ComboFix 09-03-29.04 - Ania i Michał 2009-03-30 22:09:32.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.1279.844 [GMT 2:00]
Uruchomiony z: c:\documents and settings\Ania i Michał\Pulpit\ComboFix.exe
AV: avast! antivirus 4.8.1335 [VPS 090330-0] *On-access scanning disabled* (Updated)
* Utworzono nowy punkt przywracania
UWAGA - TEN KOMPUTER NIE MA ZAINSTALOWANEJ KONSOLI ODZYSKIWANIA !!
.
((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\program files\Mozilla Firefox\plugins\NPMyGlSh.dll
c:\windows\system32\_000003_.tmp.dll
.
((((((((((((((((((((((((( Pliki utworzone od 2009-02-28 do 2009-03-30 )))))))))))))))))))))))))))))))
.
2009-03-28 15:17 . 2009-03-30 11:58 <DIR> d-------- c:\windows\system32\CatRoot_bak
2009-03-28 15:14 . 2009-03-28 15:19 <DIR> d-------- c:\program files\StudioLine Photo Basic
2009-03-28 15:14 . 2009-03-28 15:14 52 --a------ c:\windows\Relax.ini
2009-03-10 14:03 . 2009-03-10 14:03 <DIR> dr-h----- c:\documents and settings\Ania i Michał\Dane aplikacji\SecuROM
2009-03-10 14:02 . 2009-03-10 14:02 107,888 --a------ c:\windows\system32\CmdLineExt.dll
2009-03-10 13:59 . 2008-05-30 15:11 3,850,760 --a------ c:\windows\system32\D3DX9_38.dll
2009-03-10 13:59 . 2008-05-30 15:11 1,491,992 --a------ c:\windows\system32\D3DCompiler_38.dll
2009-03-10 13:59 . 2008-05-30 15:19 507,400 --a------ c:\windows\system32\XAudio2_1.dll
2009-03-10 13:59 . 2008-05-30 15:11 467,984 --a------ c:\windows\system32\d3dx10_38.dll
2009-03-10 13:59 . 2008-05-30 15:18 238,088 --a------ c:\windows\system32\xactengine3_1.dll
2009-03-10 13:59 . 2008-05-30 15:17 65,032 --a------ c:\windows\system32\XAPOFX1_0.dll
2009-03-10 13:59 . 2008-05-30 15:17 25,608 --a------ c:\windows\system32\X3DAudio1_4.dll
2009-03-10 13:57 . 2009-03-10 13:57 <DIR> d-------- c:\windows\Logs
2009-03-10 13:53 . 2009-03-10 13:53 <DIR> d-------- c:\windows\system32\xlive
2009-03-10 13:53 . 2009-03-10 17:12 <DIR> d-------- c:\program files\Microsoft Games for Windows - LIVE
2009-03-10 12:37 . 2009-03-10 12:37 <DIR> d-------- c:\program files\MSBuild
2009-03-10 12:29 . 2009-03-10 12:29 <DIR> d-------- c:\windows\system32\XPSViewer
2009-03-10 12:28 . 2009-03-10 12:28 <DIR> d-------- c:\program files\Reference Assemblies
2009-03-10 12:27 . 2006-06-29 14:07 14,048 --------- c:\windows\system32\spmsg2.dll
2009-03-10 11:43 . 2009-03-10 11:43 <DIR> d-------- c:\program files\Alcohol Soft
2009-03-10 11:43 . 2004-04-30 10:37 160,640 --a------ c:\windows\system32\drivers\a347bus.sys
2009-03-10 11:43 . 2004-04-30 10:33 5,248 --a------ c:\windows\system32\drivers\a347scsi.sys
2009-03-03 23:00 . 2009-03-30 21:57 <DIR> d-------- c:\program files\backups
2009-03-03 22:52 . 2009-03-03 22:52 401,720 --a------ c:\program files\HiJackThis.exe
2009-03-03 15:04 . 2009-03-30 10:18 <DIR> d-------- c:\program files\DNA
2009-03-03 15:04 . 2009-03-03 15:04 <DIR> d-------- c:\program files\BitTorrent
2009-03-03 15:04 . 2009-03-30 13:58 <DIR> d-------- c:\documents and settings\Ania i Michał\Dane aplikacji\DNA
2009-03-03 15:04 . 2009-03-25 15:16 <DIR> d-------- c:\documents and settings\Ania i Michał\Dane aplikacji\BitTorrent
2009-03-03 15:03 . 2009-03-04 23:36 <DIR> d-------- c:\program files\AskBarDis
2009-02-26 16:09 . 2000-02-02 09:00 140,288 --------- c:\windows\system32\comdlg32.ocx
2009-02-26 16:09 . 2003-10-06 19:50 131,072 --------- c:\windows\system32\dzip32.dll
2009-02-26 16:09 . 2002-03-13 02:57 110,592 --------- c:\windows\system32\dunzip32.dll
2009-02-26 16:09 . 1998-06-18 00:00 89,360 --------- c:\windows\system32\VB5DB.DLL
2009-02-26 16:09 . 2005-03-01 13:04 71,392 --------- c:\windows\system32\drivers\fps11sys.sys
2009-02-26 16:09 . 2004-08-02 15:00 22,400 --------- c:\windows\system32\drivers\acrusbxp.sys
2009-02-26 16:08 . 2004-01-23 11:00 17,408 --a------ c:\windows\system32\drivers\hhkusb.sys
2009-02-26 16:05 . 2009-02-26 16:05 256 --a------ C:\dk2.mem
2009-02-26 16:04 . 1999-05-10 14:16 29,246 -ra------ c:\windows\system32\DK2WN95.386
2009-02-26 16:03 . 2001-03-01 07:54 12,965 -ra------ c:\windows\system32\DK2DRVS.isu
2009-02-26 16:00 . 2009-02-26 16:00 60,418 --a------ c:\windows\system32\drivers\FLS5FWLD.SYS
2009-02-26 16:00 . 2009-02-26 16:00 53,248 --a------ c:\windows\system32\FLS5FL32.DLL
2009-02-26 16:00 . 2009-02-26 16:00 51,798 --a------ c:\windows\system32\drivers\FLSUSB.SYS
2009-02-26 16:00 . 2009-02-26 16:00 50,175 --a------ c:\windows\system32\drivers\FlsFWLdr.sys
2009-02-26 16:00 . 2009-02-26 16:00 46,304 --a------ c:\windows\system32\drivers\FLS5USB.SYS
2009-02-26 16:00 . 2009-02-26 16:00 38,393 --a------ c:\windows\system32\drivers\FLS8500.LDR
2009-02-26 16:00 . 2009-02-26 16:00 23,216 --a------ c:\windows\system32\drivers\FPGA8501.rd4
2009-02-26 16:00 . 2009-02-26 16:00 20,388 --a------ c:\windows\system32\drivers\fls8200.ldr
2009-02-26 16:00 . 2009-02-26 16:00 20,320 --a------ c:\windows\system32\drivers\fls8000.ldr
2009-02-26 16:00 . 2009-02-26 16:00 19,277 --a------ c:\windows\system32\drivers\fls8100.ldr
2009-02-26 16:00 . 2009-02-26 16:00 19,157 --a------ c:\windows\system32\drivers\fls8400.ldr
2009-02-26 15:59 . 2009-02-26 15:59 <DIR> d-------- c:\program files\Common Files\DESkey
2009-02-26 13:17 . 2009-02-26 13:17 <DIR> d-------- c:\program files\NSIS
2009-02-25 15:22 . 2009-02-26 18:20 <DIR> d-------- c:\program files\NSS
2009-02-25 15:22 . 2006-08-29 16:56 32,377 --a------ c:\windows\system32\drivers\prodigy.sys
2009-02-24 16:03 . 2004-08-04 00:08 25,600 --a------ c:\windows\system32\drivers\usbser.sys
2009-02-24 16:03 . 2004-08-04 00:08 25,600 --a--c--- c:\windows\system32\dllcache\usbser.sys
2009-02-24 16:03 . 2008-03-21 14:57 14,640 --------- c:\windows\system32\spmsgXP_2k3.dll
2009-02-24 16:03 . 2009-02-24 16:03 0 --ah----- c:\windows\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
2009-02-24 16:03 . 2009-02-24 16:03 0 --ah----- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
2009-02-24 15:49 . 2009-02-24 15:49 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Nokia
2009-02-24 15:44 . 2008-09-15 08:29 1,112,288 --a------ c:\windows\system32\wdfcoinstaller01007.dll
2009-02-24 15:44 . 2008-09-15 08:56 659,968 --a------ c:\windows\system32\nmwcdcocls.dll
2009-02-24 15:44 . 2008-09-15 08:56 22,016 --a------ c:\windows\system32\drivers\ccdcmbo.sys
2009-02-24 15:44 . 2008-09-15 08:56 17,664 --a------ c:\windows\system32\drivers\ccdcmb.sys
2009-02-24 15:44 . 2008-09-15 08:56 8,064 --a------ c:\windows\system32\drivers\usbser_lowerfltj.sys
2009-02-24 15:44 . 2008-09-15 08:56 8,064 --a------ c:\windows\system32\drivers\usbser_lowerflt.sys
2009-02-24 15:41 . 2008-02-01 16:17 138,112 --a------ c:\windows\system32\drivers\nmwcdnsu.sys
2009-02-24 15:41 . 2008-02-01 16:17 8,320 --a------ c:\windows\system32\drivers\nmwcdnsuc.sys
2009-02-24 15:39 . 2009-02-24 15:39 <DIR> d-------- c:\program files\MSXML 6.0
2009-02-24 15:38 . 2009-02-24 15:38 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Installations
2009-02-15 15:31 . 2009-02-15 15:31 <DIR> d-------- c:\windows\Sun
2009-02-13 16:56 . 2004-08-04 01:44 159,232 --a------ c:\windows\system32\ptpusd.dll
2009-02-13 16:56 . 2004-08-03 23:58 15,104 --a------ c:\windows\system32\drivers\usbscan.sys
2009-02-13 16:56 . 2004-08-03 23:58 15,104 --a--c--- c:\windows\system32\dllcache\usbscan.sys
2009-02-13 16:56 . 2001-10-26 18:29 5,632 --a------ c:\windows\system32\ptpusb.dll
2009-02-08 11:51 . 2009-02-08 11:51 <DIR> d-------- c:\program files\Common Files\Wise Installation Wizard
2009-02-08 11:13 . 2009-02-08 11:13 <DIR> d-------- c:\program files\Lavasoft
2009-02-08 11:13 . 2009-02-08 11:17 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Lavasoft
2009-02-08 10:15 . 2009-02-08 10:15 <DIR> d-------- c:\program files\NOS
2009-02-08 10:15 . 2009-02-08 10:15 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\NOS
2009-02-05 11:46 . 2009-02-06 11:36 <DIR> d-------- c:\program files\BitComet
2009-02-05 11:46 . 2009-02-05 16:44 <DIR> d-------- C:\Downloads
2009-02-05 11:26 . 2009-02-05 11:26 <DIR> d-------- c:\program files\Crux Calculator v5
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-30 19:35 --------- d-----w c:\documents and settings\Ania i Michał\Dane aplikacji\OpenOffice.org2
2009-03-30 19:31 --------- d-----w c:\program files\Spybot - Search & Destroy
2009-03-10 11:05 --------- d--h--w c:\program files\InstallShield Installation Information
2009-02-27 14:33 --------- d-----w c:\program files\Nokia
2009-02-26 16:28 --------- d-----w c:\program files\Common Files\Nokia
2009-02-26 13:59 80,160 ----a-w c:\windows\system32\fls1wn16.dll
2009-02-26 13:59 8,344 ----a-w c:\windows\system32\drivers\flsser.sys
2009-02-26 13:59 61,440 ----a-w c:\windows\system32\fle5wn32.dll
2009-02-26 13:59 393,216 ----a-w c:\windows\system32\fls1wn32.dll
2009-02-26 13:59 33,404 ----a-w c:\windows\system32\drivers\fle5wnnt.sys
2009-02-26 13:59 32,544 ----a-w c:\windows\system32\drivers\flsvcom.sys
2009-02-26 13:59 3,984 ----a-w c:\windows\system32\flscoins.dll
2009-02-26 13:59 22,064 ----a-w c:\windows\system32\fle5wn16.dll
2009-02-26 13:59 16,314 ----a-w c:\windows\system32\drivers\flspar.sys
2009-02-26 13:59 13,440 ----a-w c:\windows\system32\drivers\flsiface.sys
2009-02-24 14:05 --------- d-----w c:\documents and settings\Ania i Michał\Dane aplikacji\Datalayer
2009-02-13 15:38 --------- d-----w c:\documents and settings\Ania i Michał\Dane aplikacji\Nokia Multimedia Player
2009-02-09 14:19 1,846,528 ----a-w c:\windows\system32\win32k.sys
2009-02-08 10:03 25,992 ----a-w c:\windows\system32\pgdfgsvc.exe
2009-02-08 09:03 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\Spybot - Search & Destroy
2008-12-25 10:57 90,112 ----a-w c:\windows\DUMP2b94.tmp
2008-12-22 11:39 183,112 ----a-w c:\windows\system32\PnkBstrB.exe
2008-12-15 13:40 66,872 ----a-w c:\windows\system32\PnkBstrA.exe
2008-12-05 07:14 144,896 ----a-w c:\windows\system32\schannel.dll
2008-11-23 22:36 50,688 ----a-w c:\program files\ATF-Cleaner.exe
2008-02-19 08:22 32 ----a-w c:\documents and settings\All Users\Dane aplikacji\ezsid.dat
2007-01-25 02:52 65,536 ----a-w c:\program files\Common Files\NMSAccessU.exe
2004-03-11 12:27 40,960 ----a-w c:\program files\Uninstall_CDS.exe
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
2008-09-29 18:24 325000 --a------ c:\program files\AskBarDis\bar\bin\askBar.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-09-29 325000]
[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-09-29 325000]
[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"Gadu-Gadu"="c:\program files\Gadu-Gadu\gg.exe" [2007-11-14 2131392]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"="c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe" [2009-02-03 240544]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-09-29 344064]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
"snpstd"="c:\windows\vsnpstd.exe" [2005-10-11 339968]
"LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2007-01-08 52256]
"MSConfig"="c:\windows\PCHealth\HelpCtr\Binaries\MSConfig.exe" [2004-08-04 159744]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2004-09-29 28672]
c:\documents and settings\All Users\Menu Start\Programy\Autostart\
ATI CATALYST System Tray.lnk - c:\program files\ATI Technologies\ATI.ACE\CLI.exe [2004-09-29 28672]
RaConfig2500.lnk - c:\program files\RALINK\RT2500 Wireless LAN Card\Installer\WINXP\RaConfig2500.exe [2008-02-17 659518]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.ACDV"= ACDV.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^NCProTray.lnk]
path=c:\documents and settings\All Users\Menu Start\Programy\Autostart\NCProTray.lnk
backup=c:\windows\pss\NCProTray.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Ulead Photo Express 3.0 SE Calendar Checker.lnk]
path=c:\documents and settings\All Users\Menu Start\Programy\Autostart\Ulead Photo Express 3.0 SE Calendar Checker.lnk
backup=c:\windows\pss\Ulead Photo Express 3.0 SE Calendar Checker.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^Ania i Michał^Menu Start^Programy^Autostart^OpenOffice.org 2.4.lnk]
path=c:\documents and settings\Ania i Michał\Menu Start\Programy\Autostart\OpenOffice.org 2.4.lnk
backup=c:\windows\pss\OpenOffice.org 2.4.lnkStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
--a------ 2005-06-06 23:46 57344 c:\program files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BearShare]
--a------ 2006-08-01 18:04 3313664 c:\program files\BearShare\BearShare.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent DNA]
--a------ 2009-03-03 15:04 321344 c:\program files\DNA\btdna.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadu-Gadu]
--a------ 2007-11-14 12:54 2131392 c:\program files\Gadu-Gadu\gg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPDJ Taskbar Utility]
--a------ 2002-03-28 11:20 188416 c:\windows\system32\spool\drivers\w32x86\3\hpztsb05.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
--a------ 2007-11-26 15:54 1057064 c:\program files\Nero\Nero 7\InCD\InCD.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
--a------ 2007-12-05 13:30 2295072 c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Load]
--a------ 1997-06-03 08:51 48576 c:\ydpdict\WATCH.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2007-03-01 15:57 153136 c:\program files\Common Files\Ahead\Lib\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication]
--a------ 2006-06-15 13:36 229376 c:\progra~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync]
--a------ 2006-06-27 17:21 1449984 c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
--------- 2007-03-14 22:01 71216 c:\program files\CyberLink\PowerDVD\PDVDServ.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SecurDisc]
--a------ 2007-11-26 15:54 1629480 c:\program files\Nero\Nero 7\InCD\NBHGui.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
--a------ 2008-08-04 01:02 36352 c:\program files\Winamp\winampa.exe
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Gadu-Gadu\\gg.exe"=
"c:\\Program Files\\BearShare\\BearShare.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD\\PowerDVD.exe"=
"c:\\Program Files\\Common Files\\Ahead\\Nero Web\\SetupX.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"14021:TCP"= 14021:TCP:BitComet 14021 TCP
"14021:UDP"= 14021:UDP:BitComet 14021 UDP
"8461:TCP"= 8461:TCP:GoD High Port
"8462:TCP"= 8462:TCP:GoD Low Port
R0 tffsport;M-Systems DiskOnChip 2000;c:\windows\system32\drivers\tffsport.sys [2008-03-18 149376]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-03-30 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2008-03-30 20560]
R2 dk2drv;DK2 WindowsNT Driver;c:\windows\system32\drivers\dk2drv.sys [2009-02-26 42624]
R2 FLE5WNNT;FLE-5 WindowsNT Driver;c:\windows\system32\drivers\fle5wnnt.sys [2009-02-26 33404]
R2 FLSIFACE;FLSIface;c:\windows\system32\drivers\flsiface.sys [2009-02-26 13440]
R2 FLSPAR;FLSPar;c:\windows\system32\drivers\flspar.sys [2009-02-26 16314]
R2 FLSSER;FLSSer;c:\windows\system32\drivers\flsser.sys [2009-02-26 8344]
R2 FLSVCOM;FLSVCom;c:\windows\system32\drivers\flsvcom.sys [2009-02-26 32544]
R3 SiS7012;Service for AC'97 Sample Driver (WDM);c:\windows\system32\drivers\sis7012.sys [2009-01-04 267136]
S3 DIGIRPS;Sterownik Digi PortServer;c:\windows\system32\drivers\digirlpt.sys [2008-02-22 42560]
S3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe [2009-02-08 33752]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2009-02-24 138112]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2009-02-24 8320]
S3 PRODIGY;PRODIGY;c:\windows\system32\drivers\prodigy.sys [2009-02-25 32377]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{88a034bc-a994-11dd-b7d2-000244980e08}]
\Shell\AutoRun\command - I:\hyetn1i.exe
\Shell\open\Command - I:\hyetn1i.exe
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"
.
- - - - USUNIĘTO PUSTE WPISY - - - -
HKCU-Run-GoD - c:\documents and settings\Ania i Michał\Moje dokumenty\GoD\GoD.exe
HKCU-Run-PowerBar - (no file)
HKLM-Run-Cmaudio - cmicnfg.cpl
MSConfigStartUp-ares - c:\program files\Ares\Ares.exe
MSConfigStartUp-Device Detector - c:\program files\Common Files\ACD Systems\EN\DevDetect.exe
MSConfigStartUp-GoD - c:\documents and settings\Ania i Michał\Moje dokumenty\GoD\GoD.exe
MSConfigStartUp-RGSC - e:\gtaaaaaaaaaaaaa\Rockstar Games Social Club\RGSCLauncher.exe
MSConfigStartUp-Skype - c:\program files\Skype\Phone\Skype.exe
.
------- Skan uzupełniający -------
.
uStart Page = hxxp://google.bearshare.com/pl
uInternet Connection Wizard,ShellNext = iexplore
IE: &Winamp Search - c:\documents and settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
IE: E&ksport do programu Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: {ECBF5139-B411-4D11-917F-921A5E17D330} = 192.168.1.1,194.204.152.34
FF - ProfilePath - c:\documents and settings\Ania i Michał\Dane aplikacji\Mozilla\Firefox\Profiles\jqviwe9e.default\
FF - prefs.js: browser.startup.homepage - hxxp://onet.pl/
FF - prefs.js: network.proxy.http - 192.168.1.253
FF - prefs.js: network.proxy.http_port - 3128
FF - prefs.js: network.proxy.type - 1
FF - component: c:\documents and settings\Ania i Michał\Dane aplikacji\Mozilla\Firefox\Profiles\jqviwe9e.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampTBPlayer.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npbittorrent.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
.
**************************************************************************
catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-30 22:12:07
Windows 5.1.2600 Dodatek Service Pack 2 NTFS
skanowanie ukrytych procesów ...
skanowanie ukrytych wpisów autostartu ...
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
PowerBar = ????<???D??sh?????6~????h???Z?6~(???*?6~t?@?l?@???c???????????????????????????7???????????????????6~????W?9~0?6~????*?6~??6~????D??s??????????6~????l?@???????6~????t?@???c?????????l?@?l?@?????Q?7~????t?@?????l?@?8?@?l?@?3??s????????????????????8?@?_??s8?@?8?@
skanowanie ukrytych plików ...
skanowanie pomyślnie ukończone
ukryte pliki: 0
**************************************************************************
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------
[HKEY_USERS\S-1-5-21-583907252-854245398-725345543-1003\Software\SecuROM\License information*]
"datasecu"=hex:0b,7c,ae,69,f2,9f,c9,17,7f,83,6a,65,b2,c8,4f,af,72,de,53,8d,93,
1a,01,5a,44,33,93,d8,f3,88,09,d3,09,2e,0e,42,01,0f,b8,be,5f,c1,f6,f3,89,74,\
"rkeysecu"=hex:1c,b7,f4,87,9f,d1,fa,b7,88,ec,6a,62,d5,59,60,03
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------
- - - - - - - > 'winlogon.exe'(680)
c:\windows\system32\Ati2evxx.dll
.
Czas ukończenia: 2009-03-30 22:15:52
ComboFix-quarantined-files.txt 2009-03-30 20:15:42
Przed: 16 465 121 280 bajtów wolnych
Po: 16,537,247,744 bajtów wolnych
291 --- E O F --- 2009-03-30 18:00:12