Zwolnienie Firefoxa. Prosze o sprawdzenie LOGA

[perez999]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:16, on 2008-07-23
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20583)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Programy\Avast4\aswUpdSv.exe
C:\Programy\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Programy\Avast4\ashMaiSv.exe
C:\Programy\Avast4\ashWebSv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Programy\Avast4\ashDisp.exe
C:\Programy\Gadu-Gadu\gg.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programy\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\Programy\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Programy\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.pl/resources/virus ... nicode.cab
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://dev.srtest.com/srl_bin/sysreqlab3.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{EBAC6F84-40AD-468F-873F-1C6DFE1E4FCF}: NameServer = 194.204.159.1 217.98.63.164
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programy\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programy\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Programy\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Programy\Avast4\ashWebSv.exe
O23 - Service: Indexing Service (CiSvc) - Unknown owner - C:\WINDOWS\system32\cisvc.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

--
End of file - 4380 bytes

[huber2t]

W logu nic nie widze

Czy są jakieś problemy?

[perez999]

Muli mi kompa (szczególnie firefoxa);/ chyba klania sie format albo zmiana kompa;/

[huber2t]

Przeinstaluj go

Daj log z Combofix

[perez999]

ComboFix 08-07-23.5 - Administrator 2008-07-24 15:52:49.6 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.885 [GMT 2:00]
Running from: C:\Documents and Settings\Administrator\Pulpit\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2008-06-24 to 2008-07-24 )))))))))))))))))))))))))))))))
.

2008-07-13 14:22 . 2008-07-13 14:22 <DIR> d-------- C:\Documents and Settings\Administrator\Dane aplikacji\Tibia

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-24 13:18 --------- d-----w C:\Documents and Settings\Administrator\Dane aplikacji\uTorrent
2008-07-19 08:54 137,472 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-07-19 08:54 111,928 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
2008-06-23 20:41 --------- d-----w C:\Program Files\ESET
2008-06-08 08:57 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-06-06 13:23 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\nView_Profiles
2008-06-06 11:33 --------- d-----w C:\Program Files\SystemRequirementsLab
2008-06-05 20:20 --------- d-----w C:\Program Files\Panda Security
2008-06-03 17:00 --------- d-----w C:\Program Files\Ray Adams
2008-05-27 08:19 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab
2008-05-24 12:57 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-01-12 13:09 16,384 --sha-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
2008-01-12 13:09 16,384 --sha-w C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\index.dat
2008-01-12 13:09 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat
.

------- Sigcheck -------

2007-07-10 15:06 642560 ce594e18fe0d0af804f1f3694921ce62 C:\WINDOWS\system32\user32.dll

2007-07-14 00:56 814592 ce7193c5f7c01b19768e066087c1c919 C:\WINDOWS\system32\wininet.dll

2007-07-28 03:15 360576 0fb6743e937c7bb248b2530a5a77abc6 C:\WINDOWS\system32\drivers\tcpip.sys

2007-07-26 19:30 2067584 5362d54a6925afdcbbba53b43ee65774 C:\WINDOWS\system32\ntkrnlpa.exe

2007-07-26 19:31 2190464 9899bb89856e3bd4ef13e11ccee49b71 C:\WINDOWS\system32\ntoskrnl.exe

2007-07-14 00:42 974848 32f67215c57df2c401bf93b7ee65987f C:\WINDOWS\explorer.exe
.
((((((((((((((((((((((((((((( snapshot@2008-05-26_17.56.19.00 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-05-28 13:06:38 267,568 ----a-w C:\WINDOWS\Downloaded Program Files\sysreqlab3.dll
+ 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
- 2000-08-31 06:00:00 28,160 ----a-w C:\WINDOWS\Nircmd.exe
+ 2000-08-31 06:00:00 28,672 ----a-w C:\WINDOWS\Nircmd.exe
+ 2008-05-15 23:24:43 1,152,888 ----a-w C:\WINDOWS\system32\aswBoot.exe
- 2006-11-22 02:51:50 294,912 ----a-w C:\WINDOWS\system32\ati2cqag.dll
+ 2004-08-03 22:43:54 229,376 ----a-w C:\WINDOWS\system32\ati2cqag.dll
- 2006-11-22 03:25:23 261,120 ----a-w C:\WINDOWS\system32\ati2dvag.dll
+ 2004-08-03 22:43:54 201,728 ----a-w C:\WINDOWS\system32\ati2dvag.dll
- 2006-11-22 03:12:27 2,526,688 ----a-w C:\WINDOWS\system32\ati3duag.dll
+ 2004-08-03 22:43:54 1,888,992 ----a-w C:\WINDOWS\system32\ati3duag.dll
- 2006-11-22 03:08:16 1,090,016 ----a-w C:\WINDOWS\system32\ativvaxx.dll
+ 2004-08-03 22:43:54 516,768 ----a-w C:\WINDOWS\system32\ativvaxx.dll
+ 2008-05-15 23:12:36 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr
+ 2004-08-03 22:43:54 229,376 ----a-w C:\WINDOWS\system32\dllcache\ati2cqag.dll
+ 2004-08-03 22:43:54 201,728 ----a-w C:\WINDOWS\system32\dllcache\ati2dvag.dll
+ 2004-08-03 22:43:54 1,888,992 ----a-w C:\WINDOWS\system32\dllcache\ati3duag.dll
+ 2004-08-03 22:43:54 516,768 ----a-w C:\WINDOWS\system32\dllcache\ativvaxx.dll
+ 2008-05-15 23:13:26 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
+ 2008-05-15 23:16:06 20,560 ----a-w C:\WINDOWS\system32\drivers\aswFsBlk.sys
+ 2008-01-17 16:34:01 93,264 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys
+ 2008-05-15 23:18:33 94,416 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
+ 2008-05-15 23:15:29 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
+ 2008-05-15 23:20:32 78,416 ----a-w C:\WINDOWS\system32\drivers\aswSP.sys
+ 2008-05-15 23:14:11 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
+ 2004-10-25 18:02:00 21,664 ----a-w C:\WINDOWS\system32\drivers\Entech.sys
+ 2004-05-05 14:34:00 2,204,384 ----a-w C:\WINDOWS\system32\drivers\nv4_mini.sys
+ 2001-11-19 16:05:18 3,972 ------w C:\WINDOWS\system32\drivers\PciBus.sys
- 2008-05-26 09:34:33 94,272 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2008-06-23 20:43:22 93,480 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2005-01-13 16:46:00 40,448 ------w C:\WINDOWS\system32\Futuremark\MSC\Direcpll.dll
+ 2005-05-24 10:27:16 213,048 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavss.dll
+ 2007-08-29 13:47:20 94,208 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavuninstall.exe
+ 2007-08-29 13:49:54 950,272 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll
+ 2004-05-05 14:34:00 327,680 ----a-w C:\WINDOWS\system32\keystone.exe
+ 2003-03-18 20:20:00 1,060,864 ----a-w C:\WINDOWS\system32\MFC71.dll
+ 2004-05-05 14:34:00 3,745,408 ----a-w C:\WINDOWS\system32\nv4_disp.dll
+ 2004-05-05 14:34:00 413,696 ----a-w C:\WINDOWS\system32\nvappbar.exe
+ 2004-05-05 14:34:00 32,256 ----a-w C:\WINDOWS\system32\nvcod.dll
+ 2004-05-05 14:34:00 32,256 ----a-w C:\WINDOWS\system32\nvcodins.dll
+ 2004-05-05 14:34:00 3,805,184 ----a-w C:\WINDOWS\system32\nvcpl.dll
+ 2004-05-05 14:34:00 1,110,016 ----a-w C:\WINDOWS\system32\nvdspsch.exe
+ 2004-05-05 14:34:00 1,339,392 ----a-w C:\WINDOWS\system32\nview.dll
+ 2004-05-05 14:34:00 81,920 ----a-w C:\WINDOWS\system32\nvmctray.dll
+ 2004-05-05 14:34:00 241,664 ----a-w C:\WINDOWS\system32\nvnt4cpl.dll
+ 2004-05-12 10:38:00 5,128,192 ----a-w C:\WINDOWS\system32\nvoglnt.dll
+ 2004-05-05 14:34:00 225,280 ----a-w C:\WINDOWS\system32\nvrsar.dll
+ 2004-05-05 14:34:00 163,840 ----a-w C:\WINDOWS\system32\nvrscs.dll
+ 2004-05-05 14:34:00 172,032 ----a-w C:\WINDOWS\system32\nvrsda.dll
+ 2004-05-05 14:34:00 184,320 ----a-w C:\WINDOWS\system32\nvrsde.dll
+ 2004-05-05 14:34:00 188,416 ----a-w C:\WINDOWS\system32\nvrsel.dll
+ 2004-05-05 14:34:00 167,936 ----a-w C:\WINDOWS\system32\nvrseng.dll
+ 2004-05-05 14:34:00 188,416 ----a-w C:\WINDOWS\system32\nvrses.dll
+ 2004-05-05 14:34:00 184,320 ----a-w C:\WINDOWS\system32\nvrsesm.dll
+ 2004-05-05 14:34:00 163,840 ----a-w C:\WINDOWS\system32\nvrsfi.dll
+ 2004-05-05 14:34:00 188,416 ----a-w C:\WINDOWS\system32\nvrsfr.dll
+ 2004-05-05 14:34:00 221,184 ----a-w C:\WINDOWS\system32\nvrshe.dll
+ 2004-05-05 14:34:00 172,032 ----a-w C:\WINDOWS\system32\nvrshu.dll
+ 2004-05-05 14:34:00 188,416 ----a-w C:\WINDOWS\system32\nvrsit.dll
+ 2004-05-05 14:34:00 188,416 ----a-w C:\WINDOWS\system32\nvrsja.dll
+ 2004-05-05 14:34:00 188,416 ----a-w C:\WINDOWS\system32\nvrsko.dll
+ 2004-05-05 14:34:00 184,320 ----a-w C:\WINDOWS\system32\nvrsnl.dll
+ 2004-05-05 14:34:00 167,936 ----a-w C:\WINDOWS\system32\nvrsno.dll
+ 2004-05-05 14:34:00 172,032 ----a-w C:\WINDOWS\system32\nvrspl.dll
+ 2004-05-05 14:34:00 180,224 ----a-w C:\WINDOWS\system32\nvrspt.dll
+ 2004-05-05 14:34:00 180,224 ----a-w C:\WINDOWS\system32\nvrsptb.dll
+ 2004-05-05 14:34:00 180,224 ----a-w C:\WINDOWS\system32\nvrsru.dll
+ 2004-05-05 14:34:00 167,936 ----a-w C:\WINDOWS\system32\nvrssk.dll
+ 2004-05-05 14:34:00 167,936 ----a-w C:\WINDOWS\system32\nvrssl.dll
+ 2004-05-05 14:34:00 167,936 ----a-w C:\WINDOWS\system32\nvrssv.dll
+ 2004-05-05 14:34:00 172,032 ----a-w C:\WINDOWS\system32\nvrstr.dll
+ 2004-05-05 14:34:00 163,840 ----a-w C:\WINDOWS\system32\nvrszhc.dll
+ 2004-05-05 14:34:00 86,016 ----a-w C:\WINDOWS\system32\nvrszht.dll
+ 2004-05-05 14:34:00 454,656 ----a-w C:\WINDOWS\system32\nvshell.dll
+ 2004-05-05 14:34:00 114,754 ----a-w C:\WINDOWS\system32\nvsvc32.exe
+ 2004-05-05 14:34:00 172,032 ----a-w C:\WINDOWS\system32\nvudisp.exe
+ 2006-12-21 10:36:44 356,352 ----a-w C:\WINDOWS\system32\NVUNINST.EXE
+ 2004-05-05 14:34:00 38,912 ----a-w C:\WINDOWS\system32\nvwddi.dll
+ 2004-05-05 14:34:00 1,605,632 ----a-w C:\WINDOWS\system32\nvwdmcpl.dll
+ 2004-05-05 14:34:00 1,019,904 ----a-w C:\WINDOWS\system32\nvwimg.dll
+ 2004-05-05 14:34:00 245,760 ----a-w C:\WINDOWS\system32\nvwrsar.dll
+ 2004-05-05 14:34:00 249,856 ----a-w C:\WINDOWS\system32\nvwrscs.dll
+ 2004-05-05 14:34:00 258,048 ----a-w C:\WINDOWS\system32\nvwrsda.dll
+ 2004-05-05 14:34:00 266,240 ----a-w C:\WINDOWS\system32\nvwrsde.dll
+ 2004-05-05 14:34:00 294,912 ----a-w C:\WINDOWS\system32\nvwrsel.dll
+ 2004-05-05 14:34:00 249,856 ----a-w C:\WINDOWS\system32\nvwrseng.dll
+ 2004-05-05 14:34:00 294,912 ----a-w C:\WINDOWS\system32\nvwrses.dll
+ 2004-05-05 14:34:00 286,720 ----a-w C:\WINDOWS\system32\nvwrsesm.dll
+ 2004-05-05 14:34:00 262,144 ----a-w C:\WINDOWS\system32\nvwrsfi.dll
+ 2004-05-05 14:34:00 282,624 ----a-w C:\WINDOWS\system32\nvwrsfr.dll
+ 2004-05-05 14:34:00 241,664 ----a-w C:\WINDOWS\system32\nvwrshe.dll
+ 2004-05-05 14:34:00 274,432 ----a-w C:\WINDOWS\system32\nvwrshu.dll
+ 2004-05-05 14:34:00 282,624 ----a-w C:\WINDOWS\system32\nvwrsit.dll
+ 2004-05-05 14:34:00 184,320 ----a-w C:\WINDOWS\system32\nvwrsja.dll
+ 2004-05-05 14:34:00 172,032 ----a-w C:\WINDOWS\system32\nvwrsko.dll
+ 2004-05-05 14:34:00 278,528 ----a-w C:\WINDOWS\system32\nvwrsnl.dll
+ 2004-05-05 14:34:00 262,144 ----a-w C:\WINDOWS\system32\nvwrsno.dll
+ 2004-05-05 14:34:00 258,048 ----a-w C:\WINDOWS\system32\nvwrspl.dll
+ 2004-05-05 14:34:00 282,624 ----a-w C:\WINDOWS\system32\nvwrspt.dll
+ 2004-05-05 14:34:00 278,528 ----a-w C:\WINDOWS\system32\nvwrsptb.dll
+ 2004-05-05 14:34:00 274,432 ----a-w C:\WINDOWS\system32\nvwrsru.dll
+ 2004-05-05 14:34:00 258,048 ----a-w C:\WINDOWS\system32\nvwrssk.dll
+ 2004-05-05 14:34:00 262,144 ----a-w C:\WINDOWS\system32\nvwrssl.dll
+ 2004-05-05 14:34:00 258,048 ----a-w C:\WINDOWS\system32\nvwrssv.dll
+ 2004-05-05 14:34:00 266,240 ----a-w C:\WINDOWS\system32\nvwrstr.dll
+ 2004-05-05 14:34:00 143,360 ----a-w C:\WINDOWS\system32\nvwrszhc.dll
+ 2004-05-05 14:34:00 147,456 ----a-w C:\WINDOWS\system32\nvwrszht.dll
+ 2004-05-05 14:34:00 831,488 ----a-w C:\WINDOWS\system32\nwiz.exe
+ 2008-07-24 12:24:42 16,384 ----atw C:\WINDOWS\TEMP\Perflib_Perfdata_574.dat
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Gadu-Gadu"="C:\Programy\Gadu-Gadu\gg.exe" [2007-07-09 09:39 2119104]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 02:44 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-05-05 16:34 3805184]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2004-05-05 16:34 81920]
"avast!"="C:\Programy\Avast4\ashDisp.exe" [2008-05-16 01:19 79224]
"SoundMan"="SOUNDMAN.EXE" [2004-05-14 09:47 67072 C:\WINDOWS\SOUNDMAN.EXE]
"nwiz"="nwiz.exe" [2004-05-05 16:34 831488 C:\WINDOWS\system32\nwiz.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 02:44 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"DisableStatusMessages"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMMyPictures"= 1 (0x1)
"NoSMConfigurePrograms"= 1 (0x1)
"NoSMHelp"= 1 (0x1)
"NoResolveTrack"= 1 (0x1)
"NoResolveSearch"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSMMyPictures"= 1 (0x1)
"NoSMConfigurePrograms"= 1 (0x1)
"NoSMHelp"= 1 (0x1)
"NoResolveTrack"= 1 (0x1)
"NoResolveSearch"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
--a------ 2007-08-16 13:24 167368 C:\Programy\DAEMON Tools\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2001-07-09 11:50 155648 C:\WINDOWS\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\Programy\\Gadu-Gadu\\gg.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"D:\\Instalki\\gry\\wolfenstain\\Wolfenstein - Enemy Territory\\ET.exe"=

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]
R3 Stmatm;ATM/ADSL miniport;C:\WINDOWS\system32\DRIVERS\stmatm.sys [2003-08-12 16:51]
R3 TaurusUsb;ADSL Modem USB Service;C:\WINDOWS\system32\DRIVERS\torususb.sys [2006-05-25 17:28]
S3 AC2003;AC2003;C:\WINDOWS\system32\Drivers\AC2003.sys [2003-12-10 09:21]
S3 USBSTOR;Sterownik magazynu masowego USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 23:08]

*Newly Created Service* - CATCHME
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-AtiPTA - atiptaxx.exe
Notify-AtiExtEvent - (no file)
MSConfigStartUp-Norton Ghost 10 - C:\Programy\Norton Ghost\Agent\GhostTray.exe


.
------- Supplementary Scan -------
.
O17 -: HKLM\CCS\Interface\{EBAC6F84-40AD-468F-873F-1C6DFE1E4FCF}: NameServer = 194.204.159.1 217.98.63.164

O16 -: {1E54D648-B804-468d-BC78-4AFFED8E262E} - hxxp://dev.srtest.com/srl_bin/sysreqlab3.cab
C:\WINDOWS\Downloaded Program Files\SysReqLab3.osd
C:\WINDOWS\Downloaded Program Files\sysreqlab3.dll


**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-24 15:54:02
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\ASFWHide]
"ImagePath"="\??\C:\Documents and Settings\Administrator\Ustawienia lokalne\TEMP\ASFWHide"
.
Completion time: 2008-07-24 15:54:42
ComboFix-quarantined-files.txt 2008-07-24 13:54:37
ComboFix2.txt 2008-05-26 22:10:59
ComboFix3.txt 2008-05-26 15:56:30
ComboFix4.txt 2008-02-02 18:13:15

Pre-Run: 25,988,706,304 bajtów wolnych
Post-Run: 26,353,745,920 bajtów wolnych

231

[huber2t]

Log wyglada na czysty

usuń ręcznie folder C: \Qoobox , usuń instalkę Combofix z dysku.

Przeczyść komputer Ccleanerem

Wykonaj optymalizację autostartu

Wyłącz i włącz przywracanie systemu na wszystkich dyskach. Instrukcja

Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum

lub

Dr.WEB CureIt!