Antywir wykrywa exe gry ;/

giga89 · 31 Lipiec 2007 11:58

Logfile of HijackThis v1.99.1 Scan saved at 13:57:08, on 2007-07-31 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe C:\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.3.19.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM…\Run: [avgnt] “C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe” /min O4 - HKLM…\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM…\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM…\Run: [sunJavaUpdateSched] “C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe” O4 - HKLM…\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM…\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM…\Run: [Adobe Photo Downloader] “C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe” O4 - HKCU…\Run: [msnmsgr] “C:\Program Files\MSN Messenger\msnmsgr.exe” /background O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O17 - HKLM\System\CCS\Services\Tcpip…{3562FB6E-81EE-4F95-B07A-0CBEB6F0ABF1}: NameServer = 194.204.159.1 217.98.63.164 O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - “C:\PROGRA~1\MSNMES~1\msgrapp.dll” (file missing) O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe

adam9870 · 31 Lipiec 2007 12:55

Log czysty.

Czy plik gry wykrywany jako zainfekowany przez program antyvirusowy pochodzi z legalnego źródła?

Pliku jakiej gry konkretnie dotyczą pojawiające sie alerty?

Przeskanuj system skanerem on-line ewido i wklej raport plus log z ComboFix.

giga89 · 31 Lipiec 2007 19:27

gierka to netsoccer i gralem w nia juz z rok i dopiero teraz avira cos pokazuje ;/

Gutek · 31 Lipiec 2007 19:32

zrób to o co prosił adam9870

giga89 · 31 Lipiec 2007 20:17

__________________________________________________ ewido anti-spyware online scanner http://www.ewido.net __________________________________________________ Name: TrackingCookie.247realmedia Path: C:\Documents and Settings\Emosik\Cookies\emosik@247realmedia[1].txt Risk: Medium Name: TrackingCookie.2o7 Path: C:\Documents and Settings\Emosik\Cookies\emosik@2o7[1].txt Risk: Medium Name: TrackingCookie.Yieldmanager Path: C:\Documents and Settings\Emosik\Cookies\emosik@ad.yieldmanager[1].txt Risk: Medium Name: TrackingCookie.Adbrite Path: C:\Documents and Settings\Emosik\Cookies\emosik@adbrite[2].txt Risk: Medium Name: TrackingCookie.Adbrite Path: C:\Documents and Settings\Emosik\Cookies\emosik@ads.adbrite[1].txt Risk: Medium Name: TrackingCookie.Atdmt Path: C:\Documents and Settings\Emosik\Cookies\emosik@atdmt[2].txt Risk: Medium Name: TrackingCookie.Msn Path: C:\Documents and Settings\Emosik\Cookies\emosik@auto.search.msn[1].txt Risk: Medium Name: TrackingCookie.Casalemedia Path: C:\Documents and Settings\Emosik\Cookies\emosik@casalemedia[2].txt Risk: Medium Name: TrackingCookie.Sextracker Path: C:\Documents and Settings\Emosik\Cookies\emosik@counter13.sextracker[1].txt Risk: Medium Name: TrackingCookie.Sextracker Path: C:\Documents and Settings\Emosik\Cookies\emosik@counter14.sextracker[1].txt Risk: Medium Name: TrackingCookie.Sextracker Path: C:\Documents and Settings\Emosik\Cookies\emosik@counter16.sextracker[1].txt Risk: Medium Name: TrackingCookie.Sextracker Path: C:\Documents and Settings\Emosik\Cookies\emosik@counter5.sextracker[1].txt Risk: Medium Name: TrackingCookie.Sextracker Path: C:\Documents and Settings\Emosik\Cookies\emosik@counter7.sextracker[1].txt Risk: Medium Name: TrackingCookie.Sextracker Path: C:\Documents and Settings\Emosik\Cookies\emosik@counter8.sextracker[2].txt Risk: Medium Name: TrackingCookie.Sexcounter Path: C:\Documents and Settings\Emosik\Cookies\emosik@cs.sexcounter[2].txt Risk: Medium Name: TrackingCookie.Doubleclick Path: C:\Documents and Settings\Emosik\Cookies\emosik@doubleclick[1].txt Risk: Medium Name: TrackingCookie.Ru4 Path: C:\Documents and Settings\Emosik\Cookies\emosik@edge.ru4[2].txt Risk: Medium Name: TrackingCookie.Hitbox Path: C:\Documents and Settings\Emosik\Cookies\emosik@ehg-globalgamingleague.hitbox[2].txt Risk: Medium Name: TrackingCookie.Hitbox Path: C:\Documents and Settings\Emosik\Cookies\emosik@hitbox[2].txt Risk: Medium Name: TrackingCookie.Msn Path: C:\Documents and Settings\Emosik\Cookies\emosik@ie.search.msn[1].txt Risk: Medium Name: TrackingCookie.2o7 Path: C:\Documents and Settings\Emosik\Cookies\emosik@metacafe.122.2o7[1].txt Risk: Medium Name: TrackingCookie.2o7 Path: C:\Documents and Settings\Emosik\Cookies\emosik@msnportal.112.2o7[1].txt Risk: Medium Name: TrackingCookie.Paycounter Path: C:\Documents and Settings\Emosik\Cookies\emosik@paycounter[1].txt Risk: Medium Name: TrackingCookie.Questionmarket Path: C:\Documents and Settings\Emosik\Cookies\emosik@questionmarket[2].txt Risk: Medium Name: TrackingCookie.Revenue Path: C:\Documents and Settings\Emosik\Cookies\emosik@revenue[2].txt Risk: Medium Name: TrackingCookie.Live Path: C:\Documents and Settings\Emosik\Cookies\emosik@search.live[1].txt Risk: Medium Name: TrackingCookie.Msn Path: C:\Documents and Settings\Emosik\Cookies\emosik@search.msn[1].txt Risk: Medium Name: TrackingCookie.Information Path: C:\Documents and Settings\Emosik\Cookies\emosik@searchportal.information[1].txt Risk: Medium Name: TrackingCookie.Sexlist Path: C:\Documents and Settings\Emosik\Cookies\emosik@sexlist[2].txt Risk: Medium Name: TrackingCookie.Sextracker Path: C:\Documents and Settings\Emosik\Cookies\emosik@sextracker[1].txt Risk: Medium Name: TrackingCookie.Skype Path: C:\Documents and Settings\Emosik\Cookies\emosik@skype[1].txt Risk: Medium Name: TrackingCookie.Netflame Path: C:\Documents and Settings\Emosik\Cookies\emosik@ssl-hints.netflame[1].txt Risk: Medium Name: TrackingCookie.Statcounter Path: C:\Documents and Settings\Emosik\Cookies\emosik@statcounter[2].txt Risk: Medium Name: TrackingCookie.Webtrendslive Path: C:\Documents and Settings\Emosik\Cookies\emosik@statse.webtrendslive[2].txt Risk: Medium Name: TrackingCookie.Tradedoubler Path: C:\Documents and Settings\Emosik\Cookies\emosik@tradedoubler[1].txt Risk: Medium Name: TrackingCookie.Xxxcounter Path: C:\Documents and Settings\Emosik\Cookies\emosik@xxxcounter[1].txt Risk: Medium Name: TrackingCookie.Zedo Path: C:\Documents and Settings\Emosik\Cookies\emosik@zedo[2].txt Risk: Medium Name: TrackingCookie.Netflame Path: :mozilla.7:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Adbrite Path: :mozilla.40:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Adbrite Path: :mozilla.41:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Adbrite Path: :mozilla.42:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Adbrite Path: :mozilla.43:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Fastclick Path: :mozilla.44:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Fastclick Path: :mozilla.45:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Fastclick Path: :mozilla.46:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Fastclick Path: :mozilla.47:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Tribalfusion Path: :mozilla.48:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Webtrendslive Path: :mozilla.50:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Googleadservices Path: :mozilla.54:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Hitbox Path: :mozilla.58:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Hitbox Path: :mozilla.59:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Hitbox Path: :mozilla.61:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Hitbox Path: :mozilla.62:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Tradedoubler Path: :mozilla.69:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Tradedoubler Path: :mozilla.70:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Tradedoubler Path: :mozilla.74:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Tradedoubler Path: :mozilla.75:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Tradedoubler Path: :mozilla.76:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.2o7 Path: :mozilla.84:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.2o7 Path: :mozilla.85:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Tacoda Path: :mozilla.86:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.2o7 Path: :mozilla.87:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.2o7 Path: :mozilla.88:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.2o7 Path: :mozilla.89:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.2o7 Path: :mozilla.90:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.2o7 Path: :mozilla.91:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.2o7 Path: :mozilla.92:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.2o7 Path: :mozilla.93:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.2o7 Path: :mozilla.94:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Tacoda Path: :mozilla.95:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.2o7 Path: :mozilla.96:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.2o7 Path: :mozilla.97:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Tacoda Path: :mozilla.98:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Tacoda Path: :mozilla.99:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.2o7 Path: :mozilla.100:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.2o7 Path: :mozilla.101:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Advertising Path: :mozilla.102:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Advertising Path: :mozilla.103:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Advertising Path: :mozilla.104:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Advertising Path: :mozilla.105:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Advertising Path: :mozilla.106:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Realmedia Path: :mozilla.107:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Realmedia Path: :mozilla.108:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Realmedia Path: :mozilla.109:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.2o7 Path: :mozilla.122:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Atdmt Path: :mozilla.138:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Doubleclick Path: :mozilla.141:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Statcounter Path: :mozilla.158:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Statcounter Path: :mozilla.159:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Statcounter Path: :mozilla.160:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Statcounter Path: :mozilla.161:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Web-stat Path: :mozilla.169:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Web-stat Path: :mozilla.170:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Web-stat Path: :mozilla.171:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Web-stat Path: :mozilla.172:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Web-stat Path: :mozilla.173:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Web-stat Path: :mozilla.174:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Googleadservices Path: :mozilla.176:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Yieldmanager Path: :mozilla.184:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Yieldmanager Path: :mozilla.187:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Yieldmanager Path: :mozilla.188:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Yieldmanager Path: :mozilla.189:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Yieldmanager Path: :mozilla.190:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Paypal Path: :mozilla.192:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Hitbox Path: :mozilla.207:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Hitbox Path: :mozilla.210:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Casalemedia Path: :mozilla.230:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Casalemedia Path: :mozilla.231:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Casalemedia Path: :mozilla.232:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Casalemedia Path: :mozilla.233:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Casalemedia Path: :mozilla.234:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Casalemedia Path: :mozilla.235:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Com Path: :mozilla.255:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Ru4 Path: :mozilla.270:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Ru4 Path: :mozilla.271:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Ru4 Path: :mozilla.272:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Googleadservices Path: :mozilla.302:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Imrworldwide Path: :mozilla.308:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Imrworldwide Path: :mozilla.309:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Hitbox Path: :mozilla.325:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Hitslink Path: :mozilla.349:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Googleadservices Path: :mozilla.350:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.2o7 Path: :mozilla.351:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Bluestreak Path: :mozilla.362:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Googleadservices Path: :mozilla.399:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Webtrends Path: :mozilla.436:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Connextra Path: :mozilla.461:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Connextra Path: :mozilla.462:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Connextra Path: :mozilla.463:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Connextra Path: :mozilla.464:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Connextra Path: :mozilla.465:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Connextra Path: :mozilla.466:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Connextra Path: :mozilla.467:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.2o7 Path: :mozilla.479:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Real Path: :mozilla.501:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Real Path: :mozilla.502:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Spylog Path: :mozilla.505:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Hotlog Path: :mozilla.510:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Overture Path: :mozilla.514:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Specificclick Path: :mozilla.529:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Specificclick Path: :mozilla.530:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Specificclick Path: :mozilla.531:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Specificclick Path: :mozilla.532:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Yadro Path: :mozilla.538:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Goclick Path: :mozilla.582:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Goclick Path: :mozilla.583:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Information Path: :mozilla.584:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Revenue Path: :mozilla.585:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Dealtime Path: :mozilla.586:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.2o7 Path: :mozilla.587:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Enhance Path: :mozilla.588:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Zedo Path: :mozilla.590:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Zedo Path: :mozilla.591:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Adbrite Path: :mozilla.620:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Sexcounter Path: :mozilla.673:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Sexcounter Path: :mozilla.674:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Bbmedia Path: :mozilla.675:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Skype Path: :mozilla.740:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Ivwbox Path: :mozilla.746:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Adtech Path: :mozilla.748:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Adtech Path: :mozilla.749:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Revsci Path: :mozilla.809:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Revsci Path: :mozilla.810:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Revsci Path: :mozilla.811:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Revsci Path: :mozilla.812:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Kmpads Path: :mozilla.829:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Kmpads Path: :mozilla.830:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Kmpads Path: :mozilla.831:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Trafic Path: :mozilla.857:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Mediaplex Path: :mozilla.876:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Sexlist Path: :mozilla.884:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Sexlist Path: :mozilla.885:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Connextra Path: :mozilla.908:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Connextra Path: :mozilla.909:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Connextra Path: :mozilla.910:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Connextra Path: :mozilla.911:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Connextra Path: :mozilla.912:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium Name: TrackingCookie.Connextra Path: :mozilla.913:C:\Documents and Settings\Emosik\Dane aplikacji\Mozilla\Firefox\Profiles\difqxaop.default\cookies.txt Risk: Medium

ComboFix 07-07-30.2 - “Emosik” 2007-07-31 22:22:58.1 [GMT 2:00] - NTFS Microsoft Windows XP Professional 5.1.2600.0.1250.1.1045.18.Prawda * Created a new restore point ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) C:\DOCUME~1\Emosik\DANEAP~1.\macromedia\Flash Player#SharedObjects\RASXE3FT\www.broadcaster.com C:\DOCUME~1\Emosik\DANEAP~1.\macromedia\Flash Player\macromedia.com\support\flashplayer\sys#www.broadcaster.com C:\DOCUME~1\Emosik\DANEAP~1.\macromedia\Flash Player\macromedia.com\support\flashplayer\sys#www.broadcaster.com\settings.sol ((((((((((((((((((((((((( Files Created from 2007-06-28 to 2007-07-31 ))))))))))))))))))))))))))))))) 2007-07-31 22:22 51,200 --a------ C:\WINDOWS\nircmd.exe 2007-07-24 20:02 2007-07-21 17:43 2007-07-21 17:00 2007-07-17 19:48 2007-07-04 18:30 2007-07-04 18:30 2007-07-04 18:30 2007-07-04 18:30 2007-07-04 18:30 2007-07-03 00:25 2007-07-01 23:06 2007-06-26 21:17 294,912 -ra------ C:\WINDOWS\system32\atiiiexx.dll 2007-06-26 21:17 2007-06-26 21:15 2007-06-26 16:41 2007-06-25 21:43 863,744 --a------ C:\WINDOWS\system32\drivers\ati2mtag.sys 2007-06-25 21:43 81,920 --a------ C:\WINDOWS\system32\ATIDDC.DLL 2007-06-25 21:43 65,536 --a------ C:\WINDOWS\system32\Ati2mdxx.exe 2007-06-25 21:43 6,598,656 --a------ C:\WINDOWS\system32\atioglxx.dll 2007-06-25 21:43 24,064 --a------ C:\WINDOWS\system32\ativcoxx.dll 2007-06-25 21:43 200,704 --a------ C:\WINDOWS\system32\ATIDEMGR.dll 2007-06-25 21:43 17,408 --a------ C:\WINDOWS\system32\atitvo32.dll 2007-06-25 21:43 102,400 --a------ C:\WINDOWS\system32\Oemdspif.dll 2007-06-25 21:35 524,288 --ah----- C:\DOCUME~1\ADMINI~1\NTUSER.DAT 2007-06-25 21:35 2007-06-25 21:35 2007-06-25 21:35 2007-06-25 21:35 2007-06-25 21:35 2007-06-25 21:35 2007-06-25 21:35 2007-06-25 21:09 2007-06-25 16:49 2007-06-22 12:05 2007-06-20 19:25 9,600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys 2007-06-20 19:25 12,160 --a------ C:\WINDOWS\system32\drivers\mouhid.sys (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-07-31 21:28 4000 --a------ C:\ao.dat 2007-07-31 20:11 --------- d-------- C:\DOCUME~1\Emosik\DANEAP~1\teamspeak2 2007-07-29 16:16 2560 --a------ C:\WINDOWS\system32\BitCometRes.dll 2007-07-28 00:04 --------- d-------- C:\Program Files\Winamp 2007-07-23 00:06 --------- d-------- C:\DOCUME~1\Emosik\DANEAP~1\Skype 2007-07-13 18:28 --------- d-------- C:\DOCUME~1\Emosik\DANEAP~1\Tlen.pl 2007-07-10 15:49 --------- d-------- C:\DOCUME~1\Emosik\DANEAP~1\Image Zone Express 2007-06-25 21:27 330 --a------ C:\WINDOWS\system32\drivers\fwdrv.err 2007-06-25 21:23 1100 --a------ C:\WINDOWS\system32\d3d8caps.dat 2007-05-27 17:27 119767 --a------ C:\WINDOWS\hpoins11.dat ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “avgnt”=“C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe” [2007-05-12 18:42] “SoundMan”=“SOUNDMAN.EXE” [2002-09-11 04:57 C:\WINDOWS\SOUNDMAN.EXE] “SunJavaUpdateSched”=“C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe” [2006-12-15 04:23] “HP Software Update”=“C:\Program Files\HP\HP Software Update\HPWuSchd2.exe” [2006-02-19 02:41] “Adobe Photo Downloader”=“C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe” [2005-06-07 00:46] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “msnmsgr”=“C:\Program Files\MSN Messenger\msnmsgr.exe” [2006-01-24 11:37] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ DSLMON.lnk - C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2007-02-16 16:49:28] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Reader Speed Launch.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Reader Synchronizer.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Synchronizer.lnk backup=C:\WINDOWS\pss\Adobe Reader Synchronizer.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^HP Digital Imaging Monitor.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader] “C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BearShare] “C:\Program Files\BearShare\BearShare.exe” /pause [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Komunikator] C:\Program Files\Tlen.pl\tlen.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] “C:\Program Files\MSN Messenger\msnmsgr.exe” /background [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] “C:\Program Files\Skype\Phone\Skype.exe” /nosplash /minimized [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] “wuauserv”=2 (0x2) “Messenger”=2 (0x2) R0 avgntmgr;avgntmgr;C:\WINDOWS\System32\drivers\avgntmgr.sys R1 avgntdd;avgntdd;C:\WINDOWS\System32\DRIVERS\avgntdd.sys R1 fwdrv;Firewall Driver;C:\WINDOWS\System32\drivers\fwdrv.sys R1 khips;Kerio HIPS Driver;C:\WINDOWS\System32\drivers\khips.sys R3 adiusbaw;USB ADSL WAN Adapter;C:\WINDOWS\System32\DRIVERS\adiusbaw.sys R3 ms_mpu401;Sterownik portu MIDI UART Microsoft MPU-401;C:\WINDOWS\System32\drivers\msmpu401.sys S2 ADILOADER;General Purpose USB Driver (adildr.sys);C:\WINDOWS\System32\Drivers\adildr.sys S3 usbscan;Sterownik skanera USB;C:\WINDOWS\System32\DRIVERS\usbscan.sys S3 USBSTOR;Sterownik magazynu masowego USB;C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS ************************************************************************** catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-07-31 22:25:41 Windows 5.1.2600 NTFS scanning hidden processes … C:\WINDOWS\system32\cmd.exe [2824] 0x8176EDA8 scanning hidden registry entries … [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Reinstall\H\xd4\21] “DisplayName”="" “DeviceDesc”="" “ProviderName”="" “MFG”="" “ReinstallString”="" “DeviceInstanceIds”=str(7):"`" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\A\1\5\1c] “Order”=hex:08,00,00,00,02,00,00,00,b8,01,00,00,01,00,00,00,04,00,00,00,8c,… scanning hidden files … scan completed successfully hidden files: 0 ************************************************************************** Completion time: 2007-07-31 22:27:11 C:\ComboFix-quarantined-files.txt … 2007-07-31 22:27 — E O F —

Złączono Posta : 31.07.2007 (Wto) 22:30

czy poprostu zmienic antywirusa ? bo mam avire antyvit ta parasolka i ona raczej jest kiepska… wiec co poradzicie?jakis link konkretny ?

Gutek · 31 Lipiec 2007 21:04

Czyszczenie rejestru:

RegCleaner - http://www.dobreprogramy.pl/index.php?dz=2&t=29&id=177

możesz rejestr przelecieć albo

jv16 PowerTools - http://www.dobreprogramy.pl/index.php?dz=2&t=29&id=509

Opis RegCleaner - http://www.agavk.p9.pl/strony/progra_regcleaner.php

Zobacz - Obsługa jv16 PowerTools