przepraszam za zwloke
zasilacz!!!
delta electronic (asus)
model: ADP-90SB BB
input: 100-240V, (1,5A) 50-60Hz
output: 19V, (4,74A)
a wiec wedlug speedFan :
juz Po 2godzinach pracy samego tylko systemu z przegladarka internet :
hdd: 31c
temp1: 27c
core0: 66c - (ikony przedstawiaj plomien))
core1: 66c - (ikony przedstawiaj plomien))
ComboFix 07-12-20.1 - gringoo 2007-12-22 10:50:43.1 -
FAT32 x86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.597 [GMT 0:00]
Running from: D:\Programs\Spyware\ComboFix.exe
* Created a new restore point
.
((((((((((((((((((((((((( Files Created from 2007-11-22 to 2007-12-22 )))))))))))))))))))))))))))))))
.
2007-12-21 15:24 . 2005-10-31 10:17 135,168 -r------- C:\WINDOWS\system32\RtlCPAPI.dll
2007-12-21 15:23 . 2005-05-03 10:43 69,632 -r------- C:\WINDOWS\Alcmtr.exe
2007-12-20 13:13 . 2007-12-20 13:13 <DIR> d--hs---- C:\FOUND.000
2007-12-20 09:57 . 2007-12-04 13:04 837,496 --a------ C:\WINDOWS\system32\aswBoot.exe
2007-12-20 09:57 . 2004-01-09 09:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx
2007-12-20 09:57 . 2007-12-04 12:54 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr
2007-12-20 09:57 . 2007-12-04 14:55 94,544 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2007-12-20 09:57 . 2007-12-04 14:56 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2007-12-20 09:57 . 2007-12-04 14:51 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2007-12-20 09:57 . 2007-12-04 14:49 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2007-12-20 09:57 . 2007-12-04 14:53 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2007-12-19 19:58 . 2007-12-19 19:59 2,255 --a------ C:\optymalizacja.reg
2007-12-19 19:53 . 2007-12-19 19:55 2,255 --a------ C:\Documents and Settings\gringoo\optymalizacja.reg
2007-12-18 16:03 . 2007-12-18 16:04 <DIR> d-------- C:\Program Files\Common Files\ATI Technologies
2007-12-18 15:15 . 2007-12-18 15:15 <DIR> d-------- C:\Program Files\TuneUp Utilities 2006
2007-12-18 15:15 . 2007-12-18 15:15 <DIR> d-------- C:\Documents and Settings\gringoo\Application Data\TuneUp Software
2007-12-18 15:15 . 2006-10-05 19:26 24,072 --a------ C:\WINDOWS\system32\uxtuneup.dll
2007-12-18 15:14 . 2007-12-18 15:14 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-12-18 15:14 . 2007-12-18 15:14 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\TuneUp Software
2007-12-18 15:13 . 2007-12-18 15:13 708 --a------ C:\WINDOWS\unins000.dat
2007-12-18 10:12 . 2007-12-18 10:12 <DIR> d-------- C:\Program Files\Microsoft Bootvis
2007-12-18 09:50 . 2007-12-18 09:51 25,992 --a------ C:\WINDOWS\system32\pgdfgsvc.exe
2007-12-18 02:09 . 2007-12-18 02:09 <DIR> d-------- C:\Program Files\Odkurzacz
2007-12-17 19:09 . 2007-12-17 19:09 <DIR> d-------- C:\Program Files\SpeedFan
2007-12-17 19:09 . 2007-12-17 19:09 45 --a------ C:\WINDOWS\system32\initdebug.nfo
2007-12-17 16:22 . 2007-12-17 16:22 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-12-17 14:26 . 2007-12-17 14:26 <DIR> d-------- C:\Program Files\Alwil Software
2007-12-17 13:50 . 2006-03-29 17:36 133,632 -ra------ C:\WINDOWS\system32\drivers\m3aux.sys
2007-12-17 13:20 . 2007-12-17 13:20 <DIR> d-------- C:\Documents and Settings\gringoo\DoctorWeb
2007-12-12 09:25 . 2007-12-12 09:25 <DIR> d-------- C:\Program Files\FCComputers
2007-12-10 19:35 . 2007-12-10 19:36 <DIR> d-------- C:\Program Files\7-Zip
2007-12-09 10:35 . 2007-09-24 23:31 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2007-12-09 10:23 . 2007-12-09 10:23 <DIR> d--h----- C:\WINDOWS\wmp
2007-12-09 10:13 . 2005-09-23 07:29 626,688 --a------ C:\WINDOWS\system32\msvcr80.dll
2007-12-08 23:45 . 2007-12-08 23:45 <DIR> d-------- C:\Documents and Settings\gringoo\Application Data\Apple Computer
2007-12-08 23:40 . 2007-12-19 00:13 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2007-12-08 23:40 . 2007-12-08 23:40 1,409 --a------ C:\WINDOWS\QTFont.for
2007-12-08 23:26 . 2007-12-08 23:26 <DIR> d-------- C:\Documents and Settings\gringoo\Application Data\EPSON
2007-12-08 20:59 . 2007-12-08 20:59 50 --a------ C:\WINDOWS\MegaManager.INI
2007-12-08 16:23 . 2007-12-08 16:23 <DIR> d-------- C:\Documents and Settings\gringoo\WINDOWS
2007-12-07 15:38 . 2007-12-07 15:38 1,158 --a------ C:\WINDOWS\mozver.dat
2007-12-07 10:31 . 2007-12-07 10:31 <DIR> d-------- C:\Documents and Settings\gringoo\Application Data\Gadu-Gadu
2007-12-07 10:24 . 2007-12-07 10:24 <DIR> d-------- C:\Downloads
2007-12-07 10:10 . 2007-12-07 10:10 <DIR> d-------- C:\Program Files\Gadu-Gadu
2007-12-07 10:10 . 2007-12-07 10:10 <DIR> d-------- C:\Documents and Settings\gringoo\Gadu-Gadu
2007-12-06 22:49 . 2007-12-06 22:49 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\UDL
2007-12-06 22:47 . 2007-12-06 22:47 27 --a------ C:\WINDOWS\CDE DX4000DEFGIPS.ini
2007-12-06 22:45 . 2007-12-06 22:46 <DIR> d-------- C:\Program Files\EPSON
2007-12-06 22:45 . 2005-12-09 01:03 71,168 --a------ C:\WINDOWS\system32\E_FLBBEE.DLL
2007-12-06 22:45 . 2005-04-11 01:01 62,976 --a------ C:\WINDOWS\system32\E_FD4BBEE.DLL
2007-12-06 22:45 . 2004-09-10 20:12 49,152 --a------ C:\WINDOWS\system32\E_DCINST.DLL
2007-12-06 22:44 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2007-12-06 22:44 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\dllcache\usbprint.sys
2007-12-06 22:44 . 2004-08-03 22:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2007-12-06 22:44 . 2004-08-03 22:58 15,104 --a------ C:\WINDOWS\system32\dllcache\usbscan.sys
2007-12-06 22:38 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2007-12-06 22:38 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\dllcache\usbccgp.sys
2007-12-06 15:56 . 2007-12-06 15:56 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\LogiShrd
2007-12-06 15:56 . 2007-12-06 15:56 0 --ah----- C:\WINDOWS\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2007-12-06 15:56 . 2007-12-06 15:56 0 --ah----- C:\WINDOWS\system32\drivers\Msft_Kernel_LUsbFilt_01005.Wdf
2007-12-06 15:56 . 2007-12-06 15:56 0 --ah----- C:\WINDOWS\system32\drivers\Msft_Kernel_LMouFilt_01005.Wdf
2007-12-06 15:55 . 2007-12-06 15:55 <DIR> d-------- C:\Documents and Settings\gringoo\Application Data\Logitech
2007-12-06 15:54 . 2007-12-06 15:54 <DIR> d-------- C:\Program Files\Logitech
2007-12-06 15:54 . 2007-12-06 15:54 <DIR> d-------- C:\Program Files\Common Files\Logitech
2007-12-06 15:54 . 2007-12-06 15:54 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Logitech
2007-12-06 15:54 . 2007-04-11 15:33 1,419,024 --a------ C:\WINDOWS\system32\WdfCoInstaller01005.dll
2007-12-06 15:54 . 2007-04-23 04:00 163,840 --a------ C:\WINDOWS\system32\kemutb.dll
2007-12-06 15:54 . 2007-04-23 04:00 135,168 --a------ C:\WINDOWS\system32\KemUtil.dll
2007-12-06 15:54 . 2007-04-23 04:00 110,592 --a------ C:\WINDOWS\system32\KemWnd.dll
2007-12-06 15:54 . 2007-04-23 04:00 69,632 --a------ C:\WINDOWS\system32\KemXML.dll
2007-12-06 15:54 . 2007-04-11 15:32 56,080 --a------ C:\WINDOWS\KHALMNPR.Exe
2007-12-06 15:54 . 2007-04-11 15:32 36,112 --a------ C:\WINDOWS\system32\drivers\LMouFilt.Sys
2007-12-06 15:54 . 2007-04-11 15:32 34,832 --a------ C:\WINDOWS\system32\drivers\LHidFilt.Sys
2007-12-06 15:54 . 2007-04-11 15:33 28,688 --a------ C:\WINDOWS\system32\drivers\LUsbFilt.sys
2007-12-06 15:53 . 2007-12-06 15:53 <DIR> d-------- C:\Documents and Settings\gringoo\Application Data\InstallShield
2007-12-06 15:44 . 2007-12-06 15:44 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\WinZip
2007-12-06 11:07 . 2007-12-06 11:07 <DIR> d-------- C:\Documents and Settings\gringoo\Application Data\Azureus
2007-12-06 11:07 . 2007-12-06 11:07 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Azureus
2007-12-06 11:04 . 2007-12-06 11:04 <DIR> d-------- C:\Program Files\FlashGet
2007-12-06 11:04 . 2006-04-20 11:51 359,808 --a------ C:\WINDOWS\system32\drivers\tcpip.sys.flg
2007-12-06 10:59 . 2007-12-06 10:59 <DIR> d-------- C:\FlashGot 0.6.2
2007-12-06 08:34 . 2007-12-06 08:34 <DIR> d-------- C:\Program Files\MSXML 6.0
2007-12-06 08:32 . 2007-12-06 08:32 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Intel
2007-12-06 08:31 . 2007-12-06 08:31 <DIR> d-------- C:\Documents and Settings\gringoo\Application Data\Intel
2007-12-06 08:31 . 2007-12-06 08:31 840 --a------ C:\Settings.ini
2007-12-05 19:22 . 2007-12-05 19:22 <DIR> d-------- C:\Program Files\MSBuild
2007-12-05 19:19 . 2007-12-05 19:19 <DIR> d-------- C:\WINDOWS\system32\XPSViewer
2007-12-05 19:19 . 2007-12-05 19:19 <DIR> d-------- C:\Program Files\Reference Assemblies
2007-12-05 19:18 . 2006-06-29 13:07 14,048 --------- C:\WINDOWS\system32\spmsg2.dll
2007-12-04 20:40 . 2007-12-04 20:40 <DIR> d-------- C:\Documents and Settings\gringoo\Application Data\skypePM
2007-12-04 20:40 . 2007-12-04 20:40 32 --a------ C:\Documents and Settings\All Users\Application Data\ezsid.dat
2007-12-04 20:39 . 2007-12-04 20:39 <DIR> d-------- C:\Program Files\Skype
2007-12-04 20:39 . 2007-12-04 20:39 <DIR> d-------- C:\Program Files\Common Files\Skype
2007-12-04 01:39 . 2007-12-04 01:39 0 --a------ C:\WINDOWS\nsreg.dat
2007-12-04 01:33 . 2007-12-04 01:33 <DIR> d-------- C:\Program Files\Java
2007-12-04 01:28 . 2007-12-04 01:28 <DIR> d-------- C:\Program Files\Common Files\Java
2007-12-03 21:09 . 2007-12-03 21:09 <DIR> d-------- C:\Program Files\Winamp
2007-12-03 21:09 . 2007-12-03 21:09 <DIR> d-------- C:\Documents and Settings\gringoo\Application Data\Winamp
2007-12-02 09:44 . 2007-08-13 18:54 33,792 --a------ C:\WINDOWS\system32\dllcache\custsat.dll
2007-12-02 09:38 . 2007-12-02 09:38 <DIR> d-------- C:\Program Files\MSXML 4.0
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-15 00:55 --------- d-----w C:\Documents and Settings\gringoo\Application Data\Nero
2007-11-15 00:53 --------- d-----w C:\Documents and Settings\All Users\Application Data\Nero
2007-11-15 00:00 --------- d-----w C:\Documents and Settings\All Users\Application Data\Avira
2007-11-14 23:58 --------- d-----w C:\Program Files\SubEdit-Player
2007-11-14 23:04 --------- d-----w C:\Program Files\Wielki Slownik Angielsko-Polski
2007-11-14 22:47 --------- d-----w C:\Program Files\Common Files\Adobe Systems Shared
2007-11-14 22:47 --------- d-----w C:\Documents and Settings\All Users\Application Data\Adobe Systems
2007-11-14 22:29 --------- d-----w C:\Documents and Settings\gringoo\Application Data\Media Player Classic
2007-11-14 22:23 --------- d-----w C:\Program Files\QuickTime
2007-11-14 22:23 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple Computer
2007-11-14 21:45 --------- d-----w C:\Documents and Settings\gringoo\Application Data\Asus
2007-11-14 21:26 --------- d--h--r C:\Documents and Settings\gringoo\Application Data\Asus MiVo Messenger
2007-11-14 21:10 --------- d-----w C:\Documents and Settings\gringoo\Application Data\ATI
2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
2007-10-30 23:42 3,590,656 ------w C:\WINDOWS\system32\dllcache\mshtml.dll
2007-10-29 22:43 1,287,680 ----a-w C:\WINDOWS\system32\quartz.dll
2007-10-29 22:43 1,287,680 ------w C:\WINDOWS\system32\dllcache\quartz.dll
2007-10-27 17:40 227,328 ----a-w C:\WINDOWS\system32\wmasf.dll
2007-10-27 17:40 227,328 ----a-w C:\WINDOWS\system32\dllcache\wmasf.dll
2007-10-26 03:34 8,460,288 ----a-w C:\WINDOWS\system32\dllcache\shell32.dll
2007-10-10 23:56 824,832 ------w C:\WINDOWS\system32\dllcache\wininet.dll
2007-10-10 23:56 671,232 ------w C:\WINDOWS\system32\dllcache\mstime.dll
2007-10-10 23:56 232,960 ------w C:\WINDOWS\system32\dllcache\webcheck.dll
2007-10-10 23:56 105,984 ------w C:\WINDOWS\system32\dllcache\url.dll
2007-10-10 23:56 102,400 ------w C:\WINDOWS\system32\dllcache\occache.dll
2007-10-10 23:56 1,159,680 ------w C:\WINDOWS\system32\dllcache\urlmon.dll
2007-10-10 23:55 63,488 ------w C:\WINDOWS\system32\dllcache\icardie.dll
2007-10-10 23:55 6,065,664 ------w C:\WINDOWS\system32\dllcache\ieframe.dll
2007-10-10 23:55 52,224 ------w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2007-10-10 23:55 478,208 ------w C:\WINDOWS\system32\dllcache\mshtmled.dll
2007-10-10 23:55 459,264 ------w C:\WINDOWS\system32\dllcache\msfeeds.dll
2007-10-10 23:55 44,544 ------w C:\WINDOWS\system32\dllcache\iernonce.dll
2007-10-10 23:55 384,512 ------w C:\WINDOWS\system32\dllcache\iedkcs32.dll
2007-10-10 23:55 383,488 ------w C:\WINDOWS\system32\dllcache\ieapfltr.dll
2007-10-10 23:55 27,648 ------w C:\WINDOWS\system32\dllcache\jsproxy.dll
2007-10-10 23:55 267,776 ------w C:\WINDOWS\system32\dllcache\iertutil.dll
2007-10-10 23:55 230,400 ------w C:\WINDOWS\system32\dllcache\ieaksie.dll
2007-10-10 23:55 214,528 ------w C:\WINDOWS\system32\dllcache\dxtrans.dll
2007-10-10 23:55 193,024 ------w C:\WINDOWS\system32\dllcache\msrating.dll
2007-10-10 23:55 153,088 ------w C:\WINDOWS\system32\dllcache\ieakeng.dll
2007-10-10 23:55 132,608 ------w C:\WINDOWS\system32\dllcache\extmgr.dll
2007-10-10 23:55 124,928 ------w C:\WINDOWS\system32\dllcache\advpack.dll
2007-10-10 10:59 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe
2007-10-10 10:59 625,152 ------w C:\WINDOWS\system32\dllcache\iexplore.exe
2007-10-10 10:59 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
2007-10-10 05:46 161,792 ------w C:\WINDOWS\system32\dllcache\ieakui.dll
2007-06-13 10:23 22,040 ---h--w C:\Documents and Settings\gringoo\Application Data\wmp2.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 20:00]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HControl"="C:\WINDOWS\ATK0100\HControl.exe" [2006-04-17 09:24]
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 18:41]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 13:00]
"RTHDCPL"="RTHDCPL.EXE" [2006-05-04 07:59 C:\WINDOWS\RTHDCPL.exe]
"ATKMEDIA"="C:\Program Files\ASUS\ATK Media\DMEDIA.EXE" [2006-02-15 10:38]
"ASUS Live Update"="C:\Program Files\ASUS\ASUS Live Update\ALU.exe" [2006-02-21 15:20]
"Wireless Console 2"="C:\Program Files\Wireless Console 2\wcourier.exe" [2005-10-17 17:09]
"ACMON"="C:\Program Files\ASUS\Splendid\ACMON.exe" [2006-02-21 19:36]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 20:00]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Bluetooth Manager.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Bluetooth Manager.lnk
backup=C:\WINDOWS\pss\Bluetooth Manager.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Logitech SetPoint.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Logitech SetPoint.lnk
backup=C:\WINDOWS\pss\Logitech SetPoint.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^WinZip Quick Pick.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
backup=C:\WINDOWS\pss\WinZip Quick Pick.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^gringoo^Start Menu^Programs^Startup^Adobe Gamma.lnk]
path=C:\Documents and Settings\gringoo\Start Menu\Programs\Startup\Adobe Gamma.lnk
backup=C:\WINDOWS\pss\Adobe Gamma.lnkStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odkurzacz-MCD]
2007-05-03 10:02 264704 --a------ C:\Program Files\Odkurzacz\odk_mcd.exe
R2 UxTuneUp;TuneUp Design Expansion;C:\WINDOWS\System32\svchost.exe -k netsvcs []
R3 LUsbFilt;Logitech SetPoint KMDF USB Filter;C:\WINDOWS\system32\Drivers\LUsbFilt.Sys [2007-04-11 15:33]
R3 SynMini;ASUS WebCam, 1.3M, USB2.0, FF;C:\WINDOWS\system32\Drivers\SynMini.sys [2006-01-20 08:59]
R3 SynScan;ASUS WebCam Still Image;C:\WINDOWS\system32\Drivers\SynScan.sys [2006-01-02 10:02]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
*Newly Created Service* - CATCHME
*Newly Created Service* - PROCEXP90
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{20063EB9-64D3-53D3-3AEB-E740124D7590}]
C:\Documents and Settings\gringoo\Application Data\wmp.exe s
.
Contents of the 'Scheduled Tasks' folder
"2007-12-18 15:15:40 C:\WINDOWS\Tasks\1-Click Maintenance.job"
- C:\Program Files\TuneUp Utilities 2006\SystemOptimizer.exe
.
**************************************************************************
catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net Rootkit scan 2007-12-22 10:51:44
Windows 5.1.2600 Service Pack 2 FAT NTAPI
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2007-12-22 10:52:05
.
2007-12-14 00:35:03 --- E O F ---
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:04:24, on 2007-12-22
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ATK0100\HControl.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\ACEngSvr.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.gazeta.ie/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [ASUS Live Update] C:\Program Files\ASUS\ASUS Live Update\ALU.exe
O4 - HKLM\..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe
O4 - HKLM\..\Run: [ACMON] C:\Program Files\ASUS\Splendid\ACMON.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) -
http://support.asus.com/common/asusTek_sys_ctrl.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Unknown owner - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Unknown owner - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe (file missing)
--
End of file - 5807 bytes
prim7
