Log F-secure wywala dużo nowych zagrożeń

Dudas_bad_boy · 15 Październik 2007 14:55

Logfile of HijackThis v1.99.1 Scan saved at 15:06:25, on 2002-01-01 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\Ati2evxx.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\Ati2evxx.exe D:\WINDOWS\Explorer.EXE D:\WINDOWS\system32\spoolsv.exe D:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE D:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe D:\Program Files\F-Secure Internet Security\Anti-Virus\FSGK32.EXE D:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe D:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe D:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE D:\Program Files\F-Secure Internet Security\Anti-Virus\fssm32.exe D:\Program Files\F-Secure Internet Security\Common\FSMB32.EXE D:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe D:\WINDOWS\SOUNDMAN.EXE D:\Program Files\F-Secure Internet Security\Common\FCH32.EXE D:\Program Files\F-Secure Internet Security\Common\FSM32.EXE D:\WINDOWS\system32\ctfmon.exe D:\Program Files\Gadu-Gadu\gg.exe D:\WINDOWS\system32\wscntfy.exe D:\Program Files\F-Secure Internet Security\Common\FAMEH32.EXE D:\Program Files\F-Secure Internet Security\Anti-Virus\fsqh.exe D:\Program Files\F-Secure Internet Security\Anti-Virus\fsrw.exe D:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe D:\Program Files\F-Secure Internet Security\Anti-Virus\fsav32.exe D:\PROGRA~1\F-SECU~1\ANTI-S~1\fsaw.exe D:\Program Files\F-Secure Internet Security\FSGUI\fsguidll.exe D:\Program Files\Mozilla Firefox\firefox.exe F:\Dudas\Programy\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.youtube.com/watch?v=DChPxv5CWFo R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O4 - HKLM…\Run: [speedTouch USB Diagnostics] “D:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe” /icon O4 - HKLM…\Run: [startCCC] “D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe” O4 - HKLM…\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM…\Run: [F-Secure Manager] “D:\Program Files\F-Secure Internet Security\Common\FSM32.EXE” /splash O4 - HKLM…\Run: [F-Secure TNB] “D:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe” /CHECKALL /WAITFORSW O4 - HKLM…\Run: [F-Secure Startup Wizard] “D:\Program Files\F-Secure Internet Security\FSGUI\FSSW.EXE” /reboot O4 - HKCU…\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe O4 - HKCU…\Run: [Gadu-Gadu] “D:\Program Files\Gadu-Gadu\gg.exe” /tray O4 - HKCU…\Run: [steam] “d:\program files\steam\steam.exe” -silent O4 - HKCU…\Run: [MSMSGS] “D:\Program Files\Messenger\msmsgs.exe” /background O4 - Global Startup: F-Secure Anti-Virus 2006.lnk = D:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe O8 - Extra context menu item: &Zablokuj to okienko - D:\Program Files\F-Secure Internet Security\Anti-Spyware\blockpopups.htm O9 - Extra button: Osłona programu IE - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - D:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dll O9 - Extra ‘Tools’ menuitem: Osłona programu IE… - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - D:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip…{4D8C94DA-04E4-49A0-B545-E58B411BC03B}: NameServer = 213.241.79.37 83.238.255.76 O17 - HKLM\System\CS1\Services\Tcpip…{4D8C94DA-04E4-49A0-B545-E58B411BC03B}: NameServer = 213.241.79.37 83.238.255.76 O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exe O23 - Service: F-Secure Anti-Virus 2006 (BackWeb Plug-in - 4476822) - F-Secure Internet Security 2005 - D:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - D:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe O23 - Service: fsbwsys - F-Secure Corp. - D:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - D:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - D:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE

Tak jak w temacie cały czas mam inny komunikat w jednym mialem nawet coś że wysyła do FBI & CIA nie wiem o co chodzi ale to już było śmieszne

Gutek · 15 Październik 2007 15:05

to znaczy jakich?

Dudas_bad_boy · 15 Październik 2007 15:36

np. ten co napisałem. No nie wiem dużo ich jest po starcie systemu. Nie dam rady ich wszystkich spisac;] jest cos w logu?

Gutek · 15 Październik 2007 15:41

Daj log z ComboFix

Dudas_bad_boy · 15 Październik 2007 16:21

ComboFix 07-10-12.4 - Dudas 2007-10-15 18:13:43.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.164 [GMT 2:00] Running from: D:\Documents and Settings\Dudas\Pulpit\ComboFix.exe * Created a new restore point . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . D:\Program Files\WhenUSearch D:\Program Files\WhenUSearch\Content\css\dialog.css D:\Program Files\WhenUSearch\Content\css\menu.css D:\Program Files\WhenUSearch\Content\css\module_weather.css D:\Program Files\WhenUSearch\Content\css\module_weather_dialog.css D:\Program Files\WhenUSearch\Content\css\quick.css D:\Program Files\WhenUSearch\Content\customize.html D:\Program Files\WhenUSearch\Content\daemon.ico D:\Program Files\WhenUSearch\Content\dialog.css D:\Program Files\WhenUSearch\Content\global.js D:\Program Files\WhenUSearch\Content\images\add_image.gif D:\Program Files\WhenUSearch\Content\images\add_image_down.gif D:\Program Files\WhenUSearch\Content\images\add_image_on.gif D:\Program Files\WhenUSearch\Content\images\arrow_down.gif D:\Program Files\WhenUSearch\Content\images\arrow_down_on.gif D:\Program Files\WhenUSearch\Content\images\arrow_right.gif D:\Program Files\WhenUSearch\Content\images\arrow_right_on.gif D:\Program Files\WhenUSearch\Content\images\button_go.gif D:\Program Files\WhenUSearch\Content\images\button_go_down.gif D:\Program Files\WhenUSearch\Content\images\button_go_on.gif D:\Program Files\WhenUSearch\Content\images\button_search_down.gif D:\Program Files\WhenUSearch\Content\images\button_search_off.gif D:\Program Files\WhenUSearch\Content\images\button_search_on.gif D:\Program Files\WhenUSearch\Content\images\button_search_sm_down.gif D:\Program Files\WhenUSearch\Content\images\button_search_sm_off.gif D:\Program Files\WhenUSearch\Content\images\button_search_sm_on.gif D:\Program Files\WhenUSearch\Content\images\button_specials_on.gif D:\Program Files\WhenUSearch\Content\images\corner_bottom_left.gif D:\Program Files\WhenUSearch\Content\images\corner_top_left.gif D:\Program Files\WhenUSearch\Content\images\delete_button.gif D:\Program Files\WhenUSearch\Content\images\delete_button_down.gif D:\Program Files\WhenUSearch\Content\images\delete_button_on.gif D:\Program Files\WhenUSearch\Content\images\divider.gif D:\Program Files\WhenUSearch\Content\images\dot_orange.gif D:\Program Files\WhenUSearch\Content\images\dt_min_logo.gif D:\Program Files\WhenUSearch\Content\images\gear.gif D:\Program Files\WhenUSearch\Content\images\gear_down.gif D:\Program Files\WhenUSearch\Content\images\gear_grey.gif D:\Program Files\WhenUSearch\Content\images\gear_on.gif D:\Program Files\WhenUSearch\Content\images\instructions_border_corner.gif D:\Program Files\WhenUSearch\Content\images\instructions_border_right.gif D:\Program Files\WhenUSearch\Content\images\instructions_border_top.gif D:\Program Files\WhenUSearch\Content\images\link.gif D:\Program Files\WhenUSearch\Content\images\lock.gif D:\Program Files\WhenUSearch\Content\images\lock_down.gif D:\Program Files\WhenUSearch\Content\images\lock_grey.gif D:\Program Files\WhenUSearch\Content\images\lock_on.gif D:\Program Files\WhenUSearch\Content\images\logo_searchbar_down.gif D:\Program Files\WhenUSearch\Content\images\logo_searchbar_off.gif D:\Program Files\WhenUSearch\Content\images\logo_searchbar_on.gif D:\Program Files\WhenUSearch\Content\images\main_bg.gif D:\Program Files\WhenUSearch\Content\images\manage.gif D:\Program Files\WhenUSearch\Content\images\manage_down.gif D:\Program Files\WhenUSearch\Content\images\manage_grey.gif D:\Program Files\WhenUSearch\Content\images\manage_on.gif D:\Program Files\WhenUSearch\Content\images\menu_aim_bw.gif D:\Program Files\WhenUSearch\Content\images\menu_arrow_right.gif D:\Program Files\WhenUSearch\Content\images\menu_bg.gif D:\Program Files\WhenUSearch\Content\images\menu_left_bg.gif D:\Program Files\WhenUSearch\Content\images\menu_main_bw.gif D:\Program Files\WhenUSearch\Content\images\menu_pbandit_bw.gif D:\Program Files\WhenUSearch\Content\images\menu_right_bg.gif D:\Program Files\WhenUSearch\Content\images\menu_ucontrol_bw.gif D:\Program Files\WhenUSearch\Content\images\menu_ucontrol_filler_bw.gif D:\Program Files\WhenUSearch\Content\images\menu_whenu_bw.gif D:\Program Files\WhenUSearch\Content\images\message_alert.gif D:\Program Files\WhenUSearch\Content\images\min_new_res_menu.gif D:\Program Files\WhenUSearch\Content\images\min_new_res_menu_down.gif D:\Program Files\WhenUSearch\Content\images\min_new_res_menu_on.gif D:\Program Files\WhenUSearch\Content\images\min_new_results_new.gif D:\Program Files\WhenUSearch\Content\images\min_new_results_new_down.gif D:\Program Files\WhenUSearch\Content\images\min_new_results_new_on.gif D:\Program Files\WhenUSearch\Content\images\min_new_results_new_text.gif D:\Program Files\WhenUSearch\Content\images\min_new_results_new_text_on.gif D:\Program Files\WhenUSearch\Content\images\module_weather_left_bg_top.gif D:\Program Files\WhenUSearch\Content\images\more_bg.gif D:\Program Files\WhenUSearch\Content\images\more_bottom_bg.gif D:\Program Files\WhenUSearch\Content\images\more_bottom_main.gif D:\Program Files\WhenUSearch\Content\images\more_bottom_main_bg.gif D:\Program Files\WhenUSearch\Content\images\more_left_bg.gif D:\Program Files\WhenUSearch\Content\images\more_right_bg.gif D:\Program Files\WhenUSearch\Content\images\more_top_bg.gif D:\Program Files\WhenUSearch\Content\images\more_top_left.gif D:\Program Files\WhenUSearch\Content\images\more_top_left_bw.gif D:\Program Files\WhenUSearch\Content\images\more_top_right.gif D:\Program Files\WhenUSearch\Content\images\more_top_right_bw.gif D:\Program Files\WhenUSearch\Content\images\more_top_x.gif D:\Program Files\WhenUSearch\Content\images\more_top_x_bw.gif D:\Program Files\WhenUSearch\Content\images\more_top_x_down.gif D:\Program Files\WhenUSearch\Content\images\more_top_x_on.gif D:\Program Files\WhenUSearch\Content\images\mount.gif D:\Program Files\WhenUSearch\Content\images\mount_down.gif D:\Program Files\WhenUSearch\Content\images\mount_grey.gif D:\Program Files\WhenUSearch\Content\images\mount_on.gif D:\Program Files\WhenUSearch\Content\images\nav_button_bg.gif D:\Program Files\WhenUSearch\Content\images\nav_button_bg_down.gif D:\Program Files\WhenUSearch\Content\images\nav_button_bg_on.gif D:\Program Files\WhenUSearch\Content\images\notyet.gif D:\Program Files\WhenUSearch\Content\images\notyet_bw.gif D:\Program Files\WhenUSearch\Content\images\open_bg.gif D:\Program Files\WhenUSearch\Content\images\open_bottom_bg.gif D:\Program Files\WhenUSearch\Content\images\open_bottom_left.gif D:\Program Files\WhenUSearch\Content\images\open_bottom_left_bw.gif D:\Program Files\WhenUSearch\Content\images\open_bottom_right.gif D:\Program Files\WhenUSearch\Content\images\open_bottom_right_bw.gif D:\Program Files\WhenUSearch\Content\images\open_cancel.gif D:\Program Files\WhenUSearch\Content\images\open_cancel_down.gif D:\Program Files\WhenUSearch\Content\images\open_cancel_on.gif D:\Program Files\WhenUSearch\Content\images\open_defaults.gif D:\Program Files\WhenUSearch\Content\images\open_defaults_down.gif D:\Program Files\WhenUSearch\Content\images\open_defaults_on.gif D:\Program Files\WhenUSearch\Content\images\open_open.gif D:\Program Files\WhenUSearch\Content\images\open_open_down.gif D:\Program Files\WhenUSearch\Content\images\open_open_on.gif D:\Program Files\WhenUSearch\Content\images\open_save.gif D:\Program Files\WhenUSearch\Content\images\open_save_down.gif D:\Program Files\WhenUSearch\Content\images\open_save_on.gif D:\Program Files\WhenUSearch\Content\images\open_search.gif D:\Program Files\WhenUSearch\Content\images\open_search_down.gif D:\Program Files\WhenUSearch\Content\images\open_search_on.gif D:\Program Files\WhenUSearch\Content\images\right_bg.gif D:\Program Files\WhenUSearch\Content\images\right_bg_grey.gif D:\Program Files\WhenUSearch\Content\images\right_instructions.gif D:\Program Files\WhenUSearch\Content\images\right_instructions_on.gif D:\Program Files\WhenUSearch\Content\images\right_instructions_red.gif D:\Program Files\WhenUSearch\Content\images\right_left.gif D:\Program Files\WhenUSearch\Content\images\right_left_grey.gif D:\Program Files\WhenUSearch\Content\images\right_main_bg.gif D:\Program Files\WhenUSearch\Content\images\right_more_left.gif D:\Program Files\WhenUSearch\Content\images\right_more_off.gif D:\Program Files\WhenUSearch\Content\images\right_more_on.gif D:\Program Files\WhenUSearch\Content\images\right_more_up.gif D:\Program Files\WhenUSearch\Content\images\spacer.gif D:\Program Files\WhenUSearch\Content\images\tab_left_bg.gif D:\Program Files\WhenUSearch\Content\images\tab_left_bw.gif D:\Program Files\WhenUSearch\Content\images\tab_left_down.gif D:\Program Files\WhenUSearch\Content\images\tab_left_off.gif D:\Program Files\WhenUSearch\Content\images\tab_left_on.gif D:\Program Files\WhenUSearch\Content\images\tab_right_down.gif D:\Program Files\WhenUSearch\Content\images\tab_right_off.gif D:\Program Files\WhenUSearch\Content\images\tab_right_on.gif D:\Program Files\WhenUSearch\Content\images\unmount.gif D:\Program Files\WhenUSearch\Content\images\unmount_down.gif D:\Program Files\WhenUSearch\Content\images\unmount_grey.gif D:\Program Files\WhenUSearch\Content\images\unmount_on.gif D:\Program Files\WhenUSearch\Content\index.htm D:\Program Files\WhenUSearch\Content\instructions.html D:\Program Files\WhenUSearch\Content\loading.html D:\Program Files\WhenUSearch\Content\main_menu_sub.html D:\Program Files\WhenUSearch\Content\menu.css D:\Program Files\WhenUSearch\Content\menu_emu.html D:\Program Files\WhenUSearch\Content\menu_main.html D:\Program Files\WhenUSearch\Content\menu_manage.html D:\Program Files\WhenUSearch\Content\menu_opt.html D:\Program Files\WhenUSearch\Content\menu_ucontrol.html D:\Program Files\WhenUSearch\Content\menu_whenu.html D:\Program Files\WhenUSearch\Content\message.html D:\Program Files\WhenUSearch\Content\min.html D:\Program Files\WhenUSearch\Content\module_weather.css D:\Program Files\WhenUSearch\Content\module_weather_dialog.css D:\Program Files\WhenUSearch\Content\more.html D:\Program Files\WhenUSearch\Content\movement.js D:\Program Files\WhenUSearch\Content\newresults.html D:\Program Files\WhenUSearch\Content\notyet.html D:\Program Files\WhenUSearch\Content\open_browser.html D:\Program Files\WhenUSearch\Content\open_search.html D:\Program Files\WhenUSearch\Content\quick.css D:\Program Files\WhenUSearch\Content\quick_coupon.html D:\Program Files\WhenUSearch\Content\quick_instructions.html D:\Program Files\WhenUSearch\Content\quick_search.html D:\Program Files\WhenUSearch\Content\quick_tutorial.html D:\Program Files\WhenUSearch\Content\right.html D:\Program Files\WhenUSearch\Content\search.html D:\Program Files\WhenUSearch\Content\splash.html D:\Program Files\WhenUSearch\Content\tooltip_emu.html D:\Program Files\WhenUSearch\Content\tooltip_go.html D:\Program Files\WhenUSearch\Content\tooltip_logo.html D:\Program Files\WhenUSearch\Content\tooltip_manage.html D:\Program Files\WhenUSearch\Content\tooltip_more.html D:\Program Files\WhenUSearch\Content\tooltip_opt.html D:\Program Files\WhenUSearch\Content\tooltip_search.html D:\Program Files\WhenUSearch\Content\tooltip_slider.html D:\Program Files\WhenUSearch\Content\tooltip_whenu.html D:\Program Files\WhenUSearch\Content\tooltip_whenu2.html D:\Program Files\WhenUSearch\Content\ui.cfg D:\Program Files\WhenUSearch\Content\uninst.ico D:\Program Files\WhenUSearch\search.db D:\Program Files\WhenUSearch\search.dll D:\Program Files\WhenUSearch\Search.exe D:\Program Files\WhenUSearch\search.htm D:\Program Files\WhenUSearch\Uninst.exe D:\Program Files\WhenUSearch\whse.exe . ((((((((((((((((((((((((( Files Created from 2007-09-15 to 2007-10-15 ))))))))))))))))))))))))))))))) . 2007-10-15 18:13 51,200 --a------ D:\WINDOWS\NirCmd.exe 2007-09-29 05:21 9,854,976 --a------ D:\WINDOWS\system32\atioglx2.dll 2007-09-29 05:07 356,352 --a------ D:\WINDOWS\system32\ATIDEMGX.dll 2007-09-29 04:58 143,360 --a------ D:\WINDOWS\system32\atipdlxx.dll 2007-09-29 04:58 122,880 --a------ D:\WINDOWS\system32\Oemdspif.dll 2007-09-29 04:58 43,520 --a------ D:\WINDOWS\system32\ati2edxx.dll 2007-09-29 04:58 26,112 --a------ D:\WINDOWS\system32\Ati2mdxx.exe 2007-09-29 04:57 122,880 --a------ D:\WINDOWS\system32\ati2evxx.dll 2007-09-29 04:56 483,328 --a------ D:\WINDOWS\system32\ati2evxx.exe 2007-09-29 04:55 53,248 --a------ D:\WINDOWS\system32\ATIDDC.DLL 2007-09-29 04:49 307,200 --a------ D:\WINDOWS\system32\atiiiexx.dll 2007-09-29 04:47 172,032 --a------ D:\WINDOWS\system32\atiok3x2.dll 2007-09-29 04:36 3,107,788 --a------ D:\WINDOWS\system32\ativvaxx.dat 2007-09-29 04:36 3,107,788 --a------ D:\WINDOWS\system32\ativva5x.dat 2007-09-29 04:36 972,072 --a------ D:\WINDOWS\system32\ativva6x.dat 2007-09-29 04:23 5,435,392 --a------ D:\WINDOWS\system32\atioglxx.dll 2007-09-29 04:22 376,832 --a------ D:\WINDOWS\system32\atikvmag.dll 2007-09-29 04:20 17,408 --a------ D:\WINDOWS\system32\atitvo32.dll 2007-09-29 04:19 49,152 --a------ D:\WINDOWS\system32\drivers\ati2erec.dll . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-10-15 16:17 --------- d-----w D:\Program Files\Steam 2007-10-15 16:12 --------- d-----w D:\Program Files\eMule 2007-09-29 05:46 47,376 ----a-w D:\WINDOWS\system32\drivers\ativvpxx.vp 2007-09-29 03:06 268,800 ----a-w D:\WINDOWS\system32\ati2dvag.dll 2007-09-29 03:05 2,456,064 ----a-w D:\WINDOWS\system32\drivers\ati2mtag.sys 2007-09-29 02:47 3,130,720 ----a-w D:\WINDOWS\system32\ati3duag.dll 2007-09-29 02:36 1,593,600 ----a-w D:\WINDOWS\system32\ativvaxx.dll 2007-09-29 02:14 499,712 ----a-w D:\WINDOWS\system32\ati2cqag.dll 2007-09-28 20:05 593,920 ------w D:\WINDOWS\system32\ati2sgag.exe 2007-07-30 17:19 92,504 ----a-w D:\WINDOWS\system32\cdm.dll 2007-07-30 17:19 549,720 ----a-w D:\WINDOWS\system32\wuapi.dll 2007-07-30 17:19 53,080 ----a-w D:\WINDOWS\system32\wuauclt.exe 2007-07-30 17:19 43,352 ----a-w D:\WINDOWS\system32\wups2.dll 2007-07-30 17:19 325,976 ----a-w D:\WINDOWS\system32\wucltui.dll 2007-07-30 17:19 203,096 ----a-w D:\WINDOWS\system32\wuweb.dll 2007-07-30 17:19 1,712,984 ----a-w D:\WINDOWS\system32\wuaueng.dll 2007-07-30 17:18 33,624 ----a-w D:\WINDOWS\system32\wups.dll . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “SpeedTouch USB Diagnostics”=“D:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe” [2004-08-06 10:45] “StartCCC”=“D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe” [2006-11-10 13:35] “SoundMan”=“SOUNDMAN.EXE” [2006-11-17 06:42 D:\WINDOWS\soundman.exe] “F-Secure Manager”=“D:\Program Files\F-Secure Internet Security\Common\FSM32.exe” [2005-06-03 00:37] “F-Secure TNB”=“D:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe” [2005-07-18 16:51] “F-Secure Startup Wizard”=“D:\Program Files\F-Secure Internet Security\FSGUI\FSSW.exe” [2005-08-23 15:38] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “CTFMON.EXE”=“D:\WINDOWS\system32\ctfmon.exe” [2004-08-04 00:44] “Gadu-Gadu”=“D:\Program Files\Gadu-Gadu\gg.exe” [2007-07-09 09:39] “Steam”=“d:\program files\steam\steam.exe” [2001-12-31 18:13] “MSMSGS”=“D:\Program Files\Messenger\msmsgs.exe” [2004-08-04 00:55] D:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Autostart\ F-Secure Anti-Virus 2006.lnk - D:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe [2007-05-18 18:39:08] R0 FSFW;F-Secure Firewall Driver;D:\WINDOWS\system32\drivers\fsdfw.sys R2 BackWeb Plug-in - 4476822;F-Secure Anti-Virus 2006;D:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE R2 F-Secure Filter;F-Secure File System Filter;??\D:\Program Files\F-Secure Internet Security\Anti-Virus\Win2K\FSfilter.sys R2 F-Secure Gatekeeper;F-Secure Gatekeeper;??\D:\Program Files\F-Secure Internet Security\Anti-Virus\Win2K\FSgk.sys R2 F-Secure Recognizer;F-Secure File System Recognizer;??\D:\Program Files\F-Secure Internet Security\Anti-Virus\Win2K\FSrec.sys . ************************************************************************** catchme 0.3.1169 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-10-15 18:17:35 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-10-15 18:18:15 - machine was rebooted . — E O F —

Gutek · 15 Październik 2007 21:26

Już powinno być Ok