Wolne działanie komputera

**Posty:** 40 · przez **ziggyddx** 04 Kwi 2009, 14:21

Komputer bardzo długo się uruchamia i generalnie wolno działa i długo "myśli". Taka sytuacja trwa od prawie dwóch tygodni i zaczęła się bez jakiejś wyraźnej przyczyny.

Bardzo proszę o sprawdzenie logów:

Kod: Zaznacz wszystko: Logfile of random's system information tool 1.06 (written by random/random) Run by User at 2009-04-04 13:26:48 Microsoft Windows XP Professional Dodatek Service Pack 2 System drive C: has 2 GB (27%) free of 8 GB Total RAM: 767 MB (54% free) HijackThis download failed ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000123B4-9B42-4900-B3F7-F4B073EFC214}] Octh Class - H:\Program Files\Orbit Downloader\orbitcth.dll [2009-02-27 134344] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}] &Yahoo! Toolbar Helper - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}] RealPlayer Download and Record Plugin for Internet Explorer - H:\Program Files\Real Player\rpbrowserrecordplugin.dll [2009-03-01 312928] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}] SingleInstance Class - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll [2008-07-28 160496] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416] {32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2008-12-10 929224] {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - Grab Pro - H:\Program Files\Orbit Downloader\GrabPro.dll [2009-02-27 646264] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "SiSUSBRG"=C:\WINDOWS\SiSUSBrg.exe [2002-07-12 106496] "Cmaudio"=RunDll32 cmicnfg.cpl,CMICtrlWnd [] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-10-22 7700480] "nwiz"=nwiz.exe /install [] "NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2006-10-22 86016] "RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2006-11-23 56928] "LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2006-12-05 54832] "NeroFilterCheck"=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2007-03-01 153136] "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672] "SpeedTouch USB Diagnostics"=H:\Program Files\Emil Junior\Dragdiag.exe [2004-03-23 888832] "LCheck"=H:\Program Files\Beniamin\LCheck.exe /check [] "TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2009-03-01 198160] "AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe [2008-02-08 227856] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360] "ALLUpdate"=C:\Program Files\ALLPlayer\ALLUpdate.exe [2008-11-24 869888] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe [2007-09-20 202024] "DAEMON Tools Lite"=D:\Programy\Daemon Tools Litle\DAEMON Tools Lite\daemon.exe [2008-12-29 687560] "Prec"=H:\Program Files\Prec\PrecStarter.exe [] "Odkurzacz-MCD"=H:\Program Files\Odkurzacz\odk_mcd.exe [2008-08-16 264704] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart Kalendarz XP.lnk - D:\Do nagrania na dvd\Kalendarz XP\Kalendarz.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon] C:\WINDOWS\system32\klogon.dll [2008-02-08 219664] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"= "HonorAutoRunSetting"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger" "H:\Program Files\eMule\emule.exe"="H:\Program Files\eMule\emule.exe:*:Enabled:eMule" "C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files\Kaspersky Internet Security 2009\Polish\setup.exe"="C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files\Kaspersky Internet Security 2009\Polish\setup.exe:*:Enabled:Kaspersky Internet Security 2009 Setup" "H:\Program Files\uTorrent\uTorrent.exe"="H:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent" "H:\Program Files\Orbit Downloader\orbitdm.exe"="H:\Program Files\Orbit Downloader\orbitdm.exe:*:Enabled:Orbit" "H:\Program Files\Orbit Downloader\orbitnet.exe"="H:\Program Files\Orbit Downloader\orbitnet.exe:*:Enabled:Orbit" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" ======List of files/folders created in the last 1 months====== 2009-04-04 13:27:00 ----D---- C:\Program Files\trend micro 2009-04-04 13:26:48 ----DC---- C:\rsit 2009-04-04 13:25:24 ----AC---- C:\pv.exe 2009-04-04 13:24:04 ----DC---- C:\Qoobox 2009-04-04 13:23:42 ----AC---- C:\Bug.txt 2009-04-04 13:22:57 ----DC---- C:\32788R22FWJFW 2009-03-29 16:56:06 ----D---- C:\Documents and Settings\User\Dane aplikacji\Tibo Software 2009-03-26 19:55:51 ----D---- C:\Documents and Settings\User\Dane aplikacji\POLENG4 2009-03-25 19:50:01 ----D---- C:\Documents and Settings\User\Dane aplikacji\Samsung 2009-03-25 19:45:02 ----A---- C:\WINDOWS\system32\framedyn.dll 2009-03-25 19:43:57 ----D---- C:\WINDOWS\system32\Samsung_USB_Drivers 2009-03-20 09:46:47 ----D---- C:\WINDOWS\ERDNT 2009-03-20 09:46:37 ----D---- C:\WINDOWS\ERUNT 2009-03-20 07:55:21 ----D---- C:\Program Files\Common Files\DVDVideoSoft 2009-03-20 07:55:11 ----A---- C:\WINDOWS\system32\msvcr70.dll 2009-03-19 15:36:51 ----DC---- C:\Mp3 Output 2009-03-19 15:36:49 ----A---- C:\WINDOWS\system32\NCMedia.dll 2009-03-14 21:29:04 ----D---- C:\Program Files\WinPcap 2009-03-14 15:49:04 ----SHDC---- C:\ckis 2009-03-14 15:40:30 ----DC---- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab 2009-03-14 15:40:30 ----D---- C:\Program Files\Kaspersky Lab 2009-03-12 23:12:14 ----DC---- C:\Documents and Settings\All Users\Dane aplikacji\NOS 2009-03-12 23:12:14 ----D---- C:\Program Files\NOS 2009-03-12 07:09:27 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$ 2009-03-12 07:09:07 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$ 2009-03-09 16:03:19 ----ADC---- C:\Documents and Settings\All Users\Dane aplikacji\TEMP 2009-03-07 13:14:38 ----DC---- C:\Documents and Settings\All Users\Dane aplikacji\NFS Underground ======List of files/folders modified in the last 1 months====== 2009-04-04 13:27:00 ----RD---- C:\Program Files 2009-04-04 13:26:55 ----D---- C:\WINDOWS\system32 2009-04-04 13:26:54 ----D---- C:\WINDOWS\Prefetch 2009-04-04 13:22:41 ----D---- C:\WINDOWS\Temp 2009-04-04 13:15:47 ----D---- C:\Documents and Settings\User\Dane aplikacji\uTorrent 2009-04-04 10:25:31 ----A---- C:\WINDOWS\NeroDigital.ini 2009-04-04 10:10:50 ----A---- C:\WINDOWS\YDPDICT.INI 2009-04-04 09:56:48 ----D---- C:\Documents and Settings\User\Dane aplikacji\Any Video Converter 2009-04-04 09:13:37 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2009-04-04 09:10:09 ----D---- C:\WINDOWS\system32\CatRoot2 2009-04-04 05:13:07 ----A---- C:\WINDOWS\SchedLgU.Txt 2009-04-03 20:22:59 ----D---- C:\Documents and Settings\User\Dane aplikacji\Orbit 2009-04-03 14:27:36 ----D---- C:\WINDOWS 2009-03-31 16:08:33 ----A---- C:\WINDOWS\system32\rmc_rtspdl.dll 2009-03-31 16:08:33 ----A---- C:\WINDOWS\system32\rmc_fixasf.exe 2009-03-31 16:08:22 ----A---- C:\WINDOWS\system32\AUDIOGENIE2.DLL 2009-03-30 06:00:08 ----D---- C:\Program Files\Common Files 2009-03-29 22:29:34 ----D---- C:\WINDOWS\system32\Restore 2009-03-29 18:03:18 ----SHD---- C:\WINDOWS\Installer 2009-03-29 18:03:13 ----D---- C:\Program Files\Norton Security Scan 2009-03-29 18:02:38 ----SD---- C:\WINDOWS\Tasks 2009-03-28 22:16:32 ----D---- C:\Temp 2009-03-28 12:29:02 ----D---- C:\Program Files\temp 2009-03-28 12:28:36 ----DC---- C:\Documents and Settings 2009-03-28 11:06:52 ----SD---- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft 2009-03-26 22:58:15 ----D---- C:\Documents and Settings\User\Dane aplikacji\DivX 2009-03-26 18:19:37 ----A---- C:\WINDOWS\cdplayer.ini 2009-03-25 21:58:39 ----SD---- C:\Documents and Settings\User\Dane aplikacji\Microsoft 2009-03-25 19:50:42 ----D---- C:\WINDOWS\system32\drivers 2009-03-25 19:50:36 ----HD---- C:\WINDOWS\inf 2009-03-25 19:42:12 ----HD---- C:\Program Files\InstallShield Installation Information 2009-03-20 09:46:36 ----SHD---- C:\System Volume Information 2009-03-16 02:12:45 ----D---- C:\WINDOWS\Debug 2009-03-14 11:41:09 ----D---- C:\Documents and Settings\All Users\Dane aplikacji\Extreme Picture Finder 2009-03-12 07:09:30 ----RSHDC---- C:\WINDOWS\system32\dllcache 2009-03-11 12:06:28 ----HD---- C:\WINDOWS\$hf_mig$ 2009-03-06 20:49:24 ----D---- C:\Documents and Settings\User\Dane aplikacji\skypePM 2009-03-06 20:49:23 ----D---- C:\WINDOWS\Help 2009-03-05 13:18:44 ----D---- C:\Documents and Settings\User\Dane aplikacji\Skype ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 AmdK7;Sterownik procesora AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2004-08-04 41472] R1 klif;Klif; \??\C:\WINDOWS\system32\drivers\klif.sys [] R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632] R1 WS2IFSL;Środowisko wspomagające dostawcę usług innych niż IFS - Windows Socket 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-08-17 12032] R3 alcan5wn;SpeedTouch USB ADSL PPP Networking Driver (NDISWAN); C:\WINDOWS\system32\DRIVERS\alcan5wn.sys [2003-12-08 53600] R3 alcaudsl;SpeedTouch ADSL Modem ATM Transport; C:\WINDOWS\system32\DRIVERS\alcaudsl.sys [2003-12-08 70688] R3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys [2003-10-17 754560] R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:\WINDOWS\system32\DRIVERS\klim5.sys [2007-12-13 24592] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-10-22 3994624] R3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\sisnic.sys [2002-07-10 32256] R3 usbehci;Sterownik Miniport rozszerzonego kontrolera hosta USB 2.0 Microsoft; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624] R3 usbhub;Koncentrator z obsługą USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600] R3 usbohci;Sterownik Miniport otwartego kontrolera hosta USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-03 17024] R3 WinMTBus;WinMount Bus; C:\WINDOWS\system32\DRIVERS\WinMTBus.sys [2007-04-11 196224] S3 ahks6vcg;ahks6vcg; C:\WINDOWS\system32\drivers\ahks6vcg.sys [] S3 nm;Sterownik monitora sieci; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2004-08-03 40320] S3 NPF;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2007-01-25 42000] S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ss_bus.sys [2007-05-02 83592] S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys [2007-05-02 15112] S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\WINDOWS\system32\DRIVERS\ss_mdm.sys [2007-05-02 109704] S3 USBSTOR;Sterownik magazynu masowego USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496] S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service; C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [2007-12-06 660768] R2 AVP;Kaspersky Internet Security 7.0; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe [2008-02-08 227856] R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120] R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-10-22 159810] R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2005-08-08 167936] R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912] R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-09-20 382248] S3 getPlus(R) Helper;getPlus(R) Helper; C:\Program Files\NOS\bin\getPlus_HelperSvc.exe [2009-03-03 33176] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136] S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2007-01-25 93048] -----------------EOF-----------------

Kod: Zaznacz wszystko: ComboFix 09-04-03.01 - User 2009-04-04 13:47:35.1 - NTFSx86 Uruchomiony z: E:\ComboFix.exe AV: Kaspersky Internet Security *On-access scanning disabled* (Updated) FW: Kaspersky Internet Security *disabled* UWAGA - TEN KOMPUTER NIE MA ZAINSTALOWANEJ KONSOLI ODZYSKIWANIA !! . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system32\drivers\RKHit.sys c:\windows\system32\Plugins c:\windows\system32\Plugins\Hoster\aCallbackMethods.dll c:\windows\system32\Plugins\Hoster\archivto.dll c:\windows\system32\Plugins\Hoster\bluehostto.dll c:\windows\system32\Plugins\Hoster\dataupde.dll c:\windows\system32\Plugins\Hoster\fastloadnet.dll c:\windows\system32\Plugins\Hoster\fastshareorg.dll c:\windows\system32\Plugins\Hoster\fileuploadnet.dll c:\windows\system32\Plugins\Hoster\megauploadcom.dll c:\windows\system32\Plugins\Hoster\meinuploadcom.dll c:\windows\system32\Plugins\Hoster\moosharede.dll c:\windows\system32\Plugins\Hoster\myvideode.dll c:\windows\system32\Plugins\Hoster\netloadin.dll c:\windows\system32\Plugins\Hoster\PluginSettings.ini c:\windows\system32\Plugins\Hoster\qsharecom.dll c:\windows\system32\Plugins\Hoster\rapidsharecom.dll c:\windows\system32\Plugins\Hoster\shareonlinebiz.dll c:\windows\system32\Plugins\Hoster\shareplacecom.dll c:\windows\system32\Plugins\Hoster\silofilescom.dll c:\windows\system32\Plugins\Hoster\speedysharecom.dll c:\windows\system32\Plugins\Hoster\uploadedto.dll c:\windows\system32\Plugins\Hoster\yourfilesbiz.dll c:\windows\system32\Plugins\Hoster\youtubecom.dll c:\windows\system32\Plugins\YouCrypt\callbackmethods.dll c:\windows\system32\Plugins\YouCrypt\captcha.dll c:\windows\system32\Plugins\YouCrypt\cineto.dll c:\windows\system32\Plugins\YouCrypt\datenbankorg.dll c:\windows\system32\Plugins\YouCrypt\datenschleuder.dll c:\windows\system32\Plugins\YouCrypt\ddlscene.dll c:\windows\system32\Plugins\YouCrypt\ddlwarez.dll c:\windows\system32\Plugins\YouCrypt\dreidl.dll c:\windows\system32\Plugins\YouCrypt\dxpdivxvidorg.dll c:\windows\system32\Plugins\YouCrypt\gameblog.dll c:\windows\system32\Plugins\YouCrypt\gamezam.dll c:\windows\system32\Plugins\YouCrypt\gapping.dll c:\windows\system32\Plugins\YouCrypt\gwarez.dll c:\windows\system32\Plugins\YouCrypt\linkbank.dll c:\windows\system32\Plugins\YouCrypt\linksafe.dll c:\windows\system32\Plugins\YouCrypt\LinkSave.dll c:\windows\system32\Plugins\YouCrypt\lix.dll c:\windows\system32\Plugins\YouCrypt\mirrorit.dll c:\windows\system32\Plugins\YouCrypt\netfolderin.dll c:\windows\system32\Plugins\YouCrypt\onekh.dll c:\windows\system32\Plugins\YouCrypt\rapidfolder.dll c:\windows\system32\Plugins\YouCrypt\rapidlayer.dll c:\windows\system32\Plugins\YouCrypt\rapidsafede.dll c:\windows\system32\Plugins\YouCrypt\rapidsafenet.dll c:\windows\system32\Plugins\YouCrypt\relinkus.dll c:\windows\system32\Plugins\YouCrypt\RScomLinkList.dll c:\windows\system32\Plugins\YouCrypt\rslayer.dll c:\windows\system32\Plugins\YouCrypt\saveraidrush.dll c:\windows\system32\Plugins\YouCrypt\secured.dll c:\windows\system32\Plugins\YouCrypt\securnet.dll c:\windows\system32\Plugins\YouCrypt\serienjunkies.dll c:\windows\system32\Plugins\YouCrypt\shareonall.dll c:\windows\system32\Plugins\YouCrypt\shareprotect.dll c:\windows\system32\Plugins\YouCrypt\stealth.dll c:\windows\system32\Plugins\YouCrypt\tinyurl.dll c:\windows\system32\Plugins\YouCrypt\UndergroundCMS.dll c:\windows\system32\Plugins\YouCrypt\uppicoasis.dll c:\windows\system32\Plugins\YouCrypt\urlcash.dll c:\windows\system32\Plugins\YouCrypt\usercashcom.dll c:\windows\system32\Plugins\YouCrypt\xlinkin.dll . ((((((((((((((((((((((((((((((((((((((( Sterowniki/Usługi ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_RKHIT ((((((((((((((((((((((((( Pliki utworzone od 2009-03-04 do 2009-04-04 ))))))))))))))))))))))))))))))) . 2009-04-04 13:36 . 2009-04-04 13:40 <DIR> d----c--- C:\32788R22FWJFW.0.tmp 2009-04-04 13:27 . 2009-04-04 13:27 <DIR> d-------- c:\program files\trend micro 2009-04-04 13:26 . 2009-04-04 13:28 <DIR> d----c--- C:\rsit 2009-03-29 16:56 . 2009-03-29 16:56 <DIR> d-------- c:\documents and settings\User\Dane aplikacji\Tibo Software 2009-03-26 19:55 . 2009-03-26 19:55 <DIR> d-------- c:\documents and settings\User\Dane aplikacji\POLENG4 2009-03-25 19:50 . 2009-03-25 19:50 <DIR> d-------- c:\documents and settings\User\Dane aplikacji\Samsung 2009-03-25 19:45 . 2006-05-03 23:53 174,592 --a------ c:\windows\system32\framedyn.dll 2009-03-25 19:43 . 2009-03-25 19:44 <DIR> d-------- c:\windows\system32\Samsung_USB_Drivers 2009-03-25 19:43 . 2007-05-02 12:11 109,704 --a------ c:\windows\system32\drivers\ss_mdm.sys 2009-03-25 19:43 . 2007-05-02 12:11 83,592 --a------ c:\windows\system32\drivers\ss_bus.sys 2009-03-25 19:43 . 2007-05-02 12:11 15,112 --a------ c:\windows\system32\drivers\ss_mdfl.sys 2009-03-25 19:43 . 2007-05-02 12:11 12,424 --a------ c:\windows\system32\drivers\ss_whnt.sys 2009-03-25 19:43 . 2007-05-02 12:11 12,424 --a------ c:\windows\system32\drivers\ss_wh.sys 2009-03-25 19:43 . 2007-05-02 12:11 12,424 --a------ c:\windows\system32\drivers\ss_cmnt.sys 2009-03-25 19:43 . 2007-05-02 12:11 12,424 --a------ c:\windows\system32\drivers\ss_cm.sys 2009-03-25 19:43 . 2005-08-28 21:51 766 --a------ c:\windows\system32\Uninstall.ico 2009-03-25 19:42 . 2006-07-24 17:05 5,632 --a------ c:\windows\system32\drivers\StarOpen.sys 2009-03-20 19:39 . 2009-03-20 20:04 <DIR> d-------- c:\documents and settings\User\DoctorWeb 2009-03-20 09:46 . 2009-03-20 09:46 <DIR> d-------- c:\windows\ERUNT 2009-03-20 07:55 . 2009-03-20 07:55 <DIR> d-------- c:\program files\Common Files\DVDVideoSoft 2009-03-20 07:55 . 2002-01-05 15:37 344,064 --a------ c:\windows\system32\msvcr70.dll 2009-03-19 15:36 . 2009-03-19 15:36 <DIR> d----c--- C:\Mp3 Output 2009-03-19 15:36 . 2007-03-01 05:18 4,762,112 --a------ c:\windows\system32\NCMedia.dll 2009-03-14 21:29 . 2009-03-14 21:29 <DIR> d-------- c:\program files\WinPcap 2009-03-14 15:49 . 2009-03-14 15:49 <DIR> d--hsc--- C:\ckis 2009-03-14 15:41 . 2009-03-14 16:03 101,287 --a------ c:\windows\system32\drivers\klin.dat 2009-03-14 15:41 . 2009-03-14 16:03 89,601 --a------ c:\windows\system32\drivers\klick.dat 2009-03-14 15:40 . 2009-03-14 15:40 <DIR> d-------- c:\program files\Kaspersky Lab 2009-03-14 15:40 . 2009-04-04 13:58 <DIR> d----c--- c:\documents and settings\All Users\Dane aplikacji\Kaspersky Lab 2009-03-14 15:40 . 2009-04-04 14:00 9,800,480 --ahs---- c:\windows\system32\drivers\fidbox.dat 2009-03-14 15:40 . 2009-04-04 13:58 259,104 --ahs---- c:\windows\system32\drivers\fidbox2.dat 2009-03-14 15:40 . 2009-04-04 13:55 147,824 --ahs---- c:\windows\system32\drivers\fidbox.idx 2009-03-14 15:40 . 2009-04-04 13:55 31,484 --ahs---- c:\windows\system32\drivers\fidbox2.idx 2009-03-12 23:12 . 2009-03-12 23:12 <DIR> d-------- c:\program files\NOS 2009-03-12 23:12 . 2009-03-12 23:12 <DIR> d----c--- c:\documents and settings\All Users\Dane aplikacji\NOS 2009-03-09 16:03 . 2009-03-29 14:30 <DIR> d-a--c--- c:\documents and settings\All Users\Dane aplikacji\TEMP 2009-03-08 12:44 . 2009-03-08 12:44 42 --a------ c:\windows\system32\Jiii_PNUCT.pnc 2009-03-08 12:42 . 2009-03-08 12:42 42 --a------ c:\windows\system32\AK083E209605E394C.lie 2009-03-07 13:14 . 2009-03-07 13:42 <DIR> d----c--- c:\documents and settings\All Users\Dane aplikacji\NFS Underground 2009-03-04 20:27 . 2009-03-06 20:49 <DIR> d-------- c:\documents and settings\User\Dane aplikacji\skypePM 2009-03-04 20:27 . 2009-03-04 20:27 56 --ah----- c:\windows\system32\ezsidmv.dat 2009-03-04 20:19 . 2009-03-04 20:19 <DIR> d-------- c:\program files\Common Files\Skype 2009-03-04 20:19 . 2009-03-05 13:18 <DIR> d-------- c:\documents and settings\User\Dane aplikacji\Skype 2009-03-04 20:18 . 2009-03-04 20:19 <DIR> dr------- c:\program files\Skype 2009-03-04 20:18 . 2009-03-04 20:19 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Skype . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-04-04 11:15 --------- d-----w c:\documents and settings\User\Dane aplikacji\uTorrent 2009-04-04 07:56 --------- d-----w c:\documents and settings\User\Dane aplikacji\Any Video Converter 2009-04-03 18:22 --------- d-----w c:\documents and settings\User\Dane aplikacji\Orbit 2009-03-31 14:08 323,584 ----a-w c:\windows\system32\AUDIOGENIE2.DLL 2009-03-31 14:08 237,568 ----a-w c:\windows\system32\rmc_rtspdl.dll 2009-03-31 14:08 156,672 ----a-w c:\windows\system32\rmc_fixasf.exe 2009-03-29 16:03 --------- d-----w c:\program files\Norton Security Scan 2009-03-28 10:29 --------- d-----w c:\program files\temp 2009-03-26 20:58 --------- d-----w c:\documents and settings\User\Dane aplikacji\DivX 2009-03-25 17:42 --------- d--h--w c:\program files\InstallShield Installation Information 2009-03-14 14:04 112,144 ----a-w c:\windows\system32\drivers\kl1.sys 2009-03-14 09:41 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\Extreme Picture Finder 2009-03-03 21:48 --------- d-----w c:\program files\ALLPlayer 2009-03-02 21:07 --------- d-----w c:\program files\Total Video Converter 2009-03-01 08:26 499,712 ----a-w c:\windows\system32\msvcp71.dll 2009-03-01 08:26 348,160 ----a-w c:\windows\system32\msvcr71.dll 2009-03-01 08:26 --------- d-----w c:\program files\Common Files\xing shared 2009-03-01 08:26 --------- d-----w c:\program files\Common Files\Real 2009-02-28 18:22 --------- d-----w c:\documents and settings\User\Dane aplikacji\GrabPro 2009-02-28 12:41 --------- d-----w c:\documents and settings\User\Dane aplikacji\Moyea 2009-02-28 10:16 --------- d-----w c:\program files\DivX 2009-02-27 15:10 --------- d-----w c:\program files\Common Files\DirectX 2009-02-26 18:13 --------- dc----w c:\documents and settings\All Users\Dane aplikacji\ABBYY 2009-02-26 18:10 --------- d-----w c:\program files\Common Files\Adobe 2009-02-26 18:10 --------- d-----w c:\documents and settings\User\Dane aplikacji\ABBYY 2009-02-26 18:04 --------- d-----w c:\program files\Common Files\ABBYY 2009-02-26 11:56 --------- d-----w c:\documents and settings\User\Dane aplikacji\WordToPDF 2009-02-22 19:40 --------- d-----w c:\program files\Reference Assemblies 2009-02-22 19:40 --------- d-----w c:\program files\MSBuild 2009-02-22 19:28 --------- d-----w c:\program files\MSXML 6.0 2009-02-21 09:50 --------- d-----w c:\documents and settings\User\Dane aplikacji\Tla Pulpitu 2009-02-21 07:54 --------- d-----w c:\program files\VVSN 2009-02-20 22:45 868,352 ----a-w c:\windows\system32\alpf.dll 2009-02-20 22:45 827,392 ----a-w c:\windows\system32\bnmndrv.dll 2009-02-20 22:45 618,496 ----a-w c:\windows\system32\BnmnSrv.exe 2009-02-20 08:52 --------- d-----w c:\documents and settings\User\Dane aplikacji\DAEMON Tools Lite 2009-02-20 08:51 --------- d-----w c:\documents and settings\User\Dane aplikacji\DAEMON Tools Pro 2009-02-20 08:51 --------- d-----w c:\documents and settings\User\Dane aplikacji\DAEMON Tools 2009-02-20 08:51 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\DAEMON Tools Lite 2009-02-20 08:50 --------- d-----w c:\program files\DAEMON Tools Toolbar 2009-02-20 08:44 717,296 ------w c:\windows\system32\drivers\sptd.sys 2009-02-19 17:42 --------- d-----w c:\documents and settings\User\Dane aplikacji\GRETECH 2009-02-19 15:48 --------- d-----w c:\documents and settings\User\Dane aplikacji\Nero 2009-02-19 14:29 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\NVIDIA 2009-02-19 14:05 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files 2009-02-19 00:36 --------- d-----w c:\program files\Damian Pasternak 2009-02-18 19:11 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\Yahoo! Companion 2009-02-18 17:33 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\Yahoo! 2009-02-18 17:29 --------- d-----w c:\program files\Yahoo! 2009-02-18 17:29 --------- d-----w c:\documents and settings\User\Dane aplikacji\Yahoo! 2009-02-18 08:44 --------- d-----w c:\program files\MSXML 4.0 2009-02-17 15:58 --------- d-----w c:\documents and settings\User\Dane aplikacji\CyberLink 2009-02-17 15:58 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\CyberLink 2009-02-17 15:22 --------- d-----w c:\documents and settings\User\Dane aplikacji\BESTplayer 2009-02-17 15:20 --------- d-----w c:\documents and settings\User\Dane aplikacji\Winamp 2009-02-17 15:19 --------- d-----w c:\documents and settings\User\Dane aplikacji\Gadu-Gadu 2009-02-17 15:18 --------- d-----w c:\program files\Gadu-Gadu 2009-02-17 15:17 --------- d-----w c:\program files\Winamp 2009-02-17 15:13 --------- d-----w c:\program files\Microsoft Silverlight 2009-02-17 15:12 --------- d-----w c:\program files\Real Alternative 2009-02-17 14:55 --------- d-----w c:\program files\Microsoft.NET 2009-02-17 14:53 --------- d-----w c:\program files\Microsoft Works 2009-02-17 14:50 --------- d-----w c:\program files\Combined Community Codec Pack 2009-02-17 14:47 --------- d-----w c:\program files\Common Files\Nero 2009-02-17 14:45 --------- d-----w c:\program files\Nero 2009-02-17 14:45 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\Nero 2009-02-17 14:42 --------- d-----w c:\program files\CyberLink 2009-02-17 14:39 --------- d-----w c:\program files\Common Files\InstallShield 2009-02-17 14:26 298,104 ----a-w c:\windows\system32\imon.dll 2009-02-17 14:24 --------- d-----w c:\program files\SiSLan 2009-02-17 14:24 --------- d-----w c:\program files\C-Media 3D Audio 2009-02-17 13:56 --------- d-----w c:\program files\microsoft frontpage 2009-02-17 13:52 --------- d-----w c:\program files\Usługi online 2009-02-09 14:19 1,846,528 ----a-w c:\windows\system32\win32k.sys 2001-11-23 04:08 712,704 ----a-w c:\windows\inf\OTHER\AUDIO3D.DLL . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360] "ALLUpdate"="c:\program files\ALLPlayer\ALLUpdate.exe" [2008-11-24 869888] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMBgMonitor.exe" [2007-09-20 202024] "DAEMON Tools Lite"="d:\programy\Daemon Tools Litle\DAEMON Tools Lite\daemon.exe" [2008-12-29 687560] "Odkurzacz-MCD"="h:\program files\Odkurzacz\odk_mcd.exe" [2008-08-16 264704] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SiSUSBRG"="c:\windows\SiSUSBrg.exe" [2002-07-12 106496] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-10-22 7700480] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-10-22 86016] "RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2006-11-23 56928] "LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2006-12-05 54832] "NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 153136] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672] "SpeedTouch USB Diagnostics"="h:\program files\Emil Junior\Dragdiag.exe" [2004-03-23 888832] "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-03-01 198160] "nwiz"="nwiz.exe" [2006-10-22 c:\windows\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360] c:\documents and settings\All Users\Menu Start\Programy\Autostart\ Kalendarz XP.lnk - d:\do nagrania na dvd\Kalendarz XP\Kalendarz.exe [2009-02-22 882176] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "vidc.ffds"= c:\progra~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll "vidc.wmv3"= c:\progra~1\COMBIN~1\Filters\wmv9vcm.dll "msacm.divxa32"= msaud32_divx.acm [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"= "h:\\Program Files\\eMule\\emule.exe"= "c:\\Documents and Settings\\All Users\\Dane aplikacji\\Kaspersky Lab Setup Files\\Kaspersky Internet Security 2009\\Polish\\setup.exe"= "h:\\Program Files\\uTorrent\\uTorrent.exe"= "h:\\Program Files\\Orbit Downloader\\orbitdm.exe"= "h:\\Program Files\\Orbit Downloader\\orbitnet.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service;c:\program files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [2007-12-06 660768] R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [2007-12-13 24592] R3 WinMTBus;WinMount Bus;c:\windows\system32\drivers\WinMTBus.sys [2009-02-22 196224] S3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe [2009-03-12 33176] S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-01-25 42000] . - - - - USUNIĘTO PUSTE WPISY - - - - HKCU-Run-Prec - h:\program files\Prec\PrecStarter.exe HKLM-Run-LCheck - h:\program files\Beniamin\LCheck.exe HKLM-Run-Cmaudio - cmicnfg.cpl . ------- Skan uzupełniający ------- . uStart Page = hxxp://search.orbitdownloader.com mStart Page = hxxp://www.yahoo.com/ mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html uInternet Connection Wizard,ShellNext = hxxp://www.allplayer.org/thankyou.php?ver=V3.7 uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com IE: &Download by Orbit - h:\program files\Orbit Downloader\orbitmxt.dll/201 IE: &Grab video by Orbit - h:\program files\Orbit Downloader\orbitmxt.dll/204 IE: Do&wnload selected by Orbit - h:\program files\Orbit Downloader\orbitmxt.dll/203 IE: Dodaj do blokowanych banerów - c:\program files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm IE: Down&load all by Orbit - h:\program files\Orbit Downloader\orbitmxt.dll/202 IE: E&ksport do programu Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 LSP: c:\windows\system32\imon.dll . ************************************************************************** skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... ************************************************************************** . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- - - - - - - - > 'winlogon.exe'(1008) c:\program files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll c:\windows\system32\klogon.dll - - - - - - - > 'lsass.exe'(1064) c:\program files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll c:\program files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll c:\program files\Kaspersky Lab\Kaspersky Internet Security 7.0\fssync.dll c:\windows\system32\imon.dll - - - - - - - > 'explorer.exe'(2132) c:\program files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll c:\program files\Kaspersky Lab\Kaspersky Internet Security 7.0\fssync.dll c:\program files\Kaspersky Lab\Kaspersky Internet Security 7.0\scrchpg.dll c:\windows\system32\msi.dll . ------------------------ Pozostałe uruchomione procesy ------------------------ . c:\program files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE c:\windows\system32\nvsvc32.exe c:\program files\CyberLink\Shared Files\RichVideo.exe c:\windows\system32\wdfmgr.exe c:\windows\system32\rundll32.exe c:\program files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe c:\program files\Common Files\Nero\Lib\NMIndexingService.exe c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe c:\combofix\hidec.exe c:\combofix\Catchme.tmp . ************************************************************************** . Czas ukończenia: 2009-04-04 14:06:57 - komputer został uruchomiony ponownie ComboFix-quarantined-files.txt 2009-04-04 12:05:36 Przed: 2 204 569 600 bajtów wolnych Po: 2,136,137,728 bajtów wolnych Current=3 Default=3 Failed=2 LastKnownGood=4 Sets=1,2,3,4 313 --- E O F --- 2009-03-13 02:03:51

**Posty:** 18165 · przez **wojtas** 04 Kwi 2009, 14:23

1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp

oraz skasuj folder C:\Qoobox
2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
5. Wykonaj skan Dr. Web CureIt
6. Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

i tym:

FixIEDef.

**Posty:** 40 · przez **ziggyddx** 04 Kwi 2009, 19:19

Zrobiłam wszystko. Skaner z http://www.kaspersky.pl/virusscanner.html wykrył dużo zainfekowanych plików. Teraz bardzo bym prosiła o podpowiedź jak usunąć te trojany, bo nie wiem czy samo usunięcie plików pomoże.

Kod: Zaznacz wszystko: sobota, 4 kwiecień 2009 System operacyjny: Microsoft Windows XP Professional Dodatek Service Pack 2 (build 2600) Wersja Kaspersky Online Scanner: 7.0.26.12 Data ostatniej aktualizacji bazy danych: Saturday, April 04, 2009 14:46:01 Liczba wpisów: 2009910 Ustawienia skanowania Typ bazy danych użytej do skanowania rozszerzona Skanuj archiwa tak Skanuj pocztowe bazy danych tak Obszar skanowania Mój komputer A:\ C:\ D:\ E:\ F:\ G:\ H:\ I:\ Statystyki skanowania Przeskanowanych plików 76612 Nazwa zagrożenia 3 Zainfekowanych obiektów 50 Podejrzanych obiektów 0 Czas skanowania 03:43:30 Nazwa pliku Nazwa zagrożenia Liczba zagrożeń D:\Moje Obrazy\Panienki\Esther Baxter\Web\Esther 4Sho! - The Unofficial Esther Baxter Fansite-Dateien\login.htm Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Moje Obrazy\Panienki\Esther Baxter\Web\Esther 4Sho! - The Unofficial Esther Baxter Fansite.htm Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\eBook.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\eBook01.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\eBook02.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\eBook04.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\eBook08.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\eBook09.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\HowTo.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\HowTo21.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\Review.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\Review05.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\Review06.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\Review08.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\Review09.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\Review16.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\Review18.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\Review19.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\Sign.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\Sign02.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\Sign05.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\Sign06.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\Sign08.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\Sign10.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\ENU\Sign11.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\eBook.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\eBook01.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\eBook02.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\eBook04.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\eBook08.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\eBook09.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\HowTo.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\HowTo21.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\Review.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\Review05.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\Review06.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\Review08.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\Review09.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\Review16.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\Review18.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\Review19.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\Sign.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\Sign02.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\Sign05.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\Sign06.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\Sign08.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\Sign10.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\Adobe Reader 6.0 CE\Reader\HowTo\POL\Sign11.html Zainfekowany: Trojan-Clicker.HTML.IFrame.aeo 1 D:\Programy\DAEMON Tools\SetupDTSB.exe Zainfekowany: not-a-virus:WebToolbar.Win32.WhenU.a 1 H:\Program Files\DVDFab 5\DVDFab.exe

Log z FixIEDef

Kod: Zaznacz wszystko: ******************************************************************************** * * * FixIEDef Log * * Version 1.7.22.7514 * * * ******************************************************************************** Created at 22:28:57 on Saturday, April 04, 2009 Time Zone : Logged On User : User Operating System : Microsoft Windows XP Professional Dodatek Service Pack 2 OS Architecture : X86 System Langauge : Polish Keyboard Layout : Polish Processor : X86 AMD Sempron(tm) 2800+ System Drive : C:\ Windows Directory : C:\WINDOWS System Directory : C:\WINDOWS\system32 System Drive Type : Fixed System Drive Status : READY System Drive Label : System System Drive Size : 8 GB System Drive Free : 1.87 GB Total Physical Memory: 767 MB Free Physical Memory : 473 MB Total Page File : 767 MB Free Page File : 1562 MB Total Virtual Memory : 2048 MB Free Virtual Memory : 1968 MB Boot State : Normal boot -------------------------------------------------------------------------------- !!! userinit.exe is Clean !!! -------------------------------------------------------------------------------- !!! Files that have been deleted !!! C:\WINDOWS\system32\Uninstall.ico -------------------------------------------------------------------------------- !!! Directories that have been removed !!! No malicious directories to be removed -------------------------------------------------------------------------------- !!! Registry entries that have been removed !!! No malicious Registry entries found ================================================================================ All Done :) ShadowPuterDude Safe Surfing!!!

**Posty:** 18165 · przez **wojtas** 05 Kwi 2009, 10:40

no usun jesli chcesz i sciagnij sobie nie zainfekowaną instalke.. a pliki wywal do kosza