Wolny komputer

[pioter4583 (Pioter2)]

po kilku minutach na internecie zwalnia prace dlugie oczekiwania na otwarcie stron czy ktos moze zkontrolowac moje logi

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10.16.58, on 27/10/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16544) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Programmi\Lavasoft\Ad-Aware 2007\aawservice.exe C:\WINDOWS\system32\spoolsv.exe C:\Programmi\a-squared Free\a2service.exe C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe C:\Programmi\sony\giga pocket\shwserv.exe C:\Programmi\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe C:\Programmi\Eset\nod32krn.exe C:\WINDOWS\System32\svchost.exe C:\Programmi\Sony\vaio media music server\SSSvr.exe C:\Programmi\sony\photo server\appsrv\PhotoAppSrv.exe C:\Programmi\Sony\giga pocket\GPVSvr.exe C:\Programmi\File comuni\sony shared\vaio media platform\SV_Httpd.exe C:\Programmi\File comuni\Sony Shared\vaio media platform\sv_httpd.exe C:\Programmi\File comuni\sony shared\vaio media platform\UPnPFramework.exe C:\Programmi\File comuni\Sony Shared\vaio media platform\UPnPFramework.exe C:\Programmi\File comuni\sony shared\vaio media platform\SV_Httpd.exe C:\Programmi\File comuni\sony shared\vaio media platform\UPnPFramework.exe C:\Programmi\Sony\giga pocket\RM_SV.exe C:\WINDOWS\Explorer.EXE C:\Programmi\Wireless Desktop\LgWDskTp.exe C:\Programmi\Sony\HotKey Utility\HKserv.exe C:\WINDOWS\System32\ezSP_Px.exe C:\WINDOWS\system32\rundll32.exe C:\Programmi\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe C:\Programmi\ScanSoft\OmniPageSE\opware32.exe C:\Programmi\Winamp\winampa.exe C:\Programmi\Sony\HotKey Utility\HKWnd.exe C:\Programmi\DAEMON Tools\daemon.exe C:\WINDOWS\vsnpstd.exe C:\PROGRA~1\sony\SONICS~1\SsAAD.exe C:\Programmi\Java\jre1.6.0_02\bin\jusched.exe C:\Programmi\Common Files\Onet.pl\AutoUpdate.exe C:\Programmi\Nokia\Nokia PC Suite 6\LaunchApplication.exe C:\Programmi\iTunes\iTunesHelper.exe C:\Programmi\Eset\nod32kui.exe C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Programmi\PC Connectivity Solution\ServiceLayer.exe C:\WINDOWS\system32\ctfmon.exe C:\Programmi\Adobe\Acrobat 6.0\Distillr\acrotray.exe C:\Programmi\Sony\usbsircs\USBsircs.exe C:\Programmi\Sony\giga pocket\ReserveModule.exe C:\Programmi\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe C:\Programmi\sony\giga pocket\gps.exe C:\WINDOWS\system32\ntvdm.exe C:\Programmi\iPod\bin\iPodService.exe C:\Documents and Settings\pioter\Documenti\anti mortacci loro\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Programmi\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre1.6.0_02\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Encarta Web Companion Oggetto helper - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Programmi\File comuni\Microsoft Shared\Encarta Web Companion\ENCWCBAR.DLL O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar3.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmi\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll O3 - Toolbar: Yahoo! Toolbar con blocco Pop-Up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programmi\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: Encarta Web Companion - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Programmi\File comuni\Microsoft Shared\Encarta Web Companion\ENCWCBAR.DLL O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar3.dll O4 - HKLM…\Run: [LgWDskTp] C:\Programmi\Wireless Desktop\LgWDskTp.exe O4 - HKLM…\Run: [Logitech Utility] Logi_MwX.Exe O4 - HKLM…\Run: [HKSERV.EXE] C:\Programmi\Sony\HotKey Utility\HKserv.exe O4 - HKLM…\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe O4 - HKLM…\Run: [QuickTime Task] “C:\Programmi\QuickTime\qttask.exe” -atboottime O4 - HKLM…\Run: [Drag’n Drop CD+DVD] C:\Programmi\drag’n drop cd+dvd\BinFiles\DragDrop.exe /StartUp O4 - HKLM…\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,BluetoothAuthenticationAgent O4 - HKLM…\Run: [Adobe Photo Downloader] “C:\Programmi\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe” O4 - HKLM…\Run: [Omnipage] C:\Programmi\ScanSoft\OmniPageSE\opware32.exe O4 - HKLM…\Run: [WinampAgent] C:\Programmi\Winamp\winampa.exe O4 - HKLM…\Run: [DAEMON Tools] “C:\Programmi\DAEMON Tools\daemon.exe” -lang 1033 O4 - HKLM…\Run: [snpstd] C:\WINDOWS\vsnpstd.exe O4 - HKLM…\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM…\Run: [ssAAD.exe] C:\PROGRA~1\sony\SONICS~1\SsAAD.exe O4 - HKLM…\Run: [sunJavaUpdateSched] “C:\Programmi\Java\jre1.6.0_02\bin\jusched.exe” O4 - HKLM…\Run: [siS KHooker] C:\WINDOWS\system32\khooker.exe O4 - HKLM…\Run: [Onet.pl AutoUpdate] “C:\Programmi\Common Files\Onet.pl\AutoUpdate.exe” /tsr O4 - HKLM…\Run: [PCSuiteTrayApplication] C:\Programmi\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup O4 - HKLM…\Run: [iTunesHelper] “C:\Programmi\iTunes\iTunesHelper.exe” O4 - HKLM…\Run: [nod32kui] “C:\Programmi\Eset\nod32kui.exe” /WAITSERVICE O4 - HKCU…\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] “C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe” O4 - HKCU…\Run: [updateMgr] C:\Programmi\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1 O4 - HKCU…\Run: [swg] C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU…\Run: [bitTorrent] “C:\Programmi\BitTorrent\bittorrent.exe” --force_start_minimized O4 - HKCU…\Run: [4 UPLOAD] C:\DOCUME~1\pioter\DATIAP~1\INSIDE~1\16 third help.exe O4 - HKCU…\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘SERVIZIO LOCALE’) O4 - HKUS\S-1-5-20…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘SERVIZIO DI RETE’) O4 - HKUS\S-1-5-18…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘SYSTEM’) O4 - HKUS\S-1-5-18…\RunOnce: [iETI] C:\Programmi\Skype\Phone\IEPlugin\unins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART (User ‘SYSTEM’) O4 - HKUS.DEFAULT…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘Default user’) O4 - HKUS.DEFAULT…\RunOnce: [iETI] C:\Programmi\Skype\Phone\IEPlugin\unins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART (User ‘Default user’) O4 - Startup: Utilita controllo supporti di Cyber-shot Viewer.lnk O4 - Global Startup: Acrobat Assistant.lnk = C:\Programmi\Adobe\Acrobat 6.0\Distillr\acrotray.exe O4 - Global Startup: Adobe Gamma Loader.lnk = ? O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Remocon Driver.lnk = C:\Programmi\Sony\usbsircs\USBsircs.exe O4 - Global Startup: Timer Recording Manager.lnk = C:\Programmi\Sony\giga pocket\ReserveModule.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Programmi\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Programmi\File comuni\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.sony-europe.com/ O15 - Trusted Zone: *.rossoalice.it O15 - Trusted Zone: *.sony-europe.com O15 - Trusted Zone: *.sonystyle-europe.com O15 - Trusted Zone: *.vaio-link.com O15 - Trusted Zone: *.rossoalice.virgilio.it O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/ms … b31267.cab O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/ms … b56986.cab O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/Mi … b31267.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://piccolajessa.spaces.live.com//Ph … nPUpld.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/IT-IT/a-U … E_UNO1.cab O16 - DPF: {631FF594-EC25-4CFF-B869-402DF294E1D6} (Instalator oprogramowania Onet.pl) - http://slimak.onet.pl/_m/kamerzysta/One … or012s.ocx O16 - DPF: {745395C8-D0E1-4227-8586-624CA9A10A8D} (AxisMediaControl Class) - http://84.40.149.238:8080//activex/AMC.cab O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://piccolajessa.spaces.live.com/Pho … nPUpld.cab O16 - DPF: {8436FE12-31DB-48BF-83BF-FE682F9160B4} (NanoInstaller Class) - http://www.nanoscan.com/cabs/nanoinst.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me … b31267.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMe … loader.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me … b56907.cab O17 - HKLM\System\CCS\Services\Tcpip…{F5D3BE5D-5BAA-4382-A328-C13B07C38816}: NameServer = 85.37.17.16 85.38.28.68 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Programmi\a-squared Free\a2service.exe O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Programmi\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe O23 - Service: Giga Pocket Hardware Detector - Sony Corporation - C:\Programmi\sony\giga pocket\shwserv.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe O23 - Service: MSCSPTISRV - Sony Corporation - C:\Programmi\File comuni\Sony Shared\AVLib\MSCSPTISRV.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Programmi\Eset\nod32krn.exe O23 - Service: PACSPTISVR - Sony Corporation - C:\Programmi\File comuni\Sony Shared\AVLib\PACSPTISVR.exe O23 - Service: ServiceLayer - Nokia. - C:\Programmi\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Sony TV Tuner Controller - Sony Corporation - C:\Programmi\Sony\giga pocket\halsv.exe O23 - Service: Sony TV Tuner Manager - Sony Corporation - C:\Programmi\Sony\giga pocket\RM_SV.exe O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Programmi\File comuni\Sony Shared\AVLib\SPTISRV.exe O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Programmi\File comuni\Sony Shared\AVLib\SSScsiSV.exe O23 - Service: VAIO Media Music Server (VAIOMediaPlatform-MusicServer-AppServer) - Sony Corporation - C:\Programmi\Sony\vaio media music server\SSSvr.exe O23 - Service: VAIO Media Music Server (HTTP) (VAIOMediaPlatform-MusicServer-HTTP) - Sony Corporation - C:\Programmi\File comuni\Sony Shared\vaio media platform\sv_httpd.exe O23 - Service: VAIO Media Music Server (UPnP) (VAIOMediaPlatform-MusicServer-UPnP) - Sony Corporation - C:\Programmi\File comuni\Sony Shared\vaio media platform\UPnPFramework.exe O23 - Service: VAIO Media Photo Server (VAIOMediaPlatform-PhotoServer-AppServer) - Sony Corporation - C:\Programmi\sony\photo server\appsrv\PhotoAppSrv.exe O23 - Service: VAIO Media Photo Server (HTTP) (VAIOMediaPlatform-PhotoServer-HTTP) - Sony Corporation - C:\Programmi\File comuni\sony shared\vaio media platform\SV_Httpd.exe O23 - Service: VAIO Media Photo Server (UPnP) (VAIOMediaPlatform-PhotoServer-UPnP) - Sony Corporation - C:\Programmi\File comuni\sony shared\vaio media platform\UPnPFramework.exe O23 - Service: VAIO Media Video Server (VAIOMediaPlatform-VideoServer-AppServer) - Sony Corporation - C:\Programmi\Sony\giga pocket\GPVSvr.exe O23 - Service: VAIO Media Video Server (HTTP) (VAIOMediaPlatform-VideoServer-HTTP) - Sony Corporation - C:\Programmi\File comuni\sony shared\vaio media platform\SV_Httpd.exe O23 - Service: VAIO Media Video Server (UPnP) (VAIOMediaPlatform-VideoServer-UPnP) - Sony Corporation - C:\Programmi\File comuni\sony shared\vaio media platform\UPnPFramework.exe – End of file - 14902 bytes

[jessica]

Log czysty.

Możesz dać jeszcze log z ComboFix (na dole tej strony z linku) -

Log wklej na http://wklej.org/, a w poście daj tylko link.(czyli skopiuj adres z paska adresów) .

jessi

[pioter4583 (Pioter2)]

ComboFix 07-10-23.2 - pioter 2007-10-27 11.00.56.2 - NTFSx86

Microsoft Windows XP Home Edition 5.1.2600.2.1250.48.1040.18.137 [GMT 2:00]

Running from: C:\Documents and Settings\pioter\Desktop\ComboFix.exe

* Created a new restore point

.

((((((((((((((((((((((((( Files Created from 2007-09-27 to 2007-10-27 )))))))))))))))))))))))))))))))

.

2007-10-24 19:09

2007-10-16 19:43 502,368 --a------ C:\WINDOWS\system32\drivers\amon.sys

2007-10-16 19:43 270,336 --a------ C:\WINDOWS\system32\imon.dll

2007-10-13 19:12

2007-10-13 09:30

2007-10-13 09:20

2007-10-13 09:20

2007-10-13 09:20

2007-10-12 18:48

2007-10-12 15:41 51,200 --a------ C:\WINDOWS\NirCmd.exe

2007-10-12 14:14

2007-10-11 21:55

2007-10-10 12:28 582,656 -----c— C:\WINDOWS\system32\dllcache\rpcrt4.dll

2007-10-09 10:32

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2007-10-26 13:37 --------- d-----w C:\Programmi\Windows Live Safety Center

2007-10-25 19:46 --------- d-----w C:\Programmi\eMule

2007-10-24 17:49 --------- d-----w C:\Documents and Settings\pioter\Dati applicazioni\Skype

2007-10-17 13:55 --------- d-----w C:\Documents and Settings\monika\Dati applicazioni\Canon

2007-10-13 20:22 --------- d-----w C:\Documents and Settings\pioter\Dati applicazioni\Canon

2007-10-12 16:10 --------- d-----w C:\Documents and Settings\pioter\Dati applicazioni\Sony Corporation

2007-10-09 08:34 --------- d-----w C:\Documents and Settings\monika\Dati applicazioni\InsideSend

2007-10-06 20:44 --------- d-----w C:\Programmi\Google

2007-10-06 15:38 --------- d-----w C:\Programmi\a-squared Free

2007-10-05 17:45 --------- d-----w C:\Programmi\BearShare Applications

2007-10-05 17:22 9,344 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys

2007-10-05 17:22 8,320 ----a-w C:\WINDOWS\system32\drivers\AWRTRD.sys

2007-09-14 18:08 --------- d-----w C:\Documents and Settings\monika\Dati applicazioni\Apple Computer

2007-09-10 17:21 --------- d–h--w C:\Programmi\InstallShield Installation Information

2007-09-10 17:21 --------- d-----w C:\Programmi\TILAB

2007-09-08 17:52 --------- d-----w C:\Documents and Settings\pioter\Dati applicazioni\U3

2007-09-08 12:55 --------- d-----w C:\Documents and Settings\monika\Dati applicazioni\U3

2007-09-04 14:35 --------- d-----w C:\Documents and Settings\monika\Dati applicazioni\Screenshot Sender

2007-09-02 10:56 --------- d-----w C:\Programmi\Lavasoft

2007-09-02 10:55 --------- d-----w C:\Programmi\File comuni\Wise Installation Wizard

2007-09-01 16:57 --------- d-----w C:\Programmi\Desktop XP

2007-09-01 16:57 --------- d-----w C:\Programmi\Adverts

2007-08-30 15:37 --------- d-----w C:\Documents and Settings\pioter\Dati applicazioni\CoSoSys

2007-08-21 06:16 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll

2007-08-11 18:00 108,144 -c–a-w C:\WINDOWS\system32\CmdLineExt.dll

2007-07-30 17:19 92,504 ----a-w C:\WINDOWS\system32\cdm.dll

2007-07-30 17:19 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll

2007-07-30 17:19 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe

2007-07-30 17:19 43,352 ----a-w C:\WINDOWS\system32\wups2.dll

2007-07-30 17:19 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll

2007-07-30 17:19 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll

2007-07-30 17:19 1,712,984 ----a-w C:\WINDOWS\system32\wuaueng.dll

2007-07-30 17:18 33,624 ----a-w C:\WINDOWS\system32\wups.dll

2006-11-11 16:20 8,935 ----a-w C:\Documents and Settings\pioter\vwfsbvec.exe

2006-03-02 20:58 471,704 -c–a-w C:\Programmi\sounds.exe

2006-02-25 22:34 9,961,168 ----a-w C:\Programmi\Onet-SkypeSetup.exe

2006-01-24 18:21 77,177,911 -c–a-w C:\Programmi\SOAVMS-00900304-UN.exe

2006-01-22 22:16 4,272,232 -c–a-w C:\Programmi\subedit+codecpack_pl.exe

2006-01-21 23:34 23,649,848 -c–a-w C:\Programmi\AdbeRdr705_ita_full.exe

2006-01-21 23:29 7,226,000 -c–a-w C:\Programmi\psa30se_it_it.exe

2006-01-21 23:27 762,512 -c–a-w C:\Programmi\ytb612_efgsip.exe

2005-11-15 19:39 6,083,440 -c–a-w C:\Programmi\winamp5112_full_emusic-7plus.exe

2004-11-24 08:42 41,887 -c–a-w C:\Programmi\Italian.lng

2004-11-24 08:42 1,665,325 -c–a-w C:\Programmi\agsetup.exe

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

“LgWDskTp”=“C:\Programmi\Wireless Desktop\LgWDskTp.exe” [2003-10-29 02:00]

“Logitech Utility”=“Logi_MwX.Exe” [2003-07-22 19:24 C:\WINDOWS\Logi_MwX.Exe]

“HKSERV.EXE”=“C:\Programmi\Sony\HotKey Utility\HKserv.exe” [2003-08-14 11:00]

“ezShieldProtector for Px”=“C:\WINDOWS\System32\ezSP_Px.exe” [2002-08-20 11:29]

“QuickTime Task”=“C:\Programmi\QuickTime\qttask.exe” [2007-06-29 06:24]

“Drag’n Drop CD+DVD”=“C:\Programmi\drag’n drop cd+dvd\BinFiles\DragDrop.exe” [2003-08-08 19:54]

“BluetoothAuthenticationAgent”=“bthprops.cpl” [2004-08-19 16:39 C:\WINDOWS\system32\bthprops.cpl]

“Adobe Photo Downloader”=“C:\Programmi\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe” [2005-07-07 19:41]

“Omnipage”=“C:\Programmi\ScanSoft\OmniPageSE\opware32.exe” [2002-06-03 12:38]

“WinampAgent”=“C:\Programmi\Winamp\winampa.exe” [2005-11-15 21:31]

“DAEMON Tools”=“C:\Programmi\DAEMON Tools\daemon.exe” [2005-11-09 00:00]

“snpstd”=“C:\WINDOWS\vsnpstd.exe” [2003-12-31 17:39]

“NWEReboot”="" []

“NeroFilterCheck”=“C:\WINDOWS\system32\NeroCheck.exe” [2001-07-09 12:50]

“SsAAD.exe”=“C:\PROGRA~1\sony\SONICS~1\SsAAD.exe” [2005-09-27 06:59]

“SunJavaUpdateSched”=“C:\Programmi\Java\jre1.6.0_02\bin\jusched.exe” [2007-07-12 04:00]

“SiS Tray”="" []

“SiS KHooker”=“C:\WINDOWS\system32\khooker.exe” []

“Onet.pl AutoUpdate”=“C:\Programmi\Common Files\Onet.pl\AutoUpdate.exe” [2005-07-27 11:59]

“PCSuiteTrayApplication”=“C:\Programmi\Nokia\Nokia PC Suite 6\LaunchApplication.exe” [2007-03-23 13:20]

“iTunesHelper”=“C:\Programmi\iTunes\iTunesHelper.exe” [2007-07-10 09:18]

“nod32kui”=“C:\Programmi\Eset\nod32kui.exe” [2007-10-16 19:43]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

“BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}”=“C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe” [2005-09-03 16:18]

“updateMgr”=“C:\Programmi\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe” [2006-03-30 17:45]

“swg”=“C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe” [2007-07-09 19:15]

“BitTorrent”=“C:\Programmi\BitTorrent\bittorrent.exe” []

“4 UPLOAD”=“C:\DOCUME~1\pioter\DATIAP~1\INSIDE~1\16 third help.exe” []

“ctfmon.exe”=“C:\WINDOWS\system32\ctfmon.exe” [2004-08-19 16:39]

[HKEY_USERS.default\software\microsoft\windows\currentversion\runonce]

“IETI”=C:\Programmi\Skype\Phone\IEPlugin\unins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART

[HKEY_USERS.default\software\microsoft\windows\currentversion\run]

“Nokia.PCSync”=C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog

R3 HSFHWSIS;HSFHWSIS;C:\WINDOWS\system32\DRIVERS\HSFHWSIS.sys

R3 LCcfltr;Logitech USB Filter Driver;C:\WINDOWS\system32\Drivers\LCcFltr.Sys

R3 SMSCMS;SMSC LPC Memory Stick Host Controller;C:\WINDOWS\system32\DRIVERS\SMSCMS.sys

R3 usbscan;Driver scanner USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys

S2 CoachCap;FUJIFILM EX-10/EX-20 PC V1.00;C:\WINDOWS\system32\drivers\CoachCap.sys

S3 naecd;naecd;??\C:\DOCUME~1\pioter\IMPOST~1\Temp\naecd.sys

S3 USBSTOR;Driver archiviazione di massa USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{3282dccc-5e01-11dc-a0bb-0013c84b11e0}]

AutoRun\command - H:\LaunchU3.exe -a

.

Contents of the ‘Scheduled Tasks’ folder

“2007-10-27 09:00:00 C:\WINDOWS\Tasks\A81FBF7C918837A4.job”

.

**************************************************************************

catchme 0.3.1232 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2007-10-27 11:03:47

Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

**************************************************************************

.

Completion time: 2007-10-27 11.05.09

C:\ComboFix2.txt … 2007-10-12 15:58

.

— E O F —

[jessica]

2007-10-13 09:20

Nie wiem, co to za folder. Znasz go?

Maszczęść infekcji “LOP”, ale nie widzę pozostałych części - czyżby infekcja była dłużej niż 90 dni?

Wklej do Notatnika :

File::

C:\WINDOWS\Tasks\A81FBF7C918837A4.job

>>Plik>>Zapisz jako… >>> CFScript (najwygodniej będzie, jeśli zapiszesz w takiej lokalizacji, by ikonka CFScript.txt znalazła się obok ikonki ComboFix.exe )

Przeciągnij i upuść plik CFScript.txt na plik ComboFix.exe (czyli ikonkę CFScript.txt na ikonkę ComboFix.exe )

– podobnie jak na tym obrazku –>

(jeśli pojawi się pytanie " 1 or 2" - to wpisz 1 i naciśnij ENTER) Ma się rozpocząć usuwanie. (i powstanie log)

Po restarcie usuń ręcznie folder C: ** Qoobox**.

Daj ten log.

jessi

[pioter4583 (Pioter2)]

ComboFix 07-10-23.2 - pioter 2007-10-27 18.40.54.3 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.2.1250.48.1040.18.80 [GMT 2:00] Running from: C:\Documents and Settings\pioter\Desktop\ComboFix.exe Command switches used :: C:\Documents and Settings\pioter\Desktop\CFScript.txt * Created a new restore point FILE:: C:\WINDOWS\Tasks\A81FBF7C918837A4.jo . ((((((((((((((((((((((((( Files Created from 2007-09-27 to 2007-10-27 ))))))))))))))))))))))))))))))) . 2007-10-24 19:09 2007-10-16 19:43 502,368 --a------ C:\WINDOWS\system32\drivers\amon.sys 2007-10-16 19:43 270,336 --a------ C:\WINDOWS\system32\imon.dll 2007-10-13 19:12 2007-10-13 09:30 2007-10-13 09:20 2007-10-13 09:20 2007-10-13 09:20 2007-10-12 18:48 2007-10-12 15:41 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-10-12 14:14 2007-10-11 21:55 2007-10-10 12:28 582,656 -----c— C:\WINDOWS\system32\dllcache\rpcrt4.dll 2007-10-09 10:32 . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-10-27 12:06 --------- d-----w C:\Programmi\Windows Live Safety Center 2007-10-25 19:46 --------- d-----w C:\Programmi\eMule 2007-10-24 17:49 --------- d-----w C:\Documents and Settings\pioter\Dati applicazioni\Skype 2007-10-17 13:55 --------- d-----w C:\Documents and Settings\monika\Dati applicazioni\Canon 2007-10-13 20:22 --------- d-----w C:\Documents and Settings\pioter\Dati applicazioni\Canon 2007-10-12 16:10 --------- d-----w C:\Documents and Settings\pioter\Dati applicazioni\Sony Corporation 2007-10-09 08:34 --------- d-----w C:\Documents and Settings\monika\Dati applicazioni\InsideSend 2007-10-06 20:44 --------- d-----w C:\Programmi\Google 2007-10-06 15:38 --------- d-----w C:\Programmi\a-squared Free 2007-10-05 17:45 --------- d-----w C:\Programmi\BearShare Applications 2007-10-05 17:22 9,344 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys 2007-10-05 17:22 8,320 ----a-w C:\WINDOWS\system32\drivers\AWRTRD.sys 2007-09-14 18:08 --------- d-----w C:\Documents and Settings\monika\Dati applicazioni\Apple Computer 2007-09-10 17:21 --------- d–h--w C:\Programmi\InstallShield Installation Information 2007-09-10 17:21 --------- d-----w C:\Programmi\TILAB 2007-09-08 17:52 --------- d-----w C:\Documents and Settings\pioter\Dati applicazioni\U3 2007-09-08 12:55 --------- d-----w C:\Documents and Settings\monika\Dati applicazioni\U3 2007-09-04 14:35 --------- d-----w C:\Documents and Settings\monika\Dati applicazioni\Screenshot Sender 2007-09-02 10:56 --------- d-----w C:\Programmi\Lavasoft 2007-09-02 10:55 --------- d-----w C:\Programmi\File comuni\Wise Installation Wizard 2007-09-01 16:57 --------- d-----w C:\Programmi\Desktop XP 2007-09-01 16:57 --------- d-----w C:\Programmi\Adverts 2007-08-30 15:37 --------- d-----w C:\Documents and Settings\pioter\Dati applicazioni\CoSoSys 2007-08-21 06:16 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll 2007-08-11 18:00 108,144 -c–a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-07-30 17:19 92,504 ----a-w C:\WINDOWS\system32\cdm.dll 2007-07-30 17:19 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll 2007-07-30 17:19 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe 2007-07-30 17:19 43,352 ----a-w C:\WINDOWS\system32\wups2.dll 2007-07-30 17:19 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll 2007-07-30 17:19 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll 2007-07-30 17:19 1,712,984 ----a-w C:\WINDOWS\system32\wuaueng.dll 2007-07-30 17:18 33,624 ----a-w C:\WINDOWS\system32\wups.dll 2006-11-11 16:20 8,935 ----a-w C:\Documents and Settings\pioter\vwfsbvec.exe 2006-03-02 20:58 471,704 -c–a-w C:\Programmi\sounds.exe 2006-02-25 22:34 9,961,168 ----a-w C:\Programmi\Onet-SkypeSetup.exe 2006-01-24 18:21 77,177,911 -c–a-w C:\Programmi\SOAVMS-00900304-UN.exe 2006-01-22 22:16 4,272,232 -c–a-w C:\Programmi\subedit+codecpack_pl.exe 2006-01-21 23:34 23,649,848 -c–a-w C:\Programmi\AdbeRdr705_ita_full.exe 2006-01-21 23:29 7,226,000 -c–a-w C:\Programmi\psa30se_it_it.exe 2006-01-21 23:27 762,512 -c–a-w C:\Programmi\ytb612_efgsip.exe 2005-11-15 19:39 6,083,440 -c–a-w C:\Programmi\winamp5112_full_emusic-7plus.exe 2004-11-24 08:42 41,887 -c–a-w C:\Programmi\Italian.lng 2004-11-24 08:42 1,665,325 -c–a-w C:\Programmi\agsetup.exe . ((((((((((((((((((((((((((((( snapshot@2007-10-27_11.03.54,87 ))))))))))))))))))))))))))))))))))))))))) . + 2007-10-27 16:31:38 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_7d4.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “LgWDskTp”=“C:\Programmi\Wireless Desktop\LgWDskTp.exe” [2003-10-29 02:00] “Logitech Utility”=“Logi_MwX.Exe” [2003-07-22 19:24 C:\WINDOWS\Logi_MwX.Exe] “HKSERV.EXE”=“C:\Programmi\Sony\HotKey Utility\HKserv.exe” [2003-08-14 11:00] “ezShieldProtector for Px”=“C:\WINDOWS\System32\ezSP_Px.exe” [2002-08-20 11:29] “QuickTime Task”=“C:\Programmi\QuickTime\qttask.exe” [2007-06-29 06:24] “Drag’n Drop CD+DVD”=“C:\Programmi\drag’n drop cd+dvd\BinFiles\DragDrop.exe” [2003-08-08 19:54] “BluetoothAuthenticationAgent”=“bthprops.cpl” [2004-08-19 16:39 C:\WINDOWS\system32\bthprops.cpl] “Adobe Photo Downloader”=“C:\Programmi\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe” [2005-07-07 19:41] “Omnipage”=“C:\Programmi\ScanSoft\OmniPageSE\opware32.exe” [2002-06-03 12:38] “WinampAgent”=“C:\Programmi\Winamp\winampa.exe” [2005-11-15 21:31] “DAEMON Tools”=“C:\Programmi\DAEMON Tools\daemon.exe” [2005-11-09 00:00] “snpstd”=“C:\WINDOWS\vsnpstd.exe” [2003-12-31 17:39] “NWEReboot”="" [] “NeroFilterCheck”=“C:\WINDOWS\system32\NeroCheck.exe” [2001-07-09 12:50] “SsAAD.exe”=“C:\PROGRA~1\sony\SONICS~1\SsAAD.exe” [2005-09-27 06:59] “SunJavaUpdateSched”=“C:\Programmi\Java\jre1.6.0_02\bin\jusched.exe” [2007-07-12 04:00] “SiS Tray”="" [] “SiS KHooker”=“C:\WINDOWS\system32\khooker.exe” [] “Onet.pl AutoUpdate”=“C:\Programmi\Common Files\Onet.pl\AutoUpdate.exe” [2005-07-27 11:59] “PCSuiteTrayApplication”=“C:\Programmi\Nokia\Nokia PC Suite 6\LaunchApplication.exe” [2007-03-23 13:20] “iTunesHelper”=“C:\Programmi\iTunes\iTunesHelper.exe” [2007-07-10 09:18] “nod32kui”=“C:\Programmi\Eset\nod32kui.exe” [2007-10-16 19:43] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}”=“C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe” [2005-09-03 16:18] “updateMgr”=“C:\Programmi\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe” [2006-03-30 17:45] “swg”=“C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe” [2007-07-09 19:15] “BitTorrent”=“C:\Programmi\BitTorrent\bittorrent.exe” [] “4 UPLOAD”=“C:\DOCUME~1\pioter\DATIAP~1\INSIDE~1\16 third help.exe” [] “ctfmon.exe”=“C:\WINDOWS\system32\ctfmon.exe” [2004-08-19 16:39] [HKEY_USERS.default\software\microsoft\windows\currentversion\runonce] “IETI”=C:\Programmi\Skype\Phone\IEPlugin\unins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART [HKEY_USERS.default\software\microsoft\windows\currentversion\run] “Nokia.PCSync”=C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog R3 HSFHWSIS;HSFHWSIS;C:\WINDOWS\system32\DRIVERS\HSFHWSIS.sys R3 LCcfltr;Logitech USB Filter Driver;C:\WINDOWS\system32\Drivers\LCcFltr.Sys R3 SMSCMS;SMSC LPC Memory Stick Host Controller;C:\WINDOWS\system32\DRIVERS\SMSCMS.sys R3 usbscan;Driver scanner USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys S2 CoachCap;FUJIFILM EX-10/EX-20 PC V1.00;C:\WINDOWS\system32\drivers\CoachCap.sys S3 naecd;naecd;??\C:\DOCUME~1\pioter\IMPOST~1\Temp\naecd.sys S3 USBSTOR;Driver archiviazione di massa USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{3282dccc-5e01-11dc-a0bb-0013c84b11e0}] AutoRun\command - H:\LaunchU3.exe -a . Contents of the ‘Scheduled Tasks’ folder “2007-10-27 13:00:01 C:\WINDOWS\Tasks\A81FBF7C918837A4.job” . ************************************************************************** catchme 0.3.1232 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-10-27 18:44:01 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes … scanning hidden autostart entries … scanning hidden files … ************************************************************************** . Completion time: 2007-10-27 18.45.18 C:\ComboFix2.txt … 2007-10-27 11:05 C:\ComboFix3.txt … 2007-10-12 15:58 . — E O F —

[jessica]

Powtórz usuwanie, bo przy wklejaniu zgubiłeś jedną literkę.

jessi

[pioter4583 (Pioter2)]

przepraszam za moja nie obecnosc juz wysylam

ComboFix 07-10-23.2 - pioter 2007-10-27 21.43.36.4 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.2.1250.48.1040.18.118 [GMT 2:00] Running from: C:\Documents and Settings\pioter\Desktop\ComboFix.exe Command switches used :: C:\Documents and Settings\pioter\Desktop\CFScript.txt * Created a new restore point FILE:: C:\WINDOWS\Tasks\A81FBF7C918837A4.job . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\Tasks\A81FBF7C918837A4.job . ((((((((((((((((((((((((( Files Created from 2007-09-27 to 2007-10-27 ))))))))))))))))))))))))))))))) . 2007-10-24 19:09 2007-10-16 19:43 502,368 --a------ C:\WINDOWS\system32\drivers\amon.sys 2007-10-16 19:43 270,336 --a------ C:\WINDOWS\system32\imon.dll 2007-10-13 19:12 2007-10-13 09:30 2007-10-13 09:20 2007-10-13 09:20 2007-10-13 09:20 2007-10-12 18:48 2007-10-12 15:41 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-10-12 14:14 2007-10-11 21:55 2007-10-10 12:28 582,656 -----c— C:\WINDOWS\system32\dllcache\rpcrt4.dll 2007-10-09 10:32 . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-10-27 17:01 --------- d-----w C:\Documents and Settings\pioter\Dati applicazioni\Skype 2007-10-27 12:06 --------- d-----w C:\Programmi\Windows Live Safety Center 2007-10-25 19:46 --------- d-----w C:\Programmi\eMule 2007-10-17 13:55 --------- d-----w C:\Documents and Settings\monika\Dati applicazioni\Canon 2007-10-13 20:22 --------- d-----w C:\Documents and Settings\pioter\Dati applicazioni\Canon 2007-10-12 16:10 --------- d-----w C:\Documents and Settings\pioter\Dati applicazioni\Sony Corporation 2007-10-09 08:34 --------- d-----w C:\Documents and Settings\monika\Dati applicazioni\InsideSend 2007-10-06 20:44 --------- d-----w C:\Programmi\Google 2007-10-06 15:38 --------- d-----w C:\Programmi\a-squared Free 2007-10-05 17:45 --------- d-----w C:\Programmi\BearShare Applications 2007-10-05 17:22 9,344 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys 2007-10-05 17:22 8,320 ----a-w C:\WINDOWS\system32\drivers\AWRTRD.sys 2007-09-14 18:08 --------- d-----w C:\Documents and Settings\monika\Dati applicazioni\Apple Computer 2007-09-10 17:21 --------- d–h--w C:\Programmi\InstallShield Installation Information 2007-09-10 17:21 --------- d-----w C:\Programmi\TILAB 2007-09-08 17:52 --------- d-----w C:\Documents and Settings\pioter\Dati applicazioni\U3 2007-09-08 12:55 --------- d-----w C:\Documents and Settings\monika\Dati applicazioni\U3 2007-09-04 14:35 --------- d-----w C:\Documents and Settings\monika\Dati applicazioni\Screenshot Sender 2007-09-02 10:56 --------- d-----w C:\Programmi\Lavasoft 2007-09-02 10:55 --------- d-----w C:\Programmi\File comuni\Wise Installation Wizard 2007-09-01 16:57 --------- d-----w C:\Programmi\Desktop XP 2007-09-01 16:57 --------- d-----w C:\Programmi\Adverts 2007-08-30 15:37 --------- d-----w C:\Documents and Settings\pioter\Dati applicazioni\CoSoSys 2007-08-21 06:16 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll 2007-08-11 18:00 108,144 -c–a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-07-30 17:19 92,504 ----a-w C:\WINDOWS\system32\cdm.dll 2007-07-30 17:19 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll 2007-07-30 17:19 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe 2007-07-30 17:19 43,352 ----a-w C:\WINDOWS\system32\wups2.dll 2007-07-30 17:19 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll 2007-07-30 17:19 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll 2007-07-30 17:19 1,712,984 ----a-w C:\WINDOWS\system32\wuaueng.dll 2007-07-30 17:18 33,624 ----a-w C:\WINDOWS\system32\wups.dll 2006-11-11 16:20 8,935 ----a-w C:\Documents and Settings\pioter\vwfsbvec.exe 2006-03-02 20:58 471,704 -c–a-w C:\Programmi\sounds.exe 2006-02-25 22:34 9,961,168 ----a-w C:\Programmi\Onet-SkypeSetup.exe 2006-01-24 18:21 77,177,911 -c–a-w C:\Programmi\SOAVMS-00900304-UN.exe 2006-01-22 22:16 4,272,232 -c–a-w C:\Programmi\subedit+codecpack_pl.exe 2006-01-21 23:34 23,649,848 -c–a-w C:\Programmi\AdbeRdr705_ita_full.exe 2006-01-21 23:29 7,226,000 -c–a-w C:\Programmi\psa30se_it_it.exe 2006-01-21 23:27 762,512 -c–a-w C:\Programmi\ytb612_efgsip.exe 2005-11-15 19:39 6,083,440 -c–a-w C:\Programmi\winamp5112_full_emusic-7plus.exe 2004-11-24 08:42 41,887 -c–a-w C:\Programmi\Italian.lng 2004-11-24 08:42 1,665,325 -c–a-w C:\Programmi\agsetup.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “LgWDskTp”=“C:\Programmi\Wireless Desktop\LgWDskTp.exe” [2003-10-29 02:00] “Logitech Utility”=“Logi_MwX.Exe” [2003-07-22 19:24 C:\WINDOWS\Logi_MwX.Exe] “HKSERV.EXE”=“C:\Programmi\Sony\HotKey Utility\HKserv.exe” [2003-08-14 11:00] “ezShieldProtector for Px”=“C:\WINDOWS\System32\ezSP_Px.exe” [2002-08-20 11:29] “QuickTime Task”=“C:\Programmi\QuickTime\qttask.exe” [2007-06-29 06:24] “Drag’n Drop CD+DVD”=“C:\Programmi\drag’n drop cd+dvd\BinFiles\DragDrop.exe” [2003-08-08 19:54] “BluetoothAuthenticationAgent”=“bthprops.cpl” [2004-08-19 16:39 C:\WINDOWS\system32\bthprops.cpl] “Adobe Photo Downloader”=“C:\Programmi\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe” [2005-07-07 19:41] “Omnipage”=“C:\Programmi\ScanSoft\OmniPageSE\opware32.exe” [2002-06-03 12:38] “WinampAgent”=“C:\Programmi\Winamp\winampa.exe” [2005-11-15 21:31] “DAEMON Tools”=“C:\Programmi\DAEMON Tools\daemon.exe” [2005-11-09 00:00] “snpstd”=“C:\WINDOWS\vsnpstd.exe” [2003-12-31 17:39] “NWEReboot”="" [] “NeroFilterCheck”=“C:\WINDOWS\system32\NeroCheck.exe” [2001-07-09 12:50] “SsAAD.exe”=“C:\PROGRA~1\sony\SONICS~1\SsAAD.exe” [2005-09-27 06:59] “SunJavaUpdateSched”=“C:\Programmi\Java\jre1.6.0_02\bin\jusched.exe” [2007-07-12 04:00] “SiS Tray”="" [] “SiS KHooker”=“C:\WINDOWS\system32\khooker.exe” [] “Onet.pl AutoUpdate”=“C:\Programmi\Common Files\Onet.pl\AutoUpdate.exe” [2005-07-27 11:59] “PCSuiteTrayApplication”=“C:\Programmi\Nokia\Nokia PC Suite 6\LaunchApplication.exe” [2007-03-23 13:20] “iTunesHelper”=“C:\Programmi\iTunes\iTunesHelper.exe” [2007-07-10 09:18] “nod32kui”=“C:\Programmi\Eset\nod32kui.exe” [2007-10-16 19:43] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}”=“C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe” [2005-09-03 16:18] “updateMgr”=“C:\Programmi\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe” [2006-03-30 17:45] “swg”=“C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe” [2007-07-09 19:15] “BitTorrent”=“C:\Programmi\BitTorrent\bittorrent.exe” [] “4 UPLOAD”=“C:\DOCUME~1\pioter\DATIAP~1\INSIDE~1\16 third help.exe” [] “ctfmon.exe”=“C:\WINDOWS\system32\ctfmon.exe” [2004-08-19 16:39] [HKEY_USERS.default\software\microsoft\windows\currentversion\runonce] “IETI”=C:\Programmi\Skype\Phone\IEPlugin\unins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART [HKEY_USERS.default\software\microsoft\windows\currentversion\run] “Nokia.PCSync”=C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog R3 HSFHWSIS;HSFHWSIS;C:\WINDOWS\system32\DRIVERS\HSFHWSIS.sys R3 LCcfltr;Logitech USB Filter Driver;C:\WINDOWS\system32\Drivers\LCcFltr.Sys R3 SMSCMS;SMSC LPC Memory Stick Host Controller;C:\WINDOWS\system32\DRIVERS\SMSCMS.sys R3 usbscan;Driver scanner USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys S2 CoachCap;FUJIFILM EX-10/EX-20 PC V1.00;C:\WINDOWS\system32\drivers\CoachCap.sys S3 naecd;naecd;??\C:\DOCUME~1\pioter\IMPOST~1\Temp\naecd.sys S3 USBSTOR;Driver archiviazione di massa USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{3282dccc-5e01-11dc-a0bb-0013c84b11e0}] AutoRun\command - H:\LaunchU3.exe -a . ************************************************************************** catchme 0.3.1232 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-10-27 21:46:06 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-10-27 21.47.07 C:\ComboFix2.txt … 2007-10-27 18:45 C:\ComboFix3.txt … 2007-10-27 11:05 . — E O F —

[jessica]

No, teraz usuwanie przebiegło prawidłowo.

Co jest w tym folderze:

2007-10-13 09:20

jessi

[pioter4583 (Pioter2)]

to jest chyba za trudne pytanie dla mnie

Złączono Posta : 27.10.2007 (Sob) 22:34

C:\WINDOWS\system32%SystemDrive%\Documents and Settings\pioter\Dati applicazioni\Microsoft\CryptnetUrlCache

A44F4E7CB3133FF765C39A53AD8FCFDD

C:\WINDOWS\system32%SystemDrive%\Documents and Settings\pioter\Dati applicazioni\Microsoft\CryptnetUrlCache

A44F4E7CB3133FF765C39A53AD8FCFDD

[Gutek]

Powinno być Ok

Na koniec:

Pobierz program SDFix

[pioter4583 (Pioter2)]

SDFix: Version 1.112 Run by Administrator on 28/10/2007 at 20.10 Microsoft Windows XP [Versione 5.1.2600] Running From: C:\SDFix Safe Mode: Checking Services: Restoring Windows Registry Values Restoring Windows Default Hosts File Rebooting… Normal Mode: Checking Files: No Trojan Files Found Removing Temp Files… ADS Check: C:\WINDOWS No streams found. C:\WINDOWS\system32 No streams found. C:\WINDOWS\system32\svchost.exe No streams found. C:\WINDOWS\system32\ntoskrnl.exe No streams found. Final Check: Remaining Services: ------------------ Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] “C:\Programmi\Sony\giga pocket\gps.exe”=“C:\Programmi\Sony\giga pocket\gps.exe:*:Enabled:Giga Pocket Server” [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] Remaining Files: --------------- Files with Hidden Attributes: Finished!

Złączono Posta : 28.10.2007 (Nie) 21:42

SDFix: Version 1.112 Run by Administrator on 28/10/2007 at 20.10 Microsoft Windows XP [Versione 5.1.2600] Running From: C:\SDFix Safe Mode: Checking Services: Restoring Windows Registry Values Restoring Windows Default Hosts File Rebooting… Normal Mode: Checking Files: No Trojan Files Found Removing Temp Files… ADS Check: C:\WINDOWS No streams found. C:\WINDOWS\system32 No streams found. C:\WINDOWS\system32\svchost.exe No streams found. C:\WINDOWS\system32\ntoskrnl.exe No streams found. Final Check: Remaining Services: ------------------ Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] “C:\Programmi\Sony\giga pocket\gps.exe”=“C:\Programmi\Sony\giga pocket\gps.exe:*:Enabled:Giga Pocket Server” [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] Remaining Files: --------------- Files with Hidden Attributes: Finished!

[jessica]

SDFix nic nie wykrył.

jessi

[pioter4583 (Pioter2)]

dziekuje za pomoc

[LostWorld]

Zbędniki w Autostracie

Optymalizacja XP : http://forum.dobreprogramy.pl/viewtopic.php?t=76580

Optymalizacja i odchudzanie XP

Podstawy optymalizacji systemu windows xp :

http://forum.dobreprogramy.pl/viewtopic … ymalizacja