ComboFix 12-06-19.03 - user 2012-06-21  20:44:19.1.2 - x86
Microsoft Windows XP Home Edition  [GMT 2:00]
Uruchomiony z: c:\documents and settings\user\Moje dokumenty\Pobieranie\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* 
.
.
(((((((((((((((((((((((((((((((((((((((   Usunięto   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Dane aplikacji\TEMP
c:\windows\system32\drivers\etc\hosts.ics
D:\install.exe
.
.
(((((((((((((((((((((((((   Pliki utworzone od 2012-05-21 do 2012-06-21  )))))))))))))))))))))))))))))))
.
.
2012-06-21 15:00 . 2012-06-21 15:00	--------	d-----w-	c:\program files\Microsoft Silverlight
2012-06-20 20:12 . 2012-06-20 20:41	--------	d-----w-	c:\documents and settings\user\.jenny
2012-06-20 20:11 . 2012-06-20 20:11	--------	d-----w-	c:\windows\Sun
2012-06-20 20:11 . 2012-06-20 20:11	--------	d-----w-	c:\documents and settings\user\Ustawienia lokalne\Dane aplikacji\Sun
2012-06-20 20:06 . 2012-06-20 20:06	--------	d-----w-	c:\program files\Common Files\Java
2012-06-20 20:05 . 2012-06-20 20:05	--------	d-----w-	c:\program files\Oracle
2012-06-20 20:05 . 2012-06-20 20:05	--------	d-----w-	c:\documents and settings\user\Dane aplikacji\Oracle
2012-06-20 20:05 . 2012-05-04 17:29	143872	----a-w-	c:\windows\system32\javacpl.cpl
2012-06-20 20:05 . 2012-05-04 17:29	772504	----a-w-	c:\windows\system32\npDeployJava1.dll
2012-06-20 20:05 . 2012-05-04 17:29	687504	----a-w-	c:\windows\system32\deployJava1.dll
2012-06-20 20:04 . 2012-06-20 20:04	--------	d-----w-	c:\program files\Java
2012-06-20 12:22 . 2012-06-20 12:22	--------	d-----w-	c:\documents and settings\user\Ustawienia lokalne\Dane aplikacji\Amazon
2012-06-20 12:22 . 2012-06-20 12:50	--------	d-----w-	c:\program files\Amazon
2012-06-17 21:24 . 2012-06-17 21:24	--------	d-----w-	c:\documents and settings\user\Dane aplikacji\NapiProjekt
2012-06-17 21:23 . 2012-06-17 21:24	--------	d-----w-	c:\program files\NapiProjekt
2012-06-10 21:53 . 2012-06-10 21:54	--------	d-----w-	c:\program files\CCleaner
2012-06-10 20:55 . 2012-06-10 20:55	--------	d-----w-	c:\documents and settings\user\Dane aplikacji\LolClient2
2012-06-10 20:43 . 2008-07-31 08:41	68616	----a-w-	c:\windows\system32\XAPOFX1_1.dll
2012-06-10 20:43 . 2008-07-31 08:40	509448	----a-w-	c:\windows\system32\XAudio2_2.dll
2012-06-10 20:43 . 2008-07-12 06:18	467984	----a-w-	c:\windows\system32\d3dx10_39.dll
2012-06-10 20:43 . 2008-07-12 06:18	1493528	----a-w-	c:\windows\system32\D3DCompiler_39.dll
2012-06-10 20:43 . 2008-07-12 06:18	3851784	----a-w-	c:\windows\system32\D3DX9_39.dll
2012-06-10 19:57 . 2012-06-10 21:50	--------	d-----w-	c:\documents and settings\user\Ustawienia lokalne\Dane aplikacji\PMB Files
2012-06-10 19:57 . 2012-06-10 21:50	--------	d-----w-	c:\documents and settings\All Users\Dane aplikacji\PMB Files
2012-06-10 19:57 . 2012-06-10 19:57	--------	d-----w-	c:\program files\Pando Networks
2012-06-09 12:47 . 2005-10-21 01:47	12800	------w-	c:\windows\system32\drivers\usb8023x.sys
2012-06-09 12:47 . 2005-10-21 01:47	30592	------w-	c:\windows\system32\drivers\rndismpx.sys
2012-06-09 12:46 . 2012-06-09 14:42	--------	d-----w-	c:\program files\Microsoft ActiveSync
2012-06-08 22:38 . 2012-06-08 22:38	--------	d-----w-	c:\documents and settings\user\Ustawienia lokalne\Dane aplikacji\bluesoleil
2012-06-08 22:36 . 2008-05-07 05:38	90624	----a-w-	c:\windows\system32\nmwcdcls.dll
2012-06-08 22:36 . 2012-06-08 22:36	--------	d-----w-	c:\program files\Nokia
2012-06-08 22:36 . 2012-06-08 22:36	--------	d-----w-	c:\program files\DIFX
2012-06-08 22:36 . 2008-08-26 08:26	18816	----a-w-	c:\windows\system32\drivers\pccsmcfd.sys
2012-06-08 22:36 . 2012-06-08 22:36	--------	d-----w-	c:\program files\PC Connectivity Solution
2012-06-08 22:36 . 2012-06-08 22:36	--------	d-----w-	c:\documents and settings\All Users\Dane aplikacji\Installations
2012-06-04 21:20 . 2012-06-04 21:20	--------	d-----w-	c:\documents and settings\user\Ustawienia lokalne\Dane aplikacji\Winamp Toolbar
.
.
.
((((((((((((((((((((((((((((((((((((((((   Sekcja Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-11 10:26 . 2012-04-24 15:38	70344	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2012-06-11 10:26 . 2012-04-24 15:38	426184	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2012-04-23 15:22 . 2012-04-23 15:22	315392	----a-w-	c:\windows\HideWin.exe
2012-05-18 20:21 . 2012-04-23 14:57	97208	----a-w-	c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((((((   Wpisy startowe rejestru   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane  
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-11-28 17:01	122512	----a-w-	c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BitComet"="d:\programy\BitComet\BitComet.exe" [2012-03-14 12761392]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ACU"="c:\program files\Atheros\ACU.exe" [2012-01-20 467055]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-11-28 3744552]
"BTMTrayAgent"="c:\program files\Motorola\Bluetooth\btmshell.dll" [2011-07-19 32955440]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"RTHDCPL"="RTHDCPL.EXE" [2007-07-05 16380416]
"WinampAgent"="d:\programy\Winamp\winampa.exe" [2011-12-09 74752]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2006-03-02 15360]
.
c:\documents and settings\All Users\Menu Start\Programy\Autostart\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.0.207\SSScheduler.exe [2011-6-17 272528]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2010-02-10 21:32	61440	----a-w-	c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"d:\\Programy\\BitComet\\BitComet.exe"=
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"27033:TCP"= 27033:TCP:BitComet 27033 TCP
"27033:UDP"= 27033:UDP:BitComet 27033 UDP
"57056:TCP"= 57056:TCP:Pando Media Booster
"57056:UDP"= 57056:UDP:Pando Media Booster
.
R0 BtHidBus;Bluetooth HID Bus Service;c:\windows\system32\drivers\BtHidBus.sys [2010-04-06 20104]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2012-04-23 435032]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2012-04-23 314456]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2012-04-23 20568]
R2 Bluetooth Low Energy Service;Bluetooth Low Energy Service;c:\program files\Motorola\Bluetooth\LEsrv.exe [2012-04-23 452656]
R2 Bluetooth Media Service;Bluetooth Media Service;c:\program files\Motorola\Bluetooth\audiosrv.exe [2012-04-23 948272]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files\Motorola\Bluetooth\obexsrv.exe [2012-04-23 566832]
R3 Bluetooth Device Manager;Bluetooth Device Manager;c:\program files\Motorola\Bluetooth\devmgrsrv.exe [2012-04-23 3538480]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\drivers\RtsUStor.sys [2012-04-23 197224]
S3 BTCOM;Bluetooth Serial port driver;c:\windows\system32\DRIVERS\btcomport.sys --> c:\windows\system32\DRIVERS\btcomport.sys [?]
S3 BTCOMBUS;Bluetooth Serial Port Bus Service;c:\windows\system32\Drivers\btcombus.sys --> c:\windows\system32\Drivers\btcombus.sys [?]
S3 BTMCOM;Bluetooth Serial Port;c:\windows\system32\drivers\btmcom.sys [2012-04-23 41472]
S3 BTMUSB;Motorola Bluetooth Radio Service;c:\windows\system32\drivers\btmusb.sys [2012-04-23 564736]
S3 btnetBUs;Bluetooth PAN Bus Service;c:\windows\system32\drivers\btnetBus.sys [2010-04-06 25864]
S3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\drivers\IvtBtBus.sys [2010-04-06 23048]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.0.207\McCHSvc.exe [2011-06-17 237008]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [2012-05-18 129976]
.
--- Inne Usługi/Sterowniki w Pamięci ---
.
*NewlyCreated* - BITS
.
.
------- Skan uzupełniający -------
.
IE: &P&obierz &za pomocą BitComet - d:\programy\BitComet\BitComet.exe/AddLink.htm
IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Pobierz wszystko za pomocą BitComet - d:\programy\BitComet\BitComet.exe/AddAllLink.htm
IE: {{bd707fe6-39f6-4bda-9265-86a76719bdc5} - c:\program files\Motorola\Bluetooth\btmiesend.htm
TCP: DhcpNameServer = 158.75.80.5
FF - ProfilePath - c:\documents and settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\1h6itlab.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.pl/
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-06-21 20:49
Windows 5.1.2600 Dodatek Service Pack 2 NTFS
.
skanowanie ukrytych procesów ...  
.
skanowanie ukrytych wpisów autostartu ... 
.
skanowanie ukrytych plików ...  
.
skanowanie pomyślnie ukończone
ukryte pliki: 0
.
**************************************************************************
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------
.
- - - - - - - > 'winlogon.exe'(920)
c:\windows\system32\Ati2evxx.dll
.
Czas ukończenia: 2012-06-21  20:51:54
ComboFix-quarantined-files.txt  2012-06-21 18:51
.
Przed: 53 981 483 008 bajtów wolnych
Po: 53 972 049 920 bajtów wolnych
.
WindowsXP-KB310994-SP2-Home-BootDisk-PLK.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
.
- - End Of File - - A0416B97F0EE3CCAEC3742D4385D09B4