Komputer spowolnił


(Maczy08) #1

Nigdzie nie mogę się doprosić żeby ktoś sprawdził moje logi:|

Więc zamieszczam je tutaj i myslę że pomożecie

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 10:45:42, on 2008-08-29

Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal


Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\VMSnap23.exe

C:\WINDOWS\Domino.exe

C:\WINDOWS\system32\RunDLL32.exe

C:\Program Files\PCI Audio Applications\Bin\EchoCtrl.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Nowe Gadu-Gadu\gg.exe

C:\Program Files\kalendarz\Kalendarz XP\Kalendarz.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

C:\Program Files\Common Files\NMSAccessU.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\UAService7.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\HJTInstall\HijackThis.exe


R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.eu.microsoft.com/poland/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = ftp=proxy_server:8080;gopher=proxy_server:8080;http=proxy_server:8080;https=proxy_server:8080;socks=proxy_server:8080

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O4 - HKLM\..\Run: [BigDogPath323VMSnap] C:\WINDOWS\VMSnap23.exe

O4 - HKLM\..\Run: [BigDogPath323Domino] C:\WINDOWS\Domino.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [C-Media Echo Control] C:\Program Files\PCI Audio Applications\Bin\EchoCtrl.exe

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [Nowe Gadu-Gadu] "C:\Program Files\Nowe Gadu-Gadu\gg.exe"

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Global Startup: Kalendarz XP.lnk = C:\Program Files\kalendarz\Kalendarz XP\Kalendarz.exe

O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O17 - HKLM\System\CCS\Services\Tcpip\..\{FD25BA0A-155F-4181-A135-CE825F04A08C}: NameServer = 192.168.1.1

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe

O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\Common Files\NMSAccessU.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe

O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe


--

End of file - 6639 bytes

ComboFix 08-08-26.02 - Mączy 2008-08-27 11:54:44.1 - NTFSx86

Running from: C:\Documents and Settings\Marcin\Pulpit\ComboFix.exe

 * Created a new restore point


[color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED [/b][/color]

.


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.


C:\Documents and Settings\Marcin\Cookies\mączy@nuggad[2].txt

C:\Documents and Settings\Marcin\Cookies\mączy@tradedoubler[2].txt

C:\Documents and Settings\Marcin\Cookies\marcin@2.stat.cashbill[2].txt


.

((((((((((((((((((((((((( Files Created from 2008-07-27 to 2008-08-27 )))))))))))))))))))))))))))))))

.


No new files created in this timespan


.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-08-27 09:35	---------	d--h--w	C:\Program Files\InstallShield Installation Information

2008-08-26 19:43	---------	d-----w	C:\Documents and Settings\Marcin\Dane aplikacji\gtk-2.0

2008-08-25 14:43	---------	d-----w	C:\Documents and Settings\All Users\Dane aplikacji\FLEXnet

2008-08-09 09:32	---------	d-----w	C:\Program Files\aimp 2.10

2008-08-02 13:49	---------	d-----w	C:\Documents and Settings\Marcin\Dane aplikacji\Nowe Gadu-Gadu

2008-07-24 17:16	---------	d-----w	C:\Program Files\Common Files\Adobe

2008-07-24 17:11	---------	d-----w	C:\Program Files\Bonjour

2008-07-24 16:20	---------	d-----w	C:\Program Files\Common Files\Macrovision Shared

2008-07-23 19:29	---------	d-----w	C:\Documents and Settings\All Users\Dane aplikacji\Adobe Systems

2008-07-19 07:57	---------	d-----w	C:\Program Files\Lexmark z45

2008-07-18 16:40	98,304	----a-w	C:\WINDOWS\system32\CmdLineExt.dll

2008-07-15 07:53	---------	d---a-w	C:\Documents and Settings\All Users\Dane aplikacji\TEMP

2008-07-15 07:48	---------	d-----w	C:\Program Files\Spyware Doctor

2008-07-13 21:02	---------	d-----w	C:\Program Files\Odkurzacz

2008-07-13 20:39	---------	d-----w	C:\Documents and Settings\Marcin\Dane aplikacji\uTorrent

2008-07-10 17:35	---------	d-----w	C:\Program Files\Nowe Gadu-Gadu

2008-07-07 20:33	253,952	----a-w	C:\WINDOWS\system32\es.dll

2008-06-30 16:41	---------	d-----w	C:\Documents and Settings\Marcin\Dane aplikacji\fltk.org

2008-06-30 14:46	---------	d-----w	C:\Program Files\SystemRequirementsLab

2008-06-24 16:24	74,240	----a-w	C:\WINDOWS\system32\mscms.dll

2008-06-23 15:41	662,016	----a-w	C:\WINDOWS\system32\wininet.dll

2008-06-20 17:42	246,784	----a-w	C:\WINDOWS\system32\mswsock.dll

2007-12-05 16:06	32	----a-w	C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat

2007-01-25 02:52	65,536	----a-w	C:\Program Files\Common Files\NMSAccessU.exe

2004-08-11 04:44	712,704	----a-w	C:\WINDOWS\inf\OTHER\audio3d.dll

.


------- Sigcheck -------


2004-08-04 00:44 14336 ba98327e90022dbd6ee76490e0622e2e	C:\WINDOWS\system32\svchost.exe

2004-08-04 00:44 14336 ba98327e90022dbd6ee76490e0622e2e	C:\WINDOWS\system32\dllcache\svchost.exe


2005-03-02 20:21 578560 6a93565be9b8422eb7538c66ac732d76	C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll

2007-03-08 17:51 579584 11abdecc02efc1d2b6a6a0fa46c26594	C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\user32.dll

2004-08-04 00:44 578560 0c81764f50f32d376e6e4b9e9f4b01a0	C:\WINDOWS\$NtUninstallKB890859$\user32.dll

2005-03-02 20:18 578560 b7eeb1a1af740306049241ddf61f21ff	C:\WINDOWS\$NtUninstallKB925902$\user32.dll

2007-03-08 17:38 579072 a37a4637f84f8dd771274eaf8d17fa65	C:\WINDOWS\system32\user32.dll

2007-03-08 17:38 579072 a37a4637f84f8dd771274eaf8d17fa65	C:\WINDOWS\system32\dllcache\user32.dll


2004-08-04 00:44 82944 ab82237486b727dd7dab36a76f38a3a2	C:\WINDOWS\system32\ws2_32.dll

2004-08-04 00:44 82944 ab82237486b727dd7dab36a76f38a3a2	C:\WINDOWS\system32\dllcache\ws2_32.dll


2004-08-04 00:44 504832 0344407089b08548d4feba62bb0f32d0	C:\WINDOWS\system32\winlogon.exe

2004-08-04 00:44 504832 0344407089b08548d4feba62bb0f32d0	C:\WINDOWS\system32\dllcache\winlogon.exe


2004-08-03 23:14 182912 558635d3af1c7546d26067d5d9b6959e	C:\WINDOWS\system32\dllcache\ndis.sys

2004-08-03 23:14 182912 558635d3af1c7546d26067d5d9b6959e	C:\WINDOWS\system32\drivers\ndis.sys


2004-08-03 23:00 29056 4448006b6bc60e6c027932cfc38d6855	C:\WINDOWS\system32\dllcache\ip6fw.sys

2004-08-03 23:00 29056 4448006b6bc60e6c027932cfc38d6855	C:\WINDOWS\system32\drivers\ip6fw.sys


2007-06-13 15:23 1034752 029a562e81bbee088c61d418bf408f44	C:\WINDOWS\explorer.exe

2007-06-13 15:12 1034752 8db0650b211425b9cdb7d1c4a8f6b482	C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe

2004-08-04 00:44 1033728 379098a96e6c165b659de7e4328010ea	C:\WINDOWS\$NtUninstallKB938828$\explorer.exe

2007-06-13 15:23 1034752 029a562e81bbee088c61d418bf408f44	C:\WINDOWS\system32\dllcache\explorer.exe


2004-08-04 00:44 108544 3da8d964d2cc12ef8e8c342471a37917	C:\WINDOWS\system32\services.exe

2004-08-04 00:44 108544 3da8d964d2cc12ef8e8c342471a37917	C:\WINDOWS\system32\dllcache\services.exe


2004-08-04 00:44 13312 f485fefc8cc4fd29243d800be5d275d1	C:\WINDOWS\system32\lsass.exe

2004-08-04 00:44 13312 f485fefc8cc4fd29243d800be5d275d1	C:\WINDOWS\system32\dllcache\lsass.exe


2004-08-04 00:44 15360 cbfa30492d70ce3938d8a7783d0c0436	C:\WINDOWS\system32\ctfmon.exe

2004-08-04 00:44 15360 cbfa30492d70ce3938d8a7783d0c0436	C:\WINDOWS\system32\dllcache\ctfmon.exe


2005-06-11 02:17 57856 ad3d9d191aea7b5445fe1d82ffbb4788	C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe

2004-08-04 00:44 57856 bebe8a85954ff460374fd5a0cd21e19b	C:\WINDOWS\$NtUninstallKB896423$\spoolsv.exe

2005-06-11 01:53 57856 da81ec57acd4cdc3d4c51cf3d409af9f	C:\WINDOWS\system32\spoolsv.exe

2005-06-11 01:53 57856 da81ec57acd4cdc3d4c51cf3d409af9f	C:\WINDOWS\system32\dllcache\spoolsv.exe


2004-08-04 00:44 25088 bd768099b4c44aa631728cb74eb54396	C:\WINDOWS\system32\userinit.exe

2004-08-04 00:44 25088 bd768099b4c44aa631728cb74eb54396	C:\WINDOWS\system32\dllcache\userinit.exe

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown 

REGEDIT4


[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:44 15360]

"Nowe Gadu-Gadu"="C:\Program Files\Nowe Gadu-Gadu\gg.exe" [2008-06-27 10:28 8798816]

"Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2008-03-20 12:04 2127296]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"BigDogPath323VMSnap"="C:\WINDOWS\VMSnap23.exe" [2007-01-09 13:57 212992]

"BigDogPath323Domino"="C:\WINDOWS\Domino.exe" [2007-01-09 13:56 49152]

"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-02-24 08:32 5537792]

"C-Media Echo Control"="C:\Program Files\PCI Audio Applications\Bin\EchoCtrl.exe" [2001-12-05 17:47 147456]

"NvMediaCenter"="NvMCTray.dll" [2005-02-24 08:32 86016 C:\WINDOWS\system32\nvmctray.dll]


[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 00:44 15360]


C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\

Kalendarz XP.lnk - C:\Program Files\kalendarz\Kalendarz XP\Kalendarz.exe [2008-01-25 17:38:04 882176]


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

"NoLogOff"= 1


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"VIDC.YV12"= yv12vfw.dll


[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Kodak EasyShare software.lnk]

path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Kodak EasyShare software.lnk

backup=C:\WINDOWS\pss\Kodak EasyShare software.lnkCommon Startup


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ares]

--a------ 2007-07-16 23:54 961536 C:\Program Files\Ares\Ares.exe


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadu-Gadu]

--a------ 2008-03-20 12:04 2127296 C:\Program Files\Gadu-Gadu\gg.exe


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]

--a------ 2007-08-24 07:00 33648 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISTray]

--a------ 2008-07-14 23:45 1107848 C:\Program Files\Spyware Doctor\pctsTray.exe


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odkurzacz-MCD]

--a------ 2008-02-04 19:13 266240 C:\Program Files\Odkurzacz\odk_mcd.exe


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]

--a------ 2007-11-21 22:57 219952 C:\Program Files\uTorrent\uTorrent.exe


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C-Media Mixer]

-ra------ 2004-08-11 06:44 1228800 C:\WINDOWS\mixer.exe


[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusOverride"=dword:00000001


[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)


[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"C:\\Program Files\\uTorrent\\uTorrent.exe"=

"C:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=

"C:\\Program Files\\totalcmd\\TOTALCMD.EXE"=

"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=

"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=

"C:\\WINDOWS\\system32\\dpvsetup.exe"=

"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=


R2 NMSAccessU;NMSAccessU;C:\Program Files\Common Files\NMSAccessU.exe [2007-01-25 04:52]

R3 vmfilter323;323 filter service, Normal;C:\WINDOWS\system32\drivers\vmfilter323.sys [2006-08-08 12:25]

R3 ZSMC326;Vimicro USB2.0 PC Camera(VC0323);C:\WINDOWS\system32\Drivers\usbvm323.sys [2007-04-03 17:22]

S3 azt2320;Sterownik audio Aztech 2320 (WDM);C:\WINDOWS\system32\drivers\aztw2320.sys [2001-08-17 21:19]


*Newly Created Service* - CATCHME

.

Contents of the 'Scheduled Tasks' folder

.

- - - - ORPHANS REMOVED - - - -


HKLM-Run-CmPCIaudio - cmicnfg3.cpl

MSConfigStartUp-AlcoholAutomount - C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe

MSConfigStartUp-AQQ - C:\PROGRA~1\WapSter\AQQ\AQQ.exe

MSConfigStartUp-BearShare - C:\Program Files\BearShare\BearShare.exe

MSConfigStartUp-eMuleAutoStart - C:\Program Files\eMule\emule.exe

MSConfigStartUp-MSMSGS - C:\Program Files\Messenger\msmsgs.exe

MSConfigStartUp-Systweak Wallpaper Changer - C:\Program Files\Advanced System Optimizer\wallpaper.exe



.

------- Supplementary Scan -------

.

FireFox -: Profile - C:\Documents and Settings\Marcin\Dane aplikacji\Mozilla\Firefox\Profiles\aipp3526.default\

FireFox -: prefs.js - STARTUP.HOMEPAGE - www.google.pl

.


**************************************************************************


catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-08-27 12:17:42

Windows 5.1.2600 Dodatek Service Pack 2 NTFS


scanning hidden processes ... 


scanning hidden autostart entries ...


scanning hidden files ... 



[/code]

(huber2t) #2

W logach nic nie widzę

usuń ręcznie folder C: \Qoobox , usuń instalkę Combofix z dysku.

Przeczyść komputer Ccleanerem

Wykonaj optymalizację autostartu

Wyłącz i włącz przywracanie systemu na wszystkich dyskach. Instrukcja

Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum

lub

Dr.WEB CureIt!


(Gutek) #3

Zmiana zasad wklejania logów na forum - viewtopic.php?f=16&t=253052