Nie można odnaleźć określonego modułu! Błąd ładowania

system · 10 Maj 2008 14:39

Przy każdym włączeniu komputera pokazuje się komunikat:

Wystąpił błąd podczas ładowania c:\WINDOWS\system32{a58ceb0b-3d5b-e69f-dbea-30132059ac09}.dll

Nie można odnaleźć określonego modułu.

Jest to wynikiem usunięcia trojana razem z plikiem, tak sądzę.

Skanowałam komputer Avirą i znalezione trojany (3) kazałam wykasować.

Ale teraz zauważyłam, że były to pliki z C:\WINDOWS\system32. #-o

Przeszukałam już setki postów i tematów na różnych forach i nic z tego kombinowania nie wyszło. :!:

Podobno ten komunikat nie przeszkadza w pracy systemu, ale nie wiem tego na pewno, poza tym to irytujące! #-o

Pomóżcie. :?

Logi z HJT:

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 16:37:52, on 2008-05-10 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe D:\Avira\AntiVir PersonalEdition Classic\sched.exe D:\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\WINDOWS\System32\FTRTSVC.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\system32\nvsvc32.exe D:\Alcohol 52\StarWind\StarWindServiceAE.exe C:\WINDOWS\Explorer.EXE D:\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\PROGRA~1\NEOSTR~1\TaskBarIcon.exe C:\PROGRA~1\NEOSTR~1\neostradatp.exe C:\PROGRA~1\NEOSTR~1\ComComp.exe C:\PROGRA~1\NEOSTR~1\Toaster.exe C:\PROGRA~1\NEOSTR~1\Inactivity.exe C:\PROGRA~1\NEOSTR~1\PollingModule.exe C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE C:\PROGRA~1\NEOSTR~1\Watch.exe C:\Program Files\Mozilla Firefox\firefox.exe D:\BitTorrent\bittorrent.exe D:\Gadu-Gadu\gg.exe D:\BearShare\BearShare.exe D:\HijackThis\HijackThis.exe D:\Avira\AntiVir PersonalEdition Classic\avwsc.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = neostrada tp R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\2.bin\MGSBAR.DLL O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\2.bin\MGSBAR.DLL O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM…\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\GestMaj.exe TaskBarIcon.exe O4 - HKLM…\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM…\Run: [QuickTime Task] “D:\Kodeki\QuickTime Alternative\QTTask.exe” -atboottime O4 - HKLM…\Run: [avgnt] “D:\Avira\AntiVir PersonalEdition Classic\avgnt.exe” /min O4 - HKLM…\Run: [Adobe Reader Speed Launcher] “C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe” O4 - HKUS\S-1-5-19…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘USŁUGA LOKALNA’) O4 - HKUS\S-1-5-20…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘USŁUGA SIECIOWA’) O4 - Startup: WordWeb.lnk = D:\WordWeb\wweb32.exe O4 - Global Startup: Microsoft Office.lnk = D:\Microsoft Office 2000\Office\OSA9.EXE O4 - Global Startup: NaturalColorLoad.lnk = ? O8 - Extra context menu item: &Search - ?p=ZCxdm451YYPL O8 - Extra context menu item: &WordWeb… - res://C:\WINDOWS\wweb32.dll/lookup.html O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip…{0EF882B4-E112-4BAD-9BA7-9627F344279C}: NameServer = 194.204.159.1 217.98.63.164 O17 - HKLM\System\CS2\Services\Tcpip…{0EF882B4-E112-4BAD-9BA7-9627F344279C}: NameServer = 194.204.159.1 217.98.63.164 O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - D:\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - D:\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - D:\Alcohol 52\StarWind\StarWindServiceAE.exe – End of file - 5060 bytes

Leon1 · 10 Maj 2008 15:16

wpisy

usuń HijackThisem >> Fix checked

Pobierz Combofix http://www.searchengines.pl/index.php?s … ntry395642 przeskanuj daj log

system · 10 Maj 2008 16:16

Trochę się boję Combo-Fix’a ale ok…

ComboFix 08-05-09.1 - Dominika 2008-05-10 18:05:56.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.98 [GMT 2:00] Running from: C:\Documents and Settings\Dominika\Pulpit\Combo-Fix.exe * Created a new restore point WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Program Files\Adzgalore Games Collection C:\Program Files\Adzgalore Games Collection\BattlesOfHelicopters.exe C:\Program Files\Adzgalore Games Collection\BobAndBill.exe C:\Program Files\Adzgalore Games Collection\CrazyBlocks.exe C:\Program Files\Adzgalore Games Collection\Lines.exe C:\Program Files\Adzgalore Games Collection\uninstall.exe C:\Program Files\Adzgalore Games Collection\VideoPool.exe C:\Program Files\Hot internet offers C:\Program Files\Hot internet offers\offers.exe C:\Program Files\myglobalsearch C:\Program Files\myglobalsearch\bar\2.bin\M9FFXTBR.JAR C:\Program Files\myglobalsearch\bar\2.bin\M9FFXTBR.MANIFEST C:\Program Files\myglobalsearch\bar\2.bin\M9NTSTBR.JAR C:\Program Files\myglobalsearch\bar\2.bin\M9NTSTBR.MANIFEST C:\Program Files\myglobalsearch\bar\2.bin\M9PLUGIN.DLL C:\Program Files\myglobalsearch\bar\2.bin\MGSBAR.DLL C:\Program Files\myglobalsearch\bar\2.bin\NPMYGLSH.DLL C:\Program Files\myglobalsearch\bar\Cache\000319FE C:\Program Files\myglobalsearch\bar\Cache\0003227B C:\Program Files\myglobalsearch\bar\Cache\00032538.bin C:\Program Files\myglobalsearch\bar\Cache\00032CD9.bin C:\Program Files\myglobalsearch\bar\Cache\000334CA.bin C:\Program Files\myglobalsearch\bar\Cache\files.ini C:\Program Files\myglobalsearch\bar\History\search C:\Program Files\myglobalsearch\bar\Settings\prevcfg.htm C:\WINDOWS\Downloaded Program Files\setup.inf C:\WINDOWS\system32\adzgalore-remove.exe C:\WINDOWS\system32\config\49278354.Evt C:\WINDOWS\system32\cpmsky-uninst.exe C:\WINDOWS\system32\setup.ini . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_ASC3550P -------\Service_asc3550p ((((((((((((((((((((((((( Files Created from 2008-04-10 to 2008-05-10 ))))))))))))))))))))))))))))))) . 2008-05-10 16:44 . 2008-05-10 16:44 2008-05-05 16:20 . 2008-05-05 16:20 2,359,350 --a–c— C:\pulpit.bmp 2008-05-04 19:08 . 2008-05-04 19:20 2008-05-04 19:07 . 2008-05-04 19:07 2008-05-04 19:06 . 2005-10-25 20:55 685,568 --a------ C:\WINDOWS\wweb32.dll 2008-04-29 15:36 . 2008-04-29 15:36 2008-04-26 22:38 . 2008-04-26 22:38 2008-04-26 18:07 . 2008-04-26 18:07 2008-04-24 20:46 . 2008-05-10 18:03 2008-04-20 16:28 . 2008-05-06 16:16 173 --a------ C:\WINDOWS\system32\temp_0000_65-21.aok 2008-04-20 15:48 . 2008-05-06 16:15 174 --a------ C:\WINDOWS\system32\test.aok 2008-04-20 15:47 . 2004-01-11 08:02 258,048 --a------ C:\WINDOWS\system32\GplMpgDec.ax 2008-04-20 15:46 . 2007-04-12 14:19 129,024 --a------ C:\WINDOWS\system32\AVERM.dll 2008-04-20 15:46 . 2006-09-26 13:57 28,672 --a------ C:\WINDOWS\system32\AVEQT.dll 2008-04-20 14:57 . 2008-05-06 15:53 2008-04-19 15:28 . 2008-04-19 15:33 2008-04-16 20:14 . 2008-04-16 20:14 2008-04-16 20:14 . 2004-02-22 10:11 719,872 --a------ C:\WINDOWS\system32\devil.dll 2008-04-16 20:14 . 2006-10-07 17:43 502,784 --a------ C:\WINDOWS\x2.64.exe 2008-04-16 20:14 . 2008-02-07 16:15 408,576 --a------ C:\WINDOWS\system32\Smab.dll 2008-04-16 20:14 . 2007-05-17 17:30 318,976 --a------ C:\WINDOWS\system32\avisynth.dll 2008-04-16 20:14 . 2005-02-28 13:16 240,128 --a------ C:\WINDOWS\system32\x.264.exe 2008-04-16 20:14 . 2006-04-12 09:47 217,073 --a------ C:\WINDOWS\meta4.exe 2008-04-16 20:14 . 2004-01-25 00:00 70,656 --a------ C:\WINDOWS\system32\yv12vfw.dll 2008-04-16 20:14 . 2004-01-25 00:00 70,656 --a------ C:\WINDOWS\system32\i420vfw.dll 2008-04-16 20:14 . 2006-04-05 08:09 66,560 --a------ C:\WINDOWS\MOTA113.exe 2008-04-16 20:14 . 2005-07-14 12:31 27,648 --a------ C:\WINDOWS\system32\AVSredirect.dll 2008-04-16 20:13 . 2005-02-13 01:00 186,880 -r-hs---- C:\WINDOWS\system32\RLOgg.ax 2008-04-16 20:13 . 2005-01-18 01:26 179,200 -r-hs---- C:\WINDOWS\system32\DiracSplitter.ax 2008-04-16 20:13 . 2005-02-06 01:00 92,672 -r-hs---- C:\WINDOWS\system32\RLVorbisDec.ax 2008-04-16 20:13 . 2005-02-22 18:55 81,920 -r-hs---- C:\WINDOWS\system32\aac_parser.ax 2008-04-16 20:13 . 2005-02-13 01:00 67,584 -r-hs---- C:\WINDOWS\system32\RLTheoraDec.ax 2008-04-16 20:13 . 2005-02-13 01:00 51,712 -r-hs---- C:\WINDOWS\system32\RLSpeexDec.ax 2008-04-16 17:36 . 2008-05-06 15:12 63,916 --a------ C:\WINDOWS\system32{a58ceb0b-3d5b-e69f-dbea-30132059ac09}.dll-uninst.exe 2008-04-15 19:43 . 2008-04-15 19:43 2008-04-15 19:29 . 2008-04-16 20:01 67 --a------ C:\WINDOWS\buyurl0502.dat 2008-04-14 18:03 . 2008-04-14 18:03 2008-04-14 18:03 . 2008-04-14 18:03 0 --a------ C:\WINDOWS\nsreg.dat 2008-04-12 15:32 . 2008-04-12 15:32 45 —h----- C:\WINDOWS\dsys5351.dat . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-05-10 16:10 --------- d-----w C:\Program Files\neostrada tp 2008-05-10 16:04 --------- d-----w C:\Documents and Settings\Dominika\Dane aplikacji\BitTorrent 2008-05-08 19:06 --------- d-----w C:\Program Files\Common Files\Adobe 2008-05-04 17:15 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search Destroy 2008-04-24 15:08 --------- d-----w C:\Program Files\Google 2008-04-23 09:51 --------- d-----w C:\Program Files\Przeglądarka migawek 2008-04-16 18:02 --------- d–h--w C:\Program Files\InstallShield Installation Information 2008-04-01 17:43 --------- d-----w C:\Program Files\Common Files\Download Manager 2008-03-29 16:12 --------- d-----w C:\Documents and Settings\Dominika\Dane aplikacji\Ahead 2008-03-28 18:06 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer 2008-03-28 18:02 --------- d-----w C:\Program Files\Apple Software Update 2008-03-28 18:02 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Apple 2008-03-25 15:31 --------- d-----w C:\Program Files\Alwil Software 2008-03-24 15:20 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\ESET 2008-03-15 18:07 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\shctxex.vb 2008-03-14 15:40 92,728 ------w C:\WINDOWS\system32\bass.dll 2008-03-10 15:38 43,520 ----a-w C:\WINDOWS\system32\CmdLineExt03.dll 2008-02-27 17:11 98,304 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2001-11-23 11:08 712,704 ----a-w C:\WINDOWS\inf\OTHER\AUDIO3D.DLL . ------- Sigcheck ------- 2007-10-30 19:20 360064 90caff4b094573449a0872a0f919b178 C:\WINDOWS\SoftwareDistribution\Download\85df038b1f331d3835256425c1b567cb\sp2gdr\tcpip.sys 2007-10-30 18:53 360832 64798ecfa43d78c7178375fcdd16d8c8 C:\WINDOWS\SoftwareDistribution\Download\85df038b1f331d3835256425c1b567cb\sp2qfe\tcpip.sys 2004-08-03 23:14 359040 9f4b36614a0fc234525ba224957de55c C:\WINDOWS\system32\dllcache\tcpip.sys 2004-08-03 23:14 359040 6a603809f598332dbedd535bdbce313e C:\WINDOWS\system32\drivers\tcpip.sys . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “NvCplDaemon”=“C:\WINDOWS\system32\NvCpl.dll” [2006-10-22 13:22 7700480] “WOOTASKBARICON”=“C:\PROGRA~1\NEOSTR~1\GestMaj.exe” [2004-10-14 16:55 32768] “WOOWATCH”=“C:\PROGRA~1\NEOSTR~1\Watch.exe” [2004-08-23 14:49 20480] “QuickTime Task”=“D:\Kodeki\QuickTime Alternative\QTTask.exe” [2008-02-01 00:13 385024] “avgnt”=“D:\Avira\AntiVir PersonalEdition Classic\avgnt.exe” [2008-02-12 10:06 262401] “Adobe Reader Speed Launcher”=“C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe” [2008-01-11 22:16 39792] “WinPatrol”=“D:\WinPatrol\winpatrol.exe” [2008-04-25 19:31 333120] C:\Documents and Settings\Dominika\Menu Start\Programy\Autostart\ WordWeb.lnk - D:\WordWeb\wweb32.exe [2008-05-04 19:06:09 19968] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ Microsoft Office.lnk - D:\Microsoft Office 2000\Office\OSA9.EXE [1999-02-17 21:05:56 65588] NaturalColorLoad.lnk - C:\Natural Color\NaturalColorLoad.exe [2007-12-02 12:45:07 155715] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] “vidc.avrn”= D:\Kodeki\ACEMEG~1\SystemS\AVIDAV~1.DLL “vidc.advj”= D:\Kodeki\ACEMEG~1\SystemS\AVIDAV~1.DLL “vidc.mszh”= D:\Kodeki\ACEMEG~1\SystemS\avimszh.dll “vidc.zlib”= D:\Kodeki\ACEMEG~1\SystemS\avizlib.dll “vidc.cscd”= D:\Kodeki\ACEMEG~1\SystemS\camcodec.dll “vidc.cvid”= D:\Kodeki\ACEMEG~1\SystemS\iccvid.dll “msacm.trspch”= D:\Kodeki\ACEMEG~1\SystemS\tssoft32.acm “vidc.em2v”= D:\Kodeki\ACEMEG~1\SystemS\etxcodec.dll “vidc.mkvc”= D:\Kodeki\ACEMEG~1\SystemS\kmvidc32.dll “vidc.hfyu”= D:\Kodeki\ACEMEG~1\SystemS\huffyuv.dll “msacm.lameacm”= D:\Kodeki\ACEMEG~1\SystemS\lameacm.acm “msacm.lhacm”= D:\Kodeki\ACEMEG~1\SystemS\lhacm.acm “msacm.l3acm”= D:\Kodeki\ACEMEG~1\SystemS\l3codecp.acm “vidc.sjpg”= D:\Kodeki\ACEMEG~1\SystemS\pmjpeg32.dll “vidc.dmb2”= D:\Kodeki\ACEMEG~1\SystemS\pmjpeg32.dll “vidc.gepj”= D:\Kodeki\ACEMEG~1\SystemS\pmjpeg32.dll “vidc.qpeg”= D:\Kodeki\ACEMEG~1\SystemS\Qpeg32.dll “vidc.q1.0”= D:\Kodeki\ACEMEG~1\SystemS\Qpeg32.dll “msacm.sl_anet”= D:\Kodeki\ACEMEG~1\SystemS\sl_anet.acm “vidc.tscc”= D:\Kodeki\ACEMEG~1\SystemS\tsccvid.dll “vidc.vifp”= D:\Kodeki\ACEMEG~1\SystemS\vfcodec.dll “vidc.wrpr”= D:\Kodeki\ACEMEG~1\SystemS\aviwrap.dll “vidc.wnv1”= D:\Kodeki\ACEMEG~1\SystemS\wnvplay1.dll “vidc.advs”= D:\Kodeki\ACEMEG~1\SystemS\Adaptec\Dvc.dll “vidc.aflc”= D:\Kodeki\ACEMEG~1\SystemS\Autodesk\FLCCOD~1.DLL “vidc.afli”= D:\Kodeki\ACEMEG~1\SystemS\Autodesk\FLCCOD~1.DLL “vidc.aasc”= D:\Kodeki\ACEMEG~1\SystemS\Autodesk\Aasc32.dll “vidc.aas4”= D:\Kodeki\ACEMEG~1\SystemS\Autodesk\Aasc32.dll “vidc.asv1”= D:\Kodeki\ACEMEG~1\SystemS\ASUS\asusasv1.dll “vidc.asv2”= D:\Kodeki\ACEMEG~1\SystemS\ASUS\asusasv2.dll “vidc.asvx”= D:\Kodeki\ACEMEG~1\SystemS\ASUS\asusasv2.dll “vidc.vcr1”= D:\Kodeki\ACEMEG~1\SystemS\ATI\ativcr1.dll “vidc.vcr2”= D:\Kodeki\ACEMEG~1\SystemS\ATI\ativcr2.dll “vidc.yv12”= yv12vfw.dll “vidc.mwv1”= D:\Kodeki\ACEMEG~1\SystemS\Aware\icmw_32.dll “vidc.bt20”= D:\Kodeki\ACEMEG~1\SystemS\BROOKT~1\btvvc32.drv “vidc.y41p”= D:\Kodeki\ACEMEG~1\SystemS\BROOKT~1\btvvc32.drv “msacm.pcdv”= D:\Kodeki\ACEMEG~1\SystemS\Canopus\pcdv.acm “vidc.cdvc”= D:\Kodeki\ACEMEG~1\SystemS\Canopus\CSCCDVC.DLL “vidc.ddvc”= D:\Kodeki\ACEMEG~1\SystemS\Canopus\CSCdvsd.DLL “vidc.png1”= D:\Kodeki\ACEMEG~1\SystemS\Core\COREPN~1.DLL “msacm.CoreFLAC_ACM”= D:\Kodeki\ACEMEG~1\SystemS\Core\COREFL~1.ACM “vidc.davc”= D:\Kodeki\ACEMEG~1\SystemS\dicas\davcvfw.dll “vidc.div3”= D:\Kodeki\ACEMEG~1\SystemS\DivX\DivXc32.dll “vidc.div5”= D:\Kodeki\ACEMEG~1\SystemS\DivX\DivXc32.dll “vidc.mpg3”= D:\Kodeki\ACEMEG~1\SystemS\DivX\DivXc32.dll “vidc.div4”= D:\Kodeki\ACEMEG~1\SystemS\DivX\DivXc32f.dll “vidc.div6”= D:\Kodeki\ACEMEG~1\SystemS\DivX\DivXc32f.dll “vidc.ap41”= D:\Kodeki\ACEMEG~1\SystemS\DivX\DivXc32f.dll “vidc.dvx4”= D:\Kodeki\ACEMEG~1\SystemS\DivX\divx4.dll “msacm.divxa32”= D:\Kodeki\ACEMEG~1\SystemS\DivX\divxa32.acm “vidc.frwd”= D:\Kodeki\ACEMEG~1\SystemS\Forward\frwd.dll “vidc.frwt”= D:\Kodeki\ACEMEG~1\SystemS\Forward\frwd.dll “vidc.frwa”= D:\Kodeki\ACEMEG~1\SystemS\Forward\frwt.dll “vidc.frwu”= D:\Kodeki\ACEMEG~1\SystemS\Forward\frwu.dll “vidc.glzw”= D:\Kodeki\ACEMEG~1\SystemS\Gabest\GLZW.dll “vidc.gpeg”= D:\Kodeki\ACEMEG~1\SystemS\Gabest\GPEG.dll “vidc.i263”= D:\Kodeki\ACEMEG~1\SystemS\Intel\i263_32.drv “vidc.iv30”= D:\Kodeki\ACEMEG~1\SystemS\Intel\ir32_32.dll “vidc.iv33”= D:\Kodeki\ACEMEG~1\SystemS\Intel\ir32_32.dll “vidc.iv34”= D:\Kodeki\ACEMEG~1\SystemS\Intel\ir32_32.dll “vidc.iv35”= D:\Kodeki\ACEMEG~1\SystemS\Intel\ir32_32.dll “vidc.iv36”= D:\Kodeki\ACEMEG~1\SystemS\Intel\ir32_32.dll “vidc.iv37”= D:\Kodeki\ACEMEG~1\SystemS\Intel\ir32_32.dll “vidc.iv38”= D:\Kodeki\ACEMEG~1\SystemS\Intel\ir32_32.dll “vidc.iv39”= D:\Kodeki\ACEMEG~1\SystemS\Intel\ir32_32.dll “vidc.iv40”= D:\Kodeki\ACEMEG~1\SystemS\Intel\ir41_32.dll “vidc.iv42”= D:\Kodeki\ACEMEG~1\SystemS\Intel\ir41_32.dll “vidc.iv43”= D:\Kodeki\ACEMEG~1\SystemS\Intel\ir41_32.dll “vidc.iv44”= D:\Kodeki\ACEMEG~1\SystemS\Intel\ir41_32.dll “vidc.iv45”= D:\Kodeki\ACEMEG~1\SystemS\Intel\ir41_32.dll “vidc.iv46”= D:\Kodeki\ACEMEG~1\SystemS\Intel\ir41_32.dll “vidc.iv47”= D:\Kodeki\ACEMEG~1\SystemS\Intel\ir41_32.dll “vidc.iv48”= D:\Kodeki\ACEMEG~1\SystemS\Intel\ir41_32.dll “vidc.iv49”= D:\Kodeki\ACEMEG~1\SystemS\Intel\ir41_32.dll “vidc.iyuv”= D:\Kodeki\ACEMEG~1\SystemS\Intel\iyuv_32.dll “vidc.yvu9”= D:\Kodeki\ACEMEG~1\SystemS\Intel\Iyvu9_32.dll “vidc.ir21”= D:\Kodeki\ACEMEG~1\SystemS\Intel\IR21_R.DLL “vidc.rt21”= D:\Kodeki\ACEMEG~1\SystemS\Intel\IR21_R.DLL “msacm.imc”= D:\Kodeki\ACEMEG~1\SystemS\Intel\IMC32.ACM “vidc.lead”= D:\Kodeki\ACEMEG~1\SystemS\LEAD\LCODCCMP.DLL “vidc.dvsd”= D:\Kodeki\ACEMEG~1\SystemS\MAINCO~1\MCDVD_32.DLL “vidc.dvc”= D:\Kodeki\ACEMEG~1\SystemS\MAINCO~1\MCDVD_32.DLL “vidc.dvcs”= D:\Kodeki\ACEMEG~1\SystemS\MAINCO~1\MCDVD_32.DLL “vidc.dcmj”= D:\Kodeki\ACEMEG~1\SystemS\MAINCO~1\MCMJPG32.DLL “vidc.avi1”= D:\Kodeki\ACEMEG~1\SystemS\MAINCO~1\MCMJPG32.DLL “vidc.avi2”= D:\Kodeki\ACEMEG~1\SystemS\MAINCO~1\MCMJPG32.DLL “vidc.dv25”= D:\Kodeki\ACEMEG~1\SystemS\Matrox\DigiVCap.dll “vidc.dv50”= D:\Kodeki\ACEMEG~1\SystemS\Matrox\DigiVCap.dll “vidc.msmc”= D:\Kodeki\ACEMEG~1\SystemS\Matrox\DigiVCap.dll “vidc.mmjp”= D:\Kodeki\ACEMEG~1\SystemS\Matrox\DigiVCap.dll “vidc.mtx1”= D:\Kodeki\ACEMEG~1\SystemS\Matrox\DigiVCap.dll “vidc.mtx2”= D:\Kodeki\ACEMEG~1\SystemS\Matrox\DigiVCap.dll “vidc.mtx3”= D:\Kodeki\ACEMEG~1\SystemS\Matrox\DigiVCap.dll “vidc.mtx4”= D:\Kodeki\ACEMEG~1\SystemS\Matrox\DigiVCap.dll “vidc.mtx5”= D:\Kodeki\ACEMEG~1\SystemS\Matrox\DigiVCap.dll “vidc.mtx6”= D:\Kodeki\ACEMEG~1\SystemS\Matrox\DigiVCap.dll “vidc.mtx7”= D:\Kodeki\ACEMEG~1\SystemS\Matrox\DigiVCap.dll “vidc.mtx8”= D:\Kodeki\ACEMEG~1\SystemS\Matrox\DigiVCap.dll “vidc.mtx9”= D:\Kodeki\ACEMEG~1\SystemS\Matrox\DigiVCap.dll “vidc.mmes”= D:\Kodeki\ACEMEG~1\SystemS\Matrox\DigiVCap.dll “msacm.msadpcm”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\msadp32.acm “msacm.imaadpcm”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\imaadp32.acm “msacm.msg711”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\msg711.acm “msacm.msg723”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\msg723.acm “msacm.msgsm610”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\msgsm32.acm “vidc.m261”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\msh261.drv “vidc.m263”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\msh263.drv “vidc.i420”= i420vfw.dll “vidc.mrle”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\msrle32.dll “vidc.uyvy”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\msyuv.dll “vidc.yuy2”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\msyuv.dll “vidc.yvyu”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\msyuv.dll “vidc.msvc”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\msvidc32.dll “vidc.cram”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\msvidc32.dll “vidc.mpg4”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\mpg4c32.dll “vidc.mp41”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\mpg4c32.dll “vidc.mp42”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\mpg4c32.dll “vidc.mp43”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\mpg4c32.dll “vidc.mp4s”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\mpg4c32.dll “vidc.mp4v”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\mpg4c32.dll “vidc.wmv3”= D:\Kodeki\ACEMEG~1\SystemS\MICROS~1\WMV9VCM.dll “vidc.vixl”= D:\Kodeki\ACEMEG~1\SystemS\Miro\miroxl32.dll “vidc.nt00”= D:\Kodeki\ACEMEG~1\SystemS\Newtek\ntcodec.dll “msacm.vorbis”= D:\Kodeki\ACEMEG~1\SystemS\OGG\vorbis.acm “vidc.vp30”= D:\Kodeki\ACEMEG~1\SystemS\ON2TEC~1\vp31vfw.dll “vidc.vp31”= D:\Kodeki\ACEMEG~1\SystemS\ON2TEC~1\vp31vfw.dll “vidc.vp60”= D:\Kodeki\ACEMEG~1\SystemS\ON2TEC~1\vp6vfw.dll “vidc.vp61”= D:\Kodeki\ACEMEG~1\SystemS\ON2TEC~1\vp6vfw.dll “vidc.pdvc”= D:\Kodeki\ACEMEG~1\SystemS\PANASO~1\idvcodec.dll “vidc.ipdv”= D:\Kodeki\ACEMEG~1\SystemS\PANASO~1\idvcodec.dll “vidc.pvw2”= D:\Kodeki\ACEMEG~1\SystemS\Pegasus\pvwv220.dll “vidc.pimj”= D:\Kodeki\ACEMEG~1\SystemS\Pegasus\pvljpg20.dll “vidc.mjpx”= D:\Kodeki\ACEMEG~1\SystemS\Pegasus\pvmjpg21.dll “vidc.miro”= D:\Kodeki\ACEMEG~1\SystemS\Pinnacle\MIRODV~1.DLL “vidc.dcap”= D:\Kodeki\ACEMEG~1\SystemS\Pinnacle\MIRODV~1.DLL “vidc.mjpa”= D:\Kodeki\ACEMEG~1\SystemS\Pinnacle\RTMJPG~1.DLL “vidc.gpjm”= D:\Kodeki\ACEMEG~1\SystemS\Pinnacle\RTMJPG~1.DLL “vidc.pim1”= D:\Kodeki\ACEMEG~1\SystemS\Pinnacle\pclepim1.dll “msacm.qmpeg”= D:\Kodeki\ACEMEG~1\SystemS\QDesign\qmpeg.acm “vidc.rmp4”= D:\Kodeki\ACEMEG~1\SystemS\REALMA~1\rmp4.dll “vidc.rud0”= D:\Kodeki\ACEMEG~1\SystemS\Rududu\rududu.dll “msacm.at3”= D:\Kodeki\ACEMEG~1\SystemS\SONY\atrac3.acm “vidc.sony”= D:\Kodeki\ACEMEG~1\SystemS\SONY\sonydv.dll “vidc.dvcp”= D:\Kodeki\ACEMEG~1\SystemS\SONY\sonydv.dll “vidc.s422”= D:\Kodeki\ACEMEG~1\SystemS\Tekram\tekyuv.dll “vidc.t420”= D:\Kodeki\ACEMEG~1\SystemS\Toshiba\tsbyuv.dll “vidc.y411”= D:\Kodeki\ACEMEG~1\SystemS\Toshiba\tsbyuv.dll “vidc.vssv”= D:\Kodeki\ACEMEG~1\SystemS\VANGUA~1\vsscodec.dll “msacm.voxacm160”= D:\Kodeki\ACEMEG~1\SystemS\VoxWare\vct3216.acm “vidc.xvid”= D:\Kodeki\ACEMEG~1\SystemS\XviD\xvidvfw.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled] “WOOWATCH”=C:\PROGRA~1\NEOSTR~1\Watch.exe “nwiz”=nwiz.exe /install “NvMediaCenter”=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit “NvCplDaemon”=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup “Apis”=D:\APISTU~1.1\Apis.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center] “AntiVirusDisableNotify”=dword:00000001 “UpdatesDisableNotify”=dword:00000001 [HKLM~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] “%windir%\system32\sessmgr.exe”= “D:\Gadu-Gadu\gg.exe”= “C:\Program Files\Messenger\msmsgs.exe”= “C:\Program Files\DNA\btdna.exe”= “D:\BitTorrent\bittorrent.exe”= “D:\BearShare\BearShare.exe”= “C:\Program Files\Mozilla Firefox\firefox.exe”= “D:\Valve\hl.exe”= “D:\Valve\hltv.exe”= “D:\Valve\hlds.exe”= R3 Stmatm;ATM/ADSL miniport;C:\WINDOWS\system32\DRIVERS\stmatm.sys [2003-08-12 16:51] R3 TaurusUsb;ADSL Modem USB Service;C:\WINDOWS\system32\DRIVERS\torususb.sys [2006-05-25 17:28] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F] \Shell\AutoRun\command - F:\setup.exe . Contents of the ‘Scheduled Tasks’ folder “2008-03-28 18:02:50 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job” - C:\Program Files\Apple Software Update\SoftwareUpdate.exe . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-05-10 18:10:50 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden files: 0 ************************************************************************** . ------------------------ Other Running Processes ------------------------ . D:\Avira\AntiVir PersonalEdition Classic\sched.exe D:\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\WINDOWS\system32\FTRTSVC.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\system32\nvsvc32.exe D:\Alcohol 52\StarWind\StarWindServiceAE.exe C:\WINDOWS\system32\wdfmgr.exe C:\PROGRA~1\NEOSTR~1\TaskBarIcon.exe . ************************************************************************** . Completion time: 2008-05-10 18:13:17 - machine was rebooted ComboFix-quarantined-files.txt 2008-05-10 16:13:11 Pre-Run: 4,283,015,168 bajtów wolnych Post-Run: 4,213,407,744 bajt˘w wolnych 340 — E O F — 2008-02-24 13:22:12

Leon1 · 10 Maj 2008 16:38

Log wygląda na czysty

zrób optymalizacje uruchamiania http://cybertrash.netarteria.pl/cyber/index.php/topic,378.0.html

usuń ręcznie folder C: \Qoobox usuń instalkę Combofix z dysku.

Wyłącz I włącz przywracanie systemu na wszystkich dyskach.http://support.microsoft.com/kb/310405/pl

przeskanuj obszar Mój komputer http://www.kaspersky.pl/virusscanner.html pokaż raport stronę uruchomić przez IE

czy nadal masz ten komunikat podczas uruchamiania?

system · 10 Maj 2008 16:47

Po skanie Combo-Fix’a i restarcie komputera runDLL już sie nie pokazał =D>

Dzięki

huber2t · 10 Maj 2008 16:59

Przeskanuj Kasperskim tak jak kazał Leon$ i daj raport na forum

system · 10 Maj 2008 17:13

dlaczego zawsze Kaspersky?

więc muszę go najpierw pobrać…

Leon1 · 10 Maj 2008 17:15

bo jest jednym z najlepszych

system · 10 Maj 2008 18:05

nici ze skanu Kasperskym, bo komp mi świruje jak instaluje tego “jednego z najlepszych” :x

ale Avira znalazła trojany w folderze plików kwarantanny Combo-Fix’a. Moge usuwać? :idea:

Leon1 · 10 Maj 2008 18:15

zajrzyj parę postów wyżej co tam napisane

system · 10 Maj 2008 18:25

Usunęłam wcześniej razem z instalką… To możliwe żeby pokazało się po raz drugi ?

huber2t · 10 Maj 2008 19:03

Nie jeste mozliwe ale przeskanuj jeszcze raz