ComboFix 08-08-19.06 - bestek 2008-08-21 14:49:44.3 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.1482 [GMT 2:00]
Running from: C:\Documents and Settings\bestek\Pulpit\ComboFix.exe
* Resident AV is active
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\bestek\Pulpit\Error Cleaner.url
C:\Documents and Settings\bestek\Pulpit\Privacy Protector.url
C:\Documents and Settings\bestek\Pulpit\Spyware&Malware Protection.url
C:\Documents and Settings\bestek\Ulubione\Error Cleaner.url
C:\Documents and Settings\bestek\Ulubione\Privacy Protector.url
C:\Documents and Settings\bestek\Ulubione\Spyware&Malware Protection.url
C:\WINDOWS\emtb.exe
C:\WINDOWS\privacy_danger
C:\WINDOWS\privacy_danger\images\capt.gif
C:\WINDOWS\privacy_danger\images\danger.jpg
C:\WINDOWS\privacy_danger\images\down.gif
C:\WINDOWS\privacy_danger\images\spacer.gif
C:\WINDOWS\privacy_danger\index.htm
C:\WINDOWS\rafbsvnx.dll
C:\WINDOWS\tsxngabr.dll
C:\WINDOWS\twmxbsqrsqm.dll
C:\WINDOWS\vtqnxfko.dll
.
((((((((((((((((((((((((( Files Created from 2008-07-21 to 2008-08-21 )))))))))))))))))))))))))))))))
.
2008-08-21 12:22 . 2008-08-21 12:23 <DIR> d-------- C:\Program Files\TransAng3
2008-08-21 12:22 . 2008-08-21 12:52 <DIR> d-------- C:\Documents and Settings\bestek\Dane aplikacji\TransAng3
2008-08-20 21:51 . 2008-08-20 21:52 <DIR> d-------- C:\Documents and Settings\bestek\Dane aplikacji\Media Player Classic
2008-08-20 14:40 . 1998-10-29 15:45 306,688 --a------ C:\WINDOWS\IsUninst.exe
2008-08-20 14:40 . 2004-09-27 14:12 78,896 --a------ C:\WINDOWS\system32\GEARAspi.dll
2008-08-20 14:40 . 2004-09-14 10:58 13,872 --a------ C:\WINDOWS\system32\drivers\GEARAspiWDM.sys
2008-08-20 14:39 . 1999-07-07 22:01 171,967 --a------ C:\WINDOWS\system32\Odbcjet.hlp
2008-08-20 14:39 . 2003-07-17 12:56 139,264 --a------ C:\WINDOWS\system32\AfpT.dll
2008-08-20 14:39 . 2003-07-17 12:56 89,216 --a------ C:\WINDOWS\system32\drivers\FO_PAnt.sys
2008-08-20 14:39 . 2002-10-09 13:53 43,904 --a------ C:\WINDOWS\system32\drivers\AFPAnsi.sys
2008-08-20 14:39 . 2002-10-09 15:55 22,435 --a------ C:\WINDOWS\system32\AFPAnsi.vxd
2008-08-20 14:39 . 1999-07-07 22:02 7,348 --a------ C:\WINDOWS\system32\Odbcjet.cnt
2008-08-20 14:37 . 2008-08-21 14:48 <DIR> d-a------ C:\Documents and Settings\All Users\Dane aplikacji\TEMP
2008-08-20 14:32 . 2008-08-20 14:32 <DIR> d-------- C:\WINDOWS\speech
2008-08-19 18:04 . 2008-08-19 18:05 <DIR> d-------- C:\Program Files\QuickTime
2008-08-19 18:04 . 2008-08-19 18:04 <DIR> d-------- C:\Program Files\Apple Software Update
2008-08-19 18:04 . 2008-08-19 18:04 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer
2008-08-19 18:04 . 2008-08-19 18:04 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Apple
2008-08-19 15:25 . 2008-08-19 15:25 <DIR> d-------- C:\Program Files\7-Zip
2008-08-19 15:02 . 2008-08-19 15:02 <DIR> d-------- C:\Program Files\vanBasco's Karaoke Player
2008-08-19 14:30 . 2008-08-19 14:30 <DIR> d-------- C:\WINDOWS\Sun
2008-08-19 14:29 . 2008-08-19 14:29 <DIR> d-------- C:\Program Files\Sun
2008-08-19 14:29 . 2008-06-10 02:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-08-19 14:11 . 2008-08-19 14:11 <DIR> dr-h----- C:\Documents and Settings\bestek\Dane aplikacji\SecuROM
2008-08-19 14:11 . 2008-08-19 14:11 107,888 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2008-08-19 13:53 . 2008-08-19 13:53 <DIR> d-------- C:\Program Files\DAEMON Tools Lite
2008-08-19 13:51 . 2008-08-19 13:51 <DIR> d-------- C:\Documents and Settings\bestek\Dane aplikacji\DAEMON Tools
2008-08-19 13:04 . 2008-08-19 13:04 <DIR> d-------- C:\Documents and Settings\bestek\Dane aplikacji\Gadu-Gadu
2008-08-19 13:03 . 2008-08-19 13:29 <DIR> d-------- C:\Documents and Settings\bestek\Gadu-Gadu
2008-08-19 12:48 . 2008-08-19 12:48 <DIR> d-------- C:\Program Files\Common Files\Java
2008-08-19 12:44 . 2008-08-19 12:44 <DIR> d-------- C:\Program Files\Pivot Stickfigure Animator
2008-08-19 12:34 . 2008-08-19 12:34 61 ---hs---- C:\WINDOWS\cnerolf.dat
2008-08-19 12:10 . 2008-08-21 14:49 <DIR> d-------- C:\Documents and Settings\bestek\Dane aplikacji\uTorrent
2008-08-19 12:07 . 2008-08-19 12:07 <DIR> d-------- C:\Documents and Settings\bestek\Dane aplikacji\Talkback
2008-08-19 11:26 . 2008-08-19 11:26 <DIR> d-------- C:\Documents and Settings\bestek\Dane aplikacji\ESET
2008-08-19 11:26 . 2008-08-19 11:26 <DIR> d-------- C:\Documents and Settings\bestek\Dane aplikacji\ATI
2008-08-19 11:25 . 2004-08-04 00:44 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2008-08-19 11:24 . 2007-02-26 12:19 <DIR> d--h----- C:\Documents and Settings\bestek\Ustawienia lokalne
2008-08-19 11:24 . 2008-08-21 14:51 <DIR> dr------- C:\Documents and Settings\bestek\Ulubione
2008-08-19 11:24 . 2007-02-26 11:25 <DIR> d--h----- C:\Documents and Settings\bestek\Szablony
2008-08-19 11:24 . 2008-08-21 14:51 <DIR> d-------- C:\Documents and Settings\bestek\Pulpit
2008-08-19 11:24 . 2008-08-20 16:22 <DIR> dr------- C:\Documents and Settings\bestek\Moje dokumenty
2008-08-19 11:24 . 2008-08-19 12:10 <DIR> dr------- C:\Documents and Settings\bestek\Menu Start
2008-08-19 11:24 . 2008-08-21 14:51 <DIR> dr-h----- C:\Documents and Settings\bestek\Dane aplikacji
2008-08-19 11:24 . 2008-08-21 14:02 <DIR> d-------- C:\Documents and Settings\bestek
2008-08-19 11:15 . 2008-08-19 11:27 <DIR> d-------- C:\ComboFix-1
2008-08-19 10:37 . 2008-03-03 14:25 5,702 --ah----- C:\WINDOWS\nod32restoretemdono.reg
2008-08-19 10:37 . 2008-03-03 18:21 568 --ah----- C:\WINDOWS\nod32fixtemdono.reg
2008-08-19 10:35 . 2008-08-19 10:35 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\ESET
2008-08-18 18:12 . 2008-08-21 10:13 86,016 --a------ C:\WINDOWS\tqwolser.exe
2008-08-18 17:50 . 2005-05-26 15:34 2,297,552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
2008-08-18 17:45 . 2008-08-18 17:50 <DIR> d--h----- C:\WINDOWS\msdownld.tmp
2008-08-18 17:45 . 2008-08-18 17:45 <DIR> d-------- C:\WINDOWS\Logs
2008-08-18 17:25 . 2008-08-18 17:25 1,227 --a------ C:\WINDOWS\mozver.dat
2008-08-18 17:12 . 2008-08-18 17:12 <DIR> d-------- C:\Program Files\Fantastic Flame Screensaver
2008-08-18 17:12 . 2008-08-21 09:35 511 --a------ C:\WINDOWS\Fantastic Flame Screensaver.ini
2008-08-18 16:48 . 2008-08-20 21:52 69 --a------ C:\WINDOWS\NeroDigital.ini
2008-08-18 16:35 . 2008-08-18 16:35 <DIR> d-------- C:\Program Files\Kaspersky Lab
2008-08-18 16:35 . 2008-08-19 11:51 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab
2008-08-18 16:35 . 2008-08-21 14:03 1,544,736 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2008-08-18 16:35 . 2008-08-21 14:03 278,560 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2008-08-18 16:35 . 2008-08-18 16:44 96,976 --a------ C:\WINDOWS\system32\drivers\klin.dat
2008-08-18 16:35 . 2008-08-18 16:44 87,855 --a------ C:\WINDOWS\system32\drivers\klick.dat
2008-08-18 16:35 . 2008-08-21 14:03 16,292 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
2008-08-18 16:35 . 2008-08-21 14:03 5,176 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.idx
2008-08-18 16:34 . 2008-08-18 16:34 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files
2008-08-18 16:31 . 2008-08-19 11:53 <DIR> d-------- C:\pobrane torrenty
2008-08-18 15:54 . 2008-08-19 12:12 <DIR> d-------- C:\Program Files\uTorrent
2008-08-18 15:50 . 2008-08-18 15:50 <DIR> d-------- C:\Program Files\Ares
2008-08-18 15:46 . 2008-08-19 13:51 716,272 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2008-08-18 15:44 . 2008-08-18 15:44 0 --a------ C:\WINDOWS\nsreg.dat
2008-08-18 15:23 . 2008-08-18 15:23 <DIR> d-------- C:\WINDOWS\system32\AlertModule
2008-08-18 15:23 . 2004-08-23 14:49 40,960 --a------ C:\WINDOWS\system32\FTRTSVC.exe
2008-08-18 15:23 . 2005-10-06 15:55 36,864 --a------ C:\WINDOWS\system32\IfHelper.dll
2008-08-18 14:55 . 2004-08-23 14:50 32,768 --a------ C:\WINDOWS\system32\WooDial2000.dll
2008-08-18 14:54 . 2008-08-18 14:54 <DIR> d-------- C:\Program Files\Thomson
2008-08-18 14:54 . 2003-12-08 11:53 70,688 --a------ C:\WINDOWS\system32\drivers\alcaudsl.sys
2008-08-18 14:54 . 2003-12-08 11:53 53,600 --a------ C:\WINDOWS\system32\drivers\alcan5wn.sys
2008-08-18 14:54 . 2003-12-08 11:53 5,606 --a------ C:\WINDOWS\system32\stci.dll
2008-08-18 14:54 . 2003-12-08 11:53 5,280 --a------ C:\WINDOWS\system32\drivers\alcawh.sys
2008-08-18 14:54 . 2003-12-08 11:53 3,968 --a------ C:\WINDOWS\system32\drivers\alcacr.sys
2008-08-18 14:53 . 2008-08-18 14:53 <DIR> d-------- C:\WINDOWS\system32\Adobe
2008-08-18 14:53 . 2008-08-18 14:53 <DIR> d-------- C:\WINDOWS\Profiles
2008-08-18 14:53 . 2008-08-19 14:29 <DIR> d-------- C:\Program Files\Java
2008-08-18 14:53 . 2008-08-18 14:53 <DIR> d-------- C:\Program Files\Common Files\Adobe
2008-08-18 14:53 . 2003-08-04 14:22 94,208 --a------ C:\WINDOWS\system32\W32n50.dll
2008-08-18 14:53 . 2002-11-01 20:15 45,175 --------- C:\WINDOWS\system32\plugincpl140_03.cpl
2008-08-18 14:53 . 2002-11-01 20:15 41,068 --------- C:\WINDOWS\system32\ActPanel.dll
2008-08-18 14:53 . 2003-08-04 14:22 16,128 --------- C:\WINDOWS\system32\PCANDIS5.SYS
2008-08-18 14:52 . 1998-10-07 13:54 327,168 --a------ C:\WINDOWS\IsUn0415.exe
2008-08-18 14:49 . 2008-08-21 14:07 <DIR> d-------- C:\Program Files\neostrada tp
2008-08-18 14:48 . 2008-08-18 14:48 <DIR> d--hs---- C:\WINDOWS\ftpcache
2008-08-18 14:44 . 2008-08-18 14:44 419 --a------ C:\WINDOWS\BRWMARK.INI
2008-08-18 14:44 . 2008-08-18 14:44 184 --a------ C:\WINDOWS\system32\brsvc01a.bsi
2008-08-18 14:44 . 2008-08-18 14:44 30 --a------ C:\WINDOWS\system32\brss01a.ini
2008-08-18 14:44 . 2008-08-18 14:44 27 --a------ C:\WINDOWS\BRPP2KA.INI
2008-08-18 14:33 . 2008-08-18 14:33 <DIR> d-------- C:\Program Files\Brother
2008-08-18 14:31 . 2008-08-18 14:31 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Brother
2008-08-18 14:27 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2008-08-18 14:27 . 2004-08-03 23:01 25,856 --a--c--- C:\WINDOWS\system32\dllcache\usbprint.sys
2008-08-18 14:27 . 2004-08-04 00:44 21,504 --a------ C:\WINDOWS\system32\hidserv.dll
2008-08-18 14:27 . 2004-08-04 00:44 21,504 --a--c--- C:\WINDOWS\system32\dllcache\hidserv.dll
2008-08-18 14:27 . 2004-08-04 00:38 14,848 --a------ C:\WINDOWS\system32\drivers\kbdhid.sys
2008-08-18 14:27 . 2004-08-04 00:38 14,848 --a--c--- C:\WINDOWS\system32\dllcache\kbdhid.sys
2008-08-18 14:27 . 2001-10-26 16:57 12,160 --a------ C:\WINDOWS\system32\drivers\mouhid.sys
2008-08-18 14:27 . 2001-10-26 16:57 12,160 --a--c--- C:\WINDOWS\system32\dllcache\mouhid.sys
2008-08-18 14:26 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2008-08-18 14:26 . 2004-08-03 23:08 31,616 --a--c--- C:\WINDOWS\system32\dllcache\usbccgp.sys
2008-08-18 14:26 . 2001-08-17 22:02 9,600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys
2008-08-18 14:26 . 2001-08-17 22:02 9,600 --a--c--- C:\WINDOWS\system32\dllcache\hidusb.sys
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-08-21 12:33 10,856 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
2008-08-20 12:39 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-08-19 08:35 --------- d-----w C:\Program Files\ESET
2008-07-31 08:41 68,616 ----a-w C:\WINDOWS\system32\XAPOFX1_1.dll
2008-07-31 08:41 238,088 ----a-w C:\WINDOWS\system32\xactengine3_2.dll
2008-07-31 08:40 509,448 ----a-w C:\WINDOWS\system32\XAudio2_2.dll
2008-07-12 06:18 467,984 ----a-w C:\WINDOWS\system32\d3dx10_39.dll
2008-07-12 06:18 3,851,784 ----a-w C:\WINDOWS\system32\D3DX9_39.dll
2008-07-12 06:18 1,493,528 ----a-w C:\WINDOWS\system32\D3DCompiler_39.dll
2008-07-01 07:04 71,688 ----a-w C:\WINDOWS\system32\drivers\epfw.sys
2008-07-01 07:04 54,280 ----a-w C:\WINDOWS\system32\drivers\epfwtdi.sys
2008-07-01 07:04 30,728 ----a-w C:\WINDOWS\system32\drivers\epfwndis.sys
2008-07-01 06:57 53,256 ----a-w C:\WINDOWS\system32\drivers\easdrv.sys
2008-07-01 06:56 39,944 ----a-w C:\WINDOWS\system32\drivers\eamon.sys
2008-05-30 12:19 507,400 ----a-w C:\WINDOWS\system32\XAudio2_1.dll
2008-05-30 12:18 238,088 ----a-w C:\WINDOWS\system32\xactengine3_1.dll
2008-05-30 12:17 65,032 ----a-w C:\WINDOWS\system32\XAPOFX1_0.dll
2008-05-30 12:17 25,608 ----a-w C:\WINDOWS\system32\X3DAudio1_4.dll
2008-05-30 12:11 467,984 ----a-w C:\WINDOWS\system32\d3dx10_38.dll
2008-05-30 12:11 3,850,760 ----a-w C:\WINDOWS\system32\D3DX9_38.dll
2008-05-30 12:11 1,491,992 ----a-w C:\WINDOWS\system32\D3DCompiler_38.dll
2004-08-03 22:44 933,888 --sh--r C:\WINDOWS\system32\sdphost.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:44 15360]
"Gadu-Gadu"="D:\dysk C\Gadu-Gadu\gg.exe" [2008-03-20 12:04 2127296]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-02-14 01:09 486856]
"ares"="C:\Program Files\Ares\Ares.exe" [2007-05-04 02:32 961024]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WinampAgent"="C:\Program Files\Winamp\Winampa.exe" [2002-04-24 05:02 12288]
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-12 15:43 45056]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648]
"SetDefPrt"="C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe" [2005-01-26 18:02 49152]
"ControlCenter2.0"="C:\Program Files\Brother\ControlCenter2\brctrcen.exe" [2005-05-17 17:42 933888]
"SpeedTouch USB Diagnostics"="C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" [2004-01-26 11:38 866816]
"WOOWATCH"="C:\PROGRA~1\NEOSTR~1\Watch.exe" [2004-08-23 14:49 20480]
"WOOTASKBARICON"="C:\PROGRA~1\NEOSTR~1\GestMaj.exe" [2004-10-14 16:55 32768]
"egui"="C:\Program Files\ESET\ESET Smart Security\egui.exe" [2008-07-01 09:01 1447168]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-05-27 10:50 413696]
"RTHDCPL"="RTHDCPL.EXE" [2006-06-28 08:54 16248320 C:\WINDOWS\RTHDCPL.exe]
"SkyTel"="SkyTel.EXE" [2006-05-16 12:04 2879488 C:\WINDOWS\SkyTel.exe]
"Files Driver"="sdphost.exe" [2004-08-04 00:44 933888 C:\WINDOWS\system32\sdphost.exe]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"Files Driver"="sdphost.exe" [2004-08-04 00:44 933888 C:\WINDOWS\system32\sdphost.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 00:44 15360]
C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
InterVideo WinCinema Manager.lnk - C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe [2007-02-26 11:48:58 106496]
Status Monitor.lnk - C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [2008-08-18 14:33:28 802816]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Winju35.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Winjy80.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Winls61.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Ares\\Ares.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Documents and Settings\\All Users\\Dane aplikacji\\Kaspersky Lab Setup Files\\Kaspersky Internet Security 2009\\Polish\\setup.exe"=
R0 AFPAnsi;G-DATA Ukrywacz Ansi;C:\WINDOWS\system32\Drivers\AFPAnsi.sys [2002-10-09 13:53]
R0 FO_PAnt;FotoOffice VirtualDisc Driver;C:\WINDOWS\system32\Drivers\FO_PAnt.sys [2003-07-17 12:56]
R0 klbg;Kaspersky Lab Boot Guard Driver;C:\WINDOWS\system32\drivers\klbg.sys [2008-01-29 18:29]
R3 KLFLTDEV;Kaspersky Lab KLFltDev;C:\WINDOWS\system32\DRIVERS\klfltdev.sys [2008-03-13 19:02]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\DRIVERS\klim5.sys [2008-03-25 20:07]
S0 Winju35;Winju35;C:\WINDOWS\system32\Drivers\Winju35.sys []
S0 Winjy80;Winjy80;C:\WINDOWS\system32\Drivers\Winjy80.sys []
S0 Winls61;Winls61;C:\WINDOWS\system32\Drivers\Winls61.sys []
S2 NOD32FiXTemDono;Eset Nod32 Boot;C:\WINDOWS\system32\regedt32.exe [2001-10-26 17:30]
.
Contents of the 'Scheduled Tasks' folder
2008-08-19 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 17:57]
.
- - - - ORPHANS REMOVED - - - -
Toolbar-{1B27DC3F-A487-486D-BBA8-CA45373B1457} - C:\WINDOWS\rafbsvnx.dll
.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\bestek\Dane aplikacji\Mozilla\Firefox\Profiles\tmt9bj1w.default\
FF -: plugin - C:\Program Files\Adobe\Acrobat 5.0 CE\Reader\browser\nppdf32.dll
FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\npnul32.dll
FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
FF -: plugin - E:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-21 14:51:38
Windows 5.1.2600 Dodatek Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-08-21 14:52:42
ComboFix-quarantined-files.txt 2008-08-21 12:52:39
ComboFix2.txt 2008-08-21 12:06:54
Pre-Run: 37,662,404,608 bajtów wolnych
Post-Run: 37,814,415,360 bajtów wolnych
260
