Bardzo bym prosił o sprawdzenie logów i jak coś jest źle to proszę o wytłumaczenie co mam zrobić / jakim programem, itd.
Z góry bardzo dziękuję
ComboFix 08-06-20.4 - p. Malson 2008-06-25 2:11:45.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.752 [GMT 2:00]
Running from: C:\Documents and Settings\p. Malson\Pulpit\ComboFix.exe
* Created a new restore point
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\WINNT\system32\avi.dll
C:\WINNT\system32\ff_liba52.dll
C:\WINNT\system32\ff_libdts.dll
C:\WINNT\system32\ff_libfaad2.dll
C:\WINNT\system32\ff_libmad.dll
C:\WINNT\system32\ff_realaac.dll
C:\WINNT\system32\ff_samplerate.dll
C:\WINNT\system32\ff_tremor.dll
C:\WINNT\system32\ff_unrar.dll
C:\WINNT\system32\ff_wmv9.dll
C:\WINNT\system32\libavcodec.dll
C:\WINNT\system32\libmpeg2_ff.dll
C:\WINNT\system32\libmplayer.dll
C:\WINNT\system32\mkunicode.dll
C:\WINNT\system32\mkx.dll
C:\WINNT\system32\mkzlib.dll
C:\WINNT\system32\mmfinfo.dll
C:\WINNT\system32\mp4.dll
C:\WINNT\system32\ogm.dll
C:\WINNT\system32\ts.dll
.
((((((((((((((((((((((((( Files Created from 2008-05-25 to 2008-06-25 )))))))))))))))))))))))))))))))
.
2008-06-24 22:40 . 2008-06-14 20:01 273,024 --------- C:\WINNT\system32\drivers\bthport.sys
2008-06-24 22:40 . 2008-06-14 20:01 273,024 -----c--- C:\WINNT\system32\dllcache\bthport.sys
2008-06-24 22:12 . 2007-07-09 15:20 582,656 -----c--- C:\WINNT\system32\dllcache\rpcrt4.dll
2008-06-24 20:23 . 2008-05-08 14:28 202,752 -----c--- C:\WINNT\system32\dllcache\rmcast.sys
2008-06-24 20:22 . 2006-12-07 07:29 2,374,472 -----c--- C:\WINNT\system32\dllcache\wmvcore.dll
2008-06-24 10:45 . 2008-06-24 11:11 <DIR> d-------- C:\hegames
2008-06-24 10:45 . 1994-09-21 02:15 12,800 -ra------ C:\WINNT\system32\wing32.dll
2008-06-24 10:45 . 2008-06-24 10:46 191 --a------ C:\WINNT\hegames.ini
2008-06-24 10:17 . 2008-06-24 10:17 <DIR> d-------- C:\KART
2008-06-24 01:47 . 2008-06-24 01:47 468 --a------ C:\WINNT\system32\splitter.ax
2008-06-24 01:47 . 2008-06-24 01:47 468 --a------ C:\WINNT\system32\mmamr.ax
2008-06-24 01:47 . 2008-06-24 01:47 468 --a------ C:\WINNT\system32\FLVSplitter.ax
2008-06-24 01:47 . 2008-06-24 01:47 468 --a------ C:\WINNT\system32\ffdshow.ax.manifest
2008-06-24 01:47 . 2008-06-24 01:47 468 --a------ C:\WINNT\system32\ffdshow.ax
2008-06-24 01:47 . 2008-06-24 01:47 468 --a------ C:\WINNT\system32\CoreVorbis.ax
2008-06-24 01:47 . 2008-06-24 01:47 468 --a------ C:\WINNT\system32\CoreAVCDecoder.ax
2008-06-24 01:47 . 2008-06-24 01:47 468 --a------ C:\WINNT\system32\CoreAAC.ax
2008-06-24 01:31 . 2008-06-24 01:45 <DIR> d-------- C:\Program Files\Winamp
2008-06-24 01:31 . 2008-06-24 01:45 <DIR> d-------- C:\Documents and Settings\p. Malson\Dane aplikacji\Winamp
2008-06-24 01:31 . 2008-06-24 01:31 290,816 --a------ C:\WINNT\system32\l3codeca.acm
2008-06-24 01:31 . 2008-06-24 01:31 98,304 --a------ C:\WINNT\system32\l3codecx.ax
2008-06-24 01:30 . 2008-06-24 01:30 301,568 --a------ C:\WINNT\system32\l3codecp.acm
2008-06-24 01:29 . 2008-06-24 01:29 577,536 --a------ C:\WINNT\system32\ac3filter.ax
2008-06-24 01:25 . 2008-06-24 01:25 892,928 --a------ C:\WINNT\system32\iconv.dll
2008-06-24 01:23 . 2008-06-24 01:23 237,568 --a------ C:\WINNT\system32\OggDS.dll
2008-06-24 01:21 . 2008-06-24 01:21 921,600 --a------ C:\WINNT\system32\vorbisenc.dll
2008-06-24 01:18 . 2008-06-24 01:18 1,415,680 --a------ C:\WINNT\system32\WMV9VCM.dll
2008-06-24 01:18 . 2008-06-24 01:18 188,416 --a------ C:\WINNT\system32\vorbis.dll
2008-06-24 01:18 . 2008-06-24 01:18 45,056 --a------ C:\WINNT\system32\ogg.dll
2008-06-24 01:14 . 2008-06-24 01:14 245,760 --a------ C:\WINNT\system32\mplvpx.dll
2008-06-24 01:14 . 2008-06-24 01:14 106,496 --a------ C:\WINNT\system32\lmpgspl.ax
2008-06-24 01:14 . 2008-06-24 01:14 94,208 --a------ C:\WINNT\system32\lmpgvd.ax
2008-06-24 01:13 . 2008-06-24 01:13 391,168 --a------ C:\WINNT\system32\i263_32.drv
2008-06-24 01:13 . 2008-06-24 01:13 86,528 --a------ C:\WINNT\system32\DVDVideo.ax
2008-06-24 01:13 . 2008-06-24 01:13 9,216 --a------ C:\WINNT\system32\cpuinf32.dll
2008-06-24 01:12 . 2008-06-24 01:12 630,784 --a------ C:\WINNT\system32\divxdec.ax
2008-06-24 01:10 . 2008-06-24 01:10 352,401 --a------ C:\WINNT\system32\DivXMedia.ax
2008-06-24 01:09 . 2008-06-24 01:09 524,288 --a------ C:\WINNT\system32\DivXsm.exe
2008-06-24 01:08 . 2008-06-24 01:08 344,394 --a------ C:\WINNT\system32\xvid.ax
2008-06-24 01:07 . 2008-06-24 01:07 755,027 --a------ C:\WINNT\system32\xvidcore.dll
2008-06-24 01:06 . 2008-06-24 01:06 <DIR> d-------- C:\Program Files\MarBit
2008-06-24 00:58 . 2008-06-24 00:58 <DIR> d-------- C:\Program Files\Sunbelt Software
2008-06-24 00:46 . 2008-06-24 00:46 <DIR> d-------- C:\Program Files\Opera
2008-06-24 00:40 . 2008-06-24 00:40 <DIR> d-------- C:\Program Files\Gadu-Gadu
2008-06-24 00:40 . 2008-06-24 09:34 <DIR> d-------- C:\Documents and Settings\p. Malson\Gadu-Gadu
2008-06-24 00:22 . 2006-08-17 14:43 337,408 -----c--- C:\WINNT\system32\dllcache\netapi32.dll
2008-06-24 00:13 . 2008-06-24 00:13 <DIR> d-------- C:\Program Files\IrfanView
2008-06-23 23:29 . 2008-06-23 23:29 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\NVIDIA
2008-06-23 19:23 . 2006-07-12 07:19 208,896 --a------ C:\WINNT\system32\nvudisp.exe
2008-06-23 19:23 . 2008-06-25 01:51 73,451 --a------ C:\WINNT\system32\nvapps.xml
2008-06-23 19:23 . 2006-07-12 07:19 16,960 --a------ C:\WINNT\system32\nvdisp.nvu
2008-06-23 19:14 . 2005-07-20 11:08 33,280 -ra------ C:\WINNT\system32\nvconrmins.dll
2008-06-23 19:02 . 2008-06-25 02:15 <DIR> d--h----- C:\Documents and Settings\Administrator\Ustawienia lokalne
2008-06-23 19:02 . 2008-06-23 20:27 <DIR> d-------- C:\Documents and Settings\Administrator\Ulubione
2008-06-23 19:02 . 2008-06-23 18:33 <DIR> d--h----- C:\Documents and Settings\Administrator\Szablony
2008-06-23 19:02 . 2008-06-23 20:27 <DIR> d-------- C:\Documents and Settings\Administrator\Pulpit
2008-06-23 19:02 . 2008-06-23 20:27 <DIR> d-------- C:\Documents and Settings\Administrator\Moje dokumenty
2008-06-23 19:02 . 2008-06-23 20:27 <DIR> dr------- C:\Documents and Settings\Administrator\Menu Start
2008-06-23 19:02 . 2008-06-23 20:27 <DIR> dr-h----- C:\Documents and Settings\Administrator\Dane aplikacji
2008-06-23 19:02 . 2008-06-23 19:02 <DIR> d-------- C:\Documents and Settings\Administrator
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-24 14:40 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-06-23 23:53 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-06-23 17:21 60,416 ----a-w C:\WINNT\ALCFDRTM.EXE
2008-06-23 16:54 --------- d-----w C:\Program Files\Thomson
2008-06-23 16:48 --------- d-----w C:\Program Files\Realtek AC97
2008-06-23 16:36 --------- d-----w C:\Program Files\Usługi online
2008-05-08 12:28 202,752 ----a-w C:\WINNT\system32\drivers\rmcast.sys
2008-05-07 05:03 1,291,776 ----a-w C:\WINNT\system32\quartz.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2006-03-02 01:22 577536 C:\WINNT\soundman.exe]
"SpeedTouch USB Diagnostics"="C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" [2004-08-06 09:45 877568]
"NvCplDaemon"="C:\WINNT\system32\NvCpl.dll" [2006-07-12 07:19 7626752]
"nwiz"="nwiz.exe" [2006-07-12 07:19 1519616 C:\WINNT\system32\nwiz.exe]
"NvMediaCenter"="C:\WINNT\system32\NvMcTray.dll" [2006-07-12 07:19 86016]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [ ]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nlsf"="move" []
"tscuninstall"="C:\WINNT\system32\tscupgrd.exe" [2004-08-04 02:33 44544]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.I420"= i263_32.drv
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
R1 fwdrv;Firewall Driver;C:\WINNT\system32\drivers\fwdrv.sys [2007-04-26 10:21]
R1 khips;Kerio HIPS Driver;C:\WINNT\system32\drivers\khips.sys [2007-04-26 10:21]
R2 SPF4;Sunbelt Personal Firewall 4;"C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe" [2007-04-26 10:21]
S3 RushTopDevice;RushTopDevice;C:\Program Files\MSI\Core Center\RushTop.sys []
*Newly Created Service* - CATCHME
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-25 02:15:41
Windows 5.1.2600 Dodatek Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-06-25 2:17:05
ComboFix-quarantined-files.txt 2008-06-25 00:17:00
Pre-Run: 15,897,530,368 bajtów wolnych
Post-Run: 15,935,787,008 bajtów wolnych
145 --- E O F --- 2008-06-24 23:32:47




Moja zawartość
Nie podano


