majki2222
Użytkownicy-
Postów
10 -
Dołączył
-
Ostatnia wizyta
-
Keylogger w bibliotece rjlb.dll
majki2222 odpowiedział(a) na majki2222 temat w Dział pomocy doraźnej
Dziękuje za poświęcony czas , a co do stron i informacji które mi podałaś to postaram się je wykorzystać jak najlepiej potrafie Sam tobie też dziękuje za pomoc. Pozdrawiam Majki2222. -
Keylogger w bibliotece rjlb.dll
majki2222 odpowiedział(a) na majki2222 temat w Dział pomocy doraźnej
Dziękuje za pomoc , myśle że już jest ok bo skanowałem jeszcze innymi programami ;p / mam jeszcze jedną prośbę , chciałbym zebyś podała mi jakieś sposoby na obronę przed takimi sutyacjami jak ta ... doświadczenie masz to widać więc proszę wiem że wystarczy wpisać w google lecz ja pytam jak się bronić według cb ( jakie sa najlepsze programy ) jaki anty wir/ jaki firewall/ jakie programy z góry dziękuje i proszę o to co wyżej Aha i czy mogłabyś dołaczyć stronke gdzie mogę się nauczyć czytac logi itp tak jak ty ?;p a tutaj log: nowy otl.txt -
Keylogger w bibliotece rjlb.dll
majki2222 odpowiedział(a) na majki2222 temat w Dział pomocy doraźnej
Zrobione tak jak powiedziałaś czekam i sam też szukam odpowiedzi , narazie nic nie wiem czy to może mieć z tym związek ale nod wykrywa mi atak na sieć dns , szukałem o tym w google ale nic ciekawego ( cos tam o szpiegu czyli chyba keylogger ) http://speedy.sh/HAZBd/ataK.jpg log combofix.txt OTL.Txt -
Keylogger w bibliotece rjlb.dll
majki2222 odpowiedział(a) na majki2222 temat w Dział pomocy doraźnej
skan: SystemLook.txt -
Keylogger w bibliotece rjlb.dll
majki2222 odpowiedział(a) na majki2222 temat w Dział pomocy doraźnej
Masz racje dziś coś już nie myślę / zmęczony jestem po pracy więc a co do literowki to cały czas źle wpisywałem bo myslałem że mam wpisywać sfc /sacnnow bardzo przepraszam , i czekam na odpowiedź czy można coś z tym zrobić czy będe musiał przeinstalować cały system -
Keylogger w bibliotece rjlb.dll
majki2222 odpowiedział(a) na majki2222 temat w Dział pomocy doraźnej
Nie mogę tego spakować, ponieważ wyskakuje błąd: nie mogę utworzyć CBS.rar Odmowa dostępu. można jakoś inaczej to przekazać? mam ;/ trzeba bylo wyciągnąć z tamtąd: tu wrzuce inaczej jakoś: http://speedy.sh/Qp4rx/CBS.rar <<<speedyshare teraz jest taki problem na stronie CBS.rar Nie masz uprawnień do wysyłania tego typu plików -
Keylogger w bibliotece rjlb.dll
majki2222 odpowiedział(a) na majki2222 temat w Dział pomocy doraźnej
Mam nadzieje, że wszystko dobrze teraz zrobiłem , przepraszam za moje roztrzepanie sfc.txt Extras.Txt OTL.Txt -
Keylogger w bibliotece rjlb.dll
majki2222 odpowiedział(a) na majki2222 temat w Dział pomocy doraźnej
tutaj daje te komendy z sfc myliłem się ) ;/ 2012-03-29 18:42:07, Info CSI 00000009 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:42:07, Info CSI 0000000a [sR] Beginning Verify and Repair transaction 2012-03-29 18:42:10, Info CSI 0000000c [sR] Verify complete 2012-03-29 18:42:10, Info CSI 0000000d [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:42:10, Info CSI 0000000e [sR] Beginning Verify and Repair transaction 2012-03-29 18:42:13, Info CSI 00000010 [sR] Verify complete 2012-03-29 18:42:13, Info CSI 00000011 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:42:13, Info CSI 00000012 [sR] Beginning Verify and Repair transaction 2012-03-29 18:42:19, Info CSI 00000014 [sR] Verify complete 2012-03-29 18:42:19, Info CSI 00000015 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:42:19, Info CSI 00000016 [sR] Beginning Verify and Repair transaction 2012-03-29 18:42:23, Info CSI 00000018 [sR] Verify complete 2012-03-29 18:42:24, Info CSI 00000019 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:42:24, Info CSI 0000001a [sR] Beginning Verify and Repair transaction 2012-03-29 18:42:27, Info CSI 0000001c [sR] Verify complete 2012-03-29 18:42:28, Info CSI 0000001d [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:42:28, Info CSI 0000001e [sR] Beginning Verify and Repair transaction 2012-03-29 18:42:33, Info CSI 00000020 [sR] Verify complete 2012-03-29 18:42:34, Info CSI 00000021 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:42:34, Info CSI 00000022 [sR] Beginning Verify and Repair transaction 2012-03-29 18:42:38, Info CSI 00000024 [sR] Verify complete 2012-03-29 18:42:38, Info CSI 00000025 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:42:38, Info CSI 00000026 [sR] Beginning Verify and Repair transaction 2012-03-29 18:42:41, Info CSI 00000028 [sR] Verify complete 2012-03-29 18:42:41, Info CSI 00000029 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:42:41, Info CSI 0000002a [sR] Beginning Verify and Repair transaction 2012-03-29 18:42:46, Info CSI 0000002d [sR] Verify complete 2012-03-29 18:42:46, Info CSI 0000002e [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:42:46, Info CSI 0000002f [sR] Beginning Verify and Repair transaction 2012-03-29 18:42:54, Info CSI 00000032 [sR] Verify complete 2012-03-29 18:42:54, Info CSI 00000033 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:42:54, Info CSI 00000034 [sR] Beginning Verify and Repair transaction 2012-03-29 18:42:58, Info CSI 00000038 [sR] Verify complete 2012-03-29 18:42:59, Info CSI 00000039 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:42:59, Info CSI 0000003a [sR] Beginning Verify and Repair transaction 2012-03-29 18:43:04, Info CSI 0000003d [sR] Verify complete 2012-03-29 18:43:04, Info CSI 0000003e [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:43:04, Info CSI 0000003f [sR] Beginning Verify and Repair transaction 2012-03-29 18:43:10, Info CSI 00000041 [sR] Verify complete 2012-03-29 18:43:10, Info CSI 00000042 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:43:10, Info CSI 00000043 [sR] Beginning Verify and Repair transaction 2012-03-29 18:43:18, Info CSI 00000065 [sR] Verify complete 2012-03-29 18:43:18, Info CSI 00000066 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:43:18, Info CSI 00000067 [sR] Beginning Verify and Repair transaction 2012-03-29 18:43:24, Info CSI 0000006c [sR] Verify complete 2012-03-29 18:43:24, Info CSI 0000006d [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:43:24, Info CSI 0000006e [sR] Beginning Verify and Repair transaction 2012-03-29 18:43:30, Info CSI 00000070 [sR] Verify complete 2012-03-29 18:43:30, Info CSI 00000071 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:43:30, Info CSI 00000072 [sR] Beginning Verify and Repair transaction 2012-03-29 18:43:37, Info CSI 00000074 [sR] Verify complete 2012-03-29 18:43:37, Info CSI 00000075 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:43:37, Info CSI 00000076 [sR] Beginning Verify and Repair transaction 2012-03-29 18:43:43, Info CSI 00000078 [sR] Verify complete 2012-03-29 18:43:43, Info CSI 00000079 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:43:43, Info CSI 0000007a [sR] Beginning Verify and Repair transaction 2012-03-29 18:43:50, Info CSI 0000007c [sR] Verify complete 2012-03-29 18:43:51, Info CSI 0000007d [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:43:51, Info CSI 0000007e [sR] Beginning Verify and Repair transaction 2012-03-29 18:44:02, Info CSI 000000a1 [sR] Verify complete 2012-03-29 18:44:03, Info CSI 000000a2 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:44:03, Info CSI 000000a3 [sR] Beginning Verify and Repair transaction 2012-03-29 18:44:11, Info CSI 000000a5 [sR] Verify complete 2012-03-29 18:44:11, Info CSI 000000a6 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:44:11, Info CSI 000000a7 [sR] Beginning Verify and Repair transaction 2012-03-29 18:44:27, Info CSI 000000a9 [sR] Verify complete 2012-03-29 18:44:28, Info CSI 000000aa [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:44:28, Info CSI 000000ab [sR] Beginning Verify and Repair transaction 2012-03-29 18:44:33, Info CSI 000000af [sR] Verify complete 2012-03-29 18:44:33, Info CSI 000000b0 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:44:33, Info CSI 000000b1 [sR] Beginning Verify and Repair transaction 2012-03-29 18:44:37, Info CSI 000000b3 [sR] Verify complete 2012-03-29 18:44:37, Info CSI 000000b4 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:44:37, Info CSI 000000b5 [sR] Beginning Verify and Repair transaction 2012-03-29 18:44:40, Info CSI 000000b7 [sR] Verify complete 2012-03-29 18:44:40, Info CSI 000000b8 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:44:40, Info CSI 000000b9 [sR] Beginning Verify and Repair transaction 2012-03-29 18:44:51, Info CSI 000000c9 [sR] Verify complete 2012-03-29 18:44:52, Info CSI 000000ca [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:44:52, Info CSI 000000cb [sR] Beginning Verify and Repair transaction 2012-03-29 18:44:58, Info CSI 000000d0 [sR] Verify complete 2012-03-29 18:44:59, Info CSI 000000d1 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:44:59, Info CSI 000000d2 [sR] Beginning Verify and Repair transaction 2012-03-29 18:45:02, Info CSI 000000d4 [sR] Verify complete 2012-03-29 18:45:02, Info CSI 000000d5 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:45:02, Info CSI 000000d6 [sR] Beginning Verify and Repair transaction 2012-03-29 18:45:08, Info CSI 000000d8 [sR] Verify complete 2012-03-29 18:45:08, Info CSI 000000d9 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:45:08, Info CSI 000000da [sR] Beginning Verify and Repair transaction 2012-03-29 18:45:13, Info CSI 000000dc [sR] Verify complete 2012-03-29 18:45:14, Info CSI 000000dd [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:45:14, Info CSI 000000de [sR] Beginning Verify and Repair transaction 2012-03-29 18:45:23, Info CSI 000000e1 [sR] Verify complete 2012-03-29 18:45:24, Info CSI 000000e2 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:45:24, Info CSI 000000e3 [sR] Beginning Verify and Repair transaction 2012-03-29 18:45:36, Info CSI 000000e6 [sR] Verify complete 2012-03-29 18:45:36, Info CSI 000000e7 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:45:36, Info CSI 000000e8 [sR] Beginning Verify and Repair transaction 2012-03-29 18:45:44, Info CSI 000000ea [sR] Verify complete 2012-03-29 18:45:44, Info CSI 000000eb [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:45:44, Info CSI 000000ec [sR] Beginning Verify and Repair transaction 2012-03-29 18:45:49, Info CSI 000000ee [sR] Verify complete 2012-03-29 18:45:50, Info CSI 000000ef [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:45:50, Info CSI 000000f0 [sR] Beginning Verify and Repair transaction 2012-03-29 18:46:03, Info CSI 000000f2 [sR] Verify complete 2012-03-29 18:46:04, Info CSI 000000f3 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:46:04, Info CSI 000000f4 [sR] Beginning Verify and Repair transaction 2012-03-29 18:46:17, Info CSI 000000f6 [sR] Verify complete 2012-03-29 18:46:17, Info CSI 000000f7 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:46:17, Info CSI 000000f8 [sR] Beginning Verify and Repair transaction 2012-03-29 18:46:33, Info CSI 000000fa [sR] Verify complete 2012-03-29 18:46:34, Info CSI 000000fb [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:46:34, Info CSI 000000fc [sR] Beginning Verify and Repair transaction 2012-03-29 18:46:48, Info CSI 00000114 [sR] Verify complete 2012-03-29 18:46:49, Info CSI 00000115 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:46:49, Info CSI 00000116 [sR] Beginning Verify and Repair transaction 2012-03-29 18:47:04, Info CSI 00000118 [sR] Verify complete 2012-03-29 18:47:04, Info CSI 00000119 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:47:04, Info CSI 0000011a [sR] Beginning Verify and Repair transaction 2012-03-29 18:47:36, Info CSI 0000011c [sR] Verify complete 2012-03-29 18:47:37, Info CSI 0000011d [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:47:37, Info CSI 0000011e [sR] Beginning Verify and Repair transaction 2012-03-29 18:47:59, Info CSI 00000121 [sR] Verify complete 2012-03-29 18:47:59, Info CSI 00000122 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:47:59, Info CSI 00000123 [sR] Beginning Verify and Repair transaction 2012-03-29 18:48:16, Info CSI 00000125 [sR] Verify complete 2012-03-29 18:48:17, Info CSI 00000126 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:48:17, Info CSI 00000127 [sR] Beginning Verify and Repair transaction 2012-03-29 18:48:29, Info CSI 00000129 [sR] Verify complete 2012-03-29 18:48:30, Info CSI 0000012a [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:48:30, Info CSI 0000012b [sR] Beginning Verify and Repair transaction 2012-03-29 18:48:42, Info CSI 0000012d [sR] Verify complete 2012-03-29 18:48:42, Info CSI 0000012e [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:48:42, Info CSI 0000012f [sR] Beginning Verify and Repair transaction 2012-03-29 18:48:56, Info CSI 00000133 [sR] Verify complete 2012-03-29 18:48:57, Info CSI 00000134 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:48:57, Info CSI 00000135 [sR] Beginning Verify and Repair transaction 2012-03-29 18:49:10, Info CSI 00000137 [sR] Verify complete 2012-03-29 18:49:11, Info CSI 00000138 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:49:11, Info CSI 00000139 [sR] Beginning Verify and Repair transaction 2012-03-29 18:49:29, Info CSI 0000013c [sR] Verify complete 2012-03-29 18:49:30, Info CSI 0000013d [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:49:30, Info CSI 0000013e [sR] Beginning Verify and Repair transaction 2012-03-29 18:49:42, Info CSI 00000140 [sR] Verify complete 2012-03-29 18:49:43, Info CSI 00000141 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:49:43, Info CSI 00000142 [sR] Beginning Verify and Repair transaction 2012-03-29 18:49:58, Info CSI 00000145 [sR] Verify complete 2012-03-29 18:49:58, Info CSI 00000146 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:49:58, Info CSI 00000147 [sR] Beginning Verify and Repair transaction 2012-03-29 18:50:15, Info CSI 00000149 [sR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:18{9}]"slwga.dll" from store 2012-03-29 18:50:16, Info CSI 0000014c [sR] Verify complete 2012-03-29 18:50:17, Info CSI 0000014d [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:50:17, Info CSI 0000014e [sR] Beginning Verify and Repair transaction 2012-03-29 18:50:34, Info CSI 00000150 [sR] Verify complete 2012-03-29 18:50:35, Info CSI 00000151 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:50:35, Info CSI 00000152 [sR] Beginning Verify and Repair transaction 2012-03-29 18:50:47, Info CSI 00000154 [sR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:26{13}]"systemcpl.dll" from store 2012-03-29 18:50:47, Info CSI 00000156 [sR] Verify complete 2012-03-29 18:50:48, Info CSI 00000157 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:50:48, Info CSI 00000158 [sR] Beginning Verify and Repair transaction 2012-03-29 18:51:01, Info CSI 0000015a [sR] Verify complete 2012-03-29 18:51:01, Info CSI 0000015b [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:51:01, Info CSI 0000015c [sR] Beginning Verify and Repair transaction 2012-03-29 18:51:14, Info CSI 0000015f [sR] Verify complete 2012-03-29 18:51:15, Info CSI 00000160 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:51:15, Info CSI 00000161 [sR] Beginning Verify and Repair transaction 2012-03-29 18:51:31, Info CSI 00000163 [sR] Verify complete 2012-03-29 18:51:31, Info CSI 00000164 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:51:31, Info CSI 00000165 [sR] Beginning Verify and Repair transaction 2012-03-29 18:51:44, Info CSI 00000169 [sR] Verify complete 2012-03-29 18:51:45, Info CSI 0000016a [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:51:45, Info CSI 0000016b [sR] Beginning Verify and Repair transaction 2012-03-29 18:52:01, Info CSI 0000016d [sR] Verify complete 2012-03-29 18:52:02, Info CSI 0000016e [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:52:02, Info CSI 0000016f [sR] Beginning Verify and Repair transaction 2012-03-29 18:52:16, Info CSI 00000173 [sR] Verify complete 2012-03-29 18:52:17, Info CSI 00000174 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:52:17, Info CSI 00000175 [sR] Beginning Verify and Repair transaction 2012-03-29 18:52:31, Info CSI 00000177 [sR] Verify complete 2012-03-29 18:52:31, Info CSI 00000178 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:52:31, Info CSI 00000179 [sR] Beginning Verify and Repair transaction 2012-03-29 18:52:48, Info CSI 0000017c [sR] Verify complete 2012-03-29 18:52:48, Info CSI 0000017d [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:52:48, Info CSI 0000017e [sR] Beginning Verify and Repair transaction 2012-03-29 18:52:56, Info CSI 00000180 [sR] Verify complete 2012-03-29 18:52:57, Info CSI 00000181 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:52:57, Info CSI 00000182 [sR] Beginning Verify and Repair transaction 2012-03-29 18:53:01, Info CSI 00000184 [sR] Verify complete 2012-03-29 18:53:01, Info CSI 00000185 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:53:01, Info CSI 00000186 [sR] Beginning Verify and Repair transaction 2012-03-29 18:53:13, Info CSI 00000188 [sR] Verify complete 2012-03-29 18:53:13, Info CSI 00000189 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:53:13, Info CSI 0000018a [sR] Beginning Verify and Repair transaction 2012-03-29 18:53:24, Info CSI 0000018c [sR] Verify complete 2012-03-29 18:53:25, Info CSI 0000018d [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:53:25, Info CSI 0000018e [sR] Beginning Verify and Repair transaction 2012-03-29 18:53:48, Info CSI 00000190 [sR] Verify complete 2012-03-29 18:53:48, Info CSI 00000191 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:53:48, Info CSI 00000192 [sR] Beginning Verify and Repair transaction 2012-03-29 18:54:00, Info CSI 00000194 [sR] Verify complete 2012-03-29 18:54:01, Info CSI 00000195 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:54:01, Info CSI 00000196 [sR] Beginning Verify and Repair transaction 2012-03-29 18:54:15, Info CSI 00000198 [sR] Verify complete 2012-03-29 18:54:15, Info CSI 00000199 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:54:15, Info CSI 0000019a [sR] Beginning Verify and Repair transaction 2012-03-29 18:55:08, Info CSI 0000019c [sR] Verify complete 2012-03-29 18:55:09, Info CSI 0000019d [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:55:09, Info CSI 0000019e [sR] Beginning Verify and Repair transaction 2012-03-29 18:55:52, Info CSI 000001a0 [sR] Verify complete 2012-03-29 18:55:53, Info CSI 000001a1 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:55:53, Info CSI 000001a2 [sR] Beginning Verify and Repair transaction 2012-03-29 18:56:08, Info CSI 000001a4 [sR] Verify complete 2012-03-29 18:56:08, Info CSI 000001a5 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:56:08, Info CSI 000001a6 [sR] Beginning Verify and Repair transaction 2012-03-29 18:56:17, Info CSI 000001a8 [sR] Verify complete 2012-03-29 18:56:17, Info CSI 000001a9 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:56:17, Info CSI 000001aa [sR] Beginning Verify and Repair transaction 2012-03-29 18:56:24, Info CSI 000001ac [sR] Verify complete 2012-03-29 18:56:25, Info CSI 000001ad [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:56:25, Info CSI 000001ae [sR] Beginning Verify and Repair transaction 2012-03-29 18:56:33, Info CSI 000001b0 [sR] Verify complete 2012-03-29 18:56:34, Info CSI 000001b1 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:56:34, Info CSI 000001b2 [sR] Beginning Verify and Repair transaction 2012-03-29 18:56:49, Info CSI 000001b4 [sR] Verify complete 2012-03-29 18:56:50, Info CSI 000001b5 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:56:50, Info CSI 000001b6 [sR] Beginning Verify and Repair transaction 2012-03-29 18:57:01, Info CSI 000001be [sR] Verify complete 2012-03-29 18:57:02, Info CSI 000001bf [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:57:02, Info CSI 000001c0 [sR] Beginning Verify and Repair transaction 2012-03-29 18:57:21, Info CSI 000001c2 [sR] Verify complete 2012-03-29 18:57:21, Info CSI 000001c3 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:57:21, Info CSI 000001c4 [sR] Beginning Verify and Repair transaction 2012-03-29 18:57:32, Info CSI 000001c6 [sR] Verify complete 2012-03-29 18:57:33, Info CSI 000001c7 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:57:33, Info CSI 000001c8 [sR] Beginning Verify and Repair transaction 2012-03-29 18:57:55, Info CSI 000001ca [sR] Verify complete 2012-03-29 18:57:55, Info CSI 000001cb [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:57:55, Info CSI 000001cc [sR] Beginning Verify and Repair transaction 2012-03-29 18:58:12, Info CSI 000001cf [sR] Verify complete 2012-03-29 18:58:13, Info CSI 000001d0 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:58:13, Info CSI 000001d1 [sR] Beginning Verify and Repair transaction 2012-03-29 18:58:23, Info CSI 000001d3 [sR] Verify complete 2012-03-29 18:58:23, Info CSI 000001d4 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:58:23, Info CSI 000001d5 [sR] Beginning Verify and Repair transaction 2012-03-29 18:58:28, Info CSI 000001d7 [sR] Verify complete 2012-03-29 18:58:29, Info CSI 000001d8 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:58:29, Info CSI 000001d9 [sR] Beginning Verify and Repair transaction 2012-03-29 18:58:41, Info CSI 000001db [sR] Verify complete 2012-03-29 18:58:42, Info CSI 000001dc [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:58:42, Info CSI 000001dd [sR] Beginning Verify and Repair transaction 2012-03-29 18:59:06, Info CSI 000001e2 [sR] Verify complete 2012-03-29 18:59:07, Info CSI 000001e3 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:59:07, Info CSI 000001e4 [sR] Beginning Verify and Repair transaction 2012-03-29 18:59:24, Info CSI 000001e9 [sR] Verify complete 2012-03-29 18:59:25, Info CSI 000001ea [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:59:25, Info CSI 000001eb [sR] Beginning Verify and Repair transaction 2012-03-29 18:59:39, Info CSI 000001ef [sR] Verify complete 2012-03-29 18:59:39, Info CSI 000001f0 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:59:39, Info CSI 000001f1 [sR] Beginning Verify and Repair transaction 2012-03-29 18:59:57, Info CSI 000001fb [sR] Verify complete 2012-03-29 18:59:58, Info CSI 000001fc [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 18:59:58, Info CSI 000001fd [sR] Beginning Verify and Repair transaction 2012-03-29 19:00:11, Info CSI 00000202 [sR] Verify complete 2012-03-29 19:00:11, Info CSI 00000203 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:00:11, Info CSI 00000204 [sR] Beginning Verify and Repair transaction 2012-03-29 19:00:23, Info CSI 00000206 [sR] Verify complete 2012-03-29 19:00:23, Info CSI 00000207 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:00:23, Info CSI 00000208 [sR] Beginning Verify and Repair transaction 2012-03-29 19:00:34, Info CSI 0000020c [sR] Verify complete 2012-03-29 19:00:35, Info CSI 0000020d [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:00:35, Info CSI 0000020e [sR] Beginning Verify and Repair transaction 2012-03-29 19:00:47, Info CSI 00000223 [sR] Verify complete 2012-03-29 19:00:47, Info CSI 00000224 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:00:47, Info CSI 00000225 [sR] Beginning Verify and Repair transaction 2012-03-29 19:00:59, Info CSI 00000237 [sR] Verify complete 2012-03-29 19:00:59, Info CSI 00000238 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:00:59, Info CSI 00000239 [sR] Beginning Verify and Repair transaction 2012-03-29 19:01:11, Info CSI 0000023b [sR] Verify complete 2012-03-29 19:01:11, Info CSI 0000023c [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:01:11, Info CSI 0000023d [sR] Beginning Verify and Repair transaction 2012-03-29 19:01:25, Info CSI 0000023f [sR] Verify complete 2012-03-29 19:01:25, Info CSI 00000240 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:01:25, Info CSI 00000241 [sR] Beginning Verify and Repair transaction 2012-03-29 19:01:36, Info CSI 0000024f [sR] Verify complete 2012-03-29 19:01:37, Info CSI 00000250 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:01:37, Info CSI 00000251 [sR] Beginning Verify and Repair transaction 2012-03-29 19:01:50, Info CSI 00000253 [sR] Verify complete 2012-03-29 19:01:50, Info CSI 00000254 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:01:50, Info CSI 00000255 [sR] Beginning Verify and Repair transaction 2012-03-29 19:02:01, Info CSI 00000263 [sR] Verify complete 2012-03-29 19:02:03, Info CSI 00000264 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:02:03, Info CSI 00000265 [sR] Beginning Verify and Repair transaction 2012-03-29 19:02:08, Info CSI 00000267 [sR] Verify complete 2012-03-29 19:02:09, Info CSI 00000268 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:02:09, Info CSI 00000269 [sR] Beginning Verify and Repair transaction 2012-03-29 19:02:16, Info CSI 0000026b [sR] Verify complete 2012-03-29 19:02:17, Info CSI 0000026c [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:02:17, Info CSI 0000026d [sR] Beginning Verify and Repair transaction 2012-03-29 19:02:26, Info CSI 00000270 [sR] Verify complete 2012-03-29 19:02:26, Info CSI 00000271 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:02:26, Info CSI 00000272 [sR] Beginning Verify and Repair transaction 2012-03-29 19:02:33, Info CSI 00000274 [sR] Verify complete 2012-03-29 19:02:33, Info CSI 00000275 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:02:33, Info CSI 00000276 [sR] Beginning Verify and Repair transaction 2012-03-29 19:02:43, Info CSI 00000278 [sR] Verify complete 2012-03-29 19:02:43, Info CSI 00000279 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:02:43, Info CSI 0000027a [sR] Beginning Verify and Repair transaction 2012-03-29 19:02:54, Info CSI 0000027c [sR] Verify complete 2012-03-29 19:02:55, Info CSI 0000027d [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:02:55, Info CSI 0000027e [sR] Beginning Verify and Repair transaction 2012-03-29 19:03:05, Info CSI 00000280 [sR] Verify complete 2012-03-29 19:03:05, Info CSI 00000281 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:03:05, Info CSI 00000282 [sR] Beginning Verify and Repair transaction 2012-03-29 19:03:20, Info CSI 0000029c [sR] Verify complete 2012-03-29 19:03:20, Info CSI 0000029d [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:03:20, Info CSI 0000029e [sR] Beginning Verify and Repair transaction 2012-03-29 19:03:47, Info CSI 000002a0 [sR] Verify complete 2012-03-29 19:03:47, Info CSI 000002a1 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:03:47, Info CSI 000002a2 [sR] Beginning Verify and Repair transaction 2012-03-29 19:04:01, Info CSI 000002a4 [sR] Verify complete 2012-03-29 19:04:01, Info CSI 000002a5 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:04:01, Info CSI 000002a6 [sR] Beginning Verify and Repair transaction 2012-03-29 19:04:12, Info CSI 000002a8 [sR] Verify complete 2012-03-29 19:04:13, Info CSI 000002a9 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:04:13, Info CSI 000002aa [sR] Beginning Verify and Repair transaction 2012-03-29 19:04:20, Info CSI 000002ae [sR] Verify complete 2012-03-29 19:04:20, Info CSI 000002af [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:04:20, Info CSI 000002b0 [sR] Beginning Verify and Repair transaction 2012-03-29 19:04:31, Info CSI 000002b2 [sR] Verify complete 2012-03-29 19:04:31, Info CSI 000002b3 [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:04:31, Info CSI 000002b4 [sR] Beginning Verify and Repair transaction 2012-03-29 19:05:04, Info CSI 000002b6 [sR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:18{9}]"slwga.dll" from store 2012-03-29 19:05:05, Info CSI 000002b7 [sR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:18{9}]"slmgr.vbs" from store 2012-03-29 19:05:05, Info CSI 000002b9 [sR] Verify complete 2012-03-29 19:05:05, Info CSI 000002ba [sR] Verifying 100 (0x0000000000000064) components 2012-03-29 19:05:05, Info CSI 000002bb [sR] Beginning Verify and Repair transaction zaraz dam skan z otl -
Keylogger w bibliotece rjlb.dll
majki2222 odpowiedział(a) na majki2222 temat w Dział pomocy doraźnej
Trzeba jeszcze chwile poczekać , ponieważ pomyliłem komendy i dałem 1 Mój błąd 1 raz to robie więc proszę o cierpliwość , w dodatku jestem zwykłym użytkownikiem więc nie za bardzo się znam na tych programach Z góry przepraszam i jeszcze raz proszę o cierpliwość ... i Dziękuje ci za odpowiedź "picasso" Tutaj jest link do tego co się pokazało: http://imageshack.us/photo/my-images/42/cmdj.jpg/ -
Jeżeli złe miejsce to przepraszam i prosze o przeniesienie. Jakieś 2 dni temu nie wiem skąd się wzioł u mnie na kompie keylogger, być może jest to wina osób 3 które siedziały u mnie na lapku (Niżej zamieszcze skan z combofixa Wiem ze keylogger ukrywa się pod biblioteką rjlb.dll skanowałem programami takimi jak kasperky , usunął on ta biblioteke jednak wtedy nie miałem dostępu do róznych programów np. winamp, google chrome itp. używałem też programu Hitman Pro: lecz też nie pomógł bo łapiąc w kwarantanne nie mogłem także używać wyżej wymienionych programów. Recovery nie moge uzyć bo mam zapisaną wersje z keylogerem . Proszę o pomoc, a za wszystkie popełnione błędy przepraszam , to mój 1 temat Skan Combofixa: ComboFix 12-03-29.02 - Majki 2012-03-29 16:39:18.1.2 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1045.18.3069.1601 [GMT 2:00] Running from: c:\users\Majki\Downloads\ComboFix.exe AV: ESET Smart Security 5.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1} FW: Zapora osobista *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA} SP: ESET Smart Security 5.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Resident AV is active . . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files\Uninstall.exe c:\windows\7Loader.TAG . . ((((((((((((((((((((((((( Files Created from 2012-02-28 to 2012-03-29 ))))))))))))))))))))))))))))))) . . 2012-03-29 14:48 . 2012-03-29 14:48 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp 2012-03-29 14:48 . 2012-03-29 14:48 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-03-29 13:27 . 2012-03-29 13:27 -------- d-----w- c:\program files\ESET 2012-03-29 12:49 . 2012-03-29 12:49 5632 ----a-w- c:\windows\SysWow64\rjlb.dll 2012-03-29 12:23 . 2012-03-29 12:23 -------- d-----w- c:\program files\HitmanPro 2012-03-29 11:53 . 2012-03-29 12:40 -------- d-----w- c:\programdata\HitmanPro 2012-03-29 11:53 . 2012-03-29 11:53 -------- d-----w- c:\programdata\Hitman Pro 2012-03-29 11:11 . 2012-03-29 12:24 -------- d-----w- c:\program files (x86)\PC Tools 2012-03-29 11:05 . 2012-03-29 12:24 -------- d-----w- c:\program files (x86)\Common Files\PC Tools 2012-03-29 11:05 . 2012-02-24 08:36 230952 ----a-w- c:\windows\system32\drivers\PCTSD64.sys 2012-03-29 11:04 . 2012-03-29 12:22 -------- d-----w- c:\programdata\PC Tools 2012-03-29 11:04 . 2012-03-29 11:04 -------- d-----w- c:\users\Majki\AppData\Roaming\TestApp 2012-03-29 10:55 . 2012-03-20 01:51 8669240 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8D67F47A-CFDF-4F56-93AF-AA30979F8202}\mpengine.dll 2012-03-29 10:12 . 2012-03-29 10:12 -------- d-----w- C:\System Recovery Files 2012-03-29 07:42 . 2012-03-29 10:45 -------- d-----w- c:\programdata\Kaspersky Lab Setup Files 2012-03-26 06:07 . 2012-03-29 10:45 -------- d-----w- c:\program files (x86)\Tibian 2012-03-24 16:16 . 2012-03-29 10:45 -------- d-----w- c:\users\Majki\AppData\Roaming\DBH 2012-03-23 19:01 . 2012-03-29 10:45 -------- d-----w- c:\users\Majki\AppData\Roaming\Tibia 2012-03-23 19:01 . 2012-03-29 12:50 -------- d-----w- C:\Tibia 2012-03-22 08:01 . 2012-03-22 08:01 -------- d-----w- c:\users\Majki\AppData\Roaming\Malwarebytes 2012-03-22 08:01 . 2012-03-22 08:01 -------- d-----w- c:\programdata\Malwarebytes 2012-03-15 14:30 . 2011-11-19 15:20 5559152 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-03-15 14:30 . 2011-11-19 14:50 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe 2012-03-15 14:29 . 2011-11-19 14:50 3913584 ----a-w- c:\windows\SysWow64\ntoskrnl.exe 2012-03-15 08:48 . 2012-02-03 04:34 3145728 ----a-w- c:\windows\system32\win32k.sys 2012-03-15 08:48 . 2012-02-10 06:36 1544192 ----a-w- c:\windows\system32\DWrite.dll 2012-03-15 08:48 . 2012-02-10 05:38 1077248 ----a-w- c:\windows\SysWow64\DWrite.dll 2012-03-15 08:48 . 2012-01-25 06:38 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll 2012-03-15 08:48 . 2012-01-25 06:33 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe 2012-03-15 08:48 . 2012-01-25 06:38 77312 ----a-w- c:\windows\system32\rdpwsx.dll 2012-03-15 08:46 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll 2012-03-15 08:46 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll 2012-03-15 08:46 . 2012-02-17 04:58 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys 2012-03-15 08:46 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys 2012-03-09 12:05 . 2012-03-09 12:05 -------- d-----w- c:\program files (x86)\Remere's Map Editor 2012-03-02 13:36 . 2012-03-02 13:36 -------- d-----w- c:\program files\CCleaner 2012-03-01 14:36 . 2012-03-13 09:32 -------- d-----w- c:\users\Majki\AppData\Local\ElevatedDiagnostics 2012-03-01 08:03 . 2012-03-01 08:03 -------- d-----w- c:\program files (x86)\v9Soft 2012-02-28 19:56 . 2012-02-28 19:56 -------- d-----w- c:\program files\Tibias 2012-02-28 19:45 . 2012-03-09 12:05 -------- d-----w- c:\users\Majki\AppData\Roaming\Remere's Map Editor . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-03-07 00:15 . 2012-02-17 13:53 258520 ----a-w- c:\windows\system32\aswBoot.exe 2012-02-28 19:35 . 2011-07-03 07:29 207360 ----a-w- c:\windows\SysWow64\ws2_32.dll 2012-02-25 20:38 . 2011-07-27 07:58 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-02-23 07:18 . 2011-05-22 07:29 279656 ------w- c:\windows\system32\MpSigStub.exe 2012-02-10 04:13 . 2012-02-21 15:30 68928 ----a-w- c:\windows\system32\OpenCL.dll 2012-02-10 04:13 . 2012-02-21 15:30 61248 ----a-w- c:\windows\SysWow64\OpenCL.dll 2012-02-10 04:13 . 2012-02-21 15:30 7713088 ----a-w- c:\windows\SysWow64\nvwgf2um.dll 2012-02-10 04:13 . 2012-02-21 15:30 25541952 ----a-w- c:\windows\system32\nvoglv64.dll 2012-02-10 04:13 . 2012-02-21 15:30 19443520 ----a-w- c:\windows\SysWow64\nvoglv32.dll 2012-02-10 04:13 . 2012-02-21 15:30 13624128 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys 2012-02-10 04:13 . 2012-02-21 15:30 8008000 ----a-w- c:\windows\system32\nvcuda.dll 2012-02-10 04:13 . 2012-02-21 15:30 5892928 ----a-w- c:\windows\SysWow64\nvcuda.dll 2012-02-10 04:13 . 2012-02-21 15:30 2872640 ----a-w- c:\windows\system32\nvcuvenc.dll 2012-02-10 04:13 . 2012-02-21 15:30 2672448 ----a-w- c:\windows\system32\nvcuvid.dll 2012-02-10 04:13 . 2012-02-21 15:30 25222976 ----a-w- c:\windows\system32\nvcompiler.dll 2012-02-10 04:13 . 2012-02-21 15:30 2517312 ----a-w- c:\windows\SysWow64\nvcuvid.dll 2012-02-10 04:13 . 2012-02-21 15:30 2437440 ----a-w- c:\windows\SysWow64\nvcuvenc.dll 2012-02-10 04:13 . 2012-02-21 15:30 2301248 ----a-w- c:\windows\SysWow64\nvapi.dll 2012-02-10 04:13 . 2012-02-21 15:30 17642816 ----a-w- c:\windows\system32\nvd3dumx.dll 2012-02-10 04:13 . 2012-02-21 15:30 17543488 ----a-w- c:\windows\SysWow64\nvcompiler.dll 2012-02-10 04:13 . 2012-02-21 15:30 15009600 ----a-w- c:\windows\SysWow64\nvd3dum.dll 2012-02-10 04:13 . 2011-11-12 18:02 2660160 ----a-w- c:\windows\system32\nvapi64.dll 2012-02-10 04:13 . 2011-11-12 18:02 1737536 ----a-w- c:\windows\system32\nvdispco64.dll 2012-02-10 04:13 . 2011-11-12 18:02 1466176 ----a-w- c:\windows\system32\nvgenco64.dll 2012-02-10 04:13 . 2010-10-17 00:55 9717568 ----a-w- c:\windows\system32\nvwgf2umx.dll 2012-02-10 03:14 . 2011-11-12 18:03 6074176 ----a-w- c:\windows\system32\nvcpl.dll 2012-02-10 03:14 . 2011-11-12 18:03 3089728 ----a-w- c:\windows\system32\nvsvc64.dll 2012-02-10 03:07 . 2011-11-12 18:03 2561856 ----a-w- c:\windows\system32\nvsvcr.dll 2012-02-10 03:07 . 2011-11-12 18:03 889664 ----a-w- c:\windows\system32\nvvsvc.exe 2012-02-10 03:07 . 2011-11-12 18:03 63296 ----a-w- c:\windows\system32\nvshext.dll 2012-02-10 03:07 . 2011-11-12 18:03 118080 ----a-w- c:\windows\system32\nvmctray.dll 2012-01-17 12:46 . 2012-02-21 15:30 31040 ----a-w- c:\windows\system32\nvhdap64.dll 2012-01-17 12:45 . 2012-02-21 15:30 72512 ----a-w- c:\windows\system32\nvapo64v.dll 2012-01-17 12:45 . 2012-02-21 15:30 188224 ----a-w- c:\windows\system32\drivers\nvhda64v.sys 2012-01-17 12:45 . 2012-02-21 15:30 1451840 ----a-w- c:\windows\system32\nvhdagenco6420103.dll 2012-01-10 09:07 . 2012-01-10 09:07 21712 ----a-w- c:\windows\SysWow64\drivers\DrvAgent64.SYS 2012-01-09 21:04 . 2012-01-09 21:05 750488 ----a-w- c:\windows\system32\npdeployJava1.dll 2012-01-09 21:04 . 2011-05-31 13:44 660368 ----a-w- c:\windows\system32\deployJava1.dll 2012-01-09 14:10 . 2012-01-03 16:25 165232 ---ha-w- c:\users\Majki\AppData\Roaming\Microsoft\Virtual PC\VPCKeyboard.dll 2012-01-05 17:54 . 2012-01-05 17:54 294232 ----a-w- c:\windows\system32\drivers\VMM.sys 2012-01-04 10:44 . 2012-02-16 14:07 509952 ----a-w- c:\windows\system32\ntshrui.dll 2012-01-04 08:58 . 2012-02-16 14:07 442880 ----a-w- c:\windows\SysWow64\ntshrui.dll 2011-07-01 19:28 . 2011-07-06 13:56 697856 ----a-w- c:\program files\RPGVXENU.dll 2008-12-19 12:19 . 2011-07-06 13:56 1467680 ----a-w- c:\program files\PSIKey_2.dll 2008-02-24 22:00 . 2011-07-06 13:56 1070080 ----a-w- c:\program files\RPGVX.exe 2007-11-27 22:00 . 2011-07-06 13:56 407552 ----a-w- c:\program files\SciLexer.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "TkBellExe"="c:\program files (x86)\Real\RealPlayer\update\realsched.exe" [2011-06-30 273544] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-01-03 37296] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 gupdate;Usluga Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-25 136176] R3 DrvAgent64;DrvAgent64;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS [2012-01-10 21712] R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x] R3 gupdatem;Usluga Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-25 136176] R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x] R3 WatAdminSvc;Usluga Technologie aktywacji systemu Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x] R3 X6va005;X6va005;c:\users\Majki\AppData\Local\Temp\00575F1.tmp [x] S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [x] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x] S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x] S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe [2009-03-02 89600] S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x] S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [2011-09-22 974944] S2 HitmanProScheduler;HitmanPro Scheduler;c:\program files\HitmanPro\hmpsched.exe [2012-03-29 96072] S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-02-10 2348352] S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x] . . Contents of the 'Scheduled Tasks' folder . 2012-03-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-25 20:23] . 2012-03-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-25 20:23] . . --------- x86-64 ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-03-23 487424] "egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2011-09-22 4035152] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "LoadAppInit_DLLs"=0x0 . ------- Supplementary Scan ------- . uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm TCP: DhcpNameServer = 192.168.1.1 . - - - - ORPHANS REMOVED - - - - . HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe AddRemove-RPG Maker VX - c:\program files\Uninstall.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va005] "ImagePath"="\??\c:\users\Majki\AppData\Local\Temp\00575F1.tmp" . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] Czekam na pomoc. Dziękuje