Po wygenerowaniu loga przestał działać internet

Witam

Bardzo prosze o sprawdzenie loga combofix mojego komputera. Po wygenerowaniu loga przestał działać internet i nie moge wejść do konfiguracji karty żeby sprawdzić czy nie zmienił sie adres ip. Nie mogę wejśćdo ustawień połączeń sieciowych.

Kod:

ComboFix 09-08-22.04 - Romka 2009-08-22 23:23.2.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium   6.0.6001.1.1250.48.1045.18.2046.1129 [GMT 2:00]
Uruchomiony z: c:\users\Romka\Desktop\ComboFix.exe
AV: avast! antivirus 4.8.1335 [VPS 090527-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: BitDefender Antivirus *On-access scanning enabled* (Updated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
AV: F-Secure Internet Security 2008 8.00 *On-access scanning enabled* (Updated) {E7512ED5-4245-4B4D-AF3A-382D3F313F15}
FW: BitDefender Firewall *enabled* {4055920F-2E99-48A8-A270-4243D2B8F242}
FW: F-Secure Internet Security 2008 8.00 *enabled* {D4747503-0346-49EB-9262-997542F79BF4}
SP: avast! antivirus 4.8.1335 [VPS 090527-0] *enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
SP: BitDefender Antispyware *enabled* (Updated) {8B2012EC-32D4-494F-BC03-832DB3BDF911}
SP: F-Secure Internet Security 2008 8.00 *enabled* (Updated) {0651C4B0-1D7E-4682-B965-2E9523C483A5}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((   Pliki utworzone od 2009-07-22 do 2009-08-22  )))))))))))))))))))))))))))))))
.

2009-08-22 21:35 . 2009-08-22 21:35   --------   d-----w-   c:\users\Romka\AppData\Local\temp
2009-08-22 21:35 . 2009-08-22 21:35   --------   d-----w-   c:\users\rafal1\AppData\Local\temp
2009-08-22 21:35 . 2009-08-22 21:35   --------   d-----w-   c:\users\Public\AppData\Local\temp
2009-08-22 21:35 . 2009-08-22 21:35   --------   d-----w-   c:\users\Default\AppData\Local\temp
2009-08-22 19:44 . 2009-08-22 19:44   --------   d-----w-   c:\users\rafal1\AppData\Local\Toshiba
2009-08-22 19:44 . 2009-08-22 19:44   --------   d-----w-   c:\users\rafal1\AppData\Roaming\ATI
2009-08-22 19:44 . 2009-08-22 19:44   --------   d-----w-   c:\users\rafal1\AppData\Local\ATI
2009-08-22 19:28 . 2009-08-22 19:28   --------   d-----w-   c:\programdata\Sunbelt
2009-08-03 16:10 . 2009-08-03 16:10   --------   d-----w-   c:\program files\Alcohol Soft
2009-08-03 16:04 . 2009-08-03 16:04   721904   ----a-w-   c:\windows\system32\drivers\sptd.sys
2009-07-29 07:03 . 2009-07-18 16:06   827904   ----a-w-   c:\windows\system32\wininet.dll
2009-07-29 07:02 . 2009-07-18 09:46   26624   ----a-w-   c:\windows\system32\ieUnatt.exe
2009-07-29 07:02 . 2009-07-18 16:01   78336   ----a-w-   c:\windows\system32\ieencode.dll

.
((((((((((((((((((((((((((((((((((((((((   Sekcja Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-22 20:55 . 2006-12-05 05:22   673898   ----a-w-   c:\windows\system32\perfh015.dat
2009-08-22 20:55 . 2006-12-05 05:22   133278   ----a-w-   c:\windows\system32\perfc015.dat
2009-08-22 19:44 . 2009-08-22 19:44   107184   ----a-w-   c:\users\rafal1\AppData\Local\GDIPFONTCACHEV1.DAT
2009-07-30 07:05 . 2006-11-02 11:18   --------   d-----w-   c:\program files\Windows Mail
2009-07-02 22:37 . 2008-01-12 18:16   --------   d-----w-   c:\programdata\Microsoft Help
2009-06-15 15:24 . 2009-07-20 06:20   156672   ----a-w-   c:\windows\system32\t2embed.dll
2009-06-15 15:20 . 2009-07-20 06:20   72704   ----a-w-   c:\windows\system32\fontsub.dll
2009-06-15 15:20 . 2009-07-20 06:20   10240   ----a-w-   c:\windows\system32\dciman32.dll
2009-06-15 12:52 . 2009-07-20 06:20   289792   ----a-w-   c:\windows\system32\atmfd.dll
2009-05-28 18:15 . 2006-11-02 10:25   665600   ----a-w-   c:\windows\inf\drvindex.dat
2009-05-28 18:00 . 2006-11-02 10:32   101888   ----a-w-   c:\windows\system32\ifxcardm.dll
2009-05-28 18:00 . 2006-11-02 10:32   82432   ----a-w-   c:\windows\system32\axaltocm.dll
.

(((((((((((((((((((((((((((((   SnapShot@2009-08-22_20.28.38   )))))))))))))))))))))))))))))))))))))))))
.
+ 2006-11-02 13:05 . 2009-08-22 20:52   90758              c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2008-01-12 17:26 . 2009-08-22 20:52   11756              c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-215878830-2496798263-996412810-1000_UserData.bin
- 2009-06-30 06:56 . 2009-06-30 06:56   16384              c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-06-30 06:56 . 2009-08-22 21:00   16384              c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-06-30 06:56 . 2009-06-30 06:56   32768              c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-06-30 06:56 . 2009-08-22 21:00   32768              c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-06-30 06:56 . 2009-08-22 21:00   16384              c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-06-30 06:56 . 2009-06-30 06:56   16384              c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-08-22 05:27 . 2009-08-22 17:47   2048              c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2009-08-22 05:27 . 2009-08-22 20:48   2048              c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2009-08-22 05:27 . 2009-08-22 17:47   2048              c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2009-08-22 05:27 . 2009-08-22 20:48   2048              c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2006-11-02 10:33 . 2009-08-22 20:55   598122              c:\windows\System32\perfh009.dat
- 2006-11-02 10:33 . 2009-08-22 19:50   598122              c:\windows\System32\perfh009.dat
+ 2006-11-02 10:33 . 2009-08-22 20:55   106154              c:\windows\System32\perfc009.dat
- 2006-11-02 10:33 . 2009-08-22 19:50   106154              c:\windows\System32\perfc009.dat
.
(((((((((((((((((((((((((((((((((((((   Wpisy startowe rejestru   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
"AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 120\axcmd.exe" [2009-04-24 203928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184]
"TPwrMain"="c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE" [2007-03-29 411192]
"HSON"="c:\program files\TOSHIBA\TBS\HSON.exe" [2006-12-07 55416]
"SmoothView"="c:\program files\Toshiba\SmoothView\SmoothView.exe" [2007-05-23 509496]
"SVPWUTIL"="c:\program files\TOSHIBA\Utilities\SVPWUTIL.exe" [2006-03-22 438272]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2007-04-10 413696]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-06-08 894512]
"Toshiba Registration"="c:\program files\Toshiba\Registration\ToshibaRegistration.exe" [2007-02-19 571024]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-02-12 174872]
"Symantec PIF AlertEng"="c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 517768]
"Toshiba TEMPO"="c:\program files\Toshiba TEMPO\Toshiba.Tempo.UI.TrayApplication.exe" [2007-10-29 103824]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2007-06-13 4489216]
"NDSTray.exe"="NDSTray.exe" [BU]
"Skytel"="Skytel.exe" - c:\windows\SkyTel.exe [2007-05-28 1826816]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^Users^Romka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.0.lnk]
path=c:\users\Romka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk
backup=c:\windows\pss\OpenOffice.org 3.0.lnk.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"DefaultOutboundAction"= 0 (0x0)
"DefaultInboundAction"= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{E255C810-C290-4C53-B909-BE4781A20F40}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{7B9E4666-8346-4546-A7B2-5FC4ABA25502}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{C8AA8728-BCB8-496F-9DE8-C78D15D085AC}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{53CA4037-180C-4C34-9684-2E40967F6362}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{843FC464-ADF7-4179-95CF-71014D31F412}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{7E1251E9-8431-41E3-BA41-FA990990135F}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"TCP Query User{F5776AD2-3080-4937-9180-7E9BE4419784}c:\\programdata\\kaspersky lab setup files\\kaspersky anti-virus 7.0.1.325\\polish\\setup.exe"= UDP:c:\programdata\kaspersky lab setup files\kaspersky anti-virus 7.0.1.325\polish\setup.exe:Kaspersky Anti-Virus 7.0 Setup
"UDP Query User{0139D406-09FF-4A07-A2E1-CBD8F9A37675}c:\\programdata\\kaspersky lab setup files\\kaspersky anti-virus 7.0.1.325\\polish\\setup.exe"= TCP:c:\programdata\kaspersky lab setup files\kaspersky anti-virus 7.0.1.325\polish\setup.exe:Kaspersky Anti-Virus 7.0 Setup

R0 CplIR;Embedded IR Driver;c:\windows\System32\drivers\CplIR.sys [2007-03-06 14848]
R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [2009-01-10 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [2009-01-10 20560]
R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [2009-01-10 51792]
R2 SG_Service;SoftGuard Service;c:\program files\Common Files\RbtProt\sgsrv.exe [2003-10-25 155648]
R2 TempoMonitoringService;Notebook Performance Tuning Service ;c:\program files\Toshiba TEMPO\TempoSVC.exe [2007-10-29 95624]
.
Zawartość folderu 'Zaplanowane zadania'

2009-08-22 c:\windows\Tasks\User_Feed_Synchronization-{8AE900D1-C356-4C89-A02C-76977A54ECE4}.job
- c:\windows\system32\msfeedssync.exe [2008-06-08 07:33]
.
.
------- Skan uzupełniający -------
.
uStart Page = hxxp://www.google.pl/
uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{C08CAF1D-C0A3-40D5-9970-06D067EAC017} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url.pl?PL
TCP: {10CD2532-93FB-4081-8F68-0FCA1BFE113A} = 150.254.5.4,150.254.5.11
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-22 23:35
Windows 6.0.6001 Service Pack 1 NTFS

skanowanie ukrytych procesów ... 

skanowanie ukrytych wpisów autostartu ...

skanowanie ukrytych plików ... 

skanowanie pomyślnie ukończone
ukryte pliki: 0

**************************************************************************
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:0000008a
.
Czas ukończenia: 2009-08-22 23:42
ComboFix-quarantined-files.txt  2009-08-22 21:42
ComboFix2.txt  2009-08-22 20:39

Przed: 42 316 976 128 bajtów wolnych
Po: 42 223 087 616 bajtów wolnych

162   --- E O F ---   2009-07-29 22:37

Bardzo proszę o pomoc w rozwiązaniu problemu

Po wygenerowaniu loga przestał działać internet i nie moge wejść do konfiguracji karty żeby sprawdzić czy nie zmienił sie adres ip. Nie mogę wejśćdo ustawień połączeń sieciowych.

Rozumiem, że przed użyciem Combofixa nie było tego problemu??? Proponuje zrobić przywracanie systemu do punktu sprzed użycia Combofixa, a następnie możesz podać log z RSIT

hej

Nie mogłem wcześniej zrobić loga bo po ponownym uruchomieniu komputera nie działały pliki exe. Teraz jestem po kolejnym przywróceniu systemu do punktu przywracania z przed kilku dni przed awarią bo problem z otwieraniem plików sie powtarza po pewnym czasie. Załańczam logo zrobione RSIT i prosze o pomoc.

Logfile of random's system information tool 1.06 (written by random/random)
Run by Romka at 2009-08-27 21:27:51
Microsoft® Windows Vista™ Home Premium Service Pack 1
System drive C: has 41 GB (43%) free of 95 GB
Total RAM: 2046 MB (63% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{8AE900D1-C356-4C89-A02C-76977A54ECE4}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2005-09-24 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0\bin\ssv.dll [2007-04-24 501384]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-06-13 4489216]
"HWSetup"=\HWSetup.exe hwSetUP []
"NDSTray.exe"=NDSTray.exe []
"TPwrMain"=C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [2007-03-29 411192]
"HSON"=C:\Program Files\TOSHIBA\TBS\HSON.exe [2006-12-07 55416]
"SmoothView"=C:\Program Files\Toshiba\SmoothView\SmoothView.exe [2007-05-23 509496]
"SVPWUTIL"=C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe [2006-03-22 438272]
"Skytel"=C:\Windows\Skytel.exe [2007-05-28 1826816]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"Camera Assistant Software"=C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe [2007-04-10 413696]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-06-08 894512]
"Toshiba Registration"=C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe [2007-02-19 571024]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2007-02-12 174872]
"Symantec PIF AlertEng"=C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [2007-03-12 517768]
"Toshiba TEMPO"=C:\Program Files\Toshiba TEMPO\Toshiba.Tempo.UI.TrayApplication.exe [2007-10-29 103824]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1233920]
"TOSCDSPD"=TOSCDSPD.EXE []
"AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [2009-04-24 203928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\00TCrdMain]
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [2007-05-22 538744]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Desktop SMS]
C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe [2007-06-18 1507328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2008-01-15 267048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KeNotify]
C:\Program Files\TOSHIBA\Utilities\KeNotify.exe [2006-11-06 34352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2008-01-10 385024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\topi]
C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe [2007-04-02 577536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Romka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.0.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2008-12-15 384000]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.scr - open - "C:\Windows\system32\NOTEPAD.EXE" "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2009-08-27 21:27:51 ----D---- C:\rsit
2009-08-27 21:27:51 ----D---- C:\Program Files\trend micro
2009-08-22 23:42:28 ----A---- C:\ComboFix.txt
2009-08-22 21:35:02 ----D---- C:\Qoobox
2009-08-03 18:10:12 ----D---- C:\Program Files\Alcohol Soft
2009-07-29 09:03:13 ----A---- C:\Windows\system32\mshtml.dll
2009-07-29 09:03:12 ----A---- C:\Windows\system32\occache.dll
2009-07-29 09:03:08 ----A---- C:\Windows\system32\ieframe.dll
2009-07-29 09:03:03 ----A---- C:\Windows\system32\urlmon.dll
2009-07-29 09:03:01 ----A---- C:\Windows\system32\wininet.dll
2009-07-29 09:03:00 ----A---- C:\Windows\system32\iertutil.dll
2009-07-29 09:02:59 ----A---- C:\Windows\system32\iedkcs32.dll
2009-07-29 09:02:57 ----A---- C:\Windows\system32\msfeeds.dll
2009-07-29 09:02:56 ----A---- C:\Windows\system32\ieaksie.dll
2009-07-29 09:02:55 ----A---- C:\Windows\system32\ieUnatt.exe
2009-07-29 09:02:54 ----A---- C:\Windows\system32\ieencode.dll
2009-07-29 09:02:52 ----A---- C:\Windows\system32\mstime.dll
2009-07-29 09:02:51 ----A---- C:\Windows\system32\jsproxy.dll

======List of files/folders modified in the last 1 months======

2009-08-27 21:27:52 ----D---- C:\Windows\Prefetch
2009-08-27 21:27:51 ----RD---- C:\Program Files
2009-08-27 21:26:25 ----D---- C:\Windows\Temp
2009-08-27 20:36:06 ----D---- C:\Windows\System32
2009-08-27 20:36:06 ----D---- C:\Windows\inf
2009-08-27 20:36:06 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-08-25 15:12:29 ----SHD---- C:\System Volume Information
2009-08-23 23:29:48 ----D---- C:\Windows
2009-08-23 23:29:47 ----D---- C:\Windows\system32\wbem
2009-08-23 23:29:04 ----D---- C:\Windows\system32\config
2009-08-23 23:28:49 ----SHD---- C:\Windows\Installer
2009-08-23 23:28:49 ----RSD---- C:\Windows\Fonts
2009-08-23 23:28:49 ----D---- C:\Windows\Tasks
2009-08-23 23:28:49 ----D---- C:\Windows\system32\Tasks
2009-08-23 23:28:49 ----D---- C:\Windows\system32\spool
2009-08-23 23:28:49 ----D---- C:\Windows\system32\pl-PL
2009-08-23 23:28:49 ----D---- C:\Windows\system32\Msdtc
2009-08-23 23:28:49 ----D---- C:\Windows\system32\drivers
2009-08-23 23:28:49 ----D---- C:\Windows\system32\catroot2
2009-08-23 23:28:49 ----D---- C:\Program Files\Windows Media Player
2009-08-23 23:28:49 ----D---- C:\Program Files\Internet Explorer
2009-08-23 23:28:40 ----SHD---- C:\$Recycle.Bin
2009-08-23 23:28:33 ----D---- C:\Windows\registration
2009-08-23 11:06:22 ----D---- C:\Windows\system32\WDI
2009-08-22 23:30:54 ----D---- C:\Windows\AppPatch
2009-08-22 23:30:52 ----D---- C:\Program Files\Common Files
2009-08-22 21:43:56 ----RD---- C:\Users
2009-08-22 21:28:36 ----HD---- C:\ProgramData
2009-08-22 20:52:42 ----D---- C:\Windows\Logs
2009-08-17 12:36:49 ----D---- C:\Windows\system32\catroot
2009-08-17 12:36:42 ----D---- C:\Windows\winsxs
2009-07-30 09:05:42 ----D---- C:\Program Files\Windows Mail

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2009-02-05 23152]
R1 aswSP;avast! Self Protection; C:\Windows\system32\drivers\aswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2009-02-05 51376]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\DRIVERS\aswMonFlt.sys [2009-02-05 51792]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2008-01-13 278728]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2008-01-13 25416]
R3 AgereSoftModem;TOSHIBA V92 Software Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2006-11-28 1161888]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-06-21 2600960]
R3 CmBatt;Sterownik baterii Microsoft o metodzie kontroli ACPI; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-19 14208]
R3 GEARAspiWDM;GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2006-09-19 15664]
R3 HdAudAddService;Sterownik funkcji Microsoft 1.1 UAA dla usługi standardu High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-06-12 1787816]
R3 NETw4v32;Sterownik karty Intel(R) Wireless WiFi Link dla systemu Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-04-26 2216448]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-04-30 81408]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-19 88576]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-06-08 187448]
R3 tdcmdpst;TOSHIBA Writing Engine Filter Driver; C:\Windows\system32\DRIVERS\tdcmdpst.sys [2006-10-18 16128]
R3 tifm21;tifm21; C:\Windows\system32\drivers\tifm21.sys [2007-01-24 290304]
R3 tosrfec;Bluetooth ACPI; C:\Windows\system32\DRIVERS\tosrfec.sys [2006-10-23 9216]
R3 usbvideo;Chicony USB 2.0 Camera; C:\Windows\System32\Drivers\usbvideo.sys [2008-01-19 134016]
R3 UVCFTR;UVCFTR; C:\Windows\System32\Drivers\UVCFTR_S.SYS [2007-04-16 11776]
S3 a6b71ccz;a6b71ccz; C:\Windows\system32\drivers\a6b71ccz.sys []
S3 athr;Sterownik urządzenia rozszerzalnej bezprzewodowej sieci LAN Atheros; C:\Windows\system32\DRIVERS\athr.sys [2006-11-02 467456]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 MSKSSRV;Serwer proxy usługi Microsoft Streaming; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Serwer proxy zegara Microsoft Streaming; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Serwer proxy menedżera jakości Microsoft Streaming; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Konwerter strumieni Tee/Sink-to-Sink Microsoft Streaming; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 Profos;Profos; \??\C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\profos.sys []
S3 Tosrfcom;Tosrfcom; C:\Windows\system32\drivers\Tosrfcom.sys []
S3 TpChoice;Touch Pad Detection Filter driver; C:\Windows\system32\DRIVERS\TpChoice.sys []
S3 Trufos;Trufos; \??\C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\trufos.sys []
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S4 KR10I;KR10I; C:\Windows\system32\drivers\kr10i.sys [2007-01-18 219392]
S4 KR10N;KR10N; C:\Windows\system32\drivers\kr10n.sys [2007-01-18 211072]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Windows\system32\agrsmsvc.exe [2006-10-05 9216]
R2 Apple Mobile Device;Urządzenie mobilne Apple; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-01-15 110592]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2007-06-21 606208]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2007-07-24 229376]
R2 CFSvcs;ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [2006-11-14 40960]
R2 Harmonogram automatycznej usługi LiveUpdate;Harmonogram automatycznej usługi LiveUpdate; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [2007-09-26 554352]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2007-02-12 355096]
R2 LexBceS;LexBce Server; C:\Windows\System32\LEXBCES.EXE [2002-08-15 299008]
R2 LiveUpdate Notice Service;LiveUpdate Notice Service; C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [2007-03-12 517768]
R2 SG_Service;SoftGuard Service; C:\Program Files\Common Files\RbtProt\sgsrv.exe [2003-10-25 155648]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
R2 TempoMonitoringService;Notebook Performance Tuning Service ; C:\Program Files\Toshiba TEMPO\TempoSVC.exe [2007-10-29 95624]
R2 TNaviSrv;TOSHIBA Navi Support Service; C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe [2007-06-28 77824]
R2 TODDSrv;TOSHIBA Optical Disc Drive Service; C:\Windows\system32\TODDSrv.exe [2006-05-25 114688]
R2 TosCoSrv;TOSHIBA Power Saver; C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe [2007-03-29 427576]
R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2007-02-25 125048]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2006-08-23 49152]
S2 LiveUpdate Notice Ex;LiveUpdate Notice Service Ex; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon []
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2009-01-25 85096]
S3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
S3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-01-04 136120]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 iPod Service;Usługa iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-01-15 504104]
S3 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE [2007-09-26 2999664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------


Wcześniej przed użyciem Combofixa też miałem ten problem z plikami exe dlatego użyłem combofixa.

Witaj, Wstaw loga na wklej.eu. Jest napisane o tym w regulaminie tej kategorii.

Pozdrawiam, krzys1996.

czy wstawienie na wklej.eu jest konieczne. Potrzebuje szybko pomocy, a nigdy nie korzystałem z wklej.eu. Proszę o sprawdzenie zamieszczonego przeze mnie loga.

Nic tu wirusowego nie widzę.
Wklej do notatnika:

Kod:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=-
"NDSTray.exe"=-
"Skytel"=-
"StartCCC"=-
"Camera Assistant Software"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"TOSCDSPD"=-

Plik Zapisz jako Ustaw rozszerzenie z TXT na Wszystkie pliki zapisz pod nazwą FIX.REG uruchom utworzony plik i potwierdź

Usuń Bonjour

Kod:

http://www.searchengines.pl/Usuwanie-Bonjour-Service-t103177.html

Usuń resztki antywirusów, których już nie używasz

Kod:

http://www.searchengines.pl/Deinstalatory-narzedzi-ochronnych-t45565.html

Wrzuć jeszcze logi z HijackThis https://www.instalki.pl/download/progra ... ijackthis/ (bo RSIT go nie utworzył) oraz Gmer http://www.gmer.net/

nie działały pliki exe

Możesz napisać co się dokładniej działo??