Ciągłe komunikaty o trojanach

qbans-88 · 1 Grudzień 2007 09:20

Witam. Ostatnio ciągle Antyvirus pokazuje komunikaty o trojanach ale nie może ich usunąć. Jaki jest dobry program do usuwania trojanów?

logi:

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:07, on 2007-12-01 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16544) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\PC Tools Firewall Plus\FWService.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe C:\Program Files\AOL\Active Virus Shield\avp.exe C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\AOL\Active Virus Shield\avp.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\WINDOWS\system32\MsPMSPSv.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Mozilla Firefox 3 Beta 1\firefox.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = L1cza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O2 - BHO: SafeIE Utility - {B5D4581D-ED6A-4905-A267-25BAF7BE79C1} - C:\WINDOWS\system32\safeie.dll O4 - HKLM…\Run: [soundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe O4 - HKLM…\Run: [Logitech Hardware Abstraction Layer] “C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE” O4 - HKLM…\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM…\Run: [00PCTFW] “C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe” -s O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM…\Run: [aol] “C:\Program Files\AOL\Active Virus Shield\avp.exe” O4 - HKLM…\Run: [iSUSPM] “C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe” -scheduler O4 - HKCU…\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘USŁUGA LOKALNA’) O4 - HKUS\S-1-5-20…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘USŁUGA SIECIOWA’) O4 - HKUS\S-1-5-21-448539723-606747145-1801674531-1004…\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User ‘?’) O4 - HKUS\S-1-5-18…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SYSTEM’) O4 - HKUS.DEFAULT…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘Default user’) O8 - Extra context menu item: &Download all by WellGet - C:\Program Files\WellGet\nxall.htm O8 - Extra context menu item: &Ściągnij wszystko za pomocą WellGeta - C:\Program Files\WellGet\nxall.htm O8 - Extra context menu item: Download by &WellGet - C:\Program Files\WellGet\nxcatch.htm O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Ściągnij za pomocą &WellGeta - C:\Program Files\WellGet\nxcatch.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing) O9 - Extra ‘Tools’ menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing) O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} (DownloadManager Control) - http://dlmanager.akamaitools.com.edgesu … .0.6.0.cab O16 - DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} (ijjiPlugin2 Class) - http://gamedownload.ijjimax.com/gamedow … n11USA.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda … 9407407263 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup … 2450983687 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Active Virus Shield (AVP) - AOL - C:\Program Files\AOL\Active Virus Shield\avp.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - C:\Program Files\PC Tools Firewall Plus\FWService.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe – End of file - 6750 bytes

Silent Runners:

http://www.wklej.org/id/5b2a0a2636

z góry dziękuje

daniel105 · 1 Grudzień 2007 10:58

dobry jest spybot lub Ad-Aware mozesz je znaleść na tej stronie w dziale bezpieczenstwo, programy antyspyware

qbans-88 · 1 Grudzień 2007 17:55

ad-Adware nic nie wykrył. A logi są ok?

Leon1 · 1 Grudzień 2007 17:59

Wpisy

usuń HijackThisem >> Fix checked

pobierz Combofix http://www.searchengines.pl/index.php?showtopic=86306&st=0&p=395642entry395642

przeskanuj system daj log na forum

qbans-88 · 2 Grudzień 2007 17:24

ComboFix 07-12-02.5 - Pawel 2007-12-02 18:02:29.1 - FAT32x86 Microsoft Windows XP Professional 5.1.2600.2.1250.48.1045.18.708 [GMT 1:00] Running from: C:\Documents and Settings\Pawel\Pulpit\ComboFix.exe * Created a new restore point . ((((((((((((((((((((((((( Files Created from 2007-11-02 to 2007-12-02 ))))))))))))))))))))))))))))))) . 2007-12-01 10:32 . 2007-12-01 10:32 2007-11-30 15:38 . 2007-11-30 15:38 2007-11-28 20:08 . 2007-11-28 20:08 0 --a------ C:\TP142341.$$$ 2007-11-28 15:48 . 2007-11-28 15:49 38 --a------ C:\WINDOWS\avisplitter.INI 2007-11-28 15:47 . 2007-11-28 15:47 2007-11-28 15:33 . 2007-11-28 15:33 2007-11-28 15:00 . 2007-11-28 15:00 0 --a------ C:\TP0F02F2.$$$ 2007-11-28 14:51 . 2007-11-28 14:51 0 --a------ C:\TP0EDB9A.$$$ 2007-11-25 12:39 . 2007-11-25 12:39 0 --a------ C:\TP0CA7E3.$$$ 2007-11-25 12:34 . 2007-11-25 12:34 0 --a------ C:\TP0C9182.$$$ 2007-11-25 12:25 . 2007-11-25 12:25 0 --a------ C:\TP0C6C47.$$$ 2007-11-25 12:05 . 2007-11-25 12:05 0 --a------ C:\TP0C17C2.$$$ 2007-11-25 12:04 . 2007-11-25 12:05 2007-11-25 12:04 . 1999-03-23 09:12 299,520 --a------ C:\WINDOWS\uninst.exe 2007-11-20 12:16 . 2007-11-20 12:16 2007-11-17 10:25 . 2007-11-17 10:25 2007-11-16 08:36 . 2007-11-16 08:36 2007-11-16 08:36 . 2007-11-16 08:36 32 --a------ C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat 2007-11-16 08:35 . 2007-11-16 08:36 2007-11-13 13:46 . 2007-11-13 13:46 2007-11-08 13:33 . 2007-11-08 13:33 . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-01 20:02 49,004 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx 2007-12-01 20:02 318,240 --sha-w C:\WINDOWS\system32\drivers\fidbox2.dat 2007-12-01 20:02 31,616 --sha-w C:\WINDOWS\system32\drivers\fidbox2.idx 2007-12-01 20:02 3,603,744 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat 2007-10-31 17:58 --------- d-----w C:\Program Files\Panda Security 2007-10-28 12:33 --------- d-----w C:\Program Files\K-Lite Codec Pack 2007-10-28 12:03 --------- d-----w C:\Program Files\MarBit 2007-10-25 16:44 8,488,960 ----a-w C:\WINDOWS\system32\dllcache\shell32.dll 2007-10-21 12:50 43,520 ----a-w C:\WINDOWS\system32\CmdLineExt03.dll 2007-10-17 07:02 --------- d-----w C:\Program Files\Common Files\DVDVideoSoft 2007-10-16 10:32 --------- d-----w C:\Documents and Settings\Pawel\Dane aplikacji\Media Player Classic 2007-09-28 17:07 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll 2007-09-28 17:05 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll 2007-09-28 17:05 739,840 ----a-w C:\WINDOWS\system32\divx.dll 2007-09-19 12:51 170 ----a-w C:\combo.vbs 2007-09-11 10:17 81,920 ----a-w C:\WINDOWS\system32\frapsvid.dll 2007-09-05 16:57 73,216 ----a-w C:\WINDOWS\ST6UNST.EXE 2007-09-05 16:57 249,856 ------w C:\WINDOWS\Setup1.exe 2007-09-04 17:56 164,352 ----a-w C:\WINDOWS\system32\unrar.dll 2006-05-14 11:39 18,088 ----a-w C:\Documents and Settings\Pawel\Dane aplikacji\GDIPFONTCACHEV1.DAT 2003-07-17 02:26 448,640 ----a-w C:\WINDOWS\inf\EL2K_N64.sys 2003-07-17 02:22 147,328 ----a-w C:\WINDOWS\inf\EL2K_XP.sys 2003-06-03 07:47 147,328 ----a-w C:\WINDOWS\inf\EL2K_2K.sys . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “ctfmon.exe”=“C:\WINDOWS\system32\ctfmon.exe” [2004-08-03 22:44] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “SoundMAXPnP”=“C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe” [2003-05-29 16:28] “Logitech Hardware Abstraction Layer”=“C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE” [2006-07-19 12:03] “Kernel and Hardware Abstraction Layer”=“KHALMNPR.EXE” [2006-07-19 12:03 C:\WINDOWS\KHALMNPR.Exe] “00PCTFW”=“C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe” [2007-04-28 08:13] “NvCplDaemon”=“RUNDLL32.exe” [2004-08-03 22:44 C:\WINDOWS\system32\rundll32.exe] “aol”=“C:\Program Files\AOL\Active Virus Shield\avp.exe” [2006-05-30 11:13] “ISUSPM”=“C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe” [2006-05-16 11:58] [HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] “CTFMON.EXE”=“C:\WINDOWS\system32\CTFMON.EXE” [2004-08-03 22:44] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Last.fm Helper.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Last.fm Helper.lnk backup=C:\WINDOWS\pss\Last.fm Helper.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Logitech SetPoint.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Logitech SetPoint.lnk backup=C:\WINDOWS\pss\Logitech SetPoint.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Microsoft Office.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Pawel^Menu Start^Programy^Autostart^UniSpiker-2.6.lnk] path=C:\Documents and Settings\Pawel\Menu Start\Programy\Autostart\UniSpiker-2.6.lnk backup=C:\WINDOWS\pss\UniSpiker-2.6.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DiskeeperSystray] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD] 2005-07-08 17:25 1397760 --------- C:\Program Files\Ahead\InCD\InCD.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LGODDFU] C:\Program Files\lg_fwupdate\fwupdate.exe blrun [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] 2006-01-12 15:40 155648 --a------ C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] nwiz.exe /install [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl] 2004-11-02 20:24 32768 --a------ C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkypeRec] C:\Program Files\SkypeRec\SkypeRecorder.exe /s [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite] C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe /startoptions [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMax] C:\Program Files\Analog Devices\SoundMAX\smax4.exe /tray [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] 2005-11-10 13:03 36975 --a------ C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VS Online] D:\VS Online\VSOnline.exe /tray [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\zBrowser Launcher] 2002-05-29 01:59 520192 --a------ C:\Program Files\Logitech\iTouch\iTouch.exe [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] “DAEMON Tools”=“C:\Program Files\DAEMON Tools\daemon.exe” -lang 1033 “SoundMAX”=“C:\Program Files\Analog Devices\SoundMAX\Smax4.exe” /tray “nwiz”=nwiz.exe /install “SunJavaUpdateSched”=“C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe” “ISUSPM Startup”=“C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe” -startup “ISUSScheduler”=“C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe” -start “ISUSPM”=“C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe” -scheduler R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);C:\WINDOWS\system32\drivers\sfdrv01a.sys R2 LBeepKE;LBeepKE;C:\WINDOWS\system32\Drivers\LBeepKE.sys R2 UxTuneUp;TuneUp Design Expansion;C:\WINDOWS\System32\svchost.exe -k netsvcs S3 cportclm;cportclm;??\C:\DOCUME~1\Pawel\USTAWI~1\Temp\cportclm.sys S3 ids00026;ids00026;??\C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Anti-Virus Personal\5.0\bases\ids00026.sys S3 ids0005c;ids0005c;??\C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Anti-Virus Personal\5.0\bases\ids0005c.sys S3 ids00118;ids00118;??\C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Anti-Virus Personal\5.0\bases\ids00118.sys S3 k510bus;Sony Ericsson K510 Driver driver (WDM);C:\WINDOWS\system32\DRIVERS\k510bus.sys S3 k510mdfl;Sony Ericsson K510 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\k510mdfl.sys S3 k510mdm;Sony Ericsson K510 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\k510mdm.sys S3 k510mgmt;Sony Ericsson K510 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\k510mgmt.sys S3 k510obex;Sony Ericsson K510 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\k510obex.sys S3 klstm;klstm;??\C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Anti-Virus Personal\5.0\bases\klstm.sys S3 StMp3Rec;Player Recovery Device Control Driver;C:\WINDOWS\system32\Drivers\StMp3Rec.sys HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{dc39e2ce-7ca6-11dc-82e3-000000000000}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe \Shell\Open(&0)\command - H:\Recycled\ctfmon.exe *Newly Created Service* - CATCHME *Newly Created Service* - SR . Contents of the ‘Scheduled Tasks’ folder “2007-11-16 16:15:02 C:\WINDOWS\Tasks\1-Click Maintenance.job” - C:\Program Files\TuneUp Utilities 2006\SystemOptimizer.exe . ************************************************************************** catchme 0.3.1318 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-02 18:04:12 Windows 5.1.2600 Dodatek Service Pack 2 FAT NTAPI scanning hidden processes … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-12-02 18:04:44 C:\ComboFix-quarantined-files.txt … 2007-07-03 11:18 . — E O F —

Gutek · 2 Grudzień 2007 17:38

Otwórz Notatnik i wklej w nim to:

Plik >>> Zapisz jako >>> Zmień rozszerzenie z TXT na Wszystkie pliki >>> Zapisz pod nazwą FIX.REG >>> kliknij dwa razy na utworzony plik FIX.REG i potwierdź dodanie do rejestru >>> restart.