Komputer spowolnił

nasty79 · 12 Listopad 2007 19:48

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 08:48, on 2007-11-12

Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\Ctsvccda.exe

C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe

C:\Program Files\CyberLink\Shared Files\RichVideo.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\Program Files\WinFast\WFTVFM\WFWIZ.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\Nero\Nero 7\InCD\InCD.exe

C:\Program Files\Winamp\winampa.exe

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\WINDOWS\explorer.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://wp.pl/

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O4 - HKLM…\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp

O4 - HKLM…\Run: [WinFast Schedule] C:\Program Files\WinFast\WFTVFM\WFWIZ.exe

O4 - HKLM…\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

O4 - HKLM…\Run: [securDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe

O4 - HKLM…\Run: [inCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe

O4 - HKLM…\Run: [WinampAgent] “C:\Program Files\Winamp\winampa.exe”

O4 - HKCU…\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] “C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe”

O4 - HKCU…\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKCU…\Run: [WinPerfectAutoRun] C:\yenicag\WinPerfectSE\WinPerfect.exe -boot

O4 - HKUS\S-1-5-18…\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User ‘SYSTEM’)

O4 - HKUS.DEFAULT…\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User ‘Default user’)

O4 - Global Startup: Adobe Reader Speed Launch.lnk = ?

O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra ‘Tools’ menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\Ctsvccda.exe

O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe

O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

–

End of file - 4560 bytes

Gutek · 12 Listopad 2007 19:59

Temat wydzielam - jaki masz problem?

Uwaga: Jak wklejasz loga to obejmuj go znacznikiem (tagiem) CODE lub QUOTE

Pozdrawiam Gutek2222

Daj log z ComboFix

nasty79 · 12 Listopad 2007 20:10

ComboFix 07-11-08.1 - oko 2007-11-12 21:08:56.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.599 [GMT 1:00] Running from: C:\Documents and Settings\oko\Ustawienia lokalne\Temporary Internet Files\Content.IE5\91ZCG83M\ComboFix[1].exe . ((((((((((((((((((((((((( Files Created from 2007-10-12 to 2007-11-12 ))))))))))))))))))))))))))))))) . 2007-11-12 20:43 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-11-08 20:56 2007-11-08 20:54 2007-11-08 19:32 2007-11-02 19:59 2007-11-02 14:13 2007-11-02 14:11 2007-11-01 20:57 801,144 --a------ C:\WINDOWS\system32\aswBoot.exe 2007-11-01 20:57 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr 2007-11-01 20:57 94,416 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys 2007-11-01 20:57 92,848 --a------ C:\WINDOWS\system32\drivers\aswmon.sys 2007-11-01 20:57 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys 2007-11-01 20:57 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys 2007-11-01 20:57 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys 2007-11-01 20:56 2007-11-01 18:34 2007-11-01 18:32 2007-11-01 14:35 2007-11-01 12:31 2007-11-01 12:30 2007-11-01 12:30 2007-11-01 12:30 35,365 --a------ C:\WINDOWS\system32\uninstHelixYUV.exe 2007-11-01 12:28 2007-11-01 12:07 2007-11-01 11:44 2007-11-01 11:44 2007-11-01 11:36 2007-10-31 00:00 2007-10-30 23:28 2007-10-30 23:28 2007-10-30 23:28 2007-10-30 23:28 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll 2007-10-30 23:28 153,088 --a------ C:\WINDOWS\system32\UNRAR3.dll 2007-10-30 23:28 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll 2007-10-30 23:28 75,264 --a------ C:\WINDOWS\system32\unacev2.dll 2007-10-30 23:28 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll 2007-10-30 22:39 2007-10-30 22:30 2007-10-30 22:30 2007-10-30 22:17 2007-10-30 18:32 2007-10-30 18:32 626,688 --a------ C:\WINDOWS\system32\msvcr80.dll 2007-10-29 18:44 2007-10-27 17:07 2007-10-27 14:44 2007-10-27 14:44 2007-10-27 14:00 2007-10-23 20:43 2007-10-14 10:48 2007-10-14 10:48 137,216 --a------ C:\WINDOWS\system32\drivers\nmwcd.sys 2007-10-14 10:48 65,536 --a------ C:\WINDOWS\system32\nmwcdcocls.dll 2007-10-14 10:48 12,288 --a------ C:\WINDOWS\system32\drivers\nmwcdcm.sys 2007-10-14 10:48 12,288 --a------ C:\WINDOWS\system32\drivers\nmwcdcj.sys 2007-10-14 10:48 8,320 --a------ C:\WINDOWS\system32\drivers\nmwcdc.sys . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-12 18:50 --------- d-----w C:\Documents and Settings\oko\Dane aplikacji\Tlen.pl 2007-11-12 17:02 --------- d-----w C:\Program Files\NAPI-PROJEKT 2007-11-11 16:07 --------- d-----w C:\Documents and Settings\oko\Dane aplikacji\Skype 2007-11-02 19:51 --------- d-----w C:\Documents and Settings\oko\Dane aplikacji\Ahead 2007-11-02 17:33 --------- d-----w C:\Program Files\eMule 2007-11-02 13:13 --------- d-----w C:\Program Files\Winamp 2007-11-01 13:35 --------- d-----w C:\Documents and Settings\oko\Dane aplikacji\CyberLink 2007-10-31 22:34 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy 2007-10-31 22:19 --------- d-----w C:\Program Files\ACE Mega CoDecS Pac 2007-10-30 22:43 --------- d-----w C:\Program Files\Zards software 2007-10-30 21:44 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard 2007-10-29 06:32 --------- d-----w C:\Program Files\Google 2007-10-28 10:52 --------- d-----w C:\Program Files\ARPR 2007-10-23 19:43 --------- d-----w C:\Program Files\Skype 2007-10-23 19:43 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Skype 2007-10-23 14:21 --------- d-----w C:\Program Files\Tlen.pl 2007-10-14 09:48 --------- d-----w C:\Program Files\Nokia 2007-10-11 11:53 --------- d-----w C:\Documents and Settings\oko\Dane aplikacji\ATI 2007-10-11 11:53 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\ATI 2007-10-11 11:37 --------- d-----w C:\Program Files\ATI Technologies 2007-10-11 11:36 --------- d–h--w C:\Program Files\InstallShield Installation Information 2007-10-10 18:40 --------- d-----w C:\Program Files\Creative 2007-10-10 15:08 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Grisoft 2007-10-08 00:10 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Installations 2007-10-07 23:42 --------- d-----w C:\Program Files\Common Files\LightScribe 2007-10-07 20:39 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\LightScribe 2007-10-07 20:34 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Ahead 2007-10-07 20:33 --------- d-----w C:\Program Files\Common Files\Ahead 2007-10-07 20:30 --------- d-----w C:\Program Files\Nero 2007-10-07 20:30 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Nero 2007-10-07 19:15 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Ping Sign Byte Tool 2007-10-07 16:59 2,097,152 ----a-w C:\Documents and Settings\oko\Dane aplikacji\AUTORUN.BIN 2007-10-07 16:58 769,536 ----a-w C:\Documents and Settings\oko\Dane aplikacji\sfdnwin.dll 2007-10-07 16:27 --------- d-----w C:\Program Files\AGEIA Technologies 2007-10-07 15:03 --------- d-----w C:\Program Files\SAMSUNG 2007-09-27 18:15 --------- d-----w C:\Program Files\IrfanView 2007-09-27 14:05 --------- d-----w C:\Documents and Settings\oko\Dane aplikacji\InstallShield 2007-09-04 17:56 164,352 ----a-w C:\WINDOWS\system32\unrar.dll 2007-08-21 06:18 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll 2005-08-27 08:02 16,368 -c–a-w C:\Documents and Settings\oko\Dane aplikacji\GDIPFONTCACHEV1.DAT 2005-05-27 21:37 3,732 -c----w C:\Documents and Settings\Gość\FMCodec.dat 2005-05-27 21:37 3,732 -c----w C:\Documents and Settings\Gość\FMCodec.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “Tweak UI”=“TWEAKUI.CPL” [2003-03-25 04:49 C:\WINDOWS\system32\tweakui.cpl] “WinFast Schedule”=“C:\Program Files\WinFast\WFTVFM\WFWIZ.exe” [2004-08-02 14:32] “NeroFilterCheck”=“C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe” [2007-03-01 14:57] “SecurDisc”=“C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe” [2007-06-01 09:06] “InCD”=“C:\Program Files\Nero\Nero 7\InCD\InCD.exe” [2007-06-01 09:05] “WinampAgent”=“C:\Program Files\Winamp\winampa.exe” [2007-10-10 06:28] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}”=“C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe” [2007-06-01 09:21] “SpybotSD TeaTimer”=“C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe” [2007-08-31 16:46] “WinPerfectAutoRun”=“C:\yenicag\WinPerfectSE\WinPerfect.exe” [2007-10-01 14:40] [HKEY_USERS.default\software\microsoft\windows\currentversion\run] “Nokia.PCSync”=C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] @= [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Microsoft Office.lnk] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ares] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVP] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeCall] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InternetCalls] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Komunikator] C:\Program Files\Tlen.pl\tlen.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut] “C:\Program Files\CyberLink\PowerDVD\Language\Language.exe” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NWEReboot] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Peak Wipe] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerS] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl] “C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] “C:\Program Files\Skype\Phone\Skype.exe” /nosplash /minimized [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Start WingMan Profiler] “C:\Program Files\Logitech\Profiler\lwemon.exe” /noui [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC] “C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\System service79] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Uniblue RegistryBooster 2] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdReg] C:\WINDOWS\UpdReg.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] C:\Program Files\Winamp\winampa.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ysrveb] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] “wuauserv”=2 (0x2) “Windows Automatic Updates”=2 (0x2) “UPS”=3 (0x3) “Themes”=2 (0x2) “TapiSrv”=3 (0x3) “Schedule”=2 (0x2) “RDSessMgr”=3 (0x3) “NtLmSsp”=3 (0x3) “Nla”=3 (0x3) “mnmsrvc”=3 (0x3) “FastUserSwitchingCompatibility”=3 (0x3) “ServiceLayer”=3 (0x3) “NMIndexingService”=3 (0x3) “LightScribeService”=2 (0x2) “IDriverT”=3 (0x3) “CCALib8”=2 (0x2) “SDhelper”=2 (0x2) “PCToolsFirewallPlus”=2 (0x2) “aawservice”=2 (0x2) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled] “WinPerfectAutoRun”=c:\yenicag\WinPerfectSE\WinPerfect.exe -boot “avast!”=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe R1 ts_lb;ts_lb;C:\WINDOWS\system32\drivers\ts_lb.sys R2 BT848;WinFast TV2000 XP WDM Video Capture;C:\WINDOWS\system32\drivers\wf2kvcap.sys R2 tv2ktunr;WinFast TV2000 XP WDM TVTuner;C:\WINDOWS\system32\drivers\wf2ktunr.sys R2 Tv2kXbar;WinFast TV2000 XP WDM Crossbar;C:\WINDOWS\system32\drivers\wf2kxbar.sys R3 axsaki;axsaki;C:\WINDOWS\system32\DRIVERS\axsaki.sys R3 axskbus;axskbus;C:\WINDOWS\system32\DRIVERS\axskbus.sys R3 TSCOMM;CommStudio Virtual Adapter by TamoSoft;C:\WINDOWS\system32\DRIVERS\tscomm.sys R3 WFIOCTL;WFIOCTL;??\C:\Program Files\WinFast\WFTVFM\WFIOCTL.SYS R3 WmBEnum;Logitech Virtual Bus Enumerator Driver;C:\WINDOWS\system32\drivers\WmBEnum.sys R3 WmXlCore;Logitech WingMan Translation Layer Driver;C:\WINDOWS\system32\drivers\WmXlCore.sys S3 CV2K1;CommView Network Monitor;C:\WINDOWS\system32\DRIVERS\cv2k1.sys S3 WmFilter;Logitech WingMan HID Filter Driver;C:\WINDOWS\system32\drivers\WmFilter.sys S3 WmHidLo;Logitech WingMan USB Filter Driver;C:\WINDOWS\system32\drivers\WmHidLo.sys S3 WmVirHid;Logitech Virtual Hid Device Driver;C:\WINDOWS\system32\drivers\WmVirHid.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\I] \Shell\AutoRun\command - I:\Start.exe *Newly Created Service* - CATCHME [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components{10880D85-AAD9-4558-ABDC-2AB1552D831F}] “C:\Program Files\Common Files\LightScribe\LSRunOnce.exe” . Contents of the ‘Scheduled Tasks’ folder “2007-06-29 23:00:00 C:\WINDOWS\Tasks\At13.job” “2007-06-30 00:00:00 C:\WINDOWS\Tasks\At14.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-30 01:00:00 C:\WINDOWS\Tasks\At15.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-19 02:00:00 C:\WINDOWS\Tasks\At16.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-19 03:00:00 C:\WINDOWS\Tasks\At17.job” “2007-06-19 04:00:00 C:\WINDOWS\Tasks\At18.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-19 05:00:00 C:\WINDOWS\Tasks\At19.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-19 06:00:00 C:\WINDOWS\Tasks\At20.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-19 07:00:00 C:\WINDOWS\Tasks\At21.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-19 08:00:00 C:\WINDOWS\Tasks\At22.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-19 09:00:00 C:\WINDOWS\Tasks\At23.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-24 10:00:00 C:\WINDOWS\Tasks\At24.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-07-01 11:00:00 C:\WINDOWS\Tasks\At25.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-07-01 12:00:00 C:\WINDOWS\Tasks\At26.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-07-01 13:00:00 C:\WINDOWS\Tasks\At27.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-07-01 14:00:00 C:\WINDOWS\Tasks\At28.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-07-01 15:00:00 C:\WINDOWS\Tasks\At29.job” “2007-07-01 16:00:00 C:\WINDOWS\Tasks\At30.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-07-01 17:00:00 C:\WINDOWS\Tasks\At31.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-07-01 18:00:00 C:\WINDOWS\Tasks\At32.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-07-01 19:00:00 C:\WINDOWS\Tasks\At33.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-29 20:00:00 C:\WINDOWS\Tasks\At34.job” “2007-06-29 21:00:00 C:\WINDOWS\Tasks\At35.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-29 22:00:00 C:\WINDOWS\Tasks\At36.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At37.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At38.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At39.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At40.job” “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At41.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At42.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At43.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At44.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At45.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At46.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At47.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At48.job” “2007-07-01 11:00:30 C:\WINDOWS\Tasks\At49.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 12:00:30 C:\WINDOWS\Tasks\At50.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 13:00:30 C:\WINDOWS\Tasks\At51.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 14:00:30 C:\WINDOWS\Tasks\At52.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 15:00:30 C:\WINDOWS\Tasks\At53.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 16:00:30 C:\WINDOWS\Tasks\At54.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 17:00:30 C:\WINDOWS\Tasks\At55.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 18:00:30 C:\WINDOWS\Tasks\At56.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 19:00:00 C:\WINDOWS\Tasks\At57.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At58.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At59.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At60.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-06-07 18:32:00 C:\WINDOWS\Tasks\At7.job” - C:\WINDOWS\system32\wudupdate.exe “2007-06-15 18:32:00 C:\WINDOWS\Tasks\At8.job” - C:\WINDOWS\system32\wuauclt10.exe . ************************************************************************** catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-12 21:09:53 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-11-12 21:10:40 . — E O F — Złączono Posta: 12.11.2007 (Pon) 21:46

Gutek · 12 Listopad 2007 20:56

start>>>wszystkie programy>>>akcesoria>>>narzędzia systemowe>>>zplanowane zadania Skasuj wszystkie wymienione At

“2007-06-29 23:00:00 C:\WINDOWS\Tasks\At13.job” “2007-06-30 00:00:00 C:\WINDOWS\Tasks\At14.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-30 01:00:00 C:\WINDOWS\Tasks\At15.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-19 02:00:00 C:\WINDOWS\Tasks\At16.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-19 03:00:00 C:\WINDOWS\Tasks\At17.job” “2007-06-19 04:00:00 C:\WINDOWS\Tasks\At18.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-19 05:00:00 C:\WINDOWS\Tasks\At19.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-19 06:00:00 C:\WINDOWS\Tasks\At20.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-19 07:00:00 C:\WINDOWS\Tasks\At21.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-19 08:00:00 C:\WINDOWS\Tasks\At22.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-19 09:00:00 C:\WINDOWS\Tasks\At23.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-24 10:00:00 C:\WINDOWS\Tasks\At24.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-07-01 11:00:00 C:\WINDOWS\Tasks\At25.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-07-01 12:00:00 C:\WINDOWS\Tasks\At26.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-07-01 13:00:00 C:\WINDOWS\Tasks\At27.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-07-01 14:00:00 C:\WINDOWS\Tasks\At28.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-07-01 15:00:00 C:\WINDOWS\Tasks\At29.job” “2007-07-01 16:00:00 C:\WINDOWS\Tasks\At30.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-07-01 17:00:00 C:\WINDOWS\Tasks\At31.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-07-01 18:00:00 C:\WINDOWS\Tasks\At32.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-07-01 19:00:00 C:\WINDOWS\Tasks\At33.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-29 20:00:00 C:\WINDOWS\Tasks\At34.job” “2007-06-29 21:00:00 C:\WINDOWS\Tasks\At35.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-06-29 22:00:00 C:\WINDOWS\Tasks\At36.job” - C:\WINDOWS\system32\O2H8KXf4.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At37.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At38.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At39.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At40.job” “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At41.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At42.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At43.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At44.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At45.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At46.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At47.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At48.job” “2007-07-01 11:00:30 C:\WINDOWS\Tasks\At49.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 12:00:30 C:\WINDOWS\Tasks\At50.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 13:00:30 C:\WINDOWS\Tasks\At51.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 14:00:30 C:\WINDOWS\Tasks\At52.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 15:00:30 C:\WINDOWS\Tasks\At53.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 16:00:30 C:\WINDOWS\Tasks\At54.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 17:00:30 C:\WINDOWS\Tasks\At55.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 18:00:30 C:\WINDOWS\Tasks\At56.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 19:00:00 C:\WINDOWS\Tasks\At57.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At58.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At59.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-07-01 10:55:20 C:\WINDOWS\Tasks\At60.job” - C:\WINDOWS\system32\8S2NRwO1.exe “2007-06-07 18:32:00 C:\WINDOWS\Tasks\At7.job” - C:\WINDOWS\system32\wudupdate.exe “2007-06-15 18:32:00 C:\WINDOWS\Tasks\At8.job” - C:\WINDOWS\system32\wuauclt10.exe

nasty79 · 12 Listopad 2007 21:36

co dalej??? :lol:

Gutek · 12 Listopad 2007 21:43

Optymalizacja XP: http://forum.dobreprogramy.pl/viewtopic.php?t=76580

nasty79 · 12 Listopad 2007 23:06

Gutek · 13 Listopad 2007 19:20

Znając życie dostawca

nasty79 · 13 Listopad 2007 19:23