Proszę o sprawdzenie loga-ComboFix

[l4zy]

proszę o sprawdzenie loga i dalsze instrukcje

http://www.wklej.eu/index.php?id=e03ef377c9

[mateo8898]

Wklej do notatnika:

Kod: Zaznacz wszystko

Driver::
XDva279

File::
c:\windows\system32\XDva279.sys
c:\documents and settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
c:\documents and settings\czaru\Dane aplikacji\Mozilla\Firefox\Profiles\ppne8xws.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampTBPlayer.dll
c:\windows\Tasks\ParetoLogic Update Version2.job
c:\windows\Tasks\ParetoLogic Registration.job

Folder::
c:\program files\Winamp Toolbar
c:\documents and settings\All Users\Dane aplikacji\Winamp Toolbar

DDS::
uStart Page = hxxp://search.mywebsearch.com/mywebsearch/default.jhtml?ptnrS=ZJman000&ptb=_Sx79lRCpSd2tPqjdd5EeQ
IE: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZJman000
IE: &Winamp Search - c:\documents and settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
FF - prefs.js: browser.search.defaulturl - hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query=
FF - prefs.js: keyword.URL - hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampab&query=
FF - component: c:\documents and settings\czaru\Dane aplikacji\Mozilla\Firefox\Profiles\ppne8xws.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampTBPlayer.dll

Registry::
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{57BCA5FA-5DBB-45a2-B558-1755C3F6253B}"=-
[-HKEY_CLASSES_ROOT\clsid\{57bca5fa-5dbb-45a2-b558-1755c3f6253b}]
[-HKEY_CLASSES_ROOT\WINAMPTB.AOLTBSearch.1]
[-HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[-HKEY_CLASSES_ROOT\WINAMPTB.AOLTBSearch]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ALLUpdate"=-
"Pareto_Update"=-
"Google Update"=-
"Odkurzacz-MCD"=-
"IPLA!"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=-
"StartCCC"=-
"P17Helper"=-
"iTunesHelper"=-
"SunJavaUpdateSched"=-

Plik zapisz jako CFScript.txt
Przeciągnij i upuść ikonkę CFScript.txt na ikonkę ComboFix.exe


Rozpocznie się usuwanie i powstanie log, który dajesz na forum.

[l4zy]

ComboFix 10-01-04.01 - czaru 2010-01-06 22:17:24.12.2 - x86
Microsoft Windows XP Professional 5.1.2600.2.1250.48.1045.18.1918.1445 [GMT 1:00]
Uruchomiony z: c:\documents and settings\czaru\Pulpit\ComboFix.exe
Użyto następujących komend :: c:\documents and settings\czaru\Pulpit\CFScript.txt
AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

FILE ::
"c:\documents and settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html"
"c:\documents and settings\czaru\Dane aplikacji\Mozilla\Firefox\Profiles\ppne8xws.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampTBPlayer.dll"
"c:\windows\system32\XDva279.sys"
"c:\windows\Tasks\ParetoLogic Registration.job"
"c:\windows\Tasks\ParetoLogic Update Version2.job"
.

((((((((((((((((((((((((( Pliki utworzone od 2009-12-06 do 2010-01-06 )))))))))))))))))))))))))))))))
.

2010-01-06 18:03 . 2010-01-06 18:03 -------- d-----w- c:\program files\Trend Micro
2010-01-05 20:33 . 2010-01-05 20:33 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-01-05 20:33 . 2010-01-05 20:33 -------- d-----w- c:\program files\Java
2010-01-05 20:33 . 2010-01-05 20:33 152576 ----a-w- c:\documents and settings\czaru\Dane aplikacji\Sun\Java\jre1.6.0_17\lzma.dll
2010-01-05 20:30 . 2010-01-05 20:30 79488 ----a-w- c:\documents and settings\czaru\Dane aplikacji\Sun\Java\jre1.6.0_17\gtapi.dll
2010-01-05 19:32 . 2010-01-05 19:33 -------- d-----w- c:\program files\JavaCaR
2010-01-05 17:23 . 2010-01-05 17:23 -------- d-----w- c:\program files\Activision
2010-01-05 17:15 . 2010-01-05 17:15 -------- d-----w- c:\program files\PowerISO
2010-01-04 11:46 . 2010-01-04 11:46 -------- d-----w- c:\program files\Passcape
2010-01-04 10:21 . 2010-01-04 10:32 -------- d-----w- c:\program files\CommViewWiFi
2010-01-04 10:13 . 2010-01-04 10:13 -------- d-----w- c:\program files\Network Stumbler
2010-01-04 09:44 . 2010-01-04 09:44 -------- d-----w- c:\program files\WinPcap
2010-01-04 09:43 . 2010-01-04 09:43 -------- d-----w- c:\program files\CACE Technologies
2010-01-04 09:42 . 2004-03-29 15:23 90112 ----a-w- c:\windows\unvise32.exe
2010-01-04 09:42 . 2010-01-04 14:21 -------- d-----w- C:\AiroWizard
2010-01-03 20:44 . 2010-01-03 20:44 -------- d-----w- c:\program files\ipla
2010-01-03 14:55 . 2010-01-04 14:21 -------- d-----w- C:\OEMSettings
2010-01-03 13:46 . 2010-01-03 14:48 -------- d-----w- c:\program files\Wisdom-soft ScreenHunter 5 Plus
2010-01-03 12:41 . 2010-01-03 12:41 -------- d-----w- c:\program files\Makayama Interactive
2009-12-30 21:12 . 2009-12-30 21:12 344624 ----a-w- c:\documents and settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
2009-12-30 19:15 . 2004-06-28 11:08 42752 ------w- c:\windows\system32\drivers\ser2pl.sys
2009-12-30 19:14 . 2009-12-30 19:18 -------- d-----w- c:\documents and settings\czaru\Ustawienia lokalne\Dane aplikacji\Deployment
2009-12-28 13:55 . 2009-12-28 13:55 -------- d-----w- c:\windows\system32\Futuremark
2009-12-28 13:55 . 2004-10-25 19:02 21664 ----a-w- c:\windows\system32\drivers\Entech.sys
2009-12-28 13:55 . 2004-06-22 14:44 5632 ----a-w- c:\windows\system32\drivers\Entech64.sys
2009-12-28 13:55 . 2001-11-19 18:05 3972 ----a-w- c:\windows\system32\drivers\PciBus.sys
2009-12-28 13:55 . 2009-12-28 13:55 -------- d-----w- c:\program files\Futuremark
2009-12-28 13:29 . 2009-12-30 19:22 -------- d-----w- c:\documents and settings\czaru\Dane aplikacji\FreshDiagnose
2009-12-28 13:29 . 2009-12-28 13:29 -------- d-----w- c:\program files\FreshDevices
2009-12-28 13:17 . 2007-03-05 10:51 360580 ----a-w- c:\windows\eSellerateEngine.dll
2009-12-28 13:17 . 2009-12-28 13:17 -------- d-----w- c:\program files\Hot CPU Tester Pro 4 LE
2009-12-26 08:49 . 2009-12-26 08:51 -------- d-----w- c:\program files\mp3DirectCut
2009-12-25 18:54 . 2009-12-25 18:54 -------- d-----w- c:\program files\Gameforge4D
2009-12-25 11:31 . 2009-12-25 11:31 -------- d-----w- c:\program files\Mp3 Knife
2009-12-25 05:06 . 2009-12-25 05:06 -------- d-----w- c:\program files\MGrenda
2009-12-24 09:21 . 2009-12-24 09:21 -------- d-----w- c:\program files\SnadBoy's Revelation v2
2009-12-22 17:04 . 2009-12-22 17:04 -------- d-----w- c:\documents and settings\czaru\Dane aplikacji\streamripper
2009-12-22 17:00 . 2009-12-22 17:00 -------- d-----w- c:\program files\Streamripper
2009-12-22 16:50 . 2009-12-22 16:50 -------- d-----w- c:\program files\Winamp Detect
2009-12-22 16:04 . 2009-12-22 16:04 -------- d-----w- c:\documents and settings\czaru\Dane aplikacji\Mercora
2009-12-22 12:36 . 2009-12-22 12:36 476512 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker_2009\RadioRip\RadioRip.dll
2009-12-22 12:36 . 2009-12-22 12:36 169312 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker_2009\RadioRip\PlgSoundclick.dll
2009-12-22 12:36 . 2009-12-22 12:36 111968 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker_2009\RadioRip\PlgPandora.dll
2009-12-22 12:35 . 2009-12-22 12:35 128352 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker_2009\RadioRip\PlgMyspace.dll
2009-12-22 12:35 . 2009-12-22 12:35 111968 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker_2009\RadioRip\PlgLastfm.dll
2009-12-22 12:35 . 2009-12-22 12:35 99680 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker_2009\RadioRip\PlgIJigg.dll
2009-12-22 12:35 . 2009-12-22 12:35 230752 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker_2009\RadioRip\PlgHypemachine.dll
2009-12-22 12:35 . 2009-12-22 12:35 120160 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker_2009\RadioRip\PlgGeneral.dll
2009-12-22 12:35 . 2009-12-22 12:35 87392 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker_2009\RadioRip\PlgDefault.dll
2009-12-22 12:35 . 2009-12-22 12:35 140640 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker_2009\RadioRip\PlgDeezer.dll
2009-12-22 12:35 . 2008-09-24 19:33 484352 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker_2009\EncodingBackend\lame_enc.dll
2009-12-22 12:35 . 2009-12-22 12:35 -------- d-----w- c:\program files\PixiePack Codec Pack
2009-12-22 12:34 . 2009-12-22 12:34 -------- d-----w- c:\program files\RapidSolution
2009-12-22 12:34 . 2009-12-22 12:34 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution
2009-12-22 12:32 . 2009-12-22 12:32 -------- d-----w- c:\documents and settings\czaru\Ustawienia lokalne\Dane aplikacji\RapidSolution
2009-12-19 09:15 . 2009-12-20 13:59 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\OpenFM
2009-12-19 09:15 . 2009-12-19 09:15 -------- d-----w- c:\documents and settings\czaru\Dane aplikacji\OpenFM
2009-12-17 15:47 . 2009-12-17 15:47 -------- d-----w- c:\documents and settings\czaru\Dane aplikacji\Auslogics
2009-12-17 15:47 . 2009-12-17 15:47 -------- d-----w- c:\program files\Auslogics
2009-12-17 15:12 . 2010-01-04 13:46 -------- d-----w- c:\program files\Odkurzacz 12
2009-12-16 21:18 . 2009-12-16 21:18 -------- d-----w- c:\program files\CPUID
2009-12-16 21:18 . 2009-03-27 00:16 12672 ----a-w- c:\windows\system32\drivers\cpuz132_x32.sys
2009-12-16 09:28 . 2009-12-16 09:28 21035 ----a-w- c:\windows\system32\drivers\AegisP.sys
2009-12-16 09:27 . 2009-12-16 09:27 -------- d-----w- c:\program files\NETGEAR
2009-12-16 09:27 . 2009-12-16 09:27 -------- d-----w- c:\windows\Downloaded Installations
2009-12-12 08:13 . 2009-12-22 07:13 2066200 ----a-w- c:\documents and settings\All Users\Dane aplikacji\avg8\update\backup\avgcorex.dll
2009-12-10 14:45 . 2009-12-10 14:45 27168 ----a-w- c:\windows\system32\drivers\rrnetcap.sys
2009-12-08 17:06 . 2009-12-08 17:06 -------- d-----w- c:\documents and settings\czaru\Dane aplikacji\TeamViewer
2009-12-08 17:04 . 2009-12-08 17:04 -------- d-----w- c:\program files\TeamViewer
2009-12-08 17:04 . 2009-12-08 17:04 -------- d-----w- c:\documents and settings\czaru\temp

.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-06 21:14 . 2008-12-30 08:02 -------- d-----w- c:\documents and settings\czaru\Dane aplikacji\Skype
2010-01-06 18:28 . 2009-01-12 16:49 -------- d-----w- c:\documents and settings\czaru\Dane aplikacji\ipla
2010-01-06 18:07 . 2009-07-14 08:33 -------- d-----w- c:\program files\Xfire
2010-01-05 17:29 . 2008-12-29 23:39 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-01-03 10:37 . 2009-01-18 08:02 138328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-01-03 10:37 . 2009-01-18 08:02 214816 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-01-01 11:38 . 2009-12-22 16:49 -------- d-----w- c:\documents and settings\czaru\Dane aplikacji\Winamp
2009-12-31 06:57 . 2008-12-30 10:54 -------- d-----w- c:\program files\DsNet
2009-12-29 07:50 . 2008-12-29 23:53 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\avg8
2009-12-26 09:58 . 2009-11-25 17:54 -------- d-----w- c:\program files\Gadu-Gadu 10
2009-12-23 06:18 . 2009-12-22 16:49 -------- d-----w- c:\program files\Winamp
2009-12-22 16:02 . 2009-12-02 11:03 867664 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\GUIcommon.dll
2009-12-22 12:34 . 2009-02-28 20:34 -------- d---a-w- c:\documents and settings\All Users\Dane aplikacji\TEMP
2009-12-19 09:09 . 2009-01-24 10:59 -------- d-----w- c:\program files\ZodiacEdit
2009-12-19 09:08 . 2009-09-24 05:05 -------- d-----w- c:\program files\Silkroad
2009-12-17 15:39 . 2009-02-01 16:29 -------- d-----w- c:\program files\BitComet
2009-12-16 02:19 . 2001-10-26 17:15 83880 ----a-w- c:\windows\system32\perfc015.dat
2009-12-16 02:19 . 2001-10-26 17:15 490628 ----a-w- c:\windows\system32\perfh015.dat
2009-12-06 10:04 . 2008-12-30 11:02 33824 ----a-w- c:\windows\system32\drivers\oreans32.sys
2009-12-04 20:52 . 2009-12-04 20:52 -------- d-----w- c:\documents and settings\czaru\Dane aplikacji\ijjigame
2009-12-04 20:50 . 2009-12-04 20:50 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\ijjigame
2009-12-04 16:39 . 2009-12-04 16:39 -------- d-----w- c:\program files\ijji
2009-11-27 18:51 . 2009-11-27 15:15 -------- d-----w- c:\documents and settings\czaru\Dane aplikacji\gtk-2.0
2009-11-27 15:02 . 2009-11-27 15:02 -------- d-----w- c:\program files\GIMP-2.0
2009-11-25 17:54 . 2009-11-25 17:54 -------- d-----w- c:\documents and settings\czaru\Dane aplikacji\Gadu-Gadu 10
2009-11-24 23:33 . 2008-12-30 09:11 71960 ----a-w- c:\documents and settings\czaru\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
2009-11-23 10:53 . 2009-11-23 10:53 37376 ----a-w- c:\documents and settings\czaru\Dane aplikacji\Gadu-Gadu 10\_userdata\ggbho.2.dll
2009-11-23 10:53 . 2009-11-23 10:53 11776 ----a-w- c:\documents and settings\czaru\Dane aplikacji\Gadu-Gadu 10\_userdata\npgg.2.dll
2009-11-20 12:05 . 2009-02-11 06:26 -------- d-----w- c:\program files\Tremulous
2009-11-20 12:04 . 2009-11-08 14:47 -------- d-----w- c:\program files\IVONA
2009-11-10 10:05 . 2009-11-10 10:05 -------- d-----w- c:\program files\Ganymede
2009-11-10 10:05 . 2009-11-10 09:50 -------- d-----w- c:\program files\Nowe Gadu-Gadu
2009-11-08 14:51 . 2009-11-08 14:51 -------- d-----w- c:\documents and settings\czaru\Dane aplikacji\IVONA Player
2009-10-29 05:21 . 2007-01-04 13:05 671232 ------w- c:\windows\system32\wininet.dll
2009-10-21 05:51 . 2004-08-03 23:44 75776 ----a-w- c:\windows\system32\strmfilt.dll
2009-10-21 05:51 . 2004-08-03 23:44 25088 ----a-w- c:\windows\system32\httpapi.dll
2009-10-20 14:41 . 2007-03-10 01:34 265728 ----a-w- c:\windows\system32\drivers\http.sys
2009-10-13 10:53 . 2004-08-03 23:44 267776 ----a-w- c:\windows\system32\oakley.dll
2009-10-12 13:54 . 2004-08-03 23:44 69632 ----a-w- c:\windows\system32\raschap.dll
2009-10-12 13:54 . 2004-08-03 23:44 112640 ----a-w- c:\windows\system32\rastls.dll
2004-08-03 23:44 . 2009-07-22 09:10 73728 --sha-w- c:\windows\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}$BACKUP$\System\wmplayer.exe
.

((((((((((((((((((((((((((((( SnapShot@2010-01-06_18.28.19 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-01-06 21:16 . 2010-01-06 21:16 16384 c:\windows\temp\Perflib_Perfdata_7d0.dat
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2006-06-26 20005928]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2009-04-23 691656]
"Gadu-Gadu 10"="c:\program files\Gadu-Gadu 10\gg.exe" [2009-12-21 11850344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SetRefresh"="c:\program files\COMPAQ\SetRefresh\\SetRefresh.exe" [2003-11-20 525824]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-12-12 2043160]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360]

c:\documents and settings\All Users\Menu Start\Programy\Autostart\
BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2005-10-9 610365]
NETGEAR WG111v3 Smart Wizard.lnk - c:\program files\NETGEAR\WG111v3\WG111v3.exe [2008-7-1 2326528]
RaConfig.lnk - c:\windows\system32\RaConfig.exe [2008-12-30 397312]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-08-17 06:16 11952 ----a-w- c:\windows\system32\avgrsstx.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Wolfenstein - Enemy Territory\\ET.exe"=
"c:\\Program Files\\Metin2_PL\\metin2.bin"=
"c:\\Program Files\\JavaSoft\\JRE\\1.3.1_18\\bin\\javaw.exe"=
"c:\\Program Files\\Warcraft III\\Warcraft III.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"d:\\Soldat\\Soldat.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"e:\\CABAL Online (Europe)\\CABAL Online (Europe)\\launcher\\update\\ESTdnheadless.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Nowe Gadu-Gadu\\gg.exe"=
"e:\\Program Files\\Counter-Strike\\hl.exe"=
"c:\\Program Files\\Metin2_PL\\metin2client.bin"=
"c:\\BaboViolent 2\\bv2.exe"=
"c:\\Program Files\\Gadu-Gadu 10\\gg.exe"=
"c:\\WINDOWS\\Downloaded Program Files\\ijjiOptimizer.exe"=
"c:\\Program Files\\TeamViewer\\Version5\\TeamViewer.exe"=
"c:\\Documents and Settings\\czaru\\Pulpit\\DsNetMUStart.exe"=
"c:\\Program Files\\BitComet\\BitComet.exe"=
"c:\\Downloads\\SRO_L4_Full_Client_Downloader.exe"=
"c:\\Documents and Settings\\czaru\\Pulpit\\bmain.exe"=
"c:\\Program Files\\DsNet\\DsNetMUStart.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"19601:TCP"= 19601:TCP:BitComet 19601 TCP
"19601:UDP"= 19601:UDP:BitComet 19601 UDP

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-08-01 335240]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-08-01 108552]
R2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [2009-08-02 908056]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-08-02 297752]
R2 cpuz132;cpuz132;c:\windows\system32\drivers\cpuz132_x32.sys [2009-12-16 12672]
R2 EAPPkt;Realtek EAPPkt Protocol;c:\windows\system32\drivers\EAPPkt.sys [2007-10-09 38144]
R2 eusk2par;EUTRON SmartKey Parallel Driver;c:\windows\system32\drivers\eusk2par.sys [2008-12-30 16695]
R3 RRNetCapMP;RRNetCapMP;c:\windows\system32\drivers\rrnetcap.sys [2009-12-10 27168]
R3 RT2400;RT2400 Wireless Driver;c:\windows\system32\drivers\RT2400.sys [2008-07-29 62848]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\drivers\seehcri.sys [2009-02-01 27632]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [2009-05-01 721904]
S3 ctlsb16;Sterownik Creative SB16/AWE32/AWE64 (WDM);c:\windows\system32\drivers\ctlsb16.sys [2009-01-06 96256]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2008-05-22 34576]
S3 PasscapeLoader;Passcape Loader Service;c:\program files\Passcape\NPRW\loader.exe [2009-09-30 57344]
S3 RRNetCap;RRNetCap Service;c:\windows\system32\drivers\rrnetcap.sys [2009-12-10 27168]
S3 RTL8187B;NETGEAR WG111v3 54Mbps Wireless USB 2.0 Adapter Vista Driver;c:\windows\system32\drivers\wg111v3.sys [2009-07-31 287232]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9C450606-ED24-4958-92BA-B8940C99D441}]
2009-03-04 15:32 8192 ----a-w- c:\program files\PixiePack Codec Pack\InstallerHelper.exe
.
Zawartość folderu 'Zaplanowane zadania'

2010-01-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1788223648-725345543-1003Core.job
- c:\documents and settings\czaru\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [2009-09-11 15:33]

2010-01-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1788223648-725345543-1003UA.job
- c:\documents and settings\czaru\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [2009-09-11 15:33]

2010-01-06 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2009-05-13 20:18]
.
.
------- Skan uzupełniający -------
.
uInternet Settings,ProxyServer = socks=
uInternet Settings,ProxyOverride = plimus.com,www.plimus.com,regnow.com,www.regnow.com,;*.local
IE: c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
TCP: {59D18507-D236-4D40-BA75-D3AF80E9C427} = 208.67.222.222,213.199.225.14
FF - ProfilePath - c:\documents and settings\czaru\Dane aplikacji\Mozilla\Firefox\Profiles\ppne8xws.default\
FF - prefs.js: browser.search.defaulturl - hxxp://slirsredirect.search.aol.com/sli ... ie7&query=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - www.google.pl
FF - prefs.js: keyword.URL - hxxp://slirsredirect.search.aol.com/sli ... pab&query=
FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll
FF - plugin: c:\documents and settings\czaru\Dane aplikacji\Gadu-Gadu 10\_userdata\npgg.2.dll
FF - plugin: c:\documents and settings\czaru\Dane aplikacji\Mozilla\Firefox\Profiles\ppne8xws.default\extensions\[email protected]\platform\WINNT_x86-msvc\plugins\npBFHUpdater.dll
FF - plugin: c:\documents and settings\czaru\Ustawienia lokalne\Dane aplikacji\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npijjiautoinstallpluginff.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npijjiFFPlugin1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npwachk.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.

**************************************************************************
skanowanie ukrytych procesów ...

skanowanie ukrytych wpisów autostartu ...

skanowanie ukrytych plików ...

skanowanie pomyślnie ukończone
ukryte pliki:

**************************************************************************
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------

- - - - - - - > 'winlogon.exe'(1220)
c:\windows\system32\Ati2evxx.dll
.
Czas ukończenia: 2010-01-06 22:21:54
ComboFix-quarantined-files.txt 2010-01-06 21:21
ComboFix2.txt 2010-01-06 21:04
ComboFix3.txt 2010-01-06 18:58
ComboFix4.txt 2010-01-06 18:52
ComboFix5.txt 2010-01-06 21:16

Przed: 1 567 977 472 bajtów wolnych
Po: 1 535 991 808 bajtów wolnych

- - End Of File - - 4C8E0F2FE00EBB4461EA0E4AE3E3AA0B

[mateo8898]

Ok, więcej nic nie widać.

Pobierz OTC uruchom i kliknij CleanUp

Przeczyść dysk oraz rejestr CCleaner

Wyłącz i włącz przywracanie systemu na wszystkich dyskach Instrukcja

Wykonaj pełne skanowanie Malwarebytes' Anti-Malware - jeśli coś znajdzie usuń i daj raport

[l4zy]

http://www.wklej.eu/index.php?id=6448cc8687

dzięki

[mateo8898]

Skoro usunięte to ok, opróżnij jeszcze kwarantannę Malwarebytes