Załapałem trojana

[ironbutt (Ssoss)]

“Banaszynski” - 2007-07-17 23:46:21 - ComboFix 07-07-14.6 - Dodatek Service Pack. 1 NTFS ((((((((((((((((((((((((( Files Created from 2007-06-17 to 2007-07-17 ))))))))))))))))))))))))))))))) 2007-07-17 18:10 2007-07-17 18:01 2007-07-17 15:32 51,200 --a------ C:\WINDOWS\nircmd.exe 2007-07-17 15:27 2007-07-17 15:14 4,540 --a------ C:\WINDOWS\system32\tmp.reg (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-07-17 16:48:25 -------- d-----w C:\Program Files\Common Files\Symantec Shared 2007-07-17 16:47:19 -------- d–h--w C:\Program Files\InstallShield Installation Information 2007-07-17 16:47:19 -------- d-----w C:\Program Files\Google 2007-07-17 16:44:46 -------- d-----w C:\Program Files\NCH Swift Sound 2007-07-17 16:43:02 -------- d-----w C:\Program Files\ElcomSoft 2007-07-17 16:17:36 49,828 ----a-w C:\WINDOWS\system32\perfc015.dat 2007-07-17 16:17:36 356,164 ----a-w C:\WINDOWS\system32\perfh015.dat 2007-07-17 11:33:17 -------- d-----w C:\Program Files\SkanerOnline 2007-07-16 22:51:06 -------- d-----w C:\DOCUME~1\BANASZ~1\DANEAP~1\Skype 2007-07-12 05:04:39 -------- d-----w C:\DOCUME~1\BANASZ~1\DANEAP~1\Azureus 2007-05-21 10:32:58 -------- d-----w C:\DOCUME~1\BANASZ~1\DANEAP~1\AdobeUM 2004-10-01 14:00:16 40,960 ----a-w C:\Program Files\Uninstall_CDS.exe 2005-07-25 07:35:15 56 -csh–r C:\WINDOWS\system32\F43FDD1FB4.sys 2005-07-25 07:35:15 10,022 -csha-w C:\WINDOWS\system32\KGyGaAvL.sys ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE~\Browser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] 2003-05-12 00:47 50376 --a------ C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll [HKEY_LOCAL_MACHINE~\Browser Helper Objects{BDF3E430-B101-42AD-A544-FADC6B084872}] 2002-11-15 00:09 112248 --a------ D:\Program Files\Norton AntiVirus\NavShExt.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “nwiz”=“nwiz.exe” [2003-11-17 10:33 C:\WINDOWS\system32\nwiz.exe] “Zone Labs Client”=“C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe” [2003-12-15 14:57] “REGSHAVE”=“C:\Program Files\REGSHAVE\REGSHAVE.exe” [2002-02-04 22:32] “HP Component Manager”=“C:\Program Files\HP\hpcoretech\hpcmpmgr.exe” [2003-12-22 09:38] “SSC_UserPrompt”=“C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe” [2004-11-02 16:59] “SunJavaUpdateSched”=“C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe” [2005-03-04 03:36] “SpeedTouch USB Diagnostics”=“C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe” [2002-06-06 11:15] “ccApp”=“C:\Program Files\Common Files\Symantec Shared\ccApp.exe” [2002-08-19 22:22] “ccRegVfy”=“C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe” [2002-08-19 22:23] “Advanced Tools Check”=“D:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE” [2002-08-26 22:35] “Symantec NetDriver Monitor”=“C:\PROGRA~1\SYMNET~1\SNDMon.exe” [2005-10-06 10:23] “Dimension4”=“D:\Program Files\D4\D4.exe” [] “ServiceLayer”=“C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe” [2002-10-16 09:43] “Nokia Tray Application”=“C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe” [2002-10-22 09:52] “iTunesHelper”=“D:\Program Files\iTunes\iTunesHelper.exe” [2006-09-25 14:54] “RemoteControl”=“d:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe” [2004-11-02 20:24] “LGODDFU”=“d:\Program Files\lg_fwupdate\fwupdate.exe” [2006-02-20 11:40] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “MSMSGS”=“C:\Program Files\Messenger\msmsgs.exe” [2004-11-15 16:18] “Steam”="" [] “VoipCheapCom”=“C:\program files\voipcheapcom\voipcheapcom.exe” [] “Gadu-Gadu”=“D:\Program Files\Gadu-Gadu\gg.exe” [2007-01-30 16:58] Contents of the ‘Scheduled Tasks’ folder 2007-07-17 21:43:40 C:\WINDOWS\tasks\Symantec NetDetect.job ************************************************************************** catchme 0.3.915 W2K/XP/Vista - rootkit detector by Gmer, http://www.gmer.net Rootkit scan 2007-07-17 23:47:37 Windows 5.1.2600 Dodatek Service Pack. 1 NTFS scanning hidden processes … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden files: 0 ************************************************************************** Completion time: 2007-07-17 23:48:19 C:\ComboFix-quarantined-files.txt … 2007-07-17 23:48 C:\ComboFix2.txt … 2007-07-17 18:25 — E O F —

prosze

[Gutek]

No to już Ok

[ironbutt (Ssoss)]

Dziekuje Panowie za pomoc