problem z pendrivem

[Nemesis85]

mam problem, po wlazeniu pendriva pojawia mi sie taki oto blad



musze kilka razy kliknac na byle jaka z tych przyciskow aby zniknal ale po chwili pojawia sie z nowu
restart to neguje
pomozcie mi z tym

[Arexe]

Pokaz log z ComboFix

[Nemesis85]

ComboFix 08-06-16.2 - Rogal 2008-06-17 2:36:38.5 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.48.1045.18.1493 [GMT 2:00]
Running from: C:\Documents and Settings\Rogal\Pulpit\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2008-05-17 to 2008-06-17 )))))))))))))))))))))))))))))))
.

2008-06-14 04:12 . 2008-06-14 04:11 227,275 --a------ C:\WINDOWS\rFactor Data Acquisition Plugin Uninstaller.exe.bak
2008-06-14 04:11 . 2008-06-14 04:11 <DIR> d-------- C:\Program Files\Common Files\Thraex Software
2008-06-14 04:11 . 2008-06-14 04:12 223,418 --a------ C:\WINDOWS\rFactor Data Acquisition Plugin Uninstaller.exe
2008-06-13 12:31 . 2008-06-13 12:31 <DIR> d-------- C:\Documents and Settings\LocalService\Pulpit
2008-06-13 09:26 . 2008-05-20 08:16 438,784 -r-hs---- C:\WINDOWS\wkysvr.exe
2008-06-12 11:04 . 2008-06-12 11:04 <DIR> d-------- C:\Documents and Settings\Rogal\Dane aplikacji\ArcaBit
2008-06-11 14:42 . 2008-04-14 17:53 273,024 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys
2008-06-11 12:26 . 2008-06-11 12:26 <DIR> d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-06-11 12:26 . 2008-06-11 12:26 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab
2008-06-02 16:28 . 2008-06-17 02:38 <DIR> d--h----- C:\Documents and Settings\Administrator.ROGALPL\Ustawienia lokalne
2008-06-02 16:28 . 2007-10-24 14:21 <DIR> d-------- C:\Documents and Settings\Administrator.ROGALPL\Ulubione
2008-06-02 16:28 . 2007-10-24 13:26 <DIR> d--h----- C:\Documents and Settings\Administrator.ROGALPL\Szablony
2008-06-02 16:28 . 2007-10-24 14:21 <DIR> d-------- C:\Documents and Settings\Administrator.ROGALPL\Pulpit
2008-06-02 16:28 . 2007-10-24 14:21 <DIR> d-------- C:\Documents and Settings\Administrator.ROGALPL\Moje dokumenty
2008-06-02 16:28 . 2007-10-24 14:21 <DIR> dr------- C:\Documents and Settings\Administrator.ROGALPL\Menu Start
2008-06-02 16:28 . 2007-10-24 14:21 <DIR> dr-h----- C:\Documents and Settings\Administrator.ROGALPL\Dane aplikacji
2008-06-02 16:28 . 2008-06-02 16:28 <DIR> d-------- C:\Documents and Settings\Administrator.ROGALPL
2008-05-31 15:12 . 2005-05-03 18:43 69,632 --a------ C:\WINDOWS\Alcmtr.exe
2008-05-18 17:49 . 2008-05-18 17:49 <DIR> d-------- C:\Documents and Settings\Rogal\Dane aplikacji\Palettes

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-17 00:39 --------- d-----w c:\Program Files\PeerGuardian2
2008-06-17 00:30 0 ----a-w C:\WINDOWS\system32\drivers\lvuvc.hs
2008-06-16 22:11 --------- d-----w C:\Documents and Settings\Rogal\Dane aplikacji\uTorrent
2008-06-16 20:22 --------- d-----w C:\Documents and Settings\Rogal\Dane aplikacji\Skype
2008-06-15 17:42 3,442,176 ----a-w C:\WINDOWS\Internet Logs\xDB1.tmp
2008-06-12 12:41 --------- d-----w c:\Program Files\Vopt8
2008-06-12 12:19 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help
2008-06-11 12:12 11,948,725 ----a-w C:\WINDOWS\Internet Logs\tvDebug.zip
2008-06-10 17:22 23,352 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-06-10 17:22 107,832 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
2008-06-10 13:00 --------- d-----w c:\Program Files\Gadu-Gadu
2008-06-10 13:00 --------- d-----w c:\Program Files\DAP
2008-06-10 12:51 --------- d-----w c:\Program Files\FLAC
2008-06-10 12:49 --------- d--h--w c:\Program Files\InstallShield Installation Information
2008-06-10 12:49 --------- d-----w c:\Program Files\Pcsx2_0.9.4
2008-06-02 14:45 --------- d-----w c:\Program Files\Google
2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
2008-05-07 05:16 1,291,264 ----a-w C:\WINDOWS\system32\quartz.dll
2008-04-26 08:27 --------- d-----w c:\Program Files\Flash-SWF to AVI-GIF
2008-04-24 10:22 --------- d-----w C:\Documents and Settings\Rogal\Dane aplikacji\Pegasys Inc
2008-04-24 10:20 --------- d-----w c:\Program Files\DivX
2008-04-23 22:07 --------- d-----w c:\Program Files\Swf2Avi
2008-04-23 21:26 --------- d-----w c:\Program Files\Desktop Screen Record 5
2008-04-23 11:38 --------- d-----w c:\Program Files\Ad-Aware 2007
2008-04-23 07:20 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
2008-04-19 21:54 --------- d--h--r C:\Documents and Settings\Rogal\Dane aplikacji\SecuROM
2008-04-09 19:07 4 ----a-w C:\Documents and Settings\Rogal\WFSCHDL.dat
2008-04-09 19:07 20,500 ----a-w C:\Documents and Settings\Rogal\FMCodec.dat
2008-04-02 17:18 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
2008-04-02 17:18 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
2008-03-25 04:52 621,344 ----a-w C:\WINDOWS\system32\mswstr10.dll
2008-03-25 04:52 178,976 ----a-w C:\WINDOWS\system32\msjint40.dll
2008-03-20 08:09 1,845,504 ----a-w C:\WINDOWS\system32\win32k.sys
2008-03-14 06:26 22,328 ----a-w C:\Documents and Settings\Rogal\Dane aplikacji\PnkBstrK.sys
2007-11-04 21:51 17,528 ----a-w C:\Documents and Settings\Rogal\Dane aplikacji\GDIPFONTCACHEV1.DAT
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PeerGuardian"="C:\Program Files\PeerGuardian2\pg2.exe" [2005-09-18 18:40 1421824]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:44 15360]
"swg"="c:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-11-04 21:13 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-01-08 14:29 919280]
"DAEMON Tools-1033"="C:\Program Files\D-Tools\daemon.exe" [2004-08-22 17:05 81920]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 15:00 79224]
"WinFastDTV"="C:\Program Files\WinFast\WFDTV\DTVSchdl.exe" [2007-02-12 19:16 69632]
"WinFast Schedule"="C:\Program Files\WinFast\WFDTV\WFWIZ.exe" [2007-02-12 17:22 397312]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-10-04 18:14 8491008]
"SkyTel"="SkyTel.EXE" [2006-05-16 18:04 2879488 C:\WINDOWS\SkyTel.exe]
"RTHDCPL"="RTHDCPL.EXE" [2007-02-26 15:03 16125440 C:\WINDOWS\RTHDCPL.exe]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\WINDOWS\system32\npp\patch32.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.l3fhg"= mp3fhg.acm
"VIDC.X264"= x264vfw.dll
"VIDC.HFYU"= huffyuv.dll
"vidc.i263"= i263_32.drv
"msacm.divxa32"= divxa32.acm
"msacm.mpegacm"= mpegacm.acm
"msacm.ulmp3acm"= ulmp3acm.acm

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Microsoft Office.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
--a------ 2005-05-03 18:43 69632 C:\WINDOWS\Alcmtr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
--a------ 2007-06-27 20:03 152872 C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
C:\Program Files\BitTorrent\bittorrent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
--a------ 2004-08-04 00:44 15360 C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
--a------ 2006-10-27 01:47 31016 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
--a--c--- 2007-06-25 08:47 1057064 C:\Program Files\Nero\Nero 7\InCD\InCD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM]
--a------ 2006-03-20 18:34 213936 C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
--a------ 2006-03-20 18:34 213936 C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
--a------ 2006-03-20 18:34 86960 C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2007-09-26 15:42 267064 C:\Program Files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeChat]
--a------ 2007-01-26 14:31 259440 C:\Program Files\Microsoft LifeChat\LifeChat.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCommunicationsManager]
--a------ 2007-05-17 10:52 505368 C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon]
--a------ 2007-05-17 10:53 780312 C:\Program Files\Logitech\QuickCam10\QuickCam10.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
---hs---- 2004-10-13 18:24 1694208 C:\Program Files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2007-03-01 16:57 153136 C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
--a------ 2007-10-04 18:14 8491008 C:\WINDOWS\system32\NvCpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NVIDIA nTune]
--------- 2007-01-22 17:22 81920 C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
--a------ 2007-10-04 18:14 81920 C:\WINDOWS\system32\NvMcTray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
--a------ 2007-10-04 18:14 1626112 C:\WINDOWS\system32\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Onet.pl AutoUpdate]
--a------ 2005-07-27 11:59 260096 C:\Program Files\Common Files\Onet.pl\AutoUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\pdfFactory Dispatcher v2]
--a------ 2006-01-12 16:19 495616 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis2a.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-01-10 16:27 385024 C:\Program Files\QuickTime\qttask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
--a------ 2004-11-02 21:24 32768 c:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SecurDisc]
--a--c--- 2007-06-25 08:47 1629480 C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
--a------ 2006-05-16 18:04 2879488 C:\WINDOWS\SkyTel.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\STYLEXP]
--a------ 2005-08-18 15:15 1359872 C:\Program Files\TGTSoft\StyleXP\StyleXP.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--------- 2007-07-12 04:00 132496 C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
--a------ 2007-11-04 21:13 68856 c:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
--------- 2005-11-15 21:31 33792 C:\Program Files\Winamp\winampa.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
--------- 2006-12-01 12:46 204288 C:\Program Files\Windows Media Player\WMPNSCFG.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"K:\\Gry\\Viva Pinata\\Viva Pinata.exe"=
"K:\\Gry\\Crysis\\Bin32\\Crysis.exe"=
"K:\\Gry\\Crysis\\Bin32\\CrysisDedicatedServer.exe"=
"C:\\WINDOWS\\system32\\PnkBstrA.exe"=
"C:\\WINDOWS\\system32\\PnkBstrB.exe"=
"K:\\Gry\\NWN 2\\nwn2main.exe"=
"K:\\Gry\\NWN 2\\nwn2main_amdxp.exe"=
"K:\\Gry\\NWN 2\\nwupdate.exe"=
"K:\\Gry\\NWN 2\\nwn2server.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

R3 WFIOCTL;WFIOCTL;C:\Program Files\WinFast\WFDTV\WFIOCTL.SYS [2005-01-06 17:55]
S3 Kwari.xLoader;Kwari.xLoader;C:\Documents and Settings\Rogal\Ustawienia lokalne\Dane aplikacji\Micro Forte\Kwari\Kwari.xLoader.32 []

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
\Shell\AutoRun\command - F:\SETUP.EXE

*Newly Created Service* - PGFILTER

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A2040677-7FD0-86A2-8D18-A0A738BCF2EF}]
c:\Program Files\Mozilla Firefox\firefos.exe s
.
Contents of the 'Scheduled Tasks' folder
"2007-10-25 13:02:19 C:\WINDOWS\Tasks\LifeChatTask.job"
- C:\Program Files\Microsoft LifeChat\LifeChat.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-17 02:39:02
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet003\Services\Kwari.xLoader]
"ImagePath"="C:\Documents and Settings\Rogal\Ustawienia lokalne\Dane aplikacji\Micro Forte\Kwari\Kwari.xLoader.32"
.
Completion time: 2008-06-17 2:40:40
ComboFix-quarantined-files.txt 2008-06-17 00:40:23

Pre-Run: 3,664,142,336 bajtów wolnych
Post-Run: 3,641,917,440 bajtów wolnych

208 --- E O F --- 2008-06-11 13:42:08

[huber2t]

Pobierz ComboFix, ale nie uruchamiaj
Wklej do notatnika:

Kod: Zaznacz wszystko

File::
C:\WINDOWS\wkysvr.exe


Plik zapisz jako CFScript.txt (najwygodniej będzie, jeśli zapiszesz w takiej lokalizacji, by ikonka CFScript.txt znalazła się obok ikonki ComboFix.exe)
Przeciągnij i upuść ikonkę CFScript.txt na ikonkę ComboFix.exe tak jak tu

Rozpocznie się usuwanie i powstanie log, daj ten log na forum.

[Nemesis85]

oto log z combofixa juz po wywaleniu tamtego pliku

ComboFix 08-06-16.2 - Rogal 2008-06-18 0:59:49.6 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.1519 [GMT 2:00]
Running from: C:\Documents and Settings\Rogal\Pulpit\ComboFix.exe
Command switches used :: C:\Documents and Settings\Rogal\Pulpit\CFScript.txt
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

FILE ::
C:\WINDOWS\wkysvr.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\Dvbpws.dll
C:\WINDOWS\wkysvr.exe

.
((((((((((((((((((((((((( Files Created from 2008-05-17 to 2008-06-17 )))))))))))))))))))))))))))))))
.

2008-06-14 04:12 . 2008-06-14 04:11 227,275 --a------ C:\WINDOWS\rFactor Data Acquisition Plugin Uninstaller.exe.bak
2008-06-14 04:11 . 2008-06-14 04:11 <DIR> d-------- C:\Program Files\Common Files\Thraex Software
2008-06-14 04:11 . 2008-06-14 04:12 223,418 --a------ C:\WINDOWS\rFactor Data Acquisition Plugin Uninstaller.exe
2008-06-13 12:31 . 2008-06-13 12:31 <DIR> d-------- C:\Documents and Settings\LocalService\Pulpit
2008-06-12 11:04 . 2008-06-12 11:04 <DIR> d-------- C:\Documents and Settings\Rogal\Dane aplikacji\ArcaBit
2008-06-11 14:42 . 2008-04-14 17:53 273,024 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys
2008-06-11 12:26 . 2008-06-11 12:26 <DIR> d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-06-11 12:26 . 2008-06-11 12:26 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab
2008-06-02 16:28 . 2008-06-18 01:03 <DIR> d--h----- C:\Documents and Settings\Administrator.ROGALPL\Ustawienia lokalne
2008-06-02 16:28 . 2007-10-24 14:21 <DIR> d-------- C:\Documents and Settings\Administrator.ROGALPL\Ulubione
2008-06-02 16:28 . 2007-10-24 13:26 <DIR> d--h----- C:\Documents and Settings\Administrator.ROGALPL\Szablony
2008-06-02 16:28 . 2007-10-24 14:21 <DIR> d-------- C:\Documents and Settings\Administrator.ROGALPL\Pulpit
2008-06-02 16:28 . 2007-10-24 14:21 <DIR> d-------- C:\Documents and Settings\Administrator.ROGALPL\Moje dokumenty
2008-06-02 16:28 . 2007-10-24 14:21 <DIR> dr------- C:\Documents and Settings\Administrator.ROGALPL\Menu Start
2008-06-02 16:28 . 2007-10-24 14:21 <DIR> dr-h----- C:\Documents and Settings\Administrator.ROGALPL\Dane aplikacji
2008-06-02 16:28 . 2008-06-02 16:28 <DIR> d-------- C:\Documents and Settings\Administrator.ROGALPL
2008-05-31 15:12 . 2005-05-03 18:43 69,632 --a------ C:\WINDOWS\Alcmtr.exe
2008-05-18 17:49 . 2008-05-18 17:49 <DIR> d-------- C:\Documents and Settings\Rogal\Dane aplikacji\Palettes

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-17 23:03 --------- d-----w c:\Program Files\PeerGuardian2
2008-06-17 18:52 --------- d-----w C:\Documents and Settings\Rogal\Dane aplikacji\Skype
2008-06-17 10:11 0 ----a-w C:\WINDOWS\system32\drivers\lvuvc.hs
2008-06-16 22:11 --------- d-----w C:\Documents and Settings\Rogal\Dane aplikacji\uTorrent
2008-06-15 17:42 3,442,176 ----a-w C:\WINDOWS\Internet Logs\xDB1.tmp
2008-06-12 12:41 --------- d-----w c:\Program Files\Vopt8
2008-06-12 12:19 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help
2008-06-11 12:12 11,948,725 ----a-w C:\WINDOWS\Internet Logs\tvDebug.zip
2008-06-10 17:22 23,352 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-06-10 17:22 107,832 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
2008-06-10 13:00 --------- d-----w c:\Program Files\Gadu-Gadu
2008-06-10 13:00 --------- d-----w c:\Program Files\DAP
2008-06-10 12:51 --------- d-----w c:\Program Files\FLAC
2008-06-10 12:49 --------- d--h--w c:\Program Files\InstallShield Installation Information
2008-06-10 12:49 --------- d-----w c:\Program Files\Pcsx2_0.9.4
2008-06-02 14:45 --------- d-----w c:\Program Files\Google
2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
2008-05-07 05:16 1,291,264 ----a-w C:\WINDOWS\system32\quartz.dll
2008-04-26 08:27 --------- d-----w c:\Program Files\Flash-SWF to AVI-GIF
2008-04-24 10:22 --------- d-----w C:\Documents and Settings\Rogal\Dane aplikacji\Pegasys Inc
2008-04-24 10:20 --------- d-----w c:\Program Files\DivX
2008-04-23 22:07 --------- d-----w c:\Program Files\Swf2Avi
2008-04-23 21:26 --------- d-----w c:\Program Files\Desktop Screen Record 5
2008-04-23 11:38 --------- d-----w c:\Program Files\Ad-Aware 2007
2008-04-23 07:20 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
2008-04-19 21:54 --------- d--h--r C:\Documents and Settings\Rogal\Dane aplikacji\SecuROM
2008-04-09 19:07 4 ----a-w C:\Documents and Settings\Rogal\WFSCHDL.dat
2008-04-09 19:07 20,500 ----a-w C:\Documents and Settings\Rogal\FMCodec.dat
2008-04-02 17:18 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
2008-04-02 17:18 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
2008-03-25 04:52 621,344 ----a-w C:\WINDOWS\system32\mswstr10.dll
2008-03-25 04:52 178,976 ----a-w C:\WINDOWS\system32\msjint40.dll
2008-03-20 08:09 1,845,504 ----a-w C:\WINDOWS\system32\win32k.sys
2008-03-14 06:26 22,328 ----a-w C:\Documents and Settings\Rogal\Dane aplikacji\PnkBstrK.sys
2007-11-04 21:51 17,528 ----a-w C:\Documents and Settings\Rogal\Dane aplikacji\GDIPFONTCACHEV1.DAT
.

((((((((((((((((((((((((((((( snapshot@2008-06-17_ 2.39.58,70 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-04-19 20:41:03 53,248 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2008-06-17 06:27:41 53,248 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
- 2008-04-19 20:41:03 12,800 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
+ 2008-06-17 06:27:41 12,800 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
- 2008-04-19 20:41:03 473,600 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
+ 2008-06-17 06:27:41 473,600 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
- 2008-04-19 20:40:58 2,676,224 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-17 06:27:37 2,676,224 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-04-19 20:40:59 2,846,720 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-17 06:27:38 2,846,720 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-04-19 20:40:59 563,712 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-17 06:27:38 563,712 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-04-19 20:41:00 567,296 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-17 06:27:39 567,296 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-04-19 20:41:00 576,000 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-17 06:27:39 576,000 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-04-19 20:41:01 577,024 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-17 06:27:39 577,024 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-04-19 20:41:01 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-17 06:27:40 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-04-19 20:41:02 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-17 06:27:40 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-04-19 20:41:02 578,560 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-17 06:27:40 578,560 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-04-19 20:41:04 578,560 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-06-17 06:27:41 578,560 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-04-19 20:41:04 145,920 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
+ 2008-06-17 06:27:41 145,920 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
- 2008-04-19 20:41:04 159,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
+ 2008-06-17 06:27:42 159,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
- 2008-04-19 20:41:04 364,544 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
+ 2008-06-17 06:27:42 364,544 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
- 2008-04-19 20:41:05 178,176 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2008-06-17 06:27:42 178,176 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
- 2008-04-19 20:41:03 223,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2008-06-17 06:27:41 223,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
- 2008-06-17 00:30:34 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-06-17 10:11:47 2,048 --s-a-w C:\WINDOWS\bootstat.dat
- 2008-06-17 00:31:19 4,212 ---h--w C:\WINDOWS\system32\zllictbl.dat
+ 2008-06-17 10:12:38 4,212 ---h--w C:\WINDOWS\system32\zllictbl.dat
+ 2008-06-17 10:12:27 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_560.dat
+ 2008-06-17 10:12:30 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_6c8.dat
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PeerGuardian"="C:\Program Files\PeerGuardian2\pg2.exe" [2005-09-18 18:40 1421824]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:44 15360]
"swg"="c:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-11-04 21:13 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-01-08 14:29 919280]
"DAEMON Tools-1033"="C:\Program Files\D-Tools\daemon.exe" [2004-08-22 17:05 81920]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 15:00 79224]
"WinFastDTV"="C:\Program Files\WinFast\WFDTV\DTVSchdl.exe" [2007-02-12 19:16 69632]
"WinFast Schedule"="C:\Program Files\WinFast\WFDTV\WFWIZ.exe" [2007-02-12 17:22 397312]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-10-04 18:14 8491008]
"SkyTel"="SkyTel.EXE" [2006-05-16 18:04 2879488 C:\WINDOWS\SkyTel.exe]
"RTHDCPL"="RTHDCPL.EXE" [2007-02-26 15:03 16125440 C:\WINDOWS\RTHDCPL.exe]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\WINDOWS\system32\npp\patch32.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.l3fhg"= mp3fhg.acm
"VIDC.X264"= x264vfw.dll
"VIDC.HFYU"= huffyuv.dll
"vidc.i263"= i263_32.drv
"msacm.divxa32"= divxa32.acm
"msacm.mpegacm"= mpegacm.acm
"msacm.ulmp3acm"= ulmp3acm.acm

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Microsoft Office.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
--a------ 2005-05-03 18:43 69632 C:\WINDOWS\Alcmtr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
--a------ 2007-06-27 20:03 152872 C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
C:\Program Files\BitTorrent\bittorrent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
--a------ 2004-08-04 00:44 15360 C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
--a------ 2006-10-27 01:47 31016 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
--a--c--- 2007-06-25 08:47 1057064 C:\Program Files\Nero\Nero 7\InCD\InCD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM]
--a------ 2006-03-20 18:34 213936 C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
--a------ 2006-03-20 18:34 213936 C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
--a------ 2006-03-20 18:34 86960 C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2007-09-26 15:42 267064 C:\Program Files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeChat]
--a------ 2007-01-26 14:31 259440 C:\Program Files\Microsoft LifeChat\LifeChat.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCommunicationsManager]
--a------ 2007-05-17 10:52 505368 C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon]
--a------ 2007-05-17 10:53 780312 C:\Program Files\Logitech\QuickCam10\QuickCam10.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
---hs---- 2004-10-13 18:24 1694208 C:\Program Files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2007-03-01 16:57 153136 C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
--a------ 2007-10-04 18:14 8491008 C:\WINDOWS\system32\NvCpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NVIDIA nTune]
--------- 2007-01-22 17:22 81920 C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
--a------ 2007-10-04 18:14 81920 C:\WINDOWS\system32\NvMcTray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
--a------ 2007-10-04 18:14 1626112 C:\WINDOWS\system32\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Onet.pl AutoUpdate]
--a------ 2005-07-27 11:59 260096 C:\Program Files\Common Files\Onet.pl\AutoUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\pdfFactory Dispatcher v2]
--a------ 2006-01-12 16:19 495616 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis2a.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-01-10 16:27 385024 C:\Program Files\QuickTime\qttask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
--a------ 2004-11-02 21:24 32768 c:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SecurDisc]
--a--c--- 2007-06-25 08:47 1629480 C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
--a------ 2006-05-16 18:04 2879488 C:\WINDOWS\SkyTel.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\STYLEXP]
--a------ 2005-08-18 15:15 1359872 C:\Program Files\TGTSoft\StyleXP\StyleXP.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--------- 2007-07-12 04:00 132496 C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
--a------ 2007-11-04 21:13 68856 c:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
--------- 2005-11-15 21:31 33792 C:\Program Files\Winamp\winampa.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
--------- 2006-12-01 12:46 204288 C:\Program Files\Windows Media Player\WMPNSCFG.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"K:\\Gry\\Viva Pinata\\Viva Pinata.exe"=
"K:\\Gry\\Crysis\\Bin32\\Crysis.exe"=
"K:\\Gry\\Crysis\\Bin32\\CrysisDedicatedServer.exe"=
"C:\\WINDOWS\\system32\\PnkBstrA.exe"=
"C:\\WINDOWS\\system32\\PnkBstrB.exe"=
"K:\\Gry\\NWN 2\\nwn2main.exe"=
"K:\\Gry\\NWN 2\\nwn2main_amdxp.exe"=
"K:\\Gry\\NWN 2\\nwupdate.exe"=
"K:\\Gry\\NWN 2\\nwn2server.exe"=
"K:\\Gry\\S.T.A.L.K.E.R\\bin\\XR_3DA.exe"=
"K:\\Gry\\S.T.A.L.K.E.R\\bin\\dedicated\\XR_3DA.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

R3 WFIOCTL;WFIOCTL;C:\Program Files\WinFast\WFDTV\WFIOCTL.SYS [2005-01-06 17:55]
S3 Kwari.xLoader;Kwari.xLoader;C:\Documents and Settings\Rogal\Ustawienia lokalne\Dane aplikacji\Micro Forte\Kwari\Kwari.xLoader.32 []

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
\Shell\AutoRun\command - F:\SETUP.EXE


[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A2040677-7FD0-86A2-8D18-A0A738BCF2EF}]
c:\Program Files\Mozilla Firefox\firefos.exe s
.
Contents of the 'Scheduled Tasks' folder
"2007-10-25 13:02:19 C:\WINDOWS\Tasks\LifeChatTask.job"
- C:\Program Files\Microsoft LifeChat\LifeChat.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-18 01:03:22
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet003\Services\Kwari.xLoader]
"ImagePath"="C:\Documents and Settings\Rogal\Ustawienia lokalne\Dane aplikacji\Micro Forte\Kwari\Kwari.xLoader.32"
.
Completion time: 2008-06-18 1:05:42
ComboFix-quarantined-files.txt 2008-06-17 23:04:50
ComboFix2.txt 2008-06-17 00:40:41

Pre-Run: 3,423,322,112 bajtów wolnych
Post-Run: 3,401,400,320 bajtów wolnych

264 --- E O F --- 2008-06-11 13:42:08

[huber2t]

Log wyglada na czysty

usuń ręcznie folder C: \Qoobox , usuń instalkę Combofix z dysku.

Wyłącz i włącz przywracanie systemu na wszystkich dyskach. Instrukcja

Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum