Forum: Combofix

Combofix

Witam, mam problem z Combofixem, a raczej z komunikatem wyskakującym podczas uruchamiania tego programu.
Wyłączyłem wszystkie okna, wyłączyłem również ESET'a lecz pojawia mi się taki komunikat. O ile sobie przypominam to nie posiadam Avasta. Miałem go wcześniej, lecz usunąłem bo nie wiedziałem, że będzie się "żarł" z Esetem (byłem młody, głupi ;])
Być może są to jakieś pozostałości po Avascie. W każdym bądź razie jak to usunąć?

Z góry dzięki za odpowiedź!

Ok, wyskakuje komunikat po angielsku by odinstalować w trybie awaryjnym. Jak wszystko zrobię, to napiszę czy działa ;]

BTW.
Znasz jeszcze jakieś ciekawe stronki z tego typu programami? :)

LOG:

ComboFix 11-10-10.01 - Jakub 2011-10-10 18:40:20.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1250.48.1045.18.2046.1288 [GMT 2:00]
Uruchomiony z: c:\documents and settings\Jakub\Pulpit\ComboFix.exe
AV: ESET Smart Security 3.0 *Disabled/Updated* ‹E5E70D32-0101-4F12-8FB0-D96ACA4F34C0›
FW: ESET Personal firewall *Enabled* ‹E5E70D32-0101-4340-86A3-A7B0F1C8FFE0›
.
.
((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Jakub\7z.dll
c:\documents and settings\Jakub\Dane aplikacji\PriceGong
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\1.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\a.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\b.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\c.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\d.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\e.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\f.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\g.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\h.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\i.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\J.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\k.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\l.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\m.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\mru.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\n.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\o.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\p.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\q.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\r.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\s.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\t.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\u.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\v.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\w.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\x.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\y.xml
c:\documents and settings\Jakub\Dane aplikacji\PriceGong\Data\z.xml
c:\documents and settings\Jakub\WINDOWS
c:\documents and settings\Jakub\YgoowCore.dll
c:\windows\ehome\medctrro.exe
c:\windows\IsUn0415.exe
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\system32\a.exe
c:\windows\system32\d3d9caps.dat
c:\windows\system32\ezGOSvc.dll
c:\windows\system32\setup.ini
c:\windows\system32\SYSTem~1.dll
c:\windows\system32\SystemHook.dll
.
.
((((((((((((((((((((((((((((((((((((((( Sterowniki/Usługi )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_EZGOSVC
-------\Legacy_VCS
-------\Service_ezGOSvc
-------\Service_Vcs
.
.
((((((((((((((((((((((((( Pliki utworzone od 2011-09-10 do 2011-10-10 )))))))))))))))))))))))))))))))
.
.
2011-10-10 16:47 . 2011-10-10 16:47 63115 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\USERTILE.JS
2011-10-10 16:47 . 2011-10-10 16:47 4599 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\UIRESOURCE.JS
2011-10-09 20:30 . 2011-10-09 20:30 388096 ----a-r- c:\documents and settings\Jakub\Dane aplikacji\Microsoft\Installer\‹45A66726-69BC-466B-A7A4-12FCBA4883D7›\HiJackThis.exe
2011-10-08 17:02 . 2011-10-08 17:03 -------- d-----w- c:\program files\CCleaner
2011-10-05 19:31 . 1999-09-20 03:38 212992 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\ILog.dll
2011-09-25 17:22 . 2011-09-25 17:22 -------- d-----w- c:\program files\Sony
2011-09-16 20:38 . 2009-01-25 21:36 679936 ----a-w- c:\windows\system32\D3DX81ab.dll
2011-09-16 20:38 . 2009-01-25 21:36 1970176 ----a-w- c:\windows\system32\d3dx9.dll
2011-09-15 20:49 . 2011-10-09 11:55 -------- d-----w- c:\documents and settings\Jakub\riotsGamesLogs
.
.
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-09 09:12 . 2004-08-03 21:43 602624 ----a-w- c:\windows\system32\crypt32.dll
2011-07-21 20:00 . 2009-08-18 09:30 564632 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Microsoft\IdentityCRL\production\wlidui.dll
2011-07-21 20:00 . 2009-08-18 09:24 18328 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-07-15 13:29 . 2009-04-13 17:23 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-10-01 11:03 . 2011-07-02 13:57 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"‹bf7380fa-e3b4-4db2-af3e-9d8783a45bfc›"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\‹bf7380fa-e3b4-4db2-af3e-9d8783a45bfc›]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\‹bf7380fa-e3b4-4db2-af3e-9d8783a45bfc›]
2010-12-09 11:51 3911776 ----a-w- c:\program files\uTorrentBar\tbuTor.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\‹DF925EF3-7A87-44E4-9CAF-8D7B280BF616›]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"‹bf7380fa-e3b4-4db2-af3e-9d8783a45bfc›"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\‹bf7380fa-e3b4-4db2-af3e-9d8783a45bfc›]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"‹BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC›"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\‹bf7380fa-e3b4-4db2-af3e-9d8783a45bfc›]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_‹79662E04-7C6C-4d9f-84C7-88D8A56B10AA›"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-01-15 147456]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-08-04 68856]
"ALLUpdate"="d:\program files\ALLPlayer\ALLUpdate.exe" [2011-08-16 1379840]
"SoftAuto.exe"="c:\program files\Creative\Software Update 3\SoftAuto.exe" [2008-05-28 401408]
"RocketDock"="d:\rocketdock\RocketDock.exe" [2007-09-02 495616]
"Sony Ericsson PC Companion"="c:\program files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" [2011-04-14 428544]
"jushed"="c:\documents and settings\All Users\jushed.exe" [2011-05-14 566784]
"Pando Media Booster"="c:\program files\Pando Networks\Media Booster\PMB.exe" [2011-07-24 3077528]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-04-12 16132608]
"JMB36X IDE Setup"="c:\windows\JM\JMInsIDE.exe" [2006-10-30 36864]
"36X Raid Configurer"="c:\windows\system32\JMRaidSetup.exe" [2007-02-06 1953792]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2007-12-21 1443072]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-12-10 49152]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2007-07-03 64000]
"WOOWATCH"="c:\progra~1\NEOSTR~1\Watch.exe" [2004-08-23 20480]
"WOOTASKBARICON"="c:\progra~1\NEOSTR~1\GestMaj.exe" [2004-10-14 32768]
"AdslTaskBar"="stmctrl.dll" [2006-06-02 151552]
"ORAHSSSessionManager"="c:\program files\Livebox\SessionManager\SessionManager.exe" [2008-06-10 107248]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"QuickTime Task"="d:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-05-25 13895272]
"NvMediaCenter"="NvMCTray.dll" [2011-05-25 111208]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2011-05-04 1632360]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"BabylonToolbar"="c:\program files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe" [2010-11-07 286720]
.
c:\documents and settings\All Users\Menu Start\Programy\Autostart\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2008-3-25 214360]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Gadu-Gadu\\gg.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"d:\\Games\\Assassin's Creed II\\AssassinsCreedIIGame.exe"=
"d:\\Games\\Assassin's Creed II\\AssassinsCreedII.exe"=
"d:\\Games\\Assassin's Creed II\\UPlayBrowser.exe"=
"d:\\Program Files\\Steam\\Steam.exe"=
"c:\\Documents and Settings\\Jakub\\Moje dokumenty\\Pobieranie\\BitTorrent-7.0.exe"=
"c:\\Program Files\\Logitech\\Vid HD\\Vid.exe"=
"d:\\Hot Pursuit\\Launcher.exe"=
"d:\\Assassin's Creed Brotherhood\\ACBSP.exe"=
"d:\\Assassin's Creed Brotherhood\\ACBMP.exe"=
"d:\\Assassin's Creed Brotherhood\\AssassinsCreedBrotherhood.exe"=
"d:\\Assassin's Creed Brotherhood\\UPlayBrowser.exe"=
"d:\\Games\\NHL 09\\nhl2009.exe"=
"d:\\Hot Pursuit\\NFS11.exe"=
"d:\\TrackMania Nations ESWC\\TmNationsESWC.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
"d:\\Splinter Cell Double Agent\\SCDA-Offline\\System\\SplinterCell4.exe"=
"d:\\Mass Effect\\Binaries\\MassEffect.exe"=
"d:\\Mass Effect\\MassEffectLauncher.exe"=
"c:\\Program Files\\Livebox\\Connectivity\\ConnectivityManager.exe"=
"d:\\Program Files\\Steam\\steamapps\\common\\call of duty black ops\\BlackOps.exe"=
"d:\\Program Files\\Steam\\steamapps\\common\\call of duty black ops\\BlackOpsMP.exe"=
"d:\\Program Files\\Steam\\steamapps\\common\\call of duty modern warfare 2\\iw4sp.exe"=
"d:\\Program Files\\Steam\\steamapps\\common\\call of duty modern warfare 2\\iw4mp.exe"=
"d:\\kozacy\\GSC Game World\\Kozacy II\\Data\\engine.exe"=
"d:\\MOH AA\\MOHAA.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"59118:TCP"= 59118:TCP:Pando Media Booster
"59118:UDP"= 59118:UDP:Pando Media Booster
.
R0 a347bus;a347bus;c:\windows\system32\drivers\a347bus.sys [2008-05-29 160640]
R0 a347scsi;a347scsi;c:\windows\system32\drivers\a347scsi.sys [2008-05-29 5248]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [2009-04-13 691696]
R2 ekrn;Eset Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [2007-12-21 468224]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-04-20 2214504]
R3 Stmatm;ATM/ADSL miniport;c:\windows\system32\drivers\stmatm.sys [2009-03-17 60255]
S2 gupdate;Usługa Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-02-09 135664]
S3 CTUPnPSv;Creative Centrale Media Server;c:\program files\Creative\Creative Centrale\CTUPnPSv.exe [2008-05-21 64000]
S3 gupdatem;Usługa Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-02-09 135664]
S3 PAC207;Webcam 1200;c:\windows\system32\drivers\PFC027.SYS [2008-07-09 611584]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\system32\drivers\s0016bus.sys [2010-12-01 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\system32\drivers\s0016mdfl.sys [2010-12-01 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\system32\drivers\s0016mdm.sys [2010-12-01 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s0016mgmt.sys [2010-12-01 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\system32\drivers\s0016nd5.sys [2010-12-01 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\system32\drivers\s0016obex.sys [2010-12-01 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\system32\drivers\s0016unic.sys [2010-12-01 115752]
S3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion;c:\program files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2010-12-01 150528]
S3 TaurusUsb;ADSL Modem USB Service;c:\windows\system32\drivers\torususb.sys [2009-03-17 684265]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Zawartość folderu 'Zaplanowane zadania'
.
2011-10-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-09 20:08]
.
2011-10-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-09 20:08]
.
2011-10-07 c:\windows\Tasks\Norton Security Scan for Jakub.job
- c:\program files\Norton Security Scan\Nss.exe [2008-09-19 19:20]
.
2011-10-10 c:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- c:\program files\Ask.com\UpdateTask.exe [2010-10-11 15:12]
.
.
------- Skan uzupełniający -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uStart Page =
mStart Page =
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Winamp Search - c:\documents and settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
IE: ‹ - c:\program files\Messenger\msmsgs.exe
TCP: DhcpNameServer = 192.168.1.1 0.0.0.0
FF - ProfilePath - c:\documents and settings\Jakub\Dane aplikacji\Mozilla\Firefox\Profiles\vr4z5lbg.default\
FF - prefs.js: browser.search.defaulturl - hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.pl/firefox
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?babsrc=toolbar2&q=
FF - prefs.js: network.proxy.type - 4
FF - user.js: browser.sessionstore.resume_from_crash - false
.
- - - - USUNIĘTO PUSTE WPISY - - - -
.
Toolbar-‹30F9B915-B755-4826-820B-08FBA6BD249D› - (no file)
WebBrowser-‹D4027C7F-154A-4066-A1AD-4243D8127440› - (no file)
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-10-10 18:48
Windows 5.1.2600 Dodatek Service Pack 3 NTFS
.
skanowanie ukrytych procesów ...
.
skanowanie ukrytych wpisów autostartu ...
.
skanowanie ukrytych plików ...
.
skanowanie pomyślnie ukończone
ukryte pliki: 0
.
**************************************************************************
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------
.
- - - - - - - >''explorer.ex''(532)
c:\windows\system32\WININET.dll
c:\program files\ESET\ESET Smart Security\eplgHooks.dll
d:\rocketdock\RocketDock.dll
c:\program files\Livebox\Launcher\Inactivity.Dll
c:\windows\system32\msi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\progra~1\ArcSoft\PHOTOI~1\share\pihook.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Pozostałe uruchomione procesy ------------------------
.
c:\windows\RTHDCPL.EXE
c:\program files\Creative\Shared Files\CTDevSrv.exe
c:\progra~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
c:\progra~1\NEOSTR~1\TaskBarIcon.exe
c:\windows\system32\rundll32.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\ArcSoft\Magic-i 3\uMgiSvr.exe
c:\windows\system32\nvsvc32.exe
c:\program files\Livebox\Launcher\Launcher.exe
c:\windows\system32\RunDLL32.exe
c:\program files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\Common Files\Ahead\Lib\NMIndexingService.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\program files\HP\Digital Imaging\bin\hpqSTE08.exe
c:\program files\HP\Digital Imaging\bin\hpqbam08.exe
.
**************************************************************************
.
Czas ukończenia: 2011-10-10 18:51:38 - komputer został uruchomiony ponownie
ComboFix-quarantined-files.txt 2011-10-10 16:51
.
Przed: 17 213 161 472 bajtów wolnych
Po: 30 300 901 376 bajtów wolnych
.
WindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptOut
.
Current=1 Default=1 Failed=0 LastKnownGood=4 Sets=1,2,3,4
- - End Of File - - 822A2A45726D2A47EB4509C653019BD2

upek ;]

Czyli po prostu wszystko muszę usunąć starym dobry sposobem wywalania do kosza? ;]