ComboFix 07-10-23.1 - Tongpu 2007-10-24 16:06:19.2 - NTFSx86 
Microsoft Windows XP Professional  5.1.2600.2.1250.1.1045.18.304 [GMT 1:00]
Running from: D:\Downloads\Logi - ochrona\ComboFix.exe
.

(((((((((((((((((((((((((   Files Created from 2007-09-24 to 2007-10-24  )))))))))))))))))))))))))))))))
.

2007-10-24 09:23	<DIR>	d--------	C:\Documents and Settings\Administrator\Dane aplikacji\Media Player Classic
2007-10-24 09:20	<DIR>	d--------	C:\Documents and Settings\Administrator\Dane aplikacji\Lavasoft
2007-10-24 09:18	<DIR>	d--h-----	C:\Documents and Settings\Administrator\Ustawienia lokalne
2007-10-24 09:18	<DIR>	d--------	C:\Documents and Settings\Administrator\Ulubione
2007-10-24 09:18	<DIR>	d--h-----	C:\Documents and Settings\Administrator\Szablony
2007-10-24 09:18	<DIR>	d--------	C:\Documents and Settings\Administrator\Pulpit
2007-10-24 09:18	<DIR>	d--------	C:\Documents and Settings\Administrator\Moje dokumenty
2007-10-24 09:18	<DIR>	dr-------	C:\Documents and Settings\Administrator\Menu Start
2007-10-24 09:18	<DIR>	dr-h-----	C:\Documents and Settings\Administrator\Dane aplikacji
2007-10-24 08:05	<DIR>	d--------	C:\Documents and Settings\Tongpu\Dane aplikacji\Media Player Classic
2007-10-24 07:36	51,200	--a------	C:\WINDOWS\NirCmd.exe
2007-10-24 07:08	<DIR>	d--------	C:\Program Files\K-Lite Codec Pack
2007-10-24 07:08	5,120	--a------	C:\WINDOWS\system32\ff_vfw.dll
2007-10-24 06:28	<DIR>	d--------	C:\Program Files\Lavasoft
2007-10-24 06:28	<DIR>	d--------	C:\Documents and Settings\Tongpu\Dane aplikacji\Lavasoft
2007-10-24 06:25	<DIR>	d--h-----	C:\WINDOWS\PIF
2007-10-24 04:48	0	--a------	C:\WINDOWS\nsreg.dat
2007-10-24 04:22	1,236,992	--a------	C:\WINDOWS\system32\wltray.exe
2007-10-24 04:22	1,093,632	--a------	C:\WINDOWS\system32\bcmwltry.exe
2007-10-24 04:22	180,224	--a------	C:\WINDOWS\system32\bcmwlu00.exe
2007-10-24 04:22	86,016	--a------	C:\WINDOWS\system32\preflib.dll
2007-10-24 04:22	44,032	--a------	C:\WINDOWS\system32\wltrynt.dll
2007-10-24 04:22	18,944	--a------	C:\WINDOWS\system32\wltrysvc.exe
2007-10-24 04:21	<DIR>	d--------	C:\Program Files\Belkin
2007-10-24 04:16	3,072	--a------	C:\WINDOWS\system32\drivers\audstub.sys
2007-10-24 04:15	66,591	--a------	C:\WINDOWS\system32\drivers\el90xbc5.sys
2007-10-24 04:15	58,624	--a------	C:\WINDOWS\system32\drivers\redbook.sys
2007-10-24 04:14	153,088	--a------	C:\WINDOWS\system32\irftp.exe
2007-10-24 04:14	87,424	--a------	C:\WINDOWS\system32\drivers\irda.sys
2007-10-24 04:14	36,425	--a------	C:\WINDOWS\system32\drivers\smcirda.sys
2007-10-24 04:14	27,648	--a------	C:\WINDOWS\system32\irmon.dll
2007-10-24 04:14	19,584	--a------	C:\WINDOWS\system32\drivers\rasirda.sys
2007-10-24 04:14	8,192	--a------	C:\WINDOWS\system32\wshirda.dll
2007-10-24 04:14	6,400	--a------	C:\WINDOWS\system32\drivers\enum1394.sys
2007-10-24 04:13	145,792	--a------	C:\WINDOWS\system32\drivers\portcls.sys
2007-10-24 04:13	96,256	--a------	C:\WINDOWS\system32\drivers\ac97intc.sys
2007-10-24 04:13	77,312	--a------	C:\WINDOWS\system32\usbui.dll
2007-10-24 04:13	60,288	--a------	C:\WINDOWS\system32\drivers\drmk.sys
2007-10-24 04:13	42,368	--a------	C:\WINDOWS\system32\drivers\AGP440.SYS
2007-10-24 04:13	14,080	--a------	C:\WINDOWS\system32\drivers\CmBatt.sys
2007-10-24 04:13	14,080	--a------	C:\WINDOWS\system32\drivers\battc.sys
2007-10-24 04:13	9,344	--a------	C:\WINDOWS\system32\drivers\compbatt.sys
2007-10-24 04:13	4,096	--a------	C:\WINDOWS\system32\ksuser.dll
2007-10-24 04:12	<DIR>	d--hs----	C:\WINDOWS\system32\driver32\ldf
2007-10-24 04:12	<DIR>	d--hs----	C:\WINDOWS\system32\driver32
2007-10-24 04:12	<DIR>	d--------	C:\Program Files\ToniArts
2007-10-24 04:10	<DIR>	d--------	C:\Program Files\ATI Technologies
2007-10-24 04:08	<DIR>	d--h-----	C:\Program Files\InstallShield Installation Information
2007-10-24 04:08	<DIR>	d--------	C:\Program Files\Common Files\InstallShield
2007-10-24 04:07	<DIR>	d--hs----	C:\WINDOWS\Installer
2007-10-24 04:07	<DIR>	d--hs----	C:\Program Files\Internet Explore
2007-10-24 04:07	<DIR>	dr-------	C:\Program Files
2007-10-24 04:04	<DIR>	dr-h-----	C:\Documents and Settings\Default User\Ustawienia lokalne
2007-10-24 04:04	<DIR>	d--------	C:\Documents and Settings\Default User\Ulubione
2007-10-24 04:04	<DIR>	d--h-----	C:\Documents and Settings\Default User\Szablony
2007-10-24 04:04	<DIR>	d--------	C:\Documents and Settings\Default User\Pulpit
2007-10-24 04:04	<DIR>	d--------	C:\Documents and Settings\Default User\Moje dokumenty
2007-10-24 04:04	<DIR>	dr-------	C:\Documents and Settings\Default User\Menu Start
2007-10-24 04:04	<DIR>	d--------	C:\Documents and Settings\All Users\Ulubione
2007-10-24 04:04	<DIR>	d--h-----	C:\Documents and Settings\All Users\Szablony
2007-10-24 04:04	<DIR>	d--------	C:\Documents and Settings\All Users\Pulpit
2007-10-24 04:04	<DIR>	dr-------	C:\Documents and Settings\All Users\Menu Start
2007-10-24 04:04	<DIR>	dr-------	C:\Documents and Settings\All Users\Dokumenty
2007-10-24 04:03	<DIR>	d--------	C:\WINDOWS\system32\CatRoot2
2007-10-24 04:03	<DIR>	d--------	C:\WINDOWS\system32\CatRoot
2007-10-24 04:03	<DIR>	dr-h-----	C:\Documents and Settings\Default User\Dane aplikacji
2007-10-24 04:03	<DIR>	dr-h-----	C:\Documents and Settings\All Users\Dane aplikacji
2007-10-24 04:02	<DIR>	d--h-----	C:\Documents and Settings\Tongpu\Ustawienia lokalne
2007-10-24 04:02	<DIR>	dr-------	C:\Documents and Settings\Tongpu\Ulubione
2007-10-24 04:02	<DIR>	d--h-----	C:\Documents and Settings\Tongpu\Szablony
2007-10-24 04:02	<DIR>	d--------	C:\Documents and Settings\Tongpu\Pulpit
2007-10-24 04:02	<DIR>	dr-------	C:\Documents and Settings\Tongpu\Moje dokumenty
2007-10-24 04:02	<DIR>	dr-------	C:\Documents and Settings\Tongpu\Menu Start
2007-10-24 04:02	<DIR>	dr-h-----	C:\Documents and Settings\Tongpu\Dane aplikacji
2007-10-24 04:02	<DIR>	d--------	C:\Documents and Settings
2007-10-24 04:00	<DIR>	d---s----	C:\WINDOWS\system32\Microsoft
2007-10-24 04:00	<DIR>	d--h-----	C:\Documents and Settings\LocalService\Ustawienia lokalne
2007-10-24 04:00	<DIR>	d--------	C:\Documents and Settings\LocalService\Dane aplikacji

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-10-24 02:44	---------	d-----w	C:\Program Files\Usługi online
.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIModeChange"="Ati2mdxx.exe" [2001-09-04 16:24 C:\WINDOWS\system32\Ati2mdxx.exe]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2003-01-24 21:00]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 01:44]

S3 USBSTOR;Sterownik magazynu masowego USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS

.
**************************************************************************

catchme 0.3.1232 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-24 16:10:48
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ... 

scanning hidden autostart entries ...