copy exe

[Arturk24]

Mam problem polegający na tym że jak podłącze pendriva pod kompa i klikne lewy przycisk to wyskakuje komunikat o braku copy exe inne dyski otwierają się bez problemu

[pp3088]

Daj logi:

http://instalki.pl/forum/viewtopic.php?t=7444
http://instalki.pl/forum/viewforum.php?f=22

[huber2t]

Daj log z combofix

[Arturk24]

oto mój log z Combofix




ComboFix 08-06-05.3 - artur 2008-06-06 12:28:54.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.72 [GMT 2:00]
Running from: C:\Documents and Settings\artur\Moje dokumenty\@neostrada.pl\ComboFix.exe
Command switches used :: C:\Documents and Settings\artur\Moje dokumenty\@neostrada.pl\CFScript.txt
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\BrowsingEnhancer
C:\Program Files\BrowsingEnhancer\BrowsingEnhancer-2.dll
C:\Program Files\BrowsingEnhancer\BrowsingEnhancer.dat
C:\Program Files\BrowsingEnhancer\pcre3.dll
C:\Program Files\BrowsingEnhancer\uninstall.exe

.
((((((((((((((((((((((((( Files Created from 2008-05-06 to 2008-06-06 )))))))))))))))))))))))))))))))
.

2008-05-25 09:25 . 2008-05-25 09:25 <DIR> d-------- C:\Documents and Settings\artur\Dane aplikacji\Sony Corporation
2008-05-25 09:24 . 2006-11-02 16:57 118,520 --a------ C:\WINDOWS\system32\PxInsI64.exe
2008-05-25 09:24 . 2006-10-18 19:43 115,960 --a------ C:\WINDOWS\system32\PxCpyI64.exe
2008-05-25 09:24 . 2006-08-28 21:48 2,560 --a------ C:\WINDOWS\system32\drivers\cdralw2k.sys
2008-05-25 09:24 . 2006-08-28 21:48 2,432 --a------ C:\WINDOWS\system32\drivers\cdr4_xp.sys
2008-05-25 09:22 . 2008-05-25 10:41 <DIR> d-------- C:\Program Files\Sony
2008-05-16 19:03 . 2008-05-16 19:03 <DIR> d-------- C:\Documents and Settings\artur\Dane aplikacji\InterVideo

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-06 10:25 --------- d-----w C:\Program Files\neostrada tp
2008-06-06 09:39 --------- d-----w C:\Documents and Settings\artur\Dane aplikacji\Skype
2008-06-06 09:37 --------- d-----w C:\Documents and Settings\artur\Dane aplikacji\skypePM
2008-06-02 13:10 --------- d-----w C:\Program Files\Winamp
2008-05-25 08:41 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-05-25 07:25 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-03-25 04:52 621,344 ----a-w C:\WINDOWS\system32\mswstr10.dll
2008-03-25 04:52 178,976 ----a-w C:\WINDOWS\system32\msjint40.dll
2008-03-20 08:09 1,845,504 ----a-w C:\WINDOWS\system32\win32k.sys
2008-01-28 21:03 1,280,201 ----a-w C:\Program Files\wrar371pl.exe
2008-01-16 16:30 32 ----a-w C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\ezsid.dat
2007-12-26 17:50 1,531,671 ----a-w C:\Program Files\gg61(pobrane_z_megapliki).exe
2005-12-18 17:38 9,728 --sha-w C:\Program Files\Thumbs.db
.

((((((((((((((((((((((((((((( snapshot@2008-06-05_17.48.04,37 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-06-05 15:24:39 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-06-06 09:36:34 2,048 --s-a-w C:\WINDOWS\bootstat.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-12-07 16:11 21803304]
"PcSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2003-08-15 09:34 57344 C:\WINDOWS\SOUNDMAN.EXE]
"avgnt"="C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" [2008-04-20 10:31 262401]
"AdslTaskBar"="stmctrl.dll" [2006-06-02 11:01 151552 C:\WINDOWS\system32\stmctrl.dll]
"WOOWATCH"="C:\PROGRA~1\NEOSTR~1\Watch.exe" [2004-08-23 14:49 20480]
"WOOTASKBARICON"="C:\PROGRA~1\NEOSTR~1\GestMaj.exe" [2004-10-14 16:55 32768]
"Ashampoo FireWall"="C:\Program Files\Ashampoo\Ashampoo FireWall\FireWall.exe" [2006-09-13 14:22 3229184]
"NeroCheck"="C:\WINDOWS\system32\\NeroCheck.exe" [2001-07-09 12:50 155648]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 00:44 15360]

C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Autostart\
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-17 19:05:56 65588]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"22357:TCP"= 22357:TCP:BitComet 22357 TCP
"22357:UDP"= 22357:UDP:BitComet 22357 UDP

R3 Stmatm;ATM/ADSL miniport;C:\WINDOWS\system32\DRIVERS\stmatm.sys [2003-08-12 14:51]
R3 TaurusUsb;ADSL Modem USB Service;C:\WINDOWS\system32\DRIVERS\torususb.sys [2006-05-25 15:28]

.
Contents of the 'Scheduled Tasks' folder
"2008-06-03 20:08:00 C:\WINDOWS\Tasks\Uniblue SpeedUpMyPC Nag.job"
- E:\Gry\Nowy folder\SpeedUpMyPC 3\SpeedUpMyPC.exe
"2008-02-24 21:08:37 C:\WINDOWS\Tasks\Uniblue SpeedUpMyPC.job"
- E:\Gry\Nowy folder\SpeedUpMyPC 3\SpeedUpMyPC.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-06 12:30:58
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\ASFWHide]
"ImagePath"="\??\C:\DOCUME~1\artur\USTAWI~1\Temp\ASFWHide"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\system32\lsass.exe
C:\Program Files\Ashampoo\Ashampoo FireWall\spi.dll
.
Completion time: 2008-06-06 12:32:50
ComboFix-quarantined-files.txt 2008-06-06 10:32:47
ComboFix2.txt 2008-06-05 15:48:21

Pre-Run: 1,938,509,824 bajtów wolnych
Post-Run: 1,967,628,288 bajtów wolnych

104 --- E O F --- 2008-06-01 07:18:18

[huber2t]

log ok

Podłącz pendrive

Wyłącz przywracanie systemu na wszystkich dyskach. Instrukcja

Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum

Włącz przywracanie systemu.

[Arturk24]

wszystko chodzi mi ju.ż dobrze więc nie będe skanował kasperskym.Dzięki za pomoc.Pozdrawiam.