- Kod: Zaznacz wszystko
ComboFix 08-05-08.1 - rybak_dusz 2008-05-09 15:44:46.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.166 [GMT 2:00]
Running from: E:\Documents and Settings\rybak_dusz\Pulpit\ComboFix.exe
* Created a new restore point
[color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color]
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Autorun.inf
D:\Autorun.inf
E:\autorun.inf
E:\WINDOWS\system32\kavo.exe
E:\WINDOWS\system32\kavo0.dll
E:\WINDOWS\system32\x64
.
((((((((((((((((((((((((( Files Created from 2008-04-09 to 2008-05-09 )))))))))))))))))))))))))))))))
.
2008-05-09 11:25 . 2008-04-10 08:34 117,020 -r-hs---- E:\co.com
2008-05-08 22:00 . 2008-05-08 22:00 <DIR> d-------- E:\Program Files\MSXML 4.0
2008-05-07 12:00 . 2008-05-07 12:00 <DIR> d-------- E:\Program Files\AnswerWorks 4.0
2008-05-07 11:56 . 2008-05-07 12:00 <DIR> d-------- E:\Program Files\AutoCAD 2007
2008-05-07 11:56 . 2008-05-07 12:09 <DIR> d-------- E:\Documents and Settings\rybak_dusz\Dane aplikacji\Autodesk
2008-05-07 11:56 . 2008-05-07 11:56 <DIR> d-------- E:\Documents and Settings\All Users\Dane aplikacji\Autodesk
2008-05-07 11:55 . 2008-05-07 12:00 <DIR> d-------- E:\Program Files\Common Files\Autodesk Shared
2008-05-07 11:55 . 2008-05-07 11:55 <DIR> d-------- E:\Program Files\Autodesk
2008-05-06 22:36 . 2001-10-26 16:57 12,160 --a------ E:\WINDOWS\system32\drivers\mouhid.sys
2008-05-06 22:36 . 2001-10-26 16:57 12,160 --a--c--- E:\WINDOWS\system32\dllcache\mouhid.sys
2008-05-06 22:36 . 2001-08-17 22:02 9,600 --a------ E:\WINDOWS\system32\drivers\hidusb.sys
2008-05-06 22:36 . 2001-08-17 22:02 9,600 --a--c--- E:\WINDOWS\system32\dllcache\hidusb.sys
2008-05-05 20:17 . 2008-05-05 20:18 <DIR> d-------- E:\Program Files\Common Files\Adobe
2008-04-27 20:27 . 2008-04-27 20:27 <DIR> d-------- E:\Program Files\Acer Inc
2008-04-27 20:27 . 2007-03-10 10:04 166,672 --a------ E:\WINDOWS\UNINST32.EXE
2008-04-27 20:27 . 2008-04-27 20:27 92 --a------ E:\WINDOWS\GridV.UNI
2008-04-27 20:25 . 2006-07-20 10:33 65,536 --a------ E:\WINDOWS\system32\NATTraversal.dll
2008-04-27 20:23 . 2005-04-07 18:08 78,208 --a------ E:\WINDOWS\system32\drivers\epm-shd.sys
2008-04-27 20:23 . 2007-03-06 14:58 57,344 --a------ E:\WINDOWS\system32\acpimof.dll
2008-04-27 20:23 . 2006-02-16 15:39 45,056 --a------ E:\WINDOWS\system32\Epm-Po.dll
2008-04-27 20:23 . 2004-07-19 13:10 4,096 --a------ E:\WINDOWS\system32\drivers\epm-psd.sys
2008-04-27 20:11 . 2008-04-27 20:11 <DIR> d-------- E:\WINDOWS\system32\URTTEMP
2008-04-27 19:59 . 2008-04-27 19:59 <DIR> d-------- E:\Acer
2008-04-27 19:59 . 2006-02-22 11:19 1,047,552 --a------ E:\WINDOWS\system32\mfc71u.dll
2008-04-27 19:59 . 2006-06-13 14:42 602,112 --a------ E:\WINDOWS\system32\Acer.Empowering.Windows.Forms_v820.dll
2008-04-27 19:59 . 2006-09-12 15:44 602,112 --a------ E:\WINDOWS\system32\Acer.Empowering.Windows.Forms.dll
2008-04-27 19:59 . 2006-05-25 18:18 331,776 --a------ E:\WINDOWS\system32\ScrollBarLib.dll
2008-04-27 19:59 . 2006-02-22 11:19 69,632 --a------ E:\WINDOWS\system32\eRecUtil.dll
2008-04-27 19:59 . 2006-05-25 18:18 53,248 --a------ E:\WINDOWS\system32\Interop.Shell32.dll
2008-04-27 19:59 . 2006-04-18 19:54 49,152 --a------ E:\WINDOWS\system32\SysMonitor.exe
2008-04-27 19:52 . 2008-04-27 19:53 <DIR> d-------- E:\WINDOWS\system32\XPSViewer
2008-04-27 19:52 . 2008-04-27 19:52 <DIR> d-------- E:\Program Files\Reference Assemblies
2008-04-27 19:52 . 2008-04-27 19:52 <DIR> d-------- E:\Program Files\MSBuild
2008-04-27 19:51 . 2006-06-29 13:07 14,048 --------- E:\WINDOWS\system32\spmsg2.dll
2008-04-27 19:49 . 2008-04-27 19:49 <DIR> d-------- E:\Program Files\MSXML 6.0
2008-04-25 17:57 . 2008-04-25 17:57 <DIR> d-------- E:\Program Files\Synaptics
2008-04-25 17:57 . 2007-09-07 11:16 215,904 --a------ E:\WINDOWS\system32\drivers\SynTP.sys
2008-04-25 17:57 . 2007-09-07 11:20 196,608 --a------ E:\WINDOWS\system32\SynCtrl.dll
2008-04-25 17:57 . 2007-09-07 11:19 163,840 --a------ E:\WINDOWS\system32\SynCOM.dll
2008-04-25 17:57 . 2007-09-07 11:28 147,456 --a------ E:\WINDOWS\system32\SynTPAPI.dll
2008-04-25 17:57 . 2007-09-07 11:56 110,592 --a------ E:\WINDOWS\system32\SynTPCo4.dll
2008-04-25 17:28 . 2008-04-25 17:28 1,160 --a------ E:\WINDOWS\mozver.dat
2008-04-24 21:47 . 2008-04-24 21:47 0 --a------ E:\WINDOWS\nsreg.dat
2008-04-24 21:44 . 2008-04-24 21:46 <DIR> d-------- E:\Program Files\Winamp
2008-04-24 21:44 . 2008-04-24 22:33 <DIR> d-------- E:\Documents and Settings\rybak_dusz\Dane aplikacji\Winamp
2008-04-24 21:15 . 2008-04-24 21:15 <DIR> d-------- E:\Program Files\Microsoft Works
2008-04-24 21:15 . 2006-10-26 19:56 32,592 --a------ E:\WINDOWS\system32\msonpmon.dll
2008-04-24 21:12 . 2008-04-24 21:12 <DIR> d-------- E:\WINDOWS\SHELLNEW
2008-04-24 21:12 . 2008-04-24 22:07 <DIR> d-------- E:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help
2008-04-24 21:11 . 2008-04-24 21:11 <DIR> dr-h----- E:\MSOCache
2008-04-23 23:54 . 2008-04-23 23:54 98,304 --a------ E:\WINDOWS\system32\qttask.exe
2008-04-23 23:53 . 2008-04-23 23:53 <DIR> d-------- E:\Program Files\ACE Mega CoDecS Pack
2008-04-23 23:50 . 2008-04-23 23:50 <DIR> d-------- E:\Documents and Settings\rybak_dusz\Dane aplikacji\BESTplayer
2008-04-23 23:33 . 2008-04-23 23:33 <DIR> d-------- E:\Program Files\Alwil Software
2008-04-23 23:16 . 2007-10-05 16:59 6,909 -ra------ E:\WINDOWS\system32\drivers\UIUSYS.SYS
2008-04-23 23:13 . 2008-04-23 23:13 <DIR> d-------- E:\Program Files\CONEXANT
2008-04-23 23:13 . 2007-10-05 16:56 49,152 -r------- E:\WINDOWS\system32\ChCfg.exe
2008-04-23 23:12 . 2008-05-01 17:35 <DIR> d-------- E:\WINDOWS\tiinst
2008-04-23 23:12 . 2008-04-23 23:13 <DIR> d-------- E:\WINDOWS\system32\RTCOM
2008-04-23 23:12 . 2004-08-04 00:44 130,048 --a------ E:\WINDOWS\system32\ksproxy.ax
2008-04-23 23:12 . 2004-08-04 00:44 130,048 --a--c--- E:\WINDOWS\system32\dllcache\ksproxy.ax
2008-04-23 23:12 . 2004-08-03 23:08 60,288 --a------ E:\WINDOWS\system32\drivers\drmk.sys
2008-04-23 23:12 . 2004-08-03 23:08 60,288 --a--c--- E:\WINDOWS\system32\dllcache\drmk.sys
2008-04-23 23:12 . 2004-08-04 00:44 4,096 --a------ E:\WINDOWS\system32\ksuser.dll
2008-04-23 23:12 . 2004-08-04 00:44 4,096 --a--c--- E:\WINDOWS\system32\dllcache\ksuser.dll
2008-04-23 23:11 . 2008-04-23 23:11 <DIR> d-------- E:\Program Files\Realtek
2008-04-23 23:11 . 2008-04-27 20:24 <DIR> d--h----- E:\Program Files\InstallShield Installation Information
2008-04-23 23:11 . 2008-04-25 17:57 <DIR> d-------- E:\Program Files\Common Files\InstallShield
2008-04-23 23:11 . 2007-10-05 16:56 16,132,608 -r------- E:\WINDOWS\RTHDCPL.exe
2008-04-23 23:11 . 2007-10-05 16:56 9,715,200 -r------- E:\WINDOWS\RTLCPL.exe
2008-04-23 23:11 . 2007-10-05 16:56 4,424,192 -r------- E:\WINDOWS\system32\drivers\RtkHDAud.sys
2008-04-23 23:11 . 2007-10-05 16:56 2,808,832 -r------- E:\WINDOWS\alcwzrd.exe
2008-04-23 23:11 . 2007-10-05 16:56 2,162,688 -r------- E:\WINDOWS\MicCal.exe
2008-04-23 23:11 . 2007-10-05 16:56 520,192 -r------- E:\WINDOWS\RtlExUpd.dll
2008-04-23 23:11 . 2008-04-23 23:11 315,392 --a------ E:\WINDOWS\HideWin.exe
2008-04-23 23:11 . 2007-10-05 16:56 299,008 -r------- E:\WINDOWS\system32\ALSndMgr.cpl
2008-04-23 23:11 . 2007-10-05 16:56 86,016 -r------- E:\WINDOWS\SoundMan.exe
2008-04-23 23:11 . 2007-10-05 16:56 69,632 -r------- E:\WINDOWS\Alcmtr.exe
2008-04-23 23:09 . 2006-10-16 16:10 23,856 --a------ E:\WINDOWS\system32\spupdsvc.exe
2008-04-23 23:07 . 2008-04-23 23:07 <DIR> d--hs---- E:\Documents and Settings\rybak_dusz\UserData
2008-04-23 23:06 . 2008-04-23 23:06 13,646 --a------ E:\WINDOWS\system32\wpa.bak
2008-04-23 23:04 . 2008-04-23 23:04 <DIR> d-------- E:\Program Files\Broadcom
2008-04-23 23:04 . 2007-02-16 15:46 160,256 -ra------ E:\WINDOWS\system32\drivers\b57xp32.sys
2008-04-23 23:04 . 2007-02-16 15:46 160,256 --a--c--- E:\WINDOWS\system32\dllcache\b57xp32.sys
2008-04-22 19:21 . 2008-04-22 19:21 1,548,288 --a------ E:\WINDOWS\system32\sfcfiles.dll
2008-04-22 19:19 . 2008-04-22 19:19 3,293,184 --a------ E:\WINDOWS\system32\igfxress.dll
2008-04-22 19:18 . 2008-04-22 19:18 4,472,832 --a------ E:\WINDOWS\RtHDVCpl.exe
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-23 20:25 --------- d-----w E:\Program Files\microsoft frontpage
2008-04-23 20:24 --------- d-----w E:\Program Files\Usługi online
2008-04-22 17:19 527,128 ----a-w E:\WINDOWS\system32\igfxcfg.exe
2008-04-22 17:18 991,744 ----a-w E:\WINDOWS\system32\syssetup.dll
2008-04-22 17:18 563,712 ----a-w E:\WINDOWS\system32\RtkPgExt.dll
2008-04-22 17:18 339,968 ----a-w E:\WINDOWS\system32\SRSTSXT.dll
2008-04-22 17:18 266,240 ----a-w E:\WINDOWS\system32\RtkApoApi.dll
2008-04-22 17:18 185,776 ----a-w E:\WINDOWS\system32\SRSTSHD.dll
2008-04-22 17:18 167,936 ----a-w E:\WINDOWS\system32\SRSHP360.dll
2008-04-22 17:18 16,384 ----a-w E:\WINDOWS\system32\RtkCoInst.dll
2008-04-22 17:18 1,911,808 ----a-w E:\WINDOWS\system32\RtkAPO.dll
2008-04-22 17:18 1,780,576 ----a-w E:\WINDOWS\system32\drivers\RTKVHDA.sys
2008-03-20 08:09 1,845,504 ----a-w E:\WINDOWS\system32\win32k.sys
2008-03-01 13:02 826,368 ----a-w E:\WINDOWS\system32\wininet.dll
2008-02-20 06:51 282,624 ----a-w E:\WINDOWS\system32\gdi32.dll
2008-02-20 05:38 45,568 ----a-w E:\WINDOWS\system32\dnsrslvr.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="E:\WINDOWS\system32\ctfmon.exe" [2006-03-02 14:00 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HotKeysCmds"="E:\WINDOWS\system32\hkcmd.exe" [2008-04-22 19:19 162584]
"Persistence"="E:\WINDOWS\system32\igfxpers.exe" [2008-04-22 19:19 138008]
"RTHDCPL"="RTHDCPL.EXE" [2007-10-05 16:56 16132608 E:\WINDOWS\RTHDCPL.exe]
"avast!"="E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-03-29 19:37 79224]
"QuickTime Task"="E:\WINDOWS\system32\qttask.exe" [2008-04-23 23:54 98304]
"SynTPStart"="E:\Program Files\Synaptics\SynTP\SynTPStart.exe" [2007-09-07 11:35 102400]
"ePower_DMC"="E:\Acer\Empowering Technology\ePower\ePower_DMC.exe" [2007-05-24 12:18 475136]
"Boot"="E:\Acer\Empowering Technology\ePower\Boot.exe" [2006-03-15 22:12 579584]
"eLockMonitor"="E:\Acer\Empowering Technology\eLock\Monitor\LaunchMonitor.exe" [ ]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="E:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 14:00 15360]
E:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
Acer Empowering Technology.lnk - E:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe [2008-04-27 19:59:48 45056]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.iac2"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\iac25_32.ax
"vidc.avrn"= E:\PROGRA~1\ACEMEG~1\SystemS\AVIDAV~1.DLL
"vidc.advj"= E:\PROGRA~1\ACEMEG~1\SystemS\AVIDAV~1.DLL
"vidc.mszh"= E:\PROGRA~1\ACEMEG~1\SystemS\avimszh.dll
"vidc.zlib"= E:\PROGRA~1\ACEMEG~1\SystemS\avizlib.dll
"vidc.cscd"= E:\PROGRA~1\ACEMEG~1\SystemS\camcodec.dll
"vidc.cvid"= E:\PROGRA~1\ACEMEG~1\SystemS\iccvid.dll
"msacm.trspch"= E:\PROGRA~1\ACEMEG~1\SystemS\tssoft32.acm
"vidc.em2v"= E:\PROGRA~1\ACEMEG~1\SystemS\etxcodec.dll
"vidc.mkvc"= E:\PROGRA~1\ACEMEG~1\SystemS\kmvidc32.dll
"vidc.hfyu"= E:\PROGRA~1\ACEMEG~1\SystemS\huffyuv.dll
"msacm.lameacm"= E:\PROGRA~1\ACEMEG~1\SystemS\lameacm.acm
"msacm.lhacm"= E:\PROGRA~1\ACEMEG~1\SystemS\lhacm.acm
"msacm.l3acm"= E:\PROGRA~1\ACEMEG~1\SystemS\l3codecp.acm
"vidc.sjpg"= E:\PROGRA~1\ACEMEG~1\SystemS\pmjpeg32.dll
"vidc.dmb2"= E:\PROGRA~1\ACEMEG~1\SystemS\pmjpeg32.dll
"vidc.gepj"= E:\PROGRA~1\ACEMEG~1\SystemS\pmjpeg32.dll
"vidc.qpeg"= E:\PROGRA~1\ACEMEG~1\SystemS\Qpeg32.dll
"vidc.q1.0"= E:\PROGRA~1\ACEMEG~1\SystemS\Qpeg32.dll
"msacm.sl_anet"= E:\PROGRA~1\ACEMEG~1\SystemS\sl_anet.acm
"vidc.tscc"= E:\PROGRA~1\ACEMEG~1\SystemS\tsccvid.dll
"vidc.vifp"= E:\PROGRA~1\ACEMEG~1\SystemS\vfcodec.dll
"vidc.wrpr"= E:\PROGRA~1\ACEMEG~1\SystemS\aviwrap.dll
"vidc.wnv1"= E:\PROGRA~1\ACEMEG~1\SystemS\wnvplay1.dll
"vidc.advs"= E:\PROGRA~1\ACEMEG~1\SystemS\Adaptec\Dvc.dll
"vidc.aflc"= E:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\FLCCOD~1.DLL
"vidc.afli"= E:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\FLCCOD~1.DLL
"vidc.aasc"= E:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\Aasc32.dll
"vidc.aas4"= E:\PROGRA~1\ACEMEG~1\SystemS\Autodesk\Aasc32.dll
"vidc.asv1"= E:\PROGRA~1\ACEMEG~1\SystemS\ASUS\asusasv1.dll
"vidc.asv2"= E:\PROGRA~1\ACEMEG~1\SystemS\ASUS\asusasv2.dll
"vidc.asvx"= E:\PROGRA~1\ACEMEG~1\SystemS\ASUS\asusasv2.dll
"vidc.vcr1"= E:\PROGRA~1\ACEMEG~1\SystemS\ATI\ativcr1.dll
"vidc.vcr2"= E:\PROGRA~1\ACEMEG~1\SystemS\ATI\ativcr2.dll
"vidc.yv12"= E:\PROGRA~1\ACEMEG~1\SystemS\ATI\atiyuv12.DLL
"vidc.mwv1"= E:\PROGRA~1\ACEMEG~1\SystemS\Aware\icmw_32.dll
"vidc.bt20"= E:\PROGRA~1\ACEMEG~1\SystemS\BROOKT~1\btvvc32.drv
"vidc.y41p"= E:\PROGRA~1\ACEMEG~1\SystemS\BROOKT~1\btvvc32.drv
"msacm.pcdv"= E:\PROGRA~1\ACEMEG~1\SystemS\Canopus\pcdv.acm
"vidc.cdvc"= E:\PROGRA~1\ACEMEG~1\SystemS\Canopus\CSCCDVC.DLL
"vidc.ddvc"= E:\PROGRA~1\ACEMEG~1\SystemS\Canopus\CSCdvsd.DLL
"vidc.png1"= E:\PROGRA~1\ACEMEG~1\SystemS\Core\COREPN~1.DLL
"msacm.CoreFLAC_ACM"= E:\PROGRA~1\ACEMEG~1\SystemS\Core\COREFL~1.ACM
"vidc.davc"= E:\PROGRA~1\ACEMEG~1\SystemS\dicas\davcvfw.dll
"vidc.div3"= E:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32.dll
"vidc.div5"= E:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32.dll
"vidc.mpg3"= E:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32.dll
"vidc.div4"= E:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32f.dll
"vidc.div6"= E:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32f.dll
"vidc.ap41"= E:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivXc32f.dll
"vidc.dvx4"= E:\PROGRA~1\ACEMEG~1\SystemS\DivX\divx4.dll
"vidc.divx"= E:\PROGRA~1\ACEMEG~1\SystemS\DivX\DivX520.dll
"msacm.divxa32"= E:\PROGRA~1\ACEMEG~1\SystemS\DivX\divxa32.acm
"vidc.frwd"= E:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwd.dll
"vidc.frwt"= E:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwd.dll
"vidc.frwa"= E:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwt.dll
"vidc.frwu"= E:\PROGRA~1\ACEMEG~1\SystemS\Forward\frwu.dll
"vidc.glzw"= E:\PROGRA~1\ACEMEG~1\SystemS\Gabest\GLZW.dll
"vidc.gpeg"= E:\PROGRA~1\ACEMEG~1\SystemS\Gabest\GPEG.dll
"vidc.i263"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\i263_32.drv
"vidc.iv30"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv31"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv32"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv33"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv34"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv35"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv36"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv37"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv38"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv39"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir32_32.dll
"vidc.iv40"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv41"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv42"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv43"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv44"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv45"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv46"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv47"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv48"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv49"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir41_32.dll
"vidc.iv50"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\ir50_32.dll
"vidc.iyuv"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\iyuv_32.dll
"vidc.yvu9"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\Iyvu9_32.dll
"vidc.ir21"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\IR21_R.DLL
"vidc.rt21"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\IR21_R.DLL
"msacm.imc"= E:\PROGRA~1\ACEMEG~1\SystemS\Intel\IMC32.ACM
"vidc.lead"= E:\PROGRA~1\ACEMEG~1\SystemS\LEAD\LCODCCMP.DLL
"vidc.dvsd"= E:\PROGRA~1\ACEMEG~1\SystemS\MAINCO~1\MCDVD_32.DLL
"vidc.dvc"= E:\PROGRA~1\ACEMEG~1\SystemS\MAINCO~1\MCDVD_32.DLL
"vidc.dvcs"= E:\PROGRA~1\ACEMEG~1\SystemS\MAINCO~1\MCDVD_32.DLL
"vidc.dcmj"= E:\PROGRA~1\ACEMEG~1\SystemS\MAINCO~1\MCMJPG32.DLL
"vidc.avi1"= E:\PROGRA~1\ACEMEG~1\SystemS\MAINCO~1\MCMJPG32.DLL
"vidc.avi2"= E:\PROGRA~1\ACEMEG~1\SystemS\MAINCO~1\MCMJPG32.DLL
"msacm.msadpcm"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msadp32.acm
"msacm.imaadpcm"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\imaadp32.acm
"msacm.msg711"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msg711.acm
"msacm.msg723"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msg723.acm
"msacm.msgsm610"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msgsm32.acm
"vidc.m261"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msh261.drv
"vidc.m263"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msh263.drv
"vidc.i420"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msh263.drv
"vidc.mrle"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msrle32.dll
"vidc.uyvy"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll
"vidc.yuy2"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll
"vidc.yvyu"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msyuv.dll
"vidc.msvc"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msvidc32.dll
"vidc.cram"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msvidc32.dll
"vidc.mpg4"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\mpg4c32.dll
"vidc.mp41"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\mpg4c32.dll
"vidc.mp42"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\mpg4c32.dll
"vidc.mp43"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\mpg4c32.dll
"vidc.mp4s"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\mpg4c32.dll
"vidc.mp4v"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\mpg4c32.dll
"vidc.wmv3"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\WMV9VCM.dll
"msacm.msaudio1"= E:\PROGRA~1\ACEMEG~1\SystemS\MICROS~1\msaud32.acm
"vidc.vixl"= E:\PROGRA~1\ACEMEG~1\SystemS\Miro\miroxl32.dll
"vidc.nt00"= E:\PROGRA~1\ACEMEG~1\SystemS\Newtek\ntcodec.dll
"msacm.vorbis"= E:\PROGRA~1\ACEMEG~1\SystemS\OGG\vorbis.acm
"vidc.vp30"= E:\PROGRA~1\ACEMEG~1\SystemS\ON2TEC~1\vp31vfw.dll
"vidc.vp31"= E:\PROGRA~1\ACEMEG~1\SystemS\ON2TEC~1\vp31vfw.dll
"vidc.vp60"= E:\PROGRA~1\ACEMEG~1\SystemS\ON2TEC~1\vp6vfw.dll
"vidc.vp61"= E:\PROGRA~1\ACEMEG~1\SystemS\ON2TEC~1\vp6vfw.dll
"vidc.pdvc"= E:\PROGRA~1\ACEMEG~1\SystemS\PANASO~1\idvcodec.dll
"vidc.ipdv"= E:\PROGRA~1\ACEMEG~1\SystemS\PANASO~1\idvcodec.dll
"vidc.pvw2"= E:\PROGRA~1\ACEMEG~1\SystemS\Pegasus\pvwv220.dll
"vidc.pimj"= E:\PROGRA~1\ACEMEG~1\SystemS\Pegasus\pvljpg20.dll
"vidc.mjpx"= E:\PROGRA~1\ACEMEG~1\SystemS\Pegasus\pvmjpg21.dll
"vidc.miro"= E:\PROGRA~1\ACEMEG~1\SystemS\Pinnacle\MIRODV~1.DLL
"vidc.dcap"= E:\PROGRA~1\ACEMEG~1\SystemS\Pinnacle\MIRODV~1.DLL
"vidc.mjpa"= E:\PROGRA~1\ACEMEG~1\SystemS\Pinnacle\RTMJPG~1.DLL
"vidc.gpjm"= E:\PROGRA~1\ACEMEG~1\SystemS\Pinnacle\RTMJPG~1.DLL
"vidc.pim1"= E:\PROGRA~1\ACEMEG~1\SystemS\Pinnacle\pclepim1.dll
"msacm.qmpeg"= E:\PROGRA~1\ACEMEG~1\SystemS\QDesign\qmpeg.acm
"vidc.rmp4"= E:\PROGRA~1\ACEMEG~1\SystemS\REALMA~1\rmp4.dll
"vidc.rud0"= E:\PROGRA~1\ACEMEG~1\SystemS\Rududu\rududu.dll
"msacm.at3"= E:\PROGRA~1\ACEMEG~1\SystemS\SONY\atrac3.acm
"vidc.sony"= E:\PROGRA~1\ACEMEG~1\SystemS\SONY\sonydv.dll
"vidc.dvcp"= E:\PROGRA~1\ACEMEG~1\SystemS\SONY\sonydv.dll
"vidc.s422"= E:\PROGRA~1\ACEMEG~1\SystemS\Tekram\tekyuv.dll
"vidc.t420"= E:\PROGRA~1\ACEMEG~1\SystemS\Toshiba\tsbyuv.dll
"vidc.y411"= E:\PROGRA~1\ACEMEG~1\SystemS\Toshiba\tsbyuv.dll
"vidc.vssv"= E:\PROGRA~1\ACEMEG~1\SystemS\VANGUA~1\vsscodec.dll
"msacm.voxacm160"= E:\PROGRA~1\ACEMEG~1\SystemS\VoxWare\vct3216.acm
"vidc.xvid"= E:\PROGRA~1\ACEMEG~1\SystemS\XviD\xvidvfw.dll
[HKLM\~\startupfolder\E:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Przyspieszenie uruchomienia programu AutoCAD.lnk]
path=E:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Przyspieszenie uruchomienia programu AutoCAD.lnk
backup=E:\WINDOWS\pss\Przyspieszenie uruchomienia programu AutoCAD.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 2008-01-11 22:16 39792 E:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
-r------- 2007-10-05 16:56 69632 E:\WINDOWS\Alcmtr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AzMixerSel]
--------- 2007-10-05 16:56 53248 E:\Program Files\Realtek\InstallShield\AzMixerSel.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
--a------ 2008-04-22 19:20 142104 E:\WINDOWS\system32\igfxtray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
--a------ 2008-04-01 20:49 36352 E:\Program Files\Winamp\winampa.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"UPS"=3 (0x3)
"TapiSrv"=3 (0x3)
"seclogon"=2 (0x2)
"RemoteRegistry"=2 (0x2)
"RDSessMgr"=3 (0x3)
"RasMan"=3 (0x3)
"RasAuto"=3 (0x3)
"ose"=3 (0x3)
"odserv"=3 (0x3)
"FastUserSwitchingCompatibility"=3 (0x3)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"E:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
R1 aswSP;avast! Self Protection;E:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 19:31]
R2 aswFsBlk;aswFsBlk;E:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 19:35]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7f8b5860-1da9-11dd-9199-001e4c505891}]
\Shell\AutoRun\command - G:\co.com
\Shell\explore\Command - G:\co.com
\Shell\open\Command - G:\co.com
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7f8b5862-1da9-11dd-9199-001e4c505891}]
\Shell\AutoRun\command - J:\co.com
\Shell\explore\Command - J:\co.com
\Shell\open\Command - J:\co.com
*Newly Created Service* - CATCHME
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-09 15:45:58
Windows 5.1.2600 Dodatek Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-05-09 15:46:36
ComboFix-quarantined-files.txt 2008-05-09 13:46:31
Pre-Run: 12,572,934,144 bajtów wolnych
Post-Run: 12,930,244,608 bajtów wolnych
345 --- E O F --- 2008-05-08 20:00:46
