• (gość portalu) Zaloguj się
  • Na podany adres zostanie wysłany e-mail potwierdzający a następnie dalsze powiadomienia

  • Wysłany przez Ciebie post może pojawić się z opóźnieniem do kilku minut.

Odpowiadasz na:

Gość portalu: masrerman  napisał(a): 

> Logfile of HijackThis v1.97.7
> Scan saved at 21:12:16, on 04-08-20
> Platform: Windows 98 SE (Win9x 4.10.2222A)
> MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
> 
> Running processes:
> C:\WINDOWS\SYSTEM\KERNEL32.DLL
> C:\WINDOWS\SYSTEM\MSGSRV32.EXE
> C:\WINDOWS\SYSTEM\MPREXE.EXE
> C:\WINDOWS\SYSTEM\mmtask.tsk
> C:\WINDOWS\EXPLORER.EXE
> C:\WINDOWS\SYSTEM\RPCSS.EXE
> C:\WINDOWS\SYSTEM\INTERNAT.EXE
> C:\WINDOWS\SYSTEM\DDHELP.EXE
> D:\NOWY FOLDER\HIJACKTHIS.EXE
> 
> R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blan
> k
> R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
> O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1
> \SPYBOT~1\SDHELPER.DLL
> O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - 
> C:\WINDOWS\SYSTEM\MSDXM.OCX
> O4 - HKLM\..\Run: [internat.exe] internat.exe
> O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE 
> C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
> O4 - HKLM\..\Run: [Zasobnik systemowy] SysTray.Exe
> O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
> O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
> O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe 
> powrprof.dll,LoadCurrentPwrScheme
> O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
> O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
> O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
> O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
> O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe 
> powrprof.dll,LoadCurrentPwrScheme
> O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft 
> Office\Office\OSA9.EXE
> O9 - Extra button: Related (HKLM)
> O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
> O9 - Extra button: SideFind (HKLM)
> O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - 
> ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralInitialSetup1.0.0.8.cab
> O16 - DPF: {E9790C6C-DCAA-4E4F-8048-FFEC3B62DFED} - 
> engine.vogclub.com/activex/vogweb29.cab
> O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - 
> us.dl1.yimg.com/download.companion.yahoo.com/dl/toolbar/yiebio5_3_18_0.cab
> O16 - DPF: {02C20140-76F8-4763-83D5-B660107B7A90} (Moniker32 Class) - 
> 63.217.29.115/cax.cab
> O16 - DPF: {10003000-1000-0000-1000-000000000000} - ms-
> its:mhtml:file://c:\MAIN.MHT!http://213.159.117.236/buka.chm::/x.exe
> O16 - DPF: {1C955F3B-5B32-4393-A05D-24B4970CD2A1} (Video Class) - 
> spystream.babenet.com/cabs/videox.cab
> O16 - DPF: {037B3D58-D14A-4C41-BDFD-BD779B0B97BA} (vxiewer control) - 
> www.thepaymentcentre.com/build/vxiewer.cab
> O16 - DPF: {E2F2B9D0-96B9-4B25-B90C-636ECB207D18} - 
> www.whenusearch.com/WUInstSEWC.cab
> O16 - DPF: {386A771C-E96A-421F-8BA7-32F1B706892F} (Installer Class) - 
> www.xxxtoolbar.com/ist/softwares/v4.0/0006_regular.cab
> O16 - DPF: {BC207F7D-3E63-4ACA-99B5-FB5F8428200C} - 
> bar.baidu.com/update/IESearch.cab
> O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - 
> download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
> O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) - 
> bezpieczenstwo.onet.pl/skaner/SkanerOnline.cab
> O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - 
> v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?38197.7293634259
> O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - 
> www.apple.com/qtactivex/qtplugin.cab
> O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - 
> download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
> O16 - DPF: {8626DFA9-2BAC-4BDA-8663-8DAA0F942C0D} - 
> megapanel.gem.pl/temp/netp/7732/6388/5217/4500/5_7732638852174500.ocx
> O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) 
> -
>  www.pandasoftware.es/activescan/as/asinst.cab
> O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) -
>  
> download.macromedia.com/pub/shockwave/cabs/director/sw.cab
> O16 - DPF: Yahoo! Checkers - 
> download.games.yahoo.com/games/clients/y/kt3_x.cab
> O16 - DPF: {5F874A6F-8B34-433D-BA4B-47AC91C0567F} (MailCfg Control) - 
> poczta.wp.pl/autoryzacja/mailcfg2.ocx
> O16 - DPF: {631FF594-EC25-4CFF-B869-402DF294E1C5} (Formant instalacji programów
>  
> Onet.pl) - slimak.onet.pl/_m/konekt/OnetInstalator010.ocx
> 
> hehe oby tera było dobrze ups wirus dalej siediz i nie moge go wywalic;/

Nie pamiętasz hasła

lub ?

 

Nie masz jeszcze konta? Zarejestruj się