Proszę o sprawdzenie log ComboFix

Dla specjalistów Bezpieczeństwo
#1

Posiadam kaspersky inter security 2010 co roku odnawiam licencje postanowiłem wgrac combofix czy wrzystko gra.

ComboFix 09-10-20.03 - BeataRafal 2009-11-15 7:27.1.2 - NTFSx86

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.48.1045.18.3069.2017 [GMT 1:00]

Uruchomiony z: c:\users\BeataRafal\Desktop\ComboFix.exe

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

.

  • TRYB ZREDUKOWANEJ FUNKCJONALNOŚCI -

.

((((((((((((((((((((((((( Pliki utworzone od 2009-10-15 do 2009-11-15 )))))))))))))))))))))))))))))))

.

2009-11-15 06:29 . 2009-11-15 06:29 -------- d-----w- c:\users\BeataRafal\AppData\Local\temp

2009-11-15 06:29 . 2009-11-15 06:29 -------- d-----w- c:\users\Default\AppData\Local\temp

2009-11-14 12:26 . 2009-11-14 12:26 -------- d-----w- c:\program files\Common Files\Adobe AIR

2009-11-11 08:51 . 2009-08-14 13:27 2036736 ----a-w- c:\windows\system32\win32k.sys

2009-11-11 08:51 . 2009-08-10 12:35 355328 ----a-w- c:\windows\system32\WSDApi.dll

2009-11-09 12:51 . 2009-11-11 09:17 -------- d-----w- c:\users\BeataRafal\AppData\Roaming\PC Suite

2009-11-09 12:51 . 2009-11-14 07:27 -------- d-----w- c:\users\BeataRafal\AppData\Roaming\Nokia

2009-11-09 12:51 . 2009-11-11 09:17 -------- d-----w- c:\programdata\PC Suite

2009-11-09 12:50 . 2009-11-09 12:50 -------- d-----w- c:\program files\Common Files\PCSuite

2009-11-09 12:50 . 2009-11-09 12:50 -------- d-----w- c:\program files\Common Files\Nokia

2009-11-09 12:50 . 2009-11-09 12:51 -------- d-----w- c:\program files\DIFX

2009-11-09 12:50 . 2008-08-26 09:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys

2009-11-09 12:50 . 2009-11-09 12:50 -------- dc----w- c:\windows\system32\DRVSTORE

2009-11-09 12:49 . 2009-11-09 12:49 -------- d-----w- c:\program files\PC Connectivity Solution

2009-11-09 12:47 . 2009-02-09 07:37 91136 ----a-w- c:\windows\system32\nmwcdcls.dll

2009-11-09 12:45 . 2009-11-09 12:45 -------- d-----w- c:\programdata\Installations

2009-10-28 02:09 . 2009-10-28 02:09 -------- d-----w- c:\program files\Windows Portable Devices

2009-10-28 02:07 . 2009-09-10 02:01 3023360 ----a-w- c:\windows\system32\UIRibbon.dll

2009-10-28 02:07 . 2009-09-10 02:00 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll

2009-10-28 02:07 . 2009-09-10 02:00 92672 ----a-w- c:\windows\system32\UIAnimation.dll

2009-10-28 02:05 . 2009-10-08 21:08 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll

2009-10-28 02:05 . 2009-10-08 21:08 234496 ----a-w- c:\windows\system32\oleacc.dll

2009-10-28 02:05 . 2009-10-08 21:07 4096 ----a-w- c:\windows\system32\oleaccrc.dll

2009-10-27 22:46 . 2009-09-10 14:58 310784 ----a-w- c:\windows\system32\unregmp2.exe

2009-10-27 22:45 . 2009-09-10 14:59 8147456 ----a-w- c:\windows\system32\wmploc.DLL

2009-10-24 01:59 . 2009-10-24 01:59 604140 --sha-w- c:\windows\system32\drivers\ISwift3.dat

2009-10-21 00:24 . 2009-08-07 02:24 44768 ----a-w- c:\windows\system32\wups2.dll

2009-10-21 00:24 . 2009-08-07 02:24 53472 ----a-w- c:\windows\system32\wuauclt.exe

2009-10-21 00:24 . 2009-08-07 02:23 1929952 ----a-w- c:\windows\system32\wuaueng.dll

2009-10-21 00:24 . 2009-08-07 01:45 2421760 ----a-w- c:\windows\system32\wucltux.dll

2009-10-21 00:24 . 2009-08-07 02:24 35552 ----a-w- c:\windows\system32\wups.dll

2009-10-21 00:24 . 2009-08-07 02:23 575704 ----a-w- c:\windows\system32\wuapi.dll

2009-10-21 00:24 . 2009-08-07 01:44 87552 ----a-w- c:\windows\system32\wudriver.dll

2009-10-21 00:24 . 2009-08-06 17:23 171608 ----a-w- c:\windows\system32\wuwebv.dll

2009-10-21 00:24 . 2009-08-06 16:44 33792 ----a-w- c:\windows\system32\wuapp.exe

2009-10-20 18:34 . 2009-10-20 18:34 219664 ----a-w- c:\windows\system32\klogon.dll

2009-10-19 12:11 . 2009-10-19 12:11 -------- d-----w- c:\users\BeataRafal\AppData\Roaming\GlarySoft

2009-10-19 12:08 . 2009-10-19 12:08 -------- d-----w- c:\program files\Glary Utilities

.

(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-11-15 06:01 . 2009-09-21 11:07 -------- d-----w- c:\programdata\Kaspersky Lab

2009-11-13 14:43 . 2008-01-21 06:24 662056 ----a-w- c:\windows\system32\perfh015.dat

2009-11-13 14:43 . 2008-01-21 06:24 126908 ----a-w- c:\windows\system32\perfc015.dat

2009-11-11 09:17 . 2009-11-11 09:17 0 —ha-w- c:\windows\system32\drivers\Msft_User_PCCSWpdDriver_01_07_00.Wdf

2009-11-11 09:03 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail

2009-11-11 09:02 . 2008-05-13 06:24 -------- d-----w- c:\programdata\Microsoft Help

2009-11-08 23:29 . 2009-09-22 16:33 -------- d-----w- c:\program files\Nowe Gadu-Gadu

2009-11-07 08:29 . 2009-09-02 14:00 -------- d-----w- c:\programdata\Kaspersky Lab Setup Files

2009-11-02 19:42 . 2009-10-05 21:14 195456 ------w- c:\windows\system32\MpSigStub.exe

2009-10-28 02:09 . 2009-10-28 02:09 0 —ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf

2009-10-28 02:08 . 2009-10-28 02:08 0 —ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf

2009-10-24 11:15 . 2009-09-02 20:46 -------- d-----w- c:\users\BeataRafal\AppData\Roaming\Nowe Gadu-Gadu

2009-10-24 02:08 . 2009-09-21 11:08 108059 ----a-w- c:\windows\system32\drivers\klin.dat

2009-10-24 02:08 . 2009-09-21 11:08 95259 ----a-w- c:\windows\system32\drivers\klick.dat

2009-10-24 01:54 . 2009-09-21 11:07 426016 --sha-w- c:\windows\system32\drivers\fidbox2.dat

2009-10-24 01:54 . 2009-09-21 11:07 3584 --sha-w- c:\windows\system32\drivers\fidbox2.idx

2009-10-24 01:54 . 2009-09-21 11:07 3161120 --sha-w- c:\windows\system32\drivers\fidbox.dat

2009-10-24 01:54 . 2009-09-21 11:07 26824 --sha-w- c:\windows\system32\drivers\fidbox.idx

2009-10-24 01:52 . 2009-09-21 11:07 -------- d-----w- c:\program files\Kaspersky Lab

2009-10-14 19:18 . 2009-10-14 19:18 36880 ----a-w- c:\windows\system32\drivers\klbg.sys

2009-10-07 13:39 . 2009-10-07 13:38 -------- d-----w- c:\programdata\Ad Muncher

2009-10-07 13:38 . 2009-10-07 13:38 -------- d-----w- c:\program files\Ad Muncher

2009-10-06 07:06 . 2009-09-12 16:57 -------- d-----w- c:\program files\NAPI-PROJEKT

2009-10-05 22:21 . 2009-10-05 22:19 -------- d-----w- c:\programdata\OpenFM

2009-10-05 22:19 . 2009-10-05 22:19 -------- d-----w- c:\users\BeataRafal\AppData\Roaming\OpenFM

2009-10-04 20:25 . 2009-10-04 20:10 -------- d-----w- c:\programdata\ALLPlayer

2009-10-04 20:15 . 2009-10-04 19:54 -------- d-----w- c:\program files\Real Alternative

2009-10-04 19:48 . 2009-09-09 13:21 -------- d-----w- c:\program files\PLAY ONLINE

2009-10-03 18:04 . 2009-10-03 18:04 -------- d-----w- c:\users\BeataRafal\AppData\Roaming\PeerNetworking

2009-10-02 22:18 . 2009-10-02 22:18 -------- d-----w- c:\program files\Imikimi

2009-10-02 17:39 . 2009-10-02 17:39 19472 ----a-w- c:\windows\system32\drivers\klmouflt.sys

2009-10-01 01:02 . 2009-10-28 02:06 2537472 ----a-w- c:\windows\system32\wpdshext.dll

2009-10-01 01:02 . 2009-10-28 02:06 30208 ----a-w- c:\windows\system32\WPDShextAutoplay.exe

2009-10-01 01:02 . 2009-10-28 02:06 334848 ----a-w- c:\windows\system32\PortableDeviceApi.dll

2009-10-01 01:02 . 2009-10-28 02:06 87552 ----a-w- c:\windows\system32\WPDShServiceObj.dll

2009-10-01 01:02 . 2009-10-28 02:06 31232 ----a-w- c:\windows\system32\BthMtpContextHandler.dll

2009-10-01 01:01 . 2009-10-28 02:06 546816 ----a-w- c:\windows\system32\wpd_ci.dll

2009-10-01 01:01 . 2009-10-28 02:06 160256 ----a-w- c:\windows\system32\PortableDeviceTypes.dll

2009-10-01 01:01 . 2009-10-28 02:06 60928 ----a-w- c:\windows\system32\PortableDeviceConnectApi.dll

2009-10-01 01:01 . 2009-10-28 02:06 350208 ----a-w- c:\windows\system32\WPDSp.dll

2009-10-01 01:01 . 2009-10-28 02:06 196608 ----a-w- c:\windows\system32\PortableDeviceWMDRM.dll

2009-10-01 01:01 . 2009-10-28 02:06 100864 ----a-w- c:\windows\system32\PortableDeviceClassExtension.dll

2009-10-01 01:01 . 2009-10-28 02:06 81920 ----a-w- c:\windows\system32\wpdbusenum.dll

2009-10-01 01:01 . 2009-10-28 02:06 40448 ----a-w- c:\windows\system32\drivers\WpdUsb.sys

2009-10-01 01:01 . 2009-10-28 02:06 226816 ----a-w- c:\windows\system32\WpdMtp.dll

2009-10-01 01:01 . 2009-10-28 02:06 61952 ----a-w- c:\windows\system32\WpdMtpUS.dll

2009-10-01 01:01 . 2009-10-28 02:06 33280 ----a-w- c:\windows\system32\WpdConns.dll

2009-09-27 13:19 . 2009-09-27 13:19 0 —ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf

2009-09-25 02:10 . 2009-10-28 02:06 974848 ----a-w- c:\windows\system32\WindowsCodecs.dll

2009-09-25 02:07 . 2009-10-28 02:06 189440 ----a-w- c:\windows\system32\WindowsCodecsExt.dll

2009-09-25 02:04 . 2009-10-28 02:06 321024 ----a-w- c:\windows\system32\PhotoMetadataHandler.dll

2009-09-25 01:49 . 2009-10-28 02:06 1554432 ----a-w- c:\windows\system32\xpsservices.dll

2009-09-25 01:48 . 2009-10-28 02:06 351232 ----a-w- c:\windows\system32\XpsPrint.dll

2009-09-25 01:38 . 2009-10-28 02:06 847360 ----a-w- c:\windows\system32\OpcServices.dll

2009-09-25 01:36 . 2009-10-28 02:06 280064 ----a-w- c:\windows\system32\XpsGdiConverter.dll

2009-09-25 01:35 . 2009-10-28 02:06 135680 ----a-w- c:\windows\system32\XpsRasterService.dll

2009-09-25 01:33 . 2009-10-28 02:06 195584 ----a-w- c:\windows\system32\dxdiagn.dll

2009-09-25 01:33 . 2009-10-28 02:06 829440 ----a-w- c:\windows\system32\d3d10warp.dll

2009-09-25 01:33 . 2009-10-28 02:06 369664 ----a-w- c:\windows\system32\WMPhoto.dll

2009-09-25 01:32 . 2009-10-28 02:06 252928 ----a-w- c:\windows\system32\dxdiag.exe

2009-09-25 01:31 . 2009-10-28 02:06 519680 ----a-w- c:\windows\system32\d3d11.dll

2009-09-25 01:31 . 2009-10-28 02:06 486912 ----a-w- c:\windows\system32\d3d10level9.dll

2009-09-25 01:31 . 2009-10-28 02:06 161280 ----a-w- c:\windows\system32\d3d10_1.dll

2009-09-25 01:31 . 2009-10-28 02:06 218112 ----a-w- c:\windows\system32\d3d10_1core.dll

2009-09-25 01:31 . 2009-10-28 02:06 1030144 ----a-w- c:\windows\system32\d3d10.dll

2009-09-25 01:31 . 2009-10-28 02:06 828928 ----a-w- c:\windows\system32\d2d1.dll

2009-09-25 01:30 . 2009-10-28 02:06 481792 ----a-w- c:\windows\system32\dxgi.dll

2009-09-25 01:30 . 2009-10-28 02:06 190464 ----a-w- c:\windows\system32\d3d10core.dll

2009-09-25 01:27 . 2009-10-28 02:06 634880 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys

2009-09-25 01:27 . 2009-10-28 02:06 37888 ----a-w- c:\windows\system32\cdd.dll

2009-09-25 01:27 . 2009-10-28 02:06 793088 ----a-w- c:\windows\system32\FntCache.dll

2009-09-25 01:27 . 2009-10-28 02:06 1064448 ----a-w- c:\windows\system32\DWrite.dll

2009-09-24 22:54 . 2009-10-28 02:06 258048 ----a-w- c:\windows\system32\winspool.drv

2009-09-24 22:54 . 2009-10-28 02:06 667648 ----a-w- c:\windows\system32\printfilterpipelinesvc.exe

2009-09-24 22:54 . 2009-10-28 02:06 26112 ----a-w- c:\windows\system32\printfilterpipelineprxy.dll

2009-09-16 16:48 . 2009-09-15 16:02 -------- d-----w- c:\program files\Microsoft Silverlight

2009-09-16 10:01 . 2009-09-16 10:01 -------- d-----w- c:\users\BeataRafal\AppData\Roaming\Media Player Classic

2009-09-16 09:18 . 2009-09-16 09:18 -------- d-----w- c:\program files\EASEUS

2009-09-16 09:18 . 2008-04-23 07:50 -------- d–h--w- c:\program files\InstallShield Installation Information

2009-09-14 12:46 . 2009-09-14 12:46 21520 ----a-w- c:\windows\system32\drivers\klim6.sys

2009-09-14 09:29 . 2009-10-14 00:44 144896 ----a-w- c:\windows\system32\drivers\srv2.sys

2009-09-13 19:30 . 2009-09-13 19:30 0 ----a-w- c:\users\BeataRafal\AppData\Roaming\wklnhst.dat

2009-09-10 16:48 . 2009-10-14 00:44 218624 ----a-w- c:\windows\system32\msv1_0.dll

2009-09-09 17:01 . 2009-09-09 17:01 27675 ----a-w- c:\windows\system32\drivers\klopp.dat

2009-09-04 11:41 . 2009-10-14 00:44 60928 ----a-w- c:\windows\system32\msasn1.dll

2009-09-03 15:49 . 2009-09-02 10:53 82720 ----a-w- c:\users\BeataRafal\AppData\Local\GDIPFONTCACHEV1.DAT

2009-09-03 02:23 . 2009-09-03 02:23 69524424 ----a-w- c:\users\BeataRafal\kis9.0.0.463pl.exe

2009-09-02 18:03 . 2009-09-02 18:03 498580680 ----a-w- c:\users\BeataRafal\Windows6.0-KB948465-X86.exe

2009-09-02 15:31 . 2009-09-02 15:30 14946144 ----a-w- c:\users\BeataRafal\IE8-WindowsVista-x86-PLK.exe

2009-09-02 10:42 . 2009-09-02 10:42 0 ----a-w- c:\windows\ativpsrm.bin

2009-09-01 13:29 . 2009-09-01 13:29 128016 ----a-w- c:\windows\system32\drivers\kl1.sys

2009-08-29 00:27 . 2009-09-02 14:27 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll

2009-08-29 00:14 . 2009-09-02 14:27 28672 ----a-w- c:\windows\system32\Apphlpdm.dll

2009-08-27 05:22 . 2009-10-14 00:45 916480 ----a-w- c:\windows\system32\wininet.dll

2009-08-27 05:17 . 2009-10-14 00:45 71680 ----a-w- c:\windows\system32\iesetup.dll

2009-08-27 05:17 . 2009-10-14 00:45 109056 ----a-w- c:\windows\system32\iesysprep.dll

2009-08-27 03:42 . 2009-10-14 00:45 133632 ----a-w- c:\windows\system32\ieUnatt.exe

2009-08-17 21:33 . 2009-08-17 21:33 1193832 ----a-w- c:\windows\system32\FM20.DLL

.

((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

“Sidebar”=“c:\program files\Windows Sidebar\sidebar.exe” [2009-04-11 1233920]

“TOSCDSPD”=“c:\program files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe” [2008-01-29 430080]

“ehTray.exe”=“c:\windows\ehome\ehTray.exe” [2008-01-21 125952]

“PC Suite Tray”=“e:\nokia pc suite 7\PCSuite.exe” [2009-06-25 1414144]

“WMPNSCFG”=“c:\program files\Windows Media Player\WMPNSCFG.exe” [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

“Windows Defender”=“c:\program files\Windows Defender\MSASCui.exe” [2008-01-21 1008184]

“SynTPEnh”=“c:\program files\Synaptics\SynTP\SynTPEnh.exe” [2008-08-14 1348904]

“ITSecMng”=“c:\program files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe” [2007-09-28 75136]

“StartCCC”=“c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe” [2006-11-10 90112]

“TPwrMain”=“c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE” [2008-01-17 431456]

“HSON”=“c:\program files\TOSHIBA\TBS\HSON.exe” [2007-10-31 54608]

“SmoothView”=“c:\program files\Toshiba\SmoothView\SmoothView.exe” [2008-01-25 509816]

“00TCrdMain”=“c:\program files\TOSHIBA\FlashCards\TCrdMain.exe” [2008-01-22 712704]

“Ad Muncher”=“c:\program files\Ad Muncher\AdMunch.exe” [2009-10-07 800768]

“avp”=“c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe” [2009-10-20 340456]

“RtHDVCpl”=“RtHDVCpl.exe” - c:\windows\RtHDVCpl.exe [2008-01-29 4911104]

“NDSTray.exe”=“NDSTray.exe” [bU]

“Skytel”=“Skytel.exe” - c:\windows\SkyTel.exe [2007-11-20 1826816]

c:\users\BeataRafal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

TRDCReminder.lnk - c:\program files\Toshiba\TRDCReminder\TRDCReminder.exe [2008-3-5 393216]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

“EnableUIADesktopToggle”= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]

“AppInit_DLLs”=c:\progra~1\Google\GOOGLE~3\GoogleDesktopNetwork3.dll c:\progra~1\KASPER~1\KASPER~2\mzvkbd3.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

@=“Service”

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]

“Google Desktop Search”=“c:\program files\Google\Google Desktop Search\GoogleDesktop.exe” /startup

“Toshiba Registration”=c:\program files\Toshiba\Registration\ToshibaRegistration.exe

“SunJavaUpdateSched”=“c:\program files\Java\jre1.6.0_05\bin\jusched.exe”

“Camera Assistant Software”=“c:\program files\Camera Assistant Software for Toshiba\traybar.exe” /start

“Desktop SMS”=c:\program files\IDM\Desktop SMS\DesktopSMS.exe /auto

“topi”=c:\program files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup

“Adobe Reader Speed Launcher”=“c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe”

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]

“DisableMonitoring”=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]

“DisableMonitoring”=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]

“VistaSp2”=hex(b):5a,d6,a7,97,09,2c,ca,01

R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\System32\drivers\klbg.sys [2009-10-14 36880]

R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\System32\drivers\klim6.sys [2009-09-14 21520]

R2 ConfigFree Service;ConfigFree Service;c:\program files\Toshiba\ConfigFree\CFSvcs.exe [2007-12-25 40960]

R2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service;c:\program files\Toshiba\SMARTLogService\TosIPCSrv.exe [2007-12-03 126976]

R2 wlidsvc;Windows Live ID Sign-in Assistant;c:\program files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE [2009-03-30 1533808]

R3 FwLnk;FwLnk Driver;c:\windows\System32\drivers\FwLnk.sys [2008-04-23 7168]

R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\System32\drivers\klmouflt.sys [2009-10-02 19472]

R3 NETw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\System32\drivers\NETw5v32.sys [2008-11-17 3668480]

S3 FontCache;Usług systemu Windows buforowania czcionek;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-01-21 21504]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{0584b75f-a9f3-11de-8849-001e3353a39f}]

\shell\AutoRun\command - D:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{90eb2090-9d42-11de-8e7d-001f3c81ffee}]

\shell\AutoRun\command - D:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{90eb20a0-9d42-11de-8e7d-001f3c81ffee}]

\shell\AutoRun\command - D:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{90eb20bb-9d42-11de-8e7d-001f3c81ffee}]

\shell\AutoRun\command - G:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{a54a7b20-ac67-11de-9794-001f3c81ffee}]

\shell\AutoRun\command - D:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{eb6df78d-97c7-11de-9704-001f3c81ffee}]

\shell\AutoRun\command - D:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{eb6df7c1-97c7-11de-9704-001f3c81ffee}]

\shell\AutoRun\command - D:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{fff23ead-a68b-11de-804e-001e3353a39f}]

\shell\AutoRun\command - D:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{fff23eb0-a68b-11de-804e-001e3353a39f}]

\shell\AutoRun\command - D:\AutoRun.exe

.

Zawartość folderu ‘Zaplanowane zadania’

2009-11-15 c:\windows\Tasks\GlaryInitialize.job

  • c:\program files\Glary Utilities\initialize.exe [2009-10-19 17:27]

.

.

------- Skan uzupełniający -------

.

uStart Page = about:blank

mStart Page = about:blank

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: Block frame with Ad Muncher - http://www.admuncher.com/request_will_b … u_ie_frame

IE: Block image with Ad Muncher - http://www.admuncher.com/request_will_b … u_ie_image

IE: Block link with Ad Muncher - http://www.admuncher.com/request_will_b … nu_ie_link

IE: Dodaj do blokowanych banerów - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm

IE: Don’t filter page with Ad Muncher - http://www.admuncher.com/request_will_b … ie_exclude

IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

IE: Report page to the Ad Muncher developers - http://www.admuncher.com/request_will_b … _ie_report

IE: {{76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/4908-44618-9400-3/4

IE: {{8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/red … &site=home

.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-11-15 07:29

Windows 6.0.6002 Service Pack 2 NTFS

skanowanie ukrytych procesów …

skanowanie ukrytych wpisów autostartu …

HKCU\Software\Microsoft\Windows\CurrentVersion\Run

TOSCDSPD = c:\program files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe?/i???9???8p??X?e???e???e???e?

skanowanie ukrytych plików …

skanowanie pomyślnie ukończone

ukryte pliki: 0

**************************************************************************

.

--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

“BlindDial”=dword:00000000

“MSCurrentCountry”=dword:000000b5

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

“BlindDial”=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

“BlindDial”=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

“BlindDial”=dword:00000000

.

--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------

              • > ‘explorer.exe’(1316)

c:\program files\Ad Muncher\AM30400.dll

.

Czas ukończenia: 2009-11-15 7:31

ComboFix-quarantined-files.txt 2009-11-15 06:31

Przed: 68 058 775 552 bajtów wolnych

Po: 67 992 891 392 bajtów wolnych

Current=1 Default=1 Failed=0 LastKnownGood=4 Sets=1,2,3,4

    • End Of File - - 552323FA845F047E522D7384469CE93B
#2

donner ,

Proszę zapoznać się z tematem Ważny komunikat dotyczący tytułowania tematów i poprawić tytuł na konkretny, mówiący o problemie.

W temacie, który powinieneś znać:

viewtopic.php?f=16&t=36654

Proszę dokładnie opisać problem.

W celu dokonania zaleconej korekty proszę użyć przycisku Edytuj przy poście otwierającym ten temat.

Zignorowanie zalecenia będzie skutkowało usunięciem tematu do Kosza.

Wklejanie logów na forum - przeczytaj i zastosuj się do zaleceń