Prosze o sprawdzenie loga z HijackThis

Dzaro · 11 Lipiec 2009 20:54

Witam

jest to mój pierwszy wątek na forum więc proszę być odrobinkę wyrozumiałym

Powód wklejenia loga ostatnio muli mi pc oraz brakuje w Windowsie funkcji “dalej” oraz “wstecz” aby przybliżyć o co mi chodzi podam przykład wchodzisz do Mój komputer następnie wybierasz partycję C:\ załózmy wchodzimy do pliku np C:\Program Files i tak dalej i tak dalej i chcę się cofnąć lecz ta opcja od wczoraj jest niewidoczna tak samo jak “dalej” :evil:

w podglądzie zdarzeń pokazuje mi błąd z PerfNet mam coś takiego "nie można otworzyć usługi serwer.Dane wydajności usługi serwer nie

zostaną zwrócone. Zwrócony kod stanu to dane DWORD 0"

Wklejam log

Prosiłbym o sprawdzenie

dziękuję oraz pozdrawiam wszystkich z forum

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:45:41, on 2009-07-11 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\GIGABYTE\GBTUpd\RunUpd.exe C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Documents and Settings\Jarosław\Menu Start\Programy\Autostart\Easy CD-DA Extractor Updater.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\GIGABYTE\Gamer HUD\HUD.exe C:\Program Files\a-squared Free\a2service.exe C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe C:\Program Files\Common Files\BinarySense\hldasvc.exe C:\Program Files\Common Files\BinarySense\hldasvc.exe C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\UPHClean\uphclean.exe C:\WINDOWS\system32\SearchIndexer.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\system32\mmc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\PROGRA~1\Crawler\Toolbar\CToolbar.exe C:\Program Files\TuneUp Utilities 2008\Integrator.exe C:\WINDOWS\system32\mmc.exe C:\WINDOWS\system32\SearchProtocolHost.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.eu.microsoft.com/poland/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 212.23.176.1 :80 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll O1 - Hosts: 74.125.45.100 test1111.com O1 - Hosts: 74.125.45.100 test1112.com O1 - Hosts: 74.125.45.100 4-open-davinci.com O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com O1 - Hosts: 74.125.45.100 privatesecuredpayments.com O1 - Hosts: 74.125.45.100 getantivirusplusnow.com O1 - Hosts: 74.125.45.100 secure-plus-payments.com O1 - Hosts: 74.125.45.100 http://www.getantivirusplusnow.com O1 - Hosts: 74.125.45.100 http://www.secure-plus-payments.com O1 - Hosts: 74.125.45.100 http://www.securesoftwarebill.com O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll O3 - Toolbar: Pasek &Crawler - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll O4 - HKLM…\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM…\Run: [GBTUpd] C:\Program Files\GIGABYTE\GBTUpd\PreRun.exe O4 - HKLM…\Run: [Windows Defender] “C:\Program Files\Windows Defender\MSASCui.exe” -hide O4 - HKLM…\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM…\Run: [securDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe O4 - HKLM…\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM…\Run: [nwiz] nwiz.exe /install O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM…\Run: [iSUSScheduler] “C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe” -start O4 - HKLM…\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM…\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM…\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM…\Run: [Adobe Reader Speed Launcher] “C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe” O4 - HKCU…\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU…\Run: [Odkurzacz-MCD] C:\Program Files\Odkurzacz\odk_mcd.exe O4 - HKUS\S-1-5-19…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘USŁUGA LOKALNA’) O4 - HKUS\S-1-5-20…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘USŁUGA SIECIOWA’) O4 - HKUS\S-1-5-18…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SYSTEM’) O4 - HKUS.DEFAULT…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘Default user’) O4 - Startup: Easy CD-DA Extractor Updater.exe O4 - Startup: GIGABYTE Gamer HUD.lnk = C:\Program Files\GIGABYTE\Gamer HUD\HUD.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O8 - Extra context menu item: Crawler Search - tbr:iemenu O8 - Extra context menu item: Pobierz z &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra ‘Tools’ menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O18 - Protocol: hddlife - {BD758015-47D9-477A-8873-4B688A2BC0E2} - “C:\Program Files\Common Files\BinarySense\hlAPP.dll” (file missing) O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll O20 - Winlogon Notify: SafenSec - C:\WINDOWS\ O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: GEST Service for program management. (GEST Service) - Unknown owner - C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe O23 - Service: HDDlife HDD Access service - BinarySense, Inc. - C:\Program Files\Common Files\BinarySense\hldasvc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: Nero Registry InCD Service (NeroRegInCDSrv) - Unknown owner - C:\Program Files\Nero\Nero 7\InCD\NBHRegInCDSrv.exe (file missing) O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe O23 - Service: VVRRM - Unknown owner - C:\DOCUME~1\JAROSA~1\USTAWI~1\Temp\VVRRM.exe (file missing)

–

End of file - 8882 bytes

Leon1 · 11 Lipiec 2009 21:30

usuń HijackThisem >> Fix checked

Pobierz Combofix http://www.searchengines.pl/index.php?s … ntry395642 ale nie włączaj.

Podczas pobierania i skanu Combofixem proszę wyłączyć wszelkie zapory i antywirusy

Otwórz notatnik i wklej

zapisz jako CFScript.txt (zapisz by ikonka CFScript.txt była obok ikonki ComboFix.exe) >> Przeciągnij i upuść ikonkę CFScript.txt na ikonkę ComboFix.exe

Powinno rozpocząć się usuwanie

Potem log z usuwania Combofix

Dzaro · 11 Lipiec 2009 22:39

log z combofix

. ((((((((((((((((((((((((( Pliki utworzone od 2009-06-11 do 2009-07-11 ))))))))))))))))))))))))))))))) . 2009-07-11 20:45 . 2009-07-11 20:45 -------- d-----w- c:\program files\Trend Micro 2009-07-10 20:57 . 2008-07-18 13:05 28416 ----a-w- c:\windows\system32\uxtuneup.dll 2009-07-10 20:57 . 2009-07-10 20:57 361728 ----a-w- c:\windows\system32\TuneUpDefragService.exe 2009-07-10 20:57 . 2009-07-10 20:57 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\TuneUp Software 2009-07-10 20:57 . 2009-07-10 20:58 -------- d-----w- c:\program files\TuneUp Utilities 2008 2009-07-10 16:29 . 2009-07-10 16:29 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\FTWeak 2009-07-10 16:29 . 2009-07-10 16:29 -------- d-----w- c:\program files\FCleaner 2009-07-10 16:29 . 2009-07-10 16:29 -------- d-----w- c:\program files\DCleaner 2009-07-10 16:28 . 2009-07-10 16:28 -------- d-----w- c:\program files\Fic_Products 2009-07-10 16:28 . 2009-07-10 16:28 -------- d-----w- c:\program files\ToniArts 2009-07-10 16:26 . 2009-07-10 16:26 -------- d-----w- c:\program files\MyPortal 2009-07-10 15:44 . 2009-07-11 22:16 -------- d—a-w- c:\documents and settings\All Users\Dane aplikacji\TEMP 2009-07-10 11:43 . 2009-07-10 11:43 -------- d-----w- c:\program files\Anti Trojan Elite 2009-07-10 11:31 . 2009-07-10 11:31 -------- d-----w- c:\program files\Web Tracks Eraser 2009-07-09 13:36 . 2009-07-09 14:27 -------- d-----w- c:\windows\NV35083772.TMP 2009-07-09 13:25 . 2009-07-09 13:25 -------- d-----w- c:\documents and settings\LocalService\Ustawienia lokalne\Dane aplikacji\Adobe 2009-07-09 13:25 . 2009-07-09 13:37 -------- d-----w- c:\program files\Windows Desktop Search 2009-07-09 13:25 . 2008-03-07 17:02 98304 -c----w- c:\windows\system32\dllcache\nlhtml.dll 2009-07-09 13:25 . 2008-03-07 17:02 29696 -c----w- c:\windows\system32\dllcache\mimefilt.dll 2009-07-09 13:25 . 2008-03-07 17:02 192000 -c----w- c:\windows\system32\dllcache\offfilt.dll 2009-07-05 18:47 . 2009-07-05 18:47 -------- d-----w- c:\program files\Propellerhead 2009-07-03 21:02 . 2009-07-03 21:02 -------- d-----w- c:\program files\Common Files\Adobe AIR 2009-06-29 12:11 . 2009-07-09 16:42 -------- d-----w- c:\program files\Livebox Reconnect 2.0 Pro 2009-06-28 13:44 . 2009-06-28 13:44 -------- d-----w- c:\program files\Common Files\DirectX 2009-06-28 12:14 . 2009-06-28 12:14 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\LightScribe 2009-06-27 12:01 . 2008-06-14 17:36 273024 -c----w- c:\windows\system32\dllcache\bthport.sys 2009-06-27 12:00 . 2008-04-11 19:06 691712 -c----w- c:\windows\system32\dllcache\inetcomm.dll 2009-06-27 12:00 . 2008-07-07 20:29 253952 -c----w- c:\windows\system32\dllcache\es.dll 2009-06-27 12:00 . 2008-05-07 05:12 1291776 -c----w- c:\windows\system32\dllcache\quartz.dll 2009-06-27 12:00 . 2008-05-08 14:02 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys 2009-06-27 11:53 . 2008-04-21 21:16 218112 -c----w- c:\windows\system32\dllcache\wordpad.exe 2009-06-27 11:43 . 2008-06-17 19:03 8489984 -c----w- c:\windows\system32\dllcache\shell32.dll 2009-06-27 11:42 . 2008-05-09 10:56 90112 -c----w- c:\windows\system32\dllcache\wshext.dll 2009-06-27 11:42 . 2008-05-09 10:56 512000 -c----w- c:\windows\system32\dllcache\jscript.dll 2009-06-27 11:42 . 2008-05-09 10:56 430080 -c----w- c:\windows\system32\dllcache\vbscript.dll 2009-06-27 11:42 . 2008-05-09 10:56 180224 -c----w- c:\windows\system32\dllcache\scrobj.dll 2009-06-27 11:42 . 2008-05-09 10:56 172032 -c----w- c:\windows\system32\dllcache\scrrun.dll 2009-06-27 11:42 . 2008-05-09 08:45 135168 -c----w- c:\windows\system32\dllcache\cscript.exe 2009-06-27 11:42 . 2008-05-08 11:24 155648 -c----w- c:\windows\system32\dllcache\wscript.exe 2009-06-26 18:38 . 2009-06-26 18:38 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Grisoft 2009-06-26 13:42 . 2009-06-26 13:42 -------- d-----w- c:\windows\system32\wbem\Repository 2009-06-25 18:41 . 1998-10-07 10:54 327168 ----a-w- c:\windows\IsUn0415.exe 2009-06-25 14:54 . 2009-07-10 20:48 -------- d-----w- c:\program files\AuctioGen 2009-06-24 10:09 . 2009-06-24 10:09 -------- d-----w- c:\program files\Common Files\Blizzard Entertainment 2009-06-23 12:27 . 2009-06-23 12:27 368640 ----a-w- c:\windows\system32\ReWire.dll 2009-06-23 12:27 . 2009-06-23 12:27 233472 ----a-w- c:\windows\system32\REX Shared Library.dll 2009-06-23 12:23 . 2009-06-23 12:23 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Propellerhead Software 2009-06-23 12:18 . 2009-06-23 12:18 -------- d-----w- c:\program files\PowerISO 2009-06-22 16:55 . 2009-07-10 12:30 -------- d-----w- c:\program files\AAMS 2009-06-18 11:00 . 2009-06-18 11:00 -------- d-----w- c:\program files\Common Files\LightScribe 2009-06-18 10:59 . 2009-06-18 10:59 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Ahead 2009-06-18 10:56 . 2009-06-18 10:56 -------- d-----w- c:\program files\Nero 2009-06-18 10:56 . 2009-06-18 10:56 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Nero 2009-06-18 10:56 . 2009-06-18 10:59 -------- d-----w- c:\program files\Common Files\Ahead 2009-06-16 20:26 . 2009-06-16 20:26 262144 ----a-w- c:\windows\system32\default_user_class.dat 2009-06-16 18:03 . 2009-06-16 18:03 -------- d-----w- c:\program files\GameSpy Arcade 2009-06-16 13:07 . 2009-06-16 15:10 -------- d-----w- c:\program files\a-squared Free 2009-06-16 13:06 . 2005-08-25 17:18 118784 ----a-w- c:\windows\system32\MSSTDFMT.DLL 2009-06-16 13:06 . 2009-06-16 13:06 -------- d-----w- c:\program files\SpywareBlaster 2009-06-16 13:05 . 2009-05-26 11:20 40160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2009-06-16 13:05 . 2009-06-16 13:05 -------- d-----w- c:\program files\Malwarebytes’ Anti-Malware 2009-06-16 13:05 . 2009-06-16 13:05 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Malwarebytes 2009-06-16 13:05 . 2009-05-26 11:19 19096 ----a-w- c:\windows\system32\drivers\mbam.sys 2009-06-16 11:37 . 2009-06-16 11:50 -------- d-sh–w- c:\documents and settings\All Users\Dane aplikacji\4865bc5 2009-06-16 10:04 . 2009-06-16 10:04 -------- d-----w- c:\program files\UPHClean 2009-06-15 18:50 . 2009-06-15 18:50 -------- d-----w- c:\program files\MSXML 4.0 2009-06-15 15:48 . 2009-06-15 15:48 -------- d-----w- c:\windows\Downloaded Installations 2009-06-14 22:00 . 2009-06-14 22:00 -------- d-sh–w- c:\windows\ftpcache 2009-06-12 11:11 . 2009-06-12 11:11 -------- d-----w- c:\program files\VideoLAN 2009-06-12 10:47 . 2009-06-06 20:12 15688 ----a-w- c:\windows\system32\lsdelete.exe 2009-06-12 10:03 . 2009-07-10 11:35 -------- d-----w- c:\documents and settings\LocalService\Pulpit 2009-06-11 23:08 . 2009-06-11 23:08 -------- d-----w- c:\program files\Real Alternative 2009-06-11 22:53 . 2008-06-08 21:58 60273 ----a-w- c:\windows\system32\pthreadGC2.dll 2009-06-11 22:49 . 2009-06-11 22:49 -------- d-----w- c:\program files\AC3Filter . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-07-11 22:16 . 2009-05-24 11:19 16608 ----a-w- c:\windows\gdrv.sys 2009-07-11 21:28 . 2009-05-24 20:44 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Spybot - Search & Destroy 2009-07-11 20:11 . 2009-06-06 10:41 -------- d-----w- c:\program files\PeerGuardian2 2009-07-11 16:13 . 2008-04-15 12:00 97780 ----a-w- c:\windows\system32\perfc015.dat 2009-07-11 16:13 . 2008-04-15 12:00 522526 ----a-w- c:\windows\system32\perfh015.dat 2009-07-10 21:10 . 2009-06-11 13:34 -------- d-----w- c:\program files\NAPI-PROJEKT 2009-07-10 20:57 . 2009-05-24 11:38 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard 2009-07-10 20:47 . 2009-05-31 08:59 -------- d-----w- c:\program files\Odkurzacz 2009-07-10 16:28 . 2009-05-24 11:19 -------- d–h--w- c:\program files\InstallShield Installation Information 2009-07-06 19:58 . 2009-06-22 19:56 25440 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\savapibridge.dll 2009-07-06 19:58 . 2009-06-22 19:56 1630560 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\Resources.dll 2009-07-06 19:57 . 2009-06-22 19:56 2353480 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\Ad-Aware.exe 2009-07-03 21:01 . 2009-05-26 17:57 -------- d-----w- c:\program files\Common Files\Adobe 2009-06-29 20:00 . 2009-06-22 19:56 314712 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\threatwork.exe 2009-06-29 20:00 . 2009-06-22 19:56 169312 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\lavamessage.dll 2009-06-29 20:00 . 2009-06-22 19:56 348496 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\lavalicense.dll 2009-06-29 20:00 . 2009-06-22 19:56 298336 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\UpdateManager.dll 2009-06-29 20:00 . 2009-06-06 20:12 84832 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\ShellExt.dll 2009-06-29 19:59 . 2009-06-06 20:12 246128 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\RPAPI.dll 2009-06-29 19:59 . 2009-06-06 20:12 40288 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\PrivacyClean.dll 2009-06-29 19:59 . 2009-06-22 19:56 85352 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\Drivers\32\AAWDriverTool.exe 2009-06-29 19:59 . 2009-06-22 19:56 664424 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\CEAPI.dll 2009-06-29 19:59 . 2009-06-22 19:56 563064 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\Ad-AwareCommand.exe 2009-06-29 19:59 . 2009-06-22 19:56 566632 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\Ad-AwareAdmin.exe 2009-06-29 19:58 . 2009-06-22 19:56 629072 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\AAWWSC.exe 2009-06-29 19:58 . 2009-06-22 19:56 520024 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\AAWTray.exe 2009-06-29 19:58 . 2009-06-22 19:56 1029456 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\AAWService.exe 2009-06-22 18:50 . 2009-05-25 18:04 -------- d-----w- c:\program files\Easy CD-DA Extractor 12 2009-06-22 18:50 . 2009-05-25 18:04 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Easy CD-DA Extractor 2009-06-22 15:07 . 2009-05-24 20:44 -------- d-----w- c:\program files\Spybot - Search & Destroy 2009-06-11 23:08 . 2009-05-25 15:36 -------- d-----w- c:\program files\Common Files\Real 2009-06-11 22:53 . 2009-05-25 19:24 -------- d-----w- c:\program files\ffdshow 2009-06-11 20:11 . 2009-06-11 20:11 -------- d-----w- c:\program files\Teamspeak2_RC2 2009-06-06 20:12 . 2009-06-06 20:12 115063 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\aehelp.dll 2009-06-06 20:12 . 2009-06-06 20:12 315764 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\aegen.dll 2009-06-06 20:12 . 2009-06-06 20:12 430452 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\aeemu.dll 2009-06-06 20:12 . 2009-06-06 20:12 172406 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\aecore.dll 2009-06-06 20:12 . 2009-06-06 20:12 53617 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\aebb.dll 2009-06-06 20:12 . 2009-06-06 20:12 2133360 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\ToolBox\LT\HostFileEditor.exe 2009-06-06 20:12 . 2009-06-06 20:12 15688 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\lsdelete.exe 2009-06-06 20:12 . 2009-06-06 20:12 64160 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Update\Drivers\32\lbd.sys 2009-06-05 20:17 . 2009-06-05 20:16 -------- d-----w- c:\program files\Crawler 2009-06-02 16:11 . 2009-05-25 19:24 85504 ----a-w- c:\windows\system32\ff_vfw.dll 2009-05-31 09:01 . 2009-05-25 15:33 -------- d-----w- c:\program files\QuickTime 2009-05-25 19:56 . 2009-05-25 19:39 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Lavasoft 2009-05-25 19:39 . 2009-05-25 19:39 -------- dc-h–w- c:\documents and settings\All Users\Dane aplikacji{83C91755-2546-441D-AC40-9A6B4B860800} 2009-05-25 19:39 . 2009-05-25 19:39 -------- d-----w- c:\program files\Lavasoft 2009-05-25 19:37 . 2009-05-25 19:37 -------- d-----w- c:\program files\HD Tune 2009-05-25 19:36 . 2009-05-25 19:36 -------- d-----w- c:\program files\Common Files\BinarySense 2009-05-25 19:36 . 2009-05-25 19:36 -------- d-----w- c:\program files\BinarySense 2009-05-25 19:25 . 2009-05-25 19:25 -------- d-----w- c:\program files\Xvid 2009-05-25 19:23 . 2009-05-25 19:23 -------- d-----w- c:\program files\DivX 2009-05-25 19:23 . 2009-05-25 19:23 -------- d-----w- c:\program files\Common Files\DivX Shared 2009-05-25 18:08 . 2009-05-25 18:08 -------- d-----w- c:\program files\uTorrent 2009-05-25 18:06 . 2009-05-25 18:06 -------- d-----w- c:\program files\Medieval Software 2009-05-25 15:33 . 2009-05-25 15:33 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Apple Computer 2009-05-25 15:33 . 2009-05-25 15:33 -------- d-----w- c:\program files\Apple Software Update 2009-05-25 15:33 . 2009-05-25 15:33 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Apple 2009-05-25 15:32 . 2009-05-25 15:33 410984 ----a-w- c:\windows\system32\deploytk.dll 2009-05-25 15:32 . 2009-05-25 15:32 -------- d-----w- c:\program files\Java 2009-05-25 15:17 . 2009-05-25 15:17 -------- d-----w- c:\program files\Gadu-Gadu 2009-05-25 15:09 . 2009-05-25 15:09 0 ----a-w- c:\windows\nsreg.dat 2009-05-25 14:45 . 2009-05-25 14:45 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\DAEMON Tools Lite 2009-05-25 14:45 . 2009-05-25 14:45 -------- d-----w- c:\program files\DAEMON Tools Toolbar 2009-05-25 14:45 . 2009-05-25 14:45 -------- d-----w- c:\program files\DAEMON Tools Lite 2009-05-25 14:38 . 2009-05-25 14:38 721904 ----a-w- c:\windows\system32\drivers\sptd.sys 2009-05-24 22:24 . 2008-05-26 20:18 350208 ----a-w- c:\windows\system32\mssph.dll 2009-05-24 20:26 . 2009-05-24 20:26 -------- d-----w- c:\program files\Windows Defender 2009-05-24 20:25 . 2009-05-24 20:25 -------- d-----w- c:\program files\CCleaner 2009-05-24 18:04 . 2009-05-24 18:04 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE 2009-05-24 16:40 . 2009-05-24 16:40 -------- d-----w- c:\program files\MSBuild 2009-05-24 16:40 . 2009-05-24 16:40 -------- d-----w- c:\program files\Reference Assemblies 2009-05-24 15:41 . 2009-05-24 15:41 -------- d-----w- c:\program files\SAGEM 2009-05-24 15:19 . 2009-05-24 15:19 -------- d-----w- c:\program files\Alwil Software 2009-05-24 11:39 . 2009-05-24 11:19 -------- d-----w- c:\program files\GIGABYTE 2009-05-24 11:38 . 2009-05-24 11:38 -------- d-----w- c:\program files\AGEIA Technologies 2009-05-24 11:31 . 2009-05-24 11:22 -------- d-----w- c:\program files\Realtek 2009-05-24 11:28 . 2009-05-24 11:19 -------- d-----w- c:\program files\Common Files\InstallShield 2009-05-24 11:27 . 2009-05-24 11:27 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\InstallShield 2009-05-24 11:22 . 2009-05-24 11:22 315392 ----a-w- c:\windows\HideWin.exe 2009-05-24 11:20 . 2009-05-24 11:20 -------- d-----w- c:\program files\Intel 2009-05-24 11:20 . 2009-05-24 11:20 -------- d-----w- c:\program files\Browser Configuration Utility 2009-05-23 18:53 . 2009-05-23 18:29 87263 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat 2009-05-23 18:30 . 2009-05-23 18:30 -------- d-----w- c:\program files\microsoft frontpage 2009-05-23 18:29 . 2009-05-23 18:29 -------- d-----w- c:\program files\Usługi online 2009-05-23 18:28 . 2009-05-23 18:28 21856 ----a-w- c:\windows\system32\emptyregdb.dat 2009-05-12 13:12 . 2009-05-24 16:40 26144 ----a-w- c:\windows\system32\spupdsvc.exe 2009-05-07 15:34 . 2008-04-15 12:00 347648 ----a-w- c:\windows\system32\localspl.dll 2009-04-29 04:35 . 2008-04-15 12:00 81920 ----a-w- c:\windows\system32\ieencode.dll 2009-04-29 04:35 . 2008-04-15 12:00 669184 ----a-w- c:\windows\system32\wininet.dll 2009-04-21 22:20 . 2009-04-21 22:20 14311680 ----a-w- c:\windows\system32\xlive.dll 2009-04-21 22:20 . 2009-04-21 22:20 13642496 ----a-w- c:\windows\system32\xlivefnt.dll 2009-04-19 19:51 . 2008-04-15 12:00 1847424 ----a-w- c:\windows\system32\win32k.sys 2009-04-15 14:54 . 2008-04-15 12:00 585216 ----a-w- c:\windows\system32\rpcrt4.dll 2009-02-24 19:34 . 2009-02-24 19:34 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll 2009-02-24 19:34 . 2009-02-24 19:34 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “SpybotSD TeaTimer”=“c:\program files\Spybot - Search & Destroy\TeaTimer.exe” [2009-03-05 2260480] “Odkurzacz-MCD”=“c:\program files\Odkurzacz\odk_mcd.exe” [2008-08-16 264704] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “avast!”=“c:\progra~1\ALWILS~1\Avast4\ashDisp.exe” [2009-02-05 81000] “NvCplDaemon”=“c:\windows\system32\NvCpl.dll” [2009-03-27 13684736] “GBTUpd”=“c:\program files\GIGABYTE\GBTUpd\PreRun.exe” [2008-04-03 297480] “Windows Defender”=“c:\program files\Windows Defender\MSASCui.exe” [2006-11-03 866584] “SecurDisc”=“c:\program files\Nero\Nero 7\InCD\NBHGui.exe” [2008-02-18 1629480] “NvMediaCenter”=“c:\windows\system32\NvMcTray.dll” [2009-03-27 86016] “ISUSScheduler”=“c:\program files\Common Files\InstallShield\UpdateService\issch.exe” [2005-02-17 81920] “ISUSPM Startup”=“c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe” [2005-02-17 221184] “Adobe Reader Speed Launcher”=“c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe” [2008-06-12 34672] “SoundMan”=“SOUNDMAN.EXE” - c:\windows\SoundMan.exe [2008-06-18 77824] “RTHDCPL”=“RTHDCPL.EXE” - c:\windows\RTHDCPL.exe [2008-06-27 16875008] “nwiz”=“nwiz.exe” - c:\windows\system32\nwiz.exe [2009-03-27 1657376] “AlcWzrd”=“ALCWZRD.EXE” - c:\windows\alcwzrd.exe [2008-06-19 2808832] [HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] “CTFMON.EXE”=“c:\windows\system32\CTFMON.EXE” [2008-04-15 15360] c:\documents and settings\Jarosaw\Menu Start\Programy\Autostart\ Easy CD-DA Extractor Updater.exe [2009-7-9 33982] GIGABYTE Gamer HUD.lnk - c:\program files\GIGABYTE\Gamer HUD\HUD.exe [2008-1-12 1688064] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] “DisableCtrlAltDel”= 0 (0x0) “DisableDeleteKey”= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] “NoLowDiscSpaceChecks”= 000000000000f03f [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] “{56F9679E-7826-4C84-81F3-532071A8BCC5}”= “c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll” [2009-05-24 304128] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service] @=“Service” [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @=“Service” [HKLM~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Windows Search.lnk] path=c:\documents and settings\All Users\Menu Start\Programy\Autostart\Windows Search.lnk backup=c:\windows\pss\Windows Search.lnkCommon Startup [HKLM~\startupfolder\C:^Documents and Settings^Jarosław^Menu Start^Programy^Autostart^Easy CD-DA Extractor Updater.exe] path=c:\documents and settings\Jarosław\Menu Start\Programy\Autostart\Easy CD-DA Extractor Updater.exe backup=c:\windows\pss\Easy CD-DA Extractor Updater.exeStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] “Lavasoft Ad-Aware Service”=2 (0x2) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] “QuickTime Task”=“c:\program files\QuickTime\QTTask.exe” -atboottime “Ad-Watch”=c:\program files\Lavasoft\Ad-Aware\AAWTray.exe “Anti Trojan Elite”=c:\program files\Anti Trojan Elite\TJEnder.exe :NO [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SafensoftIPS] “DisableMonitoring”=dword:00000001 [HKLM~\services\sharedaccess\parameters\firewallpolicy\standardprofile] “EnableFirewall”= 0 (0x0) [HKLM~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] “%windir%\Network Diagnostic\xpnetdiag.exe”= “c:\Program Files\uTorrent\uTorrent.exe”= “h:\Life for speed\LFS.exe”= “c:\Program Files\Gadu-Gadu\gg.exe”= “c:\WINDOWS\system32\sessmgr.exe”= “c:\Program Files\NAPI-PROJEKT\napisy.exe”= “c:\Program Files\Java\jre6\bin\java.exe”= “h:\HALO\halo.exe”= “h:\Halo custom Edition\haloce.exe”= “h:\Original War\OwarLite.dll”= “h:\Overlord.II\Overlord2.exe”= “h:\Street.Fighter.IV-\StreetFighterIV.exe”= R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-05-24 114768] R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-05-24 20560] R2 GEST Service;GEST Service for program management.;c:\program files\GIGABYTE\EnergySaver\GSvr.exe [2009-05-24 80392] R2 HDDlife HDD Access service;HDDlife HDD Access service;c:\program files\Common Files\BinarySense\hldasvc.exe [2008-02-15 832760] R2 RtNdPt5x;Realtek NDIS Protocol Driver;c:\windows\system32\drivers\RtNdPt5x.sys [2009-05-24 35840] R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [2006-11-03 13592] S0 cerc6;cerc6; [x] S2 NeroRegInCDSrv;Nero Registry InCD Service;c:\program files\Nero\Nero 7\InCD\NBHRegInCDSrv.exe --> c:\program files\Nero\Nero 7\InCD\NBHRegInCDSrv.exe [?] S3 ATE_PROCMON;ATE_PROCMON;c:\program files\Anti Trojan Elite\ATEPMON.sys [2009-07-10 7798] S3 RTLTEAMING;Realtek Intermediate Driver for Ethernet Extended Features;c:\windows\system32\drivers\RTLTEAMING.SYS [2009-05-24 28416] S3 RTLVLAN;Realtek VLAN Intermediate Driver;c:\windows\system32\drivers\RTLVLAN.SYS [2009-05-24 17408] S3 VVRRM;VVRRM;c:\docume~1\JAROSA~1\USTAWI~1\Temp\VVRRM.exe --> c:\docume~1\JAROSA~1\USTAWI~1\Temp\VVRRM.exe [?] S4 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2009-01-18 1029456] — Inne Usługi/Sterowniki w Pamięci — *Deregistered* - uphcleanhlp HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components{10880D85-AAD9-4558-ABDC-2AB1552D831F}] “c:\program files\Common Files\LightScribe\LSRunOnce.exe” . Zawartość folderu ‘Zaplanowane zadania’ 2009-07-11 c:\windows\Tasks\1-Click Maintenance.job - c:\program files\TuneUp Utilities 2008\OneClickStarter.exe [2008-08-27 10:09] 2009-07-06 c:\windows\Tasks\Ad-Aware Update (Weekly).job - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-01-18 19:59] 2009-07-11 c:\windows\Tasks\Konserwacja jednym kliknięciem.job - c:\program files\TuneUp Utilities 2008\OneClickStarter.exe [2008-08-27 10:09] 2009-07-11 c:\windows\Tasks\MP Scheduled Scan.job - c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 17:20] . - - - - USUNIĘTO PUSTE WPISY - - - - SafeBoot-safensec . ------- Skan uzupełniający ------- . IE: Crawler Search - tbr:iemenu IE: Pobierz z &BitSpirit - c:\program files\BitSpirit\bsurl.htm Handler: hddlife - {BD758015-47D9-477A-8873-4B688A2BC0E2} - c:\program files\Common Files\BinarySense\hlAPP.dll Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~1\Crawler\Toolbar\ctbr.dll FF - ProfilePath - c:\documents and settings\Jarosław\Dane aplikacji\Mozilla\Firefox\Profiles\5sfao3xl.default\ FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: keyword.URL - hxxp://www.crawler.com/search/dispatche … 60341&qkw= FF - prefs.js: network.proxy.ftp - 85.25.140.160 FF - prefs.js: network.proxy.ftp_port - 80 FF - prefs.js: network.proxy.gopher - 85.25.140.160 FF - prefs.js: network.proxy.gopher_port - 80 FF - prefs.js: network.proxy.http - 85.25.140.160 FF - prefs.js: network.proxy.http_port - 80 FF - prefs.js: network.proxy.socks - 85.25.140.160 FF - prefs.js: network.proxy.socks_port - 80 FF - prefs.js: network.proxy.ssl - 85.25.140.160 FF - prefs.js: network.proxy.ssl_port - 80 FF - prefs.js: network.proxy.type - 4 FF - component: c:\program files\Crawler\Toolbar\firefox\components\xcomm.dll FF - component: c:\program files\Crawler\Toolbar\firefox\components\xshared.dll FF - component: c:\program files\Crawler\Toolbar\firefox\components\xsupport.dll FF - component: c:\program files\Crawler\Toolbar\firefox\components\xwsg.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- FIREFOX - SPOSÓB POSTĘPOWANIA ---- FF - user.js: browser.blink_allowed - false . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-07-12 00:21 Windows 5.1.2600 Dodatek Service Pack 3 NTFS skanowanie ukrytych procesów … skanowanie ukrytych wpisów autostartu … skanowanie ukrytych plików … skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . Czas ukończenia: 2009-07-11 0:21 ComboFix-quarantined-files.txt 2009-07-11 22:21 Przed: 140 927 561 728 bajtów wolnych Po: 140 911 988 736 bajtów wolnych 334 — E O F — 2009-06-30 08:33

Leon1 · 12 Lipiec 2009 13:38

Log obcięty

start >> uruchom >> cmd

sc stop cerc6 >> Enter

sc delete cerc6 >> Enter

sc stop VVRRM >> Enter

sc delete VVRRM >> Enter

Log wygląda na czysty

Pobierz CCleaner http://www.filehippo.com/download_ccleaner/

przeskanuj nim i wyczyść rejestr.

zrób optymalizacje uruchamiania

http://cybertrash.netarteria.pl/cyber/i … 378.0.html

Start >> uruchom >> Combofix /u

Wyłącz I włącz przywracanie systemu na wszystkich dyskach.http://support.microsoft.com/kb/310405/pl

przeskanuj obszar Mój komputer http://www.kaspersky.pl/virusscanner.html gdy będą wirusy pokaż raport

lub

Dr.WEB CureIt! http://dobreprogramy.pl/index.php?dz=2& … It!+4.44.5

otwórz Mój komputer >> PPM na szary pasek narzędzi >> dostosuj

Dzaro · 13 Lipiec 2009 10:29

THX za pomoc “Leon$” skaner on-line kaspersky nie wykrył wirusów natomiast Dr.WEB CureIt wykrył ich aż 12 i je usuną

thx jeszcze raz za pomoc w temacie