Kod: Zaznacz cały
ComboFix 10-03-29.04 - Tomasz 2010-03-31 21:30:47.1.1 - FAT32x86
Microsoft Windows XP Professional 5.1.2600.2.1250.48.1045.18.1534.1259 [GMT 2:00]
Uruchomiony z: c:\documents and settings\Tomasz\Pulpit\ComboFix.exe
.
((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\system32\ADADIX16.DLL
c:\windows\system32\ieuinit.inf
.
((((((((((((((((((((((((( Pliki utworzone od 2010-02-28 do 2010-03-31 )))))))))))))))))))))))))))))))
.
2010-03-31 21:00 . 2001-10-26 19:29 77824 ----a-w- c:\windows\system32\dllcache\spcommon.dll
2010-03-31 21:00 . 2001-10-26 19:28 61440 ----a-w- c:\windows\system32\dllcache\spcplui.dll
2010-03-31 21:00 . 2001-10-26 19:29 774144 ----a-w- c:\windows\system32\dllcache\spttseng.dll
2010-03-31 21:00 . 2004-08-03 22:44 741376 ----a-w- c:\windows\system32\dllcache\sapi.dll
2010-03-31 21:00 . 2001-10-26 19:30 36864 ----a-w- c:\windows\system32\dllcache\sapisvr.exe
2010-03-31 21:00 . 2001-10-26 19:27 19456 ----a-w- c:\windows\system32\dllcache\agt041f.dll
2010-03-31 21:00 . 2001-10-26 19:27 19456 ----a-w- c:\windows\system32\dllcache\agt0419.dll
2010-03-31 21:00 . 2001-08-18 00:55 6144 ----a-w- c:\windows\system32\dllcache\kbdtuq.dll
2010-03-31 21:00 . 2001-08-18 00:55 6144 ----a-w- c:\windows\system32\dllcache\kbdtuf.dll
2010-03-31 21:00 . 2001-08-18 00:55 5632 ----a-w- c:\windows\system32\dllcache\kbdazel.dll
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-31 19:23 . 2010-03-31 19:22 33 ----a-w- c:\windows\system32\drivers\adidsl.cfg
2010-03-31 19:22 . 2010-03-31 19:22 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-03-31 19:22 . 2010-03-31 19:22 -------- d-----w- c:\program files\SAGEM
2010-03-31 19:22 . 2010-03-31 19:22 -------- d-----w- c:\documents and settings\Tomasz\Dane aplikacji\InstallShield
2010-03-31 19:19 . 2001-10-26 16:15 49492 ----a-w- c:\windows\system32\perfc015.dat
2010-03-31 19:19 . 2001-10-26 16:15 355486 ----a-w- c:\windows\system32\perfh015.dat
2010-03-31 19:12 . 2010-03-31 19:12 -------- d-----w- c:\program files\microsoft frontpage
2010-03-31 19:11 . 2010-03-31 19:11 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-03-31 19:10 . 2010-03-31 19:10 -------- d-----w- c:\program files\Usługi online
2010-03-31 19:07 . 2010-03-31 19:07 21856 ----a-w- c:\windows\system32\emptyregdb.dat
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360]
c:\documents and settings\All Users\Menu Start\Programy\Autostart\
DSLMON.lnk - c:\program files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2010-3-31 1205840]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
R3 e4usbaw;USB ADSL2 WAN Adapter;c:\windows\system32\drivers\e4usbaw.sys [2010-03-31 104344]
S2 E4LOADER;General Purpose USB Driver (e4ldr.sys);c:\windows\system32\drivers\e4ldr.sys [2010-03-31 69656]
--- Inne Usługi/Sterowniki w Pamięci ---
*NewlyCreated* - BROWSER
*NewlyCreated* - FASTUSERSWITCHINGCOMPATIBILITY
*NewlyCreated* - FLTMGR
*NewlyCreated* - HELPSVC
*NewlyCreated* - IMAPISERVICE
*NewlyCreated* - LANMANSERVER
*NewlyCreated* - MSISERVER
*NewlyCreated* - NDISUIO
*NewlyCreated* - POLICYAGENT
*NewlyCreated* - RASACD
*NewlyCreated* - RASMAN
*NewlyCreated* - RDPCDD
*NewlyCreated* - RDPNP
*NewlyCreated* - SCHEDULE
*NewlyCreated* - SENS
*NewlyCreated* - SHELLHWDETECTION
*NewlyCreated* - SR
*NewlyCreated* - SRSERVICE
*NewlyCreated* - SRV
*NewlyCreated* - SSDPSRV
*NewlyCreated* - TERMSERVICE
*NewlyCreated* - THEMES
*NewlyCreated* - WUAUSERV
*NewlyCreated* - WZCSVC
.
.
------- Skan uzupełniający -------
.
TCP: {51B914E7-3F15-4827-95D1-2541B1DAFC41} = 213.241.79.37 87.204.204.204
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-31 21:33
Windows 5.1.2600 Dodatek Service Pack 2 FAT NTAPI
skanowanie ukrytych procesów ...
skanowanie ukrytych wpisów autostartu ...
skanowanie ukrytych plików ...
skanowanie pomyślnie ukończone
ukryte pliki: 0
**************************************************************************
.
Czas ukończenia: 2010-03-31 21:33:54
ComboFix-quarantined-files.txt 2010-03-31 19:33
Przed: 6 900 121 600 bajtów wolnych
Po: 6 883 172 352 bajtów wolnych
WindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
- - End Of File - - 62D724E8733A1FC4615AD9C48BB07FE1
