Co o tym myślicie?
ComboFix 11-03-26.02 - Angelika 2011-03-27 19:01:49.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.2.1250.48.1045.18.1023.490 [GMT 2:00]
Uruchomiony z: c:\documents and settings\Angelika\Pulpit\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
* Utworzono nowy punkt przywracania
.
.
((((((((((((((((((((((((( Pliki utworzone od 2011-02-27 do 2011-03-27 )))))))))))))))))))))))))))))))
.
.
2011-03-25 13:52 . 2011-03-18 20:42 50688 ----a-w- c:\windows\system32\ff_acm.acm
2011-03-24 14:27 . 2011-03-25 13:54 -------- d-----w- C:\Downloads
2011-03-24 14:19 . 2011-03-24 14:27 -------- d-----w- c:\program files\Ygoow
2011-03-24 13:53 . 2009-05-25 07:21 142336 ----a-r- c:\windows\system32\drivers\Rtenicxp.sys
2011-03-24 13:53 . 2009-03-03 12:18 73728 ----a-r- c:\windows\system32\RtNicProp32.dll
2011-03-24 13:53 . 2011-03-24 13:53 -------- d-----w- c:\program files\Realtek
2011-03-23 09:51 . 2011-03-23 09:51 -------- d-----w- C:\Gimnazjum_klasa_2_-_Fizyka
2011-03-23 09:50 . 2011-03-23 09:50 -------- d-----w- c:\program files\Gimnazjum czesc 2 - Fizyka
2011-03-23 09:50 . 1998-10-07 12:54 327168 ----a-w- c:\windows\IsUn0415.exe
2011-03-18 16:36 . 2011-03-18 16:36 -------- d-----w- c:\windows\system32\wbem\Repository
2011-03-18 15:50 . 2011-03-18 16:36 -------- d-----w- c:\documents and settings\Angelika\Ustawienia lokalne\Dane aplikacji\Nokia
2011-03-13 14:02 . 2011-01-08 03:27 941160 ----a-w- c:\windows\system32\nvdispco322090.dll
2011-03-13 14:02 . 2011-01-08 03:27 837736 ----a-w- c:\windows\system32\nvgenco322040.dll
2011-03-12 11:46 . 2011-03-12 11:46 -------- d-----w- c:\documents and settings\Angelika\Dane aplikacji\Rovio
2011-02-27 19:38 . 2011-03-24 14:56 -------- d-----w- c:\program files\Mozilla Firefox 4.0 Beta 12
2011-02-27 11:01 . 2011-02-27 11:02 -------- d-----w- c:\documents and settings\Angelika\Ustawienia lokalne\Dane aplikacji\Deployment
2011-02-27 10:38 . 2011-02-27 10:38 -------- d-----w- c:\documents and settings\Angelika\Dane aplikacji\PC Suite
2011-02-27 10:35 . 2011-02-27 10:35 16856 ----a-w- c:\program files\Mozilla Firefox\plugin-container.exe
2011-02-27 10:35 . 2011-02-27 10:35 719832 ----a-w- c:\program files\Mozilla Firefox\mozcpp19.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-18 20:42 . 2010-09-28 12:56 80896 ----a-w- c:\windows\system32\ff_vfw.dll
2011-01-08 03:27 . 2010-09-29 12:28 61440 ----a-w- c:\windows\system32\OpenCL.dll
2011-01-08 03:27 . 2010-09-29 12:28 2916968 ----a-w- c:\windows\system32\nvcuvid.dll
2011-01-08 03:27 . 2010-09-29 12:28 2251368 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-01-08 03:27 . 2010-09-29 12:28 4980736 ----a-w- c:\windows\system32\nvcuda.dll
2011-01-08 03:27 . 2010-09-29 12:28 13004800 ----a-w- c:\windows\system32\nvcompiler.dll
2011-01-08 03:27 . 2006-08-11 13:43 1958400 ----a-w- c:\windows\system32\nvapi.dll
2011-01-08 03:27 . 2006-08-11 13:42 14671872 ----a-w- c:\windows\system32\nvoglnt.dll
2011-01-08 03:27 . 2006-08-11 13:42 6397824 ----a-w- c:\windows\system32\nv4_disp.dll
2011-01-08 03:27 . 2006-08-11 13:42 9888672 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2011-01-07 18:58 . 2011-01-07 18:58 282624 ----a-w- c:\windows\system32\nvrsel.dll
2011-01-07 18:58 . 2011-01-07 18:58 274432 ----a-w- c:\windows\system32\nvrsesm.dll
2011-01-07 18:58 . 2011-01-07 18:58 253952 ----a-w- c:\windows\system32\nvrsth.dll
2011-01-07 18:58 . 2011-01-07 18:58 249856 ----a-w- c:\windows\system32\nvrseng.dll
2011-01-07 18:58 . 2011-01-07 18:58 126976 ----a-w- c:\windows\system32\nvrszht.dll
2011-01-07 18:58 . 2011-01-07 18:58 331776 ----a-w- c:\windows\system32\nvrshe.dll
2011-01-07 18:58 . 2011-01-07 18:58 286720 ----a-w- c:\windows\system32\nvrsfr.dll
2011-01-07 18:58 . 2011-01-07 18:58 274432 ----a-w- c:\windows\system32\nvrsnl.dll
2011-01-07 18:58 . 2011-01-07 18:58 270336 ----a-w- c:\windows\system32\nvrsru.dll
2011-01-07 18:58 . 2011-01-07 18:58 262144 ----a-w- c:\windows\system32\nvrshu.dll
2011-01-07 18:58 . 2011-01-07 18:58 258048 ----a-w- c:\windows\system32\nvrssl.dll
2011-01-07 18:58 . 2011-01-07 18:58 253952 ----a-w- c:\windows\system32\nvrsda.dll
2011-01-07 18:58 . 2011-01-07 18:58 249856 ----a-w- c:\windows\system32\nvrsfi.dll
2011-01-07 18:58 . 2011-01-07 18:58 229376 ----a-w- c:\windows\system32\nvrszhc.dll
2011-01-07 18:58 . 2011-01-07 18:58 335872 ----a-w- c:\windows\system32\nvrsar.dll
2011-01-07 18:58 . 2011-01-07 18:58 282624 ----a-w- c:\windows\system32\nvrses.dll
2011-01-07 18:58 . 2011-01-07 18:58 278528 ----a-w- c:\windows\system32\nvrsde.dll
2011-01-07 18:58 . 2011-01-07 18:58 270336 ----a-w- c:\windows\system32\nvrsptb.dll
2011-01-07 18:58 . 2011-01-07 18:58 266240 ----a-w- c:\windows\system32\nvrsko.dll
2011-01-07 18:58 . 2011-01-07 18:58 258048 ----a-w- c:\windows\system32\nvrstr.dll
2011-01-07 18:58 . 2011-01-07 18:58 258048 ----a-w- c:\windows\system32\nvrssk.dll
2011-01-07 18:58 . 2011-01-07 18:58 253952 ----a-w- c:\windows\system32\nvrssv.dll
2011-01-07 18:58 . 2011-01-07 18:58 253952 ----a-w- c:\windows\system32\nvrsno.dll
2011-01-07 18:58 . 2011-01-07 18:58 249856 ----a-w- c:\windows\system32\nvrscs.dll
2011-01-07 18:58 . 2011-01-07 18:58 282624 ----a-w- c:\windows\system32\nvrsit.dll
2011-01-07 18:58 . 2011-01-07 18:58 274432 ----a-w- c:\windows\system32\nvrspt.dll
2011-01-07 18:58 . 2011-01-07 18:58 270336 ----a-w- c:\windows\system32\nvrsja.dll
2011-01-07 18:58 . 2011-01-07 18:58 258048 ----a-w- c:\windows\system32\nvrspl.dll
2011-01-07 18:58 . 2011-01-07 18:58 81920 ----a-w- c:\windows\system32\nvwddi.dll
2011-01-07 18:58 . 2011-01-07 18:58 580200 ----a-w- c:\windows\system32\easyUpdatusAPIU.dll
2011-01-07 18:58 . 2011-01-07 18:58 277608 ----a-w- c:\windows\system32\nvmccs.dll
2011-01-07 18:58 . 2011-01-07 18:58 156776 ----a-w- c:\windows\system32\nvsvc32.exe
2011-01-07 18:58 . 2011-01-07 18:58 145000 ----a-w- c:\windows\system32\nvcolor.exe
2011-01-07 18:58 . 2011-01-07 18:58 13880424 ----a-w- c:\windows\system32\nvcpl.dll
2011-01-07 18:58 . 2011-01-07 18:58 111208 ----a-w- c:\windows\system32\nvmctray.dll
.
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google Update"="c:\documents and settings\Angelika\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe" [2011-02-27 136176]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"="c:\program files\VIA\VIAudioi\HDADeck\HDeck.exe" [2009-08-28 33673216]
"Gainward"="c:\program files\VDOTool\TBPanel.exe" [2006-09-13 2154496]
"egui"="c:\program files\ESET NOD32 Antivirus\egui.exe" [2009-11-16 2054360]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2011-01-07 111208]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-01-07 13880424]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-11-04 1753192]
"Ygoow"="c:\program files\Ygoow\Ygoow.exe" [2011-02-17 1565184]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKLM\~\startupfolder\C:^Documents and Settings^Angelika^Menu Start^Programy^Autostart^blueconnect.lnk]
path=c:\documents and settings\Angelika\Menu Start\Programy\Autostart\blueconnect.lnk
backup=c:\windows\pss\blueconnect.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
c:\program files\Common Files\Nokia\MPlatform\NokiaMServer [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2007-05-11 11:06 40048 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2009-04-23 13:51 691656 ----a-w- c:\program files\DAEMON Tools Lite\daemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lexmark X1100 Series]
2003-08-19 15:09 57344 ----a-w- c:\program files\Lexmark X1100 Series\lxbkbmgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nowe Gadu-Gadu]
2009-10-28 12:44 11539048 ----a-w- c:\program files\Nowe Gadu-Gadu\gg.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2008-06-10 02:27 144784 ----a-w- c:\program files\Java\jre1.6.0_07\bin\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Nowe Gadu-Gadu\\gg.exe"=
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [2010-09-29 721904]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2009-11-16 108792]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2009-11-16 96408]
R2 ekrn;ESET Service;c:\program files\ESET NOD32 Antivirus\ekrn.exe [2009-11-16 735960]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2010-09-27 1390976]
S3 qcusbser;ZTE USB Device for Legacy Serial Communication;c:\windows\system32\drivers\ZTEusbser.sys [2010-10-25 99584]
.
Zawartość folderu 'Zaplanowane zadania'
.
2011-03-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-789336058-1214440339-725345543-1003Core.job
- c:\documents and settings\Angelika\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [2011-02-27 15:51]
.
2011-03-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-789336058-1214440339-725345543-1003UA.job
- c:\documents and settings\Angelika\Ustawienia lokalne\Dane aplikacji\Google\Update\GoogleUpdate.exe [2011-02-27 15:51]
.
.
------- Skan uzupełniający -------
.
uStart Page = hxxp://google.pl/
IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Angelika\Dane aplikacji\Mozilla\Firefox\Profiles\8uu1fn3e.default\
FF - prefs.js: browser.startup.homepage - hxxp://google.pl/
.
- - - - USUNIĘTO PUSTE WPISY - - - -
.
SafeBoot-WudfPf
SafeBoot-WudfRd
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-27 19:04
Windows 5.1.2600 Dodatek Service Pack 2 NTFS
.
skanowanie ukrytych procesów ...
.
skanowanie ukrytych wpisów autostartu ...
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HDAudDeck = c:\program files\VIA\VIAudioi\HDADeck\HDeck.exe 1????????????????????????????????????????????????
.
skanowanie ukrytych plików ...
.
skanowanie pomyślnie ukończone
ukryte pliki: 0
.
**************************************************************************
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------
.
- - - - - - - > 'explorer.exe'(3888)
c:\windows\system32\msi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Czas ukończenia: 2011-03-27 19:05:51
ComboFix-quarantined-files.txt 2011-03-27 17:05
.
Przed: 180 425 539 584 bajtów wolnych
Po: 181 231 554 560 bajtów wolnych
.
WindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 48ACA5A2903521D001392656910F527FPozdrawiam.
