ComboFix 08-08-26.03 - Prezes 2008-08-27 22:43:09.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1250.48.1045.18.312 [GMT 2:00] Running from: D:\Programy\ComboFix.exe Command switches used :: D:\Programy\CFScript.txt * Created a new restore point [color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color] FILE :: C:\WINDOWS\rodqgpvlosa.dll C:\WINDOWS\rvoelbxt.exe C:\WINDOWS\system32\amuhohay.dll C:\WINDOWS\system32\mmx21991.dll C:\WINDOWS\system32\mx21991.dll C:\WINDOWS\system32\yahohuma.ini . Error: Cfiles.dat ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\rodqgpvlosa.dll C:\WINDOWS\rvoelbxt.exe C:\WINDOWS\system32\amuhohay.dll C:\WINDOWS\system32\mmx21991.dll C:\WINDOWS\system32\mx21991.dll C:\WINDOWS\system32\yahohuma.ini . ((((((((((((((((((((((((( Files Created from 2008-07-27 to 2008-08-27 ))))))))))))))))))))))))))))))) . 2008-08-27 18:58 . 2008-08-27 18:58 d-------- C:\Program Files\Trend Micro 2008-08-27 18:49 . 2008-08-27 18:49 d-------- C:\WINDOWS\system32\xircom 2008-08-27 18:49 . 2008-08-27 18:49 d-------- C:\WINDOWS\system32\oobe 2008-08-27 18:49 . 2008-08-27 18:49 d-------- C:\WINDOWS\srchasst 2008-08-27 18:49 . 2008-08-27 18:49 d-------- C:\WINDOWS\msagent 2008-08-27 18:49 . 2008-08-27 18:49 d-------- C:\Program Files\microsoft frontpage 2008-08-27 18:18 . 2008-08-27 18:18 d-------- C:\Program Files\Spybot - Search & Destroy 2008-08-27 18:18 . 2008-08-27 18:50 d-------- C:\D & S\All Users\Dane aplikacji\Spybot - Search & Destroy 2008-08-27 16:39 . 2008-08-27 16:39 850 --a------ C:\WINDOWS\system32\ProductTweaks.xml 2008-08-27 16:39 . 2008-08-27 16:39 385 --a------ C:\WINDOWS\system32\user_gensett.xml 2008-08-27 16:12 . 2008-08-27 16:12 d-------- C:\WINDOWS\system32\logs 2008-08-27 16:10 . 2008-08-27 16:10 d-------- C:\WINDOWS\system32\URTTemp 2008-08-27 16:09 . 2008-08-27 18:56 d-------- C:\Program Files\Common Files\BitDefender 2008-08-27 13:09 . 2008-05-27 19:26 765,952 --------- C:\WINDOWS\system32\dllcache\vgx.dll 2008-08-25 10:43 . 2008-08-25 10:43 d-------- C:\D & S\Prezes\Dane aplikacji\AdobeUM 2008-08-15 12:06 . 2008-08-15 12:06 d-------- C:\Program Files\Alcohol Soft 2008-08-15 12:06 . 2004-04-30 09:37 160,640 --a------ C:\WINDOWS\system32\drivers\a347bus.sys 2008-08-15 12:06 . 2004-04-30 09:33 5,248 --a------ C:\WINDOWS\system32\drivers\a347scsi.sys 2008-08-15 12:01 . 2008-08-15 12:01 d-------- C:\D & S\Prezes\Dane aplikacji\Gadu-Gadu 2008-08-15 11:57 . 2008-08-15 11:57 d-------- C:\Program Files\Gadu-Gadu 2008-08-15 11:57 . 2008-08-15 11:57 d-------- C:\D & S\Prezes\Gadu-Gadu 2008-08-15 11:43 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll 2008-08-15 11:43 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll 2008-08-15 11:43 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui 2008-08-14 14:11 . 2008-08-14 14:11 d-------- C:\Program Files\ASUS 2008-08-14 13:25 . 2008-08-14 13:25 d-------- C:\Program Files\MSN Messenger 2008-08-14 13:20 . 2008-08-14 13:20 d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller 2008-08-14 13:19 . 2008-08-14 13:19 d-------- C:\Program Files\Windows Live 2008-08-14 10:20 . 2008-06-14 19:36 273,024 --------- C:\WINDOWS\system32\drivers\bthport.sys 2008-08-14 10:20 . 2008-06-14 19:36 273,024 --------- C:\WINDOWS\system32\dllcache\bthport.sys 2008-08-13 23:30 . 2008-08-26 18:24 d-------- C:\D & S\Prezes\Dane aplikacji\skypePM 2008-08-13 23:30 . 2008-08-13 23:30 32 --a------ C:\D & S\All Users\Dane aplikacji\ezsid.dat 2008-08-13 23:29 . 2008-08-13 23:29 d-------- C:\Program Files\Skype 2008-08-13 23:29 . 2008-08-13 23:29 d-------- C:\Program Files\Common Files\Skype 2008-08-13 23:29 . 2008-08-26 22:45 d-------- C:\D & S\Prezes\Dane aplikacji\Skype 2008-08-13 23:29 . 2008-08-13 23:29 d-------- C:\D & S\All Users\Dane aplikacji\Skype 2008-08-13 16:36 . 2008-08-27 15:26 d--h----- C:\WINDOWS\$hf_mig$ 2008-08-13 16:36 . 2005-06-28 10:21 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe 2008-08-12 12:16 . 2008-08-14 14:14 69 --a------ C:\WINDOWS\NeroDigital.ini 2008-08-12 00:22 . 2008-08-12 00:22 d-------- C:\D & S\Prezes\Dane aplikacji\Ahead 2008-08-12 00:21 . 2008-08-12 00:21 d-------- C:\Program Files\Nero 2008-08-12 00:21 . 2008-08-12 00:21 d-------- C:\Program Files\Common Files\Ahead 2008-08-12 00:13 . 2008-08-12 00:13 d-------- C:\Program Files\ffdshow 2008-08-12 00:13 . 2008-06-08 23:58 60,273 --a------ C:\WINDOWS\system32\pthreadGC2.dll 2008-08-12 00:13 . 2008-03-28 19:41 7,680 --a------ C:\WINDOWS\system32\ff_vfw.dll 2008-08-12 00:13 . 2008-03-28 19:40 6,144 --a------ C:\WINDOWS\system32\ff_acm.acm 2008-08-12 00:13 . 2007-07-10 18:10 547 --a------ C:\WINDOWS\system32\ff_vfw.dll.manifest 2008-08-12 00:12 . 2008-08-12 00:12 d-------- C:\D & S\Prezes\Dane aplikacji\BESTplayer 2008-08-11 00:13 . 2008-08-13 10:27 d-------- C:\D & S\Prezes\Dane aplikacji\Tibia 2008-08-11 00:13 . 2008-08-27 22:32 d-a------ C:\D & S\All Users\Dane aplikacji\TEMP 2008-08-11 00:12 . 2008-08-27 19:59 d-------- C:\Program Files\TibiaBot NG 2008-08-11 00:03 . 2008-08-11 00:03 d-------- C:\Program Files\WapSter 2008-08-11 00:03 . 2008-08-11 00:04 d-------- C:\D & S\Prezes\WapSter 2008-08-11 00:00 . 2008-08-11 00:00 d-------- C:\Program Files\Winamp 2008-08-11 00:00 . 2008-08-11 00:01 d-------- C:\D & S\Prezes\Dane aplikacji\Winamp 2008-08-10 23:58 . 2008-08-10 23:58 d-------- C:\Program Files\DAEMON Tools 2008-08-10 23:58 . 2008-08-10 23:58 223,128 --a------ C:\WINDOWS\system32\drivers\dtscsi.sys 2008-08-10 23:56 . 2008-08-10 23:56 642,560 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2008-08-10 23:56 . 2008-08-10 23:56 96,384 --a------ C:\WINDOWS\system32\drivers\sptd0477.sys 2008-08-10 23:55 . 2008-08-11 22:21 d-------- C:\Program Files\BitComet_0.70 2008-08-10 23:54 . 2008-08-10 23:54 d-------- C:\Program Files\Common Files\Adobe 2008-08-10 23:34 . 2008-08-10 23:34 d-------- C:\Program Files\Opera 2008-08-10 23:31 . 2008-04-14 00:16 11,136 --a------ C:\WINDOWS\system32\drivers\SLIP.sys 2008-08-10 23:31 . 2008-08-10 23:31 552 --a------ C:\WINDOWS\system32\d3d8caps.dat 2008-08-10 23:30 . 2001-10-26 16:57 12,160 --a------ C:\WINDOWS\system32\drivers\mouhid.sys 2008-08-10 23:23 . 2008-04-14 21:50 14,720 --a------ C:\WINDOWS\system32\drivers\kbdhid.sys 2008-08-10 23:11 . 2008-08-10 23:11 d--h----- C:\Program Files\InstallShield Installation Information 2008-08-10 23:11 . 2008-08-10 23:11 d-------- C:\Program Files\Common Files\InstallShield 2008-08-10 23:11 . 2008-08-10 23:11 d-------- C:\Program Files\C-Media 3D Audio 2008-08-10 23:11 . 2003-08-05 14:23 266,240 --a------ C:\WINDOWS\CMIUninstall.exe 2008-08-10 23:11 . 2003-07-22 11:15 225,280 --a------ C:\WINDOWS\CmiRmRedundDir.exe 2008-08-10 23:11 . 2002-08-20 08:58 139,264 -ra------ C:\WINDOWS\system32\IDEproperty.dll 2008-08-10 23:11 . 2002-10-17 09:14 49,024 -ra------ C:\WINDOWS\system32\drivers\sisidex.sys 2008-08-10 23:11 . 2002-10-18 15:56 28,672 --a------ C:\WINDOWS\CMIRmDriver.dll 2008-08-10 23:11 . 2002-08-20 11:19 9,472 -ra------ C:\WINDOWS\system32\drivers\sisperf.sys 2008-08-10 23:11 . 2003-03-25 11:50 4,096 -ra------ C:\WINDOWS\system32\drivers\siside.sys 2008-08-10 23:02 . 2008-08-10 23:02 d-------- C:\Program Files\SiSLan 2008-08-10 23:02 . 2002-07-10 17:39 32,256 -ra------ C:\WINDOWS\system32\drivers\sisnic.sys 2008-08-10 22:57 . 2002-07-12 12:15 106,496 --a------ C:\WINDOWS\SiSUSBrg.exe 2008-08-10 22:57 . 2003-07-18 03:58 36,992 -ra------ C:\WINDOWS\system32\drivers\SISAGPX.SYS 2008-08-10 22:57 . 2002-01-02 09:40 32,768 --a------ C:\WINDOWS\SIS_LIB.DLL 2008-08-10 22:57 . 2001-12-07 04:11 3,583 --a------ C:\WINDOWS\SiSport.sys 2008-08-10 22:56 . 1998-01-23 14:15 304,640 --a------ C:\WINDOWS\IsUn0415.exe 2008-08-10 22:54 . 2000-03-29 16:17 5,824 --a------ C:\WINDOWS\system32\drivers\ASUSHWIO.SYS 2008-08-10 22:54 . 2008-08-14 14:09 1,574 --a------ C:\WINDOWS\Ascd_tmp.ini 2008-08-10 22:47 . 2008-04-14 00:06 44,672 --a------ C:\WINDOWS\system32\drivers\UAGP35.SYS 2008-08-10 21:45 . 2008-04-14 22:50 21,504 --a------ C:\WINDOWS\system32\hidserv.dll 2008-08-10 21:33 . 2008-04-14 22:51 129,536 --a------ C:\WINDOWS\system32\ksproxy.ax 2008-08-10 21:33 . 2008-04-14 00:16 121,984 --a------ C:\WINDOWS\system32\drivers\usbvideo.sys 2008-08-10 21:33 . 2008-04-14 22:51 91,648 --a------ C:\WINDOWS\system32\kswdmcap.ax 2008-08-10 21:33 . 2008-04-14 22:51 61,952 --a------ C:\WINDOWS\system32\kstvtune.ax 2008-08-10 21:33 . 2008-04-14 22:50 54,784 --a------ C:\WINDOWS\system32\vfwwdm32.dll 2008-08-10 21:33 . 2008-04-14 22:51 43,008 --a------ C:\WINDOWS\system32\ksxbar.ax 2008-08-10 21:33 . 2008-04-14 22:51 28,672 --a------ C:\WINDOWS\system32\vidcap.ax 2008-08-10 21:33 . 2008-04-14 22:51 20,992 --a------ C:\WINDOWS\system32\dshowext.ax 2008-08-10 21:33 . 2008-04-14 22:50 4,096 --a------ C:\WINDOWS\system32\ksuser.dll 2008-08-10 21:30 . 2008-04-14 00:15 32,128 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys 2008-08-10 21:30 . 2008-04-14 00:15 10,368 --a------ C:\WINDOWS\system32\drivers\hidusb.sys 2008-08-10 21:27 . 2008-08-10 21:27 d-------- C:\WINDOWS\SiS 2008-08-10 19:03 . 2008-08-27 18:46 d-------- C:\temp 2008-08-10 19:02 . 2008-08-10 19:02 d-------- C:\D & S\Prezes\Dane aplikacji\Thinstall 2008-08-10 19:02 . 2008-08-13 23:39 156 --a------ C:\WINDOWS\Twunk001.MTX 2008-08-10 19:02 . 2008-08-13 23:39 2 --a------ C:\WINDOWS\Twain001.Mtx 2008-08-10 19:02 . 2008-08-10 19:02 0 --a------ C:\WINDOWS\Twunk002.MTX 2008-08-10 19:00 . 2008-08-27 22:44 d--h----- C:\D & S\Prezes\Ustawienia lokalne 2008-08-10 19:00 . 2008-08-27 18:44 dr------- C:\D & S\Prezes\Ulubione 2008-08-10 19:00 . 2008-08-10 18:55 d--h----- C:\D & S\Prezes\Szablony 2008-08-10 19:00 . 2008-08-27 22:43 d-------- C:\D & S\Prezes\Pulpit 2008-08-10 19:00 . 2008-08-14 23:35 dr------- C:\D & S\Prezes\Moje dokumenty 2008-08-10 19:00 . 2008-08-15 11:57 dr------- C:\D & S\Prezes\Menu Start 2008-08-10 19:00 . 2008-08-27 18:56 dr-h----- C:\D & S\Prezes\Dane aplikacji 2008-08-10 19:00 . 2008-08-27 22:39 d-------- C:\D & S\Prezes . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-08-10 16:55 --------- d-----w C:\Program Files\Windows Media Connect 2 2008-07-15 22:22 32,768 ----a-w C:\WINDOWS\system32\drivers\sisnicxp.sys 2008-07-15 22:22 104,320 ----a-w C:\WINDOWS\system32\drivers\Rtnicxp.sys 2008-07-15 22:19 219,648 ----a-w C:\WINDOWS\system32\uxtheme.dll 2008-07-15 22:19 140,800 ----a-w C:\WINDOWS\system32\sfc_os.dll 2008-07-15 22:17 55,296 ----a-w C:\WINDOWS\system32\iesetup.dll 2008-07-15 22:17 48,128 ----a-w C:\WINDOWS\system32\mshtmler.dll 2008-07-15 22:17 45,568 ----a-w C:\WINDOWS\system32\mshta.exe 2008-07-15 22:17 40,960 ----a-w C:\WINDOWS\system32\licmgr10.dll 2008-07-15 22:17 36,352 ----a-w C:\WINDOWS\system32\imgutil.dll 2008-07-15 22:17 3,166,720 ----a-w C:\WINDOWS\system32\syssetup.dll 2008-07-15 22:17 26,112 ----a-w C:\WINDOWS\system32\idndl.dll 2008-07-15 22:17 24,576 ----a-w C:\WINDOWS\system32\nlsdl.dll 2008-07-15 22:17 23,552 ----a-w C:\WINDOWS\system32\normaliz.dll 2008-07-15 22:17 156,160 ----a-w C:\WINDOWS\system32\msls31.dll 2008-07-15 22:16 78,336 ----a-w C:\WINDOWS\system32\ieencode.dll 2008-07-15 22:16 71,680 ----a-w C:\WINDOWS\system32\admparse.dll 2008-07-15 22:16 17,408 ----a-w C:\WINDOWS\system32\corpol.dll 2008-07-15 21:44 99,840 ----a-w C:\WINDOWS\system32\wmpshell.dll 2008-07-15 21:44 8,277,504 ----a-w C:\WINDOWS\system32\wmploc.dll 2008-07-15 21:44 603,648 ----a-w C:\WINDOWS\system32\wmspdmod.dll 2008-07-15 21:44 4,096 ----a-w C:\WINDOWS\system32\wmvdmoe2.dll 2008-07-15 21:44 4,096 ----a-w C:\WINDOWS\system32\wmvdmod.dll 2008-07-15 21:44 4,096 ----a-w C:\WINDOWS\system32\wmsdmoe2.dll 2008-07-15 21:44 4,096 ----a-w C:\WINDOWS\system32\wmsdmod.dll 2008-07-15 21:44 314,880 ----a-w C:\WINDOWS\system32\wmpdxm.dll 2008-07-15 21:44 242,688 ----a-w C:\WINDOWS\system32\wmpasf.dll 2008-07-15 21:44 1,329,152 ----a-w C:\WINDOWS\system32\wmspdmoe.dll 2008-07-15 17:06 7,918,272 ----a-w C:\WINDOWS\system32\dxdiag.exe 2008-07-15 17:06 161,482,673 ----a-w C:\WINDOWS\system32\mspaint.exe 2008-07-15 17:05 9,491,227 ----a-w C:\WINDOWS\system32\cleanmgr.exe 2008-07-15 17:05 622,632 ----a-w C:\WINDOWS\system32\msconfig.exe 2008-07-11 10:14 4,145,152 ----a-w C:\WINDOWS\system32\logonui.exe 2008-07-07 20:29 253,952 ----a-w C:\WINDOWS\system32\es.dll 2008-07-07 20:29 253,952 ------w C:\WINDOWS\system32\dllcache\es.dll 2008-07-06 07:21 8,058,368 ----a-w C:\WINDOWS\system32\winntbbu.dll 2008-06-25 16:33 4,017,152 ----a-w C:\WINDOWS\system32\xpsp2res.dll 2008-06-24 16:46 74,240 ----a-w C:\WINDOWS\system32\mscms.dll 2008-06-24 16:46 74,240 ------w C:\WINDOWS\system32\dllcache\mscms.dll 2008-06-24 08:42 3,592,192 ------w C:\WINDOWS\system32\dllcache\mshtml.dll 2008-06-23 09:23 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe 2008-06-23 09:23 625,664 ------w C:\WINDOWS\system32\dllcache\iexplore.exe 2008-06-23 09:20 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe 2008-06-21 05:23 161,792 ------w C:\WINDOWS\system32\dllcache\ieakui.dll 2008-06-20 17:48 246,784 ----a-w C:\WINDOWS\system32\mswsock.dll 2008-06-20 17:48 246,784 ------w C:\WINDOWS\system32\dllcache\mswsock.dll 2008-06-20 17:48 147,968 ------w C:\WINDOWS\system32\dllcache\dnsapi.dll 2008-06-20 14:42 1,562,112 ----a-w C:\WINDOWS\system32\wiashext.dll 2008-06-20 14:39 1,021,440 ----a-w C:\WINDOWS\system32\wiaacmgr.exe 2008-06-20 14:35 206,336 ----a-w C:\WINDOWS\system32\taskmgr.exe 2008-06-20 14:27 194,048 ----a-w C:\WINDOWS\system32\sysocmgr.exe 2008-06-20 14:05 3,965,952 ----a-w C:\WINDOWS\system32\shimgvw.dll 2008-06-20 13:49 721,920 ----a-w C:\WINDOWS\system32\shdoclc.dll 2008-06-20 13:48 1,060,864 ----a-w C:\WINDOWS\system32\rasdlg.dll 2008-06-20 13:36 1,141,760 ----a-w C:\WINDOWS\system32\printui.dll 2008-06-20 13:32 489,472 ----a-w C:\WINDOWS\system32\ntshrui.dll 2008-06-20 13:32 2,623,488 ----a-w C:\WINDOWS\system32\newdev.dll 2008-06-20 13:30 3,121,152 ----a-w C:\WINDOWS\system32\netshell.dll 2008-06-20 13:16 300,032 ----a-w C:\WINDOWS\system32\mstask.dll 2008-06-20 13:02 2,263,040 ----a-w C:\WINDOWS\explorer.exe 2008-06-20 12:46 454,144 ----a-w C:\WINDOWS\system32\cmdial32.dll 2008-06-20 11:51 361,600 ------w C:\WINDOWS\system32\dllcache\tcpip.sys 2008-06-20 11:40 138,496 ------w C:\WINDOWS\system32\dllcache\afd.sys 2008-06-20 11:08 225,856 ------w C:\WINDOWS\system32\dllcache\tcpip6.sys . ------- Sigcheck ------- 2008-04-14 21:59 2130432 666be8f75f42d0e1fb7e39b94c75cb84 C:\WINDOWS\system32\ntkrnlpa.exe 2008-05-16 15:48 2172544 4fe635042d54e2a2d31055d631b4bc48 C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]000\DriverFiles\i386\ntkrnlpa.exe 2008-04-14 21:59 2251776 e038a76c1931126ce64f694dd2f148b7 C:\WINDOWS\system32\ntoskrnl.exe 2008-05-16 15:50 2295680 5a1adb52f5d35e284aa1136af439314e C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]000\DriverFiles\i386\ntoskrnl.exe 2008-06-20 15:02 2263040 331f366a4b20c610a7eac4790f94467a C:\WINDOWS\explorer.exe . ((((((((((((((((((((((((((((( snapshot@2008-08-27_18.53.14.20 ))))))))))))))))))))))))))))))))))))))))) . + 2000-08-31 06:00:00 28,672 ----a-w C:\WINDOWS\Nircmd.exe + 2000-08-31 06:00:00 212,480 ----a-w C:\WINDOWS\swxcacls.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-07-07 09:42 2156368] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SiSUSBRG"="C:\WINDOWS\SiSUSBrg.exe" [2002-07-12 12:15 106496] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2008-05-03 05:46 13529088] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2008-05-03 05:46 86016] "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "nltide_2"="shell32" [X] C:\D & S\All Users\Menu Start\Programy\Autostart\ Adobe Reader Speed Launch.lnk - C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-A70001000000}\SC_Reader.exe [2008-08-10 23:54:07 25214] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "DisableCAD"= 1 (0x1) "DisableStatusMessages"= 1 (0x1) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoSMHelp"= 1 (0x1) "ForceClassicControlPanel"= 1 (0x1) "NoSMMyPictures"= 1 (0x1) "NoSMConfigurePrograms"= 1 (0x1) "NoInstrumentation"= 1 (0x1) "NoStartMenuMFUprogramsList"= 1 (0x1) [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoSMHelp"= 1 (0x1) "ForceClassicControlPanel"= 1 (0x1) "NoSMMyPictures"= 1 (0x1) "NoSMConfigurePrograms"= 1 (0x1) "NoInstrumentation"= 1 (0x1) "NoStartMenuMFUprogramsList"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.avis"= ff_acm.acm [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "C:\\D & S\\Prezes\\Dane aplikacji\\Thinstall\\APCS3E\\4000005700003i\\mDNSResponder.exe"= "C:\\Program Files\\WapSter\\AQQ\\AQQ.exe"= "C:\\PROGRA~1\\WapSter\\AQQ\\AQQ.exe"= "C:\\Program Files\\Opera\\opera.exe"= "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"= "C:\\Program Files\\Skype\\Phone\\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "25694:TCP"= 25694:TCP:BitComet 25694 TCP "25694:UDP"= 25694:UDP:BitComet 25694 UDP S3 SISNICXP;SiS PCI Fast Ethernet Adapter Driver for NDIS51;C:\WINDOWS\system32\DRIVERS\sisnicxp.sys [2008-07-16 00:22] S3 USBSTOR;Sterownik magazynu masowego USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 00:15] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] DcomLaunch REG_MULTI_SZ DcomLaunch *Newly Created Service* - CATCHME . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-08-27 22:44:21 Windows 5.1.2600 Dodatek Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2008-08-27 22:45:24 ComboFix-quarantined-files.txt 2008-08-27 20:45:10 ComboFix2.txt 2008-08-27 16:53:57 Pre-Run: 16,536,211,456 bajtów wolnych Post-Run: 16,526,786,560 bajtów wolnych 287 --- E O F --- 2008-08-27 13:27:26