prosze o spr loga. nieznane procesy

**Posty:** 254 · przez **karpiaq** 24 Sty 2008, 18:21

Proszę o spr loga ponieważ pojawiły sie u mnie procesy których nie znam byc może to procesy moich aplikacji ale ich nie znam. daje loga tak zapobiegawczo

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:19:23, on 2008-01-24 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: I:\WINDOWS\System32\smss.exe I:\WINDOWS\system32\winlogon.exe I:\WINDOWS\system32\services.exe I:\WINDOWS\system32\lsass.exe I:\WINDOWS\system32\svchost.exe I:\WINDOWS\System32\svchost.exe I:\WINDOWS\system32\spoolsv.exe I:\WINDOWS\Explorer.EXE I:\Program Files\cFosSpeed\spd.exe I:\Program Files\Eset\nod32krn.exe I:\WINDOWS\system32\nvsvc32.exe I:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe I:\WINDOWS\system32\svchost.exe I:\WINDOWS\SOUNDMAN.EXE I:\WINDOWS\system32\RUNDLL32.EXE I:\Program Files\Winamp3\winampa.exe I:\Program Files\Java\jre1.6.0_03\bin\jusched.exe I:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe I:\Program Files\Common Files\Real\Update_OB\realsched.exe I:\Program Files\cFosSpeed\cFosSpeed.exe I:\Program Files\Eset\nod32kui.exe I:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe I:\WINDOWS\system32\ctfmon.exe I:\Program Files\Gadu-Gadu\gg.exe I:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe I:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe I:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe I:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe I:\Program Files\DAEMON Tools\daemon.exe I:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe I:\Program Files\Kalendarz XP\Kalendarz.exe I:\Program Files\WLAN\WConfig\WConfig.exe I:\Program Files\Common Files\Teleca Shared\Generic.exe I:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe I:\WINDOWS\system32\wuauclt.exe I:\Program Files\Gadu-Gadu\gg.exe I:\Program Files\Winamp3\Studio.exe I:\Program Files\Mozilla Firefox\firefox.exe I:\Documents and Settings\Łukasz\Pulpit\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - I:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Flashget Catch Url Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll (file missing) O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - I:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - I:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: Alcohol Toolbar Helper - {8126A4A5-BFD3-46FE-BBDF-BFB5CF78E489} - I:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - i:\program files\google\googletoolbar1.dll O2 - BHO: gFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - I:\Program Files\FlashGet\getflash.dll O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - I:\Program Files\FlashGet\fgiebar.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - i:\program files\google\googletoolbar1.dll O3 - Toolbar: Alcohol Toolbar - {ED4BD629-C1B6-4399-8A34-02CCAA921DC9} - I:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE I:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE I:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [WinampAgent] "I:\Program Files\Winamp3\winampa.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "I:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [Device Detector] DevDetect.exe -autorun O4 - HKLM\..\Run: [NeroFilterCheck] I:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [TkBellExe] "I:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [QuickTime Task] "I:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [cFosSpeed] I:\Program Files\cFosSpeed\cFosSpeed.exe O4 - HKLM\..\Run: [nod32kui] "I:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "I:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions O4 - HKCU\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "I:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "I:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [AQQ] E:\programy\AQQ\AQQ.exe O4 - HKCU\..\Run: [swg] I:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [DAEMON Tools] "I:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Adobe Reader Speed Launch.lnk = I:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Kalendarz XP.lnk = I:\Program Files\Kalendarz XP\Kalendarz.exe O4 - Global Startup: Microsoft Office.lnk = I:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: WConfig.lnk = ? O8 - Extra context menu item: &Stáhnout FlashGetem - I:\PROGRA~1\FlashGet\jc_link.htm O8 - Extra context menu item: &Stáhnout pomocí FlashGet - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: &Stáhnout vše pomocí FlashGet - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: &Stáhnout všechno FlashGetem - I:\PROGRA~1\FlashGet\jc_all.htm O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://I:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - I:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - I:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - I:\PROGRA~1\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - I:\PROGRA~1\FlashGet\flashget.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1199104163468 O17 - HKLM\System\CCS\Services\Tcpip\..\{1B687DCD-954E-4F95-87B9-AF2766FED575}: NameServer = 194.204.159.1,194.204.152.34 O23 - Service: cFosSpeed System Service (cFosSpeedS) - cFos Software GmbH - I:\Program Files\cFosSpeed\spd.exe O23 - Service: NBService - Nero AG - I:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - I:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - I:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - I:\WINDOWS\system32\nvsvc32.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - I:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- End of file - 7955 bytes

**Posty:** 18165 · przez **wojtas** 24 Sty 2008, 18:29

jakie procesy?

Wykonaj to co jest podane w tym temacie

Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu C:\SDFix wrzuc zawartość pliku Report.txt + log z combofixa oraz z hijacka

**Posty:** 254 · przez **karpiaq** 26 Sty 2008, 17:29

Kod: Zaznacz wszystko: SDFix: Version 1.131 Run by ťukasz on 2008-01-26 at 16:15 Microsoft Windows XP [Wersja 5.1.2600] Running From: I:\SDFix Safe Mode: Checking Services: Restoring Windows Registry Values Restoring Windows Default Hosts File Rebooting... Normal Mode: Checking Files: No Trojan Files Found Removing Temp Files... ADS Check: I:\WINDOWS No streams found. I:\WINDOWS\explorer.exe No streams found. I:\WINDOWS\system32 No streams found. I:\WINDOWS\system32\svchost.exe No streams found. I:\WINDOWS\system32\ntoskrnl.exe No streams found. Final Check: catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-26 16:19:17 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden services & system hive ... [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg] "s1"=dword:2df9c43f "s2"=dword:110480d0 "h0"=dword:00000002 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04] "p0"="I:\Program Files\Alcohol Soft\Alcohol 120\" "h0"=dword:00000000 "ujdew"=hex:25,81,90,89,59,1f,70,76,2c,39,30,fb,8c,06,8c,d2,a3,a6,87,19,47,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="I:\Program Files\DAEMON Tools\" "h0"=dword:00000001 "khjeh"=hex:12,50,1f,36,51,aa,a7,7a,da,7e,4b,bc,d8,3c,74,b0,e6,24,3e,ea,6a,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,e8,3f,e2,88,09,ed,a5,3d,60,f1,27,44,8c,6e,4a,37,ee,.. "khjeh"=hex:c7,2c,f8,5a,5f,3f,d2,66,da,14,b4,88,be,92,49,69,76,f2,f0,a6,7e,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:1a,b3,3c,50,f2,52,7a,73,ad,0d,47,53,dc,de,8b,08,ef,24,82,96,56,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04] "p0"="I:\Program Files\Alcohol Soft\Alcohol 120\" "h0"=dword:00000000 "ujdew"=hex:25,81,90,89,59,1f,70,76,2c,39,30,fb,8c,06,8c,d2,a3,a6,87,19,47,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="I:\Program Files\DAEMON Tools\" "h0"=dword:00000001 "khjeh"=hex:12,50,1f,36,51,aa,a7,7a,da,7e,4b,bc,d8,3c,74,b0,e6,24,3e,ea,6a,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,e8,3f,e2,88,09,ed,a5,3d,60,f1,27,44,8c,6e,4a,37,ee,.. "khjeh"=hex:c7,2c,f8,5a,5f,3f,d2,66,da,14,b4,88,be,92,49,69,76,f2,f0,a6,7e,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:1a,b3,3c,50,f2,52,7a,73,ad,0d,47,53,dc,de,8b,08,ef,24,82,96,56,.. scanning hidden registry entries ... [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\DocFolderPaths] "A\1u?k?a?s?z?"="I:\Documents and Settings\\x141ukasz\Moje dokumenty" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\A\1\5\1c] "Order"=hex:08,00,00,00,02,00,00,00,b8,01,00,00,01,00,00,00,04,00,00,00,8c,.. scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 Remaining Services: ------------------ Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "I:\\Program Files\\Gadu-Gadu\\gg.exe"="I:\\Program Files\\Gadu-Gadu\\gg.exe:*:Enabled:Gadu-Gadu - program glowny" "I:\\Program Files\\FlashGet\\flashget.exe"="I:\\Program Files\\FlashGet\\flashget.exe:*:Enabled:Flashget" "E:\\programy\\AQQ\\AQQ.exe"="E:\\programy\\AQQ\\AQQ.exe:*:Enabled:P2P AQQ" "I:\\Program Files\\BearShare\\BearShare.exe"="I:\\Program Files\\BearShare\\BearShare.exe:*:Enabled:BearShare" "I:\\Program Files\\Valve\\hl.exe"="I:\\Program Files\\Valve\\hl.exe:*:Enabled:Half-Life Launcher" "I:\\Program Files\\eMule\\emule.exe"="I:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule" "I:\\Program Files\\WebServ\\mysql\\bin\\WebServ(mysqld).exe"="I:\\Program Files\\WebServ\\mysql\\bin\\WebServ(mysqld).exe:*:Enabled:WebServ(mysqld)" "I:\\Program Files\\WebServ\\WebServ.exe"="I:\\Program Files\\WebServ\\WebServ.exe:*:Enabled:Serwer WWW" "I:\\Program Files\\WebServ\\apache2\\bin\\WebServ(apache).exe"="I:\\Program Files\\WebServ\\apache2\\bin\\WebServ(apache).exe:*:Enabled:Apache HTTP Server" "I:\\Program Files\\Free SMTP Server\\localsrv.exe"="I:\\Program Files\\Free SMTP Server\\localsrv.exe:*:Enabled:localsrv" "I:\\Program Files\\Cyanide\\Loki\\Loki.exe"="I:\\Program Files\\Cyanide\\Loki\\Loki.exe:*:Enabled:Loki" "I:\\Program Files\\Cyanide\\Loki\\Autorun\\AutoRun.exe"="I:\\Program Files\\Cyanide\\Loki\\Autorun\\AutoRun.exe:*:Enabled:Loki - AutoRun" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" Remaining Files: --------------- Files with Hidden Attributes: Mon 7 Jan 2008 352 A..H. --- "I:\WINDOWS\nod32fixtemdono.reg" Finished!

Kod: Zaznacz wszystko: ComboFix 08-01-23.1C - ťukasz 2008-01-26 16:24:40.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.261 [GMT 1:00] Running from: I:\Documents and Settings\ťukasz\Pulpit\ComboFix.exe * Created a new restore point [color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color] . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . I:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Network\Downloader\qmgr0.dat I:\Documents and Settings\All Users\Dane aplikacji\Microsoft\Network\Downloader\qmgr1.dat ----- BITS: Possible infected sites ----- hxxp://javadl.sun.com . ((((((((((((((((((((((((( Files Created from 2007-12-26 to 2008-01-26 ))))))))))))))))))))))))))))))) . 2008-01-26 16:23 . 2000-08-31 08:00 51,200 --a------ I:\WINDOWS\Nircmd.exe 2008-01-26 16:13 . 2008-01-26 16:14 <DIR> d-------- I:\WINDOWS\ERUNT 2008-01-24 13:58 . 2004-08-04 00:44 159,232 --a------ I:\WINDOWS\system32\ptpusd.dll 2008-01-24 13:58 . 2004-08-03 22:58 15,104 --a------ I:\WINDOWS\system32\drivers\usbscan.sys 2008-01-24 13:58 . 2004-08-03 22:58 15,104 --a--c--- I:\WINDOWS\system32\dllcache\usbscan.sys 2008-01-24 13:58 . 2001-10-26 17:29 5,632 --a------ I:\WINDOWS\system32\ptpusb.dll 2008-01-22 15:37 . 2006-11-15 22:01 3,596,288 --a------ I:\WINDOWS\system32\qt-dx331.dll 2008-01-22 15:37 . 2003-06-23 02:44 1,415,680 --a------ I:\WINDOWS\system32\WMV9VCM.dll 2008-01-22 15:37 . 2006-11-01 14:52 765,952 --a------ I:\WINDOWS\system32\xvidcore.dll 2008-01-22 15:37 . 2006-11-01 14:54 180,224 --a------ I:\WINDOWS\system32\xvidvfw.dll 2008-01-22 15:37 . 2006-05-13 23:16 118,784 --a------ I:\WINDOWS\system32\ac3acm.acm 2008-01-22 11:54 . 2005-05-26 15:34 2,297,552 --a------ I:\WINDOWS\system32\d3dx9_26.dll 2008-01-21 23:05 . 2008-01-21 23:05 <DIR> d-------- I:\Program Files\DAEMON Tools 2008-01-21 20:59 . 2008-01-21 20:59 <DIR> d-------- I:\Program Files\Cyanide 2008-01-21 12:53 . 2007-09-24 23:31 69,632 --a------ I:\WINDOWS\system32\javacpl.cpl 2008-01-20 17:59 . 2008-01-20 17:59 <DIR> d-------- I:\Program Files\Sony Ericsson 2008-01-20 17:59 . 2008-01-20 17:59 <DIR> d-------- I:\Program Files\Common Files\Teleca Shared 2008-01-20 17:57 . 2008-01-20 17:58 <DIR> d----c--- I:\WINDOWS\system32\DRVSTORE 2008-01-20 17:57 . 2005-07-07 15:25 89,872 -ra------ I:\WINDOWS\system32\drivers\k750mdm.sys 2008-01-20 17:57 . 2005-07-07 15:26 55,216 -ra------ I:\WINDOWS\system32\drivers\k750bus.sys 2008-01-20 17:57 . 2005-07-07 15:26 6,576 -ra------ I:\WINDOWS\system32\drivers\k750mdfl.sys 2008-01-20 17:57 . 2005-07-07 15:26 6,144 -ra------ I:\WINDOWS\system32\drivers\k750cmnt.sys 2008-01-20 17:57 . 2005-07-07 15:26 6,144 -ra------ I:\WINDOWS\system32\drivers\k750cm.sys 2008-01-20 17:57 . 2005-07-07 15:25 5,744 -ra------ I:\WINDOWS\system32\drivers\k750whnt.sys 2008-01-20 17:57 . 2005-07-07 15:25 5,744 -ra------ I:\WINDOWS\system32\drivers\k750wh.sys 2008-01-20 17:56 . 2008-01-20 17:56 <DIR> d-------- I:\WINDOWS\Downloaded Installations 2008-01-20 17:56 . 2008-01-20 17:56 81,728 --a------ I:\WINDOWS\system32\drivers\k750mgmt.sys 2008-01-20 17:56 . 2008-01-20 17:56 79,488 --a------ I:\WINDOWS\system32\drivers\k750obex.sys 2008-01-20 16:45 . 2008-01-20 16:45 512,096 --a------ I:\WINDOWS\system32\drivers\amon.sys 2008-01-20 16:45 . 2008-01-20 16:45 298,104 --a------ I:\WINDOWS\system32\imon.dll 2008-01-20 16:45 . 2008-01-20 16:45 15,424 --a------ I:\WINDOWS\system32\drivers\nod32drv.sys 2008-01-18 20:36 . 2008-01-18 22:09 <DIR> d-------- I:\Program Files\nLite 2008-01-18 13:01 . 2008-01-18 13:01 <DIR> d-------- I:\Program Files\Free SMTP Server 2008-01-17 18:48 . 2008-01-17 18:48 <DIR> d-------- I:\Program Files\Common Files\Adobe 2008-01-17 14:29 . 2008-01-17 14:29 <DIR> d-------- I:\Program Files\Cream Software 2008-01-13 16:26 . 2008-01-15 18:47 <DIR> d-------- I:\Program Files\Ganymede 2008-01-13 15:08 . 2007-10-17 16:27 707,024 -ra------ I:\WINDOWS\system32\drivers\cfosspeed.sys 2008-01-13 15:05 . 2008-01-26 16:24 <DIR> d-------- I:\Program Files\cFosSpeed 2008-01-13 15:05 . 2007-10-17 16:26 281,552 --a------ I:\WINDOWS\system32\cfosspeed.dll 2008-01-13 14:20 . 2008-01-18 12:58 <DIR> d-------- I:\Program Files\eMule 2008-01-12 22:44 . 2008-01-12 22:44 <DIR> d-------- I:\Program Files\Ontrack 2008-01-12 22:43 . 2008-01-12 22:43 <DIR> d--h----- I:\WINDOWS\PIF 2008-01-12 22:27 . 2008-01-12 22:27 <DIR> d-------- I:\WINDOWS\Sun 2008-01-12 20:01 . 2008-01-12 20:01 <DIR> d--hs---- I:\WINDOWS\ftpcache 2008-01-12 19:09 . 2008-01-12 19:09 <DIR> d-------- I:\Program Files\Dziobas Rar Player 2008-01-12 18:49 . 2008-01-22 19:06 <DIR> d-------- I:\Program Files\MoorHunt 2008-01-12 16:53 . 2008-01-07 14:29 352 --ah----- I:\WINDOWS\nod32fixtemdono.reg 2008-01-11 22:26 . 2008-01-11 22:26 <DIR> d-------- I:\Program Files\QuickTime 2008-01-11 22:26 . 2008-01-11 22:26 <DIR> d-------- I:\Program Files\Apple Software Update 2008-01-11 22:06 . 2008-01-11 22:06 <DIR> d-------- I:\Program Files\Real 2008-01-11 22:06 . 2008-01-11 22:06 <DIR> d-------- I:\Program Files\Common Files\xing shared 2008-01-11 22:06 . 2008-01-11 22:06 <DIR> d-------- I:\Program Files\Common Files\Real 2008-01-11 21:30 . 2008-01-11 21:30 <DIR> d-------- I:\Program Files\VIA Technologies, INC 2008-01-11 21:30 . 1998-11-13 13:10 307,200 --a------ I:\WINDOWS\IsUn0415.exe 2008-01-11 21:28 . 2004-08-03 23:08 26,496 --a--c--- I:\WINDOWS\system32\dllcache\usbstor.sys 2008-01-11 20:13 . 2008-01-24 17:02 69 --a------ I:\WINDOWS\NeroDigital.ini 2008-01-11 19:19 . 2008-01-25 21:30 <DIR> d-------- I:\Program Files\Valve 2008-01-11 19:18 . 2008-01-25 20:22 <DIR> d-------- I:\Program Files\sXe Injected 2008-01-11 19:05 . 2008-01-11 19:05 <DIR> d-------- I:\Program Files\Peer2Mail 2008-01-02 14:19 . 2008-01-02 14:19 552 --a------ I:\WINDOWS\system32\d3d8caps.dat 2007-12-31 15:12 . 2008-01-26 16:07 <DIR> d-------- I:\Program Files\Kalendarz XP 2007-12-31 15:04 . 2004-08-03 23:44 221,184 --a------ I:\WINDOWS\system32\wmpns.dll 2007-12-31 15:00 . 2007-12-31 15:00 <DIR> d-------- I:\Program Files\Nero 2007-12-31 15:00 . 2007-12-31 15:01 <DIR> d-------- I:\Program Files\Common Files\Ahead 2007-12-31 14:46 . 2008-01-11 21:54 <DIR> d-------- I:\Program Files\NAPI-PROJEKT 2007-12-31 14:35 . 2008-01-18 12:56 <DIR> d-------- I:\Program Files\WebServ 2007-12-31 14:35 . 2007-12-31 14:35 <DIR> d-------- I:\Program Files\MWSnap 2007-12-31 14:35 . 2008-01-18 13:00 45,626 --a------ I:\WINDOWS\php.ini 2007-12-31 14:35 . 2008-01-18 12:59 487 --a------ I:\WINDOWS\my.ini 2007-12-31 14:32 . 2007-12-31 14:32 <DIR> d-------- I:\Program Files\Alcohol Toolbar 2007-12-31 14:32 . 2007-12-31 14:32 <DIR> d-------- I:\Program Files\Alcohol Soft 2007-12-31 14:32 . 2007-12-31 14:32 229,057 --a------ I:\WINDOWS\Alcohol_Toolbar_Uninstaller_5273.exe 2007-12-31 14:28 . 2008-01-22 11:58 685,816 --a------ I:\WINDOWS\system32\drivers\sptd.sys 2007-12-31 14:26 . 2007-12-31 14:26 <DIR> d-------- I:\Program Files\Common Files\ACD Systems 2007-12-31 14:26 . 2007-12-31 14:26 <DIR> d-------- I:\Program Files\ACD Systems 2007-12-31 14:24 . 2007-12-31 14:24 <DIR> d-------- I:\Program Files\Google 2007-12-31 14:24 . 2008-01-15 14:26 <DIR> d-------- I:\Program Files\FlashGet 2007-12-31 14:20 . 2008-01-22 15:37 <DIR> d-------- I:\Program Files\K-Lite Codec Pack 2007-12-31 14:20 . 2003-03-19 05:14 499,712 --a------ I:\WINDOWS\system32\msvcp71.dll 2007-12-31 14:20 . 2004-01-12 00:00 348,160 --a------ I:\WINDOWS\system32\msvcr71.dll 2007-12-31 14:20 . 2007-12-31 14:20 427 --a------ I:\WINDOWS\ODBC.INI 2007-12-31 14:19 . 2007-12-31 14:20 <DIR> d-------- I:\WINDOWS\ShellNew 2007-12-31 14:17 . 2007-12-31 14:17 <DIR> d-------- I:\Program Files\VideoLAN 2007-12-31 14:17 . 2008-01-21 12:53 <DIR> d-------- I:\Program Files\Java 2007-12-31 14:17 . 2007-12-31 14:17 <DIR> d-------- I:\Program Files\Common Files\Java 2007-12-31 14:14 . 2007-12-31 14:14 <DIR> d-------- I:\Program Files\AnyReader 2007-12-31 14:13 . 2008-01-02 14:43 <DIR> d-------- I:\Program Files\BearShare 2007-12-31 14:13 . 2008-01-23 12:17 <DIR> d-------- I:\My Downloads 2007-12-31 14:12 . 2007-12-31 14:12 <DIR> d-------- I:\Program Files\Winamp3 2007-12-31 14:12 . 2007-12-31 14:12 <DIR> d-------- I:\Program Files\totalcmd 2007-12-31 14:12 . 2003-02-18 05:51 545 --a------ I:\WINDOWS\UC.PIF 2007-12-31 14:12 . 2003-02-18 05:51 545 --a------ I:\WINDOWS\RAR.PIF 2007-12-31 14:12 . 2003-02-18 05:51 545 --a------ I:\WINDOWS\PKZIP.PIF 2007-12-31 14:12 . 2003-02-18 05:51 545 --a------ I:\WINDOWS\PKUNZIP.PIF 2007-12-31 14:12 . 2003-02-18 05:51 545 --a------ I:\WINDOWS\NOCLOSE.PIF 2007-12-31 14:12 . 2003-02-18 05:51 545 --a------ I:\WINDOWS\LHA.PIF 2007-12-31 14:12 . 2003-02-18 05:51 545 --a------ I:\WINDOWS\ARJ.PIF 2007-12-31 14:12 . 2007-12-31 14:12 104 --a------ I:\WINDOWS\wincmd.ini 2007-12-31 14:12 . 2007-12-31 14:12 50 --a------ I:\WINDOWS\Winamp.ini 2007-12-31 14:12 . 2007-12-31 14:12 41 --a------ I:\WINDOWS\winampa.ini . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-31 09:23 --------- d--h--w I:\Program Files\Uninstall Information 2007-12-31 09:18 --------- d-----w I:\Program Files\microsoft frontpage 2007-12-31 09:16 --------- d-----w I:\Program Files\Usługi online . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="I:\WINDOWS\system32\ctfmon.exe" [2004-08-03 23:44 15360] "Gadu-Gadu"="I:\Program Files\Gadu-Gadu\gg.exe" [2006-02-17 14:03 2396160] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="I:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-03-12 13:49 153136] "AQQ"="E:\programy\AQQ\AQQ.exe" [2007-02-28 14:18 2351864] "swg"="I:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe" [2007-12-31 14:24 155896] "DAEMON Tools"="I:\Program Files\DAEMON Tools\daemon.exe" [2007-04-03 23:29 165784] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SoundMan"="SOUNDMAN.EXE" [2003-01-10 04:39 46592 I:\WINDOWS\SOUNDMAN.EXE] "NvCplDaemon"="I:\WINDOWS\system32\NvCpl.dll" [2004-10-29 09:50 4620288] "nwiz"="nwiz.exe" [2004-10-29 09:50 921600 I:\WINDOWS\system32\nwiz.exe] "NvMediaCenter"="I:\WINDOWS\system32\NvMcTray.dll" [2004-10-29 09:50 86016] "WinampAgent"="I:\Program Files\Winamp3\winampa.exe" [2002-07-23 17:58 12288] "SunJavaUpdateSched"="I:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496] "Device Detector"="DevDetect.exe" [] "NeroFilterCheck"="I:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-09 18:53 153136] "TkBellExe"="I:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2008-01-11 22:06 185896] "QuickTime Task"="I:\Program Files\QuickTime\QTTask.exe" [2007-12-11 10:56 286720] "cFosSpeed"="I:\Program Files\cFosSpeed\cFosSpeed.exe" [2007-10-17 16:26 854992] "nod32kui"="I:\Program Files\Eset\nod32kui.exe" [2008-01-20 16:45 949376] "Sony Ericsson PC Suite"="I:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2005-10-26 16:17 159744] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="I:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 23:44 15360] I:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ Adobe Reader Speed Launch.lnk - I:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-24 07:05:26 29696] Kalendarz XP.lnk - I:\Program Files\Kalendarz XP\Kalendarz.exe [2007-12-31 15:12:33 882176] Microsoft Office.lnk - I:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 10:01:04 83360] WConfig.lnk - I:\Program Files\WLAN\WConfig\WConfig.exe [2007-12-31 13:17:43 385024] R3 RT2400PCI;802.11b WLAN PCI;I:\WINDOWS\system32\DRIVERS\RT2400.sys [2003-10-31 09:47] S3 ddsxeiservice;ddsxeiservice2;I:\Program Files\sXe Injected\ddsxei.sys [2008-01-23 06:53] *Newly Created Service* - PROCEXP90 . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-26 16:25:57 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- PROCESS: I:\WINDOWS\explorer.exe [6.00.2900.2180] -> I:\Program Files\Gadu-Gadu\ggwhook.dll . Completion time: 2008-01-26 16:26:25 ComboFix-quarantined-files.txt 2008-01-26 15:26:17

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 16:29:37, on 2008-01-26 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: I:\WINDOWS\System32\smss.exe I:\WINDOWS\system32\winlogon.exe I:\WINDOWS\system32\services.exe I:\WINDOWS\system32\lsass.exe I:\WINDOWS\system32\svchost.exe I:\WINDOWS\System32\svchost.exe I:\WINDOWS\system32\spoolsv.exe I:\Program Files\cFosSpeed\spd.exe I:\Program Files\Eset\nod32krn.exe I:\WINDOWS\system32\nvsvc32.exe I:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe I:\WINDOWS\system32\svchost.exe I:\WINDOWS\SOUNDMAN.EXE I:\Program Files\Winamp3\winampa.exe I:\Program Files\Java\jre1.6.0_03\bin\jusched.exe I:\Program Files\Common Files\Real\Update_OB\realsched.exe I:\Program Files\cFosSpeed\cFosSpeed.exe I:\Program Files\Eset\nod32kui.exe I:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe I:\WINDOWS\system32\ctfmon.exe I:\Program Files\Gadu-Gadu\gg.exe I:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe I:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe I:\Program Files\DAEMON Tools\daemon.exe I:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe I:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe I:\Program Files\Kalendarz XP\Kalendarz.exe I:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe I:\Program Files\Common Files\Teleca Shared\Generic.exe I:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe I:\Program Files\Mozilla Firefox\firefox.exe I:\WINDOWS\explorer.exe I:\WINDOWS\system32\wuauclt.exe I:\Program Files\WLAN\WConfig\WConfig.exe I:\Documents and Settings\Łukasz\Pulpit\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - I:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Flashget Catch Url Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll (file missing) O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - I:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - I:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: Alcohol Toolbar Helper - {8126A4A5-BFD3-46FE-BBDF-BFB5CF78E489} - I:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - i:\program files\google\googletoolbar1.dll O2 - BHO: gFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - I:\Program Files\FlashGet\getflash.dll O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - I:\Program Files\FlashGet\fgiebar.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - i:\program files\google\googletoolbar1.dll O3 - Toolbar: Alcohol Toolbar - {ED4BD629-C1B6-4399-8A34-02CCAA921DC9} - I:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE I:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE I:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [WinampAgent] "I:\Program Files\Winamp3\winampa.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "I:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [Device Detector] DevDetect.exe -autorun O4 - HKLM\..\Run: [NeroFilterCheck] I:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [TkBellExe] "I:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [QuickTime Task] "I:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [cFosSpeed] I:\Program Files\cFosSpeed\cFosSpeed.exe O4 - HKLM\..\Run: [nod32kui] "I:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "I:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions O4 - HKCU\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "I:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "I:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [AQQ] E:\programy\AQQ\AQQ.exe O4 - HKCU\..\Run: [swg] I:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [DAEMON Tools] "I:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Adobe Reader Speed Launch.lnk = I:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Kalendarz XP.lnk = I:\Program Files\Kalendarz XP\Kalendarz.exe O4 - Global Startup: Microsoft Office.lnk = I:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: WConfig.lnk = ? O8 - Extra context menu item: &Stáhnout FlashGetem - I:\PROGRA~1\FlashGet\jc_link.htm O8 - Extra context menu item: &Stáhnout pomocí FlashGet - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: &Stáhnout vše pomocí FlashGet - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: &Stáhnout všechno FlashGetem - I:\PROGRA~1\FlashGet\jc_all.htm O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://I:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - I:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - I:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - I:\PROGRA~1\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - I:\PROGRA~1\FlashGet\flashget.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1199104163468 O17 - HKLM\System\CCS\Services\Tcpip\..\{1B687DCD-954E-4F95-87B9-AF2766FED575}: NameServer = 194.204.159.1,194.204.152.34 O23 - Service: cFosSpeed System Service (cFosSpeedS) - cFos Software GmbH - I:\Program Files\cFosSpeed\spd.exe O23 - Service: NBService - Nero AG - I:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - I:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - I:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - I:\WINDOWS\system32\nvsvc32.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - I:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- End of file - 7789 bytes

**Posty:** 18165 · przez **wojtas** 26 Sty 2008, 17:34

czysto

prosze o spr loga. nieznane procesy

prosze o spr loga. nieznane procesy

Kto jest na forum