System defender - reklama

przez **kamil94** » 26 Maj 2008, 15:42

Witam, od pewnego czasu co jakies 30 minut wyskakuje mi reklama jakiegoś System Defender chociaż nic takiego nie mam zainstalowanego.

Tu log z Hijackthis:

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:39:50, on 2008-05-26 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16608) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\WINDOWS\System32\cisvc.exe C:\Program Files\Symantec AntiVirus\DefWatch.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\system32\igfxtray.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\hkcmd.exe C:\Program Files\Symantec AntiVirus\SavRoam.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\PROGRA~1\SYMANT~1\VPTray.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Symantec AntiVirus\Rtvscan.exe C:\Program Files\NETGEAR\WPN111\wpn111.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe C:\Program Files\Common Files\Teleca Shared\Generic.exe C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe C:\WINDOWS\system32\cidaemon.exe C:\Program Files\Gadu-Gadu\gg.exe C:\WINDOWS\system32\taskmgr.exe C:\WINDOWS\explorer.exe C:\Program Files\internet explorer\iexplore.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://wp.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O4 - HKLM\..\Run: [launapp] c:\elements\launapp.exe O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [Client Access Service] "C:\Program Files\IBM\as400\cwbsvstr.exe" O4 - HKLM\..\Run: [Client Access Help Update] "C:\Program Files\IBM\as400\cwbinhlp.exe" O4 - HKLM\..\Run: [Client Access Check Version] "C:\Program Files\IBM\as400\cwbckver.exe" LOGIN O4 - HKLM\..\Run: [Client Access Express Welcome] "C:\Program Files\IBM\as400\cwbwlwiz.exe" O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\GetFlash.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\GetFlash.exe (User 'Default user') O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: NETGEAR WPN111 Smart Wizard.lnk = ? O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = boschrexroth O17 - HKLM\Software\..\Telephony: DomainName = boschrexroth O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = boschrexroth O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = boschrexroth O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = boschrexroth O17 - HKLM\System\CS4\Services\Tcpip\Parameters: Domain = boschrexroth O17 - HKLM\System\CS5\Services\Tcpip\Parameters: Domain = boschrexroth O17 - HKLM\System\CS6\Services\Tcpip\Parameters: Domain = boschrexroth O17 - HKLM\System\CS7\Services\Tcpip\Parameters: Domain = boschrexroth O17 - HKLM\System\CS8\Services\Tcpip\Parameters: Domain = boschrexroth O21 - SSODL: pxgdslro - {39DBAC7B-CDC3-48FD-8D55-729F5D5F7F9A} - C:\WINDOWS\pxgdslro.dll (file missing) O21 - SSODL: gnowmebk - {FE84B4B9-AF01-4DE0-AB10-4F7DE0CB4F54} - C:\WINDOWS\gnowmebk.dll (file missing) O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Klient Symantec AntiVirus (Norton AntiVirus Server) - Unknown owner - C:\PROGRA~1\NavNT\rtvscan.exe (file missing) O23 - Service: Route Access Protocol Graphics (RAPG) - Unknown owner - C:\Program Files\Intel\SVCH0ST.exe (file missing) O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe -- End of file - 6968 bytes

Tu log z ComboFixa:

Kod: Zaznacz wszystko: ComboFix 08-05-25.4 - Administrator 2008-05-26 15:12:37.1 - NTFSx86 Running from: C:\Documents and Settings\Administrator\Pulpit\ComboFix.exe * Created a new restore point [color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color] . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Network\Downloader\qmgr0.dat C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Network\Downloader\qmgr1.dat C:\WINDOWS\gnowmebk.dll ----- BITS: Possible infected sites ----- hxxp://lepd2 . ((((((((((((((((((((((((( Files Created from 2008-04-26 to 2008-05-26 ))))))))))))))))))))))))))))))) . 2008-05-26 14:57 . 2008-05-26 15:01 <DIR> d-------- C:\WINDOWS\LastGood 2008-05-25 18:36 . 2008-05-25 18:36 <DIR> d-------- C:\Program Files\Lavasoft 2008-05-25 18:36 . 2008-05-25 18:38 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Lavasoft 2008-05-25 16:10 . 2008-05-25 16:08 691,545 --a------ C:\WINDOWS\unins000.exe 2008-05-25 16:10 . 2008-05-25 16:10 2,552 --a------ C:\WINDOWS\unins000.dat 2008-05-20 21:21 . 2008-05-20 21:21 <DIR> d-------- C:\Program Files\Trend Micro 2008-05-20 20:48 . 2008-05-20 20:48 86 --a------ C:\WINDOWS\wininit.ini 2008-05-20 16:16 . 2008-05-20 21:43 <DIR> d-------- C:\VundoFix Backups 2008-05-19 09:34 . 2008-05-19 21:18 <DIR> d-------- C:\Documents and Settings\Administrator\Dane aplikacji\TmpRecentIcons 2008-05-19 07:43 . 2008-05-19 07:43 62,910 --a------ C:\Program Files\Uninstall.exe 2008-05-19 07:43 . 2008-05-19 07:43 0 --a------ C:\Program Files\uninstall.dat 2008-05-18 17:33 . 2008-05-17 23:15 172,032 --a------ C:\WINDOWS\esta.exe 2008-05-18 17:33 . 2008-05-17 23:15 90,112 --a------ C:\WINDOWS\mdtgkswr.exe 2008-05-17 17:41 . 2008-05-17 17:45 <DIR> d-------- C:\Program Files\ATITool 2008-05-17 11:17 . 2008-05-17 11:21 <DIR> d-------- C:\Program Files\XLFServer 2008-05-16 11:58 . 2008-05-16 11:58 12,632 --a------ C:\WINDOWS\system32\lsdelete.exe 2008-05-06 15:13 . 2008-05-17 17:21 <DIR> d-------- C:\Program Files\RMClock 2008-04-29 11:20 . 2008-04-29 11:20 15,648 --a------ C:\WINDOWS\system32\drivers\NSDriver.sys 2008-04-29 11:19 . 2008-04-29 11:19 15,648 --a------ C:\WINDOWS\system32\drivers\Awrtrd.sys 2008-04-29 11:19 . 2008-04-29 11:19 12,960 --a------ C:\WINDOWS\system32\drivers\Awrtpd.sys . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2060-08-18 17:02 1,496,064 ------w C:\WINDOWS\system32\CC3250MT.DLL 2060-08-18 16:40 909,824 ------w C:\WINDOWS\system32\cp3245mt.dll 2060-08-18 16:40 24,064 ------w C:\WINDOWS\system32\borlndmm.dll 2008-05-26 10:20 --------- d-----w C:\Program Files\Symantec AntiVirus 2008-05-25 16:36 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard 2008-05-21 19:51 --------- d-----w C:\Program Files\Google 2008-05-21 19:46 --------- d-----w C:\Program Files\SpeedFan 2008-05-21 19:45 --------- d-----w C:\Program Files\Samurize 2008-05-21 19:45 --------- d-----w C:\Program Files\RivaTuner v2.06 2008-05-21 19:38 --------- d-----w C:\Program Files\Lavalys 2008-05-20 14:17 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy 2008-05-19 17:46 --------- d-----w C:\Program Files\Gadu-Gadu 2008-05-19 17:46 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\uTorrent 2008-05-19 17:30 --------- d-----w C:\Program Files\PC Cleaner 2008-05-19 17:22 --------- d-----w C:\Program Files\Spybot - Search & Destroy 2008-05-18 15:32 --------- d---a-w C:\Documents and Settings\All Users\Dane aplikacji\TEMP 2008-05-17 18:16 --------- d-----w C:\Program Files\Winamp 2008-04-25 11:03 --------- d-----w C:\Program Files\uTorrent 2008-04-22 21:11 --------- d-----w C:\Program Files\DBZWidget 2008-04-19 11:01 --------- d-----w C:\Program Files\Beach Soccer 2008-04-17 14:08 4,096 ----a-w C:\WINDOWS\system32\drivers\nocashio.sys 2008-04-15 18:36 --------- d-----w C:\Program Files\Common Files\Adobe 2008-04-15 18:32 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\Download Manager 2008-04-10 14:54 --------- d-----w C:\Program Files\rpg20031 2008-04-10 14:47 --------- d-----w C:\Program Files\rpg2003 2008-04-09 15:49 --------- d-----w C:\Program Files\SopCast 2008-03-30 17:32 --------- d-----w C:\Program Files\PowerChallenge 2008-03-28 19:25 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\Acoustica 2008-03-28 16:26 --------- d-----w C:\Program Files\irfan 2008-03-04 11:33 7,680 ----a-w C:\WINDOWS\system32\ff_vfw.dll 2007-11-16 16:00 32 ----a-w C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat 2007-03-16 07:10 18,384 -c--a-w C:\Documents and Settings\Administrator\Dane aplikacji\GDIPFONTCACHEV1.DAT . ------- Sigcheck ------- 2001-10-30 12:00 12800 b3c95bfeef6781a82a1c429f466a3a11 C:\WINDOWS\$NtServicePackUninstall$\svchost.exe 2004-08-04 01:44 14336 ba98327e90022dbd6ee76490e0622e2e C:\WINDOWS\ServicePackFiles\i386\svchost.exe 2004-08-04 01:44 14336 ba98327e90022dbd6ee76490e0622e2e C:\WINDOWS\system32\svchost.exe 2003-07-10 12:34 70656 a812d61ec9597d44e114664c4dfaeaa7 C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll 2001-10-30 11:00 75264 9b7d1c56cc12d806314b853bf52ecb4c C:\WINDOWS\$NtUninstallKB817778$\ws2_32.dll 2004-08-04 01:44 82944 ab82237486b727dd7dab36a76f38a3a2 C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll 2004-08-04 01:44 82944 ab82237486b727dd7dab36a76f38a3a2 C:\WINDOWS\system32\ws2_32.dll 2004-06-17 19:42 485888 82af1eaf0889a408aec6cd26a4d90a1a C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe 2002-09-21 03:05 519168 8b6e6bb5d451f8bbc0621203b687d993 C:\WINDOWS\$NtUninstallKB840987$\winlogon.exe 2004-08-04 01:44 504832 0344407089b08548d4feba62bb0f32d0 C:\WINDOWS\ServicePackFiles\i386\winlogon.exe 2004-08-04 01:44 504832 0344407089b08548d4feba62bb0f32d0 C:\WINDOWS\system32\winlogon.exe 2003-10-04 09:54 168192 d999ce17681d7d074d534fc5bc662e0a C:\WINDOWS\$NtServicePackUninstall$\ndis.sys md5deep: C:\WINDOWS\$NtUninstallKB826942$\ndis.sys: Permission denied 2004-08-04 00:14 182912 558635d3af1c7546d26067d5d9b6959e C:\WINDOWS\ServicePackFiles\i386\ndis.sys 2004-08-04 00:14 182912 558635d3af1c7546d26067d5d9b6959e C:\WINDOWS\system32\drivers\ndis.sys 2003-06-30 16:35 29952 eddca9c72f1e7f2e2e2ab6ad7106c4a5 C:\WINDOWS\$NtServicePackUninstall$\ip6fw.sys 2004-08-04 00:00 29056 4448006b6bc60e6c027932cfc38d6855 C:\WINDOWS\ServicePackFiles\i386\ip6fw.sys 2004-08-04 00:00 29056 4448006b6bc60e6c027932cfc38d6855 C:\WINDOWS\system32\drivers\ip6fw.sys 2005-03-02 10:14 2058240 35d11fdc381536ab95e3005489131f44 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe 2007-02-28 18:09 2060672 2f4a36b1b03d64fb176cb0f3eb597118 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntkrnlpa.exe 2004-06-17 10:43 1955968 003d3fa47af6e4e01b978599787612b6 C:\WINDOWS\$NtServicePackUninstall$\ntkrnlpa.exe 2003-04-24 10:21 1950720 703bf7590b0bd8524e5260d8403bffba C:\WINDOWS\$NtUninstallKB840987$\ntkrnlpa.exe 2004-08-04 01:38 2058112 44d1bc1b05e0c7c82e81687b79c653c7 C:\WINDOWS\$NtUninstallKB890859$\ntkrnlpa.exe 2005-03-02 20:08 2058112 0f6990820c6ce0a7a911fae5937ef1f6 C:\WINDOWS\$NtUninstallKB931784$\ntkrnlpa.exe 2002-09-21 02:12 1949184 79d262478c985e736deb38ce2224fc75 C:\WINDOWS\$NtUninstallQ811493$\ntkrnlpa.exe 2007-02-28 18:04 2058880 2bdc1a6cefe320e9c39fabf1961ebb9d C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe 2004-08-04 01:38 2058112 44d1bc1b05e0c7c82e81687b79c653c7 C:\WINDOWS\ServicePackFiles\i386\ntkrnlpa.exe 2005-03-02 20:08 2058112 0f6990820c6ce0a7a911fae5937ef1f6 C:\WINDOWS\system32\ntkrnlpa.exe 2007-02-28 18:04 2058880 2bdc1a6cefe320e9c39fabf1961ebb9d C:\WINDOWS\system32\dllcache\ntkrnlpa.exe 2005-03-02 20:14 2180864 dba3e4215279c8012b37d2135b531258 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe 2007-02-28 18:09 2183424 c450518ef9acc02a2d799698021e31a8 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe 2004-06-17 19:43 2052864 43887d981e9069728eca687f87869138 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe 2003-04-24 10:22 1927040 3d9f26a88f675485d4db137c1fe1a0b5 C:\WINDOWS\$NtUninstallKB840987$\ntoskrnl.exe 2004-08-04 01:39 2182272 dcf53422b7edded3b7431fbae4a7ee3f C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe 2005-03-02 20:09 2180608 3f3612846d67352468d2286fc23fb0c2 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe 2002-09-21 02:12 2043520 ae94ae0da6ed874ce08912fc63f8c6c2 C:\WINDOWS\$NtUninstallQ811493$\ntoskrnl.exe 2007-02-28 18:04 2181632 c378be3a1edc5e4421d428655ac4a48c C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe 2004-08-04 01:39 2182272 dcf53422b7edded3b7431fbae4a7ee3f C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe 2005-03-02 20:09 2180608 3f3612846d67352468d2286fc23fb0c2 C:\WINDOWS\system32\ntoskrnl.exe 2007-02-28 18:04 2181632 c378be3a1edc5e4421d428655ac4a48c C:\WINDOWS\system32\dllcache\ntoskrnl.exe 2001-10-30 12:00 101888 bf4cbefdce42a699389791647cb95ca2 C:\WINDOWS\$NtServicePackUninstall$\services.exe 2004-08-04 01:44 108544 3da8d964d2cc12ef8e8c342471a37917 C:\WINDOWS\ServicePackFiles\i386\services.exe 2004-08-04 01:44 108544 3da8d964d2cc12ef8e8c342471a37917 C:\WINDOWS\system32\services.exe 2002-09-21 03:05 11776 fa2c871f57352339f0a1802bb9aea6e7 C:\WINDOWS\$NtServicePackUninstall$\lsass.exe 2004-08-04 01:44 13312 f485fefc8cc4fd29243d800be5d275d1 C:\WINDOWS\ServicePackFiles\i386\lsass.exe 2004-08-04 01:44 13312 f485fefc8cc4fd29243d800be5d275d1 C:\WINDOWS\system32\lsass.exe 2002-09-21 03:05 13312 0c4c012b0a8960f48a666c240a7baa3d C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe 2004-08-04 01:44 15360 cbfa30492d70ce3938d8a7783d0c0436 C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe 2004-08-04 01:44 15360 cbfa30492d70ce3938d8a7783d0c0436 C:\WINDOWS\system32\ctfmon.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 01:44 15360] "Twoje TVN24"="" [] "Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-07-09 09:39 2119104] "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-12-01 12:46 204288] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "launapp"="c:\elements\launapp.exe" [2003-03-19 09:09 164099] "SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2001-08-01 12:52 94208] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2001-08-01 12:51 352256] "IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2004-08-20 16:55 155648] "HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2004-08-20 16:51 118784] "Client Access Service"="C:\Program Files\IBM\as400\cwbsvstr.exe" [2001-05-04 06:10 20530] "Client Access Help Update"="C:\Program Files\IBM\as400\cwbinhlp.exe" [2001-05-04 06:10 24576] "Client Access Check Version"="C:\Program Files\IBM\as400\cwbckver.exe" [2001-05-04 06:10 49202] "Client Access Express Welcome"="C:\Program Files\IBM\as400\cwbwlwiz.exe" [2001-05-04 06:10 20480] "Synchronization Manager"="C:\WINDOWS\system32\mobsync.exe" [2004-08-04 01:44 143872] "ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2004-05-17 17:40 66656] "vptray"="C:\PROGRA~1\SYMANT~1\VPTray.exe" [2004-05-17 17:48 124128] "Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2005-10-26 16:17 159744] "UserFaultCheck"="C:\WINDOWS\system32\dumprep 0 -u" [ ] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-04 01:44 15360] "DWQueuedReporting"="C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-03-13 16:38 39264] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "FlashPlayerUpdate"="C:\WINDOWS\system32\Macromed\Flash\GetFlash.exe" [ ] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 10:01:04 83360] NETGEAR WPN111 Smart Wizard.lnk - C:\Program Files\NETGEAR\WPN111\wpn111.exe [2007-02-28 21:51:45 884838] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] "pxgdslro"= {39DBAC7B-CDC3-48FD-8D55-729F5D5F7F9A} - C:\WINDOWS\pxgdslro.dll [ ] "gnowmebk"= {FE84B4B9-AF01-4DE0-AB10-4F7DE0CB4F54} - C:\WINDOWS\gnowmebk.dll [ ] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "vidc.I420"= i263_32.drv "msacm.l3codecp"= l3codecp.acm "vidc.yv12"= yv12vfw.dll "msacm.avis"= ff_acm.acm [HKLM\~\startupfolder\C:^Documents and Settings^Administrator^Menu Start^Programy^Autostart^hamachi.lnk] path=C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\hamachi.lnk backup=C:\WINDOWS\pss\hamachi.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^Administrator^Menu Start^Programy^Autostart^UniSpiker.lnk] path=C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\UniSpiker.lnk backup=C:\WINDOWS\pss\UniSpiker.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] C:\Program Files\Skype\Phone\Skype.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\Gadu-Gadu\\gg.exe"= "C:\\WINDOWS\\system32\\dplaysvr.exe"= "C:\\Program Files\\Internet Explorer\\iexplore.exe"= "C:\\Documents and Settings\\Administrator\\Pulpit\\łOst\\YurOts 0.3 (Versao 8.0)0\\Yurots 0.3 Versao 0.8.exe"= "C:\\Program Files\\PowerChallenge\\PowerFootball\\PowerFootball-OpenGL.exe"= "C:\\Program Files\\PowerChallenge\\PowerFootball\\PowerFootball-D3D9.exe"= "C:\\WINDOWS\\system32\\dpvsetup.exe"= "C:\\Program Files\\Sports Interactive\\Football Manager 2008\\fm.exe"= "C:\\Program Files\\BYOND\\bin\\byond.exe"= "C:\\Program Files\\MAIET\\Gunz\\GunzLauncher.exe"= "C:\\Program Files\\Hamachi\\hamachi.exe"= "C:\\Program Files\\UrbanTerror\\ioUrbanTerror.exe"= "C:\\Program Files\\SopCast\\adv\\SopAdver.exe"= "C:\\Program Files\\SopCast\\SopCast.exe"= "C:\\Program Files\\uTorrent\\uTorrent.exe"= R0 tffsport;M-Systems DiskOnChip 2000;C:\WINDOWS\system32\DRIVERS\tffsport.sys [2004-08-03 23:00] R1 dmiproxy;dmiproxy;C:\WINDOWS\system32\drivers\dmiproxy.sys [2001-10-24 17:08] R1 NbmKmd;NbmKmd;C:\WINDOWS\system32\drivers\NbmKmd.sys [2001-10-24 17:08] R3 DNINDIS5;DNINDIS5 NDIS Protocol Driver;C:\WINDOWS\system32\DNINDIS5.SYS [2003-07-24 13:10] R3 WPN111;Wireless USB 2.0 Adapter with RangeMax Service;C:\WINDOWS\system32\DRIVERS\WPN111.sys [2005-09-26 17:02] S2 RAPG;Route Access Protocol Graphics;C:\Program Files\Intel\SVCH0ST.exe [] S3 {A7E39B01-B403-11d4-BD18-00D0B7A1821E};AIM 3.0 Part 01 Codec Driver VCH-A;C:\WINDOWS\system32\drivers\Vch.sys [2001-10-10 09:44] S3 POWERKEY;POWERKEY;C:\Program Files\Acer\Launch Manager\POWERKEY.sys [] S3 RTCore32;RTCore32;C:\Program Files\RMClock\RTCore32.sys [] S3 XDva059;XDva059;C:\WINDOWS\system32\XDva059.sys [] *Newly Created Service* - CATCHME . Contents of the 'Scheduled Tasks' folder "2008-05-19 08:54:45 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe "2008-05-26 10:20:13 C:\WINDOWS\Tasks\MP Scheduled Scan.job" - C:\Program Files\Windows Defender\MpCmdRun.exe "2008-05-08 07:00:02 C:\WINDOWS\Tasks\rpc.job" - C:\Program Files\Winferno\RegistryPowerCleaner\RegPowerClean.exe "2004-08-18 07:59:44 C:\WINDOWS\Tasks\Symantec NetDetect.job" - C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-05-26 15:20:25 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2008-05-26 15:27:53 ComboFix-quarantined-files.txt 2008-05-26 13:27:00 Pre-Run: 1,309,215,744 bajtów wolnych Post-Run: 1,992,342,528 bajtów wolnych 225

Proszę o dokładną pomoc, ponieważ nie znam sie dokładnie na logach. Pozdrowienia

przez **huber2t** » 26 Maj 2008, 15:49

fix w hijackthis

O21 - SSODL: pxgdslro - {39DBAC7B-CDC3-48FD-8D55-729F5D5F7F9A} - C:\WINDOWS\pxgdslro.dll (file missing)
O21 - SSODL: gnowmebk - {FE84B4B9-AF01-4DE0-AB10-4F7DE0CB4F54} - C:\WINDOWS\gnowmebk.dll (file missing)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = boschrexroth
O17 - HKLM\Software\..\Telephony: DomainName = boschrexroth
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = boschrexroth
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = boschrexroth
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = boschrexroth
O17 - HKLM\System\CS4\Services\Tcpip\Parameters: Domain = boschrexroth
O17 - HKLM\System\CS5\Services\Tcpip\Parameters: Domain = boschrexroth
O17 - HKLM\System\CS6\Services\Tcpip\Parameters: Domain = boschrexroth
O17 - HKLM\System\CS7\Services\Tcpip\Parameters: Domain = boschrexroth
O17 - HKLM\System\CS8\Services\Tcpip\Parameters: Domain = boschrexroth

Pobierz ComboFix, ale nie uruchamiaj
Wklej do notatnika:

Kod: Zaznacz wszystko: Driver:: Route Access Protocol Graphics

Plik

zapisz jako

CFScript.txt (najwygodniej będzie, jeśli zapiszesz w takiej lokalizacji, by ikonka CFScript.txt znalazła się obok ikonki ComboFix.exe)
Przeciągnij i upuść ikonkę CFScript.txt na ikonkę ComboFix.exe tak jak tu

Rozpocznie się usuwanie i powstanie log, daj ten log na forum.

Logi dajesz na http://www.wklej.eu/

przez **kamil94** » 26 Maj 2008, 16:16

Hijackthis wszystko zfixował z tych co podałeś.

A tu log z ComboFixa(zrobiłem wszystko według instrukcji):
http://wklej.org/txt/799ca3eac1

przez **huber2t** » 26 Maj 2008, 17:23

Log ok

Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum

przez **kamil94** » 27 Maj 2008, 16:41

Raport z kaspersky:
http://wklej.org/txt/e0aa8c3fa7

przez **huber2t** » 27 Maj 2008, 16:57

Daj ten raport na forum

przez **kamil94** » 27 Maj 2008, 16:59

Kod: Zaznacz wszystko: ------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT 27 maj 2008 16:35:48 System operacyjny: Microsoft Windows XP Professional, Dodatek Service Pack 2 (Build 2600) Kaspersky Online Scanner wersja: 5.0.98.0 Ostatnia aktualizacja Kaspersky Anti-Virus27/05/2008 Liczba wpisów w bazie danych Kaspersky Anti-Virus801425 ------------------------------------------------------------------------------- Ustawienia skanowania: Skanowanie przy użyciu następujących baz danych: rozszerzone Skanuj archiwa: tak Skanuj pocztowe bazy danych: tak Obszar skanowania - Mój komputer: A:\ C:\ D:\ E:\ Statystyki skanowania: Liczba skanowanych obiektów: 55844 Liczba wykrytych wirusów: 4 Liczba zainfekowanych obiektów: 10 Liczba podejrzanych obiektów: 0 Czas trwania skanowania: 02:35:59 Nazwa zainfekowanego obiektu / Nazwa wirusa / Ostatnie działanie C:\Documents and Settings\Administrator\Cookies\index.dat Object is locked pominięty C:\Documents and Settings\Administrator\Dane aplikacji\Teleca\Telecalib\Logging\Application logs\SpecificUSB_log.txt Object is locked pominięty C:\Documents and Settings\Administrator\ntuser.dat Object is locked pominięty C:\Documents and Settings\Administrator\ntuser.dat.LOG Object is locked pominięty C:\Documents and Settings\Administrator\Pulpit\Folder\Foldery.zip/Foldery.zip/nie potrzbne;d/rex/BearShareV6int.exe/WISE0044.BIN/stream/data0005 Zainfekowanych: not-a-virus:AdWare.Win32.Mostofate.aa pominięty C:\Documents and Settings\Administrator\Pulpit\Folder\Foldery.zip/Foldery.zip/nie potrzbne;d/rex/BearShareV6int.exe/WISE0044.BIN/stream Zainfekowanych: not-a-virus:AdWare.Win32.Mostofate.aa pominięty C:\Documents and Settings\Administrator\Pulpit\Folder\Foldery.zip/Foldery.zip/nie potrzbne;d/rex/BearShareV6int.exe/WISE0044.BIN Zainfekowanych: not-a-virus:AdWare.Win32.Mostofate.aa pominięty C:\Documents and Settings\Administrator\Pulpit\Folder\Foldery.zip/Foldery.zip/nie potrzbne;d/rex/BearShareV6int.exe Zainfekowanych: not-a-virus:AdWare.Win32.Mostofate.aa pominięty C:\Documents and Settings\Administrator\Pulpit\Folder\Foldery.zip/Foldery.zip Zainfekowanych: not-a-virus:AdWare.Win32.Mostofate.aa pominięty C:\Documents and Settings\Administrator\Pulpit\Folder\Foldery.zip ZIP: zainfekowany - 5 pominięty C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft\Media Player\CurrentDatabase_360.wmdb Object is locked pominięty C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat Object is locked pominięty C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat.LOG Object is locked pominięty C:\Documents and Settings\Administrator\Ustawienia lokalne\Historia\History.IE5\index.dat Object is locked pominięty C:\Documents and Settings\Administrator\Ustawienia lokalne\Historia\History.IE5\MSHist012008052720080528\index.dat Object is locked pominięty C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\~DFD385.tmp Object is locked pominięty C:\Documents and Settings\Administrator\Ustawienia lokalne\Temp\~DFD39A.tmp Object is locked pominięty C:\Documents and Settings\Administrator\Ustawienia lokalne\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked pominięty C:\Documents and Settings\Administrator\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat Object is locked pominięty C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Network\Downloader\qmgr0.dat Object is locked pominięty C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Network\Downloader\qmgr1.dat Object is locked pominięty C:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Windows Defender\Support\MPLog-07242007-152513.log Object is locked pominięty C:\Documents and Settings\All Users\Dane aplikacji\Symantec\Common Client\settings.dat Object is locked pominięty C:\Documents and Settings\All Users\Dane aplikacji\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04B00000.VBN Zainfekowanych: Trojan.Win32.Delf.baa pominięty C:\Documents and Settings\All Users\Dane aplikacji\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04B00001.VBN Zainfekowanych: Trojan.Win32.Delf.baa pominięty C:\Documents and Settings\All Users\DRM\drmstore.hds Object is locked pominięty C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked pominięty C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked pominięty C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked pominięty C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat Object is locked pominięty C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat.LOG Object is locked pominięty C:\Documents and Settings\LocalService\Ustawienia lokalne\Historia\History.IE5\index.dat Object is locked pominięty C:\Documents and Settings\LocalService\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat Object is locked pominięty C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked pominięty C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked pominięty C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat Object is locked pominięty C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\UsrClass.dat.LOG Object is locked pominięty C:\Program Files\Mozilla Firefox\plugins\NPMyGlSh.dll Zainfekowanych: not-a-virus:AdTool.Win32.MyWebSearch.i pominięty C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked pominięty C:\System Volume Information\_restore{944123DB-09FC-46F7-A676-83890AF51AFD}\RP2\A0000006.exe Zainfekowanych: Trojan-Downloader.Win32.FraudLoad.abk pominięty C:\System Volume Information\_restore{944123DB-09FC-46F7-A676-83890AF51AFD}\RP5\change.log Object is locked pominięty C:\WINDOWS\$NtUninstallKB824141$\user32.dll Object is locked pominięty C:\WINDOWS\$NtUninstallKB824141$\win32k.sys Object is locked pominięty C:\WINDOWS\$NtUninstallKB826942$\dhcpcsvc.dll Object is locked pominięty C:\WINDOWS\$NtUninstallKB826942$\ndis.sys Object is locked pominięty C:\WINDOWS\$NtUninstallKB826942$\ndisuio.sys Object is locked pominięty C:\WINDOWS\$NtUninstallKB826942$\netshell.dll Object is locked pominięty C:\WINDOWS\$NtUninstallKB826942$\wzcdlg.dll Object is locked pominięty C:\WINDOWS\$NtUninstallKB826942$\wzcsapi.dll Object is locked pominięty C:\WINDOWS\$NtUninstallKB826942$\wzcsvc.dll Object is locked pominięty C:\WINDOWS\$NtUninstallKB828028$\msasn1.dll Object is locked pominięty C:\WINDOWS\$NtUninstallKB828035$\msgsvc.dll Object is locked pominięty C:\WINDOWS\$NtUninstallKB828035$\wkssvc.dll Object is locked pominięty C:\WINDOWS\$NtUninstallKB829558$\dao360.dll Object is locked pominięty C:\WINDOWS\$NtUninstallKB829558$\msexcl40.dll Object is locked pominięty C:\WINDOWS\$NtUninstallKB829558$\msjet40.dll Object is locked pominięty C:\WINDOWS\$NtUninstallKB829558$\msjetoledb40.dll Object is locked pominięty C:\WINDOWS\$NtUninstallKB829558$\msjtes40.dll Object is locked pominięty C:\WINDOWS\$NtUninstallKB829558$\mspbde40.dll Object is locked pominięty C:\WINDOWS\$NtUninstallKB829558$\msrepl40.dll Object is locked pominięty C:\WINDOWS\$NtUninstallKB829558$\mstext40.dll Object is locked pominięty C:\WINDOWS\$NtUninstallKB829558$\msxbde40.dll Object is locked pominięty C:\WINDOWS\$NtUninstallQ828026$\msdxm.ocx Object is locked pominięty C:\WINDOWS\$NtUninstallQ828026$\wmp.dll Object is locked pominięty C:\WINDOWS\CSC\00000001 Object is locked pominięty C:\WINDOWS\CSC\00000002 Object is locked pominięty C:\WINDOWS\CSC\00000003 Object is locked pominięty C:\WINDOWS\CSC\d1\00000018 Object is locked pominięty C:\WINDOWS\CSC\d2\00000039 Object is locked pominięty C:\WINDOWS\CSC\d2\00000051 Object is locked pominięty C:\WINDOWS\CSC\d4\00000013 Object is locked pominięty C:\WINDOWS\CSC\d4\00000053 Object is locked pominięty C:\WINDOWS\CSC\d5\00000044 Object is locked pominięty C:\WINDOWS\CSC\d6\0000002D Object is locked pominięty C:\WINDOWS\CSC\d8\0000001F Object is locked pominięty C:\WINDOWS\CSC\d8\0000004F Object is locked pominięty C:\WINDOWS\Debug\Netlogon.log Object is locked pominięty C:\WINDOWS\Debug\PASSWD.LOG Object is locked pominięty C:\WINDOWS\SchedLgU.Txt Object is locked pominięty C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked pominięty C:\WINDOWS\system32\CatRoot2\edb.log Object is locked pominięty C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked pominięty C:\WINDOWS\system32\config\AppEvent.Evt Object is locked pominięty C:\WINDOWS\system32\config\DEFAULT Object is locked pominięty C:\WINDOWS\system32\config\default.LOG Object is locked pominięty C:\WINDOWS\system32\config\Internet.evt Object is locked pominięty C:\WINDOWS\system32\config\SAM Object is locked pominięty C:\WINDOWS\system32\config\SAM.LOG Object is locked pominięty C:\WINDOWS\system32\config\SecEvent.Evt Object is locked pominięty C:\WINDOWS\system32\config\SECURITY Object is locked pominięty C:\WINDOWS\system32\config\SECURITY.LOG Object is locked pominięty C:\WINDOWS\system32\config\SOFTWARE Object is locked pominięty C:\WINDOWS\system32\config\software.LOG Object is locked pominięty C:\WINDOWS\system32\config\SysEvent.Evt Object is locked pominięty C:\WINDOWS\system32\config\SYSTEM Object is locked pominięty C:\WINDOWS\system32\config\system.LOG Object is locked pominięty C:\WINDOWS\system32\drivers\sptd.sys Object is locked pominięty C:\WINDOWS\system32\h323log.txt Object is locked pominięty C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked pominięty C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked pominięty C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked pominięty C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked pominięty C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked pominięty C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked pominięty C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked pominięty C:\WINDOWS\WindowsUpdate.log Object is locked pominięty Proces skanowania został zakończony.

przez **huber2t** » 27 Maj 2008, 17:44

Usuń ten plik:

C:\Documents and Settings\Administrator\Pulpit\Folder\Foldery.zip
C:\Program Files\Mozilla Firefox\plugins\NPMyGlSh.dll

Usuń pliki z tego folderu lub wyczyść kwarantanne Symantec AntiVirus Corporate Edition

C:\Documents and Settings\All Users\Dane aplikacji\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine

Wyłącz i Włącz przywracanie systemu na wszystkich dyskach. Instrukcja

Powinno być ok

System defender - reklama

System defender - reklama

Kto jest na forum