Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Wersja bazy: 6079 Windows 5.1.2600 Dodatek Service Pack 3 Internet Explorer 8.0.6001.18702 2011-03-16 23:02:20 mbam-log-2011-03-16 (23-02-20).txt Typ skanowania: Pełne skanowanie (C:\|) Przeskanowano obiektów: 200086 Upłynęło: 22 minut(y), 18 sekund(y) Zainfekowanych procesów w pamięci: 0 Zainfekowanych modułów w pamięci: 0 Zainfekowanych kluczy rejestru: 20 Zainfekowanych wartości rejestru: 0 Zainfekowane informacje rejestru systemowego: 0 Zainfekowanych folderów: 0 Zainfekowanych plików: 5 Zainfekowanych procesów w pamięci: (Nie znaleziono zagrożeń) Zainfekowanych modułów w pamięci: (Nie znaleziono zagrożeń) Zainfekowanych kluczy rejestru: HKEY_CLASSES_ROOT\CLSID\{6d5ae610-803a-e578-8b93-ee9ce23be350} (Adware.Dymanet) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Sky-Banners (Adware.Adrotator) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\Software\Street-Ads (Adware.Adrotator) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Sky-Banners (Adware.Adrotator) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Street-Ads (Adware.Adrotator) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02711799-899c-08df-93a5-34bf2e1bfbaa} (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{02711799-899c-08df-93a5-34bf2e1bfbaa} (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{02711799-899C-08DF-93A5-34BF2E1BFBAA} (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4E2EAF46-FE48-4E30-8D7B-1B0C495DFB68} (Adware.Adrotator) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{4E2EAF46-FE48-4E30-8D7B-1B0C495DFB68} (Adware.Adrotator) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\adfalkchpr.adfalkchpr.1.0 (Adware.Adrotator) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\adfalkchpr.adfalkchpr (Adware.Adrotator) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{4E2EAF46-FE48-4E30-8D7B-1B0C495DFB68} (Adware.Adrotator) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{4E2EAF46-FE48-4E30-8D7B-1B0C495DFB68} (Adware.Adrotator) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F1AC2482-6B1A-48EF-A9BA-5E1E60CF52F9} (Adware.AdRotator) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{F1AC2482-6B1A-48EF-A9BA-5E1E60CF52F9} (Adware.AdRotator) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\brumalkchgrm.brumalkchgrm.1.0 (Adware.AdRotator) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\brumalkchgrm.brumalkchgrm (Adware.AdRotator) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{F1AC2482-6B1A-48EF-A9BA-5E1E60CF52F9} (Adware.AdRotator) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{F1AC2482-6B1A-48EF-A9BA-5E1E60CF52F9} (Adware.AdRotator) -> Quarantined and deleted successfully. Zainfekowanych wartości rejestru: (Nie znaleziono zagrożeń) Zainfekowane informacje rejestru systemowego: (Nie znaleziono zagrożeń) Zainfekowanych folderów: (Nie znaleziono zagrożeń) Zainfekowanych plików: c:\documents and settings\robert\ustawienia lokalne\Temp\1.exe (Trojan.Dropper) -> Quarantined and deleted successfully. c:\RECYCLER\s-1-5-21-606747145-1390067357-1417001333-1002\Dc236.exe (Trojan.P2P.Dropper) -> Quarantined and deleted successfully. c:\RECYCLER\s-1-5-21-606747145-1390067357-1417001333-1002\Dc237.exe (Trojan.P2P.Dropper) -> Quarantined and deleted successfully. c:\WINDOWS\system32\1eae29b8-24a7-2065-c9d6-67768dba5f1c.dll (Trojan.BHO) -> Quarantined and deleted successfully. c:\WINDOWS\$xntuninstall643$\cvwsy.dll (Adware.AdRotator) -> Quarantined and deleted successfully.