Obcy utworzono 26 kwietnia 2009 utworzono 26 kwietnia 2009 Witam Serdecznie.Komp sie zle zachowuje,niemoge zrobic w Avirze update.Prosze o pomoc.Oto moje logo: Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:42:55, on 2009-04-26Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.20583)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeD:\Programy\Avira\Avira\AntiVir Desktop\sched.exeC:\WINDOWS\RTHDCPL.EXEC:\WINDOWS\system32\RUNDLL32.EXEC:\Program Files\HP\HP Software Update\HPWuSchd2.exeC:\Program Files\CyberLink\PowerDVD\PDVDServ.exeC:\Program Files\lg_fwupdate\fwupdate.exeC:\Program Files\Nero\Nero 7\InCD\NBHGui.exeC:\Program Files\Nero\Nero 7\InCD\InCD.exeD:\Programy\Avira\Avira\AntiVir Desktop\avgnt.exeC:\WINDOWS\system32\ctfmon.exeD:\Programy\Deamon\DAEMON Tools Lite\daemon.exeC:\Program Files\HP\Digital Imaging\bin\hpqtra08.exeC:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\ctfmon.exeC:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exeD:\Programy\Avira\Avira\AntiVir Desktop\avguard.exeC:\Program Files\Nero\Nero 7\InCD\InCDsrv.exeC:\WINDOWS\system32\nvsvc32.exeC:\Program Files\CyberLink\Shared Files\RichVideo.exeE:\Programy\firefox.exeD:\Programy\GG\Gadu-Gadu\gg.exeD:\Programy\Hij\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - Default URLSearchHook is missingO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Programy\Adobe\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dllO3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dllO4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXEO4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXEO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInitO4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exeO4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"O4 - HKLM\..\Run: [LGODDFU] "C:\Program Files\lg_fwupdate\fwupdate.exe" blrunO4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exeO4 - HKLM\..\Run: [securDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exeO4 - HKLM\..\Run: [inCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exeO4 - HKLM\..\Run: [avgnt] "D:\Programy\Avira\Avira\AntiVir Desktop\avgnt.exe" /minO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Programy\Deamon\DAEMON Tools Lite\daemon.exe" -autorunO4 - HKCU\..\Run: [cdoosoft] C:\WINDOWS\system32\olhrwef.exeO4 - HKCU\..\Run: [Tok-Cirrhatus-3444] "C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\br7911on.exe"O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'USŁUGA LOKALNA')O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'USŁUGA SIECIOWA')O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')O4 - Startup: ctfmon.exeO4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exeO7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO17 - HKLM\System\CCS\Services\Tcpip\..\{940B99AD-E4DD-49ED-AF3A-491F59A7922C}: NameServer = 82.177.132.176 217.17.34.10O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - D:\Programy\Avira\Avira\AntiVir Desktop\sched.exeO23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - D:\Programy\Avira\Avira\AntiVir Desktop\avguard.exeO23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exeO23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exeO23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exeO23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe--End of file - 6282 bytes
Obcy komentarz 26 kwietnia 2009 Autor komentarz 26 kwietnia 2009 Oto logo z ComboFix: ComboFix 09-04-25.A3 - Administrator 2009-04-26 11:19.1 - NTFSx86Microsoft Windows XP Professional 5.1.2600.2.1250.48.1045.18.1023.651 [GMT 2:00]Uruchomiony z: c:\documents and settings\Administrator\Pulpit\ComboFix.exeAV: AntiVir Desktop *On-access scanning enabled* (Outdated) * Utworzono nowy punkt przywracania.((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))).C:\Autorun.infc:\documents and settings\Administrator\Menu Start\Programy\Autostart\ctfmon.exec:\documents and settings\Administrator\Ustawienia lokalne\Dane aplikacji\inetinfo.exec:\documents and settings\Administrator\Ustawienia lokalne\Dane aplikacji\lsass.exeC:\em8tqm.cmdc:\recycled\Recycledc:\recycled\Recycled\ctfmon.exec:\windows\system32\nmdfgds0.dllc:\windows\system32\olhrwef.exec:\windows\system32\pthreadGC2.dllD:\Autorun.infD:\em8tqm.cmdE:\Autorun.infE:\em8tqm.cmd.((((((((((((((((((((((((( Pliki utworzone od 2009-05-26 do 2009-4-26 ))))))))))))))))))))))))))))))).2009-04-22 17:21 . 2009-04-26 09:20 -------- d-sh--r C:\Recycled2009-04-20 16:40 . 2009-04-20 16:40 -------- d-----w c:\documents and settings\Administrator\Ustawienia lokalne\Dane aplikacji\Adobe2009-04-20 16:39 . 2009-04-20 16:40 -------- d-----w c:\program files\Common Files\Adobe2009-04-20 16:38 . 2009-04-20 16:38 -------- d-----w c:\windows\Cache2009-04-12 10:53 . 2009-04-12 10:53 -------- d-----w c:\windows\ShellNew2009-04-12 10:53 . 2009-04-12 10:53 10 --sh--r c:\windows\system32\sistem.sys2009-04-09 15:43 . 2009-04-09 15:43 -------- d-----w c:\documents and settings\Administrator\Ustawienia lokalne\Dane aplikacji\Identities2009-04-09 10:46 . 2009-04-09 10:46 -------- d-----w c:\documents and settings\Administrator\Dane aplikacji\teamspeak22009-04-09 10:45 . 2009-04-09 10:45 34064 ----a-w c:\windows\system32\lhacm.acm2009-04-01 13:27 . 2007-03-16 08:19 5174 ----a-r c:\windows\system32\nppt9x.vxd2009-04-01 13:27 . 2007-03-16 08:19 4682 ----a-r c:\windows\system32\npptNT2.sys2009-04-01 13:19 . 2009-04-01 13:19 -------- d-----w c:\documents and settings\Administrator\Dane aplikacji\InstallShield2009-04-01 12:39 . 2009-02-13 09:31 55640 ----a-w c:\windows\system32\drivers\avgntflt.sys2009-04-01 12:39 . 2009-04-01 12:39 -------- d-----w c:\documents and settings\All Users\Dane aplikacji\Avira2009-03-29 11:58 . 2009-03-29 11:58 -------- d-----w c:\documents and settings\Administrator\Dane aplikacji\DAEMON Tools Pro2009-03-29 11:58 . 2009-03-29 11:58 -------- d-----w c:\documents and settings\Administrator\Dane aplikacji\DAEMON Tools2009-03-29 11:58 . 2009-03-29 11:58 -------- d-----w c:\documents and settings\All Users\Dane aplikacji\DAEMON Tools Lite2009-03-29 11:57 . 2009-03-29 11:57 -------- d-----w c:\program files\DAEMON Tools Toolbar2009-03-29 11:55 . 2009-03-29 11:55 717296 ----a-w c:\windows\system32\drivers\sptd.sys2009-03-29 11:55 . 2009-03-29 11:55 -------- d-----w c:\documents and settings\Administrator\Dane aplikacji\DAEMON Tools Lite2009-03-27 16:28 . 2009-03-27 16:28 -------- d-----w c:\documents and settings\Administrator\Dane aplikacji\Gadu-Gadu2009-03-27 16:27 . 2009-03-29 12:44 -------- d-----w c:\documents and settings\Administrator\Gadu-Gadu2009-03-27 15:31 . 2009-03-27 15:31 0 ----a-w c:\windows\nsreg.dat2009-03-27 15:31 . 2009-03-27 15:31 -------- d-----w c:\documents and settings\Administrator\Ustawienia lokalne\Dane aplikacji\Mozilla2009-03-27 14:24 . 2009-03-27 14:24 8192 ----a-w c:\windows\REGLOCS.OLD2009-03-27 14:23 . 2009-03-27 14:23 -------- d-----w c:\documents and settings\Administrator\Dane aplikacji\HP2009-03-27 14:23 . 2006-02-10 13:46 48128 ----a-w c:\windows\system32\hpzll463.dll.(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))).2009-04-26 08:31 . 2009-03-27 11:17 -------- d-----w c:\program files\lg_fwupdate2009-04-09 10:34 . 2009-03-27 10:44 86327 ----a-w c:\windows\pchealth\helpctr\OfflineCache\index.dat2009-04-01 13:19 . 2009-03-27 10:55 -------- d--h--w c:\program files\InstallShield Installation Information2009-03-29 10:37 . 2001-10-26 18:15 65484 ----a-w c:\windows\system32\perfc015.dat2009-03-29 10:37 . 2001-10-26 18:15 433262 ----a-w c:\windows\system32\perfh015.dat2009-03-27 14:24 . 2009-03-27 11:05 119798 ----a-w c:\windows\HPHins10.dat2009-03-27 11:27 . 2009-03-27 11:27 -------- d-----w c:\program files\ffdshow2009-03-27 11:26 . 2009-03-27 11:26 -------- d-----w c:\program files\MarBit2009-03-27 11:22 . 2009-03-27 11:22 -------- d-----w c:\documents and settings\All Users\Dane aplikacji\Ahead2009-03-27 11:22 . 2009-03-27 11:19 -------- d-----w c:\program files\Common Files\Ahead2009-03-27 11:19 . 2009-03-27 11:19 -------- d-----w c:\program files\Nero2009-03-27 11:19 . 2009-03-27 11:19 -------- d-----w c:\documents and settings\All Users\Dane aplikacji\Nero2009-03-27 11:16 . 2009-03-27 11:15 -------- d-----w c:\program files\CyberLink2009-03-27 11:15 . 2009-03-27 10:52 -------- d-----w c:\program files\Common Files\InstallShield2009-03-27 11:12 . 2009-03-27 11:12 -------- d-----w c:\documents and settings\All Users\Dane aplikacji\HP2009-03-27 11:11 . 2009-03-27 11:11 -------- d-----w c:\program files\Common Files\HP2009-03-27 11:11 . 2009-03-27 11:08 -------- d-----w c:\program files\HP2009-03-27 11:10 . 2009-03-27 11:10 -------- d-----w c:\program files\Hewlett-Packard2009-03-27 11:04 . 2009-03-27 11:04 9240 ----a-w c:\documents and settings\Administrator\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT2009-03-27 10:55 . 2009-03-27 10:55 -------- d-----w c:\program files\Realtek2009-03-27 10:46 . 2009-03-27 10:46 -------- d-----w c:\program files\Real Alternative2009-03-27 10:46 . 2009-03-27 10:46 -------- d-----w c:\documents and settings\All Users\Dane aplikacji\Apple Computer2009-03-27 10:46 . 2009-03-27 10:46 -------- d-----w c:\program files\QuickTime Alternative2009-03-27 10:46 . 2009-03-27 10:45 -------- d-----w c:\program files\Java2009-03-27 10:45 . 2009-03-27 10:45 -------- d-----w c:\program files\Common Files\Java2009-03-27 10:42 . 2009-03-27 10:42 21856 ----a-w c:\windows\system32\emptyregdb.dat2009-03-27 10:42 . 2009-03-27 10:42 -------- d-----w c:\program files\Windows Media Connect 22004-08-04 00:44 . 2004-08-04 00:44 1392671 --sh--r c:\windows\system32\msvbvm60.dll.------- Sigcheck -------[-] 2007-07-10 13:06 642560 CE594E18FE0D0AF804F1F3694921CE62 c:\windows\system32\user32.dll[-] 2007-07-13 22:56 814592 CE7193C5F7C01B19768E066087C1C919 c:\windows\system32\wininet.dll[-] 2007-07-28 01:15 360576 0FB6743E937C7BB248B2530A5A77ABC6 c:\windows\system32\drivers\tcpip.sys[-] 2007-07-26 17:30 2067584 5362D54A6925AFDCBBBA53B43EE65774 c:\windows\system32\ntkrnlpa.exe[-] 2007-07-26 17:31 2190464 9899BB89856E3BD4EF13E11CCEE49B71 c:\windows\system32\ntoskrnl.exe[-] 2007-07-13 22:42 974848 32F67215C57DF2C401BF93B7EE65987F c:\windows\explorer.exe[-] 2007-07-27 19:47 1548288 89878732D5EB0C845AD2356081142F2A c:\windows\system32\sfcfiles.dll.((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))..*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360]"DAEMON Tools Lite"="d:\programy\Deamon\DAEMON Tools Lite\daemon.exe" [2008-12-29 687560][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-04-28 7573504]"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-04-28 86016]"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 49152]"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2007-03-14 71216]"LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2007-01-08 52256]"LGODDFU"="c:\program files\lg_fwupdate\fwupdate.exe" [2007-02-26 249856]"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]"SecurDisc"="c:\program files\Nero\Nero 7\InCD\NBHGui.exe" [2007-11-26 1629480]"InCD"="c:\program files\Nero\Nero 7\InCD\InCD.exe" [2007-11-26 1057064]"avgnt"="d:\programy\Avira\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2006-04-17 16143872]"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2006-04-28 1519616][HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360][HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]"nltide_2"="shell32" [X]"nltide_3"="advpack.dll" - c:\windows\system32\advpack.dll [2007-07-27 124928]c:\documents and settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472][HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]"DisableStatusMessages"= 1 (0x1)[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]"NoSMMyPictures"= 1 (0x1)"NoSMConfigurePrograms"= 1 (0x1)"NoSMHelp"= 1 (0x1)"NoResolveTrack"= 1 (0x1)[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]"NoSMMyPictures"= 1 (0x1)"NoSMConfigurePrograms"= 1 (0x1)"NoSMHelp"= 1 (0x1)"NoResolveTrack"= 1 (0x1)[HKEY_LOCAL_MACHINE\software\microsoft\security center]"AntiVirusDisableNotify"=dword:00000001"AntiVirusOverride"=dword:00000001[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\system32\\sessmgr.exe"="c:\\Program Files\\CyberLink\\PowerDVD\\PowerDVD.exe"="d:\\Programy\\GG\\Gadu-Gadu\\gg.exe"=S2 AntiVirSchedulerService;Avira AntiVir Scheduler;d:\programy\Avira\Avira\AntiVir Desktop\sched.exe [2009-03-05 108289][HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{68ef8f64-2158-11de-8b09-00138fbca898}]\Shell\AutoRun\command - H:\em8tqm.cmd\Shell\open\Command - H:\em8tqm.cmd[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c1fe93e4-1d10-11de-8af5-00138fbca898}]\Shell\AutoRun\command - H:\em8tqm.cmd\Shell\open\Command - H:\em8tqm.cmd[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e70c3330-1d4c-11de-8af7-00138fbca898}]\Shell\AutoRun\command - H:\em8tqm.cmd\Shell\open\Command - H:\em8tqm.cmd.Zawartość folderu 'Zaplanowane zadania'2009-04-25 c:\windows\Tasks\WebReg Deskjet D1300 series.job- c:\program files\HP\Digital Imaging\bin\hpqwrg.exe [2006-02-19 04:09].- - - - USUNIĘTO PUSTE WPISY - - - -HKCU-Run-cdoosoft - c:\windows\system32\olhrwef.exeHKCU-Run-Tok-Cirrhatus-3444 - c:\documents and settings\Administrator\Ustawienia lokalne\Dane aplikacji\br7911on.exe.------- Skan uzupełniający -------.uStart Page = hxxp://google.pl/TCP: {940B99AD-E4DD-49ED-AF3A-491F59A7922C} = 82.177.132.176 217.17.34.10FF - ProfilePath - c:\documents and settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\xalrfxq9.default\FF - prefs.js: browser.search.selectedEngine - DAEMON SearchFF - component: c:\program files\DAEMON Tools Toolbar\FirefoxDTT\components\DTToolbarFF.dllFF - plugin: d:\programy\Adobe\Reader\browser\nppdf32.dll.**************************************************************************catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.netRootkit scan 2009-04-26 11:21Windows 5.1.2600 Dodatek Service Pack 2 NTFSskanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończoneukryte pliki: 0**************************************************************************.--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------- - - - - - - > 'winlogon.exe'(680)c:\windows\system32\cscui.dll.Czas ukończenia: 2009-04-26 11:22ComboFix-quarantined-files.txt 2009-04-26 09:22Przed: 35 046 465 536 bajtów wolnychPo: 35 054 403 584 bajtów wolnychWindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe[boot loader]timeout=2default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS[operating systems]c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdconsmulti(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect195
Gość komentarz 26 kwietnia 2009 komentarz 26 kwietnia 2009 Do Notatnika wklej: Windows Registry Editor Version 5.00[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] Z menu Notatnika >>> Plik >>> Zapisz jako >>> Ustaw rozszerzenie na: "Wszystkie pliki" >>> Zapisz jako FIX.REG>>> plik uruchom (dwuklik i OK- zgódź się na dodanie do Rejestru). Zrestartuj komputer. Usuń ręcznie folder C:\Qoobox. I to na tyle. .
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.