Komputer spowolnił

Faryen · 24 Wrzesień 2007 20:17

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:02:18, on 2007-09-24 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Executive Software\Diskeeper\DkService.exe C:\WINDOWS\System32\irdvxc.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\PAStiSvc.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\czsrv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\WINDOWS\System32\wbem\wmiapsrv.exe C:\WINDOWS\Explorer.exe C:\Program Files\QuickTime\qttask.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe C:\Program Files\Winamp\winampa.exe C:\WINDOWS\System32\hldrrr.exe C:\WINDOWS\System32\dagol.exe C:\WINDOWS\System32\u.exe C:\WINDOWS\System32\ctfmon.exe C:\WINDOWS\System32\hldrrr.exe C:\Documents and Settings\Anka\Dane aplikacji\m\flec006.exe C:\WINDOWS\System32\nvsvc86.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotinfolink.com R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza F2 - REG:system.ini: Shell=Explorer.exe %WINDIR%\czsrv.exe O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - e:\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL O2 - BHO: Zango Search Assistant Helper - {56F1D444-11BF-4879-A12B-79CF0177F038} - c:\program files\zango\zangohook.dll (file missing) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM…\Run: [nwiz] nwiz.exe /install O4 - HKLM…\Run: [DiskeeperSystray] “C:\Program Files\Executive Software\Diskeeper\DkIcon.exe” O4 - HKLM…\Run: [zango] “c:\program files\zango\zango.exe” O4 - HKLM…\Run: [xih] C:\WINDOWS\xih.exe O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM…\Run: [QuickTime Task] “C:\Program Files\QuickTime\qttask.exe” -atboottime O4 - HKLM…\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM…\Run: [sunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe” O4 - HKLM…\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM…\Run: [Adobe Photo Downloader] “C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe” O4 - HKLM…\Run: [hldrrr] C:\WINDOWS\System32\hldrrr.exe O4 - HKLM…\Run: [spooler SubSystem App] C:\WINDOWS\System32\spoolsvc.exe O4 - HKLM…\Run: [Advanced DHTML Enable] C:\WINDOWS\System32\dagol.exe O4 - HKLM…\Run: [Windows Logon Application] C:\WINDOWS\System32\winIogon.exe O4 - HKLM…\Run: [Office Monitor Word Exel R] C:\WINDOWS\System32\u.exe O4 - HKLM…\Run: [Network Security XP] C:\WINDOWS\System32\nvsvc86.exe O4 - HKCU…\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU…\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe O4 - HKCU…\Run: [hldrrr] C:\WINDOWS\System32\hldrrr.exe O4 - HKCU…\Run: [mule_st_key] C:\Documents and Settings\Anka\Dane aplikacji\m\flec006.exe O4 - HKCU…\Run: [german.exe] C:\WINDOWS\System32\wintems.exe O4 - HKCU…\Run: [Office Monitor Word Exel R] C:\WINDOWS\System32\u.exe O4 - HKCU…\Run: [Network Security XP] C:\WINDOWS\System32\nvsvc86.exe O4 - HKUS\S-1-5-19…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘?’) O4 - HKUS\S-1-5-20…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘?’) O4 - HKUS\S-1-5-21-1078081533-1078145449-1060284298-1003…\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User ‘?’) O4 - HKUS\S-1-5-21-1078081533-1078145449-1060284298-1003…\Run: [mule_st_key] C:\Documents and Settings\Anka\Dane aplikacji\m\flec006.exe (User ‘?’) O4 - HKUS\S-1-5-21-1078081533-1078145449-1060284298-1003…\Run: [german.exe] C:\WINDOWS\System32\wintems.exe (User ‘?’) O4 - HKUS\S-1-5-21-1078081533-1078145449-1060284298-1003…\Run: [Office Monitor Word Exel R] C:\WINDOWS\System32\u.exe (User ‘?’) O4 - HKUS\S-1-5-21-1078081533-1078145449-1060284298-1003…\Run: [Network Security XP] C:\WINDOWS\System32\nvsvc86.exe (User ‘?’) O4 - HKUS\S-1-5-18…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘?’) O4 - HKUS.DEFAULT…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘Default user’) O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra ‘Tools’ menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Skype\Plugin Manager\Skype4COM.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Network helper Service (MSDisk) - Unknown owner - C:\WINDOWS\System32\irdvxc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe O23 - Service: Szservice - Unknown owner - C:\WINDOWS\czsrv.exe

–

End of file - 7425 bytes

Gutek · 24 Wrzesień 2007 20:34

Uwaga: Jak wklejasz loga to obejmuj go znacznikiem (tagiem) CODE lub QUOTE

Zastosuj się do tego Tematu i zmień tytuł tematu na konkretny inaczej KOSZ

Pozdrawiam Gutek2222

najpierw automat - Daj log z ComboFix

Pobierz program SDFix

Faryen · 25 Wrzesień 2007 19:00

ComboFix 07-09-21.2 - “Anka” 2007-09-25 20:54:32.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.0.1250.48.1045.18.63 [GMT 2:00] * Created a new restore point . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\exefnd\101375.exe C:\WINDOWS\exefnd\101385.exe C:\WINDOWS\exefnd\101656.exe C:\WINDOWS\exefnd\101736.exe C:\WINDOWS\exefnd\1018164.exe C:\WINDOWS\exefnd\1018274.exe C:\WINDOWS\exefnd\102627.exe C:\WINDOWS\exefnd\102797.exe C:\WINDOWS\exefnd\104380.exe C:\WINDOWS\exefnd\104590.exe C:\WINDOWS\exefnd\108826.exe C:\WINDOWS\exefnd\112351.exe C:\WINDOWS\exefnd\112661.exe C:\WINDOWS\exefnd\114744.exe C:\WINDOWS\exefnd\115456.exe C:\WINDOWS\exefnd\117308.exe C:\WINDOWS\exefnd\118310.exe C:\WINDOWS\exefnd\119021.exe C:\WINDOWS\exefnd\119702.exe C:\WINDOWS\exefnd\120413.exe C:\WINDOWS\exefnd\121204.exe C:\WINDOWS\exefnd\125941.exe C:\WINDOWS\exefnd\125951.exe C:\WINDOWS\exefnd\127273.exe C:\WINDOWS\exefnd\129235.exe C:\WINDOWS\exefnd\129265.exe C:\WINDOWS\exefnd\134853.exe C:\WINDOWS\exefnd\1348999.exe C:\WINDOWS\exefnd\135835.exe C:\WINDOWS\exefnd\137207.exe C:\WINDOWS\exefnd\139100.exe C:\WINDOWS\exefnd\140672.exe C:\WINDOWS\exefnd\140692.exe C:\WINDOWS\exefnd\142534.exe C:\WINDOWS\exefnd\1430867.exe C:\WINDOWS\exefnd\1437466.exe C:\WINDOWS\exefnd\144227.exe C:\WINDOWS\exefnd\14520329.exe C:\WINDOWS\exefnd\14531485.exe C:\WINDOWS\exefnd\14542440.exe C:\WINDOWS\exefnd\14546186.exe C:\WINDOWS\exefnd\14568548.exe C:\WINDOWS\exefnd\14604940.exe C:\WINDOWS\exefnd\14612020.exe C:\WINDOWS\exefnd\14639490.exe C:\WINDOWS\exefnd\14654011.exe C:\WINDOWS\exefnd\14654021.exe C:\WINDOWS\exefnd\146660.exe C:\WINDOWS\exefnd\14794263.exe C:\WINDOWS\exefnd\153330.exe C:\WINDOWS\exefnd\155844.exe C:\WINDOWS\exefnd\15760632.exe C:\WINDOWS\exefnd\1577928.exe C:\WINDOWS\exefnd\15987699.exe C:\WINDOWS\exefnd\165217.exe C:\WINDOWS\exefnd\1728335.exe C:\WINDOWS\exefnd\173769.exe C:\WINDOWS\exefnd\17413329.exe C:\WINDOWS\exefnd\17413339.exe C:\WINDOWS\exefnd\176784.exe C:\WINDOWS\exefnd\176794.exe C:\WINDOWS\exefnd\177094.exe C:\WINDOWS\exefnd\188631.exe C:\WINDOWS\exefnd\194349.exe C:\WINDOWS\exefnd\207668.exe C:\WINDOWS\exefnd\218934.exe C:\WINDOWS\exefnd\219415.exe C:\WINDOWS\exefnd\219425.exe C:\WINDOWS\exefnd\231502.exe C:\WINDOWS\exefnd\231512.exe C:\WINDOWS\exefnd\245563.exe C:\WINDOWS\exefnd\28960673.exe C:\WINDOWS\exefnd\28961704.exe C:\WINDOWS\exefnd\28979009.exe C:\WINDOWS\exefnd\29052545.exe C:\WINDOWS\exefnd\29059885.exe C:\WINDOWS\exefnd\29477135.exe C:\WINDOWS\exefnd\2993834.exe C:\WINDOWS\exefnd\2995026.exe C:\WINDOWS\exefnd\3009547.exe C:\WINDOWS\exefnd\3011340.exe C:\WINDOWS\exefnd\30322721.exe C:\WINDOWS\exefnd\30411879.exe C:\WINDOWS\exefnd\31490430.exe C:\WINDOWS\exefnd\31821106.exe C:\WINDOWS\exefnd\31822027.exe C:\WINDOWS\exefnd\371353.exe C:\WINDOWS\exefnd\371394.exe C:\WINDOWS\exefnd\417971.exe C:\WINDOWS\exefnd\417981.exe C:\WINDOWS\exefnd\43379786.exe C:\WINDOWS\exefnd\43494111.exe C:\WINDOWS\exefnd\43494171.exe C:\WINDOWS\exefnd\43886345.exe C:\WINDOWS\exefnd\44767982.exe C:\WINDOWS\exefnd\44828670.exe C:\WINDOWS\exefnd\46273387.exe C:\WINDOWS\exefnd\57806601.exe C:\WINDOWS\exefnd\58299309.exe C:\WINDOWS\exefnd\72220898.exe C:\WINDOWS\exefnd\72723631.exe C:\WINDOWS\exefnd\8116611.exe C:\WINDOWS\exefnd\86633352.exe C:\WINDOWS\exefnd\87132730.exe C:\WINDOWS\exefnd\905922.exe C:\WINDOWS\exefnd\95507.exe C:\WINDOWS\exefnd\95687.exe C:\WINDOWS\hosts C:\WINDOWS\system32.exe C:\WINDOWS\system32\a.exe C:\WINDOWS\system32\hldrrr.exe C:\WINDOWS\system32\u.exe C:\WINDOWS\system32\wintems.exe E:\Autorun.inf . ((((((((((((((((((((((((( Files Created from 2007-08-25 to 2007-09-25 ))))))))))))))))))))))))))))))) . 2007-09-25 20:53 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-09-25 20:49 52,736 —hs---- C:\inf.exe 2007-09-25 18:23 18,432 --ah----- C:\WINDOWS\system32\gyblp.exe 2007-09-24 22:01 2007-09-23 15:36 50,176 --ahs---- C:\WINDOWS\system32\irdvxc.exe 2007-09-23 14:18 129,546 --a------ C:\DOCUME~1\Anka\bilix.exe 2007-09-23 14:17 27 --a------ C:\WINDOWS\tamer.bat 2007-09-23 14:17 129,546 --a------ C:\bilix.exe 2007-09-23 14:14 27 --a------ C:\DOCUME~1\Anka\tamer.exe 2007-09-23 14:12 27 --a------ C:\tamer.exe 2007-09-17 18:45 34,816 --a------ C:\WINDOWS\system32\nvsvc86.exe 2007-09-13 21:27 40,960 --a------ C:\5c3x8p2r8t8.exe 2007-09-13 21:26 560,640 -r-hs---- C:\WINDOWS\czsrv.exe 2007-09-12 20:45 126 --a------ C:\WINDOWS\system32\enym.bat 2007-09-11 15:55 31,474 --a------ C:\WINDOWS\system32\dagol.exe 2007-09-11 15:52 40,960 --a------ C:\x9e7f6y6j2k7.exe 2007-09-11 15:49 40,960 --a------ C:\a5c3x8p2r8t8.exe 2007-09-11 15:49 2007-09-11 15:48 603,648 -r-hs---- C:\WINDOWS\astra32.exe 2007-09-01 23:16 2007-08-31 20:30 2007-08-28 18:22 2007-08-27 19:11 2007-08-27 19:10 109,311 --a------ C:\WINDOWS\system32\trusted.exe 2007-08-27 19:10 2007-08-27 18:38 . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-09-25 20:48 42496 --a–c— C:\WINDOWS\system32\ftp.exe 2007-09-25 20:48 16896 --a–c— C:\WINDOWS\system32\tftp.exe 2007-09-22 19:25 --------- d-------- C:\DOCUME~1\Anka\DANEAP~1\Lavasoft 2007-09-19 22:12 --------- d-------- C:\DOCUME~1\Anka\DANEAP~1\Skype 2007-09-11 15:48 133120 --a------ C:\WINDOWS\system32\sfc_os.dll 2007-09-06 12:09 801144 --a------ C:\WINDOWS\system32\aswBoot.exe 2007-09-06 12:05 94416 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys 2007-09-06 12:05 92848 --a–c— C:\WINDOWS\system32\drivers\aswmon.sys 2007-09-06 12:03 23152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys 2007-09-06 12:02 42912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys 2007-09-06 12:00 95608 --a------ C:\WINDOWS\system32\AVASTSS.scr 2007-09-06 12:00 26624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys 2007-09-03 19:35 --------- d-------- C:\Program Files\Common Files\Teleca Shared 2007-08-30 21:13 --------- d-------- C:\Program Files\FTP Commander 2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\cdm.dll 2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\wuapi.dll 2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\wuauclt.exe 2007-07-30 19:19 43352 --a–c— C:\WINDOWS\system32\wups2.dll 2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\wucltui.dll 2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\wuweb.dll 2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\wuaueng.dll 2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\wups.dll 2007-07-29 15:53 --------- d-------- C:\DOCUME~1\Anka\DANEAP~1\AdobeUM 2007-07-28 15:29 --------- d-------- C:\Program Files\Gadu-Gadu 2006-06-10 15:44 11281024 --a------ C:\Program Files\setuppol.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE~\Browser Helper Objects{56F1D444-11BF-4879-A12B-79CF0177F038}] c:\program files\zango\zangohook.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “NvCplDaemon”=“C:\WINDOWS\system32\NvCpl.dll” [2005-12-10 04:06] “nwiz”=“nwiz.exe” [2005-12-10 04:06 C:\WINDOWS\system32\nwiz.exe] “DiskeeperSystray”=“C:\Program Files\Executive Software\Diskeeper\DkIcon.exe” [2004-12-22 00:29] “zango”=“c:\program files\zango\zango.exe” [] “xih”=“C:\WINDOWS\xih.exe” [] “NvMediaCenter”=“C:\WINDOWS\system32\NvMcTray.dll” [2005-12-10 04:06] “QuickTime Task”=“C:\Program Files\QuickTime\qttask.exe” [2006-05-30 12:35] “avast!”=“C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe” [2007-09-06 12:06] “SunJavaUpdateSched”=“C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe” [2007-03-14 03:43] “WinampAgent”=“C:\Program Files\Winamp\winampa.exe” [2007-05-15 00:22] “Adobe Photo Downloader”=“C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe” [] “Spooler SubSystem App”=“C:\WINDOWS\System32\spoolsvc.exe” [] “Advanced DHTML Enable”=“C:\WINDOWS\System32\dagol.exe” [2007-09-11 15:55] “Windows Logon Application”=“C:\WINDOWS\System32\winIogon.exe” [] “Office Monitor Word Exel R”=“C:\WINDOWS\System32\u.exe” [] “Network Security XP”=“C:\WINDOWS\System32\nvsvc86.exe” [2007-09-17 18:45] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “CTFMON.EXE”=“C:\WINDOWS\System32\ctfmon.exe” [2001-10-26 19:29] “Komunikator”=“C:\Program Files\Tlen.pl\tlen.exe” [] “mule_st_key”=“C:\Documents and Settings\Anka\Dane aplikacji\m\flec006.exe” [2007-09-22 13:09] “german.exe”=“C:\WINDOWS\System32\wintems.exe” [] “Office Monitor Word Exel R”=“C:\WINDOWS\System32\u.exe” [] “Network Security XP”=“C:\WINDOWS\System32\nvsvc86.exe” [2007-09-17 18:45] [HKEY_USERS.default\software\microsoft\windows\currentversion\run] “Office Monitor Word Exel R”=C:\WINDOWS\System32\u.exe “Network Security XP”=C:\WINDOWS\System32\nvsvc86.exe C:\DOCUME~1\ALLUSE~1\MENUST~1\Programy\AUTOST~1\ Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 11:01:04] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] C:\Program Files\Winamp\winampa.exe R2 MSDisk;Network helper Service;“C:\WINDOWS\System32\irdvxc.exe” /service R2 Szservice;Szservice;“C:\WINDOWS\czsrv.exe” R3 PAC207;SoC PC-Camer@;C:\WINDOWS\System32\DRIVERS\pfc027.sys S3 AME;PC Camera(6029 CIF);C:\WINDOWS\System32\DRIVERS\pfc027.sys S3 k510bus;Sony Ericsson K510 Driver driver (WDM);C:\WINDOWS\System32\DRIVERS\k510bus.sys S3 k510mdfl;Sony Ericsson K510 USB WMC Modem Filter;C:\WINDOWS\System32\DRIVERS\k510mdfl.sys S3 k510mdm;Sony Ericsson K510 USB WMC Modem Driver;C:\WINDOWS\System32\DRIVERS\k510mdm.sys S3 k510mgmt;Sony Ericsson K510 USB WMC Device Management Drivers (WDM);C:\WINDOWS\System32\DRIVERS\k510mgmt.sys S3 k510obex;Sony Ericsson K510 USB WMC OBEX Interface;C:\WINDOWS\System32\DRIVERS\k510obex.sys *Newly Created Service* - CATCHME . ************************************************************************** catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-09-25 20:57:03 Windows 5.1.2600 NTFS scanning hidden processes … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-09-25 20:57:56 C:\ComboFix-quarantined-files.txt … 2007-09-25 20:57 . — E O F —

Przepraszam ale zupelnie sie na tym nie znam a strasznie mi sie komputer wiesza i nie wiem co mam zrobic wyskakuje mi ze mam konia trojanskiego i nie moge go usunac :((

Bieniol · 25 Wrzesień 2007 19:37

Gdzie raport z SDFix?

Gutek · 26 Wrzesień 2007 16:31

Czyszczenie rejestru:

RegCleaner - http://www.dobreprogramy.pl/index.php?dz=2&t=29&id=177

możesz rejestr przelecieć albo

jv16 PowerTools - http://www.dobreprogramy.pl/index.php?dz=2&t=29&id=509

Opis RegCleaner - http://www.agavk.p9.pl/strony/progra_regcleaner.php

Zobacz - Obsługa jv16 PowerTools

Po tym daj jeszcze raz log z Combo

Uwaga: Jak wklejasz loga to obejmuj go znacznikiem (tagiem) CODE lub QUOTE

Zastosuj się do tego Tematu i zmień tytuł tematu na konkretny

Pozdrawiam Gutek2222

Faryen · 26 Wrzesień 2007 19:33

ComboFix 07-09-21.2 - “Anka” 2007-09-25 20:54:32.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.0.1250.48.1045.18.63 [GMT 2:00] * Created a new restore point . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\exefnd\101375.exe C:\WINDOWS\exefnd\101385.exe C:\WINDOWS\exefnd\101656.exe C:\WINDOWS\exefnd\101736.exe C:\WINDOWS\exefnd\1018164.exe C:\WINDOWS\exefnd\1018274.exe C:\WINDOWS\exefnd\102627.exe C:\WINDOWS\exefnd\102797.exe C:\WINDOWS\exefnd\104380.exe C:\WINDOWS\exefnd\104590.exe C:\WINDOWS\exefnd\108826.exe C:\WINDOWS\exefnd\112351.exe C:\WINDOWS\exefnd\112661.exe C:\WINDOWS\exefnd\114744.exe C:\WINDOWS\exefnd\115456.exe C:\WINDOWS\exefnd\117308.exe C:\WINDOWS\exefnd\118310.exe C:\WINDOWS\exefnd\119021.exe C:\WINDOWS\exefnd\119702.exe C:\WINDOWS\exefnd\120413.exe C:\WINDOWS\exefnd\121204.exe C:\WINDOWS\exefnd\125941.exe C:\WINDOWS\exefnd\125951.exe C:\WINDOWS\exefnd\127273.exe C:\WINDOWS\exefnd\129235.exe C:\WINDOWS\exefnd\129265.exe C:\WINDOWS\exefnd\134853.exe C:\WINDOWS\exefnd\1348999.exe C:\WINDOWS\exefnd\135835.exe C:\WINDOWS\exefnd\137207.exe C:\WINDOWS\exefnd\139100.exe C:\WINDOWS\exefnd\140672.exe C:\WINDOWS\exefnd\140692.exe C:\WINDOWS\exefnd\142534.exe C:\WINDOWS\exefnd\1430867.exe C:\WINDOWS\exefnd\1437466.exe C:\WINDOWS\exefnd\144227.exe C:\WINDOWS\exefnd\14520329.exe C:\WINDOWS\exefnd\14531485.exe C:\WINDOWS\exefnd\14542440.exe C:\WINDOWS\exefnd\14546186.exe C:\WINDOWS\exefnd\14568548.exe C:\WINDOWS\exefnd\14604940.exe C:\WINDOWS\exefnd\14612020.exe C:\WINDOWS\exefnd\14639490.exe C:\WINDOWS\exefnd\14654011.exe C:\WINDOWS\exefnd\14654021.exe C:\WINDOWS\exefnd\146660.exe C:\WINDOWS\exefnd\14794263.exe C:\WINDOWS\exefnd\153330.exe C:\WINDOWS\exefnd\155844.exe C:\WINDOWS\exefnd\15760632.exe C:\WINDOWS\exefnd\1577928.exe C:\WINDOWS\exefnd\15987699.exe C:\WINDOWS\exefnd\165217.exe C:\WINDOWS\exefnd\1728335.exe C:\WINDOWS\exefnd\173769.exe C:\WINDOWS\exefnd\17413329.exe C:\WINDOWS\exefnd\17413339.exe C:\WINDOWS\exefnd\176784.exe C:\WINDOWS\exefnd\176794.exe C:\WINDOWS\exefnd\177094.exe C:\WINDOWS\exefnd\188631.exe C:\WINDOWS\exefnd\194349.exe C:\WINDOWS\exefnd\207668.exe C:\WINDOWS\exefnd\218934.exe C:\WINDOWS\exefnd\219415.exe C:\WINDOWS\exefnd\219425.exe C:\WINDOWS\exefnd\231502.exe C:\WINDOWS\exefnd\231512.exe C:\WINDOWS\exefnd\245563.exe C:\WINDOWS\exefnd\28960673.exe C:\WINDOWS\exefnd\28961704.exe C:\WINDOWS\exefnd\28979009.exe C:\WINDOWS\exefnd\29052545.exe C:\WINDOWS\exefnd\29059885.exe C:\WINDOWS\exefnd\29477135.exe C:\WINDOWS\exefnd\2993834.exe C:\WINDOWS\exefnd\2995026.exe C:\WINDOWS\exefnd\3009547.exe C:\WINDOWS\exefnd\3011340.exe C:\WINDOWS\exefnd\30322721.exe C:\WINDOWS\exefnd\30411879.exe C:\WINDOWS\exefnd\31490430.exe C:\WINDOWS\exefnd\31821106.exe C:\WINDOWS\exefnd\31822027.exe C:\WINDOWS\exefnd\371353.exe C:\WINDOWS\exefnd\371394.exe C:\WINDOWS\exefnd\417971.exe C:\WINDOWS\exefnd\417981.exe C:\WINDOWS\exefnd\43379786.exe C:\WINDOWS\exefnd\43494111.exe C:\WINDOWS\exefnd\43494171.exe C:\WINDOWS\exefnd\43886345.exe C:\WINDOWS\exefnd\44767982.exe C:\WINDOWS\exefnd\44828670.exe C:\WINDOWS\exefnd\46273387.exe C:\WINDOWS\exefnd\57806601.exe C:\WINDOWS\exefnd\58299309.exe C:\WINDOWS\exefnd\72220898.exe C:\WINDOWS\exefnd\72723631.exe C:\WINDOWS\exefnd\8116611.exe C:\WINDOWS\exefnd\86633352.exe C:\WINDOWS\exefnd\87132730.exe C:\WINDOWS\exefnd\905922.exe C:\WINDOWS\exefnd\95507.exe C:\WINDOWS\exefnd\95687.exe C:\WINDOWS\hosts C:\WINDOWS\system32.exe C:\WINDOWS\system32\a.exe C:\WINDOWS\system32\hldrrr.exe C:\WINDOWS\system32\u.exe C:\WINDOWS\system32\wintems.exe E:\Autorun.inf . ((((((((((((((((((((((((( Files Created from 2007-08-25 to 2007-09-25 ))))))))))))))))))))))))))))))) . 2007-09-25 20:53 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-09-25 20:49 52,736 —hs---- C:\inf.exe 2007-09-25 18:23 18,432 --ah----- C:\WINDOWS\system32\gyblp.exe 2007-09-24 22:01 2007-09-23 15:36 50,176 --ahs---- C:\WINDOWS\system32\irdvxc.exe 2007-09-23 14:18 129,546 --a------ C:\DOCUME~1\Anka\bilix.exe 2007-09-23 14:17 27 --a------ C:\WINDOWS\tamer.bat 2007-09-23 14:17 129,546 --a------ C:\bilix.exe 2007-09-23 14:14 27 --a------ C:\DOCUME~1\Anka\tamer.exe 2007-09-23 14:12 27 --a------ C:\tamer.exe 2007-09-17 18:45 34,816 --a------ C:\WINDOWS\system32\nvsvc86.exe 2007-09-13 21:27 40,960 --a------ C:\5c3x8p2r8t8.exe 2007-09-13 21:26 560,640 -r-hs---- C:\WINDOWS\czsrv.exe 2007-09-12 20:45 126 --a------ C:\WINDOWS\system32\enym.bat 2007-09-11 15:55 31,474 --a------ C:\WINDOWS\system32\dagol.exe 2007-09-11 15:52 40,960 --a------ C:\x9e7f6y6j2k7.exe 2007-09-11 15:49 40,960 --a------ C:\a5c3x8p2r8t8.exe 2007-09-11 15:49 2007-09-11 15:48 603,648 -r-hs---- C:\WINDOWS\astra32.exe 2007-09-01 23:16 2007-08-31 20:30 2007-08-28 18:22 2007-08-27 19:11 2007-08-27 19:10 109,311 --a------ C:\WINDOWS\system32\trusted.exe 2007-08-27 19:10 2007-08-27 18:38 . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-09-25 20:48 42496 --a–c— C:\WINDOWS\system32\ftp.exe 2007-09-25 20:48 16896 --a–c— C:\WINDOWS\system32\tftp.exe 2007-09-22 19:25 --------- d-------- C:\DOCUME~1\Anka\DANEAP~1\Lavasoft 2007-09-19 22:12 --------- d-------- C:\DOCUME~1\Anka\DANEAP~1\Skype 2007-09-11 15:48 133120 --a------ C:\WINDOWS\system32\sfc_os.dll 2007-09-06 12:09 801144 --a------ C:\WINDOWS\system32\aswBoot.exe 2007-09-06 12:05 94416 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys 2007-09-06 12:05 92848 --a–c— C:\WINDOWS\system32\drivers\aswmon.sys 2007-09-06 12:03 23152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys 2007-09-06 12:02 42912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys 2007-09-06 12:00 95608 --a------ C:\WINDOWS\system32\AVASTSS.scr 2007-09-06 12:00 26624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys 2007-09-03 19:35 --------- d-------- C:\Program Files\Common Files\Teleca Shared 2007-08-30 21:13 --------- d-------- C:\Program Files\FTP Commander 2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\cdm.dll 2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\wuapi.dll 2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\wuauclt.exe 2007-07-30 19:19 43352 --a–c— C:\WINDOWS\system32\wups2.dll 2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\wucltui.dll 2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\wuweb.dll 2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\wuaueng.dll 2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\wups.dll 2007-07-29 15:53 --------- d-------- C:\DOCUME~1\Anka\DANEAP~1\AdobeUM 2007-07-28 15:29 --------- d-------- C:\Program Files\Gadu-Gadu 2006-06-10 15:44 11281024 --a------ C:\Program Files\setuppol.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE~\Browser Helper Objects{56F1D444-11BF-4879-A12B-79CF0177F038}] c:\program files\zango\zangohook.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “NvCplDaemon”=“C:\WINDOWS\system32\NvCpl.dll” [2005-12-10 04:06] “nwiz”=“nwiz.exe” [2005-12-10 04:06 C:\WINDOWS\system32\nwiz.exe] “DiskeeperSystray”=“C:\Program Files\Executive Software\Diskeeper\DkIcon.exe” [2004-12-22 00:29] “zango”=“c:\program files\zango\zango.exe” [] “xih”=“C:\WINDOWS\xih.exe” [] “NvMediaCenter”=“C:\WINDOWS\system32\NvMcTray.dll” [2005-12-10 04:06] “QuickTime Task”=“C:\Program Files\QuickTime\qttask.exe” [2006-05-30 12:35] “avast!”=“C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe” [2007-09-06 12:06] “SunJavaUpdateSched”=“C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe” [2007-03-14 03:43] “WinampAgent”=“C:\Program Files\Winamp\winampa.exe” [2007-05-15 00:22] “Adobe Photo Downloader”=“C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe” [] “Spooler SubSystem App”=“C:\WINDOWS\System32\spoolsvc.exe” [] “Advanced DHTML Enable”=“C:\WINDOWS\System32\dagol.exe” [2007-09-11 15:55] “Windows Logon Application”=“C:\WINDOWS\System32\winIogon.exe” [] “Office Monitor Word Exel R”=“C:\WINDOWS\System32\u.exe” [] “Network Security XP”=“C:\WINDOWS\System32\nvsvc86.exe” [2007-09-17 18:45] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “CTFMON.EXE”=“C:\WINDOWS\System32\ctfmon.exe” [2001-10-26 19:29] “Komunikator”=“C:\Program Files\Tlen.pl\tlen.exe” [] “mule_st_key”=“C:\Documents and Settings\Anka\Dane aplikacji\m\flec006.exe” [2007-09-22 13:09] “german.exe”=“C:\WINDOWS\System32\wintems.exe” [] “Office Monitor Word Exel R”=“C:\WINDOWS\System32\u.exe” [] “Network Security XP”=“C:\WINDOWS\System32\nvsvc86.exe” [2007-09-17 18:45] [HKEY_USERS.default\software\microsoft\windows\currentversion\run] “Office Monitor Word Exel R”=C:\WINDOWS\System32\u.exe “Network Security XP”=C:\WINDOWS\System32\nvsvc86.exe C:\DOCUME~1\ALLUSE~1\MENUST~1\Programy\AUTOST~1\ Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 11:01:04] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] C:\Program Files\Winamp\winampa.exe R2 MSDisk;Network helper Service;“C:\WINDOWS\System32\irdvxc.exe” /service R2 Szservice;Szservice;“C:\WINDOWS\czsrv.exe” R3 PAC207;SoC PC-Camer@;C:\WINDOWS\System32\DRIVERS\pfc027.sys S3 AME;PC Camera(6029 CIF);C:\WINDOWS\System32\DRIVERS\pfc027.sys S3 k510bus;Sony Ericsson K510 Driver driver (WDM);C:\WINDOWS\System32\DRIVERS\k510bus.sys S3 k510mdfl;Sony Ericsson K510 USB WMC Modem Filter;C:\WINDOWS\System32\DRIVERS\k510mdfl.sys S3 k510mdm;Sony Ericsson K510 USB WMC Modem Driver;C:\WINDOWS\System32\DRIVERS\k510mdm.sys S3 k510mgmt;Sony Ericsson K510 USB WMC Device Management Drivers (WDM);C:\WINDOWS\System32\DRIVERS\k510mgmt.sys S3 k510obex;Sony Ericsson K510 USB WMC OBEX Interface;C:\WINDOWS\System32\DRIVERS\k510obex.sys *Newly Created Service* - CATCHME . ************************************************************************** catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-09-25 20:57:03 Windows 5.1.2600 NTFS scanning hidden processes … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-09-25 20:57:56 C:\ComboFix-quarantined-files.txt … 2007-09-25 20:57 . — E O F —

Ania

jessica · 26 Wrzesień 2007 19:59

Czy u Ciebie działa w ogóle Tryb Awaryjny?

Bo ten Rootkit “Bagle- hidires”, którego masz, uszkadza zwykle Tryb Awaryjny oraz Antivirusa.

A w Twoim logu nie widzę komunikatu o uszkodzonym Trybie Awaryjnym.

Do usuwania będzie dużo, ale ja już dzisiaj nie mam czasu.

Jeśli do rana nikt Ci tu nie pomoże, to rano daj nowy log z ComboFixa, bo przez ten czas przybędzie na pewno do usuwania, bo widzę, że infekcja stale się u Ciebie powiększa.

jessi

Gutek · 26 Wrzesień 2007 20:58

Pobierz The Avenger. Wypakuj => uruchom => zaznacz opcję Input script manually => kliknij w taką lupkę => w okienku, które się otworzy wklej:

Files to delete: C:\WINDOWS\exefnd\101375.exe C:\WINDOWS\exefnd\101385.exe C:\WINDOWS\exefnd\101656.exe C:\WINDOWS\exefnd\101736.exe C:\WINDOWS\exefnd\1018164.exe C:\WINDOWS\exefnd\1018274.exe C:\WINDOWS\exefnd\102627.exe C:\WINDOWS\exefnd\102797.exe C:\WINDOWS\exefnd\104380.exe C:\WINDOWS\exefnd\104590.exe C:\WINDOWS\exefnd\108826.exe C:\WINDOWS\exefnd\112351.exe C:\WINDOWS\exefnd\112661.exe C:\WINDOWS\exefnd\114744.exe C:\WINDOWS\exefnd\115456.exe C:\WINDOWS\exefnd\117308.exe C:\WINDOWS\exefnd\118310.exe C:\WINDOWS\exefnd\119021.exe C:\WINDOWS\exefnd\119702.exe C:\WINDOWS\exefnd\120413.exe C:\WINDOWS\exefnd\121204.exe C:\WINDOWS\exefnd\125941.exe C:\WINDOWS\exefnd\125951.exe C:\WINDOWS\exefnd\127273.exe C:\WINDOWS\exefnd\129235.exe C:\WINDOWS\exefnd\129265.exe C:\WINDOWS\exefnd\134853.exe C:\WINDOWS\exefnd\1348999.exe C:\WINDOWS\exefnd\135835.exe C:\WINDOWS\exefnd\137207.exe C:\WINDOWS\exefnd\139100.exe C:\WINDOWS\exefnd\140672.exe C:\WINDOWS\exefnd\140692.exe C:\WINDOWS\exefnd\142534.exe C:\WINDOWS\exefnd\1430867.exe C:\WINDOWS\exefnd\1437466.exe C:\WINDOWS\exefnd\144227.exe C:\WINDOWS\exefnd\14520329.exe C:\WINDOWS\exefnd\14531485.exe C:\WINDOWS\exefnd\14542440.exe C:\WINDOWS\exefnd\14546186.exe C:\WINDOWS\exefnd\14568548.exe C:\WINDOWS\exefnd\14604940.exe C:\WINDOWS\exefnd\14612020.exe C:\WINDOWS\exefnd\14639490.exe C:\WINDOWS\exefnd\14654011.exe C:\WINDOWS\exefnd\14654021.exe C:\WINDOWS\exefnd\146660.exe C:\WINDOWS\exefnd\14794263.exe C:\WINDOWS\exefnd\153330.exe C:\WINDOWS\exefnd\155844.exe C:\WINDOWS\exefnd\15760632.exe C:\WINDOWS\exefnd\1577928.exe C:\WINDOWS\exefnd\15987699.exe C:\WINDOWS\exefnd\165217.exe C:\WINDOWS\exefnd\1728335.exe C:\WINDOWS\exefnd\173769.exe C:\WINDOWS\exefnd\17413329.exe C:\WINDOWS\exefnd\17413339.exe C:\WINDOWS\exefnd\176784.exe C:\WINDOWS\exefnd\176794.exe C:\WINDOWS\exefnd\177094.exe C:\WINDOWS\exefnd\188631.exe C:\WINDOWS\exefnd\194349.exe C:\WINDOWS\exefnd\207668.exe C:\WINDOWS\exefnd\218934.exe C:\WINDOWS\exefnd\219415.exe C:\WINDOWS\exefnd\219425.exe C:\WINDOWS\exefnd\231502.exe C:\WINDOWS\exefnd\231512.exe C:\WINDOWS\exefnd\245563.exe C:\WINDOWS\exefnd\28960673.exe C:\WINDOWS\exefnd\28961704.exe C:\WINDOWS\exefnd\28979009.exe C:\WINDOWS\exefnd\29052545.exe C:\WINDOWS\exefnd\29059885.exe C:\WINDOWS\exefnd\29477135.exe C:\WINDOWS\exefnd\2993834.exe C:\WINDOWS\exefnd\2995026.exe C:\WINDOWS\exefnd\3009547.exe C:\WINDOWS\exefnd\3011340.exe C:\WINDOWS\exefnd\30322721.exe C:\WINDOWS\exefnd\30411879.exe C:\WINDOWS\exefnd\31490430.exe C:\WINDOWS\exefnd\31821106.exe C:\WINDOWS\exefnd\31822027.exe C:\WINDOWS\exefnd\371353.exe C:\WINDOWS\exefnd\371394.exe C:\WINDOWS\exefnd\417971.exe C:\WINDOWS\exefnd\417981.exe C:\WINDOWS\exefnd\43379786.exe C:\WINDOWS\exefnd\43494111.exe C:\WINDOWS\exefnd\43494171.exe C:\WINDOWS\exefnd\43886345.exe C:\WINDOWS\exefnd\44767982.exe C:\WINDOWS\exefnd\44828670.exe C:\WINDOWS\exefnd\46273387.exe C:\WINDOWS\exefnd\57806601.exe C:\WINDOWS\exefnd\58299309.exe C:\WINDOWS\exefnd\72220898.exe C:\WINDOWS\exefnd\72723631.exe C:\WINDOWS\exefnd\8116611.exe C:\WINDOWS\exefnd\86633352.exe C:\WINDOWS\exefnd\87132730.exe C:\WINDOWS\exefnd\905922.exe C:\WINDOWS\exefnd\95507.exe C:\WINDOWS\exefnd\95687.exe C:\WINDOWS\hosts C:\WINDOWS\system32.exe C:\WINDOWS\system32\a.exe C:\WINDOWS\system32\hldrrr.exe C:\WINDOWS\system32\u.exe C:\WINDOWS\system32\wintems.exe C:\inf.exe C:\WINDOWS\system32\gyblp.exe C:\WINDOWS\system32\irdvxc.exe C:\DOCUME~1\Anka\bilix.exe C:\WINDOWS\tamer.bat C:\bilix.exe C:\DOCUME~1\Anka\tamer.exe C:\tamer.exe C:\WINDOWS\system32\nvsvc86.exe C:\5c3x8p2r8t8.exe C:\WINDOWS\czsrv.exe C:\WINDOWS\system32\enym.bat C:\WINDOWS\system32\dagol.exe C:\x9e7f6y6j2k7.exe C:\a5c3x8p2r8t8.exe C:\WINDOWS\astra32.exe C:\WINDOWS\czsrv.exe Folders to delete: c:\program files\zango

kliknij klawisz Done => teraz kliknij na zielone światełko => powinna pojawić się pewna informacja i kliknij OK (teraz restart).

To nie wszystko

Pobierz program SDFix

Faryen · 29 Wrzesień 2007 11:01

Wielkie dzieki

zaraz robie co mi kazecie , mam nadzieje ze pomoze

Złączono Posta : 29.09.2007 (Sob) 13:15

SDFix: Version 1.107 Run by Anka on 2007-09-29 at 13:07 Microsoft Windows XP [Wersja 5.1.2600] Running From: C:\SDFix Safe Mode: Checking Services: Name: MSDisk Szservice ImagePath: “C:\WINDOWS\System32\irdvxc.exe” /service “C:\WINDOWS\czsrv.exe” MSDisk - Deleted Szservice - Deleted C:\WINDOWS\system32\Microsoft\backup.ftp Found C:\WINDOWS\system32\Microsoft\backup.tftp Found Checking files: Genuine: C:\WINDOWS\system32\Microsoft\backup.ftp C:\WINDOWS\system32\Microsoft\backup.tftp Dummy: C:\WINDOWS\system32\ftp.exe C:\WINDOWS\system32\tftp.exe C:\WINDOWS\system32\dllcache\ftp.exe C:\WINDOWS\system32\dllcache\tftp.exe Files copied to SDFix\Backups Restoring files if backups are found Final Check: Genuine: C:\WINDOWS\system32\Microsoft\backup.ftp C:\WINDOWS\system32\Microsoft\backup.tftp C:\WINDOWS\system32\ftp.exe C:\WINDOWS\system32\tftp.exe C:\WINDOWS\system32\dllcache\ftp.exe C:\WINDOWS\system32\dllcache\tftp.exe Dummy: Restoring Windows Registry Values Restoring Windows Default Hosts File Rebooting… Normal Mode: Checking Files: Trojan Files Found: C:\Program Files\Common Files\Carlson\carlton - Deleted C:\WINDOWS\astra32.exe - Deleted C:\WINDOWS\czsrv.exe - Deleted C:\WINDOWS\system32\irdvxc.exe - Deleted C:\WINDOWS\system32\Microsoft\backup.ftp - Deleted C:\WINDOWS\system32\Microsoft\backup.tftp - Deleted Folder C:\Program Files\Common Files\Carlson - Removed Removing Temp Files… ADS Check: C:\WINDOWS No streams found. C:\WINDOWS\system32 No streams found. C:\WINDOWS\system32\svchost.exe No streams found. C:\WINDOWS\system32\ntoskrnl.exe No streams found. Final Check: Remaining Services: ------------------ Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] Remaining Files: --------------- File Backups: - C:\SDFix\backups\backups.zip Files with Hidden Attributes: Fri 28 Sep 2007 76,288 …SH. — “C:\WINDOWS\system32\a.exe” Tue 25 Sep 2007 18,432 A…H. — “C:\WINDOWS\system32\gyblp.exe” Mon 27 Feb 2006 4,348 …SH. — “C:\Documents and Settings\All Users\DRM\DRMv1.bak” Mon 17 Jan 2000 28,399 A…H. — “C:\Program Files\Audio4You\Lyrics4You\m2k.exe” Mon 9 Feb 2004 15,360 A…HR — “C:\WINDOWS\system32\drivers\NetMotCM.sys” Finished!

Złączono Posta : 29.09.2007 (Sob) 13:18

a teraz log z combo

ComboFix 07-09-21.2 - “Anka” 2007-09-29 13:16:17.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.0.1250.48.1045.18.44 [GMT 2:00] . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\system32\a.exe . ((((((((((((((((((((((((( Files Created from 2007-08-28 to 2007-09-29 ))))))))))))))))))))))))))))))) . 2007-09-29 13:14 53,760 —hs---- C:\inf.exe 2007-09-29 13:06 2007-09-29 13:05 2007-09-29 13:05 2007-09-29 13:05 2007-09-29 13:05 2007-09-29 13:05 2007-09-29 13:05 2007-09-29 13:05 2007-09-28 20:40 43,976 --a------ C:\v7p6i1w1l3h4.exe 2007-09-28 14:48 43,976 --a------ C:\i3l9k8l1y5k1.exe 2007-09-27 12:58 40,960 --a------ C:\5c3x8p2r8t8.exe 2007-09-26 21:35 2007-09-26 21:31 2007-09-25 20:53 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-09-25 18:23 18,432 --ah----- C:\WINDOWS\system32\gyblp.exe 2007-09-24 22:01 2007-09-23 14:18 129,546 --a------ C:\DOCUME~1\Anka\bilix.exe 2007-09-23 14:17 27 --a------ C:\WINDOWS\tamer.bat 2007-09-23 14:17 129,546 --a------ C:\bilix.exe 2007-09-23 14:14 27 --a------ C:\DOCUME~1\Anka\tamer.exe 2007-09-17 18:45 34,816 --a------ C:\WINDOWS\system32\nvsvc86.exe 2007-09-12 20:45 126 --a------ C:\WINDOWS\system32\enym.bat 2007-09-11 15:55 31,474 --a------ C:\WINDOWS\system32\dagol.exe 2007-09-01 23:16 2007-08-31 20:30 . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-09-22 19:25 --------- d-------- C:\DOCUME~1\Anka\DANEAP~1\Lavasoft 2007-09-19 22:12 --------- d-------- C:\DOCUME~1\Anka\DANEAP~1\Skype 2007-09-17 17:47 --------- d-------- C:\Program Files\eMule 2007-09-11 15:48 133120 --a------ C:\WINDOWS\system32\sfc_os.dll 2007-09-06 12:09 801144 --a------ C:\WINDOWS\system32\aswBoot.exe 2007-09-06 12:05 94416 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys 2007-09-06 12:05 92848 --a–c— C:\WINDOWS\system32\drivers\aswmon.sys 2007-09-06 12:03 23152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys 2007-09-06 12:02 42912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys 2007-09-06 12:00 95608 --a------ C:\WINDOWS\system32\AVASTSS.scr 2007-09-06 12:00 26624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys 2007-09-03 19:35 --------- d-------- C:\Program Files\Common Files\Teleca Shared 2007-08-30 21:13 --------- d-------- C:\Program Files\FTP Commander 2007-08-30 20:57 --------- d-------- C:\Program Files\Express Thumbnail Creator 2007-08-28 18:22 --------- d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\karta 2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\cdm.dll 2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\wuapi.dll 2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\wuauclt.exe 2007-07-30 19:19 43352 --a–c— C:\WINDOWS\system32\wups2.dll 2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\wucltui.dll 2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\wuweb.dll 2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\wuaueng.dll 2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\wups.dll 2007-07-29 15:53 --------- d-------- C:\DOCUME~1\Anka\DANEAP~1\AdobeUM 2007-07-28 15:29 --------- d-------- C:\Program Files\Gadu-Gadu 2006-06-10 15:44 11281024 --a------ C:\Program Files\setuppol.exe . ((((((((((((((((((((((((((((( snapshot_2007-09-25_205724,43 ))))))))))))))))))))))))))))))))))))))))) . ----a-w 163,328 2007-09-25 05:10:08 C:\WINDOWS\ERUNT\SDFIX\ERDNT.EXE ----a-w 4,370,432 2007-09-29 11:07:02 C:\WINDOWS\ERUNT\SDFIX\Users\00000001\NTUSER.DAT ----a-w 159,744 2007-09-29 11:07:02 C:\WINDOWS\ERUNT\SDFIX\Users\00000002\UsrClass.dat ----a-w 163,328 2007-09-25 05:10:08 C:\WINDOWS\ERUNT\SDFIX_First_Run\ERDNT.EXE ----a-w 4,370,432 2007-09-29 11:06:54 C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\00000001\NTUSER.DAT ----a-w 159,744 2007-09-29 11:06:54 C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\00000002\UsrClass.dat -c–a-w 42,496 2001-10-26 17:29:54 C:\WINDOWS\system32\ftp.exe -c–a-w 16,896 2001-10-26 17:30:02 C:\WINDOWS\system32\tftp.exe ----a-w 262,144 2007-09-29 11:16:14 C:\WINDOWS\system32\config\systemprofile\ntuser.dat -c–a-w 32,768 2007-09-28 12:16:56 C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat -c–a-w 32,768 2007-09-28 12:16:56 C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\index.dat -c–a-w 196,608 2007-09-28 12:16:56 C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat ----a-w 76,288 2007-09-28 12:32:11 C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Temporary Internet Files\Content.IE5\DMOE2LO1\f[2].exe -c–a-w 42,496 2001-10-26 17:29:54 C:\WINDOWS\system32\dllcache\ftp.exe -c–a-w 16,896 2001-10-26 17:30:02 C:\WINDOWS\system32\dllcache\tftp.exe ----atw 16,384 2007-09-29 11:12:06 C:\WINDOWS\Temp\Perflib_Perfdata_41c.dat ----atw 16,384 2007-09-29 11:11:53 C:\WINDOWS\Temp\Perflib_Perfdata_51c.dat . -c–a-w 42,496 2007-09-25 18:48:38 C:\WINDOWS\system32\ftp.exe -c–a-w 16,896 2007-09-25 18:48:38 C:\WINDOWS\system32\tftp.exe ----a-w 262,144 2007-09-25 18:54:01 C:\WINDOWS\system32\config\systemprofile\ntuser.dat -c–a-w 32,768 2007-09-25 16:23:31 C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat -c–a-w 32,768 2007-09-25 16:23:31 C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\index.dat -c–a-w 196,608 2007-09-25 16:23:31 C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat -c–a-w 42,496 2007-09-25 18:48:38 C:\WINDOWS\system32\dllcache\ftp.exe -c–a-w 16,896 2007-09-25 18:48:38 C:\WINDOWS\system32\dllcache\tftp.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE~\Browser Helper Objects{56F1D444-11BF-4879-A12B-79CF0177F038}] c:\program files\zango\zangohook.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “NvCplDaemon”=“C:\WINDOWS\system32\NvCpl.dll” [2005-12-10 04:06] “nwiz”=“nwiz.exe” [2005-12-10 04:06 C:\WINDOWS\system32\nwiz.exe] “DiskeeperSystray”=“C:\Program Files\Executive Software\Diskeeper\DkIcon.exe” [2004-12-22 00:29] “zango”=“c:\program files\zango\zango.exe” [] “xih”=“C:\WINDOWS\xih.exe” [] “NvMediaCenter”=“C:\WINDOWS\system32\NvMcTray.dll” [2005-12-10 04:06] “QuickTime Task”=“C:\Program Files\QuickTime\qttask.exe” [2006-05-30 12:35] “avast!”=“C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe” [2007-09-06 12:06] “SunJavaUpdateSched”=“C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe” [2007-03-14 03:43] “WinampAgent”=“C:\Program Files\Winamp\winampa.exe” [2007-05-15 00:22] “Adobe Photo Downloader”=“C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe” [] “Network Security XP”=“C:\WINDOWS\System32\nvsvc86.exe” [2007-09-17 18:45] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “CTFMON.EXE”=“C:\WINDOWS\System32\ctfmon.exe” [2001-10-26 19:29] “Komunikator”=“C:\Program Files\Tlen.pl\tlen.exe” [] “mule_st_key”=“C:\Documents and Settings\Anka\Dane aplikacji\m\flec006.exe” [2007-09-22 13:09] “german.exe”=“C:\WINDOWS\System32\wintems.exe” [] “Network Security XP”=“C:\WINDOWS\System32\nvsvc86.exe” [2007-09-17 18:45] [HKEY_USERS.default\software\microsoft\windows\currentversion\run] “Office Monitor Word Exel R”=C:\WINDOWS\System32\u.exe “Network Security XP”=C:\WINDOWS\System32\nvsvc86.exe C:\DOCUME~1\ALLUSE~1\MENUST~1\Programy\AUTOST~1\ Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 11:01:04] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] C:\Program Files\Winamp\winampa.exe R3 PAC207;SoC PC-Camer@;C:\WINDOWS\System32\DRIVERS\pfc027.sys S3 AME;PC Camera(6029 CIF);C:\WINDOWS\System32\DRIVERS\pfc027.sys S3 k510bus;Sony Ericsson K510 Driver driver (WDM);C:\WINDOWS\System32\DRIVERS\k510bus.sys S3 k510mdfl;Sony Ericsson K510 USB WMC Modem Filter;C:\WINDOWS\System32\DRIVERS\k510mdfl.sys S3 k510mdm;Sony Ericsson K510 USB WMC Modem Driver;C:\WINDOWS\System32\DRIVERS\k510mdm.sys S3 k510mgmt;Sony Ericsson K510 USB WMC Device Management Drivers (WDM);C:\WINDOWS\System32\DRIVERS\k510mgmt.sys S3 k510obex;Sony Ericsson K510 USB WMC OBEX Interface;C:\WINDOWS\System32\DRIVERS\k510obex.sys . ************************************************************************** catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-09-29 13:17:43 Windows 5.1.2600 NTFS scanning hidden processes … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-09-29 13:18:24 C:\ComboFix-quarantined-files.txt … 2007-09-29 13:18 C:\ComboFix2.txt … 2007-09-25 20:57 . — E O F —

Sf-Sr · 29 Wrzesień 2007 11:30

A te nie do zfixowania ?

Nie jestem fachowcem ale tak myśle.

Faryen · 29 Wrzesień 2007 11:34

nie mam pojecia , chyba jestem typowa blondynka, robie to co mi kazecie majac nadzieje ze to pomoze

jessica · 29 Wrzesień 2007 12:01

Trzeba działać dalej:

Wklej do Notatnika :

File::

C:\WINDOWS\system32\gyblp.exe

C:\inf.exe

C:\v7p6i1w1l3h4.exe

C:\i3l9k8l1y5k1.exe

C:\5c3x8p2r8t8.exe

C:\DOCUME~1\Anka\bilix.exe

C:\WINDOWS\tamer.bat

C:\bilix.exe

C:\DOCUME~1\Anka\tamer.exe

C:\WINDOWS\system32\nvsvc86.exe

C:\WINDOWS\system32\enym.bat

C:\WINDOWS\system32\dagol.exe

c:\program files\zango\zangohook.dll

C:\Documents and Settings\Anka\Dane aplikacji\m\flec006.exe


Folder::

C:\DOCUME~1\Anka\DANEAP~1\m

c:\program files\zango

C:\Documents and Settings\Anka\Dane aplikacji\m


Registry::

[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{56F1D444-11BF-4879-A12B-79CF0177F038}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"zango"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"xih"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Network Security XP"=-

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Network Security XP"=-

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"german.exe"=-

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"mule_st_key"=-

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]

"Network Security XP"=-

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]

"Office Monitor Word Exel R"=-

>>Plik>>Zapisz jako… >>> CFScript (najwygodniej będzie, jeśli zapiszesz w takiej lokalizacji, by ikonka CFScript.txt znalazła się obok ikonki ComboFix.exe )

Przeciągnij i upuść plik CFScript.txt na plik ComboFix.exe (czyli ikonkę CFScript.txt na ikonkę ComboFix.exe ) – podobnie jak na tym obrazku –> Klik

(jeśli pojawi się pytanie " 1 or 2" - to wpisz 1 i naciśnij ENTER) Ma się rozpocząć usuwanie. (i powstanie log)

Po restarcie usuń ręcznie folder C: ** Qoobox**.

Potem daj log z ComboFixa.

jessi

Faryen · 29 Wrzesień 2007 13:18

ComboFix 07-09-21.2 - “Anka” 2007-09-29 15:15:07.3 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.0.1250.48.1045.18.57 [GMT 2:00]

Command switches used :: C:\Documents and Settings\Anka\Pulpit\CFScript.txt

* Created a new restore point

FILE::

C:\WINDOWS\system32\gyblp.exe

C:\inf.exe

C:\v7p6i1w1l3h4.exe

C:\i3l9k8l1y5k1.exe

C:\5c3x8p2r8t8.exe

C:\DOCUME~1\Anka\bilix.exe

C:\WINDOWS\tamer.bat

C:\bilix.exe

C:\DOCUME~1\Anka\tamer.exe

C:\WINDOWS\system32\nvsvc86.exe

C:\WINDOWS\system32\enym.bat

C:\WINDOWS\system32\dagol.exe

c:\program files\zango\zangohook.dll

C:\Documents and Settings\Anka\Dane aplikacji\m\flec006.exe

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

C:\5c3x8p2r8t8.exe

C:\bilix.exe

C:\DOCUME~1\Anka\bilix.exe

C:\DOCUME~1\Anka\DANEAP~1\m

C:\DOCUME~1\Anka\DANEAP~1\m\data.oct

C:\DOCUME~1\Anka\DANEAP~1\m\flec006.exe

C:\DOCUME~1\Anka\DANEAP~1\m\list.oct

C:\DOCUME~1\Anka\DANEAP~1\m\shared\12mp3 1.0 Crack.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\1st MP3 Tag Editor 5.7 (Serial).zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\20sim Viewer 3.6.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\310-301 Free Test Exam Questions 10.0 Serial.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\3D Alien Babies vs. Osama 1.0 (Key+Serial).zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\3D Amazing Clouds Screen Saver 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\3D Galaxy

C:\DOCUME~1\Anka\DANEAP~1\m\shared\3D Impact Pro 1.28.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\4-Dynamic Web 2.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\4TOPS Word Link for MS Access 2000 4.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Absolute Color Picker ActiveX Control 3.0.2.18.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Active MediaMagnet 5.5.2 [serial].zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Active Watch 2.5.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Aisle-by-Aisle Grocery List Software 3.09 [serial].zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Alcohol 120% 1.9.5.4212.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Alivecolors 1.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\All-into-One Flash Mixer 3.5 (Patch).zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\American Hangman–Presidents and States 2.0.5.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Animated Alphabet for Windows 1.0 [With Crack].zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Antivirus.Avast.4.6.PTBR.Pro.serial.Mar2005.By.kgbBrasil.Pootz.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Any DWG to JPG Converter 2005.5 [Patch].zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Arena Wars v1.2.1 patch.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Arlington Kiosk Browser 8.4.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Atomic TimeSync 1.03.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Audio Sampler 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Automatic Motion Detecting Video Editor 1.0 [Cracked].zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\AVG.Antivirus.Pro.v7.0.240(Incl.Working.SN).zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\AVI Toolbox 1.2.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\AWS Toolbar 1.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Battlefield 1942 Desert Combat Extended Patch 0.7.2d.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\BitRock InstallBuilder 1.0 (Patch).zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Blowfish Development Kit 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\BMS Business Music System 3.05.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Book Reporter 2.1 [serial].zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\BootSafe 1.0.1002.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Bouncy Story Follow the Road 1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Business Icon Library 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\ButtonSwitcherPro 1.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\BW Table Compare for DBISAM 2.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Caterpillar Gold 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\CD-DA X-Tractor 0.24.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\CD Start-It Pro 1.5.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Claros In Touch 1.7.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\cloneskelecton 1.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\CM Central Station 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Color Button ActiveX Control 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\ColorCaps 2006 2.03.2.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Comparison Suite for SQL Server 1.1.6.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Convert Image to PDF 2.13 (Key+Serial).zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\DbWeigher 1.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Dirk’s Metronome 1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\DoReMe Music 1.30 [KeyGen].zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\DVD to 3GP Video Converter Suite 1.0 Key+Serial.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Easysoft ODBC-ODBC Bridge 1.4.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Encaps2SMS 0.9.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\EPL 4.02 Beta.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Ewido.Crack-Work100%.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Exeba-ACON Access Control Attendance Monitoring Software 5.5.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\ExTray 1.0.143 (Serial).zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Eye Spy Pro 2.9 (Key).zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\EZ-Total for Excel 2.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\EzBrowser Tabbed Webbrowser 1.0 Serial.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Fast Printer Chooser 2.0 With Crack.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\FinalRecovery 1.4.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Finance and Statistics Models Set 1.0 (Key+Serial).zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Find and Replace Tool For Word 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Flashback On Your Day In History 5.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\FloppyBase 1.6b.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Focus CD Ripper Pro 3.2.0.0706.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Folder Express 2.1 [Key+Serial].zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\FolderView 2.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Fractions n Decimals CE 5.3.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\FreeMem Professional 5.3 (With Crack).zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\French & Armenian Dictionary 2.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\GetPDF Report Server 2.21 build 896.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Golf Score Recorder Software Suite 1.4.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Graph Plotter 1.2.3.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Hi-Tech Menu 1.0 [Cracked].zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\How to Make Money with Websites and Software 1.2.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\HtmCompiler 1.6.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Instant Housecall Remote Support 3.4.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\IronDesktop 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\J&L Retirement Planner 11.6 (KeyGen).zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Java for Kids.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Java Subnet Calculator 0.8a.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\JFPCreator 1.02 (Crack).zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Join (Merge, Combine) Multiple Lines Into One Software 7.0 Key+Serial.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Kairos 7.2.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Kaspersky.Antispam.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Kensington MouseWorks 5.5.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Kingdia DVD to MP3 Ripper SE 3.0.11.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Konvertor_tif2xxx DLL 1.12.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\LensPro III for Adobe Photoshop 3.84.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\LightningCode 1.6.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Local Port Scanner 1.2.2.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Mahjongg 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Mail Checker 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\MailBee.NET Objects 2.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Manganese Menu 1.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\MastrScan 18.4 [KeyGen].zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Math Pal Computer Calculator 1.12.13.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\MB Free Taurus Astrology 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\MBSS Light 3.1 (Patch).zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\McAfee.AntiSpyware.v2.0.167.GERMAN-CYGNUS.by.GEAR.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\MEDA MP3 Splitter 3.1 Key+Serial.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\MeshWorks for Rhino 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\minisys 2.2.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\miREC Sound Recorder 1.7.04.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Models Photo Screensaver 1.0 Key+Serial.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Motion Studio 4.0.119 (Serial).zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\My CalStep 1.0.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\My RSS Toolbar 1.30.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Naevius 3GP Converter 1.0 [Crack].zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Nawras Files Splitter 3.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\NCN Chat 1.0.0829.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\NOD32.AntiVirus.v2.51.26.EN-DE-PTBR.simitar.cdmsshare.180406.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\NWin 2.022.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Ocean Life Photo Screensaver 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Omni-NFS Server 4.2.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\OmniFormat 7.9.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Omniquad Surfwall - Enterprise Manager 2.882 [serial].zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Operation Flashpoint Cold War Crisis - Mission Upgrade 3 map.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Organizer Password Recovery Key 8.0 build 2514 [Key+Serial].zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\orGenta 1.3 (Patch).zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Pafwert 1.5.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Painkiller v1.3 to v1.3.1 patch.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Palmbutler 2.2.0.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\ParetoLogic Anti-Spyware 5.5.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\PDF Converter Professional 4.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Periodic Table of Elements (CE palmtop) 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Photo to PSP 1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Photopod 1.0.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Ping Pong IP 1.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Plato’s Lake Screensaver 5.07.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Point Cloud 1.0.1 Key+Serial.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\PPWIZARD - HTML Preprocessor 07.048.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Presstube Animation Screensaver.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\PrintPunk 1.1.4.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\QuarkXPress Updater 6.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\QuickTime Killer 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Rage of Mages demo.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Recover Your Files 2.9 (Patch).zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Reel New Media Toolbar For Internet Explorer 5.0 4.5.113.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\ReJuvin8 3.6.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Resistor Color Practice 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\RFC Browser Lite Edition 3.5.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Roadkil’s Server Monitor 1.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Robert’s Magical Adventure 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Salsaware 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Sausages 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Screen Doodler 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Serenade for CD 1.0 (KeyGen).zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Shut Down Expert 4.90.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\SI-Metric Office 2.1 build 179.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Sid Meier’s Gettysburg Rebel demo.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\SIRIUS Satellite Tuner 2.1.5.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\SiteInFile Compiler 2.03 [KeyGen].zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Slam Database Manager 1.05 [Crack].zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\SlaveMouse 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\SmartBarXP 1.0.201.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\SoccerWinners Connections 1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Sound Generator 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Spam Blocking Agent 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Spider-Man 2 Promo Screensaver.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Spyware Begone 9.15.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Squeaky Clean 0.10 Alpha.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Srimad Bhagavad-Gita 1.08 [Patch].zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Stamp Catalog 5.1 [serial].zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\StarMessage - Moon Phases screensaver 3.08.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Stellar Phoenix Mailbox - Exchange Desktop 2.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Stock Chart Wizard 1.6.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Stream Recorder 1.5 Crack.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Sympathy Crossword Construction 3.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\TemplatePoster 1.50.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\The Corporate Machine 1.2 patch.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\The Invoice Client Manager 3.7.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\TimeTraveler 1.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\TowMagic 1.5 (KeyGen).zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Transym OCR 2.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Travel Mate 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Tube grab 2.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\TV Set 1.0.0.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Unreal Tournament 2003 - Ancient Evil DCSE CTF map.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\VidVac 2.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Wallpaper Desktop Calendar Living Gallery 1.5.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\WAV to MP3 Converter 3.15 (With Crack).zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Winrtgen 2.3.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\WinX DVD Author 5.0.68.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\WordPerfect Quick Fix Rename Default Template 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\X2port 1.0.5.3.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\xaraya 1.0.2.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Xceed FTP for .NET 3.6 [With Crack].zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\XL Report Builder 2.1.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\XP Lockdown 1.02.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Zambezi 1.0.zip

C:\DOCUME~1\Anka\DANEAP~1\m\shared\Zilla Connection Accelerator 4.2.0.1.zip

C:\DOCUME~1\Anka\DANEAP~1\m\srvlist.oct

C:\DOCUME~1\Anka\tamer.exe

C:\Documents and Settings\Anka\Dane aplikacji\m\data.oct

C:\Documents and Settings\Anka\Dane aplikacji\m\flec006.exe

C:\Documents and Settings\Anka\Dane aplikacji\m\list.oct

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\12mp3 1.0 Crack.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\1st MP3 Tag Editor 5.7 (Serial).zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\20sim Viewer 3.6.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\310-301 Free Test Exam Questions 10.0 Serial.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\3D Alien Babies vs. Osama 1.0 (Key+Serial).zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\3D Amazing Clouds Screen Saver 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\3D Galaxy

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\3D Impact Pro 1.28.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\4-Dynamic Web 2.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\4TOPS Word Link for MS Access 2000 4.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Absolute Color Picker ActiveX Control 3.0.2.18.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Active MediaMagnet 5.5.2 [serial].zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Active Watch 2.5.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Aisle-by-Aisle Grocery List Software 3.09 [serial].zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Alcohol 120% 1.9.5.4212.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Alivecolors 1.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\All-into-One Flash Mixer 3.5 (Patch).zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\American Hangman–Presidents and States 2.0.5.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Animated Alphabet for Windows 1.0 [With Crack].zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Antivirus.Avast.4.6.PTBR.Pro.serial.Mar2005.By.kgbBrasil.Pootz.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Any DWG to JPG Converter 2005.5 [Patch].zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Arena Wars v1.2.1 patch.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Arlington Kiosk Browser 8.4.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Atomic TimeSync 1.03.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Audio Sampler 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Automatic Motion Detecting Video Editor 1.0 [Cracked].zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\AVG.Antivirus.Pro.v7.0.240(Incl.Working.SN).zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\AVI Toolbox 1.2.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\AWS Toolbar 1.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Battlefield 1942 Desert Combat Extended Patch 0.7.2d.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\BitRock InstallBuilder 1.0 (Patch).zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Blowfish Development Kit 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\BMS Business Music System 3.05.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Book Reporter 2.1 [serial].zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\BootSafe 1.0.1002.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Bouncy Story Follow the Road 1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Business Icon Library 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\ButtonSwitcherPro 1.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\BW Table Compare for DBISAM 2.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Caterpillar Gold 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\CD-DA X-Tractor 0.24.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\CD Start-It Pro 1.5.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Claros In Touch 1.7.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\cloneskelecton 1.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\CM Central Station 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Color Button ActiveX Control 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\ColorCaps 2006 2.03.2.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Comparison Suite for SQL Server 1.1.6.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Convert Image to PDF 2.13 (Key+Serial).zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\DbWeigher 1.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Dirk’s Metronome 1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\DoReMe Music 1.30 [KeyGen].zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\DVD to 3GP Video Converter Suite 1.0 Key+Serial.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Easysoft ODBC-ODBC Bridge 1.4.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Encaps2SMS 0.9.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\EPL 4.02 Beta.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Ewido.Crack-Work100%.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Exeba-ACON Access Control Attendance Monitoring Software 5.5.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\ExTray 1.0.143 (Serial).zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Eye Spy Pro 2.9 (Key).zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\EZ-Total for Excel 2.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\EzBrowser Tabbed Webbrowser 1.0 Serial.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Fast Printer Chooser 2.0 With Crack.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\FinalRecovery 1.4.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Finance and Statistics Models Set 1.0 (Key+Serial).zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Find and Replace Tool For Word 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Flashback On Your Day In History 5.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\FloppyBase 1.6b.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Focus CD Ripper Pro 3.2.0.0706.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Folder Express 2.1 [Key+Serial].zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\FolderView 2.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Fractions n Decimals CE 5.3.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\FreeMem Professional 5.3 (With Crack).zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\French & Armenian Dictionary 2.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\GetPDF Report Server 2.21 build 896.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Golf Score Recorder Software Suite 1.4.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Graph Plotter 1.2.3.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Hi-Tech Menu 1.0 [Cracked].zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\How to Make Money with Websites and Software 1.2.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\HtmCompiler 1.6.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Instant Housecall Remote Support 3.4.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\IronDesktop 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\J&L Retirement Planner 11.6 (KeyGen).zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Java for Kids.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Java Subnet Calculator 0.8a.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\JFPCreator 1.02 (Crack).zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Join (Merge, Combine) Multiple Lines Into One Software 7.0 Key+Serial.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Kairos 7.2.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Kaspersky.Antispam.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Kensington MouseWorks 5.5.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Kingdia DVD to MP3 Ripper SE 3.0.11.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Konvertor_tif2xxx DLL 1.12.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\LensPro III for Adobe Photoshop 3.84.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\LightningCode 1.6.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Local Port Scanner 1.2.2.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Mahjongg 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Mail Checker 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\MailBee.NET Objects 2.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Manganese Menu 1.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\MastrScan 18.4 [KeyGen].zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Math Pal Computer Calculator 1.12.13.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\MB Free Taurus Astrology 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\MBSS Light 3.1 (Patch).zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\McAfee.AntiSpyware.v2.0.167.GERMAN-CYGNUS.by.GEAR.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\MEDA MP3 Splitter 3.1 Key+Serial.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\MeshWorks for Rhino 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\minisys 2.2.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\miREC Sound Recorder 1.7.04.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Models Photo Screensaver 1.0 Key+Serial.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Motion Studio 4.0.119 (Serial).zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\My CalStep 1.0.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\My RSS Toolbar 1.30.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Naevius 3GP Converter 1.0 [Crack].zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Nawras Files Splitter 3.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\NCN Chat 1.0.0829.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\NOD32.AntiVirus.v2.51.26.EN-DE-PTBR.simitar.cdmsshare.180406.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\NWin 2.022.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Ocean Life Photo Screensaver 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Omni-NFS Server 4.2.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\OmniFormat 7.9.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Omniquad Surfwall - Enterprise Manager 2.882 [serial].zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Operation Flashpoint Cold War Crisis - Mission Upgrade 3 map.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Organizer Password Recovery Key 8.0 build 2514 [Key+Serial].zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\orGenta 1.3 (Patch).zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Pafwert 1.5.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Painkiller v1.3 to v1.3.1 patch.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Palmbutler 2.2.0.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\ParetoLogic Anti-Spyware 5.5.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\PDF Converter Professional 4.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Periodic Table of Elements (CE palmtop) 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Photo to PSP 1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Photopod 1.0.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Ping Pong IP 1.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Plato’s Lake Screensaver 5.07.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Point Cloud 1.0.1 Key+Serial.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\PPWIZARD - HTML Preprocessor 07.048.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Presstube Animation Screensaver.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\PrintPunk 1.1.4.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\QuarkXPress Updater 6.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\QuickTime Killer 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Rage of Mages demo.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Recover Your Files 2.9 (Patch).zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Reel New Media Toolbar For Internet Explorer 5.0 4.5.113.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\ReJuvin8 3.6.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Resistor Color Practice 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\RFC Browser Lite Edition 3.5.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Roadkil’s Server Monitor 1.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Robert’s Magical Adventure 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Salsaware 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Sausages 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Screen Doodler 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Serenade for CD 1.0 (KeyGen).zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Shut Down Expert 4.90.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\SI-Metric Office 2.1 build 179.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Sid Meier’s Gettysburg Rebel demo.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\SIRIUS Satellite Tuner 2.1.5.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\SiteInFile Compiler 2.03 [KeyGen].zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Slam Database Manager 1.05 [Crack].zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\SlaveMouse 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\SmartBarXP 1.0.201.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\SoccerWinners Connections 1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Sound Generator 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Spam Blocking Agent 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Spider-Man 2 Promo Screensaver.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Spyware Begone 9.15.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Squeaky Clean 0.10 Alpha.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Srimad Bhagavad-Gita 1.08 [Patch].zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Stamp Catalog 5.1 [serial].zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\StarMessage - Moon Phases screensaver 3.08.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Stellar Phoenix Mailbox - Exchange Desktop 2.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Stock Chart Wizard 1.6.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Stream Recorder 1.5 Crack.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Sympathy Crossword Construction 3.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\TemplatePoster 1.50.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\The Corporate Machine 1.2 patch.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\The Invoice Client Manager 3.7.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\TimeTraveler 1.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\TowMagic 1.5 (KeyGen).zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Transym OCR 2.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Travel Mate 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Tube grab 2.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\TV Set 1.0.0.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Unreal Tournament 2003 - Ancient Evil DCSE CTF map.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\VidVac 2.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Wallpaper Desktop Calendar Living Gallery 1.5.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\WAV to MP3 Converter 3.15 (With Crack).zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Winrtgen 2.3.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\WinX DVD Author 5.0.68.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\WordPerfect Quick Fix Rename Default Template 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\X2port 1.0.5.3.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\xaraya 1.0.2.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Xceed FTP for .NET 3.6 [With Crack].zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\XL Report Builder 2.1.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\XP Lockdown 1.02.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Zambezi 1.0.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\shared\Zilla Connection Accelerator 4.2.0.1.zip

C:\Documents and Settings\Anka\Dane aplikacji\m\srvlist.oct

C:\i3l9k8l1y5k1.exe

C:\v7p6i1w1l3h4.exe

C:\WINDOWS\system32\dagol.exe

C:\WINDOWS\system32\enym.bat

C:\WINDOWS\system32\gyblp.exe

C:\WINDOWS\system32\nvsvc86.exe

C:\WINDOWS\tamer.bat

.

((((((((((((((((((((((((( Files Created from 2007-08-28 to 2007-09-29 )))))))))))))))))))))))))))))))

.

2007-09-29 13:06

2007-09-29 13:05

2007-09-26 21:35

2007-09-26 21:31

2007-09-25 20:53 51,200 --a------ C:\WINDOWS\NirCmd.exe

2007-09-24 22:01

2007-09-01 23:16

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2007-09-22 19:25 --------- d-------- C:\DOCUME~1\Anka\DANEAP~1\Lavasoft

2007-09-19 22:12 --------- d-------- C:\DOCUME~1\Anka\DANEAP~1\Skype

2007-09-17 17:47 --------- d-------- C:\Program Files\eMule

2007-09-11 15:48 133120 --a------ C:\WINDOWS\system32\sfc_os.dll

2007-09-06 12:09 801144 --a------ C:\WINDOWS\system32\aswBoot.exe

2007-09-06 12:05 94416 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys

2007-09-06 12:05 92848 --a–c— C:\WINDOWS\system32\drivers\aswmon.sys

2007-09-06 12:03 23152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys

2007-09-06 12:02 42912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys

2007-09-06 12:00 95608 --a------ C:\WINDOWS\system32\AVASTSS.scr

2007-09-06 12:00 26624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys

2007-09-03 19:35 --------- d-------- C:\Program Files\Common Files\Teleca Shared

2007-08-30 21:13 --------- d-------- C:\Program Files\FTP Commander

2007-08-30 20:57 --------- d-------- C:\Program Files\Express Thumbnail Creator

2007-08-28 18:22 --------- d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\karta

2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\cdm.dll

2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\wuapi.dll

2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\wuauclt.exe

2007-07-30 19:19 43352 --a–c— C:\WINDOWS\system32\wups2.dll

2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\wucltui.dll

2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\wuweb.dll

2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\wuaueng.dll

2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\wups.dll

2007-07-29 15:53 --------- d-------- C:\DOCUME~1\Anka\DANEAP~1\AdobeUM

2007-07-28 15:29 --------- d-------- C:\Program Files\Gadu-Gadu

2006-06-10 15:44 11281024 --a------ C:\Program Files\setuppol.exe

.

((((((((((((((((((((((((((((( snapshot_2007-09-25_205724,43 )))))))))))))))))))))))))))))))))))))))))

.

----a-w 163,328 2007-09-25 05:10:08 C:\WINDOWS\ERUNT\SDFIX\ERDNT.EXE

----a-w 4,370,432 2007-09-29 11:07:02 C:\WINDOWS\ERUNT\SDFIX\Users\00000001\NTUSER.DAT

----a-w 159,744 2007-09-29 11:07:02 C:\WINDOWS\ERUNT\SDFIX\Users\00000002\UsrClass.dat

----a-w 163,328 2007-09-25 05:10:08 C:\WINDOWS\ERUNT\SDFIX_First_Run\ERDNT.EXE

----a-w 4,370,432 2007-09-29 11:06:54 C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\00000001\NTUSER.DAT

----a-w 159,744 2007-09-29 11:06:54 C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\00000002\UsrClass.dat

-c–a-w 42,496 2001-10-26 17:29:54 C:\WINDOWS\system32\ftp.exe

-c–a-w 16,896 2001-10-26 17:30:02 C:\WINDOWS\system32\tftp.exe

----a-w 262,144 2007-09-29 11:16:14 C:\WINDOWS\system32\config\systemprofile\ntuser.dat

-c–a-w 32,768 2007-09-28 12:16:56 C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat

-c–a-w 32,768 2007-09-28 12:16:56 C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\index.dat

-c–a-w 196,608 2007-09-28 12:16:56 C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat

----a-w 76,288 2007-09-28 12:32:11 C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Temporary Internet Files\Content.IE5\DMOE2LO1\f[2].exe

-c–a-w 42,496 2001-10-26 17:29:54 C:\WINDOWS\system32\dllcache\ftp.exe

-c–a-w 16,896 2001-10-26 17:30:02 C:\WINDOWS\system32\dllcache\tftp.exe

----atw 16,384 2007-09-29 13:07:05 C:\WINDOWS\Temp\Perflib_Perfdata_520.dat

----atw 16,384 2007-09-29 13:07:15 C:\WINDOWS\Temp\Perflib_Perfdata_674.dat

.

-c–a-w 42,496 2007-09-25 18:48:38 C:\WINDOWS\system32\ftp.exe

-c–a-w 16,896 2007-09-25 18:48:38 C:\WINDOWS\system32\tftp.exe

----a-w 262,144 2007-09-25 18:54:01 C:\WINDOWS\system32\config\systemprofile\ntuser.dat

-c–a-w 32,768 2007-09-25 16:23:31 C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat

-c–a-w 32,768 2007-09-25 16:23:31 C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\index.dat

-c–a-w 196,608 2007-09-25 16:23:31 C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat

-c–a-w 42,496 2007-09-25 18:48:38 C:\WINDOWS\system32\dllcache\ftp.exe

-c–a-w 16,896 2007-09-25 18:48:38 C:\WINDOWS\system32\dllcache\tftp.exe

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

“NvCplDaemon”=“C:\WINDOWS\system32\NvCpl.dll” [2005-12-10 04:06]

“nwiz”=“nwiz.exe” [2005-12-10 04:06 C:\WINDOWS\system32\nwiz.exe]

“DiskeeperSystray”=“C:\Program Files\Executive Software\Diskeeper\DkIcon.exe” [2004-12-22 00:29]

“NvMediaCenter”=“C:\WINDOWS\system32\NvMcTray.dll” [2005-12-10 04:06]

“QuickTime Task”=“C:\Program Files\QuickTime\qttask.exe” [2006-05-30 12:35]

“avast!”=“C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe” [2007-09-06 12:06]

“SunJavaUpdateSched”=“C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe” [2007-03-14 03:43]

“WinampAgent”=“C:\Program Files\Winamp\winampa.exe” [2007-05-15 00:22]

“Adobe Photo Downloader”=“C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe” []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

“CTFMON.EXE”=“C:\WINDOWS\System32\ctfmon.exe” [2001-10-26 19:29]

“Komunikator”=“C:\Program Files\Tlen.pl\tlen.exe” []

C:\DOCUME~1\ALLUSE~1\MENUST~1\Programy\AUTOST~1\

Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 11:01:04]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]

“C:\Program Files\Messenger\msmsgs.exe” /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

C:\WINDOWS\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]

C:\Program Files\Winamp\winampa.exe

R3 PAC207;SoC PC-Camer@;C:\WINDOWS\System32\DRIVERS\pfc027.sys

S3 AME;PC Camera(6029 CIF);C:\WINDOWS\System32\DRIVERS\pfc027.sys

S3 k510bus;Sony Ericsson K510 Driver driver (WDM);C:\WINDOWS\System32\DRIVERS\k510bus.sys

S3 k510mdfl;Sony Ericsson K510 USB WMC Modem Filter;C:\WINDOWS\System32\DRIVERS\k510mdfl.sys

S3 k510mdm;Sony Ericsson K510 USB WMC Modem Driver;C:\WINDOWS\System32\DRIVERS\k510mdm.sys

S3 k510mgmt;Sony Ericsson K510 USB WMC Device Management Drivers (WDM);C:\WINDOWS\System32\DRIVERS\k510mgmt.sys

S3 k510obex;Sony Ericsson K510 USB WMC OBEX Interface;C:\WINDOWS\System32\DRIVERS\k510obex.sys

.

**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2007-09-29 15:17:01

Windows 5.1.2600 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully

hidden files: 0

**************************************************************************

.

Completion time: 2007-09-29 15:17:36

C:\ComboFix-quarantined-files.txt … 2007-09-29 15:17

C:\ComboFix2.txt … 2007-09-29 13:18

C:\ComboFix3.txt … 2007-09-25 20:57

.

— E O F —

teraz mam zrobic restart i ponownie loga z Combo?? Złączono Posta: 29.09.2007 (Sob) 15:26 ComboFix 07-09-21.2 - “Anka” 2007-09-29 15:23:22.4 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.0.1250.48.1045.18.44 [GMT 2:00] . ((((((((((((((((((((((((( Files Created from 2007-08-28 to 2007-09-29 ))))))))))))))))))))))))))))))) . 2007-09-29 13:06 2007-09-29 13:05 2007-09-29 13:05 2007-09-29 13:05 2007-09-29 13:05 2007-09-29 13:05 2007-09-29 13:05 2007-09-29 13:05 2007-09-26 21:35 2007-09-26 21:31 2007-09-25 20:53 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-09-24 22:01 2007-09-01 23:16 . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-09-22 19:25 --------- d-------- C:\DOCUME~1\Anka\DANEAP~1\Lavasoft 2007-09-19 22:12 --------- d-------- C:\DOCUME~1\Anka\DANEAP~1\Skype 2007-09-17 17:47 --------- d-------- C:\Program Files\eMule 2007-09-06 12:05 94416 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys 2007-09-06 12:05 92848 --a–c— C:\WINDOWS\system32\drivers\aswmon.sys 2007-09-06 12:03 23152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys 2007-09-06 12:02 42912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys 2007-09-06 12:00 26624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys 2007-09-03 19:35 --------- d-------- C:\Program Files\Common Files\Teleca Shared 2007-08-30 21:13 --------- d-------- C:\Program Files\FTP Commander 2007-08-30 20:57 --------- d-------- C:\Program Files\Express Thumbnail Creator 2007-08-28 18:22 --------- d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\karta 2007-07-29 15:53 --------- d-------- C:\DOCUME~1\Anka\DANEAP~1\AdobeUM 2007-07-28 15:29 --------- d-------- C:\Program Files\Gadu-Gadu 2006-06-10 15:44 11281024 --a------ C:\Program Files\setuppol.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “NvCplDaemon”=“C:\WINDOWS\system32\NvCpl.dll” [2005-12-10 04:06] “nwiz”=“nwiz.exe” [2005-12-10 04:06 C:\WINDOWS\system32\nwiz.exe] “DiskeeperSystray”=“C:\Program Files\Executive Software\Diskeeper\DkIcon.exe” [2004-12-22 00:29] “NvMediaCenter”=“C:\WINDOWS\system32\NvMcTray.dll” [2005-12-10 04:06] “QuickTime Task”=“C:\Program Files\QuickTime\qttask.exe” [2006-05-30 12:35] “avast!”=“C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe” [2007-09-06 12:06] “SunJavaUpdateSched”=“C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe” [2007-03-14 03:43] “WinampAgent”=“C:\Program Files\Winamp\winampa.exe” [2007-05-15 00:22] “Adobe Photo Downloader”=“C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe” [] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “CTFMON.EXE”=“C:\WINDOWS\System32\ctfmon.exe” [2001-10-26 19:29] “Komunikator”=“C:\Program Files\Tlen.pl\tlen.exe” [] C:\DOCUME~1\ALLUSE~1\MENUST~1\Programy\AUTOST~1\ Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 11:01:04] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] C:\Program Files\Winamp\winampa.exe R3 PAC207;SoC PC-Camer@;C:\WINDOWS\System32\DRIVERS\pfc027.sys S3 AME;PC Camera(6029 CIF);C:\WINDOWS\System32\DRIVERS\pfc027.sys S3 k510bus;Sony Ericsson K510 Driver driver (WDM);C:\WINDOWS\System32\DRIVERS\k510bus.sys S3 k510mdfl;Sony Ericsson K510 USB WMC Modem Filter;C:\WINDOWS\System32\DRIVERS\k510mdfl.sys S3 k510mdm;Sony Ericsson K510 USB WMC Modem Driver;C:\WINDOWS\System32\DRIVERS\k510mdm.sys S3 k510mgmt;Sony Ericsson K510 USB WMC Device Management Drivers (WDM);C:\WINDOWS\System32\DRIVERS\k510mgmt.sys S3 k510obex;Sony Ericsson K510 USB WMC OBEX Interface;C:\WINDOWS\System32\DRIVERS\k510obex.sys . ************************************************************************** catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-09-29 15:25:05 Windows 5.1.2600 NTFS scanning hidden processes … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-09-29 15:25:53 C:\ComboFix-quarantined-files.txt … 2007-09-29 15:17 C:\ComboFix2.txt … 2007-09-29 15:17 C:\ComboFix3.txt … 2007-09-29 13:18 . — E O F —

jessica · 29 Wrzesień 2007 13:26

Już jest czysto.

ComboFix swoje zadanie wykonał w 100% - usunął, co miał usunąć (patrz, co usunął: sekcja “Other Deletions” w logu).

Czy sytuacja poprawiła się?

jessi

Faryen · 7 Październik 2007 10:46

Nadal avast wynajduje mi pasożyty i trojany… ;/ a myslalam ze to juz koniec…

Złączono Posta : 07.10.2007 (Nie) 14:15

co teraz mam zrobic?? help

jessica · 7 Październik 2007 13:26

W takim razie trzeba zaczynać wszystko od początku:

log z Hijacka
log z ComboFixa
raport z SDFixa

jessi

Faryen · 11 Październik 2007 20:46

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 22:46:17, on 2007-10-11

Platform: Windows XP (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Executive Software\Diskeeper\DkService.exe

C:\WINDOWS\LBTSERV.EXE

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\System32\PAStiSvc.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\WINDOWS\System32\wbem\wmiapsrv.exe

C:\WINDOWS\Explorer.exe

C:\Program Files\QuickTime\qttask.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

C:\Program Files\Winamp\winampa.exe

C:\WINDOWS\System32\ctfmon.exe

C:\WINDOWS\System32\wing32.exe

C:\WINDOWS\System32\nvsvc86.exe

C:\Program Files\internet explorer\iexplore.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

C:\Program Files\internet explorer\iexplore.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotinfolink.com

F2 - REG:system.ini: Shell=Explorer.exe %WINDIR%\LBTSERV.EXE

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - e:\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx

O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM…\Run: [nwiz] nwiz.exe /install

O4 - HKLM…\Run: [DiskeeperSystray] “C:\Program Files\Executive Software\Diskeeper\DkIcon.exe”

O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM…\Run: [QuickTime Task] “C:\Program Files\QuickTime\qttask.exe” -atboottime

O4 - HKLM…\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM…\Run: [sunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe”

O4 - HKLM…\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe

O4 - HKLM…\Run: [Adobe Photo Downloader] “C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe”

O4 - HKLM…\Run: [intec Service Drivers] C:\WINDOWS\System32\wing32.exe

O4 - HKLM…\Run: [Network Security XP] C:\WINDOWS\System32\nvsvc86.exe

O4 - HKCU…\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe

O4 - HKCU…\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe

O4 - HKCU…\Run: [intec Service Drivers] C:\WINDOWS\System32\wing32.exe

O4 - HKCU…\Run: [Network Security XP] C:\WINDOWS\System32\nvsvc86.exe

O4 - HKUS\S-1-5-19…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘?’)

O4 - HKUS\S-1-5-20…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘?’)

O4 - HKUS\S-1-5-21-1078081533-1078145449-1060284298-1003…\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User ‘?’)

O4 - HKUS\S-1-5-21-1078081533-1078145449-1060284298-1003…\Run: [Network Security XP] C:\WINDOWS\System32\nvsvc86.exe (User ‘?’)

O4 - HKUS\S-1-5-18…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘?’)

O4 - HKUS.DEFAULT…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘Default user’)

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O9 - Extra ‘Tools’ menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Skype\Plugin Manager\Skype4COM.dll

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Logitech Inc - Unknown owner - C:\WINDOWS\LBTSERV.EXE

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe

–

End of file - 5888 bytes

Złączono Posta: 11.10.2007 (Czw) 22:46 Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:46:17, on 2007-10-11 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Executive Software\Diskeeper\DkService.exe C:\WINDOWS\LBTSERV.EXE C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\PAStiSvc.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\WINDOWS\System32\wbem\wmiapsrv.exe C:\WINDOWS\Explorer.exe C:\Program Files\QuickTime\qttask.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe C:\Program Files\Winamp\winampa.exe C:\WINDOWS\System32\ctfmon.exe C:\WINDOWS\System32\wing32.exe C:\WINDOWS\System32\nvsvc86.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\Program Files\internet explorer\iexplore.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotinfolink.com F2 - REG:system.ini: Shell=Explorer.exe %WINDIR%\LBTSERV.EXE O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - e:\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM…\Run: [nwiz] nwiz.exe /install O4 - HKLM…\Run: [DiskeeperSystray] “C:\Program Files\Executive Software\Diskeeper\DkIcon.exe” O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM…\Run: [QuickTime Task] “C:\Program Files\QuickTime\qttask.exe” -atboottime O4 - HKLM…\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM…\Run: [sunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe” O4 - HKLM…\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM…\Run: [Adobe Photo Downloader] “C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe” O4 - HKLM…\Run: [intec Service Drivers] C:\WINDOWS\System32\wing32.exe O4 - HKLM…\Run: [Network Security XP] C:\WINDOWS\System32\nvsvc86.exe O4 - HKCU…\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU…\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe O4 - HKCU…\Run: [intec Service Drivers] C:\WINDOWS\System32\wing32.exe O4 - HKCU…\Run: [Network Security XP] C:\WINDOWS\System32\nvsvc86.exe O4 - HKUS\S-1-5-19…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘?’) O4 - HKUS\S-1-5-20…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘?’) O4 - HKUS\S-1-5-21-1078081533-1078145449-1060284298-1003…\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User ‘?’) O4 - HKUS\S-1-5-21-1078081533-1078145449-1060284298-1003…\Run: [Network Security XP] C:\WINDOWS\System32\nvsvc86.exe (User ‘?’) O4 - HKUS\S-1-5-18…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘?’) O4 - HKUS.DEFAULT…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘Default user’) O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra ‘Tools’ menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Skype\Plugin Manager\Skype4COM.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Logitech Inc - Unknown owner - C:\WINDOWS\LBTSERV.EXE O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe – End of file - 5888 bytes

Gutek · 11 Październik 2007 22:49

Uwaga: Jak wklejasz loga to obejmuj go znacznikiem (tagiem) CODE lub QUOTE

Pozdrawiam Gutek2222

Pobierz The Avenger. Wypakuj => uruchom => zaznacz opcję Input script manually => kliknij w taką lupkę => w okienku, które się otworzy wklej:

kliknij klawisz Done => teraz kliknij na zielone światełko => powinna pojawić się pewna informacja i kliknij OK (teraz restart).

Nowe logi Combo i SDFix

Faryen · 12 Październik 2007 18:44

Logfile of The Avenger version 1, by Swandog46

Running from registry key:

\Registry\Machine\System\CurrentControlSet\Services\yueokosh

*******************

Script file located at: ??\C:\Documents and Settings\mgllxldc.txt

Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

File C:\infs.exe deleted successfully.

File C:\m9r2h2z5l7v8.exe not found!

Deletion of file C:\m9r2h2z5l7v8.exe failed!

Could not process line:

C:\m9r2h2z5l7v8.exe

Status: 0xc0000034

File C:\WINDOWS\system32\nvsvc86.exe deleted successfully.

File C:\WINDOWS\system32\ftpupd.exe not found!

Deletion of file C:\WINDOWS\system32\ftpupd.exe failed!

Could not process line:

C:\WINDOWS\system32\ftpupd.exe

Status: 0xc0000034

File C:\WINDOWS\system32\wing32.exe deleted successfully.

Completed script processing.

*******************

Finished! Terminate.

jessica · 13 Październik 2007 10:50

Czy w Trybie Awaryjnym też jest tak samo?

Zresztą, nie widzę bezpośredniego związku z usuwaniami - może to tylko przestawiły się jakieś ustawienia Pulpitu?

Przyznam, że nie wiem, czemu SDFix uważa te pliki za “dummy”?

jessi