Już nie wiem co robić.

Blazkovitch [ Generał pułkownik ]

Ściągnij sobie CClaner i posprzątaj trochę w systemie.

Na dwóch płaszczyznach:
1) Cleaner
2) Problemy

Ambitny Łoś [ Wielki Przedwieczny ]

Zdarza się czasami. Miałem tak na neo jak były przeciążenia. Możesz zadzwonić do dostawcy sieci i się spytać o co kaman.

20.01.2009

20:58

[5]

Deadly.Chancellor [ Konsul ]

Mi pomógł format :)

Kreciuch89 [ Pretorianin ]

Moim zdaniem to wirusy. Przeinstaluj windowsa i po kłopocie. Jeśli natomiast to nie zadziała to zadzwoń do kolesi co ci neta zakładali i tam powiedz w czym problem

beowulff [ Legend ]

Masz jakies robactwo, za duzo prono, to prawie jak choroba weneryczna w realu

ComboFix, HiJack
I logi wklej tu

.:Jj:. [ Legend ]

Mi pomógł format :)

Jak ktoś nie jest w stanie dociec co nawala w komputerze i nie próbuje nawet naprawić ew. problemów powstałych z normalnego użytkowania to najprostszym rozwiązaniem jest format..

Kiedyś formatowałem partycję systemowe co 3,4 miesiące, całego twardziela- do dwóch razy na rok. Ale trochę zmądrzałem. Ostatni raz formatowałem c:\ hmm, chyba jak przesiadłem się z XP na Vistę. Następny, niech zgadnę- przy przesiadce na 7. No chyba że mi się dysk sypnie, ale to już nie będzie moja wina.

Retox128 [ Pretorianin ]

-Spróbuj przeskanować Spybot'em, mi kilka razy pomógł.
-Może przekroczyłeś limit (o ile maż).

20.01.2009

21:40

[10]

maviozo [ Man with a movie camera ]

-Może przekroczyłeś limit (o ile maż).
Jezu! Tego jeszcze nie widziałem
<==


Jeszcze możesz urchom->cmd->netstat sprawdzić, które procesy łączą się z siecią i spróbować je eliminować.

AdixPL [ Konsul ]

mam podobny problem... oto log
mam niestety nerwostrade




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:44:26, on 2009-01-20
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\System32\rundll32.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Windows\WindowsMobile\wmdSync.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Users\AdiX\Desktop\CoreTemp\Core Temp.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Tlen.pl\tlen.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\AdiX\Desktop\HiJackThis.exe
C:\Windows\system32\DllHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - ‹18DF081C-E8AD-4283-A596-FA578C2EBDC3› - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - ‹53707962-6F74-2D53-2644-206D7942484F› - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: NCO 2.0 IE BHO - ‹602ADB0E-4AFF-4217-8AA1-95DAC4DFA408› - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - ‹6D53EC84-6AAE-4787-AEEE-F4628F01010C› - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - ‹761497BB-D6F0-462C-B6EB-D4DAF1D92D43› - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Pomocnik rejestracji usługi Windows Live - ‹9030D464-4C02-4ABF-8ECC-5164760863C6› - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - ‹DBC80044-A445-435b-BC74-9C25C1C588A9› - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Show Norton Toolbar - ‹7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA› - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Core Temp] "C:\Users\AdiX\Desktop\CoreTemp\Core Temp.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'USŁUGA SIECIOWA')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - ‹92780B25-18CC-41C8-B9BE-3C9C571A8263› - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - ‹DFB852A3-47F8-48C4-A200-58CAB36FD2A2› - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - ‹DFB852A3-47F8-48C4-A200-58CAB36FD2A2› - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: ‹D27CDB6E-AE6D-11CF-96B8-444553540000› (Shockwave Flash Object) -
O22 - SharedTaskScheduler: Windows DreamScene - ‹E31004D1-A431-41B8-826F-E902F9D95C81› - C:\Windows\System32\DreamScene.dll
O23 - Service: Harmonogram automatycznej usługi LiveUpdate (Automatic LiveUpdate Scheduler) - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe

--
End of file - 7709 bytes

Jedziemy do Gęstochowy [ Racjonalista ]

Pogódź się z tym ze neostrada nazywana jest nerwostrata.

rób formata albo baw się w dłubanie w kompie.

ja mam neta, ściągam dużo a nie mam zadnego antywira.

jak co się muli w kompie albo jakies problemy to windowsa sie wgrywa i z głowy.

w zeszłym roku w wakacje to wgrywałem winde z 15 razy.

Pizystrat [ Konsul ]

No fajnie. Właśnie usunąłem całą historię i co? Działa o niebo lepiej. Może nie perfekcyjnie, ale już jest w miarę ok. W historii miałem 50 000 witryn.

beowulff [ Legend ]

O16 - DPF: ‹D27CDB6E-AE6D-11CF-96B8-444553540000› (Shockwave Flash Object) -

O22 - SharedTaskScheduler: Windows DreamScene - ‹E31004D1-A431-41B8-826F-E902F9D95C81› - C:\Windows\System32\DreamScene.dll

Usun
Sprawdz jeszcze combofixem

AdixPL [ Konsul ]

log z ComboFix'a



ComboFix 09-01-19.05 - AdiX 2009-01-20 23:30:06.1 - NTFSx86
Microsoft® Windows Vista™ Ultimate 6.0.6001.1.1250.1.1045.18.2044.1187 [GMT 1:00]
Uruchomiony z: c:\users\AdiX\Desktop\ComboFix.exe
AV: Norton Internet Security *On-access scanning enabled* (Outdated)
FW: Norton Internet Security *enabled*
* Utworzono nowy punkt przywracania
.

((((((((((((((((((((((((( Pliki utworzone od 2008-12-20 do 2009-01-20 )))))))))))))))))))))))))))))))
.

2009-01-20 10:54 . 2009-01-20 10:54 <DIR> d-------- c:\program files\Guitar Pro 5
2009-01-14 08:45 . 2008-12-16 03:42 288,768 --a------ c:\windows\System32\drivers\srv.sys
2009-01-12 18:39 . 2009-01-12 18:39 <DIR> d-------- C:\NVIDIA
2009-01-07 22:04 . 2009-01-08 15:26 <DIR> d-------- c:\program files\IDoser v4
2009-01-06 20:40 . 1997-11-19 15:49 303,616 --a------ c:\windows\IsUninst.exe
2009-01-03 23:31 . 2009-01-03 23:31 <DIR> d-------- c:\program files\4Musics OGG to MP3 Converter
2009-01-03 23:31 . 2003-03-19 10:19 1,060,864 --a------ c:\windows\System32\MFC71.dll
2009-01-03 23:31 . 2002-07-17 16:20 84,832 --a------ c:\windows\System32\drivers\ASPI32.SYS
2009-01-03 23:31 . 2002-07-17 16:23 45,056 --a------ c:\windows\System32\WNASPI32.DLL
2008-12-31 15:49 . 2008-12-31 16:58 <DIR> d-------- C:\DISCO POLO
2008-12-29 14:10 . 2009-01-05 14:36 <DIR> d-------- c:\program files\coolpro2
2008-12-29 02:38 . 2008-12-29 02:38 <DIR> d-------- c:\program files\Gadu-Gadu
2008-12-28 17:32 . 2008-12-28 17:32 <DIR> d-------- c:\program files\Common Files\LightScribe
2008-12-25 12:34 . 2008-12-25 12:34 <DIR> d-------- c:\users\AdiX\AppData\Roaming\DivX
2008-12-20 20:32 . 2009-01-05 13:43 <DIR> d-------- C:\divx
2008-12-20 20:20 . 2008-12-20 20:20 <DIR> d-------- c:\program files\kingconvert
2008-12-20 19:59 . 2008-12-20 19:59 <DIR> d-------- c:\program files\DivX
2008-12-20 17:54 . 2008-12-20 17:54 <DIR> d-------- c:\users\All Users\FLEXnet
2008-12-20 17:54 . 2008-12-20 17:54 <DIR> d-------- c:\programdata\FLEXnet
2008-12-20 17:48 . 2008-12-20 17:48 <DIR> d-------- c:\program files\Bonjour
2008-12-20 17:40 . 2008-12-20 17:40 <DIR> d-------- c:\program files\Common Files\Macrovision Shared
2008-12-20 17:29 . 2008-12-20 19:59 <DIR> d-------- c:\program files\Common Files\PX Storage Engine
2008-12-20 17:28 . 2008-12-20 17:28 <DIR> d-------- c:\windows\System32\IOSUBSYS
2008-12-20 17:28 . 2008-12-20 17:28 <DIR> d-------- c:\program files\Google
2008-12-20 17:27 . 2008-12-20 17:27 <DIR> d-------- c:\users\AdiX\AppData\Roaming\gtk-2.0
2008-12-20 17:27 . 2008-12-20 17:27 <DIR> d-------- c:\users\AdiX\.thumbnails
2008-12-20 17:22 . 2008-12-20 17:28 <DIR> d-------- c:\users\AdiX\.gimp-2.6
2008-12-20 17:22 . 2008-12-20 17:22 <DIR> d-------- c:\users\AdiX\.gegl-0.0

.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-20 22:28 --------- d-----w c:\users\AdiX\AppData\Roaming\uTorrent
2009-01-20 22:27 6,736 ----a-w c:\windows\system32\drivers\PROCEXP90.SYS
2009-01-20 16:55 --------- d-----w c:\programdata\Symantec
2009-01-14 12:57 --------- d-----w c:\programdata\Microsoft Help
2009-01-09 00:04 806 ----a-w c:\windows\system32\drivers\SYMEVENT.INF
2009-01-09 00:04 124,464 ----a-w c:\windows\system32\drivers\SYMEVENT.SYS
2009-01-09 00:04 10,635 ----a-w c:\windows\system32\drivers\SYMEVENT.CAT
2009-01-09 00:04 --------- d-----w c:\program files\Symantec
2009-01-05 01:03 --------- d-----w c:\users\AdiX\AppData\Roaming\Nero
2009-01-05 01:02 --------- d-----w c:\program files\Common Files\Nero
2009-01-05 01:01 --------- d-----w c:\programdata\Nero
2009-01-05 01:01 --------- d-----w c:\program files\Nero
2009-01-04 20:32 --------- d-----w c:\program files\Common Files\Ahead
2009-01-03 18:59 --------- d-----w c:\program files\SpeedFan
2008-12-28 15:24 --------- d--h--w c:\program files\InstallShield Installation Information
2008-12-22 13:32 --------- d-----w c:\program files\Java
2008-12-20 16:48 --------- d-----w c:\program files\Common Files\Adobe
2008-12-19 23:44 --------- d-----w c:\program files\Common Files\InstallShield
2008-12-19 08:09 --------- d-----w c:\program files\AIMP2
2008-12-16 11:39 --------- d-----w c:\program files\MediaCoder
2008-12-14 17:30 --------- d-----w c:\users\AdiX\AppData\Roaming\Broad Intelligence
2008-12-14 16:57 --------- d-----w c:\programdata\Spybot - Search & Destroy
2008-12-14 16:56 --------- d-----w c:\program files\OCCT
2008-12-12 21:47 3,751,995 ----a-w c:\windows\System32\GPhotos.scr
2008-12-09 17:36 --------- d-----w c:\program files\BearShare
2008-12-04 12:58 0 ---ha-w c:\windows\system32\drivers\Msft_User_WpdRapi_01_00_00.Wdf
2008-12-02 17:00 --------- d-----w c:\users\AdiX\AppData\Roaming\LG Electronics
2008-12-01 20:45 --------- d-----w c:\program files\Opera
2008-11-27 21:55 --------- d-----w c:\program files\NAPI-PROJEKT
2008-11-23 23:26 --------- d-----w c:\program files\MSXML 4.0
2008-11-22 17:40 603,904 ----a-w c:\windows\System32\TUProgSt.exe
2008-11-22 17:40 362,240 ----a-w c:\windows\System32\TuneUpDefragService.exe
2008-11-22 17:40 --------- d-----w c:\users\AdiX\AppData\Roaming\TuneUp Software
2008-11-22 17:40 --------- d-----w c:\programdata\TuneUp Software
2008-11-22 17:40 --------- d-----w c:\program files\TuneUp Utilities 2009
2008-11-22 17:39 --------- d-sh--w c:\programdata\‹55A29068-F2CE-456C-9148-C869879E2357›
2008-11-12 15:44 27,904 ----a-w c:\windows\System32\uxtuneup.dll
2008-11-12 15:44 17,152 ----a-w c:\windows\System32\authuitu.dll
2008-11-10 04:43 410,984 ----a-w c:\windows\System32\deploytk.dll
2008-11-01 03:44 541,696 ----a-w c:\windows\AppPatch\AcLayers.dll
2008-11-01 03:44 52,736 ----a-w c:\windows\AppPatch\iebrshim.dll
2008-11-01 03:44 460,288 ----a-w c:\windows\AppPatch\AcSpecfc.dll
2008-11-01 03:44 28,672 ----a-w c:\windows\System32\Apphlpdm.dll
2008-11-01 03:44 2,154,496 ----a-w c:\windows\AppPatch\AcGenral.dll
2008-11-01 03:44 173,056 ----a-w c:\windows\AppPatch\AcXtrnal.dll
2008-11-01 01:21 4,240,384 ----a-w c:\windows\System32\GameUXLegacyGDFs.dll
2008-10-31 09:12 319,456 ----a-w c:\windows\DIFxAPI.dll
2008-10-31 09:00 15,600 ----a-w c:\windows\gdrv.sys
2008-10-30 14:03 174 --sha-w c:\program files\desktop.ini
2008-10-30 13:37 82,432 ----a-w c:\windows\System32\axaltocm.dll
2008-10-30 13:37 101,888 ----a-w c:\windows\System32\ifxcardm.dll
2008-10-30 11:38 61,440 ----a-w c:\windows\System32\winipsec.dll
2008-10-30 11:38 361,984 ----a-w c:\windows\System32\IPSECSVC.DLL
2008-10-30 11:38 28,672 ----a-w c:\windows\System32\FwRemoteSvr.dll
2008-10-30 11:38 272,896 ----a-w c:\windows\System32\polstore.dll
2008-10-30 11:36 233,888 ----a-w c:\windows\System32\DreamScene.dll
2008-10-30 11:35 303,616 ----a-w c:\windows\System32\wmpeffects.dll
2008-10-30 11:34 2,032,640 ----a-w c:\windows\System32\win32k.sys
2008-10-30 11:29 988,216 ----a-w c:\windows\System32\winload.exe
2008-10-30 11:29 927,288 ----a-w c:\windows\System32\winresume.exe
2008-10-30 11:29 615,992 ----a-w c:\windows\System32\ci.dll
2008-10-30 11:29 6,656 ----a-w c:\windows\System32\kbd106n.dll
2008-10-30 11:29 46,592 ----a-w c:\windows\System32\setbcdlocale.dll
2008-10-30 11:29 40,960 ----a-w c:\windows\System32\srclient.dll
2008-10-30 11:29 378,368 ----a-w c:\windows\System32\srcore.dll
2008-10-30 11:29 318,464 ----a-w c:\windows\System32\rstrui.exe
2008-10-30 11:29 19,000 ----a-w c:\windows\System32\kd1394.dll
2008-10-30 11:29 14,848 ----a-w c:\windows\System32\srdelayed.exe
2008-10-30 11:27 1,171,848 ----a-w c:\windows\System32\SecureKeyBackupCPL.dll
2008-10-30 11:26 3,601,464 ----a-w c:\windows\System32\ntkrnlpa.exe
2008-10-30 11:26 3,549,240 ----a-w c:\windows\System32\ntoskrnl.exe
2008-10-30 11:26 1,314,816 ----a-w c:\windows\System32\quartz.dll
2008-10-30 02:04 84,480 ----a-w c:\windows\System32\INETRES.dll
2008-10-30 02:04 738,304 ----a-w c:\windows\System32\inetcomm.dll
2008-10-29 19:44 443,392 ----a-w c:\windows\System32\win32spl.dll
2008-10-29 19:44 37,888 ----a-w c:\windows\System32\printcom.dll
2008-10-29 19:43 14,848 ----a-w c:\windows\System32\wshrm.dll
2008-10-29 18:32 315,392 ----a-w c:\windows\HideWin.exe
2008-10-29 06:29 2,927,104 ----a-w c:\windows\explorer.exe
2008-10-22 03:57 241,152 ----a-w c:\windows\System32\PortableDeviceApi.dll
2008-10-22 01:22 2,048 ----a-w c:\windows\System32\tzres.dll
2008-10-21 05:25 296,960 ----a-w c:\windows\System32\gdi32.dll
2008-10-21 05:25 1,645,568 ----a-w c:\windows\System32\connect.dll
.

((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"Core Temp"="c:\users\AdiX\Desktop\CoreTemp\Core Temp.exe" [2008-08-22 277008]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2008-10-17 51048]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-07 13584928]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-10-07 92704]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2008-07-07 167936]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdSync.exe" [2006-11-02 215552]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-10 136600]
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-06-08 2221352]
"RtHDVCpl"="RtHDVCpl.exe" [2007-04-23 c:\windows\RtHDVCpl.exe]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.divxa32"= divxa32.acm
"VIDC.ACDV"= ACDV.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 2008-06-12 02:38 34672 c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
--a------ 2007-04-19 13:26 484904 c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
--a------ 2008-01-19 08:38 1008184 c:\program files\Windows Defender\MSASCui.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"SpybotSD TeaTimer"=c:\program files\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"‹9E7E1C42-D924-45F7-8603-EE067D98C567›"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"‹C53038DA-8188-4898-9176-35516655C061›"= UDP:c:\program files\uTorrent\uTorrent.exe:µTorrent
"‹F2B68497-E2CA-419D-AD25-2C43F6959971›"= TCP:c:\program files\uTorrent\uTorrent.exe:µTorrent
"‹F33392D6-5A7D-48D7-BD6D-6C8B21995107›"= UDP:c:\program files\uTorrent\uTorrent.exe:µTorrent
"‹F7AA7B26-D569-4817-9167-0B08F17F445F›"= TCP:c:\program files\uTorrent\uTorrent.exe:µTorrent

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)

R1 IDSvix86;Symantec Intrusion Prevention Driver;c:\progra~2\Symantec\DEFINI~1\SymcData\ipsdefs\20090113.002\IDSvix86.sys [2009-01-15 270384]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2009-01-14 99376]
R3 SYMNDISV;SYMNDISV;c:\windows\System32\drivers\symndisv.sys [2008-06-13 41008]
R4 LiveUpdate Notice;LiveUpdate Notice;c:\program files\Common Files\Symantec Shared\CCSVCHST.EXE [2008-10-29 149352]
R4 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [2008-11-01 809296]
R4 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\System32\TUProgSt.exe [2008-11-22 603904]
S0 OemBiosDevice;Royalty OEM BIOS Extension;c:\windows\System32\drivers\royal.sys [2008-01-01 240128]
S3 ASPI;Advanced SCSI Programming Interface Driver;c:\windows\System32\drivers\ASPI32.SYS [2009-01-03 84832]
S3 COH_Mon;COH_Mon;c:\windows\System32\drivers\COH_Mon.sys [2007-05-29 23888]

--- Inne Usługi/Sterowniki w Pamięci ---

*NewlyCreated* - ALSYSIO
*NewlyCreated* - COMHOST
*Deregistered* - ALSysIO

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\H]
\shell\AutoRun\command - H:\SETUP.EXE
\shell\configure\command - H:\SETUP.EXE
\shell\install\command - H:\SETUP.EXE

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\I]
\shell\AutoRun\command - I:\CdAutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\J]
\shell\AutoRun\command - J:\FalloutLauncher.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\‹9bfd057c-a669-11dd-ac8e-001a4d4fabd6›]
\shell\AutoRun\command - J:\LaunchU3.exe -a

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\‹10880D85-AAD9-4558-ABDC-2AB1552D831F›]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\‹B3688A53-AB2A-4b1d-8CEF-8F93D8C51C24›]
%SystemRoot%\system32\soundschemes2.exe /AddRegistration
.
Zawartość folderu 'Zaplanowane zadania'

2009-01-19 c:\windows\Tasks\Norton Internet Security - Uruchom pełne skanowanie systemu - AdiX.job
- c:\program files\Norton Internet Security\Norton AntiVirus\Navw32.exe [2007-08-26 18:19]
.
- - - - USUNIĘTO PUSTE WPISY - - - -

MSConfigStartUp-BgMonitor_‹79662E04-7C6C-4d9f-84C7-88D8A56B10AA› - c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe
MSConfigStartUp-GrooveMonitor - c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
MSConfigStartUp-NeroFilterCheck - c:\program files\Common Files\Ahead\Lib\NeroCheck.exe


.
------- Skan uzupełniający -------
.
uStart Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\AdiX\AppData\Roaming\Mozilla\Firefox\Profiles\hxmylp3f.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl:official
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?ei=utf-8&fr=megaup&p=
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll

---- FIREFOX - SPOSÓB POSTĘPOWANIA ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
Rootkit scan 2009-01-20 23:32:08
Windows 6.0.6001 Service Pack 1 NTFS

skanowanie ukrytych procesów ...

skanowanie ukrytych wpisów autostartu ...

skanowanie ukrytych plików ...

skanowanie pomyślnie ukończone
ukryte pliki: 0

**************************************************************************
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------

- - - - - - - > 'Explorer.exe'(4692)
c:\program files\Tlen.pl\hook.dll
.
Czas ukończenia: 2009-01-20 23:34:16
ComboFix-quarantined-files.txt 2009-01-20 22:34:11

Przed: 25 140 146 176 bajtów wolnych
Po: 25,004,228,608 bajtów wolnych

261 --- E O F --- 2009-01-20 05:47:1