Niepokojące zawieszanie

cze · 18 Czerwiec 2007 20:31

witam! Mam problem mianowicie taki:

-gdy używam często prawego przycisku myszki, po jakimś czasie się on zawiesza i np. nie mogę nic kopiować w ten sposób

-w tym samym czasie gdy otwieram jakiś folder, nie wyświetlają się okna po lewej stronie >Zadania plików i folderów, >Inne miejsca, >Szczegóły

-avast właśnie krzyknął, że potrzebne jest ponowne uruchomienie systemu

Proszę zatem o sprawdzenie!

Logfile of HijackThis v1.99.1 Scan saved at 22:07:46, on 2007-06-18 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16473) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindService.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\iTunes\iTunesHelper.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\RSSoft\RedSwoosh.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Skype\Plugin Manager\SkypePM.exe C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\Common Files\Teleca Shared\Generic.exe C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe C:\Program Files\Last.fm\LastFM.exe C:\Program Files\Windows Media Player\wmplayer.exe E:\EEEEEEEEEEEEEEEEEE\eMule\emule.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\iTunes\iTunes.exe C:\Program Files\Apple Software Update\SoftwareUpdate.exe C:\Program Files\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O4 - HKLM…\Run: [skyTel] SkyTel.EXE O4 - HKLM…\Run: [RemoteControl] “C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe” O4 - HKLM…\Run: [inCD] C:\Program Files\Ahead\InCD\InCD.exe O4 - HKLM…\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM…\Run: [nwiz] nwiz.exe /install O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM…\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM…\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM…\Run: [LiveMonitor] C:\Program Files\MSI\Live Update 3\LMonitor.exe O4 - HKLM…\Run: [NVIDIA nTune] “C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe” clear O4 - HKLM…\Run: [MagicRotation] C:\Program Files\MagicRotation\MagicPvt.exe O4 - HKLM…\Run: [stormCodec_Helper] “C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe” /S /opti O4 - HKLM…\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM…\Run: [sunJavaUpdateSched] “C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe” O4 - HKLM…\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM…\Run: [QuickTime Task] “C:\Program Files\QuickTime Alternative\qttask.exe” -atboottime O4 - HKLM…\Run: [iTunesHelper] “C:\Program Files\iTunes\iTunesHelper.exe” O4 - HKLM…\Run: [sony Ericsson PC Suite] “C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe” /startoptions O4 - HKLM…\RunOnce: [megauploadtoolbar] C:\DOCUME~1\Michal\USTAWI~1\Temp\tbuninstall.exe -df “C:\Program Files\MegauploadToolbar” O4 - HKLM…\RunOnce: [aswactskin4.ocx] C:\PROGRA~1\ALWILS~1\Avast4\ASWREG~1.EXE “C:\WINDOWS\system32\actskin4.ocx” O4 - HKCU…\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU…\Run: [NBJ] “C:\Program Files\Ahead\Nero BackItUp\NBJ.exe” O4 - HKCU…\Run: [Gadu-Gadu] “C:\Program Files\Gadu-Gadu\gg.exe” /tray O4 - HKCU…\Run: [skype] “C:\Program Files\Skype\Phone\Skype.exe” /nosplash /minimized O4 - HKCU…\Run: [Odkurzacz-MCD] C:\Program Files\Odkurzacz\odk_mcd.exe O4 - HKCU…\Run: [Red Swoosh] C:\Program Files\RSSoft\RedSwoosh.exe /S O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: HP Photosmart Premier - Szybkie uruchomienie.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: Ň×Č¤ąşÎď - {DE60714F-AC17-427e-861A-FD60CBDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=1 (file missing) O9 - Extra ‘Tools’ menuitem: Ň×Č¤ąşÎď - {DE60714F-AC17-427e-861A-FD60CBDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=1 (file missing) O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm O11 - Options group: [iNTERNATIONAL] International* O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {1A781DED-C22D-4153-3213-A3211E29DF13} (GameDesire Card Games) - http://67.15.101.3/g_bin/pl/cards_2_0_0_72.cab O16 - DPF: {2A781DED-C22D-4153-9812-CEA98A32981C} (GameDesire Makao) - http://67.15.101.3/g_bin/pl/cardsmakao_2_0_0_26.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resourc … oscan8.cab O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup … 0953697671 O16 - DPF: {BFA1F11D-3121-AFE1-4112-894323212DAC} (GameDesire Word Games) - http://67.15.101.3/g_bin/pl/words_2_0_0_47.cab O16 - DPF: {BFA1F11D-3121-AFE1-4112-983219421AEF} (GameDesire 1Player Word Games) - http://67.15.101.3/g_bin/pl/wordssingle_2_0_0_44.cab O16 - DPF: {E23FABEE-12E3-33DA-DA12-195DAC123984} (GameDesire Mahjong) - http://67.15.101.3/g_bin/pl/mahjong_2_0_0_26.cab O16 - DPF: {FDDBE2B8-6602-4AD8-946D-94C5A32FA6C1} (GameDesire Pool 8) - http://67.15.101.3/g_bin/pl/billard8_2_0_0_28.cab O17 - HKLM\System\CCS\Services\Tcpip…{1691F9FC-77DB-4DD1-8A8F-D3A8854D7C41}: NameServer = 62.179.1.62,62.179.1.60 O17 - HKLM\System\CS1\Services\Tcpip…{1691F9FC-77DB-4DD1-8A8F-D3A8854D7C41}: NameServer = 62.179.1.62,62.179.1.60 O17 - HKLM\System\CS2\Services\Tcpip…{1691F9FC-77DB-4DD1-8A8F-D3A8854D7C41}: NameServer = 62.179.1.62,62.179.1.60 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindService.exe

Gutek · 18 Czerwiec 2007 22:15

Optymalizacja XP: http://forum.dobreprogramy.pl/viewtopic.php?t=76580

usuń wpisy HJT

Zbędniki w autostarcie - Zobacz

Daj log z Combofix

cze · 18 Czerwiec 2007 23:01

ComboFix

“Michal” - 07-06-19 0:53:00 Dodatek Service Pack 2 ComboFix 07-03-22 - Running from: “C:\Program Files” ((((((((((((((((((((((((((((((( Files Created from 2007-05-19 to 2007-06-19 )))))))))))))))))))))))))))))))))) 2007-06-17 00:32 2007-06-17 00:31 2007-06-16 19:43 2007-06-16 19:42 877,056 --a------ C:\Program Files\iview395.exe 2007-06-06 20:16 2007-06-06 20:16 2007-06-01 13:08 2007-05-30 21:19 87,824 -ra------ C:\WINDOWS\system32\drivers\k310mgmt.sys 2007-05-30 21:19 85,696 -ra------ C:\WINDOWS\system32\drivers\k310obex.sys 2007-05-30 21:14 96,352 -ra------ C:\WINDOWS\system32\drivers\k310mdm.sys 2007-05-30 21:14 9,264 -ra------ C:\WINDOWS\system32\drivers\k310mdfl.sys 2007-05-30 21:14 6,208 -ra------ C:\WINDOWS\system32\drivers\k310cmnt.sys 2007-05-30 21:14 6,208 -ra------ C:\WINDOWS\system32\drivers\k310cm.sys 2007-05-30 17:33 2007-05-30 17:33 2007-05-30 17:32 6,575,480 --a------ C:\Program Files\videocleanerpro_wmf_setup.exe 2007-05-27 21:48 60,800 -ra------ C:\WINDOWS\system32\drivers\k310bus.sys 2007-05-27 21:48 5,840 -ra------ C:\WINDOWS\system32\drivers\k310whnt.sys 2007-05-27 21:48 5,840 -ra------ C:\WINDOWS\system32\drivers\k310wh.sys 2007-05-26 13:24 2007-05-26 13:24 2007-05-26 13:22 2007-05-26 13:22 2007-05-26 13:22 2007-05-26 13:22 2007-05-26 13:22 2007-05-26 13:22 2007-05-26 13:21 2007-05-26 13:20 44,061,761 --a------ C:\Program Files\setup_1.30.55.exe 2007-05-23 23:48 458,250 --a------ C:\Program Files\FileFactoryTurbo-0.9.3.exe 2007-05-22 23:42 24,576 --a------ C:\WINDOWS\system32\IdleTrac.dll 2007-05-22 23:41 368,912 --a------ C:\WINDOWS\system32\vbar332.dll 2007-05-22 23:41 2007-05-22 21:33 2007-05-22 21:29 2007-05-22 20:49 44,544 --a------ C:\WINDOWS\system32\drivers\vserial.sys 2007-05-22 20:49 17,280 --a------ C:\WINDOWS\system32\drivers\vsb.sys (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-06-19 00:48 -------- d-------- C:\DOCUME~1\Michal\DANEAP~1\skype 2007-06-19 00:37 -------- d-------- C:\Program Files\rssoft 2007-06-18 22:34 32 --a------ C:\WINDOWS\system32\driver.dat 2007-06-18 22:34 16 --a------ C:\WINDOWS\system32\magicpvt.dat 2007-06-18 22:28 -------- d-------- C:\Program Files\gadu-gadu 2007-06-18 19:23 -------- d-------- C:\Program Files\winavivideoconverter 2007-06-18 19:21 -------- d-------- C:\Program Files\elaborate bytes 2007-06-18 19:17 -------- d-------- C:\Program Files\msi 2007-06-17 00:31 1855341 --a------ C:\Program Files\raster vect.zip 2007-06-15 19:01 -------- d-------- C:\Program Files\atv mudracer 2007-06-04 16:12 -------- d–h----- C:\Program Files\installshield installation information 2007-06-03 21:49 -------- d-------- C:\Program Files\apple software update 2007-06-03 20:28 -------- d-------- C:\Program Files\last.fm 2007-05-31 21:19 -------- d-------- C:\Program Files\odkurzacz 2007-05-30 23:05 -------- d-------- C:\Program Files\skype 2007-05-22 00:08 -------- d-------- C:\Program Files\symantec 2007-05-18 20:28 23872 --a------ C:\DOCUME~1\Michal\DANEAP~1\gdipfontcachev1.dat 2007-05-16 22:06 -------- d-------- C:\Program Files\itunes 2007-05-16 17:18 683520 --a------ C:\WINDOWS\system32\inetcomm.dll 2007-05-11 00:08 672768 --a------ C:\Program Files\is151setup grafika.exe 2007-05-11 00:08 -------- d-------- C:\Program Files\bbproject 2007-05-10 01:52 -------- d-------- C:\Program Files\microsoft capicom 2.1.0.2 2007-05-09 18:48 -------- d-------- C:\Program Files\tworzenie0 2007-05-09 18:48 -------- d-------- C:\Program Files\quicktime alternative 2007-05-09 18:43 -------- d-------- C:\Program Files\power video converter2 2007-05-09 18:39 -------- d-------- C:\Program Files\programy 2007-05-08 23:25 -------- d-------- C:\Program Files\the mark 2007-05-08 19:32 -------- d-------- C:\Program Files\ipod 2007-05-08 19:23 37873216 --a------ C:\Program Files\itunessetup.exe 2007-05-08 18:15 -------- d-------- C:\Program Files\winiso 2007-05-08 18:13 1239066 --a------ C:\Program Files\winiso53.exe 2007-05-08 17:57 223128 --a------ C:\WINDOWS\system32\drivers\vaxscsi.sys 2007-05-07 23:02 3782589 --a------ C:\Program Files\lastfm_win_1.1.3.0.exe 2007-05-07 18:45 7160704 --a------ C:\Program Files\alcohol52_fe_1.9.5.4327.exe 2007-05-07 18:41 7395200 --a------ C:\Program Files\alcohol120_trial_1.9.6.4719.exe 2007-05-06 18:23 -------- d-------- C:\Program Files\daemon tools 2007-05-06 18:10 682232 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2007-05-06 18:10 1802208 --a------ C:\Program Files\daemon4091-x86.exe 2007-05-05 23:16 115136 --a------ C:\Program Files\rsinstaller.exe 2007-05-05 18:55 239440 --a------ C:\Program Files\isobuster_all_lang.exe 2007-05-03 21:11 -------- d-------- C:\Program Files\dmg2isos 2007-05-03 18:59 -------- d-------- C:\Program Files\ea games 2007-05-03 18:42 729088 --a------ C:\WINDOWS\iun6002.exe 2007-05-03 16:24 -------- d-------- C:\Program Files\directx 2007-05-03 12:52 -------- d-------- C:\Program Files\windows media connect 2 2007-05-03 12:52 -------- d-------- C:\Program Files\emule 2007-05-03 12:52 -------- d-------- C:\Program Files\avi recomp 2007-05-03 12:52 -------- d-------- C:\DOCUME~1\Michal\DANEAP~1\utorrent 2007-05-03 00:18 3550028 --a------ C:\Program Files\izarc_setup.exe 2007-05-03 00:18 -------- d-------- C:\Program Files\izarc 2007-05-02 23:59 3257204 --a------ C:\Program Files\uiso8_pe.exe 2007-05-01 17:00 1684797 --a------ C:\Program Files\foobar2000_0.9.4.3.exe 2007-05-01 17:00 -------- d-------- C:\Program Files\foobar2000 2007-05-01 16:42 -------- d-------- C:\Program Files\mp3 wav converter 2007-04-30 17:46 745600 --a------ C:\WINDOWS\system32\aswboot.exe 2007-04-30 17:41 94552 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys 2007-04-30 17:41 85952 --a------ C:\WINDOWS\system32\drivers\aswmon.sys 2007-04-30 17:39 23416 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys 2007-04-30 17:38 43176 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys 2007-04-30 17:37 26888 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys 2007-04-30 17:35 95872 --a------ C:\WINDOWS\system32\avastss.scr 2007-04-29 19:53 -------- d-------- C:\Program Files\cdex_170b2 2007-04-29 11:49 -------- d-------- C:\Program Files\small rockets 2007-04-28 22:44 -------- d-------- C:\Program Files\marbit 2007-04-28 22:43 1493863 --a------ C:\Program Files\allplayer(dobreprogramy.pl).exe 2007-04-28 18:32 -------- d-------- C:\Program Files\games 2007-04-28 12:37 14852216 --a------ C:\Program Files\avast setuppol.exe 2007-04-27 23:21 28400 --a------ C:\WINDOWS\system32\drivers\secdrv.sys 2007-04-25 17:56 -------- d-------- C:\DOCUME~1\Michal\DANEAP~1\netpumper 2007-04-25 16:23 144896 --a------ C:\WINDOWS\system32\schannel.dll 2007-04-19 14:53 -------- d-------- C:\Program Files\usugi online 2007-04-18 18:14 2854400 --a------ C:\WINDOWS\system32\msi.dll 2007-04-14 16:25 347650 --a------ C:\Program Files\xp-antispy_setup-english.exe 2007-04-11 15:38 1574681 --a------ C:\Program Files\setup_altomp3gold.exe 2007-04-11 15:22 1049255 --a------ C:\Program Files\wrar362pl.exe 2007-03-29 21:19 7882582 --a------ C:\Program Files\nvidia monitor.lnk 2007-03-25 17:49 67078 --a------ C:\WINDOWS\system32\perfc015.dat 2007-03-25 17:49 435978 --a------ C:\WINDOWS\system32\perfh015.dat 2007-03-24 22:22 19699 --a------ C:\Program Files\startup programs (micha-ec058474c) 2007-03-24 21.21.42.txt 2007-03-24 00:02 61 --a------ C:\Program Files\listen.pls 2007-03-23 20:39 150852 --a------ C:\Program Files\rku3.30.150.400.exe 2007-03-22 22:55 1111686 --a------ C:\Program Files\combofix.exe 2007-03-22 18:37 494582 --a------ C:\Program Files\fixwareout.exe 2007-03-22 15:03 553687 --a------ C:\Program Files\regcleaner(dobreprogramy.pl).exe 2007-03-22 00:56 347253 --a------ C:\Program Files\silent runners.vbs 2007-03-21 22:34 3593154 --a------ C:\Program Files\tworzenie0.rar 2007-03-21 18:43 6469352 --a------ C:\Program Files\avgas-setup-7.5.0.50.exe 2007-03-10 16:11 87608 --a------ C:\DOCUME~1\Michal\DANEAP~1\ezpinst.exe 2007-03-10 16:11 55 --a------ C:\DOCUME~1\Michal\DANEAP~1\pcouffin.log 2007-03-10 16:11 47360 --a------ C:\DOCUME~1\Michal\DANEAP~1\pcouffin.sys 2007-03-10 16:11 1144 --a------ C:\DOCUME~1\Michal\DANEAP~1\pcouffin.inf 2007-03-10 16:11 1074 --a------ C:\DOCUME~1\Michal\DANEAP~1\pcouffin.cat 2007-03-10 16:05 3728158 --a------ C:\Program Files\ultra_dvdcreator.exe 2007-03-06 18:51 813888 --a------ C:\Program Files\megauploadtoolbarsetup.exe (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] “CTFMON.EXE”=“C:\WINDOWS\system32\ctfmon.exe” “NBJ”="“C:\Program Files\Ahead\Nero BackItUp\NBJ.exe”" “Gadu-Gadu”="“C:\Program Files\Gadu-Gadu\gg.exe” /tray" “Skype”="“C:\Program Files\Skype\Phone\Skype.exe” /nosplash /minimized" “Odkurzacz-MCD”=“C:\Program Files\Odkurzacz\odk_mcd.exe” “Red Swoosh”=“C:\Program Files\RSSoft\RedSwoosh.exe /S” [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] “SkyTel”=“SkyTel.EXE” “RemoteControl”="“C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe”" “InCD”=“C:\Program Files\Ahead\InCD\InCD.exe” “NeroFilterCheck”=“C:\WINDOWS\system32\NeroCheck.exe” “NvCplDaemon”=“RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup” “nwiz”=“nwiz.exe /install” “NvMediaCenter”=“RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit” “RTHDCPL”=“RTHDCPL.EXE” “Alcmtr”=“ALCMTR.EXE” “LiveMonitor”=“C:\Program Files\MSI\Live Update 3\LMonitor.exe” @="" “NVIDIA nTune”="“C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe” clear" “MagicRotation”=“C:\Program Files\MagicRotation\MagicPvt.exe” “StormCodec_Helper”="“C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe” /S /opti" “HP Software Update”=“C:\Program Files\HP\HP Software Update\HPWuSchd2.exe” “SunJavaUpdateSched”="“C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe”" “avast!”=“C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe” “QuickTime Task”="“C:\Program Files\QuickTime Alternative\qttask.exe” -atboottime" “iTunesHelper”="“C:\Program Files\iTunes\iTunesHelper.exe”" “Sony Ericsson PC Suite”="“C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe” /startoptions" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL] “Installed”=“1” [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI] “Installed”=“1” “NoChange”=“1” [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS] “Installed”=“1” [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] “{57B86673-276A-48B2-BAE7-C6DBB3020EB8}”=“AVG Anti-Spyware 7.5” [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload] “WPDShServiceObj”="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] “SecurityProviders”=“msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll” [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] HTTPFilter REG_MULTI_SZ HTTPFilter\0\0 LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ DnsCache\0\0 DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 termsvcs REG_MULTI_SZ TermService\0\0 WudfServiceGroup REG_MULTI_SZ WUDFSvc\0\0 *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_WEBNTACCESS Contents of the ‘Scheduled Tasks’ folder C:\WINDOWS\tasks\AppleSoftwareUpdate.job C:\WINDOWS\tasks\User_Feed_Synchronization-{2F3CF39D-0D8C-4F79-91E1-2A25E00A06EB}.job ******************************************************************** catchme 0.2 W2K/XP/Vista - userland rootkit detector by Gmer, 17 October 2006 http://www.gmer.net scanning hidden processes … scanning hidden services … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 ******************************************************************** Completion time: 07-06-19 0:58:21 C:\ComboFix2.txt … 07-03-23 00:43 C:\ComboFix3.txt … 07-03-22 22:57

Gutek · 20 Czerwiec 2007 21:20

Optymalizacja XP: http://forum.dobreprogramy.pl/viewtopic.php?t=76580