p2esock.1022.dll

[Gość: blondynka]

ktoś z rodziny grzebał w kompie, instalował jakieś packi, coś usuwał, wgrał
mks i w efekcie po uruchomieniu Windowsów pokazuje sie komunikat:

Wystapił błąd podczas ładowania p2esock.1022.dll
Nie można odnaleźć określonego modułu.

Co to jest ten moduł, czym mi grozi jego brak i skąd go doinstalować?

PIECYKU !!!!!!!!!!!!!!!!!!!

[Gość: j.w.]

a może to potrafisz wyjaśnić, bardzo proszę :)

:-]

[Gość: piecyk gazowy]

Podejrzewam, że to jakiś śmieć. Wklej loga z HijackThis. Tutaj jest co i jak:
forum.gazeta.pl/forum/72,2.html?f=37&w=16988164&a=16992118

[Gość: j.w.]

Dzieki Piecyku !!

Logfile of HijackThis v1.98.2
Scan saved at 18:43:02, on 2004-10-24
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\MKS\Bin\mks_menu.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\MKS\Bin\netsvst.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\MKS\Bin\NetMonSv.exe
C:\Program Files\MKS\Bin\mksmonsv.exe
C:\Program Files\MKS\Bin\mks_scan.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Marek Mazur\Ustawienia lokalne\Temporary Internet
Files\Content.IE5\09M70XE3\HijackThis[1].exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
www.yahoo.com/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
www.plusnet.pl/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
search.yahoo.com/search?p=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O1 - Hosts: 217.96.35.130 auto.search.msn.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB} -
C:\WINDOWS\mslagent\4b_1,0,1,1_mslagent.dll (file missing)
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control
Panel\atiptaxx.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet
Security\pccguide.exe"
O4 - HKLM\..\Run: [PCClient.exe] "C:\Program Files\Trend Micro\Internet
Security\PCClient.exe"
O4 - HKLM\..\Run: [TM Outbreak Agent] "C:\Program Files\Trend Micro\Internet
Security\TMOAgent.exe" /run
O4 - HKLM\..\Run: [System32] "user32.exe" -user
O4 - HKLM\..\Run: [AntyVirK] c:\windows\antyvirk.exe ukrt
O4 - HKLM\..\Run: [MKS_MENU] C:\Program Files\MKS\Bin\mks_menu.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Instant Access] rundll32.exe p2esocks_1022.dll,InstantAccess
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [Yahoo! Pager] C:\PROGRA~1\Yahoo!\MESSEN~1\ypager.exe -quiet
O4 - HKCU\..\Run: [NetMonSVStat] C:\Program Files\MKS\Bin\netsvst.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Date Manager.lnk = C:\Program Files\Date
Manager\DateManager.exe
O4 - Global Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe
O8 - Extra context menu item: E&ksport do programu Microsoft Excel -
res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-
00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) -
us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst0401.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) -
a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {CF5F84EB-D3FC-4F98-BE3B-F5B56B962CED} -
akamai.downloadv3.com/binaries/DialHTML/EGCOMLIB_1031_XP.cab
O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) -
skaner.mks.com.pl/SkanerOnline.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) -
download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/2,0,0,4388/mcfscan.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) -
chat.msn.com/bin/msnchat45.cab

[Gość: piecyk gazowy]

TRZY ANTYWIRUSY??? Może być tylko jeden! Koniecznie odinstaluj dwa!

W sumie nie ma dużo śmiecia. Do wywalenia (zaznacz te pozycje i wciśnij Fix
Checked):

> O1 - Hosts: 217.96.35.130 auto.search.msn.com

> O2 - BHO: (no name) - {ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB} -
> C:\WINDOWS\mslagent\4b_1,0,1,1_mslagent.dll (file missing)

> O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
> Files\Real\Update_OB\realsched.exe" -osboot

> O4 - HKLM\..\Run: [System32] "user32.exe" -user

> O4 - HKCU\..\Run: [Instant Access] rundll32.exe
p2esocks_1022.dll,InstantAccess

> O4 - Global Startup: Date Manager.lnk = C:\Program Files\Date
> Manager\DateManager.exe
> O4 - Global Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe

> O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) -
> us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst0401.cab
> O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) -
>
a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan5
3.cab

> O16 - DPF: {CF5F84EB-D3FC-4F98-BE3B-F5B56B962CED} -
> akamai.downloadv3.com/binaries/DialHTML/EGCOMLIB_1031_XP.cab

Potem zrestartuj system. Możesz też później przeskanować system np. Ad-aware'em.

PIECYKU :))))

[Gość: j.w]

PIECYKU :)))))

[Gość: jeszcze raz ja]

Dzieki, tamto pomogło idealnie :)))))

Może byś rzucił jeszcze okiem na ten wydruk, co tu trzeba wyrzucić, żeby mi nie
zwalniał komputer ???

Logfile of HijackThis v1.98.2
Scan saved at 19:31:58, on 2004-10-24
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\MKS\Bin\mks_menu.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\MKS\Bin\NetMonSv.exe
C:\Program Files\MKS\Bin\mksmonsv.exe
C:\Program Files\MKS\Bin\mks_scan.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\kasia-s\Ustawienia lokalne\Temporary Internet
Files\Content.IE5\S9630HUN\HijackThis[1].exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
google.icq.com/search/search_frame.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
forum.gazeta.pl/forum/71,1.html?f=37
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
global.acer.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
www.gazeta.pl
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
www.hotbar.com/dyn/hotbar/3.0/sb_searchPageHome.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
C:\Program Files\Adobe\Acrobat 5.0 CE\Acrobat\ActiveX\AcroIEHelper.ocx
O2 - BHO: Implements Jammer - {09F0F280-FB9A-481B-B69A-CB00DC44D027} -
C:\PROGRA~1\ADVANC~1\POPUPJ~1.DLL
O2 - BHO: (no name) - {65A46659-B665-7B91-8752-6C557CA52610} -
C:\WINDOWS\System32\jexbhtqx.dll (file missing)
O2 - BHO: WebBar Class - {77712A64-F30B-47C8-A363-CDA1CEC7DC1B} - C:\PROGRA~1
\ADVANC~1\ADVANC~1.DLL
O3 - Toolbar: &LiveCam ToolBar - {EAD0B31D-9DAE-42CE-9821-EF9794AEC515} -
C:\WINDOWS\System32\cglbar.dll
O4 - HKLM\..\Run: [MKS_MENU] C:\Program Files\MKS\Bin\mks_menu.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKCU\..\Run: [Iire] C:\WINDOWS\System32\ibi.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\PowerGG.exe"
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program
Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: Add to White List - C:\PROGRAM FILES\ADVANCED
SEARCHBAR\addtolist.js
O8 - Extra context menu item: Delete from White List - C:\PROGRAM
FILES\ADVANCED SEARCHBAR\delfromlist.js
O8 - Extra context menu item: E&ksport do programu Microsoft Excel -
res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ 4.1 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} -
C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} -
C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} -
C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-
0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-
00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: Arcsoft Web Uploader -
www.hpphoto.com/downloads/ReadFileApplet.cab
O16 - DPF: {F08555B0-9CC3-11D2-AA8E-000000000000} -
www.pornmail.com/cglbar.cab

[Gość: piecyk gazowy]

Do wyrzucenia:

> R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
> www.hotbar.com/dyn/hotbar/3.0/sb_searchPageHome.htm

> O2 - BHO: Implements Jammer - {09F0F280-FB9A-481B-B69A-CB00DC44D027} -
> C:\PROGRA~1\ADVANC~1\POPUPJ~1.DLL
> O2 - BHO: (no name) - {65A46659-B665-7B91-8752-6C557CA52610} -
> C:\WINDOWS\System32\jexbhtqx.dll (file missing)
> O2 - BHO: WebBar Class - {77712A64-F30B-47C8-A363-CDA1CEC7DC1B} - C:\PROGRA~1
> \ADVANC~1\ADVANC~1.DLL
> O3 - Toolbar: &LiveCam ToolBar - {EAD0B31D-9DAE-42CE-9821-EF9794AEC515} -
> C:\WINDOWS\System32\cglbar.dll

> O4 - HKCU\..\Run: [Iire] C:\WINDOWS\System32\ibi.exe

> O8 - Extra context menu item: Add to White List - C:\PROGRAM FILES\ADVANCED
> SEARCHBAR\addtolist.js
> O8 - Extra context menu item: Delete from White List - C:\PROGRAM
> FILES\ADVANCED SEARCHBAR\delfromlist.js

> O16 - DPF: {F08555B0-9CC3-11D2-AA8E-000000000000} -
> www.pornmail.com/cglbar.cab

[Gość: Dzięki]

i wspaniały, że tak pro publiko bono tu działasz. Pomnik Ci się należy.
DZIĘKUJĘ!!!!!