do sprawdzenia - wszystko sie sypie

[CZIkenss]

Prosze o sprawdzenie loga. Problem wyglada tak ze po ok. 15 min dzialania komputera wszytko przestaje dzialac. Np. Mam wlaczonego firefoxa i winampa i explorera po kilku minutach gdy chce cos zrobic w explorerze i dupa wszytko przestaje dzialac oprocz wlasnie firefoxa i winampa, pasek zada jest jakby to powiedziec "niedostepny" wiec nie mozna nawet normalnie zrestartowac komputera. Nawet menedzer zadan nie reaguje.

Kod: Zaznacz wszystko

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:18:49, on 2007-09-08
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\RunDll32.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\PROGRA~1\softwin\BITDEF~1\bdmcon.exe
C:\PROGRA~1\softwin\BITDEF~1\bdnagent.exe
C:\PROGRA~1\softwin\BITDEF~1\bdswitch.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Softwin\BitDefender9\vsserv.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\WINDOWS\System32\cmd.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.4.29.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL (file missing)
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe"  -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [BDMCon] c:\PROGRA~1\softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [BDNewsAgent] "C:\PROGRA~1\softwin\BITDEF~1\bdnagent.exe"
O4 - HKLM\..\Run: [BDSwitchAgent] "C:\PROGRA~1\softwin\BITDEF~1\bdswitch.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O16 - DPF: {83AFB5CA-ED35-11D4-A452-0080C8D85045} (GameDesire Poker Games) - http://67.15.101.3/g_bin/pl/poker_2_0_0_48.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - Unknown owner - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe (file missing)
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - Unknown owner - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe (file missing)
O23 - Service: AVG E-mail Scanner (AVGEMS) - Unknown owner - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe (file missing)
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender9\vsserv.exe
O23 - Service: Windows Accounts Driver (WindowsRemote) - Unknown owner - C:\WINDOWS\System32\server.exe (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe

--
End of file - 7118 bytes


[wojtas]

daj loga z combofixa

[CZIkenss]

Kod: Zaznacz wszystko

ComboFix 07-09-08.7 - "Administrator" 2007-09-08 21:46:44.2 - NTFSx86
Microsoft Windows XP Professional  5.1.2600.0.1250.48.1045.18.249 [GMT 2:00]
.

(((((((((((((((((((((((((   Files Created from 2007-08-08 to 2007-09-08  )))))))))))))))))))))))))))))))
.

2007-09-08 21:39   51,200   --a------   C:\WINDOWS\NirCmd.exe
2007-09-02 02:41   81,984   --a------   C:\WINDOWS\system32\bdod.bin
2007-09-02 02:32   73,728   --a------   C:\WINDOWS\system32\sockspy.dll
2007-09-02 02:31   77,824   --a------   C:\WINDOWS\system32\xcomm.dll
2007-09-02 02:31   28   --a------   C:\WINDOWS\system32\getfile.dat
2007-09-01 22:08   <DIR>   d--------   C:\Program Files\Trend Micro
2007-09-01 21:28   57,344   --a--c---   C:\WINDOWS\system32\dllcache\drmk.sys
2007-09-01 21:28   57,344   --a------   C:\WINDOWS\system32\drivers\drmk.sys
2007-09-01 21:28   135,040   --a--c---   C:\WINDOWS\system32\dllcache\portcls.sys
2007-09-01 21:28   135,040   --a------   C:\WINDOWS\system32\drivers\portcls.sys
2007-09-01 15:42   <DIR>   d--------   C:\Program Files\MidiMeow
2007-09-01 15:26   <DIR>   d--------   C:\Temp
2007-09-01 15:03   <DIR>   d--------   C:\DOCUME~1\ADMINI~1\DANEAP~1\Leadertech
2007-08-31 21:09   <DIR>   d--------   C:\DOCUME~1\ADMINI~1\Phone Browser
2007-08-31 21:09   <DIR>   d--------   C:\DOCUME~1\ADMINI~1\DANEAP~1\Datalayer
2007-08-31 21:07   <DIR>   d--------   C:\DOCUME~1\ADMINI~1\DANEAP~1\Nokia Multimedia Player
2007-08-31 21:05   <DIR>   d--------   C:\DOCUME~1\ADMINI~1\DANEAP~1\Nokia
2007-08-31 21:04   <DIR>   d--------   C:\Program Files\DIFX
2007-08-31 21:04   <DIR>   d--------   C:\Program Files\Common Files\Nokia
2007-08-31 21:03   8,704   --a------   C:\WINDOWS\system32\drivers\nmwcdc.sys
2007-08-31 21:03   50,688   --a------   C:\WINDOWS\system32\nmwcdcls.dll
2007-08-31 21:03   4,608   --a------   C:\WINDOWS\system32\nmwcdlog.dll
2007-08-31 21:03   30,720   --a------   C:\WINDOWS\system32\nmwcdcocls.dll
2007-08-31 21:03   13,312   --a------   C:\WINDOWS\system32\drivers\nmwcdcm.sys
2007-08-31 21:03   127,488   --a------   C:\WINDOWS\system32\drivers\nmwcd.sys
2007-08-31 21:03   <DIR>   d--------   C:\Program Files\Nokia
2007-08-31 21:03   <DIR>   d--------   C:\Program Files\Common Files\PCSuite
2007-08-31 21:03   <DIR>   d--------   C:\DOCUME~1\ALLUSE~1\DANEAP~1\PC Suite
2007-08-31 21:03   <DIR>   d--------   C:\DOCUME~1\ADMINI~1\DANEAP~1\PC Suite
2007-08-31 21:02   <DIR>   d--------   C:\DOCUME~1\ALLUSE~1\DANEAP~1\Downloaded Installations
2007-08-31 20:03   <DIR>   d--------   C:\DOCUME~1\ADMINI~1\DANEAP~1\AdobeUM
2007-08-31 20:01   <DIR>   d--hs----   C:\WINDOWS\ftpcache
2007-08-31 12:34   98,304   --a------   C:\WINDOWS\system32\CmdLineExt.dll
2007-08-31 12:27   <DIR>   d--------   C:\Program Files\Sierra
2007-08-30 20:00   <DIR>   d--------   C:\DOCUME~1\ADMINI~1\DANEAP~1\Skype
2007-08-30 19:59   <DIR>   d--------   C:\Program Files\Skype
2007-08-30 19:59   <DIR>   d--------   C:\Program Files\Common Files\Skype
2007-08-30 19:59   <DIR>   d--------   C:\DOCUME~1\ALLUSE~1\DANEAP~1\Skype
2007-08-29 15:22   <DIR>   d--------   C:\DOCUME~1\ADMINI~1\DANEAP~1\Help
2007-08-25 23:56   32   --a------   C:\WINDOWS\system87sG.dat
2007-08-25 17:03   <DIR>   d--------   C:\DOCUME~1\ADMINI~1\DANEAP~1\Apple Computer
2007-08-25 16:44   <DIR>   d--------   C:\Program Files\QuickTime
2007-08-25 16:44   <DIR>   d--------   C:\DOCUME~1\ALLUSE~1\DANEAP~1\Apple Computer
2007-08-25 16:43   <DIR>   d--------   C:\Program Files\Apple Software Update
2007-08-25 16:43   <DIR>   d--------   C:\DOCUME~1\ALLUSE~1\DANEAP~1\Apple
2007-08-22 02:10   1,308   --a------   C:\WINDOWS\rising1.exe
2007-08-22 02:09   3,009   --a------   C:\naver.vbs
2007-08-21 22:12   <DIR>   d--------   C:\Program Files\TrackMania Nations ESWC
2007-08-11 19:09   <DIR>   d--------   C:\Program Files\PartyGaming

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-09-08 21:44   ---------   d--------   C:\Program Files\Steam
2007-09-04 20:08   ---------   d--------   C:\DOCUME~1\ADMINI~1\DANEAP~1\teamspeak2
2007-09-04 17:12   ---------   d--------   C:\DOCUME~1\ADMINI~1\DANEAP~1\Tlen.pl
2007-09-02 13:15   ---------   d--------   C:\Program Files\SubEdit-Player
2007-09-02 02:32   137   --a------   C:\Program Files\INSTALL.LOG
2007-09-02 01:47   ---------   d--------   C:\Program Files\F-Secure
2007-09-01 23:09   ---------   d--------   C:\Program Files\Diablo II
2007-09-01 21:28   ---------   d--------   C:\Program Files\C-Media 3D Audio
2007-09-01 15:07   ---------   d--------   C:\Program Files\AskTBar
2007-08-31 22:36   ---------   d--------   C:\Program Files\NAPI-PROJEKT
2007-08-31 12:26   ---------   d--h-----   C:\Program Files\InstallShield Installation Information
2007-08-11 14:46   ---------   d--------   C:\DOCUME~1\ADMINI~1\DANEAP~1\GanymedeNet
2007-08-03 17:45   ---------   d--------   C:\Program Files\BearShare
2007-08-03 17:41   ---------   d--------   C:\Program Files\MagicISO
2007-08-03 17:40   3102   --a------   C:\WINDOWS\system32\ealregsnapshot1.reg
2007-08-03 17:40   ---------   d--------   C:\Program Files\Winamp
2007-08-03 17:40   ---------   d--------   C:\Program Files\Electronic Arts
2007-08-03 17:39   ---------   d--------   C:\Program Files\BearFlix
2007-07-04 01:23   21840   --a----t-   C:\WINDOWS\system32\SIntfNT.dll
2007-07-04 01:23   17212   --a----t-   C:\WINDOWS\system32\SIntf32.dll
2007-07-04 01:23   12067   --a----t-   C:\WINDOWS\system32\SIntf16.dll
2007-05-16 19:13   2048   --a------   C:\Program Files\ES27NT.CAT
2002-07-11 13:50   16857   --a------   C:\Program Files\ES25XP.CAT
2002-07-11 13:50   16091   --a------   C:\Program Files\ES25NT.CAT
2002-07-11 09:51   16502   --a------   C:\Program Files\ES23NT.CAT
2002-07-11 09:50   17272   --a------   C:\Program Files\ES23XP.CAT
2002-06-20 16:54   550   --a------   C:\Program Files\LAYOUT.BIN
2002-06-20 16:54   25996   --a------   C:\Program Files\DATA1.HDR
2002-06-20 16:53   135   --a------   C:\Program Files\SETUP.INI
2002-04-16 12:37   149966   --a------   C:\Program Files\SETUP.INX
2001-11-23 06:08   712704   --a------   C:\WINDOWS\inf\OTHER\AUDIO3D.DLL
2001-09-05 06:03   168448   --a------   C:\Program Files\SETUP.EXE
2001-09-05 05:24   344923   --a------   C:\Program Files\IKERNEL.EX_
.

(((((((((((((((((((((((((((((   snapshot_2007-09-08_214225,03   )))))))))))))))))))))))))))))))))))))))))
.
----a-w            16,384 2007-09-08 19:44:45  C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
----a-w            32,768 2007-09-08 19:44:45  C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\index.dat
----a-w            32,768 2007-09-08 19:44:45  C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat
----atw            16,384 2007-09-08 19:45:24  C:\WINDOWS\Temp\Perflib_Perfdata_a94.dat
.
----a-w            16,384 2007-09-08 19:16:11  C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
----a-w            32,768 2007-09-08 19:16:11  C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\index.dat
----a-w            32,768 2007-09-08 19:16:11  C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Temporary Internet Files\Content.IE5\index.dat
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Cmaudio"="cmicnfg.cpl" []
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2006-05-10 09:48 C:\WINDOWS\KHALMNPR.Exe]
"Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2005-10-26 16:17]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2006-01-12 15:40]
"DAEMON Tools-1033"="C:\Program Files\D-Tools\daemon.exe" [2004-08-22 17:05]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"NvCplDaemon"="C:\WINDOWS\System32\NvCpl.dll" [2005-04-01 16:16]
"nwiz"="nwiz.exe" [2005-04-01 16:16 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\System32\NvMcTray.dll" [2005-04-01 16:16]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-06-29 06:24]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" []
"PCSuiteTrayApplication"="C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.exe" [2006-06-15 12:36]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" []
"BDMCon"="c:\PROGRA~1\softwin\BITDEF~1\bdmcon.exe" [2007-09-02 02:32]
"BDNewsAgent"="C:\PROGRA~1\softwin\BITDEF~1\bdnagent.exe" [2005-06-09 10:28]
"BDSwitchAgent"="C:\PROGRA~1\softwin\BITDEF~1\bdswitch.exe" [2005-04-06 13:09]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2001-08-02 07:14]
"Komunikator"="C:\Program Files\Tlen.pl\tlen.exe" [2007-02-12 12:01]
"Steam"="c:\program files\steam\steam.exe" [2007-06-28 11:21]
"Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-05-10 16:36]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-08-25 21:54]
"PcSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2006-06-27 16:21]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" []

C:\DOCUME~1\ALLUSE~1\MENUST~1\Programy\AUTOST~1\
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [2004-07-29 16:14:12]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=sockspy.dll

R2 LBeepKE;LBeepKE;C:\WINDOWS\System32\Drivers\LBeepKE.sys
S2 WindowsRemote;Windows Accounts Driver;C:\WINDOWS\System32\server.exe

*Newly Created Service* - ALG
*Newly Created Service* - IPNAT
.
Contents of the 'Scheduled Tasks' folder
"2007-09-08 15:41:01 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
.
**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-09-08 21:47:46
Windows 5.1.2600  NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-09-08 21:48:46
C:\ComboFix-quarantined-files.txt ... 2007-09-08 21:48
C:\ComboFix2.txt ... 2007-09-08 21:42
.
   --- E O F ---


[Red]

O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [BDMCon] c:\PROGRA~1\softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [BDNewsAgent] "C:\PROGRA~1\softwin\BITDEF~1\bdnagent.exe
C:\Program Files\F-Secure

przy takiej ilości antywirusów żaden system nie pociągnie,niestety

[CZIkenss]

Aktualnie mam tylko BitDefendera nie wiem jakim cudem zostal jeszcze f-secure, wszystko odinstalowalem. A AVG w ogole nie chcial sie zainstalowac jaks blad wyskakiwal.

Czyli wywalic te wpisy i pogrubione killboxem czy co?

[wojtas]

skasuj pogrubione do kosza oprocz BitDefendera