Sprawdzenie Logów

[VampirLord]

Hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:26:44, on 2009-05-31
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\cFosSpeed\spd.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Sunbelt Personal Firewall\SbPFLnch.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\SpeedBit Video Accelerator\VideoAcceleratorService.exe
C:\PROGRA~1\SpeedBit Video Accelerator\VideoAcceleratorEngine.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\NetMeter\NetMeter.exe
C:\Program Files\DAP\DAP.EXE
C:\Program Files\Kalendarz XP\Kalendarz.exe
C:\Program Files\cFosSpeed\cFosSpeed.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\Program Files\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\Gadu-Gadu\spellchecker_gg.exe
C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe
C:\Program Files\BitSpirit\BitSpirit.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.bearshare.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: flashget2 urlcatch - {1F364306-AA45-47B5-9F9D-39A8B94E7EF1} - C:\Program Files\FlashGet\ComDlls\bhoCATCH.dll
O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (file missing)
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\siteadvisor\mcieplg.dll
O2 - BHO: Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: IEPluginBHO - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\VampirLord\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll
O2 - BHO: DAPIELoader Class - {FF6C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~1\DAP\dapieloader.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL (file missing)
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\siteadvisor\mcieplg.dll
O4 - HKLM\..\Run: [cFosSpeed] C:\Program Files\cFosSpeed\cFosSpeed.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [CBitSpirit] "C:\Program Files\BitSpirit\BitSpirit.exe" /start /nosplash
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [C:\Program Files\NetMeter\NetMeter.exe] C:\Program Files\NetMeter\NetMeter.exe
O4 - HKCU\..\Run: [Fraps] C:\PROGRAM FILES\FRAPS\FRAPS.EXE
O4 - HKCU\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKCU\..\Run: [SpeedBitVideoAccelerator] C:\Program Files\SpeedBit Video Accelerator\VideoAccelerator.exe
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O4 - Global Startup: Kalendarz XP.lnk = C:\Program Files\Kalendarz XP\Kalendarz.exe
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download All by FlashGet - C:\Program Files\FlashGet\ComDlls\Bhoall.htm
O8 - Extra context menu item: &Download by FlashGet - C:\Program Files\FlashGet\ComDlls\Bholink.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\Microsoft Office\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint – Dodaj do listy drukowania - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint – Drukuj - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint – Drukuj z dużą szybkością - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint – Podgląd - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
O8 - Extra context menu item: Pobierz z &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
O8 - Extra context menu item: Pobierz za pomocą Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\Microsoft Office\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O10 - Unknown file in Winsock LSP: c:\progra~1\speedbit video accelerator\sblsp.dll
O10 - Unknown file in Winsock LSP: c:\progra~1\speedbit video accelerator\sblsp.dll
O10 - Unknown file in Winsock LSP: c:\progra~1\speedbit video accelerator\sblsp.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\siteadvisor\mcieplg.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: McAfee Application Installer Cleanup (0000231243789114) (0000231243789114mcinstcleanup) - Unknown owner - C:\DOCUME~1\VAMPIR~1\USTAWI~1\Temp\0000231243789114mcinst.exe (file missing)
O23 - Service: cFosSpeed System Service (cFosSpeedS) - cFos Software GmbH - C:\Program Files\cFosSpeed\spd.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Program Files\SiSoftware Sandra Lite 2009.SP2\RpcAgentSrv.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Personal Firewall\SbPFLnch.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Personal Firewall\SbPFSvc.exe
O23 - Service: VideoAcceleratorService - Speedbit Ltd. - C:\PROGRA~1\SpeedBit Video Accelerator\VideoAcceleratorService.exe

--
End of file - 9390 bytes


Combofix:

ComboFix 09-05-31.02 - VampirLord 2009-05-31 21:10.1 - NTFSx86
Uruchomiony z: c:\program files\Combofix\ComboFix.exe
* Rezydentny antywirus jest aktywny

.

((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\VampirLord\Dane aplikacji\BITS
c:\documents and settings\VampirLord\Dane aplikacji\BITS\BITS.ini
c:\documents and settings\VampirLord\Dane aplikacji\BITS\DHTTable.dat
c:\documents and settings\VampirLord\Dane aplikacji\BITS\ProxyList.ini
c:\documents and settings\VampirLord\Dane aplikacji\BITS\Torrent\20090514190620.torrent
c:\documents and settings\VampirLord\Dane aplikacji\BITS\Torrent\20090514190620.torrent.~tmp
c:\documents and settings\VampirLord\Dane aplikacji\BITS\Torrent\20090514190620.torrent.bits
c:\documents and settings\VampirLord\Dane aplikacji\BITS\Torrent\20090514190620.torrent.filelist
c:\windows\system32\bfadca8_z.dll

.
((((((((((((((((((((((((( Pliki utworzone od 2009-04-28 do 2009-05-31 )))))))))))))))))))))))))))))))
.

2009-05-31 16:59 . 2009-05-31 16:59 -------- d-----w- c:\documents and settings\NetworkService\Dane aplikacji\SACore
2009-05-31 16:58 . 2009-05-31 16:58 -------- d-----w- c:\program files\Common Files\McAfee
2009-05-31 16:40 . 2009-05-31 16:45 -------- d-----w- c:\windows\LastGood
2009-05-31 14:46 . 2009-05-31 17:09 -------- d-----w- c:\program files\Mu Online
2009-05-31 11:42 . 2009-05-31 11:44 -------- d-----w- c:\program files\Silkroad
2009-05-31 09:48 . 2009-05-31 09:48 -------- d-----w- c:\program files\Gadu-Gadu
2009-05-31 01:42 . 2009-05-31 01:42 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Norton
2009-05-30 12:49 . 2009-05-30 12:49 -------- d-----w- c:\documents and settings\VampirLord\Ustawienia lokalne\Dane aplikacji\Opera
2009-05-30 12:40 . 2009-05-31 09:40 -------- d-----w- c:\documents and settings\VampirLord\Ustawienia lokalne\Dane aplikacji\Google
2009-05-29 18:15 . 2009-05-31 01:41 95744 ----a-w- c:\documents and settings\All Users\Dane aplikacji\SpeedBit\DAP\Updates\Condition.dll
2009-05-29 08:26 . 2009-05-29 08:26 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\Megaupload
2009-05-28 22:35 . 2009-05-28 22:35 -------- d-----w- c:\program files\Megaupload
2009-05-28 21:24 . 2009-05-28 21:24 -------- d-----w- c:\program files\SpeedXP
2009-05-28 21:24 . 2009-05-28 21:24 73216 ----a-w- c:\windows\ST6UNST.EXE
2009-05-28 21:24 . 2009-05-28 21:24 249856 ------w- c:\windows\Setup1.exe
2009-05-28 16:21 . 2009-05-31 12:17 -------- d-----w- c:\program files\WarRock
2009-05-28 16:21 . 2009-05-28 16:21 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\InstallShield
2009-05-27 19:44 . 2009-05-27 19:44 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\NortonInstaller
2009-05-27 18:50 . 2009-05-27 18:54 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\GetRightToGo
2009-05-27 18:18 . 2009-03-24 14:08 55640 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-05-27 17:52 . 2009-05-27 17:52 83456 ----a-w- c:\documents and settings\All Users\Dane aplikacji\SpeedBit\DAP\SDCondition.dll
2009-05-27 17:42 . 2009-05-30 11:07 -------- d-----w- c:\documents and settings\VampirLord\Ustawienia lokalne\Dane aplikacji\Corel
2009-05-27 17:42 . 2009-05-30 11:07 88 --sh--r- c:\windows\system32\59A121E1EF.sys
2009-05-27 17:41 . 2009-05-27 17:42 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\Corel
2009-05-27 17:41 . 2009-05-27 17:41 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Corel
2009-05-27 17:40 . 2009-05-27 17:41 -------- d-----w- c:\program files\Corel Paint Shop Pro Photo X2
2009-05-27 17:40 . 2009-05-27 17:40 -------- d-----w- c:\program files\Common Files\Corel
2009-05-27 17:37 . 2009-05-30 11:54 3140 --sha-w- c:\windows\system32\KGyGaAvL.sys
2009-05-27 17:32 . 2009-05-27 18:36 -------- d-----w- c:\program files\SpeedBit Video Accelerator
2009-05-27 17:32 . 2009-05-27 17:32 3530776 ----a-w- c:\documents and settings\All Users\Dane aplikacji\SpeedBit\DAP\Offers\VA23_DAPSO.exe
2009-05-27 17:28 . 2009-05-27 17:28 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\SpeedBit
2009-05-27 17:28 . 2009-05-27 17:28 50688 ----a-w- c:\windows\system32\wbhelp2.dll
2009-05-27 17:28 . 2009-05-27 17:29 -------- d-----w- c:\program files\DAP
2009-05-27 14:54 . 2009-05-31 19:17 -------- d-----w- c:\program files\cFosSpeed
2009-05-27 14:54 . 2009-02-13 09:31 787672 ----a-w- c:\windows\system32\drivers\cfosspeed.sys
2009-05-27 14:54 . 2009-02-13 09:31 290008 ----a-w- c:\windows\system32\cfosspeed.dll
2009-05-26 19:45 . 2009-05-31 17:06 -------- d-----w- c:\program files\ESET NOD32 Antivirus
2009-05-26 18:56 . 2009-05-26 18:56 -------- d-----w- c:\program files\Common Files\BitSpirit
2009-05-26 18:08 . 2009-05-29 18:34 390424 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker4\lyrics\LyricsFreak.dll
2009-05-26 18:07 . 2009-05-26 18:08 390424 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Tunebite\AutoTag\lyrics\LyricsFreak.dll
2009-05-26 18:07 . 2009-05-26 18:08 394520 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker4\lyrics\LyricsOnDemand.dll
2009-05-26 18:07 . 2009-05-26 18:07 394520 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Tunebite\AutoTag\lyrics\LyricsOnDemand.dll
2009-05-26 18:07 . 2009-05-26 18:07 394520 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker4\lyrics\AstraLyrics.dll
2009-05-26 18:06 . 2009-05-26 18:07 394520 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Tunebite\AutoTag\lyrics\AstraLyrics.dll
2009-05-26 18:06 . 2009-05-26 18:07 394520 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker4\lyrics\LyricsDemon.dll
2009-05-26 18:06 . 2009-05-26 18:06 394520 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Tunebite\AutoTag\lyrics\LyricsDemon.dll
2009-05-26 18:06 . 2009-05-26 18:06 427288 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker4\general\yahoomusic.dll
2009-05-26 18:05 . 2009-05-26 18:06 427288 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Tunebite\AutoTag\general\yahoomusic.dll
2009-05-26 18:05 . 2009-05-26 18:06 427288 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker4\general\aol.dll
2009-05-26 18:05 . 2009-05-26 18:05 427288 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Tunebite\AutoTag\general\aol.dll
2009-05-26 18:05 . 2009-05-26 18:05 419096 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker4\general\allmusic.dll
2009-05-26 18:04 . 2009-05-26 18:05 419096 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Tunebite\AutoTag\general\allmusic.dll
2009-05-26 18:04 . 2009-05-26 18:04 427288 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Tunebite\AutoTag\general\musicline.dll
2009-05-26 18:04 . 2009-05-26 18:05 427288 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker4\general\musicline.dll
2009-05-26 18:03 . 2009-05-26 18:04 427288 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Tunebite\AutoTag\general\sonybmg.dll
2009-05-26 18:03 . 2009-05-26 18:03 480536 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Tunebite\AutoTag\general\amazon.dll
2009-05-26 18:03 . 2009-05-26 18:04 427288 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker4\general\sonybmg.dll
2009-05-26 18:03 . 2009-05-26 18:03 480536 ----a-w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution\Radiotracker4\general\amazon.dll
2009-05-26 18:03 . 2009-05-29 18:34 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\Tunebite
2009-05-26 16:45 . 2009-05-26 16:45 166912 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\Mikrotik\Winbox\3.10\wlan2.dll
2009-05-26 16:45 . 2009-05-26 16:45 95232 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\Mikrotik\Winbox\3.10\roting2.dll
2009-05-26 16:45 . 2009-05-26 16:45 91136 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\Mikrotik\Winbox\3.10\secure.dll
2009-05-26 16:45 . 2009-05-26 16:45 81408 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\Mikrotik\Winbox\3.10\ppp.dll
2009-05-26 16:45 . 2009-05-26 16:45 10752 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\Mikrotik\Winbox\3.10\system.dll
2009-05-26 16:45 . 2009-05-26 16:45 78336 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\Mikrotik\Winbox\3.10\hotspot.dll
2009-05-26 16:45 . 2009-05-26 16:45 68608 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\Mikrotik\Winbox\3.10\advtool.dll
2009-05-26 16:45 . 2009-05-26 16:45 68096 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\Mikrotik\Winbox\3.10\dhcp.dll
2009-05-26 16:45 . 2009-05-26 16:45 1445888 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\Mikrotik\Winbox\3.10\roteros.dll
2009-05-26 16:45 . 2009-05-26 16:45 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\Mikrotik
2009-05-26 16:01 . 2009-05-26 16:01 42088 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll
2009-05-26 15:12 . 2009-05-26 15:12 11264 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\Nowe Gadu-Gadu\_userdata\npgg.1.dll
2009-05-22 16:40 . 2009-05-22 16:40 68424 ----a-w- c:\windows\system32\drivers\GRD.sys
2009-05-22 16:19 . 2009-05-22 16:19 51016 ----a-w- c:\windows\system32\drivers\GDTdiIcpt.sys
2009-05-22 16:18 . 2009-05-22 16:18 48712 ----a-w- c:\windows\system32\drivers\MiniIcpt.sys
2009-05-22 16:18 . 2009-05-26 17:44 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\G DATA
2009-05-22 16:18 . 2009-05-26 17:44 -------- d-----w- c:\program files\Common Files\G DATA
2009-05-21 22:50 . 2009-05-21 22:50 41808 ----a-w- c:\windows\system32\xfcodec.dll
2009-05-20 15:19 . 2009-05-20 15:51 -------- d-----w- c:\program files\jv16 PowerTools 2008
2009-05-19 20:12 . 2009-05-19 20:12 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\vlc
2009-05-19 20:05 . 2009-05-26 18:09 -------- d-----w- c:\documents and settings\VampirLord\Ustawienia lokalne\Dane aplikacji\RapidSolution
2009-05-19 20:02 . 2009-05-31 18:58 -------- d-----w- c:\program files\Audials One
2009-05-19 20:02 . 2009-05-26 18:03 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\RapidSolution
2009-05-19 20:02 . 2009-05-19 20:02 -------- d-----w- c:\program files\PixiePack Codec Pack
2009-05-19 16:52 . 2009-05-20 12:49 -------- d-----w- c:\windows\NV13001676.TMP
2009-05-19 16:50 . 2009-05-19 16:50 -------- d-----w- C:\NVIDIA
2009-05-18 18:32 . 2009-05-19 20:09 -------- d-----w- c:\program files\VLC Media Player
2009-05-18 18:31 . 2008-10-31 05:09 270888 ----a-r- c:\windows\system32\drivers\SbFw.sys
2009-05-18 18:31 . 2008-06-21 02:54 65576 ----a-w- c:\windows\system32\drivers\SbFwIm.sys
2009-05-18 18:31 . 2009-05-18 18:37 -------- d-----w- c:\program files\Sunbelt Personal Firewall
2009-05-18 18:19 . 2009-05-26 17:47 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\Systweak
2009-05-18 18:19 . 2009-05-26 17:47 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Systweak
2009-05-18 17:07 . 2009-05-18 17:07 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Softland
2009-05-18 17:07 . 2009-05-18 17:07 -------- d-----w- c:\program files\Backup4all Standard 4
2009-05-18 17:07 . 2009-05-18 17:07 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\Softland
2009-05-18 16:53 . 2009-05-18 16:53 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\IVONA Player
2009-05-18 16:51 . 2009-05-18 16:53 -------- d-----w- c:\program files\Ivona
2009-05-18 16:50 . 2009-05-18 16:50 -------- d-----w- c:\documents and settings\VampirLord\Ustawienia lokalne\Dane aplikacji\Modern UI Test
2009-05-18 16:49 . 2009-05-24 13:11 -------- d-----w- c:\program files\JkDefrag
2009-05-14 17:53 . 2009-05-14 17:53 -------- d-----w- c:\program files\EWB
2009-05-14 17:05 . 2009-05-14 17:05 -------- d-----w- c:\program files\Defraggler
2009-05-14 16:53 . 2009-05-14 17:06 -------- d-----w- c:\program files\FlashGet
2009-05-14 16:47 . 2009-05-14 16:54 -------- d-----w- c:\program files\NetMeter
2009-05-08 14:00 . 2009-05-08 14:00 -------- d-----w- c:\documents and settings\NetworkService\Ustawienia lokalne\Dane aplikacji\PCHealth
2009-05-08 11:39 . 2009-05-08 11:39 -------- d-----w- c:\documents and settings\VampirLord\Ustawienia lokalne\Dane aplikacji\Help
2009-05-06 17:59 . 2009-05-07 16:05 1 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2009-05-06 17:58 . 2009-05-06 17:58 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\OpenOffice.org
2009-05-06 17:57 . 2009-05-06 17:57 7424000 ----a-r- c:\documents and settings\VampirLord\Dane aplikacji\Microsoft\Installer\{1CD7CCFC-7D55-4394-A24F-048A947C8C04}\soffice.exe
2009-05-06 17:56 . 2009-05-06 17:56 -------- d-----w- c:\program files\OpenOffice.org 3
2009-05-06 17:43 . 2009-05-06 17:43 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\Talkback
2009-05-06 17:42 . 2009-05-06 17:43 -------- d-----w- c:\documents and settings\VampirLord\Ustawienia lokalne\Dane aplikacji\Thunderbird
2009-05-06 17:42 . 2009-05-06 17:42 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\Thunderbird
2009-05-06 17:40 . 2009-05-31 16:48 -------- d-----w- c:\program files\Mozilla Thunderbird
2009-05-06 16:47 . 2009-05-06 16:47 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\OpenFM
2009-05-06 15:43 . 2009-05-06 15:43 -------- d--h--w- c:\windows\PIF
2009-05-06 13:40 . 2009-05-06 15:47 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\Nowe Gadu-Gadu
2009-05-06 12:55 . 2009-05-18 16:18 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar
2009-05-05 19:56 . 2009-05-31 16:49 -------- d---a-w- c:\documents and settings\All Users\Dane aplikacji\TEMP
2009-05-05 19:41 . 2009-05-05 19:42 -------- dc----w- c:\windows\system32\DRVSTORE
2009-05-05 19:39 . 2009-05-05 19:42 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft
2009-05-05 19:36 . 2009-05-05 19:36 -------- d-----w- c:\windows\Logs
2009-05-05 19:36 . 2009-05-27 20:30 -------- d-----w- c:\program files\SiSoftware Sandra Lite 2009.SP2
2009-05-05 19:24 . 2009-05-23 09:36 -------- d-----w- c:\program files\Fraps
2009-05-05 15:09 . 2009-05-05 15:09 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2009-05-05 15:09 . 2009-05-05 15:09 -------- d-sh--w- c:\documents and settings\VampirLord\IECompatCache
2009-05-05 15:05 . 2009-05-05 15:05 -------- d-sh--w- c:\documents and settings\VampirLord\PrivacIE

.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-31 19:03 . 2009-03-06 09:00 -------- d-----w- c:\program files\Combofix
2009-05-31 19:00 . 2009-02-03 21:58 -------- d-----w- c:\program files\Ganymede
2009-05-31 16:58 . 2009-01-17 09:28 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\McAfee
2009-05-31 16:58 . 2009-01-17 09:28 -------- d-----w- c:\program files\McAfee
2009-05-31 16:43 . 2009-01-16 11:50 -------- d-----w- c:\program files\Kalendarz XP
2009-05-28 22:35 . 2009-01-16 11:06 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-05-28 18:49 . 2009-01-31 16:04 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\Xfire
2009-05-28 18:45 . 2009-01-31 16:04 -------- d-----w- c:\program files\Xfire
2009-05-28 17:15 . 2009-01-16 14:13 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\Skype
2009-05-27 20:58 . 2009-01-16 11:21 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-05-27 20:36 . 2009-02-27 16:37 -------- d-----w- c:\program files\Common Files\Pointstone
2009-05-27 20:26 . 2009-01-16 11:52 -------- d-----w- c:\program files\MediaInfo
2009-05-27 20:21 . 2009-01-16 12:09 -------- d-----w- c:\program files\VideoInspector
2009-05-27 20:14 . 2009-02-07 12:51 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\Canon
2009-05-27 20:13 . 2009-01-16 11:40 -------- d-----w- c:\program files\Starter
2009-05-27 20:08 . 2009-01-16 11:36 -------- d-----w- c:\program files\Winamp
2009-05-27 17:33 . 2009-01-16 14:06 -------- d-----w- c:\program files\BitSpirit
2009-05-24 13:08 . 2009-01-26 09:33 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\DMCache
2009-05-20 18:04 . 2009-01-16 11:45 -------- d-----w- c:\program files\Ashampoo
2009-05-20 15:39 . 2009-05-20 15:39 229376 ----a-w- c:\documents and settings\NetworkService\NTUSER.DAT.tmp
2009-05-19 18:03 . 2004-08-04 12:00 80086 ----a-w- c:\windows\system32\perfc015.dat
2009-05-19 18:03 . 2004-08-04 12:00 460642 ----a-w- c:\windows\system32\perfh015.dat
2009-05-19 16:55 . 2009-04-09 11:39 -------- d-----w- c:\program files\AGEIA Technologies
2009-05-19 16:48 . 2009-03-27 09:19 -------- d-----w- c:\program files\Real Alternative
2009-05-19 16:45 . 2009-01-16 13:11 -------- d-----w- c:\program files\Common Files\Adobe
2009-05-18 17:12 . 2009-01-16 14:14 -------- d-----w- c:\program files\Windows Media Connect 2
2009-05-10 11:08 . 2009-05-10 11:07 2311 ----a-w- c:\documents and settings\All Users\Dane aplikacji\xml4F.tmp
2009-05-10 11:07 . 2009-05-10 11:07 13309 ----a-w- c:\documents and settings\All Users\Dane aplikacji\xml4D.tmp
2009-05-10 11:07 . 2009-05-10 11:07 7102 ----a-w- c:\documents and settings\All Users\Dane aplikacji\xml4B.tmp
2009-05-06 18:34 . 2009-01-16 11:24 73408 ----a-w- c:\documents and settings\VampirLord\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
2009-05-06 17:04 . 2009-04-20 15:24 -------- d-----w- c:\program files\SubEdit-Player
2009-05-06 13:46 . 2009-02-26 19:16 25280 ----a-w- c:\windows\system32\drivers\hamachi.sys
2009-05-01 18:48 . 2009-05-01 18:48 -------- d-----w- c:\program files\HydraIRC
2009-04-30 07:52 . 2009-01-16 20:00 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Microsoft Help
2009-04-23 15:36 . 2009-01-23 23:08 -------- d-----w- c:\documents and settings\VampirLord\Dane aplikacji\skypePM
2009-04-23 15:35 . 2009-04-23 15:35 -------- d-----w- c:\program files\Common Files\Skype
2009-04-23 15:35 . 2009-04-23 15:35 -------- d-----r- c:\program files\Skype
2009-04-23 15:35 . 2009-01-16 14:11 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Skype
2009-04-20 15:05 . 2009-03-20 11:19 -------- d-----w- c:\program files\Medion GoPal Assistant
2009-04-17 22:10 . 2009-04-17 22:10 -------- d-----w- c:\program files\Microsoft CAPICOM 2.1.0.2
2009-04-17 11:50 . 2009-04-17 11:50 -------- d-----w- c:\program files\Mistrz Klawiatury 2009
2009-04-17 11:50 . 2009-04-17 11:50 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Mistrz Klawiatury 2009 Data
2009-04-16 09:23 . 2009-04-16 09:23 856304 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar\lang\en\ustarrs.dll
2009-04-16 09:23 . 2009-04-16 09:23 864496 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar\lang\de\ustarrs.dll
2009-04-16 09:23 . 2009-04-16 09:23 4415728 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar\UpdateStar.exe
2009-04-16 09:22 . 2009-04-16 09:22 269824 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar\UstarRO64.exe
2009-04-16 09:21 . 2009-04-16 09:21 192512 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar\UstarRO32.exe
2009-04-16 09:19 . 2009-04-16 09:19 868352 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar\lang\uk\ustarrs.dll
2009-04-16 09:19 . 2009-04-16 09:19 868352 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar\lang\sv\ustarrs.dll
2009-04-16 09:18 . 2009-04-16 09:18 872448 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar\lang\sk\ustarrs.dll
2009-04-16 09:18 . 2009-04-16 09:18 868352 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar\lang\ru\ustarrs.dll
2009-04-16 09:18 . 2009-04-16 09:18 876544 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar\lang\ro\ustarrs.dll
2009-04-16 09:18 . 2009-04-16 09:18 839680 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar\lang\pt\ustarrs.dll
2009-04-16 09:18 . 2009-04-16 09:18 872448 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar\lang\pl\ustarrs.dll
2009-04-16 09:18 . 2009-04-16 09:18 872448 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar\lang\nl\ustarrs.dll
2009-04-16 09:18 . 2009-04-16 09:18 847872 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar\lang\ja\ustarrs.dll
2009-04-16 09:18 . 2009-04-16 09:18 872448 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar\lang\it\ustarrs.dll
2009-04-16 09:18 . 2009-04-16 09:18 868352 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar\lang\hu\ustarrs.dll
2009-04-16 09:18 . 2009-04-16 09:18 839680 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar\lang\fr\ustarrs.dll
2009-04-16 09:18 . 2009-04-16 09:18 872448 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar\lang\Es\ustarrs.dll
2009-04-16 09:17 . 2009-04-16 09:17 868352 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\UpdateStar\lang\Cs\ustarrs.dll
2009-04-04 15:24 . 2009-01-16 11:13 -------- d-----w- c:\program files\OmniPageSE4.0
2009-04-04 14:17 . 2009-01-17 09:31 -------- d-----w- c:\documents and settings\LocalService\Dane aplikacji\SACore
2009-04-04 08:51 . 2009-02-27 16:37 -------- d-----w- c:\program files\System Cleaner 5
2009-03-20 15:41 . 2009-02-04 10:15 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
2009-03-16 12:18 . 2009-05-06 12:27 69448 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2009-03-16 12:18 . 2009-05-06 12:27 517448 ----a-w- c:\windows\system32\XAudio2_4.dll
2009-03-16 12:18 . 2009-05-06 12:27 235352 ----a-w- c:\windows\system32\xactengine3_4.dll
2009-03-16 12:18 . 2009-05-06 12:27 22360 ----a-w- c:\windows\system32\X3DAudio1_6.dll
2009-03-09 13:27 . 2009-05-06 12:27 453456 ----a-w- c:\windows\system32\d3dx10_41.dll
2009-03-09 13:27 . 2009-05-06 12:27 1846632 ----a-w- c:\windows\system32\D3DCompiler_41.dll
2009-03-09 13:27 . 2009-05-06 12:27 4178264 ----a-w- c:\windows\system32\D3DX9_41.dll
2009-03-08 02:34 . 2004-08-04 12:00 914944 ----a-w- c:\windows\system32\wininet.dll
2009-03-08 02:34 . 2004-08-04 12:00 43008 ----a-w- c:\windows\system32\licmgr10.dll
2009-03-08 02:33 . 2004-08-04 12:00 18944 ----a-w- c:\windows\system32\corpol.dll
2009-03-08 02:33 . 2004-08-04 12:00 420352 ----a-w- c:\windows\system32\vbscript.dll
2009-03-08 02:32 . 2004-08-04 12:00 72704 ----a-w- c:\windows\system32\admparse.dll
2009-03-08 02:32 . 2004-08-04 12:00 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-03-08 02:31 . 2004-08-04 12:00 34816 ----a-w- c:\windows\system32\imgutil.dll
2009-03-08 02:31 . 2004-08-04 12:00 48128 ----a-w- c:\windows\system32\mshtmler.dll
2009-03-08 02:31 . 2004-08-04 12:00 45568 ----a-w- c:\windows\system32\mshta.exe
2009-03-08 02:22 . 2004-08-04 12:00 156160 ----a-w- c:\windows\system32\msls31.dll
2009-03-06 14:22 . 2004-08-04 12:00 285696 ----a-w- c:\windows\system32\pdh.dll
.

------- Sigcheck -------

[7] 2008-06-20 11:59 361600 AD978A1B783B5719720CFF204B666C8E c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[7] 2004-08-04 12:00 359040 9F4B36614A0FC234525BA224957DE55C c:\windows\$NtServicePackUninstall$\tcpip.sys
[7] 2008-04-13 23:50 361344 93EA8D04EC73A85DB02EB8805988F733 c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2008-06-20 11:51 361600 4AFB3B0919649F95C1964AA1FAD27D73 c:\windows\system32\drivers\tcpip.sys
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}]
2009-05-26 16:01 42088 ----a-w- c:\documents and settings\VampirLord\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FF6C3CF0-4B15-11D1-ABED-709549C10000}]
2009-05-27 17:28 140880 ----a-w- c:\progra~1\DAP\dapieloader.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"c:\program files\NetMeter\NetMeter.exe"="c:\program files\NetMeter\NetMeter.exe" [2007-08-11 331264]
"Fraps"="c:\program files\FRAPS\FRAPS.EXE" [2005-06-15 2793472]
"DownloadAccelerator"="c:\program files\DAP\DAP.EXE" [2009-05-27 2811392]
"SpeedBitVideoAccelerator"="c:\program files\SpeedBit Video Accelerator\VideoAccelerator.exe" [2009-05-27 2823784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"cFosSpeed"="c:\program files\cFosSpeed\cFosSpeed.exe" [2009-02-13 876760]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-02-18 13680640]
"egui"="c:\program files\ESET NOD32 Antivirus\egui.exe" [2009-02-06 2021400]
"CBitSpirit"="c:\program files\BitSpirit\BitSpirit.exe" [2009-05-25 3540480]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2006-10-26 434528]

c:\documents and settings\All Users\Menu Start\Programy\Autostart\
Kalendarz XP.lnk - c:\program files\Kalendarz XP\Kalendarz.exe [2009-1-16 882176]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
"NoFileAssociate"= 0 (0x0)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0sasnative32

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\BitSpirit\\BitSpirit.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\HydraIRC\\HydraIRC.exe"=
"c:\\Program Files\\Gadu-Gadu\\gg.exe"=
"c:\\Program Files\\SiSoftware Sandra Lite 2009.SP2\\WNt500x86\\RpcSandraSrv.exe"=
"c:\\Program Files\\FlashGet\\FlashGet.exe"=
"c:\\Program Files\\SiSoftware Sandra Lite 2009.SP2\\RpcAgentSrv.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2009-02-06 106208]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2009-02-06 93336]
R1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [2009-05-18 270888]
R1 sbhips;Sunbelt HIPS Driver;c:\windows\system32\drivers\sbhips.sys [2008-06-21 66600]
R1 SSHDRV85;SSHDRV85;c:\windows\system32\drivers\SSHDRV85.sys [2009-01-22 78848]
R2 ekrn;ESET Service;c:\program files\ESET NOD32 Antivirus\ekrn.exe [2009-02-06 727720]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [2009-05-31 210216]
R2 SbPF.Launcher;SbPF.Launcher;c:\program files\Sunbelt Personal Firewall\SbPFLnch.exe [2008-10-31 95528]
R2 VideoAcceleratorService;VideoAcceleratorService;c:\progra~1\SpeedBit Video Accelerator\VideoAcceleratorService.exe -start -scm --> c:\progra~1\SpeedBit Video Accelerator\VideoAcceleratorService.exe -start -scm [?]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\drivers\SbFwIm.sys [2009-05-18 65576]
S2 0000231243789114mcinstcleanup;McAfee Application Installer Cleanup (0000231243789114);c:\docume~1\VAMPIR~1\USTAWI~1\Temp\0000231243789114mcinst.exe c:\progra~1\COMMON~1\McAfee\Installer\cleanup.ini -cleanup -nolog -service --> c:\docume~1\VAMPIR~1\USTAWI~1\Temp\0000231243789114mcinst.exe c:\progra~1\COMMON~1\McAfee\Installer\cleanup.ini -cleanup -nolog -service [?]
S2 SPF4;Sunbelt Personal Firewall 4;c:\program files\Sunbelt Personal Firewall\SbPFSvc.exe [2008-10-31 1365288]
S3 BCASPROT;Advanced System Protector;\??\c:\program files\Systweak\Advanced System Protector\sasprot32.sys --> c:\program files\Systweak\Advanced System Protector\sasprot32.sys [?]
S3 CrystalSysInfo;CrystalSysInfo;c:\windows\system32\sysinfo.sys [2009-01-25 8192]
S3 SandraAgentSrv;SiSoftware Deployment Agent Service;c:\program files\SiSoftware Sandra Lite 2009.SP2\RpcAgentSrv.exe [2009-05-05 98488]

--- Inne Usługi/Sterowniki w Pamięci ---

*NewlyCreated* - EKRN
*NewlyCreated* - MCAFEE_SITEADVISOR_SERVICE

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{61E3FE32-07B9-4563-A3E0-2DE2D620FE10}]
c:\program files\PixiePack Codec Pack\InstallerHelper.exe
.
Zawartość folderu 'Zaplanowane zadania'

2009-05-31 c:\windows\Tasks\User_Feed_Synchronization-{5F31287A-1EE3-4A57-97F2-5274407FAE10}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
.
- - - - USUNIĘTO PUSTE WPISY - - - -

HKLM-Run-NAV - c:\program files\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV\562C4DD5\16.5.0.134\InstStub.exe
SafeBoot-procexp90.Sys


.
------- Skan uzupełniający -------
.
uStart Page = hxxp://search.bearshare.com/
uInternet Connection Wizard,ShellNext = iexplore
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
IE: &Clean Traces - c:\program files\DAP\Privacy Package\dapcleanerie.htm
IE: &Download All by FlashGet - c:\program files\FlashGet\ComDlls\Bhoall.htm
IE: &Download by FlashGet - c:\program files\FlashGet\ComDlls\Bholink.htm
IE: &Download with &DAP - c:\program files\DAP\dapextie.htm
IE: Download &all with DAP - c:\program files\DAP\dapextie2.htm
IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\Microsoft Office\Office12\EXCEL.EXE/3000
IE: Easy-WebPrint – Dodaj do listy drukowania - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
IE: Easy-WebPrint – Drukuj - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
IE: Easy-WebPrint – Drukuj z dużą szybkością - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
IE: Easy-WebPrint – Podgląd - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
IE: Pobierz z &BitSpirit - c:\program files\BitSpirit\bsurl.htm
IE: Pobierz za pomocą Mega Manager... - c:\program files\Megaupload\Mega Manager\mm_file.htm
IE: ÓñČĚŘľ«ÁéĎÂÔŘ(&B)
LSP: c:\progra~1\SpeedBit Video Accelerator\sblsp.dll
FF - ProfilePath - c:\documents and settings\VampirLord\Dane aplikacji\Mozilla\Firefox\Profiles\t17ejbv0.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.pl/
FF - component: c:\program files\Audials One\VideoRaptor\plugins\GeckoBased\[email protected]\components\VR_WebRipFFPlugin.dll
FF - component: c:\program files\DAP\DAPFireFox\components\DAPFireFox.dll
FF - component: c:\program files\McAfee\SiteAdvisor\components\McFFPlg.dll
FF - plugin: c:\documents and settings\VampirLord\Dane aplikacji\Nowe Gadu-Gadu\_userdata\npgg.1.dll
FF - plugin: c:\program files\Audials One\VideoRaptor\plugins\GeckoBased\[email protected]\plugins\np_VR_OgloPlugin.dll
FF - plugin: c:\program files\VLC Media Player\npvlc.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-31 21:18
Windows 5.1.2600 Dodatek Service Pack 3 NTFS

skanowanie ukrytych procesów ...

skanowanie ukrytych wpisów autostartu ...

skanowanie ukrytych plików ...

skanowanie pomyślnie ukończone
ukryte pliki: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\ASFWHide]
"ImagePath"="\??\c:\docume~1\VAMPIR~1\USTAWI~1\Temp\ASFWHide"
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{157c39b8-f89f-4d2c-8871-366e1a1893c5}]
@Denied: (Full) (Everyone)
"Model"=dword:0000008e
"Therad"=dword:0000001e
"MData"=hex(0):2b,8f,78,29,5a,0c,ce,ec,48,d4,68,e5,9f,6a,96,3e,ab,de,c5,81,26,
38,95,44,85,b1,12,f9,90,dd,23,a1,49,8c,bf,1a,9d,fe,41,71,cb,3f,46,a4,7c,ab,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):c5,87,52,32,61,d7,72,55,53,05,4f,56,5a,a7,16,83,b6,52,48,4d,b0,
45,a9,e2,57,3d,32,65,b3,f7,9a,d7,fa,be,06,1a,1b,51,45,50,00,00,00,00,00,00,\
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------

- - - - - - - > 'lsass.exe'(1940)
c:\progra~1\SpeedBit Video Accelerator\sblsp.dll
c:\program files\SpeedBit Video Accelerator\ConfigDB.dll
c:\program files\SpeedBit Video Accelerator\Accelerator.dll
c:\program files\SpeedBit Video Accelerator\CommPipe.dll
c:\program files\SpeedBit Video Accelerator\Collector.dll
.
Czas ukończenia: 2009-05-31 21:22
ComboFix-quarantined-files.txt 2009-05-31 19:22

Przed: 49 748 459 520 bajtów wolnych
Po: 49 793 421 312 bajtów wolnych

WindowsXP-KB310994-SP2-Home-BootDisk-PLK.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

380 --- E O F --- 2009-05-28 18:27

[Michael Parker]

Przeskanuj obszar całego systemu Dr.WEB CureIt!

Pobierz Malwarebytes' Anti-Malware Uruchom pełne skanowanie. Jeżeli coś znajdzie, to usuń. Następnie daj log na forum.

Przeskanuj system programem SDFix i daj raport z niego. Instrukcja viewtopic.php?f=22&t=13967

Po tym daj nowy log z HijackThis i Combofix.

Logi dajesz na wklej.org lub wklej.eu a w poście podajesz tylko link.