorer (Version = 7.0.5730.13)Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 55,00% Memory free3,00 Gb Paging File | 3,00 Gb Available in Paging File | 88,00% Paging File freePaging file location(s): D:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Program FilesDrive C: | 19,53 Gb Total Space | 3,30 Gb Free Space | 16,87% Space Free | Partition Type: NTFSDrive D: | 43,95 Gb Total Space | 12,74 Gb Free Space | 28,99% Space Free | Partition Type: NTFSDrive E: | 48,30 Gb Total Space | 8,09 Gb Free Space | 16,75% Space Free | Partition Type: NTFSF: Drive not present or media not loadedG: Drive not present or media not loadedH: Drive not present or media not loadedI: Drive not present or media not loadedDrive K: | 1,49 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: RAFAL2Current User Name: rafalLogged in as Administrator. Current Boot Mode: NormalScan Mode: Current userCompany Name Whitelist: OffSkip Microsoft Files: OffFile Age = 30 DaysOutput = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010-02-06 21:56:05 | 000,549,376 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\rafal\Moje dokumenty\Pobieranie\OTL.exePRC - [2010-02-05 22:07:51 | 000,035,328 | ---- | M] () -- D:\WINDOWS\temp\w29219a.exePRC - [2010-02-05 22:02:24 | 000,012,288 | ---- | M] () -- D:\WINDOWS\temp\winhavr.exePRC - [2010-02-05 21:27:20 | 000,008,192 | ---- | M] () -- D:\WINDOWS\temp\lnno.exePRC - [2010-01-08 09:44:50 | 000,908,248 | ---- | M] (Mozilla Corporation) -- D:\Program Files\Mozilla Firefox\firefox.exePRC - [2009-12-13 12:04:38 | 000,136,176 | ---- | M] (Google Inc.) -- D:\Documents and Settings\rafal\Ustawienia lokalne\Dane aplikacji\Google\Update\1.2.183.13\GoogleCrashHandler.exePRC - [2009-09-27 17:19:46 | 000,172,100 | ---- | M] (NVIDIA Corporation) -- D:\WINDOWS\system32\nvsvc32.exePRC - [2009-05-13 15:48:22 | 000,108,289 | ---- | M] (Avira GmbH) -- D:\Program Files\Avira\AntiVir Desktop\sched.exePRC - [2008-10-15 17:13:58 | 000,521,552 | ---- | M] (RealVNC Ltd.) -- D:\Program Files\RealVNC\VNC4\winvnc4.exePRC - [2008-05-17 13:36:34 | 001,503,232 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\explorer.exePRC - [2008-03-20 11:04:46 | 002,201,024 | ---- | M] (Gadu-Gadu S.A.) -- D:\Program Files\Gadu-Gadu7\gg.exePRC - [2001-10-26 15:29:52 | 000,024,064 | ---- | M] (Creative Technology Ltd.) -- D:\WINDOWS\system32\devldr32.exe  [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010-02-06 21:56:05 | 000,549,376 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\rafal\Moje dokumenty\Pobieranie\OTL.exeMOD - [2010-02-05 21:23:43 | 000,081,920 | ---- | M] () -- D:\WINDOWS\system32\mq675703.dllMOD - [2006-12-21 13:30:44 | 000,102,400 | ---- | M] (Gadu-Gadu S.A.) -- D:\Program Files\Gadu-Gadu7\ggwhook.dll  [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] --  -- (TFTPServer)SRV - File not found [On_Demand | Stopped] --  -- (CiSvc)SRV - [2010-01-10 12:55:14 | 000,688,128 | ---- | M] (eBoostr.com) [Auto | Stopped] -- D:\Program Files\eBoostr\EBstrSvc.exe -- (EBOOSTRSVC)SRV - [2009-12-31 00:24:34 | 000,703,488 | ---- | M] (FileZilla Project) [Auto | Stopped] -- D:\Program Files\FileZilla Server\FileZilla Server.exe -- (FileZilla Server)SRV - [2009-10-29 12:27:54 | 001,074,568 | ---- | M] (LogMeIn Inc.) [Auto | Stopped] -- D:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)SRV - [2009-09-27 17:19:46 | 000,172,100 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- D:\WINDOWS\system32\nvsvc32.exe -- (NVSvc)SRV - [2009-07-21 13:34:33 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Stopped] -- D:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)SRV - [2009-05-13 15:48:22 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- D:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)SRV - [2008-10-15 17:13:58 | 000,521,552 | ---- | M] (RealVNC Ltd.) [Auto | Running] -- D:\Program Files\RealVNC\VNC4\WinVNC4.exe -- (WinVNC4)SRV - [2008-07-22 12:38:33 | 000,025,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\wuauserv.dll -- (wuauserv)SRV - [2007-05-28 17:57:54 | 000,333,312 | ---- | M] (Rocket Division Software) [Auto | Stopped] -- D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)SRV - [2007-03-21 19:57:56 | 000,573,440 | ---- | M] (Locktime Software) [Auto | Stopped] -- D:\Program Files\NetLimiter 2 Pro\nlsvc.exe -- (nlsvc)SRV - [2004-12-13 03:34:32 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Stopped] -- D:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)  [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2010-02-05 21:24:12 | 000,005,669 | ---- | M] () [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\mkfooo.sys -- (abp470n5)DRV - [2010-02-03 17:31:59 | 000,005,077 | ---- | M] () [Kernel | Auto | Stopped] -- D:\WINDOWS\system32\drivers\qpgmon.sys -- (MCIDRV_2600_6_0)DRV - [2010-02-03 17:28:27 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- D:\WINDOWS\system32\drivers\sptd.sys -- (sptd)DRV - [2009-09-27 15:12:22 | 007,655,872 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)DRV - [2009-09-23 10:41:58 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)DRV - [2009-08-05 20:37:04 | 000,039,112 | ---- | M] (GBM Software) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\GRemoteJoy.sys -- (GRemoteJoy)DRV - [2009-08-05 20:37:04 | 000,023,368 | ---- | M] (GBM Software) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\GRemoteBus.sys -- (GRemoteBus)DRV - [2009-07-28 15:33:56 | 000,055,656 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- D:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)DRV - [2009-06-15 14:01:00 | 000,128,016 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- D:\WINDOWS\system32\drivers\kl1.sys -- (kl1)DRV - [2009-05-16 20:59:44 | 000,019,472 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\klmouflt.sys -- (klmouflt)DRV - [2009-05-13 17:46:52 | 000,031,760 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\klim5.sys -- (klim5)DRV - [2009-05-11 09:12:24 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- D:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)DRV - [2009-03-30 09:33:07 | 000,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)DRV - [2009-02-13 11:35:05 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- D:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)DRV - [2009-01-28 12:34:02 | 000,125,544 | ---- | M] (eBoostr.com) [File_System | Boot | Running] -- D:\WINDOWS\system32\drivers\eBoost.sys -- (eBoost)DRV - [2008-12-15 20:41:32 | 000,033,808 | ---- | M] (Kaspersky Lab) [File_System | Boot | Running] -- D:\WINDOWS\system32\drivers\klbg.sys -- (klbg)DRV - [2008-04-13 23:26:50 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\usb8023x.sys -- (usb_rndisx)DRV - [2008-04-13 23:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)DRV - [2008-04-13 23:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) Sterownik audio USB (WDM)DRV - [2008-04-13 21:09:18 | 000,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)DRV - [2008-03-31 15:12:16 | 000,073,728 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- D:\Program Files\UltraISO\drivers\ISODrive.sys -- (ISODrive)DRV - [2007-04-23 12:03:04 | 000,082,200 | ---- | M] (Locktime Software) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\nltdi.sys -- (nltdi)DRV - [2007-03-26 14:46:30 | 010,252,544 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\snpstd3.sys -- (SNPSTD3) USB PC Camera (SNPSTD3)DRV - [2006-11-06 18:04:56 | 000,028,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\wceusbsh.sys -- (wceusbsh)DRV - [2006-10-18 10:38:38 | 000,009,728 | ---- | M] (Leadtek Research Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\cxavxbar.sys -- (CXAVXBAR)DRV - [2006-10-18 10:37:56 | 000,050,816 | ---- | M] (Leadtek Research Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\cx88tune.sys -- (CXTUNE)DRV - [2006-10-18 10:37:26 | 000,162,944 | ---- | M] (Leadtek Research Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\cx88vid.sys -- (CX23880)DRV - [2006-05-10 10:33:00 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)DRV - [2006-02-26 16:21:16 | 000,007,311 | ---- | M] (ALi Corporation) [Kernel | Boot | Running] -- D:\WINDOWS\system32\DRIVERS\aliide.sys -- (AliIde)DRV - [2006-02-26 16:19:20 | 000,028,672 | ---- | M] (ULi Electronics Inc.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ULILAN51.SYS -- (ULI5261XP)DRV - [2006-02-26 16:03:02 | 000,045,056 | ---- | M] (ULi Electronics Inc.) [Kernel | Boot | Running] -- D:\WINDOWS\system32\DRIVERS\agpkx.sys -- (uliagpkx)DRV - [2005-07-04 13:21:00 | 000,052,480 | ---- | M] (ULi Electronics Inc.) [Kernel | Boot | Running] -- D:\WINDOWS\system32\DRIVERS\m5289.sys -- (m5289)DRV - [2005-01-06 15:55:38 | 000,009,446 | ---- | M] (Leadtek Research Inc.) [Kernel | On_Demand | Stopped] -- D:\Program Files\WinFast\WFDTV\WFIOCTL.sys -- (WFIOCTL)DRV - [2004-12-23 16:27:56 | 000,027,392 | ---- | M] (Ulead Systems, Inc.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ULCDRHlp.sys -- (ULCDRHlp)DRV - [2001-08-23 13:00:00 | 000,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink)DRV - [2001-08-17 19:19:34 | 000,036,480 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\sfmanm.sys -- (sfman) Sterownik Creative SoundFont Manager (WDM)DRV - [2001-08-17 19:19:28 | 000,006,912 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ctlfacem.sys -- (emu10k1) Sterownik Creative Interface Manager (WDM)DRV - [2001-08-17 19:19:26 | 000,283,904 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\emu10k1m.sys -- (emu10k) Creative SB Live! (WDM)  [color=#E56717]========== Standard Registry (SafeList) ==========[/color]  [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htmIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = GoogleIE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%sIE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Ask.com"FF - prefs.js..browser.search.defaultenginename: "Ask.com"FF - prefs.js..browser.search.order.1: "Ask.com"FF - prefs.js..browser.search.selectedEngine: "Google"FF - prefs.js..browser.search.useDBForOrder: trueFF - prefs.js..browser.startup.homepage: "google.pl"FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1.3FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.1.0014FF - prefs.js..extensions.enabledItems: {7f57cf46-4467-4c2d-adfa-0cba7c507e54}:0.17.2.0FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:9.0.0.463FF - prefs.js..keyword.URL: "" FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2010-01-16 13:59:50 | 000,000,000 | ---D | M]FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins [2010-01-08 09:45:01 | 000,000,000 | ---D | M] [2009-10-18 11:40:41 | 000,000,000 | ---D | M] -- D:\Documents and Settings\rafal\Dane aplikacji\Mozilla\Extensions[2010-02-05 22:30:36 | 000,000,000 | ---D | M] -- D:\Documents and Settings\rafal\Dane aplikacji\Mozilla\Firefox\Profiles\w8nfczls.default\extensions[2009-12-18 21:22:40 | 000,000,000 | ---D | M] (Mozilla Archive Format) -- D:\Documents and Settings\rafal\Dane aplikacji\Mozilla\Firefox\Profiles\w8nfczls.default\extensions\{7f57cf46-4467-4c2d-adfa-0cba7c507e54}[2010-01-10 01:33:07 | 000,000,000 | ---D | M] (Adblock Plus) -- D:\Documents and Settings\rafal\Dane aplikacji\Mozilla\Firefox\Profiles\w8nfczls.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}[2009-12-23 17:42:08 | 000,000,000 | ---D | M] (Torbutton) -- D:\Documents and Settings\rafal\Dane aplikacji\Mozilla\Firefox\Profiles\w8nfczls.default\extensions\{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}[2009-12-19 15:01:13 | 000,000,000 | ---D | M] (Page Speed) -- D:\Documents and Settings\rafal\Dane aplikacji\Mozilla\Firefox\Profiles\w8nfczls.default\extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97}[2010-02-03 17:06:17 | 000,000,000 | ---D | M] -- D:\Documents and Settings\rafal\Dane aplikacji\Mozilla\Firefox\Profiles\w8nfczls.default\extensions\DTToolbar@toolbarnet.com[2009-11-02 22:03:12 | 000,002,257 | ---- | M] () -- D:\Documents and Settings\rafal\Dane aplikacji\Mozilla\Firefox\Profiles\w8nfczls.default\searchplugins\askcom.xml[2010-02-03 17:06:12 | 000,002,055 | ---- | M] () -- D:\Documents and Settings\rafal\Dane aplikacji\Mozilla\Firefox\Profiles\w8nfczls.default\searchplugins\daemon-search.xml[2010-02-05 22:30:36 | 000,000,000 | ---D | M] -- D:\Program Files\Mozilla Firefox\extensions[2010-02-05 00:32:03 | 000,000,000 | ---D | M] -- D:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru[2009-11-16 16:13:16 | 000,120,296 | ---- | M] ( ) -- D:\Program Files\Mozilla Firefox\plugins\npganymedenet.dll[2010-01-08 09:44:55 | 000,002,767 | ---- | M] () -- D:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml[2010-01-08 09:44:55 | 000,001,406 | ---- | M] () -- D:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml[2010-01-08 09:44:55 | 000,000,917 | ---- | M] () -- D:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml[2010-01-08 09:44:55 | 000,000,858 | ---- | M] () -- D:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml[2010-01-08 09:44:55 | 000,001,183 | ---- | M] () -- D:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml[2010-01-08 09:44:55 | 000,001,683 | ---- | M] () -- D:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-01-16 21:40:22 | 000,000,027 | ---- | M]) - D:\WINDOWS\system32\drivers\etc\hostsO1 - Hosts: 127.0.0.1	   localhostO3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - D:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()O4 - HKLM..\Run: [avgnt] D:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)O4 - HKLM..\Run: [NvCplDaemon] D:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)O4 - HKCU..\Run: [Gadu-Gadu] D:\Program Files\Gadu-Gadu7\gg.exe (Gadu-Gadu S.A.)O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRemoteRecursiveEvents = 1O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousMachineGroupPolicy = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousUserGroupPolicy = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1O15 - HKCU\..Trusted Domains: google.com ([mail] https in Zaufane witryny)O15 - HKCU\..Trusted Domains: 2 domain(s) and sub-domain(s) not assigned to a zone.O15 - HKCU\..Trusted Ranges: Range1 ([file] in Zaufane witryny)O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06)O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06)O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06)O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.62 62.179.1.63O20 - HKLM Winlogon: Shell - (Explorer.exe) - D:\WINDOWS\explorer.exe (Microsoft Corporation)O20 - Winlogon\Notify\klogon: DllName - D:\WINDOWS\system32\klogon.dll - D:\WINDOWS\system32\klogon.dll (Kaspersky Lab)O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:HomeO28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not foundO32 - HKLM CDRom: AutoRun - 1O32 - AutoRun File - [2009-10-17 13:55:14 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]O33 - MountPoints2\{6ad25e6c-f6f8-11de-807b-00138fbee4d5}\Shell - "" = AutorunO33 - MountPoints2\{6ad25e6c-f6f8-11de-807b-00138fbee4d5}\Shell\AutoRun\command - "" = D:\WINDOWS\System32\setup.exe -- [2008-04-14 21:51:40 | 000,023,040 | ---- | M] (Microsoft Corporation)O34 - HKLM BootExecute: (autocheck autochk *) -  File not foundO35 - comfile [open] -- "%1" %*O35 - exefile [open] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010-02-06 21:51:09 | 000,000,000 | ---D | C] -- D:\WINDOWS\LastGood[2010-02-06 21:51:04 | 000,096,104 | ---- | C] (Avira GmbH) -- D:\WINDOWS\System32\drivers\avipbb.sys[2010-02-06 21:51:03 | 000,055,656 | ---- | C] (Avira GmbH) -- D:\WINDOWS\System32\drivers\avgntflt.sys[2010-02-06 21:51:03 | 000,045,416 | ---- | C] (Avira GmbH) -- D:\WINDOWS\System32\drivers\avgntdd.sys[2010-02-06 21:51:03 | 000,022,360 | ---- | C] (Avira GmbH) -- D:\WINDOWS\System32\drivers\avgntmgr.sys[2010-02-06 21:51:02 | 000,028,520 | ---- | C] (Avira GmbH) -- D:\WINDOWS\System32\drivers\ssmdrv.sys[2010-02-06 21:51:01 | 000,000,000 | ---D | C] -- D:\Program Files\Avira[2010-02-06 21:51:01 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Dane aplikacji\Avira[2010-02-05 21:24:15 | 000,000,000 | ---D | M] -- D:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\LogMeIn Hamachi[2010-02-05 21:19:35 | 000,000,000 | RH-D | C] -- D:\Documents and Settings\rafal\Recent[2010-02-05 15:21:04 | 000,000,000 | ---D | C] -- D:\Program Files\Trend Micro[2010-02-05 00:30:32 | 000,000,000 | ---D | C] -- D:\Program Files\Kaspersky Lab[2010-02-05 00:30:32 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab[2010-02-05 00:30:11 | 000,296,976 | ---- | C] (Kaspersky Lab) -- D:\WINDOWS\System32\drivers\klif.sys[2010-02-05 00:29:04 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files[2010-02-05 00:26:33 | 000,000,000 | -H-D | C] -- D:\WINDOWS\PIF[2010-02-03 21:19:42 | 000,000,000 | ---D | C] -- D:\Documents and Settings\rafal\Moje dokumenty\RCT3[2010-02-03 21:19:42 | 000,000,000 | ---D | C] -- D:\Documents and Settings\rafal\Dane aplikacji\Atari[2010-02-03 21:13:50 | 000,000,000 | ---D | C] -- D:\Program Files\Atari[2010-02-03 17:29:01 | 000,472,576 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\CF28283.exe[2010-02-03 17:06:12 | 000,000,000 | ---D | C] -- D:\Program Files\DAEMON Tools Toolbar[2010-02-03 17:05:54 | 000,000,000 | ---D | C] -- D:\Program Files\DAEMON Tools Lite[2010-02-03 17:05:49 | 000,000,000 | ---D | C] -- D:\Documents and Settings\rafal\Dane aplikacji\DAEMON Tools Lite[2010-02-03 17:05:46 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite[2010-02-01 22:47:04 | 000,000,000 | ---D | C] -- D:\Program Files\Paragon Software[2010-01-30 15:07:16 | 000,000,000 | ---D | C] -- D:\Documents and Settings\rafal\Dane aplikacji\GBM Software[2010-01-30 15:06:40 | 000,000,000 | ---D | C] -- D:\Program Files\GBM[2010-01-30 14:59:11 | 000,000,000 | ---D | C] -- D:\Documents and Settings\rafal\Pulpit\toshiba[2010-01-30 12:51:48 | 000,000,000 | ---D | C] -- D:\Documents and Settings\rafal\Dane aplikacji\Emisja[2010-01-30 12:29:08 | 000,000,000 | ---D | C] -- D:\Program Files\Microsoft.NET[2010-01-29 22:07:07 | 000,012,800 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\drivers\usb8023x.sys[2010-01-29 22:07:07 | 000,012,800 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\dllcache\usb8023x.sys[2010-01-29 22:07:06 | 000,030,592 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\drivers\rndismpx.sys[2010-01-29 22:07:06 | 000,030,592 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\dllcache\rndismpx.sys[2010-01-29 22:03:34 | 000,000,000 | ---D | C] -- D:\Program Files\Microsoft ActiveSync[2010-01-29 22:00:08 | 000,017,152 | ---- | C] (NVIDIA Corporation) -- D:\WINDOWS\System32\drivers\IsDrv118.sys[2010-01-28 00:16:52 | 000,000,000 | ---D | C] -- D:\Documents and Settings\rafal\Ustawienia lokalne\Dane aplikacji\Opera[2010-01-28 00:16:16 | 000,000,000 | ---D | C] -- D:\Program Files\Opera[2010-01-26 21:20:36 | 000,000,000 | ---D | C] -- D:\Documents and Settings\rafal\Pulpit\Nowy folder[2010-01-17 23:35:49 | 000,000,000 | ---D | C] -- D:\Program Files\SkanerOnline[2010-01-16 22:06:07 | 000,000,000 | ---D | C] -- D:\Program Files\Gadu-Gadu7[2010-01-14 22:55:08 | 000,000,000 | ---D | C] -- D:\Documents and Settings\rafal\Pulpit\help[2010-01-13 16:41:38 | 000,000,000 | ---D | C] -- D:\WINDOWS\System32\NtmsData[2010-01-12 22:05:48 | 000,000,000 | ---D | C] -- D:\Documents and Settings\rafal\Pulpit\[Win]Krakersik2008[2010-01-10 00:45:25 | 000,000,000 | ---D | C] -- D:\Documents and Settings\rafal\Pulpit\OST-Galerianki-_Repack_-PL-2009-BFPMP3[2009-11-21 22:18:07 | 000,172,032 | ---- | C] ( ) -- D:\WINDOWS\System32\rsnpstd3.dll[2009-11-21 22:18:07 | 000,061,440 | ---- | C] ( ) -- D:\WINDOWS\System32\vsnpstd3.dll[2009-11-21 22:18:07 | 000,053,248 | ---- | C] ( ) -- D:\WINDOWS\System32\csnpstd3.dll[2009-11-21 22:18:07 | 000,053,248 | ---- | C] ( ) -- D:\WINDOWS\csnpstd3.dll[2009-10-22 22:27:01 | 000,000,000 | ---D | M] -- D:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Apple[2009-10-17 15:33:00 | 000,000,000 | --SD | M] -- D:\Documents and Settings\LocalService\Dane aplikacji\Microsoft[2009-10-17 14:07:31 | 000,000,000 | --SD | M] -- D:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft[2009-10-17 14:07:31 | 000,000,000 | --SD | M] -- D:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft[2009-10-17 13:54:52 | 000,000,000 | --SD | M] -- D:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft[3 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ][1 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010-02-06 21:57:00 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\qs675703.dll[2010-02-06 21:57:00 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\ns675703.dll[2010-02-06 21:57:00 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\qs675703.dl_[2010-02-06 21:57:00 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\ns675703.dl_[2010-02-06 21:51:18 | 000,001,707 | ---- | M] () -- D:\Documents and Settings\All Users\Pulpit\Avira AntiVir Control Center.lnk[2010-02-06 21:51:17 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\mq675703.dl_[2010-02-06 21:09:00 | 000,001,132 | ---- | M] () -- D:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1078081533-1979792683-1417001333-1002UA.job[2010-02-06 17:47:53 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\as675703.dll[2010-02-06 17:47:53 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\as675703.dl_[2010-02-06 17:46:46 | 000,000,002 | ---- | M] () -- D:\WINDOWS\System32\Dvbpws.dll[2010-02-06 12:09:00 | 000,001,080 | ---- | M] () -- D:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1078081533-1979792683-1417001333-1002Core.job[2010-02-05 21:28:05 | 001,108,282 | ---- | M] () -- D:\WINDOWS\System32\PerfStringBackup.INI[2010-02-05 21:28:05 | 000,498,110 | ---- | M] () -- D:\WINDOWS\System32\perfh015.dat[2010-02-05 21:28:05 | 000,439,250 | ---- | M] () -- D:\WINDOWS\System32\perfh009.dat[2010-02-05 21:28:05 | 000,087,572 | ---- | M] () -- D:\WINDOWS\System32\perfc015.dat[2010-02-05 21:28:05 | 000,070,174 | ---- | M] () -- D:\WINDOWS\System32\perfc009.dat[2010-02-05 21:24:12 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\wc675703.dll[2010-02-05 21:24:12 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\wc675703.dl_[2010-02-05 21:24:12 | 000,005,669 | ---- | M] () -- D:\WINDOWS\System32\drivers\mkfooo.sys[2010-02-05 21:23:59 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\wq675703.dll[2010-02-05 21:23:59 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\wq675703.dl_[2010-02-05 21:23:53 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\xq675703.dll[2010-02-05 21:23:53 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\xc675703.dll[2010-02-05 21:23:53 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\xq675703.dl_[2010-02-05 21:23:53 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\xc675703.dl_[2010-02-05 21:23:44 | 000,253,748 | ---- | M] () -- D:\WINDOWS\System32\NvApps.xml[2010-02-05 21:23:43 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\mq675703.dll[2010-02-05 21:23:39 | 000,000,006 | -H-- | M] () -- D:\WINDOWS\tasks\SA.DAT[2010-02-05 21:23:37 | 000,002,048 | --S- | M] () -- D:\WINDOWS\bootstat.dat[2010-02-05 21:20:06 | 004,980,736 | -H-- | M] () -- D:\Documents and Settings\rafal\NTUSER.DAT[2010-02-05 21:19:32 | 008,593,206 | -H-- | M] () -- D:\Documents and Settings\rafal\Ustawienia lokalne\Dane aplikacji\IconCache.db[2010-02-05 15:27:36 | 000,000,642 | RHS- | M] () -- D:\Documents and Settings\rafal\ntuser.pol[2010-02-05 15:21:04 | 000,001,734 | ---- | M] () -- D:\Documents and Settings\rafal\Pulpit\HijackThis.lnk[2010-02-05 01:07:57 | 000,210,432 | ---- | M] () -- D:\WINDOWS\System32\Notepad2.exe[2010-02-05 00:34:10 | 000,002,206 | ---- | M] () -- D:\WINDOWS\System32\wpa.dbl[2010-02-05 00:32:10 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\ps675703.dll[2010-02-05 00:32:10 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\ps675703.dl_[2010-02-05 00:31:38 | 000,105,395 | ---- | M] () -- D:\WINDOWS\System32\drivers\klin.dat[2010-02-05 00:31:38 | 000,094,643 | ---- | M] () -- D:\WINDOWS\System32\drivers\klick.dat[2010-02-05 00:30:11 | 000,296,976 | ---- | M] (Kaspersky Lab) -- D:\WINDOWS\System32\drivers\klif.sys[2010-02-05 00:19:41 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\qy675703.dll[2010-02-05 00:19:41 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\qy675703.dl_[2010-02-05 00:07:22 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\xv675703.dll[2010-02-05 00:07:22 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\xv675703.dl_[2010-02-04 23:27:01 | 000,000,284 | ---- | M] () -- D:\WINDOWS\tasks\AppleSoftwareUpdate.job[2010-02-03 21:19:30 | 000,001,797 | ---- | M] () -- D:\Documents and Settings\All Users\Pulpit\Rollercoaster Tycoon 3 ZE.lnk[2010-02-03 17:31:59 | 000,005,077 | ---- | M] () -- D:\WINDOWS\System32\drivers\qpgmon.sys[2010-02-03 17:30:01 | 000,000,843 | ---- | M] () -- D:\WINDOWS\win.ini[2010-02-03 17:30:01 | 000,000,286 | ---- | M] () -- D:\WINDOWS\system.ini[2010-02-03 17:29:36 | 003,926,452 | R--- | M] () -- D:\Documents and Settings\rafal\Pulpit\ComboFix.exe[2010-02-03 17:28:54 | 000,472,576 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\System32\CF28283.exe[2010-02-03 17:28:27 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) -- D:\WINDOWS\System32\drivers\sptd.sys[2010-02-03 17:20:38 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\d}563708.dll[2010-02-03 17:20:38 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\d}563708.dl_[2010-02-03 17:20:24 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\af675703.dll[2010-02-03 17:20:24 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\af675703.dl_[2010-02-03 17:20:23 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\ht675703.dl_[2010-02-03 17:19:42 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\ok675703.dll[2010-02-03 17:19:42 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\ok675703.dl_[2010-02-03 17:19:15 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\sb675703.dll[2010-02-03 17:19:15 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\ht675703.dll[2010-02-03 17:19:15 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\sb675703.dl_[2010-02-03 17:19:12 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\sn675703.dll[2010-02-03 17:19:12 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\nq675703.dll[2010-02-03 17:19:12 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\sn675703.dl_[2010-02-03 17:19:12 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\nq675703.dl_[2010-02-03 17:19:00 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\aw675703.dll[2010-02-03 17:19:00 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\aw675703.dl_[2010-02-03 17:06:03 | 000,001,613 | ---- | M] () -- D:\Documents and Settings\All Users\Pulpit\DAEMON Tools Lite.lnk[2010-02-01 22:54:55 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\wz114734.dll[2010-02-01 22:54:55 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\wz114734.dl_[2010-02-01 22:09:50 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\tn675703.dll[2010-02-01 22:09:50 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\tn675703.dl_[2010-01-31 22:20:32 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\bm675703.dll[2010-01-31 22:20:32 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\bm675703.dl_[2010-01-31 22:10:38 | 000,292,669 | ---- | M] () -- D:\Documents and Settings\rafal\Pulpit\snowboard.jpg[2010-01-29 22:04:18 | 000,002,528 | ---- | M] () -- D:\Documents and Settings\rafal\Dane aplikacji\$_hpcst$.hpc[2010-01-29 22:00:08 | 000,017,152 | ---- | M] (NVIDIA Corporation) -- D:\WINDOWS\System32\drivers\IsDrv118.sys[2010-01-29 20:39:22 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\at675703.dl_[2010-01-29 20:39:13 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\at675703.dll[2010-01-28 21:38:55 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\xr675703.dll[2010-01-28 21:38:55 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\xr675703.dl_[2010-01-28 00:18:37 | 000,000,069 | ---- | M] () -- D:\WINDOWS\NeroDigital.ini[2010-01-28 00:16:31 | 000,000,592 | ---- | M] () -- D:\Documents and Settings\All Users\Pulpit\Opera.lnk[2010-01-26 21:20:11 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\ly675703.dll[2010-01-26 21:20:11 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\ly675703.dl_[2010-01-18 17:02:16 | 000,004,178 | ---- | M] () -- D:\Documents and Settings\rafal\Pulpit\allegro.JPG[2010-01-18 16:53:03 | 000,023,873 | ---- | M] () -- D:\Documents and Settings\rafal\Pulpit\allegro.png[2010-01-18 00:35:05 | 000,385,024 | ---- | M] () -- D:\WINDOWS\tsnpstd3.exe[2010-01-17 12:06:20 | 000,002,837 | ---- | M] () -- D:\Documents and Settings\rafal\Pulpit\Kopia index.php[2010-01-16 22:06:12 | 000,000,660 | ---- | M] () -- D:\Documents and Settings\rafal\Pulpit\Gadu-Gadu.lnk[2010-01-16 13:56:54 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\bo675703.dll[2010-01-16 13:56:54 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\bo675703.dl_[2010-01-15 21:59:52 | 001,129,208 | ---- | M] () -- D:\Documents and Settings\rafal\Pulpit\help.rar[2010-01-15 00:19:47 | 000,274,861 | ---- | M] () -- D:\Documents and Settings\rafal\Pulpit\c84a6d6a67442ae6c7753b45ea697f65.png[2010-01-14 22:47:14 | 000,124,411 | ---- | M] () -- D:\Documents and Settings\rafal\Pulpit\b08b77119ccb252891f5920e8faf1769.jpg[2010-01-12 22:05:54 | 000,287,180 | ---- | M] () -- D:\Documents and Settings\rafal\Pulpit\[Win]Krakersik2008.rar[2010-01-10 13:16:59 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\nk675703.dll[2010-01-10 13:16:59 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\nk675703.dl_[2010-01-10 13:00:28 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\mk675703.dll[2010-01-10 13:00:28 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\mk675703.dl_[2010-01-10 12:52:25 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\ih675703.dll[2010-01-10 12:52:25 | 000,044,748 | -H-- | M] () -- D:\WINDOWS\System32\ih675703.dl_[2010-01-08 14:26:22 | 000,190,507 | ---- | M] () -- D:\Documents and Settings\rafal\Pulpit\Porownanie windowsow.pptx[3 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ][1 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-02-06 21:51:18 | 000,001,707 | ---- | C] () -- D:\Documents and Settings\All Users\Pulpit\Avira AntiVir Control Center.lnk[2010-02-05 15:21:04 | 000,001,734 | ---- | C] () -- D:\Documents and Settings\rafal\Pulpit\HijackThis.lnk[2010-02-05 00:31:38 | 000,105,395 | ---- | C] () -- D:\WINDOWS\System32\drivers\klin.dat[2010-02-05 00:31:38 | 000,094,643 | ---- | C] () -- D:\WINDOWS\System32\drivers\klick.dat[2010-02-03 21:19:30 | 000,001,797 | ---- | C] () -- D:\Documents and Settings\All Users\Pulpit\Rollercoaster Tycoon 3 ZE.lnk[2010-02-03 17:29:27 | 003,926,452 | R--- | C] () -- D:\Documents and Settings\rafal\Pulpit\ComboFix.exe[2010-02-03 17:06:03 | 000,001,613 | ---- | C] () -- D:\Documents and Settings\All Users\Pulpit\DAEMON Tools Lite.lnk[2010-01-31 22:10:38 | 000,292,669 | ---- | C] () -- D:\Documents and Settings\rafal\Pulpit\snowboard.jpg[2010-01-29 22:04:18 | 000,002,528 | ---- | C] () -- D:\Documents and Settings\rafal\Dane aplikacji\$_hpcst$.hpc[2010-01-28 00:16:31 | 000,000,592 | ---- | C] () -- D:\Documents and Settings\All Users\Pulpit\Opera.lnk[2010-01-20 22:47:58 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\wq675703.dll[2010-01-20 22:47:58 | 000,044,748 | -H-- | C] () -- D:\WINDOWS\System32\wq675703.dl_[2010-01-20 22:47:52 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\xq675703.dll[2010-01-20 22:47:52 | 000,044,748 | -H-- | C] () -- D:\WINDOWS\System32\xq675703.dl_[2010-01-18 17:02:16 | 000,004,178 | ---- | C] () -- D:\Documents and Settings\rafal\Pulpit\allegro.JPG[2010-01-18 16:53:03 | 000,023,873 | ---- | C] () -- D:\Documents and Settings\rafal\Pulpit\allegro.png[2010-01-17 10:45:17 | 000,002,837 | ---- | C] () -- D:\Documents and Settings\rafal\Pulpit\Kopia index.php[2010-01-17 10:41:03 | 000,000,071 | ---- | C] () -- D:\Documents and Settings\rafal\Pulpit\index.html[2010-01-15 21:59:51 | 001,129,208 | ---- | C] () -- D:\Documents and Settings\rafal\Pulpit\help.rar[2010-01-15 19:39:29 | 000,005,669 | ---- | C] () -- D:\WINDOWS\System32\drivers\mkfooo.sys[2010-01-15 00:19:47 | 000,274,861 | ---- | C] () -- D:\Documents and Settings\rafal\Pulpit\c84a6d6a67442ae6c7753b45ea697f65.png[2010-01-14 22:47:14 | 000,124,411 | ---- | C] () -- D:\Documents and Settings\rafal\Pulpit\b08b77119ccb252891f5920e8faf1769.jpg[2010-01-14 18:37:23 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\tn675703.dll[2010-01-14 18:37:23 | 000,044,748 | -H-- | C] () -- D:\WINDOWS\System32\tn675703.dl_[2010-01-13 18:55:45 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\sn675703.dll[2010-01-13 18:55:45 | 000,044,748 | -H-- | C] () -- D:\WINDOWS\System32\sn675703.dl_[2010-01-12 22:05:54 | 000,287,180 | ---- | C] () -- D:\Documents and Settings\rafal\Pulpit\[Win]Krakersik2008.rar[2010-01-10 17:10:21 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\ok675703.dll[2010-01-10 17:10:21 | 000,044,748 | -H-- | C] () -- D:\WINDOWS\System32\ok675703.dl_[2010-01-10 13:03:54 | 000,077,312 | ---- | C] () -- D:\WINDOWS\MBR.exe[2010-01-10 13:03:49 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\nk675703.dll[2010-01-10 13:03:49 | 000,044,748 | -H-- | C] () -- D:\WINDOWS\System32\nk675703.dl_[2010-01-10 13:00:28 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\mk675703.dll[2010-01-10 13:00:28 | 000,044,748 | -H-- | C] () -- D:\WINDOWS\System32\mk675703.dl_[2010-01-10 00:44:17 | 000,190,507 | ---- | C] () -- D:\Documents and Settings\rafal\Pulpit\Porownanie windowsow.pptx[2010-01-10 00:32:54 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\ih675703.dll[2010-01-10 00:32:54 | 000,044,748 | -H-- | C] () -- D:\WINDOWS\System32\ih675703.dl_[2010-01-03 17:08:36 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\rc675703.dll[2010-01-01 18:20:52 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\sb675703.dll[2009-12-30 00:19:22 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\pl675703.dll[2009-12-26 15:31:44 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\tz675703.dll[2009-12-24 17:05:35 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\qy675703.dll[2009-12-19 12:12:58 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\bo675703.dll[2009-12-13 00:13:18 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\bm675703.dll[2009-12-12 01:04:42 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\kl675703.dll[2009-12-10 13:55:25 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\af675703.dll[2009-12-08 23:09:15 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\wi675703.dll[2009-12-06 12:35:09 | 000,000,038 | ---- | C] () -- D:\WINDOWS\avisplitter.INI[2009-12-04 23:54:27 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\xe675703.dll[2009-11-26 11:13:36 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\xv675703.dll[2009-11-24 15:12:23 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\ly675703.dll[2009-11-22 13:12:19 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\lw675703.dll[2009-11-22 10:36:52 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\aw675703.dll[2009-11-21 22:35:25 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\nq675703.dll[2009-11-21 22:18:10 | 000,015,498 | ---- | C] () -- D:\WINDOWS\snpstd3.ini[2009-11-16 12:22:34 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\mq675703.dll[2009-11-15 09:36:44 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\nw675703.dll[2009-11-11 12:57:13 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\ll675703.dll[2009-11-08 19:38:55 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\w}675703.dll[2009-11-07 21:29:07 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\xf675703.dll[2009-11-07 20:44:11 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\j{675703.dll[2009-11-07 17:20:25 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\aw563708.dll[2009-11-05 13:15:44 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\nf675703.dll[2009-11-04 17:57:57 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\xc675703.dll[2009-11-04 17:49:59 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\rc104750.dll[2009-11-03 09:20:27 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\ad675703.dll[2009-11-03 08:59:47 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\p~675703.dll[2009-11-02 22:12:50 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\wc675703.dll[2009-11-02 21:36:49 | 000,000,600 | ---- | C] () -- D:\Documents and Settings\rafal\Ustawienia lokalne\Dane aplikacji\PUTTY.RND[2009-11-01 10:27:52 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\kb675703.dll[2009-10-25 22:18:14 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\ht675703.dll[2009-10-25 22:18:13 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\at675703.dll[2009-10-22 07:37:30 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\iw675703.dll[2009-10-20 22:23:51 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\ou675703.dll[2009-10-19 16:55:20 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\rt675703.dll[2009-10-19 08:12:01 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\jt675703.dll[2009-10-19 07:37:39 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\gt675703.dll[2009-10-18 23:33:10 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\ps675703.dll[2009-10-18 21:10:41 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\qs675703.dll[2009-10-18 21:03:04 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\d}563708.dll[2009-10-18 14:37:02 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\ns675703.dll[2009-10-18 12:40:55 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\ms675703.dll[2009-10-18 11:14:34 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\xr675703.dll[2009-10-17 23:06:24 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\as675703.dll[2009-10-17 22:21:27 | 000,005,077 | ---- | C] () -- D:\WINDOWS\System32\drivers\qpgmon.sys[2009-10-17 22:21:15 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\pn563708.dll[2009-10-17 18:00:12 | 000,000,069 | ---- | C] () -- D:\WINDOWS\NeroDigital.ini[2009-10-17 15:27:42 | 000,286,720 | ---- | C] () -- D:\WINDOWS\System32\nvnt4cpl.dll[2009-10-17 14:43:21 | 000,004,586 | ---- | C] () -- D:\WINDOWS\Ascd_tmp.ini[2009-10-17 14:43:18 | 000,005,824 | ---- | C] () -- D:\WINDOWS\System32\drivers\ASUSHWIO.SYS[2009-10-17 14:04:10 | 000,164,352 | ---- | C] () -- D:\WINDOWS\System32\unrar.dll[2009-10-17 14:04:08 | 003,596,288 | ---- | C] () -- D:\WINDOWS\System32\qt-dx331.dll[2009-10-17 14:04:08 | 000,755,027 | ---- | C] () -- D:\WINDOWS\System32\xvidcore.dll[2009-10-17 14:04:08 | 000,159,839 | ---- | C] () -- D:\WINDOWS\System32\xvidvfw.dll[2009-10-17 14:04:07 | 000,007,680 | ---- | C] () -- D:\WINDOWS\System32\ff_vfw.dll[2009-10-17 14:04:07 | 000,000,547 | ---- | C] () -- D:\WINDOWS\System32\ff_vfw.dll.manifest[2009-10-17 13:59:13 | 000,002,272 | ---- | C] () -- D:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat[2009-10-17 13:50:25 | 000,000,058 | ---- | C] () -- D:\WINDOWS\System32\Notepad2.ini[2009-10-17 13:50:24 | 000,175,616 | ---- | C] () -- D:\WINDOWS\System32\mmm.dll[2009-10-17 13:50:24 | 000,001,630 | ---- | C] () -- D:\WINDOWS\System32\metapath.ini[2009-10-17 13:50:12 | 000,394,752 | ---- | C] () -- D:\WINDOWS\System32\cygwinb19.dll[2009-01-16 21:46:04 | 000,000,002 | ---- | C] () -- D:\WINDOWS\System32\Dvbpws.dll[2009-01-16 21:29:04 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\vq675703.dll[2009-01-11 23:56:34 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\wz114734.dll[2008-03-06 01:37:26 | 000,000,183 | ---- | C] () -- D:\WINDOWS\System32\oeminfo.ini[1998-03-11 23:38:13 | 000,000,136 | ---- | C] () -- D:\WINDOWS\System32\msrinta.dll< End of report >

Kolobos · 6 Lutego 2010

Masz wirusa sality, ktory infekuje pliki exe. Zrob skan przy pomocy Dr.Web CureIt Livecd i usun infekcje.

Odinstaluj: DAEMON Tools Toolbar oraz Ask Toolbar.

Wklej to do OTL i nacisnij Run Fix:

:OTL

PRC - [2010-02-05 22:07:51 | 000,035,328 | ---- | M] () -- D:\WINDOWS\temp\w29219a.exe

PRC - [2010-02-05 22:02:24 | 000,012,288 | ---- | M] () -- D:\WINDOWS\temp\winhavr.exe

PRC - [2010-02-05 21:27:20 | 000,008,192 | ---- | M] () -- D:\WINDOWS\temp\lnno.exe

MOD - [2010-02-05 21:23:43 | 000,081,920 | ---- | M] () -- D:\WINDOWS\system32\mq675703.dll

DRV - [2010-02-05 21:24:12 | 000,005,669 | ---- | M] () [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\mkfooo.sys -- (abp470n5)

FF - prefs.js..browser.search.defaultengine: "Ask.com"

FF - prefs.js..browser.search.defaultenginename: "Ask.com"

FF - prefs.js..browser.search.order.1: "Ask.com"

FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.1.0014

O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - D:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()

:Files

D:\WINDOWS\System32\qs675703.dll

D:\WINDOWS\System32\ns675703.dll

D:\WINDOWS\System32\qs675703.dl_

D:\WINDOWS\System32\ns675703.dl_

D:\WINDOWS\System32\mq675703.dl_

D:\WINDOWS\System32\as675703.dll

D:\WINDOWS\System32\as675703.dl_

D:\WINDOWS\System32\drivers\mkfooo.sys

D:\WINDOWS\System32\wq675703.dll

D:\WINDOWS\System32\wq675703.dl_

D:\WINDOWS\System32\xq675703.dll

D:\WINDOWS\System32\xc675703.dll

D:\WINDOWS\System32\xq675703.dl_

D:\WINDOWS\System32\xc675703.dl_

D:\WINDOWS\System32\mq675703.dll

D:\WINDOWS\System32\ps675703.dll

D:\WINDOWS\System32\ps675703.dl_

D:\WINDOWS\System32\qy675703.dll

D:\WINDOWS\System32\qy675703.dl_

D:\WINDOWS\System32\xv675703.dll

D:\WINDOWS\System32\xv675703.dl_

D:\WINDOWS\System32\drivers\qpgmon.sys

D:\WINDOWS\System32\d}563708.dll

D:\WINDOWS\System32\d}563708.dl_

D:\WINDOWS\System32\af675703.dll

D:\WINDOWS\System32\af675703.dl_

D:\WINDOWS\System32\ht675703.dl_

D:\WINDOWS\System32\ok675703.dll

D:\WINDOWS\System32\ok675703.dl_

D:\WINDOWS\System32\sb675703.dll

D:\WINDOWS\System32\ht675703.dll

D:\WINDOWS\System32\sb675703.dl_

D:\WINDOWS\System32\sn675703.dll

D:\WINDOWS\System32\nq675703.dll

D:\WINDOWS\System32\sn675703.dl_

D:\WINDOWS\System32\nq675703.dl_

D:\WINDOWS\System32\aw675703.dll

D:\WINDOWS\System32\aw675703.dl_

D:\WINDOWS\System32\wz114734.dll

D:\WINDOWS\System32\wz114734.dl_

D:\WINDOWS\System32\tn675703.dll

D:\WINDOWS\System32\tn675703.dl_

D:\WINDOWS\System32\bm675703.dll

D:\WINDOWS\System32\bm675703.dl_

D:\WINDOWS\System32\at675703.dl_

D:\WINDOWS\System32\at675703.dll

D:\WINDOWS\System32\xr675703.dll

D:\WINDOWS\System32\xr675703.dl_

D:\WINDOWS\System32\ly675703.dll

D:\WINDOWS\System32\ly675703.dl_

D:\WINDOWS\System32\bo675703.dll

D:\WINDOWS\System32\bo675703.dl_

D:\WINDOWS\System32\nk675703.dll

D:\WINDOWS\System32\nk675703.dl_

D:\WINDOWS\System32\mk675703.dll

D:\WINDOWS\System32\mk675703.dl_

D:\WINDOWS\System32\ih675703.dll

D:\WINDOWS\System32\ih675703.dl_

Po wykonaniu daj nowy log z OTL oraz log z combofix (sciagnij jeszcze raz nowa wersje).

**ULLISSES** · 6 Lutego 2010

Coś mało tych plików do wywalenia. Tam praktycznie każdy DLL z loga nadaje się do skasowania.

Kolobos · 7 Lutego 2010

Combofix powinien usunac reszte, na razie i tak trzeba usunac sality, a plikami mozna sie zajac pozniej.

jayeti · 7 Lutego 2010

Jutro sprobUje bo poki co na moim kompie tego nie da rady sciagnac bo ten wir cos blokuje... franca jedna

Edytowane 7 Lutego 2010 przez Kolobos

Zaloguj się

Nie Widze Nic Na D:\

Rekomendowane odpowiedzi

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi

Udostępnij na innych stronach

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi

Udostępnij na innych stronach

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi

Udostępnij na innych stronach

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi

Udostępnij na innych stronach

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi

Udostępnij na innych stronach

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi

Udostępnij na innych stronach

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi

Udostępnij na innych stronach

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi

Udostępnij na innych stronach

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi

Udostępnij na innych stronach

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi

Udostępnij na innych stronach

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi

Udostępnij na innych stronach

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi

Udostępnij na innych stronach

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi

Udostępnij na innych stronach

Dołącz do dyskusji