prawdopodobnie Explorer

Witam
Mam pytanko co prawda nic takiego się nie dzieje ale to wkurzające, cos z explerem nie tak ;/
Gdy uruchomię komuter po prawej stronie mam ikonki jedna automatycznie mi się przemieszcza w drugą stronę

http://img21.imageshack.us/my.php?image=pulpit1mt3.jpg

tak samo się dzieje jeśli np. od nowa załaduje się po będzie czy zakończonym zadaniu (tzw. Odświeżenie z automatu) bądź jeśli zamknę z menadżera zadań i uruchomię ponownie explorera
Jeśli dodam kolejną ikonie poniżej w 2 rzędzie obok to mi 2 przeskoczą

http://img172.imageshack.us/my.php?image=pulpit2qw7.jpg

Natomiast jeśli usunę czy oddalę z 2 rzędu ikonki to nic się nie przemieszcza i jest w porządku

http://img527.imageshack.us/my.php?image=pulpit3pt9.jpg

Czy ktoś się spodkał z czym podobnym ?? wiem ze to pierdółka ale wkurzająca ;/

pozdrawiam

Jeżeli podejrzewasz explorera to go napraw
Wkładasz plyte instalacyjna XP, ustawiasz bootowanie w biosie itd...
Przechodzisz rpzez proces instalacji i tam, gdzie instalator pyta co robic (instalowac od nowa, naprawic czy uzyc konsoli?) wybierasz "R" czyli "Uzyj konsoli odzyskiwania"
Wpisujesz expand litera_cdromu:\i386\explorer.ex_ c:\windows\explorer.exe

Chociaż też możliwe że to wina wirusów daj logi z hijaka i combofixa
http://forum.idg.pl/bezpieczenstwo_kompute...ia-t118804.html

Witam
explorer na pewno już jest do naprawy, ale to jest winna jakiegoś sterownika ;/
co do naprawy to dekompresia ,kopiowanie - expand nie przeszedł
logi powinny być czyste ale na wszelki wypadek :
ComboFix 09-02-19.01 - Bolo lol 2009-02-21 12:58:44.4 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1250.48.1045.18.1023.690 [GMT 1:00]
Uruchomiony z: e:\bolo\Ciekawe i takie tam\Bezpieczeństwo i takie tam\ComboFix.exe
AV: Avira AntiVir PersonalEdition *On-access scanning disabled* (Updated)
FW: ZoneAlarm Pro Firewall *enabled*
* Utworzono nowy punkt przywracania
.

((((((((((((((((((((((((( Pliki utworzone od 2009-01-21 do 2009-02-21 )))))))))))))))))))))))))))))))
.

2009-02-17 00:17 . 2009-02-17 00:31 <DIR> d-------- c:\program files\NAPI-PROJEKT
2009-02-14 02:47 . 2009-02-21 12:59 1,080 --a------ c:\windows\system32\settingsbkup.sfm
2009-02-14 02:47 . 2009-02-21 12:59 1,080 --a------ c:\windows\system32\settings.sfm
2009-02-13 22:47 . 2006-05-24 04:38 143,872 -ra------ c:\windows\system32\drivers\ctsfm2k.sys
2009-02-13 22:47 . 2006-05-24 04:38 116,224 -ra------ c:\windows\system32\drivers\ctoss2k.sys
2009-02-13 22:47 . 2006-05-24 04:38 21,504 -ra------ c:\windows\system32\sfman32.dll
2009-02-13 22:47 . 2006-05-24 05:46 8,192 -ra------ c:\windows\system32\drivers\pfmodnt.sys
2009-02-13 22:31 . 2009-02-21 12:59 64,900 --a------ c:\windows\system32\DVCState-{00000001-00000000-00000006-00001102-00000005-002C1102}.rfx
2009-02-13 22:31 . 2009-02-21 12:59 54,692 --a------ c:\windows\system32\BMXStateBkp-{00000001-00000000-00000006-00001102-00000005-002C1102}.rfx
2009-02-13 22:31 . 2009-02-21 12:59 54,692 --a------ c:\windows\system32\BMXState-{00000001-00000000-00000006-00001102-00000005-002C1102}.rfx
2009-02-13 22:07 . 2008-02-04 10:27 102,400 --a------ c:\windows\system32\cttele32.dll
2009-02-13 22:06 . 2009-02-13 22:06 <DIR> d-------- c:\program files\OpenAL
2009-02-13 21:55 . 2009-02-13 21:55 <DIR> d-------- c:\program files\Common Files\Creative Labs Shared
2009-02-13 21:51 . 2008-09-25 15:40 20,888,640 --a------ c:\windows\system32\AppSetup.exe
2009-02-12 20:50 . 2009-02-12 20:51 0 --a------ C:\Debug.QC6
2009-02-03 18:53 . 2009-02-03 18:53 <DIR> d--h----- c:\windows\system32\GroupPolicy

.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-19 19:54 --------- d-----w c:\documents and settings\Bolo lol\Dane aplikacji\Skype
2009-02-19 19:53 --------- d-----w c:\documents and settings\Bolo lol\Dane aplikacji\skypePM
2009-02-17 11:15 --------- d-----w c:\documents and settings\Bolo lol\Dane aplikacji\Creative
2009-02-17 11:12 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\Creative
2009-02-17 11:07 --------- d-----w c:\program files\Creative
2009-02-17 11:05 --------- d--h--w c:\program files\InstallShield Installation Information
2009-02-15 20:27 410,984 ----a-w c:\windows\system32\deploytk.dll
2009-02-15 20:27 --------- d-----w c:\program files\Java
2009-02-13 21:30 444,952 ----a-w c:\windows\system32\wrap_oal.dll
2009-02-04 20:26 --------- d-----w c:\program files\EsetOnlineScanner
2009-01-26 19:01 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\Spybot - Search & Destroy
2009-01-10 08:30 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\SlySoft
2009-01-10 06:48 6,914,461 ----a-w c:\windows\Internet Logs\tvDebug.zip
2009-01-09 00:34 --------- d-----w c:\documents and settings\Bolo lol\Dane aplikacji\GanymedeNet
2009-01-03 19:02 18,048 ----a-w c:\windows\system32\drivers\lirsgt.sys
2009-01-03 19:02 165,376 ----a-w c:\windows\system32\drivers\atksgt.sys
2009-01-03 18:59 --------- d-----w c:\program files\Common Files\DirectX
2008-12-31 13:59 24,872 ----a-w c:\windows\system32\drivers\ElbyCDIO.sys
2008-12-30 23:53 103,360 ----a-w c:\windows\system32\drivers\AnyDVD.sys
2008-12-27 01:32 2,365,440 ----a-w c:\windows\Internet Logs\xDB1.tmp
2008-12-21 15:14 --------- d---a-w c:\documents and settings\All Users\Dane aplikacji\TEMP
.

((((((((((((((((((((((((((((( snapshot@2009-02-12_20.59.05,78 )))))))))))))))))))))))))))))))))))))))))
.
- 2000-08-31 07:00:00 28,672 ----a-w c:\windows\NIRCMD.exe
+ 2000-08-31 07:00:00 29,696 ----a-w c:\windows\NIRCMD.exe
+ 2006-12-05 13:52:40 48,400 ----a-w c:\windows\system32\AddCat.exe
+ 2008-07-18 08:39:18 595,249 ----a-w c:\windows\system32\APOIM32.exe
- 2009-02-12 17:52:57 16,384 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2009-02-21 12:00:44 16,384 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2009-02-15 20:32:52 24,064 ----a-w c:\windows\system32\config\systemprofile\Dane aplikacji\Sun\Java\Deployment\cache\6.0\37\2c4a0065-396975e3-n\Decora-D3D.dll
+ 2009-02-15 20:32:53 57,344 ----a-w c:\windows\system32\config\systemprofile\Dane aplikacji\Sun\Java\Deployment\cache\6.0\37\3976f065-3eba8a9c-n\Decora-SSE.dll
+ 2009-02-15 20:32:50 499,712 ----a-w c:\windows\system32\config\systemprofile\Dane aplikacji\Sun\Java\Deployment\cache\6.0\38\39ba6e6-225746dc-n\jmc.dll
+ 2009-02-15 20:32:50 503,808 ----a-w c:\windows\system32\config\systemprofile\Dane aplikacji\Sun\Java\Deployment\cache\6.0\38\39ba6e6-225746dc-n\msvcp71.dll
+ 2009-02-15 20:32:50 348,160 ----a-w c:\windows\system32\config\systemprofile\Dane aplikacji\Sun\Java\Deployment\cache\6.0\38\39ba6e6-225746dc-n\msvcr71.dll
+ 2009-02-15 20:32:51 20,480 ----a-w c:\windows\system32\config\systemprofile\Dane aplikacji\Sun\Java\Deployment\cache\6.0\45\4f710eed-757955ac-n\gluegen-rt.dll
+ 2009-02-15 20:32:51 315,392 ----a-w c:\windows\system32\config\systemprofile\Dane aplikacji\Sun\Java\Deployment\cache\6.0\62\6baea4fe-27f019df-n\jogl.dll
+ 2009-02-15 20:32:52 20,480 ----a-w c:\windows\system32\config\systemprofile\Dane aplikacji\Sun\Java\Deployment\cache\6.0\62\6baea4fe-27f019df-n\jogl_awt.dll
+ 2009-02-15 20:32:52 114,688 ----a-w c:\windows\system32\config\systemprofile\Dane aplikacji\Sun\Java\Deployment\cache\6.0\62\6baea4fe-27f019df-n\jogl_cg.dll
- 2009-02-12 17:52:57 32,768 ----a-w c:\windows\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\index.dat
+ 2009-02-21 12:00:44 32,768 ----a-w c:\windows\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\index.dat
- 2009-02-12 17:52:57 32,768 ----a-w c:\windows\system32\config\systemprofile\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat
+ 2009-02-21 12:01:41 32,768 ----a-w c:\windows\system32\config\systemprofile\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat
+ 2008-10-07 22:37:44 15,360 ----a-w c:\windows\system32\Ct20xspi.dll
+ 2007-03-13 09:32:14 89,336 ----a-w c:\windows\system32\ctpxst32.exe
+ 2008-10-07 22:41:40 2,560 ----a-w c:\windows\system32\CtxfiRes.dll
+ 2008-10-07 22:26:18 275,836 ----a-w c:\windows\system32\Data\CTP0462W.DAT
+ 2008-10-07 22:26:20 357,983 ----a-w c:\windows\system32\Data\CTP0678W.DAT
+ 2008-10-07 22:26:16 275,257 ----a-w c:\windows\system32\Data\CTP0760W.DAT
+ 2008-04-13 23:15:16 60,160 -c--a-w c:\windows\system32\dllcache\drmk.sys
+ 2008-04-13 23:46:38 141,056 -c--a-w c:\windows\system32\dllcache\ks.sys
+ 2008-04-14 21:50:36 4,096 -c--a-w c:\windows\system32\dllcache\ksuser.dll
+ 2008-04-13 23:49:42 146,048 -c--a-w c:\windows\system32\dllcache\portcls.sys
+ 2008-04-13 23:15:16 49,408 -c--a-w c:\windows\system32\dllcache\stream.sys
+ 2008-10-08 00:21:38 171,032 ----a-w c:\windows\system32\drivers\CT20XUT.sys
+ 2008-10-08 00:21:44 1,324,056 ----a-w c:\windows\system32\drivers\CTEXFIFX.sys
+ 2008-10-08 00:21:40 72,728 ----a-w c:\windows\system32\drivers\CTHWIUT.sys
- 2008-04-13 22:15:16 60,160 ----a-w c:\windows\system32\drivers\drmk.sys
+ 2008-04-13 23:15:16 60,160 ----a-w c:\windows\system32\drivers\drmk.sys
- 2008-04-13 22:46:38 141,056 ----a-w c:\windows\system32\drivers\ks.sys
+ 2008-04-13 23:46:38 141,056 ----a-w c:\windows\system32\drivers\ks.sys
- 2008-04-13 22:49:42 146,048 ----a-w c:\windows\system32\drivers\portcls.sys
+ 2008-04-13 23:49:42 146,048 ----a-w c:\windows\system32\drivers\portcls.sys
- 2008-04-13 22:15:16 49,408 ----a-w c:\windows\system32\drivers\stream.sys
+ 2008-04-13 23:15:16 49,408 ----a-w c:\windows\system32\drivers\stream.sys
- 2009-02-06 19:42:29 144,792 ----a-w c:\windows\system32\java.exe
+ 2009-02-15 20:27:34 144,792 ----a-w c:\windows\system32\java.exe
- 2009-02-06 19:42:29 144,792 ----a-w c:\windows\system32\javaw.exe
+ 2009-02-15 20:27:34 144,792 ----a-w c:\windows\system32\javaw.exe
- 2009-02-06 19:42:29 148,888 ----a-w c:\windows\system32\javaws.exe
+ 2009-02-15 20:27:34 148,888 ----a-w c:\windows\system32\javaws.exe
- 2008-04-14 20:50:36 4,096 ----a-w c:\windows\system32\ksuser.dll
+ 2008-04-14 21:50:36 4,096 ----a-w c:\windows\system32\ksuser.dll
+ 2008-10-07 22:42:42 60,928 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\a3d.dll
+ 2008-10-07 22:42:16 48,640 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\ac3api.dll
+ 2006-12-05 13:52:40 48,400 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\AddCat.exe
+ 2008-07-18 08:39:18 595,249 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\APOIM32.exe
+ 2008-09-25 14:40:32 20,888,640 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\AppSetup.exe
+ 2008-10-07 22:27:36 193,024 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\ct_oal.dll
+ 2008-10-07 22:37:44 15,360 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\Ct20xspi.dll
+ 2008-10-07 22:27:32 50,688 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\ctasio.dll
+ 2008-10-07 22:27:26 53,248 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\ctdproxy.dll
+ 2008-10-07 22:30:32 114,688 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\ctemupia.dll
+ 2008-10-07 22:26:44 74,752 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\ctosuser.dll
+ 2007-03-13 09:32:14 89,336 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\ctpxst32.exe
+ 2008-02-04 09:27:58 102,400 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\cttele32.dll
+ 2008-10-07 22:41:38 41,472 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\CTxfiBtn.dll
+ 2008-10-07 22:41:36 23,552 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\Ctxfihlp.exe
+ 2008-10-07 22:37:46 47,104 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\CTxfiReg.exe
+ 2008-10-07 22:37:38 1,212,928 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\CTxfispi.exe
+ 2008-10-07 22:41:38 39,424 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\CTxfiSpk.dll
+ 2008-10-07 22:23:26 36,864 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\devreg.dll
+ 2001-07-11 09:51:00 77,824 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\eaxac3.dll
+ 2008-10-07 22:23:50 7,680 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\enlocstr.exe
+ 2008-10-07 22:23:46 12,800 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\killapps.exe
+ 2008-04-23 05:07:50 805,400 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\oalinst.exe
+ 2008-10-07 22:26:36 68,608 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\piaproxy.dll
+ 2008-10-07 22:26:38 16,384 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\regplib.exe
+ 2008-10-07 22:26:44 10,240 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\sfman32.dll
+ 2008-10-07 22:26:42 108,544 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Common\i386\sfms32.dll
+ 2008-04-13 23:15:16 60,160 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\i386\drmk.sys
+ 2008-04-13 23:46:38 141,056 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\i386\ks.sys
+ 2008-04-14 21:50:36 4,096 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\i386\ksuser.dll
+ 2008-04-13 23:49:42 146,048 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\i386\portcls.sys
+ 2008-04-13 23:15:16 49,408 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\i386\stream.sys
+ 2008-04-14 20:51:58 23,552 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\i386\wdmaud.drv
+ 2008-10-07 22:41:40 2,560 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\lang\i386\CtxfiRes.dll
+ 2008-10-07 22:31:14 321,512 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\ctdlang.dat
+ 2008-10-07 22:31:14 56,509 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\ctdnlstr.dat
+ 2008-10-07 22:23:52 26,919 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\ctd20x.dat
+ 2008-10-07 22:26:14 275,836 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\CTP0460W.DAT
+ 2008-10-07 22:26:18 275,836 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\CTP0462W.DAT
+ 2008-10-07 22:26:14 276,282 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\CTP0463W.DAT
+ 2008-10-07 22:26:14 275,836 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\CTP0464W.DAT
+ 2008-10-07 22:26:16 275,836 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\CTP0465W.DAT
+ 2008-10-07 22:26:14 275,836 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\CTP0466W.DAT
+ 2008-10-07 22:26:16 275,836 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\CTP0468W.DAT
+ 2008-10-07 22:26:16 275,836 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\CTP0469W.DAT
+ 2008-10-07 22:26:16 275,508 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\CTP046AW.DAT
+ 2008-10-07 22:26:16 275,508 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\CTP046BW.DAT
+ 2008-10-07 22:26:16 275,508 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\CTP046CW.DAT
+ 2008-10-07 22:26:14 276,094 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\CTP0550W.DAT
+ 2008-10-07 22:26:18 275,766 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\CTP055AW.DAT
+ 2008-10-07 22:26:20 357,983 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\CTP0678W.DAT
+ 2008-10-07 22:26:14 357,983 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\CTP0679W.DAT
+ 2008-10-07 22:26:16 277,688 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\CTP0730W.DAT
+ 2008-10-07 22:26:18 277,688 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\CTP073AW.DAT
+ 2008-10-07 22:26:16 275,257 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\CTP0760W.DAT
+ 2008-10-07 22:23:52 2,091 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\Data\cts20x.dat
+ 2008-10-08 00:21:38 171,032 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\i386\CT20XUT.sys
+ 2008-10-08 00:21:46 511,000 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\i386\ctac32k.sys
+ 2008-10-08 00:21:50 526,232 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\i386\ctaud2k.sys
+ 2008-10-07 22:44:28 86,016 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\i386\ctcoinst.dll
+ 2008-10-08 00:21:54 347,080 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\i386\ctdvda2k.sys
+ 2008-10-07 22:44:28 181,248 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\Win2K_XP\i386\ctdvin tools\msconfig\startupreg\LogitechVideoTray]
--a------ 2004-02-25 17:06 212992 e:\programy\Logitech\Video\LogiTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LVCOMSX]
--a------ 2004-02-25 15:15 221184 c:\windows\system32\LVCOMSX.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
--a------ 2001-07-09 10:50 155648 c:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"e:\\Programy\\Tlen.pl\\tlen.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"e:\programy\Microsoft ActiveSync\rapimgr.exe"= e:\programy\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"e:\programy\Microsoft ActiveSync\wcescomm.exe"= e:\programy\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"e:\programy\Microsoft ActiveSync\WCESMgr.exe"= e:\programy\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"e:\\Programy\\FlashGet universal\\FlashGet.exe"=
"e:\\Programy\\Gadu-Gadu\\GG.EXE"=
"e:\\Programy\\BitComet\\BitComet.exe"=
"e:\\Programy\\HLSW\\hlsw.exe"=
"e:\\Games\\Vave\\Steam\\SteamApps\\szakal_21@o2.pl\\counter-strike\\hl.exe"=
"e:\\Games II\\Need For Speed Underground\\Speed.exe"=
"e:\\Programy\\eMule\\eMule.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service

R1 msikbd2k;Multimedia Keyboard Filter Driver;c:\windows\system32\drivers\msikbd2k.sys [2008-06-15 6656]
R2 nhksrv;Netropa NHK Server;c:\program files\Keymaestro\Multimedia Keyboard\nhksrv.exe [2008-06-15 28672]
R2 ousbehci;OrangeWare USB Enhanced Host Controller Service;c:\windows\system32\drivers\ousbehci.sys [2008-06-15 44928]
R3 ousb2hub;OrangeWare USB 2.0 Root Hub Support;c:\windows\system32\drivers\ousb2hub.sys [2008-06-15 55936]
S3 cpuz;cpuz;\??\e:\programy\cpuz.sys --> e:\programy\cpuz.sys [?]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2009-02-13 79360]
S3 CT20XUT.SYS;CT20XUT.SYS;c:\windows\system32\drivers\CT20XUT.sys [2008-10-08 171032]
S3 CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.sys [2008-10-08 171032]
S3 CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\system32\drivers\CTEXFIFX.sys [2008-10-08 1324056]
S3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.sys [2008-10-08 1324056]
S3 CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\system32\drivers\CTHWIUT.sys [2008-10-08 72728]
S3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.sys [2008-10-08 72728]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-11-06 34064]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{10b6d480-cc6a-11dd-87b8-000129f56c0d}]
\Shell\AutoRun\command - 8.bat
\Shell\open\Command - 8.bat

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{19ca1133-3b05-11dd-9ca6-806d6172696f}]
\Shell\AutoRun\command - F:\install.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d012b4d2-7e97-11dd-ab56-806d6172696f}]
\Shell\AutoRun\command - F:\setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f83febd2-d386-11dd-87d1-000129f56c0d}]
\Shell\AutoRun\command - 8.bat
\Shell\open\Command - 8.bat
.
.
------- Skan uzupełniający -------
.
uStart Page = hxxp://www.wp.pl/
IE: &Download All by FlashGet - e:\programy\FlashGet universal\ComDlls\Bhoall.htm
IE: &Download by FlashGet - e:\programy\FlashGet universal\ComDlls\Bholink.htm
IE: Pobierz wszystkie VIdeo za pomocą BitComet - e:\programy\BitComet\BitComet.exe/AddVideo.htm
IE: Pobierz wszystko za pomocą BitComet - e:\programy\BitComet\BitComet.exe/AddAllLink.htm
IE: Pobierz za pomocą BitComet - e:\programy\BitComet\BitComet.exe/AddLink.htm
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-21 13:01:41
Windows 5.1.2600 Dodatek Service Pack 3 NTFS

skanowanie ukrytych procesów ...

skanowanie ukrytych wpisów autostartu ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
CTHelper = CTHELPER.EXE?
CTxfiHlp = CTXFIHLP.EXE?

skanowanie ukrytych plików ...

skanowanie pomyślnie ukończone
ukryte pliki: 0

**************************************************************************
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------

- - - - - - - > 'lsass.exe'(1120)
c:\windows\system32\relog_ap.dll
.
------------------------ Pozostałe uruchomione procesy ------------------------
.
c:\windows\system32\ZoneLabs\vsmon.exe
c:\program files\Creative\Shared Files\CTAudSvc.exe
e:\programy\Avira\AntiVir PersonalEdition Classic\avguard.exe
c:\program files\Common Files\Acronis\Schedule2\schedul2.exe
e:\programy\Avira\AntiVir PersonalEdition Classic\sched.exe
c:\program files\Java\jre6\bin\jqs.exe
e:\programy\Logitech\MouseWare\system\em_exec.exe
c:\windows\system32\nvsvc32.exe
c:\program files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
c:\program files\Keymaestro\Multimedia Keyboard\Traymon.exe
c:\program files\Keymaestro\Onscreen Display\osd.exe
e:\programy\MICROS~2\rapimgr.exe
.
**************************************************************************
.
Czas ukończenia: 2009-02-21 13:03:16 - komputer został uruchomiony ponownie
ComboFix-quarantined-files.txt 2009-02-21 12:03:13
ComboFix2.txt 2009-02-12 20:23:16
ComboFix3.txt 2009-02-12 19:59:50
ComboFix4.txt 2008-12-01 18:50:17

Przed: 11 815 411 712 bajtów wolnych
Po: 11,796,008,960 bajtów wolnych

WindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(1)partition(1)\WINDOWS
[operating systems]
h:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(1)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

325 --- E O F --- 2009-02-11 22:50:43