Komputer wariuje

arturoos1990 · 3 Wrzesień 2007 15:04

Ledwo wyszedlem z jedneog wiruska i teraz wpadlem w kolejny, teraz co jakiś czas wykrywa wirusa ciagle tego samego avast , a tak pozatym, w mozilli czesto uruchhamia sie by sciagnac jakis program errorsafe czy cos spojrzcie na logi:

Logfile of HijackThis v1.99.1 Scan saved at 16:52:57, on 2007-09-03 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\Explorer.EXE D:\WINDOWS\system32\spoolsv.exe D:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe D:\Program Files\GigaByte\VGA Utility Manager\G-VGA.exe D:\WINDOWS\System32\RunDll32.exe D:\Program Files\IC\Card Reader Driver v1.9e\Disk_Monitor.exe D:\WINDOWS\System32\RUNDLL32.EXE D:\WINDOWS\System32\ctfmon.exe D:\Program Files\Creative\Shared Files\CamTray.exe D:\Program Files\Microsoft ActiveSync\wcescomm.exe D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe D:\Program Files\VIA\RAID\raid_tool.exe D:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe D:\Program Files\Alwil Software\Avast4\ashServ.exe D:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe D:\PROGRA~1\MI3AA1~1\rapimgr.exe D:\WINDOWS\System32\CTsvcCDA.exe D:\WINDOWS\System32\wjqclwla.exe D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE D:\Program Files\Multimedia Keyboard Driver\PS2USBKbdDrv.exe D:\WINDOWS\System32\nvsvc32.exe D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\System32\MsPMSPSv.exe D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe D:\Program Files\Wapster\AQQ\AQQ.exe D:\Program Files\Alwil Software\Avast4\ashWebSv.exe D:\Program Files\Mozilla Firefox\firefox.exe D:\Documents and Settings\Rodzina\Pulpit\Potrzebne Na wiry\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx O4 - HKLM…\Run: [CTSysVol] D:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe /r O4 - HKLM…\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM…\Run: [VGAUtil] D:\Program Files\GigaByte\VGA Utility Manager\G-VGA.exe O4 - HKLM…\Run: [CmUsbSound] RunDll32 cmcnfgu.cpl,CMICtrlWnd O4 - HKLM…\Run: [Disk Monitor] D:\Program Files\IC\Card Reader Driver v1.9e\Disk_Monitor.exe O4 - HKLM…\Run: [WireLessKeyboard] D:\Program Files\Multimedia Keyboard Driver\StartAutorun.exe PS2USBKbdDrv.exe O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM…\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM…\Run: [systemOptimizer] rundll32.exe “D:\WINDOWS\System32\ovldgxxs.dll”,forkonce O4 - HKCU…\Run: [CTFMON.EXE] D:\WINDOWS\System32\ctfmon.exe O4 - HKCU…\Run: [Creative WebCam Tray] “D:\Program Files\Creative\Shared Files\CamTray.exe” O4 - HKCU…\Run: [H/PC Connection Agent] “D:\Program Files\Microsoft ActiveSync\wcescomm.exe” O4 - Startup: Picture Motion Browser Media Check Tool.lnk = D:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe O4 - Global Startup: VIA RAID TOOL.lnk = D:\Program Files\VIA\RAID\raid_tool.exe O8 - Extra context menu item: Add to AMV Converter… - D:\Program Files\MP3 Player Utilities 4.04\AMVConverter\grab.html O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: MediaManager tool grab multimedia file - D:\Program Files\MP3 Player Utilities 4.04\MediaManager\grab.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - D:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra ‘Tools’ menuitem: Utwórz Ulubione dla urządzenia przenośnego… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: Capture Device Service - InterVideo Inc. - D:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - D:\WINDOWS\System32\CTsvcCDA.exe O23 - Service: DomainService - - D:\WINDOWS\System32\wjqclwla.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\System32\nvsvc32.exe O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

i z silenta:

“Silent Runners.vbs”, revision 41, http://www.silentrunners.org/ Operating System: Windows XP Output limited to non-default values, except where indicated by “{++}” Startup items buried in registry: --------------------------------- HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++} “CTFMON.EXE” = “D:\WINDOWS\System32\ctfmon.exe” [MS] “Creative WebCam Tray” = ““D:\Program Files\Creative\Shared Files\CamTray.exe”” [“Creative Technology Ltd”] “H/PC Connection Agent” = ““D:\Program Files\Microsoft ActiveSync\wcescomm.exe”” [MS] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++} “CTSysVol” = “D:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe /r” [“Creative Technology Ltd”] “avast!” = “D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe” [null data] “VGAUtil” = “D:\Program Files\GigaByte\VGA Utility Manager\G-VGA.exe” [empty string] “CmUsbSound” = “RunDll32 cmcnfgu.cpl,CMICtrlWnd” [MS] “Disk Monitor” = “D:\Program Files\IC\Card Reader Driver v1.9e\Disk_Monitor.exe” [“Neodio Corp.”] “WireLessKeyboard” = “D:\Program Files\Multimedia Keyboard Driver\StartAutorun.exe PS2USBKbdDrv.exe” [empty string] “NvCplDaemon” = “RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup” [MS] “NvMediaCenter” = “RUNDLL32.EXE D:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit” [MS] “KernelFaultCheck” = “D:\WINDOWS\system32\dumprep 0 -k” [MS] “SystemOptimizer” = “rundll32.exe “D:\WINDOWS\System32\ovldgxxs.dll”,forkonce” [MS] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}(Default) = “AcroIEHlprObj Class” [from CLSID] -> {CLSID}\InProcServer32(Default) = “D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll” [“Adobe Systems Incorporated”] {126D2E44-3B1D-46B6-BE67-D5BCF68AEEFD}(Default) = (no title provided) -> {CLSID}\InProcServer32(Default) = “D:\WINDOWS\System32\pmnklih.dll” [null data] {4B080780-532C-4187-BC52-0153350F19EB}(Default) = (no title provided) -> {CLSID}\InProcServer32(Default) = “D:\WINDOWS\System32\vtstu.dll” [null data] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}(Default) = “SSVHelper Class” [from CLSID] -> {CLSID}\InProcServer32(Default) = “D:\Program Files\Java\jre1.6.0_02\bin\ssv.dll” [“Sun Microsystems, Inc.”] {C6039E6C-BDE9-4de5-BB40-768CAA584FDC}(Default) = (no title provided) -> {CLSID}\InProcServer32(Default) = “D:\WINDOWS\System32\aktndgwa.dll” [null data] HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ “{42071714-76d4-11d1-8b24-00a0c9068ff3}” = “Rozszerzenie CPL kadrowania wyświetlania” -> {CLSID}\InProcServer32(Default) = “deskpan.dll” [file not found] “{88895560-9AA2-1069-930E-00AA0030EBC8}” = “Rozszerzenie ikony HyperTerminalu” -> {CLSID}\InProcServer32(Default) = “D:\WINDOWS\System32\hticons.dll” [“Hilgraeve, Inc.”] “{B41DB860-8EE4-11D2-9906-E49FADC173CA}” = “WinRAR shell extension” -> {CLSID}\InProcServer32(Default) = “D:\Program Files\WinRAR\rarext.dll” [null data] “{472083B0-C522-11CF-8763-00608CC02F24}” = “avast” -> {CLSID}\InProcServer32(Default) = “D:\Program Files\Alwil Software\Avast4\ashShell.dll” [“ALWIL Software”] “{0A082D00-EC93-11D0-B1E6-80580BC10627}” = “Corel Media Folder Root Menu Handler” -> {CLSID}\InProcServer32(Default) = “D:\Corel\Graphics8\programs\CMFFld80.dll” [empty string] “{0FBF99C1-4127-11D1-B1E6-C17E96D9180A}” = “Folder To Corel Media Folder Menu Handler” -> {CLSID}\InProcServer32(Default) = “D:\Corel\Graphics8\programs\CMFFld80.dll” [empty string] “{854AF161-1AE1-11D1-AB9B-00C0F00683EB}” = “Corel Media Folder” -> {CLSID}\InProcServer32(Default) = “D:\Corel\Graphics8\programs\CMFFld80.dll” [empty string] “{E856F161-1AE5-11d1-AB9B-00C0F00683EB}” = “Corel Media Folder” -> {CLSID}\InProcServer32(Default) = “D:\Corel\Graphics8\programs\CMFFld80.dll” [empty string] “{CDB89701-262F-11D1-AB9C-00C0F00683EB}” = “Corel Media Find Folder” -> {CLSID}\InProcServer32(Default) = “D:\Corel\Graphics8\programs\CMFFld80.dll” [empty string] “{F8152501-455F-11D1-B1E6-444553540000}” = “Corel Media Folder Copy Hook Handler” -> {CLSID}\InProcServer32(Default) = “D:\Corel\Graphics8\programs\CMFFld80.dll” [empty string] “{8E524B0D-04F0-11D1-B74A-00A0C90646A4}” = “IconFactTemp.NSIconHandlerFactory” -> {CLSID}\InProcServer32(Default) = “D:\Corel\Graphics8\programs\CNSFlt80.dll” [“Corel Corporation”] “{A2AC368A-F883-11D0-B745-00A0C90646A4}” = “NSFiltManDll.FiltManCom” -> {CLSID}\InProcServer32(Default) = “D:\Corel\Graphics8\programs\CNSFlt80.dll” [“Corel Corporation”] “{B63FCD5A-2396-11D1-B762-00A0C90646A4}” = “*^” (unwritable string) -> {CLSID}\InProcServer32(Default) = “D:\Corel\Graphics8\programs\CMFFnd80.dll” [“Corel Corporation”] “{00020D75-0000-0000-C000-000000000046}” = “Microsoft Office Outlook Desktop Icon Handler” -> {CLSID}\InProcServer32(Default) = “D:\PROGRA~1\MICROS~2\OFFICE11\MLSHEXT.DLL” [MS] “{0006F045-0000-0000-C000-000000000046}” = “Microsoft Office Outlook Custom Icon Handler” -> {CLSID}\InProcServer32(Default) = “D:\PROGRA~1\MICROS~2\OFFICE11\OLKFSTUB.DLL” [MS] “{42042206-2D85-11D3-8CFF-005004838597}” = “Microsoft Office HTML Icon Handler” -> {CLSID}\InProcServer32(Default) = “D:\Program Files\Microsoft Office\OFFICE11\msohev.dll” [MS] “{ED65AC21-B24F-11d3-BA80-00C0CA16AA37}” = “Siemens Device” -> {CLSID}\InProcServer32(Default) = “D:\Program Files\Mobile Phone Manager\DES\DESShellExt.dll” [“Siemens AG”] “{ED65AC22-B24F-11d3-BA80-00C0CA16AA37}” = “Siemens Device ContextMenuHandler” -> {CLSID}\InProcServer32(Default) = “D:\Program Files\Mobile Phone Manager\DES\DESShellExt.dll” [“Siemens AG”] “{ED65AC23-B24F-11d3-BA80-00C0CA16AA37}” = “Siemens SX1 PropertySheetHandler” -> {CLSID}\InProcServer32(Default) = “D:\Program Files\Mobile Phone Manager\DES\DESShellExt.dll” [“Siemens AG”] “{32020A01-506E-484D-A2A8-BE3CF17601C3}” = “AlcoholShellEx” -> {CLSID}\InProcServer32(Default) = “D:\PROGRA~1\ALCOHO~1\ALCOHO~1\AXShlEx.dll” [“Alcohol Soft Development Team”] “{03FF3962-D823-11D4-97F0-009027769C61}” = “Data Caching Shell Extension” -> {CLSID}\InProcServer32(Default) = “c:\PROGRA~1\DATACA~1\FlashShl.dll” [file not found] “{792F0537-F929-4eb7-AC1D-FB6334C71550}” = “LG Phone” -> {CLSID}\InProcServer32(Default) = “D:\PROGRA~1\LGPCSU~1\LGPHON~1\Phone.dll” [empty string] “{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}” = “Shell Extensions for RealOne Player” -> {CLSID}\InProcServer32(Default) = “D:\Program Files\Real\RealPlayer\rpshell.dll” [“RealNetworks, Inc.”] “{e82a2d71-5b2f-43a0-97b8-81be15854de8}” = “ShellLink for Application References” -> {CLSID}\InProcServer32(Default) = “D:\WINDOWS\System32\dfshim.dll” [MS] “{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75}” = “Shell Icon Handler for Application References” -> {CLSID}\InProcServer32(Default) = “D:\WINDOWS\System32\dfshim.dll” [MS] “{640167b4-59b0-47a6-b335-a6b3c0695aea}” = “Portable Media Devices” -> {CLSID}\InProcServer32(Default) = “D:\WINDOWS\System32\Audiodev.dll” [MS] “{cc86590a-b60a-48e6-996b-41d25ed39a1e}” = “Portable Media Devices Menu” -> {CLSID}\InProcServer32(Default) = “D:\WINDOWS\System32\Audiodev.dll” [MS] “{49BF5420-FA7F-11cf-8011-00A0C90A8F78}” = “Mobile Device” -> {CLSID}\InProcServer32(Default) = “D:\PROGRA~1\MI3AA1~1\Wcesview.dll” [MS] “{A70C977A-BF00-412C-90B7-034C51DA2439}” = “NvCpl DesktopContext Class” -> {CLSID}\InProcServer32(Default) = “D:\WINDOWS\System32\nvcpl.dll” [“NVIDIA Corporation”] “{FFB699E0-306A-11d3-8BD1-00104B6F7516}” = “Play on my TV helper” -> {CLSID}\InProcServer32(Default) = “D:\WINDOWS\System32\nvcpl.dll” [“NVIDIA Corporation”] “{1CDB2949-8F65-4355-8456-263E7C208A5D}” = “Desktop Explorer” -> {CLSID}\InProcServer32(Default) = “D:\WINDOWS\System32\nvshell.dll” [“NVIDIA Corporation”] “{1E9B04FB-F9E5-4718-997B-B8DA88302A47}” = “Desktop Explorer Menu” -> {CLSID}\InProcServer32(Default) = “D:\WINDOWS\System32\nvshell.dll” [“NVIDIA Corporation”] “{1E9B04FB-F9E5-4718-997B-B8DA88302A48}” = “nView Desktop Context Menu” -> {CLSID}\InProcServer32(Default) = “D:\WINDOWS\System32\nvshell.dll” [“NVIDIA Corporation”] “{453D1B6D-BD6A-4FA1-B876-9E4DD848D434}” = “AQQ File Transfer Shell Extension” -> {CLSID}\InProcServer32(Default) = “D:\PROGRA~1\Wapster\AQQ\System\AQQSHE~1.DLL” [null data] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\ INFECTION WARNING! “{126D2E44-3B1D-46B6-BE67-D5BCF68AEEFD}” = “*]” (unwritable string) -> {CLSID}\InProcServer32(Default) = “D:\WINDOWS\System32\pmnklih.dll” [null data] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ INFECTION WARNING! pmnklih\DLLName = “pmnklih.dll” [null data] INFECTION WARNING! vtstu\DLLName = “D:\WINDOWS\System32\vtstu.dll” [null data] HKLM\Software\Classes\PROTOCOLS\Filter\ INFECTION WARNING! text/xml\CLSID = “{807553E5-5146-11D5-A672-00B0D022E945}” -> {CLSID}\InProcServer32(Default) = “D:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL” [MS] HKLM\Software\Classes*\shellex\ContextMenuHandlers\ AQQFileTransfer(Default) = “{453D1B6D-BD6A-4FA1-B876-9E4DD848D434}” -> {CLSID}\InProcServer32(Default) = “D:\PROGRA~1\Wapster\AQQ\System\AQQSHE~1.DLL” [null data] avast(Default) = “{472083B0-C522-11CF-8763-00608CC02F24}” -> {CLSID}\InProcServer32(Default) = “D:\Program Files\Alwil Software\Avast4\ashShell.dll” [“ALWIL Software”] WinRAR(Default) = “{B41DB860-8EE4-11D2-9906-E49FADC173CA}” -> {CLSID}\InProcServer32(Default) = “D:\Program Files\WinRAR\rarext.dll” [null data] HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\ FolderToCorelMediaFolder(Default) = “{0FBF99C1-4127-11D1-B1E6-C17E96D9180A}” -> {CLSID}\InProcServer32(Default) = “D:\Corel\Graphics8\programs\CMFFld80.dll” [empty string] WinRAR(Default) = “{B41DB860-8EE4-11D2-9906-E49FADC173CA}” -> {CLSID}\InProcServer32(Default) = “D:\Program Files\WinRAR\rarext.dll” [null data] HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\ avast(Default) = “{472083B0-C522-11CF-8763-00608CC02F24}” -> {CLSID}\InProcServer32(Default) = “D:\Program Files\Alwil Software\Avast4\ashShell.dll” [“ALWIL Software”] WinRAR(Default) = “{B41DB860-8EE4-11D2-9906-E49FADC173CA}” -> {CLSID}\InProcServer32(Default) = “D:\Program Files\WinRAR\rarext.dll” [null data] Active Desktop and Wallpaper: ----------------------------- Active Desktop is disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState HKCU\Control Panel\Desktop\ “Wallpaper” = “D:\WINDOWS\Web\Wallpaper\Idylla.bmp” Startup items in “Rodzina” & “All Users” startup folders: --------------------------------------------------------- D:\Documents and Settings\Rodzina\Menu Start\Programy\Autostart “Picture Motion Browser Media Check Tool” -> shortcut to: “D:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe /nobaloononstart” [“Sony Corporation”] D:\Documents and Settings\All Users\Menu Start\Programy\Autostart “VIA RAID TOOL” -> shortcut to: “D:\Program Files\VIA\RAID\raid_tool.exe” [“VIA Technologies”] Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = “%SystemRoot%\System32\mswsock.dll” [MS] 000000000002\LibraryPath = “%SystemRoot%\System32\winrnr.dll” [MS] 000000000003\LibraryPath = “%SystemRoot%\System32\mswsock.dll” [MS] Transport Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: %SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 18 %SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05 Toolbars, Explorer Bars, Extensions: ------------------------------------ Extensions (Tools menu items, main toolbar menu buttons) HKLM\Software\Microsoft\Internet Explorer\Extensions\ {08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ “MenuText” = “Sun Java Console” “CLSIDExtension” = “{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}” -> {CLSID}\InProcServer32(Default) = “D:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll” [“Sun Microsystems, Inc.”] {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F}\ “ButtonText” = “Create Mobile Favorite” “CLSIDExtension” = “{2EAF5BB0-070F-11D3-9307-00C04FAE2D4F}” -> {CLSID}\InProcServer32(Default) = “D:\PROGRA~1\MI3AA1~1\INetRepl.dll” [MS] {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F}\ “MenuText” = “Utwórz Ulubione dla urządzenia przenośnego…” “CLSIDExtension” = “{2EAF5BB0-070F-11D3-9307-00C04FAE2D4F}” -> {CLSID}\InProcServer32(Default) = “D:\PROGRA~1\MI3AA1~1\INetRepl.dll” [MS] {92780B25-18CC-41C8-B9BE-3C9C571A8263}\ “ButtonText” = “Badanie” Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ avast! Antivirus, avast! Antivirus, ““D:\Program Files\Alwil Software\Avast4\ashServ.exe”” [null data] avast! iAVS4 Control Service, aswUpdSv, ““D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe”” [null data] avast! Mail Scanner, avast! Mail Scanner, ““D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe” /service” [“ALWIL Software”] avast! Web Scanner, avast! Web Scanner, ““D:\Program Files\Alwil Software\Avast4\ashWebSv.exe” /service” [“ALWIL Software”] Capture Device Service, Capture Device Service, ““D:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe”” [“InterVideo Inc.”] Creative Service for CDROM Access, Creative Service for CDROM Access, “D:\WINDOWS\System32\CTsvcCDA.exe” [“Creative Technology Ltd”] DomainService, DomainService, “D:\WINDOWS\System32\wjqclwla.exe /service” [" "] Machine Debug Manager, MDM, ““D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE”” [MS] NVIDIA Display Driver Service, NVSvc, “D:\WINDOWS\System32\nvsvc32.exe” [“NVIDIA Corporation”] StarWind iSCSI Service, StarWindService, “D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe” [“Rocket Division Software”] Windows User Mode Driver Framework, UMWdf, “D:\WINDOWS\System32\wdfmgr.exe” [MS] WMDM PMSP Service, WMDM PMSP Service, “D:\WINDOWS\System32\MsPMSPSv.exe” [MS] Print Monitors: --------------- HKLM\System\CurrentControlSet\Control\Print\Monitors\ Canon BJ Language Monitor MP110\Driver = “CNMLM6f.DLL” [“CANON INC.”] Microsoft Document Imaging Writer Monitor\Driver = “mdimon.dll” [MS] ---------- + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + To search all directories of local fixed drives for DESKTOP.INI DLL launch points and all Registry CLSIDs for dormant Explorer Bars, use the -supp parameter or answer “No” at the first message box. ---------- (total run time: 215 seconds, including 9 seconds for message boxes

jessica · 3 Wrzesień 2007 15:17

>>Start >>> Uruchom >>> wybierz (lub wpisz) cmd >> zastosować te komendy (po każdej wciśnij “ENTER”):

Masz oczywiście infekcję “VUNDO”:

Ten w/w wpis sfiksuj w Hijacku:

>>Hijack>>scan(Do a system scan only)>>zaznacz go >> Fix checked.

Na początek użyj VundoFix oraz ComboFix (na dole tej strony z linku) -

Log z ComboFixa wklej na http://wklej.org/, a w poście daj tylko link.

jessi

arturoos1990 · 3 Wrzesień 2007 15:23

odmowa dostępu:( ale robie nastepne rzeczy co niżej napisalas

jessica · 3 Wrzesień 2007 15:31

W takim razie trzeba będzie usuwać jakimś narzędziem.

Jeśli nie masz jakiegoś narzędzia usuwającego, to ściągnij OTMoveIt

Do pola Paste List of Files/Folders to be Moved wklej poniższe ścieżki:

Następnie wciśnij przycisk MoveIt!

Pojawi się komunikat, że jest potrzebny restart do usunięcia podanych plików/folderów- wciśnij Yes.

Po restarcie usuń ręcznie folder C:** _OTMoveIt** (Prawoklik >>> Usuń >>> Opróżnij Kosz).

jessi

arturoos1990 · 3 Wrzesień 2007 15:52

http://wklej.org/id/6ff3c2e1cb oto log z combo fixa

w miedzy czasie razm mi avast pokazal wira jakeigos wiec oddalem do kwarantanny

jessica · 3 Wrzesień 2007 16:11

Uruchom MoveIt (lub inne narzędzie)

Do pola Paste List of Files/Folders to be Moved wklej poniższe ścieżki:

Następnie wciśnij przycisk MoveIt!

Pojawi się komunikat, że jest potrzebny restart do usunięcia podanych plików/folderów- wciśnij Yes.

Po restarcie usuń ręcznie folder C:** _OTMoveIt** (Prawoklik >>> Usuń >>> Opróżnij Kosz).

Jakieś mało rozwinięte to VUNDO -chyba szybko zacząłeś działać.

Nic więcej podejrzanego nie widzę.

Daj potem jeszcze raz log z ComboFixa,(o ile go właśnie Antivirus nie uznał za wirusa i dał do Kwarantanny!?).

jessi

arturoos1990 · 3 Wrzesień 2007 16:30

tego co mi powiedzialas zebym usunol nie ma

oto log

ComboFix 07-08-30.3 - “Rodzina” 2007-09-03 18:25:03.2 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.0.1250.1.1045.18.709 [GMT 2:00]

((((((((((((((((((((((((( Files Created from 2007-08-03 to 2007-09-03 )))))))))))))))))))))))))))))))

2007-09-03 17:40 51,200 --a------ D:\WINDOWS\nircmd.exe

2007-09-03 17:26

2007-08-24 22:09 45,952 --a–c— D:\WINDOWS\system32\dllcache\61883.sys

2007-08-24 22:09 45,952 --a------ D:\WINDOWS\system32\drivers\61883.sys

2007-08-24 22:09 35,584 --a–c— D:\WINDOWS\system32\dllcache\avc.sys

2007-08-24 22:09 35,584 --a------ D:\WINDOWS\system32\drivers\avc.sys

2007-08-24 22:09

2007-08-24 22:06

2007-08-24 22:05

2007-08-24 01:40

2007-08-23 12:29 14,165 --------- D:\WINDOWS\system32\drivers\Pclepci.sys

2007-08-22 20:44

2007-08-22 20:35

2007-08-22 20:34

2007-08-22 12:24 8,192 --a–c— D:\WINDOWS\system32\dllcache\tsbyuv.dll

2007-08-22 12:24 8,192 --a------ D:\WINDOWS\system32\tsbyuv.dll

2007-08-22 12:24 50,688 --a–c— D:\WINDOWS\system32\dllcache\vfwwdm32.dll

2007-08-22 12:24 50,688 --a------ D:\WINDOWS\system32\vfwwdm32.dll

2007-08-22 12:24 45,568 --a–c— D:\WINDOWS\system32\dllcache\iyuv_32.dll

2007-08-22 12:24 45,568 --a------ D:\WINDOWS\system32\iyuv_32.dll

2007-08-21 14:59 753 --a------ D:\WINDOWS\system32\unins000.dat

2007-08-20 16:47

2007-08-20 16:06

2007-08-20 15:53

2007-08-20 15:09

2007-08-20 01:19 356,352 --a------ D:\WINDOWS\system32\nvudisp.exe

2007-08-20 01:15 356,352 --a------ D:\WINDOWS\system32\NVUNINST.EXE

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-09-03 17:46 23524 --a------ D:\WINDOWS\system32\drivers\GVTDrv.sys

2007-09-01 20:27 --------- d-------- D:\Program Files\DScaler

2007-08-29 23:51 --------- d-------- D:\DOCUME~1\Rodzina\DANEAP~1\Skype

2007-08-24 22:05 --------- d–h----- D:\Program Files\InstallShield Installation Information

2007-08-19 11:09 --------- d-------- D:\Program Files\Gadu-Gadu

2007-08-18 16:36 --------- d-------- D:\Program Files\Creative

2007-08-02 13:44 --------- d-------- D:\DOCUME~1\ALLUSE~1\DANEAP~1\Test Drive Unlimited

2007-07-31 15:14 --------- d-------- D:\DOCUME~1\Rodzina\DANEAP~1\Canon

2007-07-30 19:19 92504 --a------ D:\WINDOWS\system32\cdm.dll

2007-07-30 19:19 549720 --a------ D:\WINDOWS\system32\wuapi.dll

2007-07-30 19:19 53080 --a------ D:\WINDOWS\system32\wuauclt.exe

2007-07-30 19:19 325976 --a------ D:\WINDOWS\system32\wucltui.dll

2007-07-30 19:19 203096 --a------ D:\WINDOWS\system32\wuweb.dll

2007-07-30 19:19 1712984 --a------ D:\WINDOWS\system32\wuaueng.dll

2007-07-30 13:29 --------- d-------- D:\Program Files\UBISOFT

2007-07-25 20:29 --------- d-------- D:\DOCUME~1\Rodzina\DANEAP~1\InstallShield

2007-07-24 23:21 --------- d-------- D:\DOCUME~1\Rodzina\DANEAP~1\Google

2007-07-20 18:58 --------- d-------- D:\Program Files\Codemasters

2007-07-20 18:57 --------- d-------- D:\Program Files\Winamp

2007-07-20 18:56 --------- d-------- D:\Program Files\DicomWorks

2007-07-18 19:27 --------- d-------- D:\DOCUME~1\Rodzina\DANEAP~1\Sony Corporation

2007-07-18 19:18 --------- d-------- D:\Program Files\Sony

2007-06-29 00:43 8466432 --a------ D:\WINDOWS\system32\nvcpl.dll

2007-06-29 00:43 81920 --a------ D:\WINDOWS\system32\nvwddi.dll

2007-06-29 00:43 81920 --a------ D:\WINDOWS\system32\nvmctray.dll

2007-06-29 00:43 753664 --a------ D:\WINDOWS\system32\nvcplui.exe

2007-06-29 00:43 6729728 --a------ D:\WINDOWS\system32\nvoglnt.dll

2007-06-29 00:43 6234112 --a------ D:\WINDOWS\system32\nvdisps.dll

2007-06-29 00:43 5690624 --a------ D:\WINDOWS\system32\nv4_disp.dll

2007-06-29 00:43 5455872 --a------ D:\WINDOWS\system32\nvdispsr.dll

2007-06-29 00:43 466944 --a------ D:\WINDOWS\system32\nvshell.dll

2007-06-29 00:43 458752 --a------ D:\WINDOWS\system32\nvmccssr.dll

2007-06-29 00:43 45056 --a------ D:\WINDOWS\system32\nvmccsrs.dll

2007-06-29 00:43 442368 --a------ D:\WINDOWS\system32\nvappbar.exe

2007-06-29 00:43 425984 --a------ D:\WINDOWS\system32\keystone.exe

2007-06-29 00:43 37376 --a------ D:\WINDOWS\system32\nvcodins.dll

2007-06-29 00:43 37376 --a------ D:\WINDOWS\system32\nvcod.dll

2007-06-29 00:43 360448 --a------ D:\WINDOWS\system32\nvapi.dll

2007-06-29 00:43 3600384 --a------ D:\WINDOWS\system32\nvvitvsr.dll

2007-06-29 00:43 3518464 --a------ D:\WINDOWS\system32\nvvitvs.dll

2007-06-29 00:43 335872 --a------ D:\WINDOWS\system32\nvwrses.dll

2007-06-29 00:43 335872 --a------ D:\WINDOWS\system32\nvwrsel.dll

2007-06-29 00:43 3321856 --a------ D:\WINDOWS\system32\nvgames.dll

2007-06-29 00:43 327680 --a------ D:\WINDOWS\system32\nvwrsfr.dll

2007-06-29 00:43 327680 --a------ D:\WINDOWS\system32\nvwrsesm.dll

2007-06-29 00:43 327680 --a------ D:\WINDOWS\system32\nvrshe.dll

2007-06-29 00:43 327680 --a------ D:\WINDOWS\system32\nvrsar.dll

2007-06-29 00:43 323584 --a------ D:\WINDOWS\system32\nvwrspt.dll

2007-06-29 00:43 323584 --a------ D:\WINDOWS\system32\nvwrsit.dll

2007-06-29 00:43 319488 --a------ D:\WINDOWS\system32\nvwrsptb.dll

2007-06-29 00:43 319488 --a------ D:\WINDOWS\system32\nvwrsnl.dll

2007-06-29 00:43 315392 --a------ D:\WINDOWS\system32\nvwrsru.dll

2007-06-29 00:43 315392 --a------ D:\WINDOWS\system32\nvwrshu.dll

2007-06-29 00:43 311296 --a------ D:\WINDOWS\system32\nvwrsde.dll

2007-06-29 00:43 3072000 --a------ D:\WINDOWS\system32\nvgamesr.dll

2007-06-29 00:43 307200 --a------ D:\WINDOWS\system32\nvexpbar.dll

2007-06-29 00:43 303104 --a------ D:\WINDOWS\system32\nvwrstr.dll

2007-06-29 00:43 303104 --a------ D:\WINDOWS\system32\nvwrssl.dll

2007-06-29 00:43 303104 --a------ D:\WINDOWS\system32\nvwrsfi.dll

2007-06-29 00:43 299008 --a------ D:\WINDOWS\system32\nvwrssk.dll

2007-06-29 00:43 299008 --a------ D:\WINDOWS\system32\nvwrsno.dll

2007-06-29 00:43 294912 --a------ D:\WINDOWS\system32\nvwrssv.dll

2007-06-29 00:43 294912 --a------ D:\WINDOWS\system32\nvwrspl.dll

2007-06-29 00:43 294912 --a------ D:\WINDOWS\system32\nvwrsda.dll

2007-06-29 00:43 286720 --a------ D:\WINDOWS\system32\nvwrseng.dll

2007-06-29 00:43 286720 --a------ D:\WINDOWS\system32\nvwrscs.dll

2007-06-29 00:43 286720 --a------ D:\WINDOWS\system32\nvnt4cpl.dll

2007-06-29 00:43 2854912 --a------ D:\WINDOWS\system32\nvmoblsr.dll

2007-06-29 00:43 282624 --a------ D:\WINDOWS\system32\nvwrsar.dll

2007-06-29 00:43 282624 --a------ D:\WINDOWS\system32\nvrsfr.dll

2007-06-29 00:43 282624 --a------ D:\WINDOWS\system32\nvrses.dll

2007-06-29 00:43 282624 --a------ D:\WINDOWS\system32\nvrsel.dll

2007-06-29 00:43 278528 --a------ D:\WINDOWS\system32\nvwrshe.dll

2007-06-29 00:43 278528 --a------ D:\WINDOWS\system32\nvrsit.dll

2007-06-29 00:43 278528 --a------ D:\WINDOWS\system32\nvrsde.dll

2007-06-29 00:43 274432 --a------ D:\WINDOWS\system32\nvrspt.dll

2007-06-29 00:43 274432 --a------ D:\WINDOWS\system32\nvrsnl.dll

2007-06-29 00:43 274432 --a------ D:\WINDOWS\system32\nvrsesm.dll

2007-06-29 00:43 270336 --a------ D:\WINDOWS\system32\nvrsru.dll

2007-06-29 00:43 266240 --a------ D:\WINDOWS\system32\nvrsptb.dll

2007-06-29 00:43 266240 --a------ D:\WINDOWS\system32\nvrsja.dll

2007-06-29 00:43 262144 --a------ D:\WINDOWS\system32\nvrsko.dll

2007-06-29 00:43 258048 --a------ D:\WINDOWS\system32\nvrstr.dll

2007-06-29 00:43 258048 --a------ D:\WINDOWS\system32\nvrssl.dll

2007-06-29 00:43 258048 --a------ D:\WINDOWS\system32\nvrssk.dll

2007-06-29 00:43 258048 --a------ D:\WINDOWS\system32\nvrshu.dll

2007-06-29 00:43 253952 --a------ D:\WINDOWS\system32\nvrssv.dll

2007-06-29 00:43 253952 --a------ D:\WINDOWS\system32\nvrspl.dll

2007-06-29 00:43 253952 --a------ D:\WINDOWS\system32\nvrsno.dll

2007-06-29 00:43 253952 --a------ D:\WINDOWS\system32\nvrsda.dll

2007-06-29 00:43 249856 --a------ D:\WINDOWS\system32\nvrsfi.dll

2007-06-29 00:43 249856 --a------ D:\WINDOWS\system32\nvrscs.dll

2007-06-29 00:43 245760 --a------ D:\WINDOWS\system32\nvrseng.dll

2007-06-29 00:43 2416640 --a------ D:\WINDOWS\system32\nvwssr.dll

2007-06-29 00:43 2330624 --a------ D:\WINDOWS\system32\nvwss.dll

2007-06-29 00:43 229376 --a------ D:\WINDOWS\system32\nvmccs.dll

2007-06-29 00:43 225280 --a------ D:\WINDOWS\system32\nvrszhc.dll

2007-06-29 00:43 212992 --a------ D:\WINDOWS\system32\nvwrsja.dll

2007-06-29 00:43 196608 --a------ D:\WINDOWS\system32\nvwrsko.dll

2007-06-29 00:43 188416 --a------ D:\WINDOWS\system32\nvmccss.dll

((((((((((((((((((((((((((((( snapshot_2007-09-03_174905.14 )))))))))))))))))))))))))))))))))))))))))

-c–a-w 92,504 2007-07-30 17:19:20 D:\WINDOWS\system32\dllcache\cdm.dll

-c–a-w 53,080 2007-07-30 17:19:16 D:\WINDOWS\system32\dllcache\wuauclt.exe

-c–a-w 1,712,984 2007-07-30 17:19:42 D:\WINDOWS\system32\dllcache\wuaueng.dll

----a-w 33,624 2007-07-30 17:18:40 D:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.0.6000.381\wups.dll

----a-w 43,352 2007-07-30 17:19:12 D:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.0.6000.381\wups2.dll

-c–a-w 92,504 2007-04-16 20:45:28 D:\WINDOWS\system32\dllcache\cdm.dll

-c–a-w 53,080 2007-04-16 20:45:20 D:\WINDOWS\system32\dllcache\wuauclt.exe

-c–a-w 1,710,936 2007-04-16 20:45:54 D:\WINDOWS\system32\dllcache\wuaueng.dll

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

“CTSysVol”=“D:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe” [2003-09-17 11:43]

“avast!”=“D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe” [2007-01-15 19:28]

“VGAUtil”=“D:\Program Files\GigaByte\VGA Utility Manager\G-VGA.exe” [2004-09-17 14:32]

“CmUsbSound”=“cmcnfgu.cpl” []

“Disk Monitor”=“D:\Program Files\IC\Card Reader Driver v1.9e\Disk_Monitor.exe” [2003-06-18 11:57]

“WireLessKeyboard”=“D:\Program Files\Multimedia Keyboard Driver\StartAutorun.exe” [2005-11-30 13:48]

“NvCplDaemon”=“D:\WINDOWS\System32\NvCpl.dll” [2007-06-29 00:43]

“NvMediaCenter”=“D:\WINDOWS\System32\NvMcTray.dll” [2007-06-29 00:43]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

“CTFMON.EXE”=“D:\WINDOWS\System32\ctfmon.exe” [2001-10-26 19:29]

“Creative WebCam Tray”=“D:\Program Files\Creative\Shared Files\CamTray.exe” [2005-10-27 12:00]

“H/PC Connection Agent”=“D:\Program Files\Microsoft ActiveSync\wcescomm.exe” [2006-11-13 15:57]

D:\DOCUME~1\Rodzina\MENUST~1\Programy\AUTOST~1\

Picture Motion Browser Media Check Tool.lnk - D:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe [2007-07-18 19:18:17]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

D:\Program Files\Java\jre1.6.0_02\bin\jusched.exe

R0 iteraid;ITERAID_Service_Install;D:\WINDOWS\System32\DRIVERS\iteraid.sys

R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x);D:\WINDOWS\System32\drivers\sfsync03.sys

R0 viamraid;viamraid;D:\WINDOWS\System32\DRIVERS\viamraid.sys

R2 BT848;Conexant’s BtPCI WDM Video Capture;D:\WINDOWS\System32\DRIVERS\BT848.sys

R2 TBPanel;TBPanel;D:\WINDOWS\System32\drivers\TBPanel.sys

R2 WinDriver;WinDriver;??\D:\WINDOWS\System32\WINDRVR.SYS

R3 actser;actser;D:\WINDOWS\System32\drivers\actser.sys

R3 cmudau;C-Media USB Sound Interface;D:\WINDOWS\System32\drivers\cmudau.sys

R3 GVTDrv;GVTDrv;D:\WINDOWS\System32\drivers\GVTDrv.sys

R3 P17;Sound Blaster Live! 24-bit;D:\WINDOWS\System32\drivers\P17.sys

R3 Pcatip;Pcatip;D:\WINDOWS\System32\DRIVERS\Pcatip.sys

S3 BTNetFilter;Bluetooth Network Filter;??\D:\WINDOWS\system32\drivers\BTNetFilter.sys

S3 Cardex;Cardex;??\D:\WINDOWS\system32\drivers\TBPANEL.SYS

S3 DSDrv4;DSDrv4;??\D:\PROGRA~1\DScaler\DSDrv4.sys

S3 dTVdrvNT;dTVdrvNT;??\D:\WINDOWS\SYSTEM32\dTVdrvNT.sys

S3 gtermddo;gtermddo;??\D:\DOCUME~1\Rodzina\USTAWI~1\Temp\gtermddo.sys

S3 GVCplDrv;GVCplDrv;D:\WINDOWS\System32\drivers\GVCplDrv.sys

S3 MSIRCOMM;Microsoft IR Communications Driver;D:\WINDOWS\System32\DRIVERS\MSIRCOMM.sys

S3 sonypvs1;Sony Digital Imaging Video2;D:\WINDOWS\System32\DRIVERS\sonypvs1.sys

S3 U81xbus;LGE U8110 driver (WDM);D:\WINDOWS\System32\DRIVERS\U81xbus.sys

S3 U81xmdfl;LGE U8110 USB WMC Modem Filter;D:\WINDOWS\System32\DRIVERS\U81xmdfl.sys

S3 U81xmdm;LGE U8110 USB WMC Modem Driver;D:\WINDOWS\System32\DRIVERS\U81xmdm.sys

S3 U81xmgmt;LGE U8110 USB WMC Device Management Drivers (WDM);D:\WINDOWS\System32\DRIVERS\U81xmgmt.sys

S3 U81xobex;LGE U8110 USB WMC OBEX Interface;D:\WINDOWS\System32\DRIVERS\U81xobex.sys

S3 ulusba;NEC 616 Command Port Driver;D:\WINDOWS\System32\DRIVERS\ulusba.sys

S3 ulusbc;NEC 616 CONTROL Driver;D:\WINDOWS\System32\DRIVERS\ulusbc.sys

S3 ulusbe;NEC 616 ENUMERATION Driver;D:\WINDOWS\System32\DRIVERS\ulusbe.sys

S3 ulusbm;NEC 616 Modem Driver;D:\WINDOWS\System32\DRIVERS\ulusbm.sys

S3 ulusbo;NEC 616 OBEX Port Driver;D:\WINDOWS\System32\DRIVERS\ulusbo.sys

S3 V0260VID;Live! Cam Vista IM;D:\WINDOWS\System32\DRIVERS\V0260Vid.sys

**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2007-09-03 18:27:10

Windows 5.1.2600 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully

hidden files: 0

**************************************************************************

Completion time: 2007-09-03 18:27:52

D:\ComboFix-quarantined-files.txt … 2007-09-03 18:27

D:\ComboFix2.txt … 2007-09-03 17:49

— E O F —

nie wiem czy cos nei namieszalem już:D

adam9870 · 3 Wrzesień 2007 16:33

Pokaż dwa logi z Gmer’a wykonane przy takich ustawieniach:

Zakładka Rootkit >>> zaznaczone wszystko oprócz Pokazuj wszystko >>> kliknij Szukaj >>> czekaj cierpliwie aż skończy >>> Kopiuj >>> wklej do posta
Zakładka Rootkit >>> zaznaczone tylko Usługi i Pokazuj wszystko >>> kliknij Szukaj >>> czekaj cierpliwie aż skończy >>> Kopiuj >>> wklej do posta

Jeśli wszystkie logi nie zmieszczą się bezpośrednio do posta, to umieść je w jakimś serwisie hostingowym jako pliki *.txt, a tu tylko zlinkuj.

arturoos1990 · 3 Wrzesień 2007 17:02

Pierwszy log:

http://wklej.org/id/7ee47befdf

Złączono Posta : 03.09.2007 (Pon) 19:03

i log numer 2

http://wklej.org/id/2a94a4f987

adam9870 · 3 Wrzesień 2007 17:45

Pobierz Gmer’a.

Teraz czynności będziesz wykonywał w Gmerze więc uruchom go, poczekaj chwilkę, kliknij na zakładkę >>> w celu otworzenia pozostałych.

w zakładce Procesy kliknij Gmer awaryjny. Komputer zostanie uruchomiony ponownie i zostanie samo okienko Gmer’a
w zakładce Usługi skasuj z prawokliku usługę gtermddo
w zakładce Procesy kliknij Pliki i opróżnij katalog:

w zakładce Procesy kliknij Restart

Po wykonaniu wklej nowy log z Gmer’a wykonany przy ustawieniu Usługi + pokazuj wszystko.

arturoos1990 · 3 Wrzesień 2007 18:08

zrobione jak kazałeś

oto log

GMER 1.0.13.12551 - http://www.gmer.net Rootkit scan 2007-09-03 20:07:24 Windows 5.1.2600 ---- Services - GMER 1.0.13 ---- Service .NET CLR Data Service .NET CLR Networking Service .NET Data Provider for Oracle Service .NET Data Provider for SqlServer Service .NETFramework Service D:\WINDOWS\System32\DRIVERS\61883.sys [MANUAL] 61883 Service [sYSTEM] Aavmker4 Service [DISABLED] Abiosdsk Service [DISABLED] abp480n5 Service D:\WINDOWS\System32\DRIVERS\ACPI.sys [bOOT] ACPI Service [DISABLED] ACPIEC Service D:\WINDOWS\system32\drivers\actser.sys [MANUAL] actser Service [DISABLED] adpu160m Service D:\WINDOWS\system32\drivers\aec.sys [MANUAL] aec Service D:\WINDOWS\System32\drivers\afd.sys [AUTO] AFD Service [DISABLED] Aha154x Service [DISABLED] aic78u2 Service [DISABLED] aic78xx Service D:\WINDOWS\system32\drivers\ALCXWDM.SYS [MANUAL] ALCXWDM Service D:\WINDOWS\System32\svchost.exe [MANUAL] Alerter Service D:\WINDOWS\System32\alg.exe [MANUAL] ALG Service [DISABLED] AliIde Service D:\WINDOWS\System32\DRIVERS\AmdK8.sys [sYSTEM] AmdK8 Service [DISABLED] amsint Service D:\WINDOWS\system32\svchost.exe [MANUAL] AppMgmt Service D:\WINDOWS\System32\DRIVERS\arp1394.sys [MANUAL] Arp1394 Service [DISABLED] asc Service [DISABLED] asc3350p Service [DISABLED] asc3550 Service ASP.NET Service ASP.NET_2.0.50727 Service ASPI32 Service D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [MANUAL] aspnet_state Service [AUTO] aswMon2 Service [MANUAL] aswRdr Service [sYSTEM] aswTdi Service D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [AUTO] aswUpdSv Service D:\WINDOWS\System32\DRIVERS\asyncmac.sys [MANUAL] AsyncMac Service D:\WINDOWS\System32\DRIVERS\atapi.sys [bOOT] atapi Service [DISABLED] Atdisk Service D:\WINDOWS\System32\DRIVERS\atksgt.sys [AUTO] atksgt Service D:\WINDOWS\System32\DRIVERS\atmarpc.sys [MANUAL] Atmarpc Service D:\WINDOWS\System32\svchost.exe [AUTO] AudioSrv Service D:\WINDOWS\System32\DRIVERS\audstub.sys [MANUAL] audstub Service D:\Program Files\Alwil Software\Avast4\ashServ.exe [AUTO] avast! Antivirus Service D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [MANUAL] avast! Mail Scanner Service D:\Program Files\Alwil Software\Avast4\ashWebSv.exe [MANUAL] avast! Web Scanner Service D:\WINDOWS\System32\DRIVERS\avc.sys [MANUAL] Avc Service BattC Service [sYSTEM] Beep Service D:\WINDOWS\System32\svchost.exe [MANUAL] BITS Service D:\WINDOWS\System32\DRIVERS\blueletaudio.sys [MANUAL] BlueletAudio Service D:\WINDOWS\System32\svchost.exe [AUTO] Browser Service D:\WINDOWS\System32\DRIVERS\btnetdrv.sys [MANUAL] BT Service D:\WINDOWS\System32\DRIVERS\BT848.sys [AUTO] BT848 Service D:\WINDOWS\System32\Drivers\btcusb.sys [MANUAL] Btcsrusb Service D:\WINDOWS\System32\DRIVERS\vbtenum.sys [MANUAL] BTHidEnum Service D:\WINDOWS\System32\Drivers\BTHidMgr.sys [bOOT] BTHidMgr Service D:\WINDOWS\system32\drivers\BTNetFilter.sys [MANUAL] BTNetFilter Service D:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe [AUTO] Capture Device Service Service D:\WINDOWS\system32\drivers\TBPANEL.SYS [MANUAL] Cardex Service D:\DOCUME~1\Rodzina\USTAWI~1\Temp\catchme.sys [MANUAL] catchme Service [DISABLED] cbidf2k Service D:\WINDOWS\System32\DRIVERS\CCDECODE.sys [MANUAL] CCDECODE Service [DISABLED] cd20xrnt Service [sYSTEM] Cdaudio Service [DISABLED] Cdfs Service D:\WINDOWS\System32\DRIVERS\cdrom.sys [sYSTEM] Cdrom Service [sYSTEM] Changer Service D:\WINDOWS\system32\cisvc.exe [MANUAL] cisvc Service Class Service D:\WINDOWS\system32\clipsrv.exe [DISABLED] ClipSrv Service D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [MANUAL] clr_optimization_v2.0.50727_32 Service [DISABLED] CmdIde Service D:\WINDOWS\system32\drivers\cmudau.sys [MANUAL] cmudau Service D:\WINDOWS\System32\dllhost.exe [MANUAL] COMSysApp Service ContentFilter Service ContentIndex Service [DISABLED] Cpqarray Service D:\WINDOWS\System32\CTsvcCDA.exe [AUTO] Creative Service for CDROM Access Service D:\WINDOWS\system32\svchost.exe [AUTO] CryptSvc Service D:\WINDOWS\System32\DRIVERS\ctsfm2k.sys [MANUAL] ctsfm2k Service D:\WINDOWS\System32\DRIVERS\d347bus.sys [bOOT] d347bus Service D:\WINDOWS\System32\Drivers\d347prt.sys [bOOT] d347prt Service [DISABLED] dac2w2k Service [DISABLED] dac960nt Service D:\WINDOWS\System32\svchost.exe [AUTO] Dhcp Service D:\WINDOWS\System32\DRIVERS\disk.sys [bOOT] Disk Service D:\WINDOWS\System32\dmadmin.exe [MANUAL] dmadmin Service D:\WINDOWS\System32\drivers\dmboot.sys [DISABLED] dmboot Service D:\WINDOWS\System32\drivers\dmio.sys [bOOT] dmio Service D:\WINDOWS\System32\drivers\dmload.sys [bOOT] dmload Service D:\WINDOWS\System32\svchost.exe [AUTO] dmserver Service D:\WINDOWS\system32\drivers\DMusic.sys [MANUAL] DMusic Service D:\WINDOWS\System32\svchost.exe [AUTO] Dnscache Service [DISABLED] dpti2o Service D:\WINDOWS\system32\drivers\drmkaud.sys [MANUAL] drmkaud Service D:\Program Files\DScaler\DSDrv4.sys [MANUAL] DSDrv4 Service D:\WINDOWS\SYSTEM32\dTVdrvNT.sys [MANUAL] dTVdrvNT Service D:\WINDOWS\System32\DRIVERS\ENTECH.SYS [MANUAL] ENTECH Service D:\WINDOWS\System32\svchost.exe [AUTO] ERSvc Service ET5Drv Service D:\WINDOWS\system32\services.exe [AUTO] Eventlog Service D:\WINDOWS\System32\svchost.exe [MANUAL] EventSystem Service [DISABLED] Fastfat Service D:\WINDOWS\System32\svchost.exe [MANUAL] FastUserSwitchingCompatibility Service D:\WINDOWS\System32\DRIVERS\fdc.sys [MANUAL] Fdc Service [sYSTEM] Fips Service D:\WINDOWS\System32\DRIVERS\flpydisk.sys [MANUAL] Flpydisk Service [sYSTEM] Fs_Rec Service D:\WINDOWS\System32\DRIVERS\ftdisk.sys [bOOT] Ftdisk Service D:\WINDOWS\System32\DRIVERS\gameenum.sys [MANUAL] gameenum Service D:\WINDOWS\System32\DRIVERS\gmer.sys [MANUAL] gmer Service D:\WINDOWS\System32\DRIVERS\msgpc.sys [MANUAL] Gpc Service [MANUAL] GVCplDrv Service [MANUAL] GVTDrv Service D:\WINDOWS\System32\svchost.exe [AUTO] helpsvc Service D:\WINDOWS\System32\svchost.exe [DISABLED] HidServ Service D:\WINDOWS\System32\DRIVERS\hidusb.sys [MANUAL] HidUsb Service [DISABLED] hpn Service [DISABLED] hpt3xx Service HWIONT Service [sYSTEM] i2omgmt Service [DISABLED] i2omp Service D:\WINDOWS\System32\DRIVERS\i8042prt.sys [sYSTEM] i8042prt Service ICSharing Service D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [MANUAL] IDriverT Service [sYSTEM] Imapi Service D:\WINDOWS\System32\imapi.exe [MANUAL] ImapiService Service inetaccs Service [DISABLED] ini910u Service Inport Service [DISABLED] IntelIde Service D:\WINDOWS\System32\DRIVERS\ipfltdrv.sys [MANUAL] IpFilterDriver Service D:\WINDOWS\System32\DRIVERS\ipinip.sys [MANUAL] IpInIp Service D:\WINDOWS\System32\DRIVERS\ipnat.sys [MANUAL] IpNat Service D:\WINDOWS\System32\DRIVERS\ipsec.sys [sYSTEM] IPSec Service D:\WINDOWS\System32\DRIVERS\irda.sys [AUTO] irda Service D:\WINDOWS\System32\DRIVERS\irenum.sys [MANUAL] IRENUM Service D:\WINDOWS\System32\svchost.exe [AUTO] Irmon Service ISAPISearch Service D:\WINDOWS\System32\DRIVERS\isapnp.sys [bOOT] isapnp Service D:\WINDOWS\System32\DRIVERS\iteraid.sys [bOOT] iteraid Service D:\WINDOWS\System32\DRIVERS\k750bus.sys [MANUAL] k750bus Service D:\WINDOWS\System32\DRIVERS\k750mdfl.sys [MANUAL] k750mdfl Service D:\WINDOWS\System32\DRIVERS\k750mdm.sys [MANUAL] k750mdm Service D:\WINDOWS\System32\DRIVERS\k750mgmt.sys [MANUAL] k750mgmt Service D:\WINDOWS\System32\DRIVERS\k750obex.sys [MANUAL] k750obex Service D:\WINDOWS\System32\DRIVERS\kbdclass.sys [sYSTEM] Kbdclass Service D:\WINDOWS\System32\DRIVERS\kbdhid.sys [sYSTEM] kbdhid Service D:\WINDOWS\system32\drivers\kmixer.sys [MANUAL] kmixer Service [bOOT] KSecDD Service D:\WINDOWS\System32\svchost.exe [AUTO] lanmanserver Service D:\WINDOWS\System32\svchost.exe [AUTO] lanmanworkstation Service [sYSTEM] lbrtfdc Service ldap Service LicenseService Service D:\WINDOWS\System32\DRIVERS\lirsgt.sys [AUTO] lirsgt Service D:\WINDOWS\System32\svchost.exe [AUTO] LmHosts Service D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [AUTO] MDM Service D:\WINDOWS\System32\svchost.exe [AUTO] Messenger Service [sYSTEM] mnmdd Service D:\WINDOWS\System32\mnmsrvc.exe [MANUAL] mnmsrvc Service [MANUAL] Modem Service D:\WINDOWS\System32\DRIVERS\mouclass.sys [sYSTEM] Mouclass Service D:\WINDOWS\System32\DRIVERS\mouhid.sys [MANUAL] mouhid Service [bOOT] MountMgr Service [DISABLED] mraid35x Service D:\WINDOWS\System32\DRIVERS\mrxdav.sys [MANUAL] MRxDAV Service D:\WINDOWS\System32\DRIVERS\mrxsmb.sys [sYSTEM] MRxSmb Service D:\WINDOWS\System32\msdtc.exe [MANUAL] MSDTC Service D:\WINDOWS\System32\DRIVERS\msdv.sys [MANUAL] MSDV Service [sYSTEM] Msfs Service D:\WINDOWS\System32\DRIVERS\MSIRCOMM.sys [MANUAL] MSIRCOMM Service D:\WINDOWS\System32\msiexec.exe [MANUAL] MSIServer Service D:\WINDOWS\system32\drivers\MSKSSRV.sys [MANUAL] MSKSSRV Service D:\WINDOWS\system32\drivers\MSPCLOCK.sys [MANUAL] MSPCLOCK Service D:\WINDOWS\system32\drivers\MSPQM.sys [MANUAL] MSPQM Service D:\WINDOWS\system32\drivers\MSTEE.sys [MANUAL] MSTEE Service [bOOT] Mup Service D:\WINDOWS\System32\DRIVERS\NABTSFEC.sys [MANUAL] NABTSFEC Service [bOOT] NDIS Service D:\WINDOWS\System32\DRIVERS\NdisIP.sys [MANUAL] NdisIP Service D:\WINDOWS\System32\DRIVERS\ndistapi.sys [MANUAL] NdisTapi Service D:\WINDOWS\System32\DRIVERS\ndisuio.sys [MANUAL] Ndisuio Service D:\WINDOWS\System32\DRIVERS\ndiswan.sys [MANUAL] NdisWan Service [MANUAL] NDProxy Service D:\WINDOWS\System32\DRIVERS\netbios.sys [sYSTEM] NetBIOS Service D:\WINDOWS\System32\DRIVERS\netbt.sys [sYSTEM] NetBT Service D:\WINDOWS\system32\netdde.exe [MANUAL] NetDDE Service D:\WINDOWS\system32\netdde.exe [MANUAL] NetDDEdsdm Service D:\WINDOWS\System32\lsass.exe [MANUAL] Netlogon Service D:\WINDOWS\System32\svchost.exe [MANUAL] Netman Service D:\WINDOWS\System32\DRIVERS\nic1394.sys [MANUAL] NIC1394 Service D:\WINDOWS\System32\svchost.exe [MANUAL] Nla Service [sYSTEM] Npfs Service [DISABLED] Ntfs Service D:\WINDOWS\System32\lsass.exe [MANUAL] NtLmSsp Service D:\WINDOWS\system32\svchost.exe [MANUAL] NtmsSvc Service [sYSTEM] Null Service D:\WINDOWS\System32\DRIVERS\nv4_mini.sys [MANUAL] nv Service D:\WINDOWS\System32\nvsvc32.exe [AUTO] NVSvc Service D:\WINDOWS\System32\DRIVERS\nwlnkflt.sys [MANUAL] NwlnkFlt Service D:\WINDOWS\System32\DRIVERS\nwlnkfwd.sys [MANUAL] NwlnkFwd Service D:\WINDOWS\System32\DRIVERS\ohci1394.sys [bOOT] ohci1394 Service D:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [MANUAL] ose Service D:\WINDOWS\System32\DRIVERS\ctoss2k.sys [MANUAL] ossrv Service Outlook Service D:\WINDOWS\system32\drivers\P17.sys [MANUAL] P17 Service D:\WINDOWS\System32\DRIVERS\parport.sys [MANUAL] Parport Service [bOOT] PartMgr Service [AUTO] ParVdm Service D:\WINDOWS\System32\DRIVERS\Pcatip.sys [MANUAL] Pcatip Service D:\WINDOWS\System32\DRIVERS\pci.sys [bOOT] PCI Service [sYSTEM] PCIDump Service [DISABLED] PCIIde Service D:\WINDOWS\System32\drivers\pclepci.sys [sYSTEM] PCLEPCI Service [DISABLED] Pcmcia Service D:\WINDOWS\System32\Drivers\Pcouffin.sys [MANUAL] Pcouffin Service [MANUAL] PDCOMP Service [MANUAL] PDFRAME Service [MANUAL] PDRELI Service [MANUAL] PDRFRAME Service [DISABLED] perc2 Service [DISABLED] perc2hib Service PerfDisk Service PerfNet Service PerfOS Service PerfProc Service D:\WINDOWS\System32\drivers\PfModNT.sys [AUTO] PfModNT Service D:\WINDOWS\system32\services.exe [AUTO] PlugPlay Service D:\WINDOWS\System32\lsass.exe [AUTO] PolicyAgent Service D:\WINDOWS\System32\DRIVERS\raspptp.sys [MANUAL] PptpMiniport Service D:\WINDOWS\System32\DRIVERS\processr.sys [sYSTEM] Processor Service D:\WINDOWS\system32\lsass.exe [AUTO] ProtectedStorage Service D:\WINDOWS\System32\DRIVERS\psched.sys [MANUAL] PSched Service D:\WINDOWS\System32\DRIVERS\ptilink.sys [MANUAL] Ptilink Service D:\WINDOWS\System32\Drivers\PxHelp20.sys [bOOT] PxHelp20 Service [DISABLED] ql1080 Service [DISABLED] Ql10wnt Service [DISABLED] ql12160 Service [DISABLED] ql1240 Service [DISABLED] ql1280 Service D:\WINDOWS\System32\DRIVERS\rasacd.sys [sYSTEM] RasAcd Service D:\WINDOWS\System32\svchost.exe [MANUAL] RasAuto Service D:\WINDOWS\System32\DRIVERS\rasirda.sys [MANUAL] Rasirda Service D:\WINDOWS\System32\DRIVERS\rasl2tp.sys [MANUAL] Rasl2tp Service D:\WINDOWS\System32\svchost.exe [MANUAL] RasMan Service D:\WINDOWS\System32\DRIVERS\raspppoe.sys [MANUAL] RasPppoe Service D:\WINDOWS\System32\DRIVERS\raspti.sys [MANUAL] Raspti Service D:\WINDOWS\System32\DRIVERS\rdbss.sys [sYSTEM] Rdbss Service D:\WINDOWS\System32\DRIVERS\RDPCDD.sys [sYSTEM] RDPCDD Service RDPDD Service D:\WINDOWS\System32\DRIVERS\rdpdr.sys [MANUAL] rdpdr Service RDPNP Service [MANUAL] RDPWD Service D:\WINDOWS\system32\sessmgr.exe [MANUAL] RDSessMgr Service D:\WINDOWS\System32\DRIVERS\redbook.sys [sYSTEM] redbook Service D:\WINDOWS\System32\svchost.exe [DISABLED] RemoteAccess Service D:\WINDOWS\system32\svchost.exe [AUTO] RemoteRegistry Service D:\WINDOWS\System32\Drivers\RootMdm.sys [MANUAL] ROOTMODEM Service D:\WINDOWS\System32\locator.exe [MANUAL] RpcLocator Service D:\WINDOWS\system32\svchost.exe [AUTO] RpcSs Service RSVP Service D:\WINDOWS\System32\DRIVERS\Rtlnicxp.sys [MANUAL] RTL8023xp Service D:\WINDOWS\system32\lsass.exe [AUTO] SamSs Service D:\WINDOWS\System32\SCardSvr.exe [MANUAL] SCardDrv Service D:\WINDOWS\System32\SCardSvr.exe [MANUAL] SCardSvr Service D:\WINDOWS\System32\svchost.exe [AUTO] Schedule Service D:\WINDOWS\System32\DRIVERS\secdrv.sys [AUTO] Secdrv Service D:\WINDOWS\System32\svchost.exe [AUTO] seclogon Service D:\WINDOWS\system32\svchost.exe [AUTO] SENS Service D:\WINDOWS\System32\DRIVERS\serenum.sys [MANUAL] serenum Service D:\WINDOWS\System32\DRIVERS\serial.sys [sYSTEM] Serial Service D:\WINDOWS\System32\drivers\sfdrv01.sys [bOOT] sfdrv01 Service D:\WINDOWS\System32\drivers\sfhlp02.sys [bOOT] sfhlp02 Service [sYSTEM] Sfloppy Service D:\WINDOWS\System32\drivers\sfsync02.sys [bOOT] sfsync02 Service D:\WINDOWS\System32\drivers\sfsync03.sys [bOOT] sfsync03 Service D:\WINDOWS\System32\drivers\sfvfs02.sys [bOOT] sfvfs02 Service D:\WINDOWS\System32\svchost.exe [AUTO] SharedAccess Service D:\WINDOWS\System32\svchost.exe [AUTO] ShellHWDetection Service [DISABLED] Simbad Service D:\WINDOWS\System32\DRIVERS\SLIP.sys [MANUAL] SLIP Service D:\WINDOWS\System32\DRIVERS\sonypvs1.sys [MANUAL] sonypvs1 Service [DISABLED] Sparrow Service D:\WINDOWS\system32\drivers\splitter.sys [MANUAL] splitter Service D:\WINDOWS\system32\spoolsv.exe [AUTO] Spooler Service D:\WINDOWS\System32\Drivers\sptd.sys [bOOT] sptd Service D:\WINDOWS\System32\DRIVERS\sr.sys [bOOT] sr Service D:\WINDOWS\System32\svchost.exe [AUTO] srservice Service D:\WINDOWS\System32\DRIVERS\srv.sys [MANUAL] Srv Service D:\WINDOWS\System32\svchost.exe [MANUAL] SSDPSRV Service D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe [AUTO] StarWindService Service D:\WINDOWS\System32\DRIVERS\irstusb.sys [MANUAL] STIrUsb Service D:\WINDOWS\System32\svchost.exe [AUTO] stisvc Service D:\WINDOWS\System32\DRIVERS\StreamIP.sys [MANUAL] streamip Service D:\WINDOWS\System32\DRIVERS\swenum.sys [MANUAL] swenum Service D:\WINDOWS\system32\drivers\swmidi.sys [MANUAL] swmidi Service D:\WINDOWS\System32\dllhost.exe [MANUAL] SwPrv Service [DISABLED] symc810 Service [DISABLED] symc8xx Service [DISABLED] sym_hi Service [DISABLED] sym_u3 Service D:\WINDOWS\system32\drivers\sysaudio.sys [MANUAL] sysaudio Service D:\WINDOWS\system32\smlogsvc.exe [MANUAL] SysmonLog Service D:\WINDOWS\System32\svchost.exe [MANUAL] TapiSrv Service [AUTO] TBPanel Service D:\WINDOWS\System32\DRIVERS\tcpip.sys [sYSTEM] Tcpip Service [MANUAL] TDPIPE Service [MANUAL] TDTCP Service D:\WINDOWS\System32\DRIVERS\termdd.sys [sYSTEM] TermDD Service D:\WINDOWS\System32\svchost.exe [MANUAL] TermService Service D:\WINDOWS\System32\svchost.exe [AUTO] Themes Service D:\WINDOWS\System32\tlntsvr.exe [MANUAL] TlntSvr Service [DISABLED] TosIde Service D:\WINDOWS\system32\svchost.exe [AUTO] TrkWks Service TSDDD Service D:\WINDOWS\System32\DRIVERS\U81xbus.sys [MANUAL] U81xbus Service D:\WINDOWS\System32\DRIVERS\U81xmdfl.sys [MANUAL] U81xmdfl Service D:\WINDOWS\System32\DRIVERS\U81xmdm.sys [MANUAL] U81xmdm Service D:\WINDOWS\System32\DRIVERS\U81xmgmt.sys [MANUAL] U81xmgmt Service D:\WINDOWS\System32\DRIVERS\U81xobex.sys [MANUAL] U81xobex Service [DISABLED] Udfs Service [DISABLED] ultra Service D:\WINDOWS\System32\DRIVERS\ulusba.sys [MANUAL] ulusba Service D:\WINDOWS\System32\DRIVERS\ulusbc.sys [MANUAL] ulusbc Service D:\WINDOWS\System32\DRIVERS\ulusbe.sys [MANUAL] ulusbe Service D:\WINDOWS\System32\DRIVERS\ulusbm.sys [MANUAL] ulusbm Service D:\WINDOWS\System32\DRIVERS\ulusbo.sys [MANUAL] ulusbo Service D:\WINDOWS\System32\wdfmgr.exe [AUTO] UMWdf Service D:\WINDOWS\System32\DRIVERS\update.sys [MANUAL] Update Service D:\WINDOWS\System32\svchost.exe [AUTO] uploadmgr Service D:\WINDOWS\System32\svchost.exe [MANUAL] upnphost Service D:\WINDOWS\System32\ups.exe [MANUAL] UPS Service D:\WINDOWS\system32\drivers\usbaudio.sys [MANUAL] usbaudio Service D:\WINDOWS\System32\DRIVERS\usbccgp.sys [MANUAL] usbccgp Service D:\WINDOWS\System32\DRIVERS\usbhub.sys [MANUAL] usbhub Service D:\WINDOWS\System32\DRIVERS\usbprint.sys [MANUAL] usbprint Service D:\WINDOWS\System32\DRIVERS\usbscan.sys [MANUAL] usbscan Service D:\WINDOWS\System32\DRIVERS\usbser.sys [MANUAL] usbser Service D:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [MANUAL] usbstor Service D:\WINDOWS\System32\DRIVERS\usbuhci.sys [MANUAL] usbuhci Service D:\WINDOWS\System32\DRIVERS\V0260Vid.sys [MANUAL] V0260VID Service D:\WINDOWS\System32\DRIVERS\vax347b.sys [bOOT] vax347b Service D:\WINDOWS\System32\Drivers\vax347s.sys [bOOT] vax347s Service D:\WINDOWS\System32\DRIVERS\VComm.sys [MANUAL] VComm Service D:\WINDOWS\System32\Drivers\VcommMgr.sys [MANUAL] VcommMgr Service D:\WINDOWS\System32\drivers\vga.sys [sYSTEM] VgaSave Service D:\WINDOWS\System32\DRIVERS\viaagp1.sys [bOOT] viaagp1 Service D:\WINDOWS\System32\DRIVERS\viaidexp.sys [bOOT] ViaIde Service D:\WINDOWS\System32\DRIVERS\viamraid.sys [bOOT] viamraid Service [bOOT] VolSnap Service D:\WINDOWS\System32\vssvc.exe [MANUAL] VSS Service VXD Service D:\WINDOWS\System32\svchost.exe [AUTO] W32Time Service W3SVC Service D:\WINDOWS\System32\DRIVERS\wanarp.sys [MANUAL] Wanarp Service D:\WINDOWS\System32\DRIVERS\wceusbsh.sys [MANUAL] wceusbsh Service [MANUAL] WDICA Service D:\WINDOWS\system32\drivers\wdmaud.sys [MANUAL] wdmaud Service D:\WINDOWS\System32\svchost.exe [AUTO] WebClient Service D:\WINDOWS\System32\WINDRVR.SYS [AUTO] WinDriver Service D:\WINDOWS\system32\svchost.exe [AUTO] winmgmt Service [MANUAL] Winsock Service WinSock2 Service WinTrust Service D:\WINDOWS\System32\MsPMSPSv.exe [AUTO] WMDM PMSP Service Service D:\WINDOWS\System32\svchost.exe [MANUAL] WmdmPmSN Service D:\WINDOWS\System32\svchost.exe [MANUAL] Wmi Service WmiApRpl Service D:\WINDOWS\System32\wbem\wmiapsrv.exe [MANUAL] WmiApSrv Service [AUTO] wscsvc Service D:\WINDOWS\System32\DRIVERS\WSTCODEC.SYS [MANUAL] WSTCODEC Service D:\WINDOWS\system32\svchost.exe [AUTO] wuauserv Service D:\WINDOWS\System32\svchost.exe [AUTO] WZCSVC Service {27D64E03-CE41-41B6-93AD-9DF655CD4A8D} Service {4A30F2A1-A8B3-41F4-94F9-AA620517877E} Service {BA3230C0-6A9E-4692-93BC-9AA6E735BA79} Service {D98D062D-03AB-4CBB-A142-71B33F1CC672} ---- EOF - GMER 1.0.13 ----

jessica · 3 Wrzesień 2007 18:24

Zniknęła ta usługa,więc powinno być dobrze.

jessi

arturoos1990 · 3 Wrzesień 2007 18:30

Dziękuje bardzo za pomoccc:) Jessica dla ciebei duze buzi:)) a dla adama duże piwo:P:)