Nie uruchamiają się niektóre programy (tj. KMPlayer, N4S:MW)


(system) #1

Witam,

mam problem z moim komputerem, otóż od dzisiejszego poranka mój system stwierdził iż przestanie uruchamiać niektóre aplikacje, najbardziej mnie boli brak KMPlayer i NFS:MW, zupełnie nie mam pomysłu jednak dlaczego :confused:

Oto log z CF`a

ComboFix 09-05-23.04 - Root 2009-05-24 20:36.1 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.3.1250.48.1045.18.1023.653 [GMT 2:00]

Uruchomiony z: c:\users\Root\Moje dokumenty\Downloads\ComboFix.exe

AV: ESET NOD32 Antivirus 4.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

.


((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))

.


c:\system\system32\msconfig.exe


.

((((((((((((((((((((((((( Pliki utworzone od 2009-04-24 do 2009-05-24 )))))))))))))))))))))))))))))))

.


2009-05-24 17:18 . 2009-05-24 18:31	--------	d-----w	c:\software\Windows Media Connect 2

2009-05-24 17:16 . 2009-05-24 18:32	--------	d-----w	c:\system\system32\drivers\UMDF

2009-05-24 17:16 . 2009-05-24 17:16	--------	d-----w	c:\system\system32\LogFiles

2009-05-24 15:09 . 2009-05-24 15:09	--------	d-----w	c:\users\Root\Ustawienia lokalne\Dane aplikacji\Gas Powered Games

2009-05-24 15:08 . 2009-05-24 15:08	--------	d-----w	C:\temp

2009-05-24 15:08 . 2009-05-24 15:08	--------	d-----w	c:\users\All Users\Dane aplikacji\Media Center Programs

2009-05-24 14:57 . 2009-05-24 14:57	--------	d-----w	c:\users\Root\Dane aplikacji\InstallShield

2009-05-24 09:40 . 2009-05-24 10:54	--------	d-----w	c:\system\system32\oodag

2009-05-24 09:39 . 2009-05-24 09:39	--------	d-----w	c:\users\Root\Ustawienia lokalne\Dane aplikacji\O&O

2009-05-24 09:11 . 2003-03-18 14:45	212	----a-r	c:\system\system32\hpbvnstp.dat

2009-05-24 09:11 . 2002-10-15 12:46	196608	----a-r	c:\system\system32\hpbvnstp.dll

2009-05-24 09:10 . 2001-08-17 17:47	12928	-c--a-w	c:\system\system32\dllcache\dot4prt.sys

2009-05-24 09:10 . 2001-08-17 17:47	12928	----a-w	c:\system\system32\drivers\Dot4Prt.sys

2009-05-24 09:10 . 2008-04-13 20:09	206976	-c--a-w	c:\system\system32\dllcache\dot4.sys

2009-05-24 09:10 . 2008-04-13 20:09	206976	----a-w	c:\system\system32\drivers\Dot4.sys

2009-05-24 09:10 . 2001-10-26 12:46	23936	-c--a-w	c:\system\system32\dllcache\dot4usb.sys

2009-05-24 09:10 . 2001-10-26 12:46	23936	----a-w	c:\system\system32\drivers\Dot4usb.sys

2009-05-24 09:09 . 2003-01-13 09:02	77824	----a-w	c:\system\system32\SD32.DLL

2009-05-24 09:09 . 2002-12-10 16:17	24576	----a-w	c:\system\system32\ZTAG32.DLL

2009-05-24 09:09 . 2002-12-04 18:54	28672	----a-w	c:\system\system32\IMF32.DLL

2009-05-24 09:09 . 2002-07-09 11:57	40960	----a-w	c:\system\system32\ZGDI32.DLL

2009-05-24 09:09 . 2001-07-09 20:40	86016	----a-w	c:\system\system32\ZSPOOL.DLL

2009-05-24 09:09 . 2002-08-19 21:50	40960	----a-w	c:\system\system32\HPBMMON.DLL

2009-05-24 09:09 . 2001-07-31 09:17	94274	----a-w	c:\system\system32\HPBHEALR.DLL

2009-05-24 09:09 . 2000-03-23 11:25	58368	----a-w	c:\system\system32\HPDOMON.DLL

2009-05-22 10:51 . 2009-05-24 15:00	--------	d--h--w	c:\software\InstallShield Installation Information

2009-05-22 10:51 . 2009-05-22 10:51	--------	d-----w	c:\software\Common Files\InstallShield

2009-05-22 09:25 . 2009-05-22 09:27	--------	d-----w	c:\users\Root\Ustawienia lokalne\Dane aplikacji\Google

2009-05-21 20:07 . 2009-05-21 20:19	--------	d-----w	c:\users\Root\Ustawienia lokalne\Dane aplikacji\Temporary Projects

2009-05-21 19:26 . 2009-05-21 19:26	--------	d-----w	c:\software\Microsoft SQL Server

2009-05-21 19:26 . 2009-05-21 19:26	--------	d-----w	c:\software\Microsoft Synchronization Services

2009-05-21 19:26 . 2009-05-21 19:26	--------	d-----w	c:\software\Microsoft SQL Server Compact Edition

2009-05-21 19:26 . 2009-05-21 19:26	187328	----a-w	c:\users\All Users\Dane aplikacji\Microsoft\VCSExpress\9.0\1033\ResourceCache.dll

2009-05-21 19:25 . 2009-05-21 19:25	416	----a-w	c:\users\All Users\Dane aplikacji\Microsoft\MSDN\9.0\1033\ResourceCache.dll

2009-05-21 19:24 . 2009-05-21 19:26	--------	d-----w	c:\software\Microsoft Visual Studio 9.0

2009-05-21 19:24 . 2009-05-21 19:24	--------	d-----w	c:\software\Microsoft.NET

2009-05-21 19:23 . 2009-05-21 19:23	--------	d-----w	c:\software\Microsoft SDKs

2009-05-21 19:22 . 2009-05-21 21:28	2352	----a-w	c:\users\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat

2009-05-21 19:22 . 2009-05-21 19:22	--------	d-----w	c:\system\system32\XPSViewer

2009-05-21 19:22 . 2009-05-21 19:22	--------	d-----w	c:\software\Reference Assemblies

2009-05-21 19:21 . 2008-07-06 12:06	89088	-c----w	c:\system\system32\dllcache\filterpipelineprintproc.dll

2009-05-21 19:21 . 2008-07-06 12:06	575488	-c----w	c:\system\system32\dllcache\xpsshhdr.dll

2009-05-21 19:21 . 2008-07-06 12:06	575488	------w	c:\system\system32\xpsshhdr.dll

2009-05-21 19:21 . 2008-07-06 12:06	1676288	-c----w	c:\system\system32\dllcache\xpssvcs.dll

2009-05-21 19:21 . 2008-07-06 12:06	1676288	------w	c:\system\system32\xpssvcs.dll

2009-05-21 19:21 . 2008-07-06 12:06	117760	------w	c:\system\system32\prntvpt.dll

2009-05-21 19:21 . 2008-07-06 10:50	597504	-c----w	c:\system\system32\dllcache\printfilterpipelinesvc.exe

2009-05-21 18:11 . 2009-05-21 18:13	664	----a-w	c:\system\system32\d3d9caps.dat

2009-05-21 17:03 . 2009-05-21 17:03	--------	d-----w	c:\users\Root\Dane aplikacji\GetRightToGo

2009-05-21 16:42 . 2009-05-21 16:44	--------	d-----w	c:\software\BurnAware Free

2009-05-21 16:31 . 2009-05-21 16:46	--------	d-----w	c:\software\nLite

2009-05-21 12:46 . 2009-05-21 12:46	--------	d-----w	c:\users\All Users\Dane aplikacji\2DBoy

2009-05-21 12:44 . 2009-05-21 12:45	--------	d-----w	c:\software\World of Goo

2009-05-21 12:43 . 2009-05-21 12:43	--------	d-----w	c:\users\All Users\Dane aplikacji\DAEMON Tools Lite

2009-05-21 12:41 . 2009-05-21 12:41	--------	d-----w	c:\software\DAEMON Tools Toolbar

2009-05-21 12:41 . 2009-05-21 16:38	--------	d-----w	c:\software\DAEMON Tools Lite

2009-05-21 12:39 . 2009-05-21 12:44	--------	d-----w	c:\users\Root\Dane aplikacji\DAEMON Tools Lite

2009-05-21 12:39 . 2009-05-21 12:39	721904	----a-w	c:\system\system32\drivers\sptd.sys

2009-05-21 11:56 . 2009-05-21 11:56	0	----a-w	c:\system\nsreg.dat

2009-05-21 11:56 . 2009-05-21 11:56	--------	d-----w	c:\users\Root\Ustawienia lokalne\Dane aplikacji\Thunderbird

2009-05-21 11:56 . 2009-05-21 11:56	--------	d-----w	c:\users\Root\Dane aplikacji\Thunderbird

2009-05-21 11:55 . 2009-05-24 16:58	--------	d-----w	c:\software\Mozilla Thunderbird

2009-05-18 15:26 . 2009-05-18 15:28	--------	d-----w	c:\users\Root\Dane aplikacji\Juce VST Host

2009-05-18 05:25 . 2009-05-18 05:25	--------	d-----w	c:\users\Root\Ustawienia lokalne\Dane aplikacji\GHISLER

2009-05-17 21:41 . 2009-05-18 05:24	--------	d-----w	C:\totalcmd

2009-05-17 21:41 . 2009-05-17 21:41	--------	d-----w	c:\users\Root\Dane aplikacji\GHISLER

2009-05-17 21:41 . 2009-05-14 05:50	545	----a-w	c:\system\UC.PIF

2009-05-17 21:41 . 2009-05-14 05:50	545	----a-w	c:\system\RAR.PIF

2009-05-17 21:41 . 2009-05-14 05:50	545	----a-w	c:\system\PKZIP.PIF

2009-05-17 21:41 . 2009-05-14 05:50	545	----a-w	c:\system\PKUNZIP.PIF

2009-05-17 21:41 . 2009-05-14 05:50	545	----a-w	c:\system\NOCLOSE.PIF

2009-05-17 21:41 . 2009-05-14 05:50	545	----a-w	c:\system\LHA.PIF

2009-05-17 21:41 . 2009-05-14 05:50	545	----a-w	c:\system\ARJ.PIF

2009-05-17 12:24 . 2009-05-17 12:24	--------	d-----w	c:\users\Root\Dane aplikacji\Foxit

2009-05-17 12:24 . 2009-05-17 12:24	--------	d-----w	c:\software\Foxit Software

2009-05-17 11:30 . 2009-05-24 09:04	--------	d-----w	c:\users\Root\Dane aplikacji\Free Download Manager

2009-05-17 11:30 . 2009-05-17 11:30	--------	d-----w	c:\users\All Users\Dane aplikacji\FreeDownloadManager.ORG

2009-05-17 11:30 . 2009-05-17 11:30	--------	d-----w	c:\software\Free Download Manager

2009-05-16 18:26 . 2009-05-16 18:26	--------	d-----w	c:\software\ASIO4ALL v2

2009-05-16 18:26 . 2009-05-16 18:26	--------	d-----w	c:\software\VstPlugins

2009-05-16 18:26 . 2006-06-20 08:56	225280	----a-w	c:\system\system32\rewire.dll

2009-05-16 18:25 . 2009-05-16 18:25	--------	d-----w	c:\software\Outsim

2009-05-16 18:23 . 2009-05-16 18:26	--------	d-----w	c:\software\Image-Line

2009-05-16 18:22 . 2009-05-16 18:22	--------	d-----w	c:\users\LocalService\Ustawienia lokalne\Dane aplikacji\ESET

2009-05-16 18:22 . 2009-05-16 18:22	--------	d-----w	c:\users\Root\Ustawienia lokalne\Dane aplikacji\ESET

2009-05-16 10:10 . 2009-05-16 10:10	4096	----a-w	c:\system\d3dx.dat

2009-05-16 09:47 . 2008-03-05 13:56	1420824	----a-w	c:\system\system32\D3DCompiler_37.dll

2009-05-16 09:06 . 2008-09-06 04:07	3004592	-c--a-w	c:\users\All Users\Dane aplikacji\{0C3BE91F-5194-44C0-80FF-246E0251D2BD}\dbpack_setup.exe

2009-05-16 09:05 . 2008-08-29 19:00	52224	-c--a-w	c:\users\All Users\Dane aplikacji\{0C3BE91F-5194-44C0-80FF-246E0251D2BD}\dbxasadotnet\C173537B\A6362067\Borland.Data.DbxSybaseASADriver.dll

2009-05-16 09:04 . 2008-08-29 19:00	65536	-c--a-w	c:\users\All Users\Dane aplikacji\{0C3BE91F-5194-44C0-80FF-246E0251D2BD}\blackfishsql\6BA10C68\122E955D\BSQLServer.exe

2009-05-16 09:02 . 2009-05-16 09:09	--------	d-----w	c:\users\Root\Dane aplikacji\CodeGear

2009-05-16 09:02 . 2009-05-16 09:02	--------	d-----w	c:\software\Common Files\Borland Shared

2009-05-16 09:02 . 2008-06-17 00:03	97280	----a-w	c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\borland database engine professional english\mFileBagIDE.dll\mFileBagEXE.dll

2009-05-16 09:00 . 2008-08-29 19:00	196608	----a-w	c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\codevisualization_delphi\68F6B115\F188AD8\Borland.Together.ClassBrowser.dll

2009-05-16 08:59 . 2008-08-29 19:00	100864	----a-w	c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\vcldotnetruntimes\D71F4FA2\46DE48AE\Borland.Delphi.dll

2009-05-16 08:59 . 2008-08-29 19:00	100864	----a-w	c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\vcldotnetruntimes\c_\builds\installer\Scripts\VCLDotNetRuntimes\GlobalAssemblyCache\Borland.Delphi.dll

2009-05-16 08:59 . 2008-08-29 19:00	407552	----a-w	c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\vclwin32runtimes\598EEE8C\3E6B52DE\midas.dll

2009-05-16 08:59 . 2009-05-16 08:59	--------	d-----w	c:\users\All Users\Dane aplikacji\CodeGear

2009-05-16 08:24 . 2009-05-24 09:53	--------	d-----w	c:\users\Root\Dane aplikacji\ipla

2009-05-16 08:24 . 2009-05-16 08:24	--------	d-----w	c:\users\All Users\Dane aplikacji\ipla

2009-05-16 08:24 . 2009-05-16 08:24	--------	d-----w	c:\software\ipla

2009-05-16 08:24 . 2009-05-16 08:24	1700352	----a-w	c:\system\system32\gdiplus.dll

2009-05-16 08:24 . 2009-05-16 08:24	1060864	----a-w	c:\system\system32\mfc71.dll

2009-05-15 14:27 . 2009-05-16 09:04	--------	d-----w	c:\users\All Users\Dane aplikacji\Embarcadero

2009-05-15 14:25 . 2009-05-16 09:04	--------	d--h--w	c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}

2009-05-15 14:24 . 2008-08-01 17:13	1777664	----a-w	c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mSanctuaryDesigntime.dll\sanctuarylib.dll

2009-05-15 14:24 . 2008-07-29 04:50	134656	----a-w	c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mSanctuaryDesigntime.dll\mSanctuaryRuntime.dll

2009-05-15 14:24 . 2008-06-17 00:03	101888	----a-w	c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mIDEFunc.dll\mEXEFunc.dll

2009-05-15 14:24 . 2008-06-17 00:03	433152	----a-w	c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mMSI.dll\mMSIExec.dll

2009-05-15 14:24 . 2008-06-17 00:03	428032	----a-w	c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mMDACRun.dll\mMDACExec.dll

2009-05-15 14:24 . 2008-06-17 00:03	507392	----a-w	c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mDown.dll\mDownExec.dll

2009-05-15 14:24 . 2008-06-17 00:03	403456	----a-w	c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mJS.dll\mJSExec.dll

2009-05-15 14:24 . 2008-06-17 00:03	406528	----a-w	c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mDotNet.dll\mDotNetExec.dll

2009-05-15 14:24 . 2008-06-17 00:03	407040	----a-w	c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mWinRun.dll\mWinRunExec.dll

2009-05-15 14:24 . 2008-03-21 18:21	111104	----a-w	c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\ScaleProgressDesigntime.dll\ScaleProgressRuntime.dll

2009-05-15 14:24 . 2008-03-21 18:21	108032	----a-w	c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mIDEKillProcess.dll\mEXEKillProcess.dll

2009-05-15 14:24 . 2008-03-21 18:24	24064	----a-w	c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\82348D9B\1B8847CE\dcc32.exe

2009-05-15 07:21 . 2009-05-15 07:21	--------	d-----w	c:\software\Common Files\Blizzard Entertainment

2009-05-15 05:38 . 2006-10-26 17:56	32592	----a-w	c:\system\system32\msonpmon.dll

2009-05-15 05:38 . 2009-05-15 05:38	--------	d-----w	c:\software\Microsoft Works

2009-05-15 05:38 . 2009-05-21 19:22	--------	d-----w	c:\software\MSBuild

2009-05-15 05:35 . 2009-05-15 05:37	--------	d-----w	c:\system\SHELLNEW

2009-05-15 05:34 . 2009-05-15 05:34	--------	d-----w	c:\users\Root\Ustawienia lokalne\Dane aplikacji\Microsoft Help

2009-05-15 05:34 . 2009-05-21 19:26	--------	d-----w	c:\users\All Users\Dane aplikacji\Microsoft Help

2009-05-15 05:34 . 2009-05-15 05:34	--------	d--h--r	C:\MSOCache


.

(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-05-21 19:22 . 2001-10-26 20:15	77690	----a-w	c:\system\system32\perfc015.dat

2009-05-21 19:22 . 2001-10-26 20:15	474976	----a-w	c:\system\system32\perfh015.dat

2009-05-16 09:06 . 2009-05-16 09:04	--------	dc-h--w	c:\users\All Users\Dane aplikacji\{0C3BE91F-5194-44C0-80FF-246E0251D2BD}

2009-05-14 12:34 . 2009-05-14 12:34	--------	d-----w	c:\software\microsoft frontpage

2009-05-14 12:32 . 2009-05-14 12:32	21856	----a-w	c:\system\system32\emptyregdb.dat

2009-04-30 22:30 . 2009-04-30 22:30	1194528	----a-w	c:\system\system32\nvcplui.exe

2009-04-30 20:02 . 2009-04-30 20:02	9994240	----a-w	c:\system\system32\nvoglnt.dll

2009-04-30 20:02 . 2009-04-30 20:02	806912	----a-w	c:\system\system32\nvapi.dll

2009-04-30 20:02 . 2009-04-30 20:02	8055584	----a-w	c:\system\system32\drivers\nv4_mini.sys

2009-04-30 20:02 . 2009-04-30 20:02	663552	----a-w	c:\system\system32\nvcuvid.dll

2009-04-30 20:02 . 2009-04-30 20:02	5896320	----a-w	c:\system\system32\nv4_disp.dll

2009-04-30 20:02 . 2009-04-30 20:02	1720320	----a-w	c:\system\system32\nvcuda.dll

2009-04-30 20:02 . 2009-04-30 20:02	1579630	----a-w	c:\system\system32\nvdata.bin

2009-04-30 20:02 . 2009-04-30 20:02	143360	----a-w	c:\system\system32\nvcodins.dll

2009-04-30 20:02 . 2009-04-30 20:02	143360	----a-w	c:\system\system32\nvcod.dll

2009-04-30 20:02 . 2009-04-30 20:02	1314816	----a-w	c:\system\system32\nvcuvenc.dll

2009-04-03 10:39 . 2009-04-03 10:39	70936	----a-w	c:\system\system32\PhysXLoader.dll

2009-03-16 12:18 . 2009-05-16 09:48	69448	----a-w	c:\system\system32\XAPOFX1_3.dll

2009-03-16 12:18 . 2009-05-16 09:48	517448	----a-w	c:\system\system32\XAudio2_4.dll

2009-03-16 12:18 . 2009-05-16 09:48	235352	----a-w	c:\system\system32\xactengine3_4.dll

2009-03-16 12:18 . 2009-05-16 09:48	22360	----a-w	c:\system\system32\X3DAudio1_6.dll

2009-03-09 13:27 . 2009-05-16 09:48	453456	----a-w	c:\system\system32\d3dx10_41.dll

2009-03-09 13:27 . 2009-05-16 09:48	1846632	----a-w	c:\system\system32\D3DCompiler_41.dll

2009-03-09 13:27 . 2009-05-16 09:48	4178264	----a-w	c:\system\system32\D3DX9_41.dll

2009-03-06 14:22 . 2008-04-14 22:50	285696	----a-w	c:\system\system32\pdh.dll

.


------- Sigcheck -------


[-] 2008-08-20 14:06	1571840	D189FC2EFE3AE6F3FD04DE2D0B88EBF7	c:\system\system32\sfcfiles.dll

.

((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane  

REGEDIT4


[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"AQQ"="c:\software\WapSter\WAPSTE~1\AQQ.exe" [2009-04-20 5095936]

"ctfmon.exe"="c:\system\system32\ctfmon.exe" [2008-04-14 15360]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NvMediaCenter"="c:\system\system32\NvMcTray.dll" [2009-04-30 86016]

"NvCplDaemon"="c:\system\system32\NvCpl.dll" [2009-04-30 13750272]

"egui"="c:\software\ESET\ESET NOD32 Antivirus\egui.exe" [2009-02-06 2021400]

"nwiz"="nwiz.exe" - c:\system\system32\nwiz.exe [2009-04-30 1657376]


[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\system\system32\CTFMON.EXE" [2008-04-14 15360]


[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"nltide_2"="shell32" [X]

"nltide_3"="advpack.dll" - c:\system\system32\advpack.dll [2008-04-14 100864]


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

"NoSMHelp"= 1 (0x1)

"NoSMMyPictures"= 1 (0x1)


[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]

"NoSMHelp"= 1 (0x1)

"NoInternetIcon"= 1 (0x1)

"NoSMMyPictures"= 1 (0x1)


[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

SecurityProviders	schannel.dll, digest.dll


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]

"ose"=3 (0x3)

"odserv"=3 (0x3)

"BlackfishSQL"=2 (0x2)

"TapiSrv"=3 (0x3)

"O&O Defrag"=2 (0x2)

"Microsoft Office Groove Audit Service"=3 (0x3)


[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"%windir%\\system32\\sessmgr.exe"=

"c:\\Software\\WapSter\\WapSter AQQ\\AQQ.exe"=

"d:\\Software\\WebServ\\mysql\\bin\\WebServ(mysqld).exe"=

"d:\\Software\\WebServ\\apache2\\bin\\WebServ(apache).exe"=

"c:\\Software\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

"c:\\Software\\Microsoft Office\\Office12\\GROOVE.EXE"=

"c:\\Software\\Microsoft Office\\Office12\\ONENOTE.EXE"=

"d:\\Users\\All Users\\Dokumenty\\RAD Studio\\6.0\\Demos\\IntraWeb\\Win32\\StandaloneSSL\\StandAloneSSL.exe"=

"d:\\Software\\THQ\\Gas Powered Games\\Supreme Commander - Forged Alliance\\bin\\ForgedAlliance.exe"=

"d:\\Software\\THQ\\Gas Powered Games\\GPGNet\\GPG.Multiplayer.Client.exe"=


[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009


R1 ehdrv;ehdrv;c:\system\system32\drivers\ehdrv.sys [2009-02-06 106208]

R1 epfwtdir;epfwtdir;c:\system\system32\drivers\epfwtdir.sys [2009-02-06 93336]

R2 ekrn;ESET Service;c:\software\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-02-06 727720]

S2 spupdsvc;Windows Service Pack Installer update service;c:\system\system32\spupdsvc.exe [2009-05-14 26488]

S3 Ambfilt;Ambfilt;c:\system\system32\drivers\Ambfilt.sys [2009-05-14 1684736]

S4 BlackfishSQL;BlackfishSQL;d:\software\CodeGear\RAD Studio\6.0\bin\BSQLServer.exe [2008-08-29 65536]


--- Inne Usługi/Sterowniki w Pamięci ---


*NewlyCreated* - APPMGMT

.

Zawartość folderu 'Zaplanowane zadania'


2009-05-24 c:\system\Tasks\GoogleUpdateTaskUserS-1-5-21-343818398-1220945662-1801674531-500.job

- c:\users\Root\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [2009-05-22 09:25]

.

- - - - USUNIĘTO PUSTE WPISY - - - -


SafeBoot-procexp90.Sys



.

------- Skan uzupełniający -------

.

IE: E&ksportuj do programu Microsoft Excel - c:\software\MICROS~2\Office12\EXCEL.EXE/3000

IE: Pobierz plik wideo we Free Download Manager - file://c:\software\Free Download Manager\dlfvideo.htm

IE: Pobierz w Free Download Manager - file://c:\software\Free Download Manager\dllink.htm

IE: Pobierz wszystkie pliki w Free Download Manager - file://c:\software\Free Download Manager\dlall.htm

IE: Pobierz zaznaczone w Free Download Manager - file://c:\software\Free Download Manager\dlselected.htm

TCP: {F5602A7F-FCDB-4404-8373-165E33D4E124} = 192.168.1.1

.


**************************************************************************


catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-05-24 20:38

Windows 5.1.2600 Dodatek Service Pack 3 NTFS


skanowanie ukrytych procesów ...  


skanowanie ukrytych wpisów autostartu ... 


skanowanie ukrytych plików ...  


skanowanie pomyślnie ukończone

ukryte pliki: 0


**************************************************************************

.

--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------


[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]

"OODEFRAG11.00.00.01WORKSTATION"="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"

.

Czas ukończenia: 2009-05-24 20:39

ComboFix-quarantined-files.txt 2009-05-24 18:39


Przed: 15 297 884 160 bajtów wolnych

Po: 15 842 701 312 bajtów wolnych


WindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe

[boot loader]

timeout=2

default=multi(0)disk(0)rdisk(0)partition(1)\SYSTEM

[operating systems]

c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

multi(0)disk(0)rdisk(0)partition(1)\SYSTEM="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /noguiboot


267	--- E O F ---	2009-05-22 21:27