Temat jest zamknięty
Z góry dzięki za pomoc
ComboFix 08-08-27.05 - Hendry 2008-08-28 13:46:24.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.191 [GMT 2:00]
Running from: C:\Documents and Settings\Hendry\Pulpit\ComboFix.exe
* Created a new restore point
[color="red"][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED [img]http://www.forum.tweaks.pl/public/style_emoticons/default/excl.gif[/img][/b][/color]
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Autorun.inf
C:\Documents and Settings\Hendry\Dane aplikacji\macromedia\Flash Player\#SharedObjects\AKR5WWM4\bin.clearspring.com
C:\Documents and Settings\Hendry\Dane aplikacji\macromedia\Flash Player\#SharedObjects\AKR5WWM4\bin.clearspring.com\clearspring.sol
C:\Documents and Settings\Hendry\Dane aplikacji\macromedia\Flash Player\#SharedObjects\AKR5WWM4\interclick.com
C:\Documents and Settings\Hendry\Dane aplikacji\macromedia\Flash Player\#SharedObjects\AKR5WWM4\interclick.com\ud.sol
C:\Documents and Settings\Hendry\Dane aplikacji\macromedia\Flash Player\#SharedObjects\AKR5WWM4\static.youku.com
C:\Documents and Settings\Hendry\Dane aplikacji\macromedia\Flash Player\#SharedObjects\AKR5WWM4\static.youku.com\v1.0.0314\v\swf\qplayer.swf\qplayer.sol
C:\Documents and Settings\Hendry\Dane aplikacji\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bin.clearspring.com
C:\Documents and Settings\Hendry\Dane aplikacji\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bin.clearspring.com\settings.sol
C:\Documents and Settings\Hendry\Dane aplikacji\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com
C:\Documents and Settings\Hendry\Dane aplikacji\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com\settings.sol
C:\Documents and Settings\Hendry\Dane aplikacji\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.youku.com
C:\Documents and Settings\Hendry\Dane aplikacji\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.youku.com\settings.sol
C:\Documents and Settings\Hendry\Dane aplikacji\ShoppingReport
C:\Documents and Settings\Hendry\Dane aplikacji\ShoppingReport\cs\Config.xml
C:\Program Files\Google\googletoolbar1.dll
C:\Program Files\myglobalsearch
C:\Program Files\myglobalsearch\bar\1.bin\M9FFXTBR.JAR
C:\Program Files\myglobalsearch\bar\1.bin\M9FFXTBR.MANIFEST
C:\Program Files\myglobalsearch\bar\1.bin\M9NTSTBR.JAR
C:\Program Files\myglobalsearch\bar\1.bin\M9NTSTBR.MANIFEST
C:\Program Files\myglobalsearch\bar\1.bin\M9PLUGIN.DLL
C:\Program Files\myglobalsearch\bar\1.bin\MGSBAR.DLL
C:\Program Files\myglobalsearch\bar\1.bin\NPMYGLSH.DLL
C:\Program Files\myglobalsearch\bar\Cache\[u]0[/u]0011C5C.bin
C:\Program Files\myglobalsearch\bar\Cache\[u]0[/u]00120E1.bin
C:\Program Files\myglobalsearch\bar\Cache\[u]0[/u]0012267.bin
C:\Program Files\myglobalsearch\bar\Cache\[u]0[/u]00561FD
C:\Program Files\myglobalsearch\bar\Cache\files.ini
C:\Program Files\myglobalsearch\bar\History\search
C:\Program Files\myglobalsearch\bar\Settings\prevcfg.htm
C:\Program Files\ShoppingReport
C:\Program Files\ShoppingReport\Uninst.exe
C:\WINDOWS\svchost.ini
D:\Autorun.inf
E:\Autorun.inf
F:\Autorun.inf
.
((((((((((((((((((((((((( Files Created from 2008-07-28 to 2008-08-28 )))))))))))))))))))))))))))))))
.
2008-08-28 13:48 . 2008-08-28 13:49 0 --a------ C:\log.tmp
2008-08-27 16:09 . 2008-08-28 13:45 <DIR> d-------- C:\Documents and Settings\Hendry\Dane aplikacji\foobar2000
2008-08-27 14:50 . 2008-08-27 14:50 <DIR> d-------- C:\Documents and Settings\Hendry\.thumbnails
2008-08-21 20:31 . 2008-08-21 20:31 <DIR> d-------- C:\Documents and Settings\Hendry\Dane aplikacji\GanymedeNet
2008-08-21 20:31 . 2008-08-21 20:31 4 --a------ C:\WINDOWS\system32\proc1395793746.bin
2008-08-20 15:33 . 2008-08-20 15:33 <DIR> d-------- C:\WINDOWS\Sun
2008-08-20 15:19 . 2008-08-20 15:19 <DIR> d-------- C:\Program Files\Java
2008-08-20 15:19 . 2008-06-10 02:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-08-20 15:15 . 2008-08-20 15:15 <DIR> d-------- C:\Program Files\Common Files\Java
2008-08-18 18:48 . 2008-08-18 18:54 <DIR> d-------- C:\Program Files\Snikers
2008-08-18 15:52 . 2008-08-18 15:52 <DIR> d--h----- C:\WINDOWS\system32\GroupPolicy
2008-08-17 12:43 . 2008-08-17 12:43 <DIR> d-------- C:\Documents and Settings\Hendry\Dane aplikacji\Ashampoo
2008-08-17 12:42 . 2008-08-17 12:42 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\ashampoo
2008-08-17 12:27 . 2008-08-17 12:41 <DIR> d-------- C:\Program Files\Ashampoo
2008-08-17 12:27 . 2008-03-12 15:38 9,344 --a------ C:\WINDOWS\system32\drivers\AshAvScan.sys
2008-08-15 18:01 . 2008-08-15 18:01 <DIR> d--h----- C:\Documents and Settings\All Users\Dane aplikacji\CanonBJ
2008-08-15 18:01 . 2005-03-25 07:10 139,776 --a------ C:\WINDOWS\system32\CNMLM75.DLL
2008-08-15 18:01 . 2005-03-25 07:00 8,704 --a------ C:\WINDOWS\system32\CNMVS75.DLL
2008-08-15 17:58 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2008-08-15 17:58 . 2004-08-03 23:01 25,856 --a--c--- C:\WINDOWS\system32\dllcache\usbprint.sys
2008-08-14 14:01 . 2008-08-14 14:03 <DIR> d-------- C:\WINDOWS\system32\NtmsData
2008-08-14 13:02 . 2008-08-28 12:20 <DIR> d-------- C:\Documents and Settings\Hendry\.<a href="http://www.download.net.pl/354/GIMP/">gimp</a>-2.4
2008-08-13 20:12 . 2008-08-13 20:12 <DIR> d-------- C:\Program Files\Common Files\Adobe AIR
2008-08-09 12:01 . 2008-08-09 12:01 <DIR> d-------- C:\Documents and Settings\Hendry\Dane aplikacji\Ahead
2008-08-09 11:57 . 2003-03-29 16:45 89,184 --a------ C:\WINDOWS\system32\drivers\imagedrv.sys
2008-08-09 11:57 . 2003-07-29 17:09 57,344 --a------ C:\WINDOWS\system32\ImageDrive.cpl
2008-08-09 11:56 . 2008-08-09 11:56 <DIR> d-------- C:\Program Files\Common Files\Ahead
2008-08-09 11:56 . 2008-08-09 11:56 <DIR> d-------- C:\Program Files\Ahead
2008-08-09 11:56 . 2001-07-06 14:41 569,344 --a------ C:\WINDOWS\system32\imagr5.dll
2008-08-09 11:56 . 2001-07-06 12:44 544,768 --a------ C:\WINDOWS\system32\imagx5.dll
2008-08-09 11:56 . 2001-07-06 18:24 283,920 --a------ C:\WINDOWS\system32\ImagXpr5.dll
2008-08-09 11:56 . 2001-07-09 11:50 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe
2008-08-09 11:56 . 2001-06-26 08:15 38,912 --a------ C:\WINDOWS\system32\picn20.dll
2008-08-08 20:13 . 1996-06-17 15:44 266,240 --a------ C:\WINDOWS\system\MSVCRT.DLL
2008-08-08 20:13 . 1998-03-17 00:55 210,944 --a------ C:\WINDOWS\system\Msvcrt10.dll
2008-08-08 20:13 . 1998-05-06 18:30 32,768 --a------ C:\WINDOWS\system\PLUGIN.DLL
2008-08-05 16:12 . 2008-08-28 13:47 <DIR> d-------- C:\Program Files\Google
2008-08-04 20:18 . 2008-08-26 17:02 <DIR> d-------- C:\Documents and Settings\Hendry\Dane aplikacji\gtk-2.0
2008-08-03 17:33 . 2008-08-03 17:33 <DIR> d-------- C:\WINDOWS\system32\Samsung_USB_Drivers
2008-08-03 17:33 . 2008-08-03 17:33 <DIR> d-------- C:\Program Files\Samsung
2008-08-03 17:33 . 2008-08-13 20:11 <DIR> d-------- C:\Program Files\Common Files\Adobe
2008-08-03 17:33 . 2007-05-02 11:12 109,704 --a------ C:\WINDOWS\system32\drivers\ssm_mdm.sys
2008-08-03 17:33 . 2007-05-02 11:12 83,592 --a------ C:\WINDOWS\system32\drivers\ssm_bus.sys
2008-08-03 17:33 . 2007-05-02 11:12 15,112 --a------ C:\WINDOWS\system32\drivers\ssm_mdfl.sys
2008-08-03 17:33 . 2007-05-02 11:12 12,424 --a------ C:\WINDOWS\system32\drivers\ssm_whnt.sys
2008-08-03 17:33 . 2007-05-02 11:12 12,424 --a------ C:\WINDOWS\system32\drivers\ssm_wh.sys
2008-08-03 17:33 . 2007-05-02 11:12 12,424 --a------ C:\WINDOWS\system32\drivers\ssm_cmnt.sys
2008-08-03 17:33 . 2007-05-02 11:12 12,424 --a------ C:\WINDOWS\system32\drivers\ssm_cm.sys
2008-08-03 17:33 . 2005-08-28 20:51 766 --a------ C:\WINDOWS\system32\Uninstall.ico
2008-08-02 21:57 . 2008-08-11 23:11 24,448 --a------ C:\Documents and Settings\Hendry\Dane aplikacji\GDIPFONTCACHEV1.DAT
2008-08-02 21:55 . 2008-08-02 21:55 427 --a------ C:\WINDOWS\ODBC.INI
2008-08-02 21:52 . 2008-08-02 21:54 <DIR> d-------- C:\WINDOWS\ShellNew
2008-08-02 20:12 . 2004-08-03 23:08 26,496 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys
2008-08-02 11:29 . 2008-08-06 11:49 <DIR> d-------- C:\Documents and Settings\Hendry\Dane aplikacji\skypePM
2008-08-02 11:29 . 2008-08-02 11:29 56 --ah----- C:\WINDOWS\system32\ezsidmv.dat
2008-08-02 11:28 . 2008-08-02 11:28 <DIR> d-------- C:\Program Files\Skype
2008-08-02 11:28 . 2008-08-02 11:28 <DIR> d-------- C:\Program Files\Common Files\Skype
2008-08-02 11:28 . 2008-08-06 11:49 <DIR> d-------- C:\Documents and Settings\Hendry\Dane aplikacji\Skype
2008-08-02 11:28 . 2008-08-02 11:28 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Skype
2008-08-01 18:31 . 2008-08-01 18:31 <DIR> d-------- C:\Documents and Settings\Hendry\Dane aplikacji\WebCompiler3
2008-08-01 18:29 . 2008-08-01 18:29 <DIR> d-------- C:\Documents and Settings\Hendry\Dane aplikacji\Mercora
2008-08-01 12:37 . 2008-08-01 12:37 10 --a------ C:\WINDOWS\system32\810429tv4-test.jun
2008-08-01 12:32 . 2008-08-01 12:32 <DIR> d-------- C:\Documents and Settings\Hendry\Dane aplikacji\JLC's Software
2008-08-01 12:31 . 2008-08-02 10:24 <DIR> d-------- C:\Program Files\JLC's Software
2008-08-01 12:18 . 2008-08-01 12:18 <DIR> d-------- C:\Program Files\WiredRed
2008-08-01 12:18 . 2008-08-01 12:18 <DIR> d-------- C:\Program Files\MarBit
2008-08-01 12:18 . 2008-01-12 18:06 1,056,768 --a------ C:\WINDOWS\system32\ROBOEX32.DLL
2008-08-01 12:18 . 2008-01-12 18:06 54,784 --a------ C:\WINDOWS\system32\INETWH32.DLL
2008-08-01 12:17 . 2008-08-01 12:17 <DIR> d-------- C:\Documents and Settings\Hendry\Dane aplikacji\BESTplayer
2008-08-01 12:13 . 2008-08-01 12:13 <DIR> d-------- C:\Program Files\Webteh
2008-08-01 12:13 . 2008-08-01 12:13 <DIR> d-------- C:\Documents and Settings\Hendry\Dane aplikacji\BSplayer Pro
2008-08-01 12:13 . 2008-08-01 12:23 <DIR> d-------- C:\Documents and Settings\Hendry\Dane aplikacji\BSplayer
2008-08-01 12:12 . 2008-08-01 12:12 <DIR> d-------- C:\Documents and Settings\Hendry\Dane aplikacji\ESTSoft
2008-08-01 12:11 . 2008-08-01 12:11 <DIR> d-------- C:\Program Files\ESTsoft
2008-08-01 11:43 . 2008-08-01 11:43 <DIR> d-------- C:\Program Files\Avira
2008-08-01 11:43 . 2008-08-01 11:43 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Avira
2008-08-01 08:42 . 2008-08-01 08:42 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2008-07-31 16:51 . 2008-08-23 12:54 2,582 --a------ C:\WINDOWS\mozver.dat
2008-07-30 18:01 . 2008-07-30 18:01 <DIR> d-------- C:\Documents and Settings\Hendry\Dane aplikacji\Gadu-Gadu
2008-07-30 09:31 . 2008-08-11 15:35 <DIR> d-------- C:\Documents and Settings\Hendry\Gadu-Gadu
2008-07-30 09:30 . 2008-08-28 11:21 <DIR> d-------- C:\Program Files\Gadu-Gadu
2008-07-29 16:17 . 2001-08-17 23:59 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2008-07-29 16:16 . 2004-08-04 02:44 153,088 --a------ C:\WINDOWS\system32\irftp.exe
2008-07-29 16:16 . 2004-08-04 01:00 87,424 --a------ C:\WINDOWS\system32\drivers\irda.sys
2008-07-29 16:16 . 2004-08-04 02:35 58,624 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2008-07-29 16:16 . 2004-08-04 02:44 27,648 --a------ C:\WINDOWS\system32\irmon.dll
2008-07-29 16:16 . 2001-08-17 23:51 19,584 --a------ C:\WINDOWS\system32\drivers\rasirda.sys
2008-07-29 16:16 . 2001-08-17 23:51 18,688 --a------ C:\WINDOWS\system32\drivers\irsir.sys
2008-07-29 16:16 . 2004-08-04 02:44 8,192 --a------ C:\WINDOWS\system32\wshirda.dll
2008-07-29 16:15 . 2004-08-04 02:44 77,312 --a------ C:\WINDOWS\system32\usbui.dll
2008-07-29 16:13 . 2008-07-29 16:13 <DIR> dr-h----- C:\Documents and Settings\Default User\Ustawienia lokalne
2008-07-29 16:13 . 2008-07-29 16:13 <DIR> d-------- C:\Documents and Settings\Default User\Ulubione
2008-07-29 16:13 . 2008-07-29 14:22 <DIR> d--h----- C:\Documents and Settings\Default User\Szablony
2008-07-29 16:13 . 2008-07-29 16:13 <DIR> d-------- C:\Documents and Settings\Default User\Pulpit
2008-07-29 16:13 . 2008-07-29 16:13 <DIR> d-------- C:\Documents and Settings\Default User\Moje dokumenty
2008-07-29 16:13 . 2008-07-29 16:13 <DIR> dr------- C:\Documents and Settings\Default User\Menu Start
2008-07-29 16:13 . 2008-07-29 16:13 <DIR> dr-h----- C:\Documents and Settings\Default User\Dane aplikacji
2008-07-29 16:13 . 2008-07-29 16:13 <DIR> d-------- C:\Documents and Settings\All Users\Ulubione
2008-07-29 16:13 . 2008-07-29 16:13 <DIR> d--h----- C:\Documents and Settings\All Users\Szablony
2008-07-29 16:13 . 2008-08-27 16:09 <DIR> d-------- C:\Documents and Settings\All Users\Pulpit
2008-07-29 16:13 . 2008-08-02 21:54 <DIR> dr------- C:\Documents and Settings\All Users\Menu Start
2008-07-29 16:13 . 2008-07-29 14:23 <DIR> dr------- C:\Documents and Settings\All Users\Dokumenty
2008-07-29 16:13 . 2008-08-17 12:42 <DIR> dr-h----- C:\Documents and Settings\All Users\Dane aplikacji
2008-07-29 16:13 . 2004-08-04 01:27 1,896,400 --a--c--- C:\WINDOWS\system32\dllcache\NT5.CAT
2008-07-29 16:12 . 2008-07-29 14:26 <DIR> d--h----- C:\Documents and Settings\Default User
2008-07-29 16:12 . 2008-07-29 14:25 <DIR> d-------- C:\Documents and Settings\All Users
2008-07-29 16:10 . 2008-08-27 16:02 <DIR> d-------- C:\WINDOWS\system32\CatRoot2
2008-07-29 16:10 . 2008-07-29 16:13 <DIR> d-------- C:\WINDOWS\system32\CatRoot
2008-07-29 16:04 . 2008-07-29 14:31 <DIR> d-------- C:\Documents and Settings
2008-07-29 16:03 . 2008-07-29 14:29 261 --a------ C:\WINDOWS\system32\$winnt$.inf
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-08-09 14:27 --------- d-----w C:\Documents and Settings\Hendry\Dane aplikacji\Winamp
2008-08-03 15:33 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-08-03 14:54 --------- d-----w C:\Program Files\BearShare
2008-08-01 10:32 --------- d-----w C:\Program Files\Winamp
2008-07-29 12:45 --------- d-----w C:\Documents and Settings\Hendry\Dane aplikacji\ATI
2008-07-29 12:43 --------- d-----w C:\Program Files\ATI Technologies
2008-07-29 12:42 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-07-29 12:37 --------- d-----w C:\Program Files\AMD
2008-07-29 12:36 --------- d-----w C:\Program Files\Realtek Sound Manager
2008-07-29 12:36 --------- d-----w C:\Program Files\AvRack
2008-07-29 12:26 --------- d-----w C:\Program Files\microsoft frontpage
2008-07-29 12:24 --------- d-----w C:\Program Files\Usługi online
.
------- Sigcheck -------
2008-04-14 22:51 112128 9a19ba6d99b8ec3db5b3eff71b0a0bb5 C:\WINDOWS\system32\wuauclt.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 01:44 15360]
"Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-11-14 12:54 2131392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-05-12 21:05 344064]
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2005-05-13 00:23 32768]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2007-08-31 12:25 249896]
"NeroCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 02:38 34672]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784]
"SoundMan"="SOUNDMAN.EXE" [2005-01-21 13:04 77824 C:\WINDOWS\SOUNDMAN.EXE]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 01:44 15360]
C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
Ashampoo AntiVirus Service.lnk - C:\Program Files\Ashampoo\Ashampoo AntiVirus\GuardGui.exe [2008-08-17 12:27:28 669008]
ATI CATALYST - pasek zadaä.lnk - C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe [2005-05-13 00:23:28 32768]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 10:01:04 83360]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=
R2 avGuard;avGuard Service;C:\Program Files\Ashampoo\Ashampoo AntiVirus\ashAvSrv.exe [2008-03-10 13:42]
R3 AshAvScan;AshAvScan;C:\WINDOWS\system32\DRIVERS\AshAvScan.sys [2008-03-12 15:38]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{20abcccc-6b6e-11dd-9c61-0004619f1d1a}]
\Shell\AutoRun\command - RavMon.exe
\Shell\explore\Command - RavMon.exe -e
\Shell\open\Command - RavMon.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{df533735-5d75-11dd-a69f-806d6172696f}]
\Shell\AutoRun\command - G:\AUTORUN\AUTORUN.EXE
.
.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\Hendry\Dane aplikacji\Mozilla\Firefox\Profiles\41ik9q2d.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.pl/
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [url="http://www.gmer.net"]http://www.gmer.net[/url]
Rootkit scan 2008-08-28 13:48:53
Windows 5.1.2600 Dodatek Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2008-08-28 13:50:27 - machine was rebooted
ComboFix-quarantined-files.txt 2008-08-28 11:50:24
Pre-Run: 6,166,749,184 bajtów wolnych
Post-Run: 6,248,677,376 bajt˘w wolnych
246
