Witam,
mam problem z moim komputerem, otóż od dzisiejszego poranka mój system stwierdził iż przestanie uruchamiać niektóre aplikacje, najbardziej mnie boli brak KMPlayer i NFS:MW, zupełnie nie mam pomysłu jednak dlaczego 
Oto log z CF`a
ComboFix 09-05-23.04 - Root 2009-05-24 20:36.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1250.48.1045.18.1023.653 [GMT 2:00]
Uruchomiony z: c:\users\Root\Moje dokumenty\Downloads\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.
((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\system\system32\msconfig.exe
.
((((((((((((((((((((((((( Pliki utworzone od 2009-04-24 do 2009-05-24 )))))))))))))))))))))))))))))))
.
2009-05-24 17:18 . 2009-05-24 18:31 -------- d-----w c:\software\Windows Media Connect 2
2009-05-24 17:16 . 2009-05-24 18:32 -------- d-----w c:\system\system32\drivers\UMDF
2009-05-24 17:16 . 2009-05-24 17:16 -------- d-----w c:\system\system32\LogFiles
2009-05-24 15:09 . 2009-05-24 15:09 -------- d-----w c:\users\Root\Ustawienia lokalne\Dane aplikacji\Gas Powered Games
2009-05-24 15:08 . 2009-05-24 15:08 -------- d-----w C:\temp
2009-05-24 15:08 . 2009-05-24 15:08 -------- d-----w c:\users\All Users\Dane aplikacji\Media Center Programs
2009-05-24 14:57 . 2009-05-24 14:57 -------- d-----w c:\users\Root\Dane aplikacji\InstallShield
2009-05-24 09:40 . 2009-05-24 10:54 -------- d-----w c:\system\system32\oodag
2009-05-24 09:39 . 2009-05-24 09:39 -------- d-----w c:\users\Root\Ustawienia lokalne\Dane aplikacji\O&O
2009-05-24 09:11 . 2003-03-18 14:45 212 ----a-r c:\system\system32\hpbvnstp.dat
2009-05-24 09:11 . 2002-10-15 12:46 196608 ----a-r c:\system\system32\hpbvnstp.dll
2009-05-24 09:10 . 2001-08-17 17:47 12928 -c--a-w c:\system\system32\dllcache\dot4prt.sys
2009-05-24 09:10 . 2001-08-17 17:47 12928 ----a-w c:\system\system32\drivers\Dot4Prt.sys
2009-05-24 09:10 . 2008-04-13 20:09 206976 -c--a-w c:\system\system32\dllcache\dot4.sys
2009-05-24 09:10 . 2008-04-13 20:09 206976 ----a-w c:\system\system32\drivers\Dot4.sys
2009-05-24 09:10 . 2001-10-26 12:46 23936 -c--a-w c:\system\system32\dllcache\dot4usb.sys
2009-05-24 09:10 . 2001-10-26 12:46 23936 ----a-w c:\system\system32\drivers\Dot4usb.sys
2009-05-24 09:09 . 2003-01-13 09:02 77824 ----a-w c:\system\system32\SD32.DLL
2009-05-24 09:09 . 2002-12-10 16:17 24576 ----a-w c:\system\system32\ZTAG32.DLL
2009-05-24 09:09 . 2002-12-04 18:54 28672 ----a-w c:\system\system32\IMF32.DLL
2009-05-24 09:09 . 2002-07-09 11:57 40960 ----a-w c:\system\system32\ZGDI32.DLL
2009-05-24 09:09 . 2001-07-09 20:40 86016 ----a-w c:\system\system32\ZSPOOL.DLL
2009-05-24 09:09 . 2002-08-19 21:50 40960 ----a-w c:\system\system32\HPBMMON.DLL
2009-05-24 09:09 . 2001-07-31 09:17 94274 ----a-w c:\system\system32\HPBHEALR.DLL
2009-05-24 09:09 . 2000-03-23 11:25 58368 ----a-w c:\system\system32\HPDOMON.DLL
2009-05-22 10:51 . 2009-05-24 15:00 -------- d--h--w c:\software\InstallShield Installation Information
2009-05-22 10:51 . 2009-05-22 10:51 -------- d-----w c:\software\Common Files\InstallShield
2009-05-22 09:25 . 2009-05-22 09:27 -------- d-----w c:\users\Root\Ustawienia lokalne\Dane aplikacji\Google
2009-05-21 20:07 . 2009-05-21 20:19 -------- d-----w c:\users\Root\Ustawienia lokalne\Dane aplikacji\Temporary Projects
2009-05-21 19:26 . 2009-05-21 19:26 -------- d-----w c:\software\Microsoft SQL Server
2009-05-21 19:26 . 2009-05-21 19:26 -------- d-----w c:\software\Microsoft Synchronization Services
2009-05-21 19:26 . 2009-05-21 19:26 -------- d-----w c:\software\Microsoft SQL Server Compact Edition
2009-05-21 19:26 . 2009-05-21 19:26 187328 ----a-w c:\users\All Users\Dane aplikacji\Microsoft\VCSExpress\9.0\1033\ResourceCache.dll
2009-05-21 19:25 . 2009-05-21 19:25 416 ----a-w c:\users\All Users\Dane aplikacji\Microsoft\MSDN\9.0\1033\ResourceCache.dll
2009-05-21 19:24 . 2009-05-21 19:26 -------- d-----w c:\software\Microsoft Visual Studio 9.0
2009-05-21 19:24 . 2009-05-21 19:24 -------- d-----w c:\software\Microsoft.NET
2009-05-21 19:23 . 2009-05-21 19:23 -------- d-----w c:\software\Microsoft SDKs
2009-05-21 19:22 . 2009-05-21 21:28 2352 ----a-w c:\users\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
2009-05-21 19:22 . 2009-05-21 19:22 -------- d-----w c:\system\system32\XPSViewer
2009-05-21 19:22 . 2009-05-21 19:22 -------- d-----w c:\software\Reference Assemblies
2009-05-21 19:21 . 2008-07-06 12:06 89088 -c----w c:\system\system32\dllcache\filterpipelineprintproc.dll
2009-05-21 19:21 . 2008-07-06 12:06 575488 -c----w c:\system\system32\dllcache\xpsshhdr.dll
2009-05-21 19:21 . 2008-07-06 12:06 575488 ------w c:\system\system32\xpsshhdr.dll
2009-05-21 19:21 . 2008-07-06 12:06 1676288 -c----w c:\system\system32\dllcache\xpssvcs.dll
2009-05-21 19:21 . 2008-07-06 12:06 1676288 ------w c:\system\system32\xpssvcs.dll
2009-05-21 19:21 . 2008-07-06 12:06 117760 ------w c:\system\system32\prntvpt.dll
2009-05-21 19:21 . 2008-07-06 10:50 597504 -c----w c:\system\system32\dllcache\printfilterpipelinesvc.exe
2009-05-21 18:11 . 2009-05-21 18:13 664 ----a-w c:\system\system32\d3d9caps.dat
2009-05-21 17:03 . 2009-05-21 17:03 -------- d-----w c:\users\Root\Dane aplikacji\GetRightToGo
2009-05-21 16:42 . 2009-05-21 16:44 -------- d-----w c:\software\BurnAware Free
2009-05-21 16:31 . 2009-05-21 16:46 -------- d-----w c:\software\nLite
2009-05-21 12:46 . 2009-05-21 12:46 -------- d-----w c:\users\All Users\Dane aplikacji\2DBoy
2009-05-21 12:44 . 2009-05-21 12:45 -------- d-----w c:\software\World of Goo
2009-05-21 12:43 . 2009-05-21 12:43 -------- d-----w c:\users\All Users\Dane aplikacji\DAEMON Tools Lite
2009-05-21 12:41 . 2009-05-21 12:41 -------- d-----w c:\software\DAEMON Tools Toolbar
2009-05-21 12:41 . 2009-05-21 16:38 -------- d-----w c:\software\DAEMON Tools Lite
2009-05-21 12:39 . 2009-05-21 12:44 -------- d-----w c:\users\Root\Dane aplikacji\DAEMON Tools Lite
2009-05-21 12:39 . 2009-05-21 12:39 721904 ----a-w c:\system\system32\drivers\sptd.sys
2009-05-21 11:56 . 2009-05-21 11:56 0 ----a-w c:\system\nsreg.dat
2009-05-21 11:56 . 2009-05-21 11:56 -------- d-----w c:\users\Root\Ustawienia lokalne\Dane aplikacji\Thunderbird
2009-05-21 11:56 . 2009-05-21 11:56 -------- d-----w c:\users\Root\Dane aplikacji\Thunderbird
2009-05-21 11:55 . 2009-05-24 16:58 -------- d-----w c:\software\Mozilla Thunderbird
2009-05-18 15:26 . 2009-05-18 15:28 -------- d-----w c:\users\Root\Dane aplikacji\Juce VST Host
2009-05-18 05:25 . 2009-05-18 05:25 -------- d-----w c:\users\Root\Ustawienia lokalne\Dane aplikacji\GHISLER
2009-05-17 21:41 . 2009-05-18 05:24 -------- d-----w C:\totalcmd
2009-05-17 21:41 . 2009-05-17 21:41 -------- d-----w c:\users\Root\Dane aplikacji\GHISLER
2009-05-17 21:41 . 2009-05-14 05:50 545 ----a-w c:\system\UC.PIF
2009-05-17 21:41 . 2009-05-14 05:50 545 ----a-w c:\system\RAR.PIF
2009-05-17 21:41 . 2009-05-14 05:50 545 ----a-w c:\system\PKZIP.PIF
2009-05-17 21:41 . 2009-05-14 05:50 545 ----a-w c:\system\PKUNZIP.PIF
2009-05-17 21:41 . 2009-05-14 05:50 545 ----a-w c:\system\NOCLOSE.PIF
2009-05-17 21:41 . 2009-05-14 05:50 545 ----a-w c:\system\LHA.PIF
2009-05-17 21:41 . 2009-05-14 05:50 545 ----a-w c:\system\ARJ.PIF
2009-05-17 12:24 . 2009-05-17 12:24 -------- d-----w c:\users\Root\Dane aplikacji\Foxit
2009-05-17 12:24 . 2009-05-17 12:24 -------- d-----w c:\software\Foxit Software
2009-05-17 11:30 . 2009-05-24 09:04 -------- d-----w c:\users\Root\Dane aplikacji\Free Download Manager
2009-05-17 11:30 . 2009-05-17 11:30 -------- d-----w c:\users\All Users\Dane aplikacji\FreeDownloadManager.ORG
2009-05-17 11:30 . 2009-05-17 11:30 -------- d-----w c:\software\Free Download Manager
2009-05-16 18:26 . 2009-05-16 18:26 -------- d-----w c:\software\ASIO4ALL v2
2009-05-16 18:26 . 2009-05-16 18:26 -------- d-----w c:\software\VstPlugins
2009-05-16 18:26 . 2006-06-20 08:56 225280 ----a-w c:\system\system32\rewire.dll
2009-05-16 18:25 . 2009-05-16 18:25 -------- d-----w c:\software\Outsim
2009-05-16 18:23 . 2009-05-16 18:26 -------- d-----w c:\software\Image-Line
2009-05-16 18:22 . 2009-05-16 18:22 -------- d-----w c:\users\LocalService\Ustawienia lokalne\Dane aplikacji\ESET
2009-05-16 18:22 . 2009-05-16 18:22 -------- d-----w c:\users\Root\Ustawienia lokalne\Dane aplikacji\ESET
2009-05-16 10:10 . 2009-05-16 10:10 4096 ----a-w c:\system\d3dx.dat
2009-05-16 09:47 . 2008-03-05 13:56 1420824 ----a-w c:\system\system32\D3DCompiler_37.dll
2009-05-16 09:06 . 2008-09-06 04:07 3004592 -c--a-w c:\users\All Users\Dane aplikacji\{0C3BE91F-5194-44C0-80FF-246E0251D2BD}\dbpack_setup.exe
2009-05-16 09:05 . 2008-08-29 19:00 52224 -c--a-w c:\users\All Users\Dane aplikacji\{0C3BE91F-5194-44C0-80FF-246E0251D2BD}\dbxasadotnet\C173537B\A6362067\Borland.Data.DbxSybaseASADriver.dll
2009-05-16 09:04 . 2008-08-29 19:00 65536 -c--a-w c:\users\All Users\Dane aplikacji\{0C3BE91F-5194-44C0-80FF-246E0251D2BD}\blackfishsql\6BA10C68\122E955D\BSQLServer.exe
2009-05-16 09:02 . 2009-05-16 09:09 -------- d-----w c:\users\Root\Dane aplikacji\CodeGear
2009-05-16 09:02 . 2009-05-16 09:02 -------- d-----w c:\software\Common Files\Borland Shared
2009-05-16 09:02 . 2008-06-17 00:03 97280 ----a-w c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\borland database engine professional english\mFileBagIDE.dll\mFileBagEXE.dll
2009-05-16 09:00 . 2008-08-29 19:00 196608 ----a-w c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\codevisualization_delphi\68F6B115\F188AD8\Borland.Together.ClassBrowser.dll
2009-05-16 08:59 . 2008-08-29 19:00 100864 ----a-w c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\vcldotnetruntimes\D71F4FA2\46DE48AE\Borland.Delphi.dll
2009-05-16 08:59 . 2008-08-29 19:00 100864 ----a-w c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\vcldotnetruntimes\c_\builds\installer\Scripts\VCLDotNetRuntimes\GlobalAssemblyCache\Borland.Delphi.dll
2009-05-16 08:59 . 2008-08-29 19:00 407552 ----a-w c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\vclwin32runtimes\598EEE8C\3E6B52DE\midas.dll
2009-05-16 08:59 . 2009-05-16 08:59 -------- d-----w c:\users\All Users\Dane aplikacji\CodeGear
2009-05-16 08:24 . 2009-05-24 09:53 -------- d-----w c:\users\Root\Dane aplikacji\ipla
2009-05-16 08:24 . 2009-05-16 08:24 -------- d-----w c:\users\All Users\Dane aplikacji\ipla
2009-05-16 08:24 . 2009-05-16 08:24 -------- d-----w c:\software\ipla
2009-05-16 08:24 . 2009-05-16 08:24 1700352 ----a-w c:\system\system32\gdiplus.dll
2009-05-16 08:24 . 2009-05-16 08:24 1060864 ----a-w c:\system\system32\mfc71.dll
2009-05-15 14:27 . 2009-05-16 09:04 -------- d-----w c:\users\All Users\Dane aplikacji\Embarcadero
2009-05-15 14:25 . 2009-05-16 09:04 -------- d--h--w c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}
2009-05-15 14:24 . 2008-08-01 17:13 1777664 ----a-w c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mSanctuaryDesigntime.dll\sanctuarylib.dll
2009-05-15 14:24 . 2008-07-29 04:50 134656 ----a-w c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mSanctuaryDesigntime.dll\mSanctuaryRuntime.dll
2009-05-15 14:24 . 2008-06-17 00:03 101888 ----a-w c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mIDEFunc.dll\mEXEFunc.dll
2009-05-15 14:24 . 2008-06-17 00:03 433152 ----a-w c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mMSI.dll\mMSIExec.dll
2009-05-15 14:24 . 2008-06-17 00:03 428032 ----a-w c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mMDACRun.dll\mMDACExec.dll
2009-05-15 14:24 . 2008-06-17 00:03 507392 ----a-w c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mDown.dll\mDownExec.dll
2009-05-15 14:24 . 2008-06-17 00:03 403456 ----a-w c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mJS.dll\mJSExec.dll
2009-05-15 14:24 . 2008-06-17 00:03 406528 ----a-w c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mDotNet.dll\mDotNetExec.dll
2009-05-15 14:24 . 2008-06-17 00:03 407040 ----a-w c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mWinRun.dll\mWinRunExec.dll
2009-05-15 14:24 . 2008-03-21 18:21 111104 ----a-w c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\ScaleProgressDesigntime.dll\ScaleProgressRuntime.dll
2009-05-15 14:24 . 2008-03-21 18:21 108032 ----a-w c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\mIDEKillProcess.dll\mEXEKillProcess.dll
2009-05-15 14:24 . 2008-03-21 18:24 24064 ----a-w c:\users\All Users\Dane aplikacji\{65B1AA84-C1DF-4A2E-A28C-E242BD7DE4B3}\OFFLINE\82348D9B\1B8847CE\dcc32.exe
2009-05-15 07:21 . 2009-05-15 07:21 -------- d-----w c:\software\Common Files\Blizzard Entertainment
2009-05-15 05:38 . 2006-10-26 17:56 32592 ----a-w c:\system\system32\msonpmon.dll
2009-05-15 05:38 . 2009-05-15 05:38 -------- d-----w c:\software\Microsoft Works
2009-05-15 05:38 . 2009-05-21 19:22 -------- d-----w c:\software\MSBuild
2009-05-15 05:35 . 2009-05-15 05:37 -------- d-----w c:\system\SHELLNEW
2009-05-15 05:34 . 2009-05-15 05:34 -------- d-----w c:\users\Root\Ustawienia lokalne\Dane aplikacji\Microsoft Help
2009-05-15 05:34 . 2009-05-21 19:26 -------- d-----w c:\users\All Users\Dane aplikacji\Microsoft Help
2009-05-15 05:34 . 2009-05-15 05:34 -------- d--h--r C:\MSOCache
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-21 19:22 . 2001-10-26 20:15 77690 ----a-w c:\system\system32\perfc015.dat
2009-05-21 19:22 . 2001-10-26 20:15 474976 ----a-w c:\system\system32\perfh015.dat
2009-05-16 09:06 . 2009-05-16 09:04 -------- dc-h--w c:\users\All Users\Dane aplikacji\{0C3BE91F-5194-44C0-80FF-246E0251D2BD}
2009-05-14 12:34 . 2009-05-14 12:34 -------- d-----w c:\software\microsoft frontpage
2009-05-14 12:32 . 2009-05-14 12:32 21856 ----a-w c:\system\system32\emptyregdb.dat
2009-04-30 22:30 . 2009-04-30 22:30 1194528 ----a-w c:\system\system32\nvcplui.exe
2009-04-30 20:02 . 2009-04-30 20:02 9994240 ----a-w c:\system\system32\nvoglnt.dll
2009-04-30 20:02 . 2009-04-30 20:02 806912 ----a-w c:\system\system32\nvapi.dll
2009-04-30 20:02 . 2009-04-30 20:02 8055584 ----a-w c:\system\system32\drivers\nv4_mini.sys
2009-04-30 20:02 . 2009-04-30 20:02 663552 ----a-w c:\system\system32\nvcuvid.dll
2009-04-30 20:02 . 2009-04-30 20:02 5896320 ----a-w c:\system\system32\nv4_disp.dll
2009-04-30 20:02 . 2009-04-30 20:02 1720320 ----a-w c:\system\system32\nvcuda.dll
2009-04-30 20:02 . 2009-04-30 20:02 1579630 ----a-w c:\system\system32\nvdata.bin
2009-04-30 20:02 . 2009-04-30 20:02 143360 ----a-w c:\system\system32\nvcodins.dll
2009-04-30 20:02 . 2009-04-30 20:02 143360 ----a-w c:\system\system32\nvcod.dll
2009-04-30 20:02 . 2009-04-30 20:02 1314816 ----a-w c:\system\system32\nvcuvenc.dll
2009-04-03 10:39 . 2009-04-03 10:39 70936 ----a-w c:\system\system32\PhysXLoader.dll
2009-03-16 12:18 . 2009-05-16 09:48 69448 ----a-w c:\system\system32\XAPOFX1_3.dll
2009-03-16 12:18 . 2009-05-16 09:48 517448 ----a-w c:\system\system32\XAudio2_4.dll
2009-03-16 12:18 . 2009-05-16 09:48 235352 ----a-w c:\system\system32\xactengine3_4.dll
2009-03-16 12:18 . 2009-05-16 09:48 22360 ----a-w c:\system\system32\X3DAudio1_6.dll
2009-03-09 13:27 . 2009-05-16 09:48 453456 ----a-w c:\system\system32\d3dx10_41.dll
2009-03-09 13:27 . 2009-05-16 09:48 1846632 ----a-w c:\system\system32\D3DCompiler_41.dll
2009-03-09 13:27 . 2009-05-16 09:48 4178264 ----a-w c:\system\system32\D3DX9_41.dll
2009-03-06 14:22 . 2008-04-14 22:50 285696 ----a-w c:\system\system32\pdh.dll
.
------- Sigcheck -------
[-] 2008-08-20 14:06 1571840 D189FC2EFE3AE6F3FD04DE2D0B88EBF7 c:\system\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AQQ"="c:\software\WapSter\WAPSTE~1\AQQ.exe" [2009-04-20 5095936]
"ctfmon.exe"="c:\system\system32\ctfmon.exe" [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvMediaCenter"="c:\system\system32\NvMcTray.dll" [2009-04-30 86016]
"NvCplDaemon"="c:\system\system32\NvCpl.dll" [2009-04-30 13750272]
"egui"="c:\software\ESET\ESET NOD32 Antivirus\egui.exe" [2009-02-06 2021400]
"nwiz"="nwiz.exe" - c:\system\system32\nwiz.exe [2009-04-30 1657376]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\system\system32\CTFMON.EXE" [2008-04-14 15360]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]
"nltide_3"="advpack.dll" - c:\system\system32\advpack.dll [2008-04-14 100864]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"= 1 (0x1)
"NoSMMyPictures"= 1 (0x1)
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"= 1 (0x1)
"NoInternetIcon"= 1 (0x1)
"NoSMMyPictures"= 1 (0x1)
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders schannel.dll, digest.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ose"=3 (0x3)
"odserv"=3 (0x3)
"BlackfishSQL"=2 (0x2)
"TapiSrv"=3 (0x3)
"O&O Defrag"=2 (0x2)
"Microsoft Office Groove Audit Service"=3 (0x3)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Software\\WapSter\\WapSter AQQ\\AQQ.exe"=
"d:\\Software\\WebServ\\mysql\\bin\\WebServ(mysqld).exe"=
"d:\\Software\\WebServ\\apache2\\bin\\WebServ(apache).exe"=
"c:\\Software\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Software\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Software\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"d:\\Users\\All Users\\Dokumenty\\RAD Studio\\6.0\\Demos\\IntraWeb\\Win32\\StandaloneSSL\\StandAloneSSL.exe"=
"d:\\Software\\THQ\\Gas Powered Games\\Supreme Commander - Forged Alliance\\bin\\ForgedAlliance.exe"=
"d:\\Software\\THQ\\Gas Powered Games\\GPGNet\\GPG.Multiplayer.Client.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
R1 ehdrv;ehdrv;c:\system\system32\drivers\ehdrv.sys [2009-02-06 106208]
R1 epfwtdir;epfwtdir;c:\system\system32\drivers\epfwtdir.sys [2009-02-06 93336]
R2 ekrn;ESET Service;c:\software\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-02-06 727720]
S2 spupdsvc;Windows Service Pack Installer update service;c:\system\system32\spupdsvc.exe [2009-05-14 26488]
S3 Ambfilt;Ambfilt;c:\system\system32\drivers\Ambfilt.sys [2009-05-14 1684736]
S4 BlackfishSQL;BlackfishSQL;d:\software\CodeGear\RAD Studio\6.0\bin\BSQLServer.exe [2008-08-29 65536]
--- Inne Usługi/Sterowniki w Pamięci ---
*NewlyCreated* - APPMGMT
.
Zawartość folderu 'Zaplanowane zadania'
2009-05-24 c:\system\Tasks\GoogleUpdateTaskUserS-1-5-21-343818398-1220945662-1801674531-500.job
- c:\users\Root\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [2009-05-22 09:25]
.
- - - - USUNIĘTO PUSTE WPISY - - - -
SafeBoot-procexp90.Sys
.
------- Skan uzupełniający -------
.
IE: E&ksportuj do programu Microsoft Excel - c:\software\MICROS~2\Office12\EXCEL.EXE/3000
IE: Pobierz plik wideo we Free Download Manager - file://c:\software\Free Download Manager\dlfvideo.htm
IE: Pobierz w Free Download Manager - file://c:\software\Free Download Manager\dllink.htm
IE: Pobierz wszystkie pliki w Free Download Manager - file://c:\software\Free Download Manager\dlall.htm
IE: Pobierz zaznaczone w Free Download Manager - file://c:\software\Free Download Manager\dlselected.htm
TCP: {F5602A7F-FCDB-4404-8373-165E33D4E124} = 192.168.1.1
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-24 20:38
Windows 5.1.2600 Dodatek Service Pack 3 NTFS
skanowanie ukrytych procesów ...
skanowanie ukrytych wpisów autostartu ...
skanowanie ukrytych plików ...
skanowanie pomyślnie ukończone
ukryte pliki: 0
**************************************************************************
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG11.00.00.01WORKSTATION"="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"
.
Czas ukończenia: 2009-05-24 20:39
ComboFix-quarantined-files.txt 2009-05-24 18:39
Przed: 15 297 884 160 bajtów wolnych
Po: 15 842 701 312 bajtów wolnych
WindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\SYSTEM
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\SYSTEM="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /noguiboot
267 --- E O F --- 2009-05-22 21:27