wchodzenie na strony

**Posty:** 302 · przez **pilif25** 04 Cze 2008, 20:57

Mam problem taki iż nie mogę wejść na dużą ilość tron, np. allegro, nasza-klasa, nawet nic w googlach nie mogę wyszukać....

Log z hijackthis:

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:57:11, on 2008-06-04 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0013) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe D:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe C:\Program Files\Eset\nod32krn.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe D:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Analog Devices\SoundMAX\SMTray.exe C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe C:\Program Files\Eset\nod32kui.exe C:\WINDOWS\system32\ctfmon.exe D:\Program Files\DAEMON Tools Lite\daemon.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Sony Ericsson\Mobile\audevicemgr.exe C:\PROGRA~1\SONYER~1\Mobile\CONNEC~1\CONNMN~1.EXE c:\Program Files\Intuwave Ltd\Shared\mRouterRunTime\mRouterRuntime.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Mozilla Firefox\firefox.exe D:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - D:\Program Files\Styler\TB\StylerTB.dll O3 - Toolbar: Expressivo - {85F685C3-20D9-4943-95E4-EB4224056C3F} - D:\Program Files\ivo\Expressivo\integr\ih-iexplorer\IH_iexplorer.dll O4 - HKLM\..\Run: [ATIPTA] atiptaxx.exe O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKLM\..\Run: [UVS11 Preload] D:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg O4 - HKLM\..\Run: [PCLEPCI] D:\PROGRA~1\Pinnacle\PPE\PPE.EXE O4 - HKLM\..\Run: [BelferC] C:\Adalex\BelferCommander2\Belfer.exe O4 - HKLM\..\Run: [BM9358f2ef] Rundll32.exe "C:\WINDOWS\system32\pueymgoh.dll",s O4 - HKLM\..\Run: [906bc173] rundll32.exe "C:\WINDOWS\system32\xmcknbpe.dll",b O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - Startup: Styler.lnk = ? O4 - Startup: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Monitor podłączenia telefonu.lnk = ? O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1209623369578 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - D:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- End of file - 6388 bytes

Pomóżcie, bo nie wiem co z tym zrobić...

**Posty:** 8001 · przez **Okocza** 04 Cze 2008, 20:59

fix w hijacku

pilif25 napisał(a):O4 - HKLM\..\Run: [BM9358f2ef] Rundll32.exe "C:\WINDOWS\system32\pueymgoh.dll",s
O4 - HKLM\..\Run: [906bc173] rundll32.exe "C:\WINDOWS\system32\xmcknbpe.dll",b

dodatkowo log z combofixa

**Posty:** 302 · przez **pilif25** 04 Cze 2008, 21:05

No właśnie combofixa nie mam, a google mi nie działa

Jakbyś mógł jakiegoś linka bezpośredniego już do downloadu dać ;]

Nowy log z hijakca:

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:06:55, on 2008-06-04 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0013) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe D:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe C:\Program Files\Eset\nod32krn.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe D:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Analog Devices\SoundMAX\SMTray.exe C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe C:\Program Files\Eset\nod32kui.exe C:\WINDOWS\system32\ctfmon.exe D:\Program Files\DAEMON Tools Lite\daemon.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Sony Ericsson\Mobile\audevicemgr.exe C:\PROGRA~1\SONYER~1\Mobile\CONNEC~1\CONNMN~1.EXE c:\Program Files\Intuwave Ltd\Shared\mRouterRunTime\mRouterRuntime.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Mozilla Firefox\firefox.exe D:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - D:\Program Files\Styler\TB\StylerTB.dll O3 - Toolbar: Expressivo - {85F685C3-20D9-4943-95E4-EB4224056C3F} - D:\Program Files\ivo\Expressivo\integr\ih-iexplorer\IH_iexplorer.dll O4 - HKLM\..\Run: [ATIPTA] atiptaxx.exe O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKLM\..\Run: [UVS11 Preload] D:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg O4 - HKLM\..\Run: [PCLEPCI] D:\PROGRA~1\Pinnacle\PPE\PPE.EXE O4 - HKLM\..\Run: [BelferC] C:\Adalex\BelferCommander2\Belfer.exe O4 - HKLM\..\Run: [BM9358f2ef] Rundll32.exe "C:\WINDOWS\system32\pueymgoh.dll",s O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - Startup: Styler.lnk = ? O4 - Startup: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Monitor podłączenia telefonu.lnk = ? O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1209623369578 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - D:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- End of file - 6240 bytes

**Posty:** 8001 · przez **Okocza** 04 Cze 2008, 21:06

http://www.forum.programosy.pl/jak-generujemy-logi-z-combofixa-oraz-dssa-vt95026.html

wszystko jest w dziale bezpieczeństwo..

**Posty:** 302 · przez **pilif25** 04 Cze 2008, 21:18

Log z combo:

Kod: Zaznacz wszystko: ComboFix 08-06-03.4 - Admin 2008-06-04 21:11:37.1 - [color=red][b]FAT32[/b][/color]x86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.401 [GMT 2:00] Running from: C:\Documents and Settings\Admin\Pulpit\ComboFix.exe * Created a new restore point * Resident AV is active [color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color] . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\BM9358f2ef.xml C:\WINDOWS\pskt.ini C:\WINDOWS\system32\bIiRAcfe.ini C:\WINDOWS\system32\bIiRAcfe.ini2 C:\WINDOWS\system32\efcARiIb.dll C:\WINDOWS\system32\epbnkcmx.ini C:\WINDOWS\system32\hbydbyyi.dll C:\WINDOWS\system32\iyybdybh.ini C:\WINDOWS\system32\mcrh.tmp C:\WINDOWS\system32\pueymgoh.dll C:\WINDOWS\system32\xmcknbpe.dll C:\WINDOWS\system32\yayYOfEW.dll . ((((((((((((((((((((((((( Files Created from 2008-05-04 to 2008-06-04 ))))))))))))))))))))))))))))))) . 2008-06-03 17:49 . 2008-06-03 17:49 <DIR> d-------- C:\Program Files\ScanSoft 2008-06-03 17:43 . 2008-06-03 17:43 <DIR> d-------- C:\Documents and Settings\Admin\Dane aplikacji\Expressivo 2008-06-03 17:18 . 2008-06-03 17:18 <DIR> d-------- C:\Program Files\DFX 2008-06-03 17:18 . 2008-06-03 17:18 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\DFX 2008-06-01 08:55 . 2008-06-01 08:55 54,156 --ah----- C:\WINDOWS\QTFont.qfn 2008-06-01 08:55 . 2008-06-01 08:55 1,409 --a------ C:\WINDOWS\QTFont.for 2008-05-26 20:19 . 2008-05-26 20:19 <DIR> d-------- C:\Documents and Settings\Admin\Dane aplikacji\Media Player Classic 2008-05-25 17:05 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys 2008-05-25 17:05 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\dllcache\usbccgp.sys 2008-05-24 08:40 . 2008-05-24 08:40 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Sony Ericsson 2008-05-24 08:40 . 2004-09-20 13:09 344,064 --a------ C:\WINDOWS\system32\ecsepm.cpl 2008-05-24 08:40 . 2008-05-24 08:40 133 --a------ C:\WINDOWS\ODBC.INI 2008-05-24 08:39 . 2008-05-24 08:39 <DIR> d-------- C:\Program Files\Sony Ericsson 2008-05-24 08:39 . 2008-05-24 08:40 <DIR> d-------- C:\Program Files\Intuwave Ltd 2008-05-23 15:39 . 2008-05-23 15:39 108,144 --a------ C:\WINDOWS\system32\CmdLineExt.dll 2008-05-23 07:39 . 2008-05-23 07:39 1,169 --a------ C:\WINDOWS\bestplayer.ini 2008-05-23 07:39 . 2008-05-23 07:39 66 --a------ C:\WINDOWS\bestplayer.bpp 2008-05-23 07:39 . 2008-05-23 07:39 0 --a------ C:\WINDOWS\bestplayer.bbt 2008-05-22 15:09 . 2008-05-22 15:09 <DIR> d-------- C:\Documents and Settings\Admin\Dane aplikacji\atitray 2008-05-22 14:44 . 2008-05-22 14:44 <DIR> d-------- C:\Program Files\MultiRes 2008-05-22 14:43 . 2008-05-22 14:44 <DIR> d-------- C:\Program Files\Radeon Omega Drivers 2008-05-22 14:43 . 2008-05-22 14:44 472,576 --a------ C:\WINDOWS\Radeon Omega Drivers v4.8.442 Uninstall.exe 2008-05-18 23:17 . 2008-06-03 15:32 237 --a------ C:\WINDOWS\system32\comcweiaic.dll 2008-05-18 23:16 . 2008-05-18 23:17 <DIR> d-------- C:\Adalex 2008-05-18 21:11 . 2008-05-18 21:11 <DIR> d-------- C:\Documents and Settings\Admin\Dane aplikacji\Orbiter 2008-05-18 21:11 . 2008-04-03 15:50 473,272 --a------ C:\WINDOWS\system32\orbiter.taskpanel.ocx 2008-05-18 13:28 . 2008-05-18 13:28 <DIR> d-------- C:\Program Files\directx 2008-05-18 09:34 . 2008-05-18 09:34 0 --a------ C:\WINDOWS\ativpsrm.bin 2008-05-17 19:13 . 2008-03-05 15:56 3,786,760 --a------ C:\WINDOWS\system32\D3DX9_37.dll 2008-05-17 19:13 . 2008-03-05 15:56 1,420,824 --a------ C:\WINDOWS\system32\D3DCompiler_37.dll 2008-05-17 19:13 . 2007-10-12 15:14 1,374,232 --a------ C:\WINDOWS\system32\D3DCompiler_36.dll 2008-05-17 19:13 . 2008-03-05 16:03 479,752 --a------ C:\WINDOWS\system32\XAudio2_0.dll 2008-05-17 19:13 . 2008-02-05 23:07 462,864 --a------ C:\WINDOWS\system32\d3dx10_37.dll 2008-05-17 19:13 . 2007-10-02 09:56 444,776 --a------ C:\WINDOWS\system32\d3dx10_36.dll 2008-05-17 19:13 . 2007-10-22 03:39 267,272 --a------ C:\WINDOWS\system32\xactengine2_10.dll 2008-05-17 19:13 . 2008-03-05 16:03 238,088 --a------ C:\WINDOWS\system32\xactengine3_0.dll 2008-05-17 19:13 . 2008-03-05 16:00 25,608 --a------ C:\WINDOWS\system32\X3DAudio1_3.dll 2008-05-17 15:41 . 2008-05-17 15:41 <DIR> d-------- C:\ATI 2008-05-17 14:28 . 2008-05-17 14:28 <DIR> d--hs---- C:\FOUND.002 2008-05-17 14:20 . 2008-05-17 14:59 4,096 --a------ C:\WINDOWS\system32\crash 2008-05-15 09:45 . 2008-05-15 09:45 <DIR> d-------- C:\Program Files\Common Files\Adobe Systems Shared 2008-05-15 09:45 . 2008-05-15 09:45 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Macrovision 2008-05-15 09:43 . 2008-05-15 09:43 <DIR> d-------- C:\Program Files\Common Files\Adobe 2008-05-12 17:50 . 2008-05-12 17:50 <DIR> d-------- C:\Program Files\All To AVI VCD SVCD DVD MPEG Converter 2008-05-12 17:43 . 2008-05-12 17:43 <DIR> d-------- C:\Program Files\WMV To VCD DVD MPEG Converter Pro 2008-05-12 17:43 . 1999-08-31 13:36 335,872 --a------ C:\WINDOWS\system32\msaudio.ocx 2008-05-11 10:40 . 2008-05-11 10:40 <DIR> d-------- C:\Program Files\Google 2008-05-10 12:33 . 2008-05-10 12:33 <DIR> d-------- C:\Program Files\SystemRequirementsLab 2008-05-10 12:33 . 2008-05-10 12:33 <DIR> d-------- C:\Documents and Settings\Admin\SystemRequirementsLab 2008-05-08 07:40 . 2008-05-08 07:40 39 --a------ C:\WINDOWS\system32\blue.SITENAME 2008-05-08 07:29 . 2008-05-08 07:41 455 --a------ C:\WINDOWS\VFO.VST 2008-05-08 07:23 . 2002-09-24 10:12 2,653,888 --a------ C:\WINDOWS\system32\LTRDG13n.OCX 2008-05-08 07:23 . 2002-09-24 10:12 534,192 --a------ C:\WINDOWS\system32\LTRVW13N.OCX 2008-05-08 07:23 . 2002-09-24 10:12 466,624 --a------ C:\WINDOWS\system32\LTRPR13n.DLL 2008-05-08 07:23 . 2005-07-12 13:25 401,408 --a------ C:\WINDOWS\system32\pvmjpg30.dll 2008-05-08 07:23 . 2002-09-24 10:12 194,248 --a------ C:\WINDOWS\system32\LTRFD13n.DLL 2008-05-08 07:23 . 2002-09-24 10:12 185,856 --a------ C:\WINDOWS\system32\lfpng13s.dll 2008-05-08 07:23 . 2002-09-24 10:12 79,360 --a------ C:\WINDOWS\system32\lfeps13s.dll 2008-05-08 07:23 . 2002-09-24 10:12 74,752 --a------ C:\WINDOWS\system32\lfgif13s.dll 2008-05-08 07:23 . 2003-04-21 15:11 44,544 --a------ C:\WINDOWS\system32\msxml4a.dll 2008-05-08 07:21 . 2003-11-10 16:06 26,624 --------- C:\WINDOWS\system32\PSDrvCheck.JP 2008-05-08 07:21 . 2003-11-10 16:06 26,624 --------- C:\WINDOWS\system32\PSDrvCheck.IT 2008-05-08 07:21 . 2003-11-10 16:06 26,624 --------- C:\WINDOWS\system32\PSDrvCheck.FR 2008-05-08 07:21 . 2003-11-10 16:06 26,624 --------- C:\WINDOWS\system32\PSDrvCheck.ES 2008-05-08 07:21 . 2003-11-10 16:06 26,624 --------- C:\WINDOWS\system32\PSDrvCheck.DE 2008-05-08 07:21 . 2003-11-10 16:06 16,896 --------- C:\WINDOWS\system32\PSDrvCheck.NL 2008-05-08 07:21 . 2003-10-21 10:02 16,896 --------- C:\WINDOWS\system32\PSDrvCheck.KO 2008-05-08 07:20 . 2008-05-08 07:20 <DIR> d-------- C:\Program Files\Microsoft SQL Server 2008-05-08 07:20 . 2002-12-17 17:23 33,340 --a------ C:\WINDOWS\system32\dbmsqlgc.dll 2008-05-08 07:20 . 2002-10-20 15:05 24,576 --a------ C:\WINDOWS\system32\dbmsgnet.dll 2008-05-08 07:19 . 2008-05-08 07:19 <DIR> d-------- C:\WINDOWS\Cache 2008-05-08 07:19 . 2003-03-19 04:04 765,952 --------- C:\WINDOWS\system32\msvcp71d.dll 2008-05-08 07:19 . 2003-03-19 04:03 544,768 --------- C:\WINDOWS\system32\msvcr71d.dll 2008-05-08 07:12 . 2008-05-08 07:12 <DIR> d-------- C:\Program Files\SmartSound Software 2008-05-08 07:12 . 2008-05-08 07:12 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\SmartSound Software Inc 2008-05-08 07:11 . 2004-07-02 16:28 89,088 --a------ C:\WINDOWS\system32\atl71.dll 2008-05-08 07:11 . 2004-07-02 16:28 84,992 --a------ C:\WINDOWS\system32\ATL70.DLL 2008-05-08 07:11 . 2008-05-22 21:22 1,208 --a------ C:\WINDOWS\VFO.INI 2008-05-08 07:10 . 2003-11-25 05:02 196,096 --a------ C:\WINDOWS\system32\macd32.dll 2008-05-08 07:10 . 2003-11-25 05:02 138,752 --a------ C:\WINDOWS\system32\mase32.dll 2008-05-08 07:10 . 2003-11-25 05:02 136,192 --a------ C:\WINDOWS\system32\mamc32.dll 2008-05-08 07:10 . 2003-11-25 05:02 57,856 --a------ C:\WINDOWS\system32\masd32.dll 2008-05-08 07:10 . 2003-11-25 05:02 27,648 --a------ C:\WINDOWS\system32\ma32.dll 2008-05-08 07:08 . 2008-05-08 07:08 <DIR> d-------- C:\Program Files\DivX 2008-05-08 07:08 . 2005-06-02 19:28 171,008 --a------ C:\WINDOWS\system32\drivers\MarvinBus.sys 2008-05-08 07:08 . 2004-02-24 12:04 41,219 --a------ C:\WINDOWS\RSETPATH.exe 2008-05-08 07:06 . 2008-05-08 07:07 <DIR> d-------- C:\WINDOWS\Downloaded Installations 2008-05-08 07:06 . 2008-05-08 07:06 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Pinnacle Studio 2008-05-08 07:04 . 2008-05-08 07:04 <DIR> d-------- C:\Program Files\Pinnacle 2008-05-08 07:04 . 2008-05-08 07:04 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Pinnacle 2008-05-08 07:04 . 2005-02-09 11:59 14,165 --a------ C:\WINDOWS\system32\drivers\Pclepci.sys 2008-05-07 17:23 . 2001-08-17 22:02 9,600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys 2008-05-07 17:23 . 2001-08-17 22:02 9,600 --a------ C:\WINDOWS\system32\dllcache\hidusb.sys 2008-05-05 19:21 . 2008-05-05 19:21 <DIR> d-------- C:\Documents and Settings\Admin\Dane aplikacji\DAEMON Tools 2008-05-05 19:21 . 2008-05-05 19:21 717,296 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2008-05-05 14:24 . 2002-02-18 18:40 6,200 --a------ C:\WINDOWS\system32\INT13EXT.VXD 2008-05-05 14:06 . 2008-05-22 22:02 10 --ah----- C:\lqlurj.gqe 2008-05-05 13:42 . 2008-05-05 13:42 <DIR> d-------- C:\!KillBox 2008-05-04 23:16 . 2008-05-04 23:16 <DIR> d--hs---- C:\FOUND.001 2008-05-04 15:57 . 2008-05-04 15:57 <DIR> d-------- C:\Documents and Settings\Admin\Dane aplikacji\Ulead Systems 2008-05-04 15:56 . 2008-05-04 15:56 <DIR> d-------- C:\Program Files\Windows Media Components 2008-05-04 15:56 . 2008-05-04 15:57 <DIR> d-------- C:\Program Files\Common Files\InterVideo 2008-05-04 15:56 . 2008-05-04 15:56 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\InterVideo 2008-05-04 15:56 . 2007-03-27 19:56 210,456 --a------ C:\WINDOWS\system32\IVIresizeW7.dll 2008-05-04 15:56 . 2007-03-27 19:56 206,360 --a------ C:\WINDOWS\system32\IVIresizeA6.dll 2008-05-04 15:56 . 2007-03-27 19:56 198,168 --a------ C:\WINDOWS\system32\IVIresizeP6.dll 2008-05-04 15:56 . 2007-03-27 19:56 198,168 --a------ C:\WINDOWS\system32\IVIresizeM6.dll 2008-05-04 15:56 . 2007-03-27 19:56 194,072 --a------ C:\WINDOWS\system32\IVIresizePX.dll 2008-05-04 15:56 . 2007-03-27 19:56 26,136 --a------ C:\WINDOWS\system32\IVIresize.dll 2008-05-04 15:55 . 2008-05-04 15:55 <DIR> d-------- C:\Program Files\Common Files\Ulead Systems 2008-05-04 15:55 . 2008-05-04 15:55 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Ulead Systems 2008-05-04 14:19 . 2008-05-04 14:19 262,144 --a------ C:\WINDOWS\system32\wrap_oal.dll 2008-05-04 14:19 . 2008-05-04 14:19 86,016 --a------ C:\WINDOWS\system32\OpenAL32.dll 2008-05-04 11:39 . 2008-05-04 11:39 <DIR> d-------- C:\Documents and Settings\Admin\Dane aplikacji\Publish Providers 2008-05-04 11:38 . 2008-05-04 11:38 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\TEMP 2008-05-04 11:38 . 2008-05-04 11:38 <DIR> d-------- C:\Documents and Settings\Admin\Dane aplikacji\Sony 2008-05-04 11:36 . 2008-05-04 11:36 <DIR> d-------- C:\Program Files\Vstplugins 2008-05-04 11:36 . 2008-05-04 11:36 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Sony 2008-05-04 11:26 . 2008-05-04 11:26 <DIR> d-------- C:\WINDOWS\system32\XPSViewer 2008-05-04 11:25 . 2008-05-04 11:25 <DIR> d-------- C:\Program Files\Reference Assemblies 2008-05-04 11:25 . 2006-06-29 13:07 14,048 --------- C:\WINDOWS\system32\spmsg2.dll 2008-05-04 11:07 . 2008-05-04 11:07 <DIR> d-------- C:\Documents and Settings\Admin\Dane aplikacji\Sony Setup 2008-05-04 10:30 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys 2008-05-04 10:30 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\dllcache\usbprint.sys . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-05-01 15:05 --------- d-----w C:\Documents and Settings\Admin\Dane aplikacji\LimeWire 2008-05-01 06:58 --------- d-----w C:\Documents and Settings\Admin\Dane aplikacji\Styler 2008-05-01 05:46 --------- d-----w C:\Documents and Settings\Admin\Dane aplikacji\vlc 2008-05-01 05:45 --------- d-----w C:\Program Files\Windows Media Bonus Pack for Windows XP 2008-04-30 21:20 --------- d-----w C:\Program Files\Winamp Remote 2008-04-30 21:20 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\OrbNetworks 2008-04-30 21:08 --------- d-----w C:\Program Files\Windows Media Connect 2 2008-04-29 07:58 512,096 ----a-w C:\WINDOWS\system32\drivers\amon.sys 2008-04-29 07:58 298,104 ----a-w C:\WINDOWS\system32\imon.dll 2008-04-29 07:58 15,424 ----a-w C:\WINDOWS\system32\drivers\nod32drv.sys 2008-04-29 07:58 --------- d-----w C:\Program Files\ESET 2008-04-29 07:58 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\DBC3FDEC-D5F4-439C-9A18-EF454A74E3DE 2008-04-29 07:57 --------- d-----w C:\Program Files\CCleaner 2008-04-29 07:56 --------- d-----w C:\Program Files\QuickTime 2008-04-29 07:56 --------- d-----w C:\Program Files\Foxit Software 2008-04-29 07:56 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer 2008-04-29 07:55 --------- d-----w C:\Program Files\Apple Software Update 2008-04-29 07:55 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\CyberLink 2008-04-29 07:55 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Apple 2008-04-29 07:54 --------- d-----w C:\Program Files\MSBuild 2008-04-29 07:54 --------- d-----w C:\Program Files\Microsoft Works 2008-04-29 07:53 --------- d-----w C:\Program Files\Microsoft.NET 2008-04-29 07:51 --------- d-----w C:\Program Files\CyberLink 2008-04-29 07:50 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help 2008-04-29 07:49 --------- d-----w C:\Program Files\Winamp 2008-04-29 07:46 --------- d-----w C:\Program Files\Skype 2008-04-29 07:46 --------- d-----w C:\Program Files\Common Files\Skype 2008-04-29 07:46 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Skype 2008-04-29 07:46 --------- d-----w C:\Documents and Settings\Admin\Dane aplikacji\Skype 2008-04-29 07:45 --------- d-----w C:\Program Files\Java 2008-04-29 07:45 --------- d-----w C:\Program Files\Common Files\Java 2008-04-29 07:44 --------- d-----w C:\Documents and Settings\Admin\Dane aplikacji\Talkback 2008-04-29 07:43 --------- d-----w C:\Program Files\Opera 2008-04-29 07:43 --------- d-----w C:\Documents and Settings\Admin\Dane aplikacji\Gadu-Gadu 2008-04-29 07:42 --------- d-----w C:\Program Files\Vplayer 2008-04-29 07:42 --------- d-----w C:\Program Files\Real Alternative 2008-04-29 07:42 --------- d-----w C:\Program Files\Gadu-Gadu 2008-04-29 07:41 --------- d-----w C:\Program Files\ffdshow 2008-04-29 07:40 --------- d-----w C:\Program Files\Common Files\Ahead 2008-04-29 07:40 --------- d-----w C:\Program Files\Ahead 2008-04-29 07:40 --------- d-----w C:\Program Files\7-Zip 2008-04-29 07:36 --------- d-----w C:\Program Files\Analog Devices 2008-04-29 07:02 --------- d-----w C:\Documents and Settings\Admin\Dane aplikacji\ATI 2008-04-29 06:58 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-04-29 06:58 --------- d-----w C:\Program Files\Common Files\InstallShield 2008-04-29 06:58 --------- d-----w C:\Program Files\ATI Technologies 2008-04-29 06:09 --------- d-----w C:\Program Files\Lavalys 2008-04-29 05:57 --------- d-----w C:\Program Files\microsoft frontpage 2008-04-29 05:55 --------- d-----w C:\Program Files\Usługi online 2008-03-29 06:21 2,873,856 ----a-w C:\WINDOWS\system32\dllcache\ati2mtag.sys 2008-03-29 03:24 46,080 ----a-w C:\WINDOWS\system32\amdpcom32.dll 2008-03-07 13:16 991,744 ----a-w C:\WINDOWS\system32\syssetup.dll 2008-03-07 13:16 1,548,288 ----a-w C:\WINDOWS\system32\sfcfiles.dll 2008-01-29 10:51 113,664 ----a-w C:\WINDOWS\inf\hdaudio.sys . ------- Sigcheck ------- 2004-08-03 21:44 1224704 a09e5271d2737ca1b5aa98a1f68d4be5 C:\WINDOWS\explorer.exe 2004-08-03 21:44 1224704 a09e5271d2737ca1b5aa98a1f68d4be5 C:\WINDOWS\system32\dllcache\explorer.exe 2004-08-03 21:44 1224704 a09e5271d2737ca1b5aa98a1f68d4be5 C:\WINDOWS\icon_TMP\explorer.exe 2004-08-03 21:44 1033728 379098a96e6c165b659de7e4328010ea C:\WINDOWS\system_backup\explorer.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-11-14 12:54 2131392] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 21:44 15360] "DAEMON Tools Lite"="D:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-04-01 11:39 486856] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ATIPTA"="atiptaxx.exe" [2006-02-22 03:05 344064 C:\WINDOWS\system32\atiptaxx.exe] "Smapp"="C:\Program Files\Analog Devices\SoundMAX\SMTray.exe" [2003-05-05 08:57 143360] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784] "nod32kui"="C:\Program Files\Eset\nod32kui.exe" [2008-04-29 09:58 949376] "UVS11 Preload"="D:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe" [2007-09-12 12:17 340136] "PinnacleDriverCheck"="C:\WINDOWS\system32\PSDrvCheck.exe" [2004-03-11 00:26 406016] "PCLEPCI"="D:\PROGRA~1\Pinnacle\PPE\PPE.EXE" [2004-02-03 15:13 49152] "BelferC"="C:\Adalex\BelferCommander2\Belfer.exe" [2004-06-26 10:32 1026560] C:\Documents and Settings\Admin\Menu Start\Programy\Autostart\ Styler.lnk - C:\Documents and Settings\Admin\Dane aplikacji\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe [2008-05-01 08:55:25 15086] Tworzenie wycink˘w ekranu i uruchamianie programu OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 20:24:54 98632] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2008-05-15 09:44:57 113664] Monitor podˆĄczenia telefonu.lnk - C:\Program Files\Sony Ericsson\Mobile\audevicemgr.exe [2008-05-24 08:40:04 754176] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "vidc.I420"= vdrcodec.dll "msacm.dvacm"= C:\PROGRA~1\COMMON~1\ULEADS~1\Vio\Dvacm.acm "msacm.MPEGacm"= C:\PROGRA~1\COMMON~1\ULEADS~1\MPEG\MPEGacm.acm "msacm.ulmp3acm"= C:\PROGRA~1\COMMON~1\ULEADS~1\MPEG\ulmp3acm.acm "VIDC.MJPG"= Pvmjpg30.dll "VIDC.PIM1"= pclepim1.dll [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 "UpdatesDisableNotify"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"= "C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"= "C:\\Program Files\\Winamp Remote\\bin\\Orb.exe"= "C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"= "C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"= "D:\\Program Files\\Pinnacle\\Studio 10\\programs\\RM.exe"= "D:\\Program Files\\Pinnacle\\Studio 10\\programs\\Studio.exe"= "D:\\Program Files\\Pinnacle\\Studio 10\\programs\\PMSRegisterFile.exe"= "D:\\Program Files\\Pinnacle\\Studio 10\\programs\\umi.exe"= "D:\\Program Files\\Desktop Orbiter\\orbiter.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "17873:TCP"= 17873:TCP:f R1 atitray;atitray;C:\Program Files\Radeon Omega Drivers\v4.8.442\ATI Tray Tools\atitray.sys [2007-11-05 09:55] S3 EverestDriver;Lavalys EVEREST Kernel Driver;C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt [2005-08-18 00:00] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{45a0325b-19a6-11dd-a830-000c6e82a0c8}] \Shell\AutoRun\command - I:\Setup.exe . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-06-04 21:15:59 Windows 5.1.2600 Dodatek Service Pack 2 FAT NTAPI scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\EverestDriver] "ImagePath"="\??\C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt" . --------------------- DLLs Loaded Under Running Processes --------------------- PROCESS: C:\WINDOWS\system32\lsass.exe -> C:\Program Files\Eset\pr_imon.dll . ------------------------ Other Running Processes ------------------------ . C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe D:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe C:\PROGRA~1\SONYER~1\Mobile\CONNEC~1\CONNMN~1.EXE D:\Program Files\Styler\Styler.exe C:\Program Files\Eset\nod32krn.exe C:\Program Files\Intuwave Ltd\Shared\mRouterRunTime\mRouterRuntime.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe D:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe . ************************************************************************** . Completion time: 2008-06-04 21:17:38 - machine was rebooted ComboFix-quarantined-files.txt 2008-06-04 19:17:36 Pre-Run: 11,351,900,160 bajtów wolnych Post-Run: 11,274,387,456 bajt˘w wolnych 306

Jak na razie allegro i inne działają

wchodzenie na strony

wchodzenie na strony

Kto jest na forum