Gość: Viva
IP: *.neoplus.adsl.tpnet.pl
09.10.04, 13:32
pomocy juz mam dosyć miałam 130 Adware.Hotbar mój antywirus ich nie wyłapał a
mam AntiVirenKit i chyba jest do kitu :) przeskanowałam wszystko skanerem w
Onet i mi to wykazało pousuwałam chyba wszystko ale nie jestem pewna -jestem
początkująca ale staram się jak mogę :) poczytałam na forum o HijakThis i
zrobiłam tak jak było mówione ale nie wiem co dalej. Czy ktoś by mógł mi
sprawdzić, bardzo proszę :)) Logfile of
HijackThis v1.98.2
Scan saved at 13:31:34, on 2004-10-09
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\AntiVirenKit professional\AVKService.exe
C:\Program Files\AntiVirenKit professional\AVKWCtl.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\WANADOO\TaskbarIcon.exe
C:\Program Files\AntiVirenKit professional\AVKPOP.EXE
C:\WINDOWS\system32\konektor020.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\System32\hphmon05.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\CTHELPER.EXE
C:\Program Files\Hotbar\bin\4.5.1.0\WeatherOnTray.exe
C:\Program Files\WebSavings_from_Ebates\WebSavingsFromEbates0.exe
C:\WINDOWS\System32\RUNDLL32.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Creative\SBAudigy\TaskBar\CTLTray.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\Program Files\CursorXP\CursorXP.exe
C:\Program Files\Creative\SBAudigy\TaskBar\CTLTask.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
D:\Program Files\programy do otwierania poczty\Tray Helper\Tray_helper.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\PROGRA~1\WANADOO\EspaceWanadoo.exe
C:\Program Files\WebSavings_from_Ebates\WebSavingsFromEbates1.exe
C:\PROGRA~1\WANADOO\ComComp.exe
C:\PROGRA~1\WANADOO\Watch.exe
C:\Program Files\Gadu-Gadu\gg.exe
D:\Program Files\Morpheus\Morpheus 2\Morpheus\morphexe.exe
D:\Program Files\Morpheus\Morpheus 2\Morpheus\mldonkey\mlnet.exe
C:\Program Files\Winamp\winamp.exe
D:\Program Files\upiększacze\DesktopX\DesktopX.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hotbar\bin\4.5.1.0\HbSrv.exe
C:\WINDOWS\System32\ctfmon.exe
D:\anty\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.neostrada.pl
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://www.hotbar.com/dyn/hotbar/3.0/sb_searchPageHome.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada
Plus wita Cie w Internecie
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O1 - Hosts: 205.134.176.246 adserver.gadu-gadu.pl
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program
Files\MyWay\myBar\2.bin\MYBAR.DLL (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: NavErrRedir Class - {A045DC85-FC44-45be-8A50-E4F9C62C9A84} - (no
file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} -
c:\program files\google\googletoolbar2.dll
O2 - BHO: Hotbar - {B195B3B3-8A05-11D3-97A4-0004ACA6948E} - C:\Program
Files\Hotbar\bin\4.5.1.0\HbHostIE.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: myfastaccess - {8C6685AB-43FF-4BF0-822C-03F03E0B47EA} -
C:\WINDOWS\system32\myfastaccess.dll
O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} -
C:\Program Files\MyWay\myBar\2.bin\MYBAR.DLL (file missing)
O3 - Toolbar: &Hotbar - {B195B3B3-8A05-11D3-97A4-0004ACA6948E} - C:\Program
Files\Hotbar\bin\4.5.1.0\HbHostIE.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program
files\google\googletoolbar2.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control
Panel\atiptaxx.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [autoclk] autoclk.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\TaskbarIcon.exe
O4 - HKLM\..\Run: [AVK Mail Checker] "C:\Program Files\AntiVirenKit
professional\AVKPOP.EXE"
O4 - HKLM\..\Run: [AntyDialerTP] "c:\program files\antydialer
tp\antydialertp.exe" tray
O4 - HKLM\..\Run: [myfastupdate] C:\WINDOWS\system32\myfastupdate.exe
O4 - HKLM\..\Run: [MyFastxKonektor020] C:\WINDOWS\system32\konektor020.exe --
tray
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{D946675D-1D6C-
4dc8-9E0D-B4B8EAA30EAA}\hphupd05.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program
Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32
\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [Miniwch] C:\Program Files\Wallpaper Changer\wch.exe /m
O4 - HKLM\..\Run: [WallpaperCH] C:\Program Files\Wallpaper Changer\wch.exe /a
O4 - HKLM\..\Run: [Reminder for Calendar 1.0] C:\Program Files\Kalendarz 1.0
beta\reminder.exe autodetect
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program
Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash
Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [CMESys] "C:\Program Files\Common Files\CMEII\CMESys.exe"
O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\Hotbar\bin\4.5.1.0
\WeatherOnTray.exe
O4 - HKLM\..\Run: [100% Clock] C:\Program Files\AlfaClock\AlfaClock.exe
O4 - HKLM\..\Run: [WebSavingsFromEbates0] "C:\Program
Files\WebSavings_from_Ebates\WebSavingsFromEbates0.exe"
O4 - HKLM\..\Run: [DeskMateAutoUpdate] C:\PROGRA~1\DESKMA~1
\DeskMateAutoUpdate.exe
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program
Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
O4 - HKLM\..\Run: [Hotbar] C:\Program Files\Hotbar\bin\4.5.1.0
\HbInst.exe /Upgrade
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Tasktray] C:\Program
Files\Creative\SBAudigy\TaskBar\CTLTray.exe
O4 - HKCU\..\Run: [CursorXP] C:\Program Files\CursorXP\CursorXP.exe
O4 - HKCU\..\Run: [Taskbar] C:\Program
Files\Creative\SBAudigy\TaskBar\CTLTask.exe
O4 - HKCU\..\Run: [Skype] "C:\Program
Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SoniqueQuickStart] D:\Program Files\odtwarzacz MP3
\Sonique\sqstart.exe -nostick
O4 - HKCU\..\Run: [IZSoftTrayHelper] D:\Program Files\programy do otwierania
poczty\Tray Helper\launch.exe
O4 - HKCU\..\Run: [Active Desktop Calendar] C:\Program
Files\XemiComputers\Active Desktop Calendar\ADC.exe
O4 - Startup: DESKMATE.LNK = D:\Program Files\Window Washers\Deskmate.EXE
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840
\dslmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Micros