Dzis jeszcze zauwazylem ze jak muza czy dzwiek jaki kolwiek leci to mi tak przerywa ;/ "Jak nie urok to sraczka " 
ComboFix 08-05-15.3 - Jakim 2008-05-19 16:26:53.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.1.1045.18.880 [GMT 2:00]
Running from: C:\Documents and Settings\Jakim\Pulpit\ComboFix.exe
* Created a new restore point
* Resident AV is active
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED
.
((((((((((((((((((((((((( Files Created from 2008-04-19 to 2008-05-19 )))))))))))))))))))))))))))))))
.
2008-05-18 16:48 . 2008-05-18 16:53
2008-05-18 16:32 . 2008-04-13 20:45 26,368 --a–c— C:\WINDOWS\system32\dllcache\usbstor.sys
2008-05-18 15:30 . 2008-05-18 17:57 250 --a------ C:\WINDOWS\gmer.ini
2008-05-18 15:22 . 2008-05-18 15:50
2008-05-18 14:12 . 2008-05-18 14:12
2008-05-18 13:56 . 2008-05-18 13:56 490 --a------ C:\WINDOWS\system32\tmp.reg
2008-05-18 13:25 . 2008-05-18 13:25
2008-05-18 13:24 . 2008-05-19 16:29
2008-05-18 13:24 . 2008-05-16 18:01
2008-05-18 13:24 . 2008-05-16 16:09
2008-05-18 13:24 . 2008-05-19 16:30
2008-05-18 13:24 . 2008-05-16 18:01
2008-05-18 13:24 . 2008-05-16 18:01
2008-05-18 13:24 . 2008-05-16 18:01
2008-05-18 13:24 . 2008-05-18 13:24
2008-05-18 13:24 . 2008-05-19 16:26 1,024 --ah----- C:\Documents and Settings\Administrator\NTUSER.DAT.LOG
2008-05-18 13:18 . 2008-05-18 13:41
2008-05-18 12:08 . 2008-05-18 12:08 1,024 --ah----- C:\Documents and Settings\Default User\NTUSER.DAT.LOG
2008-05-18 11:49 . 2008-05-18 11:49
2008-05-18 11:49 . 2008-05-18 11:49
2008-05-18 11:48 . 2008-05-18 11:49
2008-05-18 11:34 . 2008-05-18 11:34
2008-05-18 10:47 . 2008-05-18 10:47
2008-05-18 10:42 . 2008-05-18 10:42
2008-05-18 10:41 . 2008-05-18 10:41
2008-05-18 10:34 . 2004-08-04 00:35 701,440 --------- C:\WINDOWS\system32\drivers\ati2mtag.sys
2008-05-18 10:14 . 2008-03-01 15:02 6,066,176 -----c— C:\WINDOWS\system32\dllcache\ieframe.dll
2008-05-18 10:14 . 2007-04-17 11:32 2,455,488 -----c— C:\WINDOWS\system32\dllcache\ieapfltr.dat
2008-05-18 10:14 . 2007-03-08 07:11 1,036,288 -----c— C:\WINDOWS\system32\dllcache\ieframe.dll.mui
2008-05-18 10:14 . 2008-03-01 15:02 459,264 -----c— C:\WINDOWS\system32\dllcache\msfeeds.dll
2008-05-18 10:14 . 2008-03-01 15:02 383,488 -----c— C:\WINDOWS\system32\dllcache\ieapfltr.dll
2008-05-18 10:14 . 2008-03-01 15:02 267,776 -----c— C:\WINDOWS\system32\dllcache\iertutil.dll
2008-05-18 10:14 . 2008-03-01 15:02 63,488 -----c— C:\WINDOWS\system32\dllcache\icardie.dll
2008-05-18 10:14 . 2008-03-01 15:02 52,224 -----c— C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2008-05-18 10:14 . 2008-02-22 12:00 13,824 -----c— C:\WINDOWS\system32\dllcache\ieudinit.exe
2008-05-18 10:13 . 2008-05-18 11:49
2008-05-16 18:04 . 2008-04-14 18:05 58,880 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2008-05-16 18:04 . 2008-04-13 20:36 14,208 --a------ C:\WINDOWS\system32\drivers\battc.sys
2008-05-16 18:04 . 2008-04-13 20:36 13,952 --a------ C:\WINDOWS\system32\drivers\cmbatt.sys
2008-05-16 18:04 . 2008-04-13 20:36 10,240 --a------ C:\WINDOWS\system32\drivers\compbatt.sys
2008-05-16 18:04 . 2001-08-17 23:59 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2008-05-16 18:03 . 2008-04-14 19:20 77,312 --a------ C:\WINDOWS\system32\usbui.dll
2008-05-16 18:03 . 2008-04-14 18:16 5,504 --a------ C:\WINDOWS\system32\drivers\intelide.sys
2008-05-16 18:02 . 2008-05-16 16:35
2008-05-16 18:02 . 2008-05-18 12:09 763,990 --a------ C:\WINDOWS\system32\PerfStringBackup.INI
2008-05-16 18:02 . 2004-08-04 14:00 77,824 --a–c— C:\WINDOWS\system32\dllcache\spcommon.dll
2008-05-16 18:02 . 2004-08-04 14:00 61,440 --a–c— C:\WINDOWS\system32\dllcache\spcplui.dll
2008-05-16 18:02 . 2008-05-16 16:14 4,293 --a------ C:\WINDOWS\ODBCINST.INI
2008-05-16 18:01 . 2008-05-16 18:01
2008-05-16 18:01 . 2008-05-16 18:01
2008-05-16 18:01 . 2008-05-16 16:09
2008-05-16 18:01 . 2008-05-16 18:01
2008-05-16 18:01 . 2008-05-16 18:01
2008-05-16 18:01 . 2008-05-16 18:01
2008-05-16 18:01 . 2008-05-16 18:01
2008-05-16 18:01 . 2008-05-16 18:01
2008-05-16 18:01 . 2008-05-16 18:01
2008-05-16 18:01 . 2008-05-18 13:07
2008-05-16 18:01 . 2008-05-18 11:50
2008-05-16 18:01 . 2008-05-16 16:10
2008-05-16 18:01 . 2008-05-16 17:01
2008-05-16 18:00 . 2008-05-16 16:14
2008-05-16 18:00 . 2008-05-16 16:13
2008-05-16 18:00 . 2008-05-18 13:24
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-16 14:44 --------- d-----w C:\Documents and Settings\Jakim\Dane aplikacji\Gadu-Gadu
2008-05-16 14:43 --------- d-----w C:\Program Files\Gadu-Gadu
2008-05-16 14:36 --------- d-----w C:\Documents and Settings\Jakim\Dane aplikacji\ESET
2008-05-16 14:34 --------- d-----w C:\Program Files\ESET
2008-05-16 14:34 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\ESET
2008-05-16 14:25 --------- d-----w C:\Program Files\CONEXANT
2008-05-16 14:14 --------- d-----w C:\Program Files\microsoft frontpage
2008-05-16 14:12 --------- d-----w C:\Program Files\Usługi online
2008-04-14 20:51 11,264 ----a-w C:\WINDOWS\system32\spnpinst.exe
2008-04-14 20:50 997,888 ----a-w C:\WINDOWS\system32\setupapi.dll
2008-04-14 20:50 424,960 ----a-w C:\WINDOWS\system32\licdll.dll
2008-04-14 17:46 1,804 ----a-w C:\WINDOWS\system32\dcache.bin
2008-04-14 17:26 332,288 ----a-w C:\WINDOWS\system32\netsetup.exe
2008-04-14 17:22 92,424 ----a-w C:\WINDOWS\system32\rdpdd.dll
2008-04-14 17:22 87,176 ----a-w C:\WINDOWS\system32\rdpwsx.dll
2008-04-14 17:22 695,808 ----a-w C:\WINDOWS\system32\drmv2clt.dll
2008-04-14 17:22 40,840 ----a-w C:\WINDOWS\system32\drivers\termdd.sys
2008-04-14 17:22 356,352 ----a-w C:\WINDOWS\system32\msscp.dll
2008-04-14 17:22 299,520 ----a-w C:\WINDOWS\system32\drmclien.dll
2008-04-14 17:22 259,072 ----a-w C:\WINDOWS\system32\msnetobj.dll
2008-04-14 17:22 21,896 ----a-w C:\WINDOWS\system32\drivers\tdtcp.sys
2008-04-14 17:22 139,656 ----a-w C:\WINDOWS\system32\drivers\rdpwd.sys
2008-04-14 17:22 12,168 ----a-w C:\WINDOWS\system32\tsddd.dll
2008-04-14 17:22 12,040 ----a-w C:\WINDOWS\system32\drivers\tdpipe.sys
2008-04-14 17:20 999,936 ----a-w C:\WINDOWS\system32\syssetup.dll
2008-04-14 17:19 98,304 ----a-w C:\WINDOWS\system32\actxprxy.dll
2008-04-14 17:18 5,632 ----a-w C:\WINDOWS\system32\wmi.dll
2008-04-14 17:18 1,449,472 ----a-w C:\WINDOWS\system32\winntbbu.dll
2008-04-14 17:17 57,375 ----a-w C:\WINDOWS\system32\odbcji32.dll
2008-04-14 17:13 4,126 ----a-w C:\WINDOWS\system32\msdxmlc.dll
2008-04-14 17:12 3,584 ----a-w C:\WINDOWS\system32\msafd.dll
2008-04-14 17:06 3,584 ----a-w C:\WINDOWS\system32\icmp.dll
2008-04-14 17:05 9,344 ----a-w C:\WINDOWS\system32\framebuf.dll
2008-04-14 17:03 3,072 ----a-w C:\WINDOWS\system32\dpnlobby.dll
2008-04-14 17:03 3,072 ----a-w C:\WINDOWS\system32\dpnaddr.dll
2008-04-14 17:01 16,896 ----a-w C:\WINDOWS\system32\cfgmgr32.dll
2008-04-14 17:00 285,696 ----a-w C:\WINDOWS\system32\atmfd.dll
2008-04-14 16:34 73,472 ----a-w C:\WINDOWS\system32\drivers\sr.sys
2008-04-14 16:33 80,256 ----a-w C:\WINDOWS\system32\drivers\parport.sys
2008-04-14 16:33 68,608 ----a-w C:\WINDOWS\system32\drivers\pci.sys
2008-04-14 16:33 120,320 ----a-w C:\WINDOWS\system32\drivers\pcmcia.sys
2008-04-14 16:32 46,848 ----a-w C:\WINDOWS\system32\drivers\p3.sys
2008-04-14 16:30 2,190,336 ----a-w C:\WINDOWS\system32\ntoskrnl.exe
2008-04-14 16:29 2,067,200 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe
2008-04-14 16:25 4,096 ----a-w C:\WINDOWS\system32\dsprpres.dll
2008-04-14 16:22 89,600 ------w C:\WINDOWS\system32\msxml6r.dll
2008-04-14 16:22 800,000 ----a-w C:\WINDOWS\system32\drivers\dmboot.sys
2008-04-14 16:22 153,856 ----a-w C:\WINDOWS\system32\drivers\dmio.sys
2008-04-14 16:20 80,896 ------w C:\WINDOWS\system32\msshavmsg.dll
2008-04-14 16:20 24,960 ----a-w C:\WINDOWS\system32\drivers\kbdclass.sys
2008-04-14 16:18 37,632 ----a-w C:\WINDOWS\system32\drivers\isapnp.sys
2008-04-14 16:17 40,832 ----a-w C:\WINDOWS\system32\drivers\crusoe.sys
2008-04-14 16:16 40,448 ----a-w C:\WINDOWS\system32\drivers\intelppm.sys
2008-04-14 16:15 49,664 ----a-w C:\WINDOWS\system32\inetres.dll
2008-04-14 16:15 2,977,792 ----a-w C:\WINDOWS\system32\wmploc.dll
2008-04-14 16:13 563,200 ----a-w C:\WINDOWS\system32\shdoclc.dll
2008-04-14 16:11 65,280 ----a-w C:\WINDOWS\system32\drivers\serial.sys
2008-04-14 16:11 53,248 ----a-w C:\WINDOWS\system32\drivers\i8042prt.sys
2008-04-14 16:09 25,728 ------w C:\WINDOWS\system32\drivers\hidbth.sys
2008-04-14 16:09 190,976 ----a-w C:\WINDOWS\system32\wmerror.dll
2008-04-14 16:07 10,240 ----a-w C:\WINDOWS\system32\gpkrsrc.dll
2008-04-14 16:05 67,584 ----a-w C:\WINDOWS\system32\browselc.dll
2008-04-14 16:05 273,920 ------w C:\WINDOWS\system32\drivers\bthport.sys
2008-04-14 16:05 1,845,888 ----a-w C:\WINDOWS\system32\win32k.sys
2008-04-14 16:03 44,672 ----a-w C:\WINDOWS\system32\drivers\fips.sys
2008-04-14 16:01 52,864 ----a-w C:\WINDOWS\system32\drivers\volsnap.sys
2008-04-14 16:00 39,936 ----a-w C:\WINDOWS\system32\drivers\processr.sys
2008-04-14 15:59 8,192 ----a-w C:\WINDOWS\system32\asferror.dll
2008-04-14 15:59 103,936 ----a-w C:\WINDOWS\system32\dpcdll.dll
2008-04-14 15:58 41,856 ----a-w C:\WINDOWS\system32\drivers\amdk7.sys
2008-04-14 15:58 41,472 ----a-w C:\WINDOWS\system32\drivers\amdk6.sys
2008-04-14 15:55 23,296 ----a-w C:\WINDOWS\system32\drivers\mouclass.sys
2008-04-14 15:54 30,208 ----a-w C:\WINDOWS\system32\drivers\modem.sys
2008-04-14 15:54 188,544 ----a-w C:\WINDOWS\system32\drivers\acpi.sys
2008-04-13 19:28 175,744 ----a-w C:\WINDOWS\system32\drivers\rdbss.sys
2008-04-13 19:21 162,816 ----a-w C:\WINDOWS\system32\drivers\netbt.sys
2008-04-13 19:20 91,520 ----a-w C:\WINDOWS\system32\drivers\ndiswan.sys
2008-04-13 19:20 361,344 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-04-13 19:20 182,656 ----a-w C:\WINDOWS\system32\drivers\ndis.sys
2008-04-13 19:19 75,264 ----a-w C:\WINDOWS\system32\drivers\ipsec.sys
2008-04-13 19:19 51,328 ----a-w C:\WINDOWS\system32\drivers\rasl2tp.sys
2008-04-13 19:19 48,384 ----a-w C:\WINDOWS\system32\drivers\raspptp.sys
2008-04-13 19:19 146,048 ----a-w C:\WINDOWS\system32\drivers\portcls.sys
2008-04-13 19:19 138,112 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-04-13 19:17 83,072 ----a-w C:\WINDOWS\system32\drivers\wdmaud.sys
2008-04-13 19:17 456,576 ----a-w C:\WINDOWS\system32\drivers\mrxsmb.sys
2008-04-13 19:17 105,344 ----a-w C:\WINDOWS\system32\drivers\mup.sys
2008-04-13 19:16 49,536 ----a-w C:\WINDOWS\system32\drivers\classpnp.sys
2008-04-13 19:16 141,056 ----a-w C:\WINDOWS\system32\drivers\ks.sys
2008-04-13 19:15 60,800 ----a-w C:\WINDOWS\system32\drivers\sysaudio.sys
2008-04-13 19:15 574,976 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys
2008-04-13 19:15 334,848 ----a-w C:\WINDOWS\system32\drivers\srv.sys
2008-04-13 19:14 63,744 ----a-w C:\WINDOWS\system32\drivers\cdfs.sys
2008-04-13 19:14 143,744 ----a-w C:\WINDOWS\system32\drivers\fastfat.sys
2008-04-13 19:00 225,664 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-04-13 19:00 19,072 ----a-w C:\WINDOWS\system32\drivers\tdi.sys
2008-04-13 18:57 41,472 ----a-w C:\WINDOWS\system32\drivers\raspppoe.sys
2008-04-13 18:57 40,576 ----a-w C:\WINDOWS\system32\drivers\ndproxy.sys
2008-04-13 18:57 34,560 ----a-w C:\WINDOWS\system32\drivers\wanarp.sys
2008-04-13 18:57 20,864 ----a-w C:\WINDOWS\system32\drivers\ipinip.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
“HotKeysCmds”=“C:\WINDOWS\system32\hkcmd.exe” [2005-03-22 07:53 126976]
“egui”=“C:\Program Files\ESET\ESET Smart Security\egui.exe” [2007-12-21 08:21 1443072]
[HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
“CTFMON.EXE”=“C:\WINDOWS\system32\CTFMON.EXE” [2008-04-14 19:21 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
-ra------ 2005-03-22 07:57 155648 C:\WINDOWS\system32\igfxtray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
-ra------ 2005-05-12 10:39 77824 C:\WINDOWS\SOUNDMAN.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
“AntiVirusOverride”=dword:00000001
[HKLM~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
“EnableFirewall”= 0 (0x0)
[HKLM~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
“%windir%\system32\sessmgr.exe”=
“%windir%\Network Diagnostic\xpnetdiag.exe”=
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-19 16:30:19
Windows 5.1.2600 Dodatek Service Pack 3 NTFS
scanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-05-19 16:31:37
ComboFix-quarantined-files.txt 2008-05-19 14:31:32
Pre-Run: 14,068,310,016 bajtów wolnych
Post-Run: 14,109,659,136 bajtów wolnych
214 — E O F — 2008-05-18 08:20:22