Dodaj do ulubionych

log z hijack co to jest

IP: 80.244.140.* 30.08.04, 20:16
co tu siedzi? wiadomo strona starowa sie podmienia
Logfile of HijackThis v1.98.0
Scan saved at 20:14:48, on 2004-08-30
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVPersonal\AVGUARD.EXE
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\iesw.exe
C:\WINDOWS\system32\sdkok.exe
C:\Program Files\Tlen.pl\tlen.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Documents and Settings\Właściciel\Pulpit\Nowy folder (2)\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {8F81986D-802E-D9AA-0FD3-B0937653C654} -
C:\WINDOWS\system32\d3zs.dll
O4 - HKLM\..\Run: [sdkok.exe] C:\WINDOWS\system32\sdkok.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone
Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\RunOnce: [iesw.exe] C:\WINDOWS\iesw.exe
O4 - HKCU\..\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [System Update4] c:\docume~1\wŁaŚci~1\daneap~1\winlogon.exe
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus
scanner) - security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility
Class) - security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer
Class) - www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} -
skaner.mks.com.pl/SkanerOnline.cab
Obserwuj wątek
    • Gość: what? Re: log z hijack co to jest IP: 80.244.140.* 30.08.04, 20:34
      jeszcze jedno wwpisy się zmieniają teraz jest
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
      res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
      res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
      res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
      res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
      res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
      R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
      R3 - Default URLSearchHook is missing
      O2 - BHO: (no name) - {8F81986D-802E-D9AA-0FD3-B0937653C654} -
      C:\WINDOWS\system32\d3zs.dll
      O4 - HKLM\..\Run: [sdkok.exe] C:\WINDOWS\system32\sdkok.exe
      O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
      O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone
      Labs\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\RunOnce: [iesw.exe] C:\WINDOWS\iesw.exe
      O4 - HKCU\..\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe
      O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
      O4 - HKCU\..\Run: [System Update4] c:\docume~1\wŁaŚci~1\daneap~1\winlogon.exe
      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) -
      security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class)
      - security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
      www.pandasoftware.com/activescan/as5/asinst.cab
      O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} -
      skaner.mks.com.pl/SkanerOnline.cab
    • Gość: piecyk gazowy Re: log z hijack co to jest IP: *.neoplus.adsl.tpnet.pl 30.08.04, 20:34
      Gość portalu: what? napisał(a):

      > co tu siedzi? wiadomo strona starowa sie podmienia
      > Logfile of HijackThis v1.98.0
      > Scan saved at 20:14:48, on 2004-08-30
      > Platform: Windows XP (WinNT 5.01.2600)
      > MSIE: Internet Explorer v6.00 (6.00.2600.0000)

      www.windowsupdate.com - zainstaluj wszystkie krytczne poprawki.

      Do wyrzucenia:

      > R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
      > res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
      > R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
      > res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
      > R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
      > about:blank
      > R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
      > res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
      > R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
      > res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
      > R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
      > res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
      > R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      > res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
      > R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      > res://C:\WINDOWS\system32\mdplc.dll/sp.html#29126
      > R3 - Default URLSearchHook is missing
      > O2 - BHO: (no name) - {8F81986D-802E-D9AA-0FD3-B0937653C654} -
      > C:\WINDOWS\system32\d3zs.dll
      > O4 - HKLM\..\Run: [sdkok.exe] C:\WINDOWS\system32\sdkok.exe
      > O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

      > O4 - HKLM\..\RunOnce: [iesw.exe] C:\WINDOWS\iesw.exe

      > O4 - HKCU\..\Run: [System Update4] c:\docume~1\wŁaŚci~1\daneap~1\winlogon.exe

Popularne wątki

Nie pamiętasz hasła

lub ?

 

Nie masz jeszcze konta? Zarejestruj się

Nakarm Pajacyka