ComboFix 11-03-03.01 - Rafał 2011-03-03 19:00:08.1.2 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.48.1045.18.2046.1103 [GMT 1:00] Uruchomiony z: c:\users\Rafał\Desktop\ComboFix.exe AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF} FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4} SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Utworzono nowy punkt przywracania . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . . ((((((((((((((((((((((((((((((((((((((( Sterowniki/Usługi ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Service_RelevantKnowledge ((((((((((((((((((((((((( Pliki utworzone od 2011-02-03 do 2011-03-03 ))))))))))))))))))))))))))))))) . 2011-03-03 18:28 . 2011-03-03 18:39 -------- d-----w- c:\users\Rafał\AppData\Local\temp 2011-03-03 18:28 . 2011-03-03 18:28 -------- d-----w- c:\users\Gość\AppData\Local\temp 2011-03-03 18:28 . 2011-03-03 18:28 -------- d-----w- c:\users\Default\AppData\Local\temp 2011-02-27 08:01 . 2011-02-11 06:54 5943120 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D4DC4B42-57F4-4177-8925-457C3A185BB1}\mpengine.dll 2011-02-24 09:01 . 2011-02-24 09:01 -------- d-----w- c:\users\Rafał\AppData\Roaming\NVIDIA 2011-02-22 08:20 . 2011-02-22 08:20 -------- d-----w- c:\windows\1C4551A64743409391E41477CD655043.TMP 2011-02-22 08:16 . 2011-02-22 08:16 -------- d-----w- c:\programdata\NVIDIA Corporation 2011-02-22 08:14 . 2011-01-08 03:27 941160 ----a-w- c:\windows\system32\nvdispco322090.dll 2011-02-22 08:14 . 2011-01-08 03:27 837736 ----a-w- c:\windows\system32\nvgenco322040.dll 2011-02-22 08:14 . 2011-01-08 03:27 5653096 ----a-w- c:\windows\system32\nvwgf2um.dll 2011-02-22 08:14 . 2011-01-08 03:27 15047272 ----a-w- c:\windows\system32\nvoglv32.dll 2011-02-22 08:14 . 2011-01-08 03:27 10467656 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys 2011-02-22 08:14 . 2011-01-08 03:27 4941928 ----a-w- c:\windows\system32\nvcuda.dll 2011-02-22 08:14 . 2011-01-08 03:27 2251368 ----a-w- c:\windows\system32\nvcuvenc.dll 2011-02-22 08:14 . 2011-01-08 03:27 13011560 ----a-w- c:\windows\system32\nvcompiler.dll 2011-02-22 08:13 . 2011-01-08 03:27 57960 ----a-w- c:\windows\system32\OpenCL.dll 2011-02-22 08:13 . 2011-01-08 03:27 2895976 ----a-w- c:\windows\system32\nvcuvid.dll 2011-02-22 08:13 . 2011-02-22 08:21 -------- d-----w- c:\program files\NVIDIA Corporation 2011-02-22 07:54 . 2011-02-22 07:54 -------- d-----w- c:\program files\SystemRequirementsLab 2011-02-21 11:16 . 2011-02-21 14:09 98392 ----a-w- c:\windows\system32\drivers\SBREDrv.sys 2011-02-21 10:41 . 2011-02-21 10:41 -------- d-----w- c:\program files\Lavasoft 2011-02-21 08:27 . 2011-03-03 18:38 -------- d-----w- c:\program files\Spybot - Search & Destroy 2011-02-19 18:47 . 2009-06-30 09:37 28552 ----a-w- c:\windows\system32\drivers\pavboot.sys 2011-02-19 18:47 . 2011-02-19 18:47 -------- d-----w- c:\program files\Panda Security 2011-02-19 18:44 . 2011-02-19 18:44 -------- d-----w- c:\programdata\McAfee Security Scan 2011-02-19 18:44 . 2011-02-19 18:44 -------- d-----w- c:\program files\McAfee Security Scan 2011-02-19 18:44 . 2011-02-19 18:44 -------- d-----w- c:\programdata\McAfee 2011-02-19 13:07 . 2011-02-19 13:07 -------- d-----w- c:\program files\Common Files\EZB Systems 2011-02-19 13:07 . 2011-02-19 13:07 -------- d-----w- c:\program files\UltraISO 2011-02-09 08:15 . 2011-01-06 10:51 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat 2011-02-09 08:09 . 2011-01-08 08:47 34304 ----a-w- c:\windows\system32\atmlib.dll 2011-02-09 08:09 . 2011-01-08 06:28 292352 ----a-w- c:\windows\system32\atmfd.dll 2011-02-07 09:12 . 2011-02-07 09:12 -------- d-----w- c:\users\Rafał\AppData\Local\Adobe 2011-02-05 12:09 . 2011-02-24 09:01 -------- d-----w- c:\users\Rafał\AppData\Local\Cyberlink 2011-02-05 12:02 . 2011-02-05 12:02 -------- d-----w- c:\users\Public\CyberLink 2011-02-05 12:01 . 2011-02-05 12:01 -------- d-----w- c:\users\Rafał\AppData\Local\PowerDVDCox 2011-02-05 12:01 . 2011-02-05 12:01 -------- d-----w- c:\users\Rafał\AppData\Local\PowerDVDCinema 2011-02-05 11:58 . 2011-02-05 12:01 -------- d-----w- c:\programdata\CyberLink 2011-02-05 11:58 . 2011-02-05 11:58 -------- d-----w- c:\program files\Common Files\CyberLink 2011-02-05 11:55 . 2011-02-21 10:59 29480 ----a-w- c:\windows\system32\msxml3a.dll 2011-02-04 19:02 . 2011-02-04 19:02 -------- d-----w- c:\users\Rafał\AppData\Local\CrashDumps 2011-02-03 23:38 . 2011-02-03 23:38 -------- d-----w- c:\users\Rafał\AppData\Local\Apple 2011-02-03 23:38 . 2011-02-03 23:38 -------- d-----w- c:\users\Rafał\AppData\Local\Apple Computer 2011-02-02 22:09 . 2011-02-02 22:09 663552 ----a-w- c:\windows\system32\NETw5c32.dll 2011-02-02 22:09 . 2011-02-02 22:09 4232704 ----a-w- c:\windows\system32\drivers\NETw5v32.sys 2011-02-02 22:09 . 2011-02-02 22:09 2756608 ----a-w- c:\windows\system32\NETw5r32.dll 2011-02-02 22:09 . 2011-02-02 22:09 46592 ----a-w- c:\windows\system32\drivers\l160x86.sys 2011-02-02 22:08 . 2011-02-02 22:08 324120 ----a-w- c:\windows\system32\drivers\iaStor.sys 2011-02-02 22:08 . 2011-02-02 22:08 68608 ----a-w- c:\windows\system32\drivers\rimsptsk.sys 2011-02-02 22:08 . 2011-02-02 22:08 626688 ----a-w- c:\windows\snymsico.dll 2011-02-02 19:43 . 2010-12-28 15:55 413696 ----a-w- c:\windows\system32\odbc32.dll 2011-02-02 19:43 . 2010-12-28 15:53 253952 ----a-w- c:\program files\Common Files\System\ado\msadox.dll 2011-02-02 19:43 . 2010-12-28 15:53 241664 ----a-w- c:\program files\Common Files\System\ado\msadomd.dll 2011-02-02 19:43 . 2010-12-28 15:53 708608 ----a-w- c:\program files\Common Files\System\ado\msado15.dll 2011-02-02 19:43 . 2010-12-28 15:53 57344 ----a-w- c:\program files\Common Files\System\msadc\msadcs.dll 2011-02-02 19:43 . 2010-12-28 15:53 180224 ----a-w- c:\program files\Common Files\System\msadc\msadco.dll 2011-02-02 19:43 . 2010-12-14 14:49 1169408 ----a-w- c:\windows\system32\sdclt.exe . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-03-03 18:38 . 2007-12-27 20:10 45056 ----a-w- c:\windows\system32\acovcnt.exe 2011-02-21 10:59 . 2003-02-21 04:41 353576 ----a-w- c:\windows\system32\msvcr71.dll 2011-02-21 10:59 . 2003-03-18 20:13 505128 ----a-w- c:\windows\system32\msvcp71.dll 2011-02-02 16:11 . 2010-09-28 07:05 222080 ------w- c:\windows\system32\MpSigStub.exe 2011-01-30 13:28 . 2011-01-30 13:28 28400 ----a-w- c:\windows\system32\drivers\SECDRV.SYS 2011-01-08 03:27 . 2011-02-22 08:13 10920 ----a-w- c:\windows\system32\drivers\nvBridge.kmd 2011-01-08 03:27 . 2007-05-22 14:34 1965672 ----a-w- c:\windows\system32\nvapi.dll 2011-01-08 03:27 . 2007-05-22 14:34 10078312 ----a-w- c:\windows\system32\nvd3dum.dll 2011-01-07 20:06 . 2011-01-07 20:06 580200 ----a-w- c:\windows\system32\easyUpdatusAPIU.dll 2011-01-07 20:06 . 2011-01-07 20:06 3597416 ----a-w- c:\windows\system32\nvcpl.dll 2011-01-07 20:06 . 2011-01-07 20:06 2620520 ----a-w- c:\windows\system32\nvsvc.dll 2011-01-07 20:06 . 2011-01-07 20:06 608872 ----a-w- c:\windows\system32\nvvsvc.exe 2011-01-07 20:06 . 2011-01-07 20:06 288872 ----a-w- c:\windows\system32\nvhotkey.dll 2011-01-07 20:06 . 2011-01-07 20:06 2558568 ----a-w- c:\windows\system32\nvsvcr.dll 2011-01-07 20:06 . 2011-01-07 20:06 111208 ----a-w- c:\windows\system32\nvmctray.dll 2010-12-27 23:25 . 2010-12-27 23:25 180224 ----a-w- c:\windows\system32\WinVd32.sys 2010-12-27 23:25 . 2010-12-27 23:25 7680 ----a-w- c:\windows\system32\WinFLsrv.exe 2010-12-24 10:22 . 2010-12-24 10:22 126512 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS 2010-12-20 17:09 . 2010-12-23 18:25 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-12-20 17:08 . 2010-12-23 18:25 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-12-15 15:09 . 2010-12-15 15:09 445016 ----a-w- c:\windows\system32\wrap_oal.dll 2010-12-15 15:09 . 2010-12-15 15:09 109144 ----a-w- c:\windows\system32\OpenAL32.dll . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}] 2010-09-28 20:44 1400712 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712] [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1] [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser] "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712] [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1] [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1] @="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}" [HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}] 2007-06-02 01:08 143360 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2009-03-13 1466368] "Skytel"="Skytel.exe" [2007-08-03 1826816] "PowerForPhone"="c:\program files\PowerForPhone\PowerForPhone.exe" [2007-06-26 778240] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-03-01 857648] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-12-14 136176] R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2010-12-20 363344] R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.0.188\McCHSvc.exe [2010-10-05 237008] R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504] S0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [2009-06-30 28552] S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-09-30 691696] S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NIS\1205000.07D\SYMDS.SYS [2010-10-21 340016] S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NIS\1205000.07D\SYMEFA.SYS [2010-11-18 652336] S1 BHDrvx86;BHDrvx86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20110225.002\BHDrvx86.sys [2011-02-25 800376] S1 IDSVix86;IDSVix86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20110302.001\IDSvix86.sys [2010-11-09 353912] S1 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys [2011-02-21 98392] S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NIS\1205000.07D\Ironx86.SYS [2010-11-16 136312] S1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\System32\Drivers\NIS\1205000.07D\SYMTDIV.SYS [2010-12-01 330360] S2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2011/02/05 12:58];c:\program files\CyberLink\PowerDVD9\000.fcl [2009-09-01 15:59 87536] S2 FreeAgentGoNext Service;Seagate Service;c:\program files\Seagate\SeagateManager\Sync\FreeAgentService.exe [2008-07-30 161064] S2 NIS;Norton Internet Security;c:\program files\Norton Internet Security\Engine\18.5.0.125\ccSvcHst.exe [2010-11-24 130000] S2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service;c:\program files\Common Files\PC Tools\sMonitor\StartManSvc.exe [2009-10-14 583640] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-01-07 378984] S2 StkSSrv;Syntek AVStream USB2.0 WebCam Service;c:\windows\System32\StkCSrv.exe [2007-04-18 24576] S3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:\windows\system32\DRIVERS\l160x86.sys [2011-02-02 46592] S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2010-12-24 102448] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2010-12-20 20952] S3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw5v32.sys [2011-02-02 4232704] S3 StkCMini;Syntek AVStream USB2.0 1.3M WebCam;c:\windows\system32\Drivers\StkCMini.sys [2007-06-06 1260672] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] bthsvcs REG_MULTI_SZ BthServ LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2007-06-20 10:47 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe . Zawartość folderu 'Zaplanowane zadania' 2011-03-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-12-14 16:31] 2011-03-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-12-14 16:31] . . ------- Skan uzupełniający ------- . uStart Page = hxxp://www.wp.pl/ Trusted Zone: mks.com.pl TCP: {51AEA76F-357E-4FF0-A50B-B6E45F0B8E1A} = 212.2.96.52 212.2.96.51 FF - ProfilePath - c:\users\Rafał\AppData\Roaming\Mozilla\Firefox\Profiles\nmric78r.default\ FF - prefs.js: browser.startup.homepage - www.wp.pl FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b} FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF - Ext: Norton IPS: {BBDA0591-3099-440a-AA10-41764D9DB4DB} - c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\IPSFFPlgn FF - Ext: Norton Toolbar: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62} - c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\coFFPlgn . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2011-03-03 19:40 Windows 6.0.6002 Service Pack 2 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... c:\windows\system32\sys_drv.dat 7028 bytes c:\windows\system32\sys_drv_2.dat 6024 bytes c:\windows\system32\WinFLdrv.sys 17984 bytes executable C:\ADSM_PData_0150 c:\users\Rafał\AppData\Roaming\systemfl.$dk 990 bytes skanowanie pomyślnie ukończone ukryte pliki: 5 ************************************************************************** [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NIS] "ImagePath"="\"c:\program files\Norton Internet Security\Engine\18.5.0.125\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files\Norton Internet Security\Engine\18.5.0.125\diMaster.dll\" /prefetch:1" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{B154377D-700F-42cc-9474-23858FBDF4BD}] "ImagePath"="\??\c:\program files\CyberLink\PowerDVD9\000.fcl" . --------------------- ZABLOKOWANE KLUCZE REJESTRU --------------------- [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 "MSCurrentCountry"=dword:000000b5 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- - - - - - - - > 'Explorer.exe'(3192) c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll . ------------------------ Pozostałe uruchomione procesy ------------------------ . c:\windows\system32\nvvsvc.exe c:\program files\NVIDIA Corporation\Display\NvXDSync.exe c:\windows\system32\nvvsvc.exe c:\program files\ASUS\ASUS Data Security Manager\ADSMSrv.exe c:\program files\ATK Hotkey\ASLDRSrv.exe c:\program files\ATKGFNEX\GFNEXSrv.exe c:\program files\ATK Hotkey\Hcontrol.exe c:\program files\ATKOSD2\ATKOSD2.exe c:\program files\Wireless Console 2\wcourier.exe c:\program files\ASUS\Splendid\ACMON.exe c:\program files\P4G\BatteryLife.exe c:\windows\System32\ACEngSvr.exe c:\program files\ATK Hotkey\ATKOSD.exe c:\program files\ATK Hotkey\KBFiltr.exe c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe c:\program files\Bonjour\mDNSResponder.exe c:\program files\Common Files\LightScribe\LSSrvc.exe c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe c:\program files\ASUS\NB Probe\SPM\spmgr.exe c:\windows\system32\WUDFHost.exe c:\windows\system32\DllHost.exe c:\windows\system32\conime.exe . ************************************************************************** . Czas ukończenia: 2011-03-03 19:47:35 - komputer został uruchomiony ponownie ComboFix-quarantined-files.txt 2011-03-03 18:47 Przed: 24 599 851 008 bajtów wolnych Po: 24 426 438 656 bajtów wolnych - - End Of File - - 8973773BEE29423C165B58E67998B840