nie moge "wejsc" na partycje poprzez podwojne klik

**Posty:** 171 · przez **macius** 03 Sty 2008, 12:23

Mam 6 partycji i tylko systemowa mogę odpalić poprzez 2xlpm. Zawartość pozostałej 5ki po klikaniu wywala blad "odmowa dostępu", mogę tylko je eksplorować przez te wlasnie polecenie. co zrobic?

**Posty:** 10223 · przez **Precel** 03 Sty 2008, 13:01

macius napisał(a):co zrobic?

uzyc szukajki :roll:

http://forum.programosy.pl/otwieranie-dysku-c-wirus--vp604118.html?highlight=odmowa+dost%EApu#604118

http://forum.programosy.pl/odmowa-dostepu-do-partycji-vp537865.html?highlight=odmowa+dost%EApu#537865

itd

**Posty:** 171 · przez **macius** 04 Sty 2008, 14:38

uzyc szukajki
http://forum.programosy.pl/otwieranie-dysku-c-wirus--vp604118.html?highlight=odmowa+dost%EApu#604118

http://forum.programosy.pl/odmowa-dostepu-do-partycji-vp537865.html?highlight=odmowa+dost%EApu#537865

itd

nic nie pomoglo. Tu nie chodzi o brak uprawnien, usunalem w jakis sposob plik cfmon. teraz wyskakuje mi blad, ze do autoodtwarzania brakuje tego pliku: recycled/ctfmon.exe
jak go moge ponownie wgrac?

**Posty:** 10223 · przez **Precel** 04 Sty 2008, 15:35

macius daj logi z hj silenta i combofixa

**Posty:** 171 · przez **macius** 04 Sty 2008, 21:03

Precel napisał(a):macius daj logi z hj silenta i combofixa

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:59:19, on 2008-01-04 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16414) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\PROGRA~1\Launch Manager\LManager.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\taskswitch.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\PROGRA~1\Microsoft ActiveSync\rapimgr.exe C:\Program Files\PowerMenu\PowerMenu.exe C:\Program Files\SAGEM WiFi manager\WLANUTL.exe C:\DOCUME~1\TXP\USTAWI~1\Temp\RtkBtMnt.exe C:\Program Files\Winamp\winamp.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\cFosSpeed\spd.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe C:\Acer\Mobility Center\MobilityService.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\oodag.exe C:\Program Files\O2Micro Oz128 Driver\o2flash.exe C:\Program Files\Kerio\Personal Firewall\persfw.exe C:\Program Files\CyberLink\Shared files\RichVideo.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Opera 9\Opera.exe C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\TXP\Pulpit\hijackthis.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank O2 - BHO: IE7pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IE7pro\IE7pro.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [Vistadrv] C:\Program Files\VistaDrives\vsdrv.exe O4 - HKLM\..\Run: [Licence] Licence.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\Launch Manager\LManager.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe O4 - HKLM\..\Run: [Acer Assist Launcher] C:\Program Files\Acer Assist\launcher.exe O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe O4 - HKLM\..\Run: [Resume copy] copyfstq.exe /startup O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe" O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [XPRepairPro2007] C:\Program Files\XP Repair Pro 2007\XPRepairPro.exe /r O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [Network Translation Service] - (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [Network Translation Service] - (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user') O4 - Global Startup: Empowering Technology Launcher.lnk = ? O4 - Global Startup: PowerMenu.lnk = C:\Program Files\PowerMenu\PowerMenu.exe O4 - Global Startup: Program sieciowy dla SAGEM Wi-Fi 11g USB adapter.lnk = ? O8 - Extra context menu item: &Ściągnij przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: &Ściągnij wszystko przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\Microsoft Office\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Send to &Bluetooth Device... - btsendto_ie_ctx.htm O8 - Extra context menu item: Wyślij do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: IE7pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IE7pro\IE7pro.dll O9 - Extra 'Tools' menuitem: IE7pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IE7pro\IE7pro.dll O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\Microsoft Office\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\Microsoft Office\Office12\ONBttnIE.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\Microsoft ActiveSync\INetRepl.dll O9 - Extra 'Tools' menuitem: Utwórz Ulubione dla urządzenia przenośnego... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\Microsoft Office\Office12\REFIEBAR.DLL O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} - O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: cFosSpeed System Service (cFosSpeedS) - cFos Software GmbH - C:\Program Files\cFosSpeed\spd.exe O23 - Service: Indexing Service (CiSvc) - Unknown owner - C:\WINDOWS\system32\cisvc.exe (file missing) O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Oz128 Driver\o2flash.exe O23 - Service: Kerio Personal Firewall (PersFw) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall\persfw.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe O23 - Service: XAudioService - Conexant Systems, Inc. - C:\WINDOWS\system32\DRIVERS\xaudio.exe -- End of file - 8257 bytes

Kod: Zaznacz wszystko: ComboFix 08-01-04.1 - TXP 2008-01-04 19:50:05.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.1609 [GMT 1:00] Running from: C:\Documents and Settings\TXP\Pulpit\ComboFix.exe . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\system32\Desktop_.ini D:\Autorun.inf E:\Autorun.inf F:\Autorun.inf G:\Autorun.inf . ((((((((((((((((((((((((( Files Created from 2007-12-04 to 2008-01-04 ))))))))))))))))))))))))))))))) . 2008-01-04 19:51 . 2008-01-04 19:51 78 --a------ C:\s 2008-01-04 19:49 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe 2008-01-04 14:05 . 2006-11-13 15:36 1,419,232 --a------ C:\WINDOWS\system32\wdfcoinstaller01005.dll 2008-01-04 14:05 . 2007-05-07 15:11 42,112 --a------ C:\WINDOWS\system32\drivers\motodrv.sys 2008-01-04 14:05 . 2007-06-20 14:57 23,680 --a------ C:\WINDOWS\system32\drivers\motmodem.sys 2008-01-04 14:05 . 2007-06-20 14:57 17,920 --a------ C:\WINDOWS\system32\drivers\motccgp.sys 2008-01-04 14:05 . 2007-01-23 20:03 7,680 --a------ C:\WINDOWS\system32\drivers\motccgpfl.sys 2008-01-04 14:05 . 2006-12-06 18:33 6,400 --a------ C:\WINDOWS\system32\drivers\motswch.sys 2008-01-04 14:00 . 2008-01-04 14:00 0 --ah----- C:\WINDOWS\system32\drivers\Msft_Kernel_motmodem_01005.Wdf 2008-01-04 14:00 . 2008-01-04 14:00 0 --ah----- C:\WINDOWS\system32\drivers\Msft_Kernel_motccgpfl_01005.Wdf 2008-01-04 14:00 . 2008-01-04 14:00 0 --ah----- C:\WINDOWS\system32\drivers\Msft_Kernel_motccgp_01005.Wdf 2008-01-04 13:59 . 2008-01-04 13:59 <DIR> d-------- C:\Program Files\Motorola 2008-01-04 13:59 . 2008-01-04 13:59 <DIR> d-------- C:\Program Files\Common Files\Motorola Shared 2008-01-04 13:59 . 2008-01-04 13:59 0 --ah----- C:\WINDOWS\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf 2008-01-04 13:41 . 2006-11-02 10:45 8,704 --a------ C:\WINDOWS\system32\ctfmon.exe 2008-01-04 12:51 . 2008-01-04 12:51 <DIR> d-------- C:\Documents and Settings\TXP\Dane aplikacji\MusicIP 2008-01-04 12:48 . 2008-01-04 13:17 <DIR> d-------- C:\Program Files\XP Repair Pro 2007 2008-01-03 21:45 . 2008-01-03 21:51 <DIR> d-------- C:\Program Files\AdVantage 2008-01-03 21:44 . 2008-01-03 21:44 <DIR> d-------- C:\Documents and Settings\TXP\Dane aplikacji\DAEMON Tools Pro 2008-01-03 21:39 . 2008-01-03 21:39 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Pro 2008-01-03 21:38 . 2008-01-03 21:49 <DIR> d-------- C:\Program Files\DAEMON Tools Pro 2008-01-03 14:43 . 2008-01-03 14:43 5 --ahs---- C:\WINDOWS\system32\eef_s.dll 2008-01-03 14:43 . 2008-01-03 14:43 5 --a------ C:\WINDOWS\system32\babd9_s.ocx 2008-01-03 14:28 . 2008-01-03 14:28 4 --a------ C:\WINDOWS\undo.idx 2008-01-03 14:28 . 2008-01-03 14:28 0 --a------ C:\WINDOWS\undo.dat 2008-01-03 14:12 . 2008-01-03 14:12 <DIR> d--h----- C:\WINDOWS\system32\GroupPolicy 2008-01-02 21:26 . 2008-01-02 22:12 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy 2008-01-02 21:22 . 2008-01-02 21:22 <DIR> d-------- C:\Program Files\Kerio 2008-01-02 21:22 . 2002-04-15 12:28 102,912 --------- C:\WINDOWS\system32\drivers\FWDRV.SYS 2008-01-02 21:06 . 2007-12-04 15:51 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys 2008-01-02 21:06 . 2007-12-04 15:49 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys 2008-01-02 21:06 . 2007-12-04 15:53 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys 2008-01-02 21:05 . 2008-01-02 21:05 <DIR> d-------- C:\Program Files\Alwil Software 2008-01-02 21:05 . 2007-12-04 14:04 837,496 --a------ C:\WINDOWS\system32\aswBoot.exe 2008-01-02 21:05 . 2004-01-09 10:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx 2008-01-02 21:05 . 2007-12-04 13:54 95,608 --a------ C:\WINDOWS\system32\AVASTSS.scr 2008-01-02 21:05 . 2007-12-04 15:55 94,544 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys 2008-01-02 21:05 . 2007-12-04 15:56 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys 2008-01-01 12:26 . 2008-01-01 12:26 <DIR> d-------- C:\Program Files\QuickTime 2008-01-01 12:26 . 2008-01-01 12:26 54,156 --ah----- C:\WINDOWS\QTFont.qfn 2008-01-01 12:26 . 2008-01-01 12:26 1,409 --a------ C:\WINDOWS\QTFont.for 2008-01-01 12:25 . 2008-01-01 12:25 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer 2007-12-31 20:04 . 2008-01-02 22:13 <DIR> dr-hs---- C:\Recycled 2007-12-27 21:33 . 2007-12-27 21:34 <DIR> d-------- C:\Program Files\PhotoFiltre 2007-12-21 23:10 . 2007-12-21 23:10 <DIR> d-------- C:\Program Files\Sony Ericsson 2007-12-21 23:10 . 2007-12-21 23:10 <DIR> d-------- C:\Program Files\Common Files\Teleca Shared 2007-12-21 23:10 . 2007-12-21 23:11 <DIR> d-------- C:\Documents and Settings\TXP\Dane aplikacji\Teleca 2007-12-21 23:10 . 2007-12-21 23:10 <DIR> d-------- C:\Documents and Settings\All Users\Documents 2007-12-21 23:10 . 2007-12-21 23:10 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Teleca 2007-12-21 23:10 . 2007-12-21 23:10 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Sony Ericsson 2007-12-21 23:05 . 2007-12-21 23:05 <DIR> d-------- C:\Program Files\Disc2Phone 2007-12-21 22:57 . 2005-07-07 15:25 81,728 -ra------ C:\WINDOWS\system32\drivers\k750mgmt.sys 2007-12-21 22:55 . 2005-07-07 15:25 79,488 -ra------ C:\WINDOWS\system32\drivers\k750obex.sys 2007-12-21 22:54 . 2005-07-07 15:25 89,872 -ra------ C:\WINDOWS\system32\drivers\k750mdm.sys 2007-12-21 22:54 . 2005-07-07 15:26 55,216 -ra------ C:\WINDOWS\system32\drivers\k750bus.sys 2007-12-21 22:54 . 2005-07-07 15:26 6,576 -ra------ C:\WINDOWS\system32\drivers\k750mdfl.sys 2007-12-21 22:54 . 2005-07-07 15:26 6,144 -ra------ C:\WINDOWS\system32\drivers\k750cmnt.sys 2007-12-21 22:54 . 2005-07-07 15:26 6,144 -ra------ C:\WINDOWS\system32\drivers\k750cm.sys 2007-12-21 22:54 . 2005-07-07 15:25 5,744 -ra------ C:\WINDOWS\system32\drivers\k750whnt.sys 2007-12-21 22:54 . 2005-07-07 15:25 5,744 -ra------ C:\WINDOWS\system32\drivers\k750wh.sys 2007-12-21 22:23 . 2007-12-21 22:23 720,896 --a------ C:\WINDOWS\iun6002.exe 2007-12-21 22:23 . 2007-12-21 22:23 17,937 --a------ C:\WINDOWS\irunin.ini 2007-12-21 22:23 . 2007-12-21 22:23 15,938 --a------ C:\WINDOWS\irunin.lng 2007-12-21 22:23 . 2007-12-21 22:23 9,694 --a------ C:\WINDOWS\irunin.dat 2007-12-21 22:23 . 2007-12-21 22:23 8,134 --a------ C:\WINDOWS\irunin.bmp 2007-12-21 22:20 . 2007-12-21 22:20 <DIR> d-------- C:\Program Files\Jufsoft 2007-12-21 18:31 . 2007-12-21 18:31 <DIR> d-------- C:\Program Files\SAGEM WiFi manager 2007-12-21 18:31 . 2007-12-21 18:31 <DIR> d-------- C:\Program Files\SAGEM 2007-12-21 18:31 . 2006-01-18 14:09 31,744 --a------ C:\WINDOWS\system32\drivers\ZDPSp50a64.sys 2007-12-21 18:31 . 2006-01-18 14:09 29,184 --a------ C:\WINDOWS\system32\drivers\BRGSp50a64.sys 2007-12-21 18:31 . 2006-01-18 14:09 20,608 --a------ C:\WINDOWS\system32\drivers\BRGSp50.sys 2007-12-21 18:31 . 2006-01-18 14:09 17,664 --a------ C:\WINDOWS\system32\drivers\ZDPSp50.sys 2007-12-21 18:29 . 2005-12-22 14:45 493,440 --a------ C:\WINDOWS\system32\drivers\WlanBZ64.SYS 2007-12-21 18:29 . 2005-12-22 14:45 402,432 --a------ C:\WINDOWS\system32\drivers\WlanBZXP.sys 2007-12-21 18:29 . 2005-06-17 10:26 114,688 --a------ C:\WINDOWS\system32\WLANUTL.dll 2007-12-21 18:29 . 2005-06-17 10:26 61,440 --a------ C:\WINDOWS\system32\W32N50.dll 2007-12-17 18:58 . 2007-12-17 18:58 <DIR> d-------- C:\WINDOWS\system32\Reports 2007-12-17 18:56 . 2007-12-17 18:56 3,151 --a------ C:\WINDOWS\system32\everest.rpf 2007-12-17 18:36 . 2007-12-17 18:36 <DIR> d-------- C:\Temp\Aspi 470 2007-12-17 18:36 . 2007-12-21 22:17 <DIR> d-------- C:\Temp 2007-12-17 18:36 . 2007-12-30 15:29 <DIR> d-------- C:\Program Files\DeadDiskDoctor 2007-12-17 18:36 . 1999-11-24 01:00 288,433 --a------ C:\Temp\aspi32.exe 2007-12-17 18:36 . 2002-06-13 16:39 153,088 --a------ C:\Temp\UNWISE.EXE 2007-12-17 18:36 . 2002-07-17 09:20 45,056 --a------ C:\WINDOWS\system32\WNASPI32.DLL 2007-12-17 18:36 . 2002-07-17 08:53 16,877 --a------ C:\WINDOWS\system32\drivers\ASPI32.SYS 2007-12-17 18:36 . 2002-07-17 16:22 5,600 --a------ C:\WINDOWS\system\WINASPI.DLL 2007-12-17 18:36 . 2002-07-17 16:22 4,672 --a------ C:\WINDOWS\system\WOWPOST.EXE 2007-12-05 16:28 . 2008-01-03 11:59 <DIR> d-------- C:\Program Files\Gothic III . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-01-04 18:50 --------- d-----w C:\Program Files\cFosSpeed 2008-01-04 12:46 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-01-04 12:13 78 ----a-w C:\Program Files\XP 2008-01-04 12:09 --------- d-----w C:\Documents and Settings\TXP\Dane aplikacji\uTorrent 2008-01-04 11:55 --------- d-----w C:\Program Files\Winamp 2008-01-03 20:50 --------- d-----w C:\Documents and Settings\TXP\Dane aplikacji\Skype 2008-01-03 20:36 --------- d-----w C:\Program Files\Alcohol 120 2008-01-03 20:21 685,816 ----a-w C:\WINDOWS\system32\drivers\sptd.sys 2008-01-03 13:42 --------- d-----w C:\Program Files\jv16 PowerTools 2006 2007-12-21 21:18 0 ----a-w C:\Program Files\Common Files\dht342126 2007-12-17 16:15 --------- d-----w C:\Program Files\foobar2000 2007-12-12 13:47 --------- d-----w C:\Program Files\Google 2007-12-04 09:59 --------- d-----w C:\Program Files\Common Files\Adobe 2007-12-04 09:58 --------- d-----w C:\Program Files\xp-AntiSpy 2007-12-04 09:57 --------- d-----w C:\Program Files\Easy RealMedia Tools 2007-12-03 16:46 --------- d-----w C:\Documents and Settings\TXP\Dane aplikacji\CyberLink 2007-12-03 16:30 --------- d-----w C:\Program Files\Easy Real Converter 2007-12-02 13:51 --------- d-----w C:\Program Files\PowerStrip 2007-11-14 21:26 --------- d-----w C:\Program Files\Your Uninstaller 2006 2007-11-14 21:26 --------- d-----w C:\Program Files\FlashGet 2007-11-14 20:55 --------- d-----w C:\Program Files\Desp 2007-11-14 20:52 --------- d-----w C:\Program Files\Warcraft III 2007-11-14 20:51 --------- d---a-w C:\Documents and Settings\All Users\Dane aplikacji\TEMP 2007-11-14 20:46 --------- d-----w C:\Program Files\RMClock 2007-11-14 20:42 --------- d-----w C:\Program Files\English Translator 3 2007-11-14 14:43 --------- d-----w C:\Program Files\uTorrent 2007-11-11 19:28 --------- d-----w C:\Program Files\Gadu-Gadu 2007-11-09 10:31 --------- d-----w C:\Program Files\Atheros 2007-11-09 10:22 --------- d-----w C:\Program Files\Broadcom 2007-11-09 10:22 --------- d-----w C:\Documents and Settings\TXP\Dane aplikacji\InstallShield 2007-10-11 17:12 159,009 ----a-w C:\WINDOWS\NFS Carbon Patch Uninstaller.exe 2007-10-03 10:04 87,608 ----a-w C:\Documents and Settings\TXP\Dane aplikacji\ezpinst.exe 2007-10-03 10:04 47,360 ----a-w C:\Documents and Settings\TXP\Dane aplikacji\pcouffin.sys 2007-01-03 16:29 1,179 ----a-w C:\Documents and Settings\TXP\Licence.reg . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe" [2006-11-13 14:57 1289000] "Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2005-09-15 14:43 1712128] "XPRepairPro2007"="C:\Program Files\XP Repair Pro 2007\XPRepairPro.exe" [2007-09-05 03:37 1089160] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Vistadrv"="C:\Program Files\VistaDrives\vsdrv.exe" [2006-07-30 02:37 121089] "Licence"="Licence.exe" [2007-01-08 19:49 101651 C:\WINDOWS\system32\Licence.exe] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-06-20 11:21 8462336] "nwiz"="nwiz.exe" [2007-06-20 11:21 1626112 C:\WINDOWS\system32\nwiz.exe] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-06-20 11:21 81920] "LManager"="C:\PROGRA~1\Launch Manager\LManager.exe" [2007-06-07 09:17 850704] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-12-16 00:32 761945] "RTHDCPL"="RTHDCPL.EXE" [2007-04-12 16:33 16132608 C:\WINDOWS\RTHDCPL.exe] "AzMixerSel"="C:\Program Files\Realtek\InstallShield\AzMixerSel.exe" [2006-07-17 21:40 53248] "Acer Assist Launcher"="C:\Program Files\Acer Assist\launcher.exe" [2007-02-02 19:05 1261568] "WarReg_PopUp"="C:\Acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 21:48 57344] "CoolSwitch"="C:\WINDOWS\system32\taskswitch.exe" [2002-03-19 16:30 45632] "Resume copy"="copyfstq.exe" [2002-03-24 12:54 46080 C:\WINDOWS\COPYFSTQ.EXE] "avast!"="C:\Program Files\Alwil Software\Avast4\ashDisp.exe" [2007-12-04 14:00 79224] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "Network Translation Service"="-" [] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "nltide_3"="advpack.dll" [2007-01-08 19:00 124928 C:\WINDOWS\system32\advpack.dll] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe [2007-10-03 12:51:49] PowerMenu.lnk - C:\Program Files\PowerMenu\PowerMenu.exe [2007-10-03 19:56:08] Program sieciowy dla SAGEM Wi-Fi 11g USB adapter.lnk - C:\Program Files\SAGEM WiFi manager\WLANUTL.exe [2007-12-21 18:31:09] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "DisableStatusMessages"= 1 (0x1) "SynchronousMachineGroupPolicy"= 0 (0x0) "SynchronousUserGroupPolicy"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoDesktopCleanupWizard"= 1 (0x1) "NoSMHelp"= 1 (0x1) "NoWelcomeScreen"= 1 (0x1) "ForceClassicControlPanel"= 1 (0x1) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoSMHelp"= 1 (0x1) "NoSMBalloonTip"= 0 (0x0) "NoUserNameInStartMenu"= 1 (0x1) "NoSMConfigurePrograms"= 1 (0x1) "NoExpandedNewMenu"= 1 (0x1) "NoResolveTrack"= 1 (0x1) "NoResolveSearch"= 1 (0x1) "NoThumbnailCache"= 1 (0x1) "NoTaskGrouping"= 1 (0x1) "ForceClassicControlPanel"= 1 (0x1) "NoChangeKeyboardNavigationIndicators"= 0 (0x0) [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoSMHelp"= 1 (0x1) "NoSMBalloonTip"= 0 (0x0) "StartMenuLogoff"= 0 (0x0) "NoUserNameInStartMenu"= 1 (0x1) "NoSMConfigurePrograms"= 1 (0x1) "NoExpandedNewMenu"= 1 (0x1) "NoResolveTrack"= 1 (0x1) "NoResolveSearch"= 1 (0x1) "NoThumbnailCache"= 1 (0x1) "NoTaskGrouping"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdVantage] 2007-06-28 15:19 880080 --a------ C:\Program Files\AdVantage\AdVantage.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cFosSpeed] 2006-11-17 10:36 822488 -ra------ C:\Program Files\cFosSpeed\cFosSpeed.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray] C:\Program Files\CloneCD\CloneCDTray.exe /s [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools] C:\Program Files\DAEMON Tools\daemon.exe -lang 1033 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Pro Agent] 2007-09-17 09:52 136136 --a------ C:\Program Files\DAEMON Tools Pro\DTProAgent.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe /tray [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe /startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor] 2006-10-26 23:47 31016 --a------ C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\H/PC Connection Agent] 2006-11-13 14:57 1289000 --a------ C:\PROGRA~1\Microsoft ActiveSync\wcescomm.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut] 2006-05-18 10:29 49152 --a------ C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerStrip] 2006-11-06 13:35 722176 --a------ c:\program files\powerstrip\pstrip.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Program Files\QuickTime\qttask.exe -atboottime [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl] 2005-12-07 21:57 30208 --a------ C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] C:\Program Files\Skype\Phone\Skype.exe /nosplash /minimized [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite] C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe /startoptions [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] 2007-12-12 14:47 155896 --a------ C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TotalRecorderScheduler] 2006-05-12 00:32 86016 --a------ C:\Program Files\TotalRecorder\TotRecSched.exe [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalService REG_MULTI_SZ SSDPSRV [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\C] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\Recycled\ctfmon.exe \Shell\Open(&O)\command - C:\Recycled\Recycled\ctfmon.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe \Shell\Open(&0)\command - D:\Recycled\ctfmon.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe \Shell\Open(&0)\command - E:\Recycled\ctfmon.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe \Shell\Open(&0)\command - F:\Recycled\ctfmon.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe \Shell\Open(&0)\command - G:\Recycled\ctfmon.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5bb9b338-71a0-11dc-ab12-a1fa9b99e0f5}] \Shell\AutoRun\command - J:\Autorun.exe *Newly Created Service* - HFXP2 *Newly Created Service* - RASMAN *Newly Created Service* - RICHVIDEO *Newly Created Service* - SPEEDFAN *Newly Created Service* - WUAUSERV . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-04 19:54:07 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2008-01-04 19:56:10 - machine was rebooted ComboFix-quarantined-files.txt 2008-01-04 18:56:02

DZIALA!! Precel gdy robilem log z combofixa avast wykryl mi mnostwo zainfekowanych plikow autorun (wczesniej nie moglem zadnego w zaden sposob znalezc i usunac na partycjach oprocz tego na C:) Wywalilem je avastem i po resecie wszystko gra. temat mozna zamknac......

nie moge "wejsc" na partycje poprzez podwojne klik

nie moge "wejsc" na partycje poprzez podwojne klik

Kto jest na forum