prosze o sprawdzenie tych 2 logów
http://www.wklej.eu/index.php?id=ef4a0ef026
http://www.wklej.eu/index.php?id=728e8b9601
jeszcze z ComboFixa
- Kod: Zaznacz wszystko
ComboFix 09-07-29.01 - Deny 2002-01-01 2:24.1.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1250.48.1045.18.1535.1047 [GMT 1:00]
Uruchomiony z: c:\documents and settings\Deny\Pulpit\gifki\ComboFix.exe
AV: ESET Smart Security 4.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: Zapora osobista *enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
* Rezydentny antywirus jest aktywny
UWAGA - TEN KOMPUTER NIE MA ZAINSTALOWANEJ KONSOLI ODZYSKIWANIA !!
.
((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\Installer\2ab51.msi
c:\windows\Installer\4d71d6.msi
.
((((((((((((((((((((((((((((((((((((((( Sterowniki/Usługi )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Service_AVPsys
((((((((((((((((((((((((( Pliki utworzone od 2001-12-01 do 2002-01-01 )))))))))))))))))))))))))))))))
.
2009-05-31 22:33 . 2009-05-31 22:33 -------- d-----w- c:\documents and settings\Deny\Ustawienia lokalne\Dane aplikacji\Identities
2009-05-28 09:23 . 2009-05-28 09:23 42088 ----a-w- c:\documents and settings\Deny\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll
2009-02-06 12:24 . 2009-02-06 12:24 56280 ----a-w- c:\windows\system32\drivers\epfwtdi.sys
2009-02-06 12:24 . 2009-02-06 12:24 33096 ----a-w- c:\windows\system32\drivers\epfwndis.sys
2009-02-06 12:24 . 2009-02-06 12:24 130952 ----a-w- c:\windows\system32\drivers\epfw.sys
2009-02-06 12:23 . 2009-02-06 12:23 106208 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2009-02-06 12:19 . 2009-02-06 12:19 113448 ----a-w- c:\windows\system32\drivers\eamon.sys
2008-05-04 14:02 . 2008-05-04 14:02 4603904 ------w- c:\documents and settings\Deny\Dane aplikacji\U3\1942600CF74038DB\LaunchPad.exe
2008-04-14 20:51 . 2008-04-14 20:51 7680 ----a-w- c:\windows\system32\spdwnwxp.exe
2008-04-14 20:51 . 2008-04-14 20:51 20992 ------w- c:\windows\system32\spupdwxp.exe
2008-04-14 20:51 . 2008-04-14 20:51 20992 ------w- c:\windows\system32\faxpatch.exe
2008-04-14 20:33 . 2008-04-14 20:33 24064 -c----w- c:\windows\system32\dllcache\pidgen.dll
2007-12-09 14:00 . 2007-12-09 14:00 593920 ------w- c:\documents and settings\Deny\Dane aplikacji\U3\1942600CF74038DB\PelicanExtension.dll
2007-10-23 08:33 . 2007-10-23 08:33 2129920 ------w- c:\documents and settings\Deny\Dane aplikacji\U3\1942600CF74038DB\LPSecurityExtension.dll
2007-10-23 08:32 . 2007-10-23 08:32 544768 ------w- c:\documents and settings\Deny\Dane aplikacji\U3\1942600CF74038DB\SanDiskFormatExtension.dll
2007-10-23 07:23 . 2007-10-23 07:23 2600960 ------w- c:\documents and settings\Deny\Dane aplikacji\U3\1942600CF74038DB\u3dapi10.dll
2007-07-13 17:10 . 2007-07-13 17:12 -------- d-----w- c:\documents and settings\Deny\Dane aplikacji\SecondLife
2007-07-13 17:10 . 2002-01-01 00:48 -------- d-----w- c:\documents and settings\Deny\Ustawienia lokalne\Dane aplikacji\SecondLife
2007-07-13 16:24 . 2007-07-13 16:24 980 ----a-w- c:\windows\unins000.dat
2007-07-11 11:54 . 2008-04-13 22:09 5504 -c--a-w- c:\windows\system32\dllcache\mstee.sys
2007-07-11 11:54 . 2008-04-13 22:09 5504 ----a-w- c:\windows\system32\drivers\MSTEE.sys
2007-07-11 11:54 . 2008-04-13 22:16 10880 -c--a-w- c:\windows\system32\dllcache\ndisip.sys
2007-07-11 11:54 . 2008-04-13 22:16 10880 ----a-w- c:\windows\system32\drivers\NdisIP.sys
2007-07-11 11:54 . 2008-04-13 22:16 15232 -c--a-w- c:\windows\system32\dllcache\streamip.sys
2007-07-11 11:54 . 2008-04-13 22:16 15232 ----a-w- c:\windows\system32\drivers\StreamIP.sys
2007-07-11 11:54 . 2008-04-13 22:16 11136 -c--a-w- c:\windows\system32\dllcache\slip.sys
2007-07-11 11:54 . 2008-04-13 22:16 11136 ----a-w- c:\windows\system32\drivers\SLIP.sys
2007-07-11 11:53 . 2008-04-13 22:16 19200 -c--a-w- c:\windows\system32\dllcache\wstcodec.sys
2007-07-11 11:53 . 2008-04-13 22:16 19200 ----a-w- c:\windows\system32\drivers\WSTCODEC.SYS
2007-07-11 11:53 . 2008-04-13 22:16 85248 -c--a-w- c:\windows\system32\dllcache\nabtsfec.sys
2007-07-11 11:53 . 2008-04-13 22:16 85248 ----a-w- c:\windows\system32\drivers\NABTSFEC.sys
2007-07-11 11:53 . 2008-04-13 22:16 17024 -c--a-w- c:\windows\system32\dllcache\ccdecode.sys
2007-07-11 11:53 . 2008-04-13 22:16 17024 ----a-w- c:\windows\system32\drivers\CCDECODE.sys
2007-07-11 11:48 . 2008-04-14 21:50 54784 -c--a-w- c:\windows\system32\dllcache\vfwwdm32.dll
2007-07-11 11:48 . 2008-04-14 21:50 54784 ----a-w- c:\windows\system32\vfwwdm32.dll
2007-07-11 11:43 . 2006-12-02 20:27 32768 ----a-w- c:\windows\system32\KRProcess.dll
2007-07-11 11:43 . 2006-12-02 18:53 32768 ----a-w- c:\windows\system32\KRDetector.dll
2007-07-11 11:43 . 2006-12-02 18:33 36864 ----a-w- c:\windows\system32\KRCapture.dll
2007-07-11 11:43 . 2007-07-11 11:43 -------- d-----w- c:\program files\X-calibur Video Power
2007-07-10 18:36 . 2007-07-10 18:36 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\TEMP
2007-07-10 18:35 . 2007-07-10 18:35 -------- d-----w- c:\program files\Smart PC Solutions
2007-07-10 16:45 . 2007-07-10 16:45 -------- d-----w- c:\documents and settings\Deny\Dane aplikacji\AutoMapa
2007-07-09 15:35 . 2002-01-01 00:03 -------- d-----w- C:\videooutput
2007-07-09 15:35 . 2009-06-04 11:17 8676883 ----a-w- c:\windows\system32\NCMedia2.dll
2007-07-09 15:35 . 2007-07-09 15:35 -------- d-----w- c:\program files\Smallvideosoft
2007-07-08 16:02 . 2007-07-08 16:03 -------- d-----w- c:\program files\Microsoft ActiveSync
2007-07-08 15:58 . 2006-11-06 16:04 28672 -c--a-w- c:\windows\system32\dllcache\wceusbsh.sys
2007-07-08 15:58 . 2006-11-06 16:04 28672 ----a-w- c:\windows\system32\drivers\wceusbsh.sys
2007-07-08 15:48 . 2007-10-23 07:27 110592 ----a-w- c:\documents and settings\Deny\Dane aplikacji\U3\temp\cleanup.exe
2007-07-08 15:48 . 2007-07-08 15:48 -------- d-----w- c:\documents and settings\Deny\DoctorWeb
2007-07-08 14:59 . 2008-05-02 08:41 3493888 ---ha-w- c:\documents and settings\Deny\Dane aplikacji\U3\temp\Launchpad Removal.exe
2007-07-08 14:58 . 2007-07-08 14:59 -------- d-----w- c:\documents and settings\Deny\Dane aplikacji\U3
2007-07-07 21:26 . 2007-07-07 21:26 -------- d-----w- c:\documents and settings\Deny\Ustawienia lokalne\Dane aplikacji\Real
2007-07-05 23:09 . 2007-07-05 23:20 -------- d-----w- c:\program files\Postal2STP
2007-07-05 09:32 . 2007-07-05 09:32 60416 ----a-w- c:\windows\ALCFDRTM.EXE
2007-07-05 09:32 . 2007-07-05 09:32 -------- d-----w- c:\windows\system32\Lang
2007-07-04 16:24 . 2008-04-14 20:51 221184 ----a-w- c:\windows\system32\wmpns.dll
2007-07-04 16:01 . 2007-07-04 16:01 -------- d-----w- c:\windows\ServicePackFiles
2007-07-04 16:00 . 2008-04-14 20:51 294912 -c----w- c:\windows\system32\dllcache\dlimport.exe
2007-07-04 15:54 . 2007-08-10 18:53 26488 ----a-w- c:\windows\system32\spupdsvc.exe
2007-07-04 13:17 . 2007-07-04 13:17 -------- d--h--w- c:\windows\system32\GroupPolicy
2007-06-29 17:44 . 2007-06-29 17:44 -------- d-sh--w- c:\windows\ftpcache
2007-06-29 16:10 . 2003-09-26 08:40 51584 ----a-r- c:\windows\system32\drivers\RT2400.sys
2007-06-29 13:39 . 2007-06-29 13:39 8704 ----a-w- c:\documents and settings\Deny\Dane aplikacji\Thinstall\Nero 7.8.5.0\10000006700002h\regedit.exe
2007-06-29 13:39 . 2007-04-21 21:40 476320 ----a-w- c:\windows\system32\imagXpr7.dll
2007-06-29 13:39 . 2007-04-21 21:40 471040 ----a-w- c:\windows\system32\imagXRA7.dll
2007-06-29 13:39 . 2007-04-21 21:40 364544 ----a-w- c:\windows\system32\TwnLib4.dll
2007-06-29 13:39 . 2007-04-21 21:40 32768 ----a-w- c:\windows\system32\BCGPOleAcc.dll
2007-06-29 13:39 . 2007-04-21 21:40 262144 ----a-w- c:\windows\system32\imagXR7.dll
2007-06-29 13:39 . 2007-04-21 21:40 1712128 ----a-w- c:\windows\system32\GdiPlus.dll
2007-06-29 13:39 . 2007-04-21 21:40 1568768 ----a-w- c:\windows\system32\imagX7.dll
2007-06-29 13:39 . 2007-04-21 21:40 1060864 ----a-w- c:\windows\system32\mfc71.dll
2007-06-29 13:39 . 2007-04-21 21:40 1047552 ----a-w- c:\windows\system32\mfc71u.dll
2007-06-29 13:39 . 2007-04-21 21:40 2605056 ----a-w- c:\windows\system32\BCGCBPRO800u.dll
2007-06-29 13:39 . 2007-04-21 21:40 2600960 ----a-w- c:\windows\system32\BCGCBPRO800.dll
2007-06-29 13:36 . 2007-06-29 13:36 8704 ----a-w- c:\documents and settings\Deny\Dane aplikacji\Thinstall\Nero 7.8.5.0\400000369400002h\nero.exe
2007-06-29 13:36 . 2007-06-29 13:36 8704 ----a-w- c:\documents and settings\Deny\Dane aplikacji\Thinstall\Nero 7.8.5.0\1000000500002h\regsvr32.exe
2007-06-29 13:34 . 2007-06-29 13:34 7680 ----a-w- c:\documents and settings\Deny\Dane aplikacji\Thinstall\Alcohol_120%_v1.9.6.5429\10000001600003i\taskkill.exe
2007-06-29 13:34 . 2007-06-29 13:34 7680 ----a-w- c:\documents and settings\Deny\Dane aplikacji\Thinstall\Alcohol_120%_v1.9.6.5429\40000060900002i\_Alcohol.exe
2007-06-29 13:34 . 2007-06-29 13:34 7680 ----a-w- c:\documents and settings\Deny\Dane aplikacji\Thinstall\Alcohol_120%_v1.9.6.5429\10000006700002i\regedit.exe
2007-06-29 13:34 . 2007-06-29 13:34 7680 ----a-w- c:\documents and settings\Deny\Dane aplikacji\Thinstall\Alcohol_120%_v1.9.6.5429\400000c00002i\Alcohol.exe
2007-06-29 13:34 . 2007-06-29 13:34 7680 ----a-w- c:\documents and settings\Deny\Dane aplikacji\Thinstall\Alcohol_120%_v1.9.6.5429\4000004900003i\StarWindServiceAE.exe
2007-06-28 18:57 . 2007-06-28 18:57 -------- d-----w- c:\program files\CCleaner
2007-06-28 16:38 . 2007-06-28 16:38 -------- d-----w- c:\documents and settings\Deny\Ustawienia lokalne\Dane aplikacji\Stardock
2007-06-28 16:12 . 2007-06-29 18:28 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\NFS Underground
2007-06-28 16:12 . 2007-06-28 16:12 -------- d-----w- c:\program files\Common Files\DirectX
2007-06-28 10:32 . 2007-06-28 10:30 410984 ----a-w- c:\windows\system32\deploytk.dll
2007-06-28 10:30 . 2007-06-28 10:30 -------- d-----w- c:\program files\Java
2007-06-28 10:27 . 2008-04-13 15:26 36396 ----a-w- c:\documents and settings\Deny\Dane aplikacji\BSplayer\AC3 Filter\uninstall.exe
2007-06-28 10:27 . 2007-07-05 01:33 892928 ----a-w- c:\documents and settings\Deny\Dane aplikacji\BSplayer\AC3 Filter\iconv.dll
2007-06-28 10:27 . 2007-08-18 07:54 20480 ----a-w- c:\documents and settings\Deny\Dane aplikacji\BSplayer\AC3 Filter\ac3config.exe
2007-06-28 10:27 . 2007-08-18 07:53 16384 ----a-w- c:\documents and settings\Deny\Dane aplikacji\BSplayer\AC3 Filter\dialog_patch.exe
2007-06-28 10:27 . 2007-06-28 10:27 152576 ----a-w- c:\documents and settings\Deny\Dane aplikacji\Sun\Java\jre1.6.0_14\lzma.dll
2007-06-28 10:25 . 2007-07-11 10:21 -------- d-----w- c:\documents and settings\Deny\Dane aplikacji\BSplayer
2007-06-28 10:25 . 2007-06-28 10:25 -------- d-----w- c:\documents and settings\Deny\Dane aplikacji\BSplayer Pro
2007-06-28 10:25 . 2007-06-28 10:25 -------- d-----w- c:\program files\Webteh
2007-06-28 09:57 . 2002-01-01 03:48 -------- d-----w- c:\documents and settings\Deny\Dane aplikacji\FileZilla
2007-06-28 09:55 . 2007-06-28 09:55 -------- d-----w- c:\documents and settings\Deny\Dane aplikacji\Nowe Gadu-Gadu
2007-06-28 09:54 . 2002-01-01 00:01 -------- d-----w- c:\program files\Nowe Gadu-Gadu
2007-06-28 09:40 . 2000-03-29 06:17 5824 ----a-w- c:\windows\system32\drivers\ASUSHWIO.SYS
2007-06-28 09:35 . 2007-07-06 17:38 15544 ----a-w- c:\documents and settings\Deny\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
2007-06-28 09:35 . 2007-06-28 09:35 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\FLEXnet
2007-06-28 09:25 . 2001-12-31 22:49 -------- d-----w- c:\documents and settings\Deny\Dane aplikacji\Thinstall
2007-06-28 09:04 . 2007-07-14 15:27 -------- d-----w- c:\documents and settings\Deny\Ustawienia lokalne\Dane aplikacji\Adobe
2007-06-28 09:01 . 2007-06-28 09:01 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2007-06-28 08:54 . 2007-06-28 09:25 -------- d-----w- c:\program files\Common Files\Adobe
2007-06-27 23:16 . 2007-06-27 23:16 -------- d-----w- c:\documents and settings\Deny\Dane aplikacji\Media Player Classic
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-04 14:39 . 2007-06-27 21:10 457248 ----a-w- c:\windows\system32\NVUNINST.EXE
2009-06-02 16:11 . 2007-06-27 22:05 85504 ----a-w- c:\windows\system32\ff_vfw.dll
2009-05-01 21:02 . 2007-06-27 22:06 90112 ----a-w- c:\windows\system32\dpl100.dll
2009-05-01 21:02 . 2007-06-27 22:05 685056 ----a-w- c:\windows\system32\divx.dll
2009-01-07 18:14 . 2007-06-27 22:05 60273 ----a-w- c:\windows\system32\pthreadGC2.dll
2008-11-06 16:37 . 2007-06-27 22:06 3596288 ----a-w- c:\windows\system32\qt-dx331.dll
2008-10-27 08:04 . 2007-06-27 22:23 514384 ----a-w- c:\windows\system32\XAudio2_3.dll
2008-10-27 08:04 . 2007-06-27 22:23 235856 ----a-w- c:\windows\system32\xactengine3_3.dll
2008-10-27 08:04 . 2007-06-27 22:23 23376 ----a-w- c:\windows\system32\X3DAudio1_5.dll
2008-10-27 08:04 . 2007-06-27 22:23 70992 ----a-w- c:\windows\system32\XAPOFX1_2.dll
2008-10-10 02:52 . 2007-06-27 22:23 452440 ----a-w- c:\windows\system32\d3dx10_40.dll
2008-10-10 02:52 . 2007-06-27 22:23 2036576 ----a-w- c:\windows\system32\D3DCompiler_40.dll
2008-10-10 02:52 . 2007-06-27 22:23 4379984 ----a-w- c:\windows\system32\D3DX9_40.dll
2008-07-30 04:20 . 2007-06-27 22:23 68616 ----a-w- c:\windows\system32\XAPOFX1_1.dll
2008-07-30 04:20 . 2007-06-27 22:23 509448 ----a-w- c:\windows\system32\XAudio2_2.dll
2008-07-30 04:20 . 2007-06-27 22:22 238088 ----a-w- c:\windows\system32\xactengine3_2.dll
2008-07-28 13:15 . 2008-07-28 13:15 92048 ----a-w- c:\windows\Fonts\AGaramondPro-Italic.otf
2008-07-28 13:15 . 2008-07-28 13:15 76828 ----a-w- c:\windows\Fonts\AGaramondPro-BoldItalic.otf
2008-07-28 13:15 . 2008-07-28 13:15 75116 ----a-w- c:\windows\Fonts\AGaramondPro-Bold.otf
2008-07-28 13:15 . 2008-07-28 13:15 171196 ----a-w- c:\windows\Fonts\ACaslonPro-SemiboldItalic.otf
2008-07-28 13:15 . 2008-07-28 13:15 170992 ----a-w- c:\windows\Fonts\ACaslonPro-Semibold.otf
2008-07-28 13:15 . 2008-07-28 13:15 170012 ----a-w- c:\windows\Fonts\ACaslonPro-BoldItalic.otf
2008-07-28 13:15 . 2008-07-28 13:15 168884 ----a-w- c:\windows\Fonts\ACaslonPro-Regular.otf
2008-07-28 13:15 . 2008-07-28 13:15 168816 ----a-w- c:\windows\Fonts\ACaslonPro-Italic.otf
2008-07-28 13:15 . 2008-07-28 13:15 143692 ----a-w- c:\windows\Fonts\ACaslonPro-Bold.otf
2008-07-28 13:15 . 2008-07-28 13:15 127840 ----a-w- c:\windows\Fonts\AGaramondPro-Regular.otf
2008-07-10 09:01 . 2007-06-27 22:22 467984 ----a-w- c:\windows\system32\d3dx10_39.dll
2008-07-10 09:00 . 2007-06-27 22:22 1493528 ----a-w- c:\windows\system32\D3DCompiler_39.dll
2008-07-10 09:00 . 2007-06-27 22:22 3851784 ----a-w- c:\windows\system32\D3DX9_39.dll
2008-05-30 12:19 . 2007-06-27 22:22 507400 ----a-w- c:\windows\system32\XAudio2_1.dll
2008-05-30 12:18 . 2007-06-27 22:22 238088 ----a-w- c:\windows\system32\xactengine3_1.dll
2008-05-30 12:17 . 2007-06-27 22:22 65032 ----a-w- c:\windows\system32\XAPOFX1_0.dll
2008-05-30 12:17 . 2007-06-27 22:22 25608 ----a-w- c:\windows\system32\X3DAudio1_4.dll
2008-05-30 12:11 . 2007-06-27 22:22 467984 ----a-w- c:\windows\system32\d3dx10_38.dll
2008-05-30 12:11 . 2007-06-27 22:22 1491992 ----a-w- c:\windows\system32\D3DCompiler_38.dll
2008-05-30 12:11 . 2007-06-27 22:22 3850760 ----a-w- c:\windows\system32\D3DX9_38.dll
2008-04-14 21:51 . 2004-08-04 00:44 294912 ----a-w- c:\windows\system32\msh263.drv
2008-04-14 21:50 . 2004-08-04 00:44 16896 ----a-w- c:\windows\system32\msyuv.dll
2008-04-14 21:50 . 2004-08-04 00:44 47616 ----a-w- c:\windows\system32\iyuv_32.dll
2008-04-14 21:16 . 2004-08-03 22:56 1804 ----a-w- c:\windows\system32\dcache.bin
2008-04-14 20:56 . 2004-08-03 22:46 332288 ----a-w- c:\windows\system32\netsetup.exe
2008-04-14 20:52 . 2007-06-27 20:56 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2008-04-14 20:52 . 2007-06-27 20:56 87176 ----a-w- c:\windows\system32\rdpwsx.dll
2008-04-14 20:52 . 2004-08-03 22:44 92424 ----a-w- c:\windows\system32\rdpdd.dll
2008-04-14 20:52 . 2004-08-03 22:44 12168 ----a-w- c:\windows\system32\tsddd.dll
2008-04-14 20:52 . 2007-06-27 20:56 21896 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2008-04-14 20:52 . 2007-06-27 20:56 12040 ----a-w- c:\windows\system32\drivers\tdpipe.sys
2008-04-14 20:52 . 2007-06-27 20:55 40840 ----a-w- c:\windows\system32\drivers\termdd.sys
2008-04-14 20:52 . 2004-08-03 22:44 299520 ----a-w- c:\windows\system32\drmclien.dll
2008-04-14 20:52 . 2004-08-03 22:44 695808 ----a-w- c:\windows\system32\drmv2clt.dll
2008-04-14 20:52 . 2004-08-03 22:44 356352 ----a-w- c:\windows\system32\msscp.dll
2008-04-14 20:52 . 2004-08-03 22:44 259072 ----a-w- c:\windows\system32\msnetobj.dll
2008-04-14 20:50 . 2007-07-04 16:05 53248 ------w- c:\windows\system32\tsgqec.dll
2008-04-14 20:49 . 2004-08-03 22:43 68096 ----a-w- c:\windows\system32\adsmsext.dll
2008-04-14 20:49 . 2004-08-03 22:43 175616 ----a-w- c:\windows\system32\adsldp.dll
2008-04-14 20:49 . 2004-08-03 22:43 143360 ----a-w- c:\windows\system32\adsldpc.dll
2008-04-14 20:49 . 2004-08-03 22:43 98304 ----a-w- c:\windows\system32\actxprxy.dll
2008-04-14 20:49 . 2004-08-03 22:43 61440 ----a-w- c:\windows\system32\admparse.dll
2008-04-14 20:49 . 2004-08-03 22:43 193536 ----a-w- c:\windows\system32\activeds.dll
2008-04-14 20:49 . 2004-08-03 22:43 118784 ----a-w- c:\windows\system32\aclui.dll
2008-04-14 20:49 . 2007-07-04 16:05 136192 ------w- c:\windows\system32\aaclient.dll
2008-04-14 20:49 . 2004-08-03 22:43 100352 ----a-w- c:\windows\system32\6to4svc.dll
2008-04-14 20:49 . 2004-08-03 22:43 714240 ----a-w- c:\windows\system32\ntdll.dll
2008-04-14 20:48 . 2004-08-03 22:43 5632 ----a-w- c:\windows\system32\wmi.dll
2008-04-14 20:48 . 2004-08-03 22:43 1449472 ----a-w- c:\windows\system32\winntbbu.dll
2008-04-14 20:47 . 2004-08-03 22:43 103424 ----a-w- c:\windows\system32\dpcdll.dll
2008-04-14 20:47 . 2004-08-03 22:43 57375 ----a-w- c:\windows\system32\odbcji32.dll
2008-04-14 20:43 . 2004-08-03 22:42 4126 ----a-w- c:\windows\system32\msdxmlc.dll
2008-04-14 20:42 . 2004-08-03 22:42 3584 ----a-w- c:\windows\system32\msafd.dll
2008-04-14 20:36 . 2004-08-03 22:42 3584 ----a-w- c:\windows\system32\icmp.dll
2008-04-14 20:35 . 2004-08-03 22:42 569856 ----a-w- c:\windows\system32\gpedit.dll
2008-04-14 20:35 . 2004-08-03 22:42 9344 ----a-w- c:\windows\system32\framebuf.dll
2008-04-14 20:33 . 2004-08-03 22:42 24064 ----a-w- c:\windows\system32\pidgen.dll
2008-04-14 20:33 . 2004-08-03 22:42 3072 ----a-w- c:\windows\system32\dpnlobby.dll
2008-04-14 20:33 . 2004-08-03 22:42 3072 ----a-w- c:\windows\system32\dpnaddr.dll
2008-04-14 20:31 . 2004-08-03 22:42 16896 ----a-w- c:\windows\system32\cfgmgr32.dll
2008-04-14 20:30 . 2004-08-03 22:42 285696 ----a-w- c:\windows\system32\atmfd.dll
2008-04-14 20:04 . 2007-06-27 20:57 73472 ----a-w- c:\windows\system32\drivers\sr.sys
2008-04-14 20:03 . 2004-08-03 22:34 120320 ----a-w- c:\windows\system32\drivers\pcmcia.sys
2008-04-14 20:03 . 2004-08-03 22:34 68608 ----a-w- c:\windows\system32\drivers\pci.sys
2008-04-14 20:03 . 2004-08-04 00:34 80256 ----a-w- c:\windows\system32\drivers\parport.sys
2008-04-14 20:03 . 2004-08-04 00:34 46848 ----a-w- c:\windows\system32\drivers\p3.sys
2008-04-14 20:00 . 2004-08-03 22:39 2190336 ----a-w- c:\windows\system32\ntoskrnl.exe
2008-04-14 19:59 . 2004-08-04 00:38 2067200 ----a-w- c:\windows\system32\ntkrnlpa.exe
2008-04-14 19:55 . 2004-08-03 22:42 4096 ----a-w- c:\windows\system32\dsprpres.dll
2008-04-14 19:52 . 2004-08-03 22:38 153856 ----a-w- c:\windows\system32\drivers\dmio.sys
2008-04-14 19:52 . 2007-07-04 16:05 89600 ------w- c:\windows\system32\msxml6r.dll
2008-04-14 19:52 . 2004-08-03 22:38 800000 ----a-w- c:\windows\system32\drivers\dmboot.sys
2008-04-14 19:50 . 2007-07-04 16:05 80896 ------w- c:\windows\system32\msshavmsg.dll
2008-04-14 19:50 . 2004-08-03 22:38 14720 ----a-w- c:\windows\system32\drivers\kbdhid.sys
2008-04-14 19:50 . 2004-08-03 22:38 24960 ----a-w- c:\windows\system32\drivers\kbdclass.sys
2008-04-14 19:48 . 2001-10-26 14:47 37632 ----a-w- c:\windows\system32\drivers\isapnp.sys
2008-04-14 19:47 . 2004-08-04 00:37 40832 ----a-w- c:\windows\system32\drivers\crusoe.sys
2008-04-14 19:46 . 2004-08-03 22:37 40448 ----a-w- c:\windows\system32\drivers\intelppm.sys
2008-04-14 19:46 . 2007-06-27 22:51 5504 ----a-w- c:\windows\system32\drivers\intelide.sys
2008-04-14 19:45 . 2004-08-03 22:43 2977792 ----a-w- c:\windows\system32\wmploc.dll
2008-04-14 19:45 . 2007-06-27 20:57 49664 ----a-w- c:\windows\system32\inetres.dll
2008-04-14 19:43 . 2004-08-03 22:43 563200 ----a-w- c:\windows\system32\shdoclc.dll
2008-04-14 19:41 . 2004-08-03 22:36 53248 ----a-w- c:\windows\system32\drivers\i8042prt.sys
2008-04-14 19:41 . 2004-08-03 22:36 65280 ----a-w- c:\windows\system32\drivers\serial.sys
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\Wcescomm.exe" [2006-11-13 1289000]
"EdHTML"="c:\program files\Binboy\EdHTMLv5.0\EdHTML.exe" [2003-03-24 1443328]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-07-16 25604904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-03 13529088]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-05-03 86016]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2009-02-06 2021400]
"DAEMON Tools-1033"="c:\program files\D-Tools\daemon.exe" [2003-10-02 81920]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2007-06-28 148888]
"VMSnap3"="c:\windows\VMSnap3.EXE" [2006-08-30 49152]
"Domino"="c:\windows\Domino.EXE" [2006-06-28 49152]
"Ulead Photo Express Calendar Checker"="c:\program files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe" [2004-01-12 69632]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2008-05-03 1630208]
"Ptipbmf"="ptipbmf.dll" - c:\windows\system32\ptipbmf.dll [2003-06-20 118784]
"SoundMan"="SOUNDMAN.EXE" - c:\windows\SOUNDMAN.EXE [2004-01-09 65536]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\program files\Microsoft ActiveSync\rapimgr.exe"= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:Adobe CSI CS4
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
R0 pnpshark;pnpshark;c:\windows\system32\drivers\pnpshark.sys [2003-10-02 119552]
R0 st3shark;st3shark;c:\windows\system32\drivers\st3shark.sys [2003-09-27 5504]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2009-02-06 106208]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [2009-02-06 727720]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;\??\c:\docume~1\Deny\USTAWI~1\Temp\RarSFX5\kerneld.wnt --> c:\docume~1\Deny\USTAWI~1\Temp\RarSFX5\kerneld.wnt [?]
S3 RT2400;ASUS Wireless Driver;c:\windows\system32\drivers\RT2400.sys [2007-06-29 51584]
S3 vmfilter303;vmfilter303;c:\windows\system32\drivers\vmfilter303.sys [2007-07-11 428160]
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2002-01-01 02:33
Windows 5.1.2600 Dodatek Service Pack 3 NTFS
skanowanie ukrytych procesów ...
skanowanie ukrytych wpisów autostartu ...
skanowanie ukrytych plików ...
skanowanie pomyślnie ukończone
ukryte pliki: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\EverestDriver]
"ImagePath"="\??\c:\docume~1\Deny\USTAWI~1\Temp\RarSFX5\kerneld.wnt"
.
------------------------ Pozostałe uruchomione procesy ------------------------
.
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\nvsvc32.exe
c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
c:\windows\system32\rundll32.exe
c:\progra~1\MICROS~2\rapimgr.exe
c:\windows\system32\wscntfy.exe
c:\program files\Skype\Plugin Manager\skypePM.exe
c:\program files\Opera\opera.exe
.
**************************************************************************
.
Czas ukończenia: 2002-01-01 2:39 - komputer został uruchomiony ponownie
ComboFix-quarantined-files.txt 2002-01-01 01:39
Przed: 2 389 839 872 bajtów wolnych
Po: 2 555 138 048 bajtów wolnych
304
