Gość: vis
IP: *.neoplus.adsl.tpnet.pl
23.01.05, 15:28
mam neostrade, uzywam zone alarm i panda ... od jakiegoś czasu dzieje sie coś
takiego, że po jakimś czasie zone alarm się zawiesza i ogólnie internet
przestaje chodzić... skanowalam mks'em online i wykryl plik zainfekowany
trojanem trojan.qukart.s2 , usunelam ten plik, ale wygląda na to że nic sie
nie zmienilo,
do tego nie moge zaktualizować bazy wirusów pandy ,bo wyswietla sie komunikat
że powodem wystapienia bledu sa operacje plikowe
wklejam loga, prosze o pomoc
Logfile of HijackThis v1.99.0
Scan saved at 15:22:38, on 2005-01-23
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.ex e
C:\WINDOWS\system32\services.ex e
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\nvsvc32.exe
D:\Programy\Panda Antivirus Platinum\Firewall\PavFires.exe
D:\Programy\Panda Antivirus Platinum\pavsrv51.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vs mon.exe
D:\Programy\Panda Antivirus Platinum\AVENGINE.EXE
C:\WINDOWS\System32\spoolvsc.ex e
D:\Programy\Panda Antivirus Platinum\apvxdwin.exe
C:\WINDOWS\system32\ntvdm.exe
C:\WINDOWS\System32\sstray.exe
C:\WINDOWS\System32\carpserv.ex e
C:\PROGRA~1\NEOSTR~1\CnxMon.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Common Files\Real\Update_OB\realsched. exe
C:\Program Files\Neostrada TP\NeostradaTP.exe
C:\WINDOWS\System32\winupgrd.ex e
C:\WINDOWS\System32\RUNDLL32.EX E
C:\Program Files\Neostrada TP\ComComp.exe
D:\Programy\SATA Util\SATARaid.exe
D:\Programy\Ulead Photo Express 4.0 SE\CalCheck.exe
C:\Program Files\Zone Labs\ZoneAlarm\zapro.exe
C:\Program Files\Neostrada TP\Watch.exe
D:\Programy\Panda Antivirus Platinum\pavProxy.exe
D:\Instalki\instalki Magdy\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe
R1 - HKCU\Software\Microsoft\Interne t Explorer\Main,Search Bar =
szukaj.wp.pl
R0 - HKCU\Software\Microsoft\Interne t Explorer\Main,Start Page =
www.neostrada.pl
R1 - HKCU\Software\Microsoft\Interne t Explorer\Main,Window Title = Neostrada
TP
R0 - HKCU\Software\Microsoft\Interne t Explorer\Toolbar,LinksFolderNam e = Łącza
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89 362C85} -
C:\PROGRA~1\NEOSTR~1\SEARCH~1.D LL
F3 - REG:win.ini: load=d:\programy\YDPDict\watch. exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D 6BE0B3} -
D:\Programy\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper .dll
O2 - BHO: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D38828 35F153} -
C:\PROGRA~1\TEXTware\QUICKF~1\P lugIns\IEHelp.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9 082467} -
C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [SCANINICIO] "D:\Programy\Panda Antivirus
Platinum\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "D:\Programy\Panda Antivirus
Platinum\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32
\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program
Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe
O4 - HKLM\..\Run: [DU Meter] D:\Programy\DU Meter\DUMeter.exe
O4 - HKLM\..\Run: [WOOKIT] C:\Program Files\Neostrada TP\NeostradaTP.exe
O4 - HKLM\..\Run: [Microsoft AUT Update] winupgrd.exe
O4 - HKLM\..\Run: [Local Service] spoolsp.exe
O4 - HKLM\..\Run: [WinSecured32] ssmr.exe
O4 - HKLM\..\Run: [Win32 Secure Updates] spoolvsc.exe
O4 - HKLM\..\Run: [start uploading] crsss.exe
O4 - HKLM\..\RunServices: [Microsoft AUT Update] winupgrd.exe
O4 - HKLM\..\RunServices: [Local Service] spoolsp.exe
O4 - HKLM\..\RunServices: [WinSecured32] ssmr.exe
O4 - HKLM\..\RunServices: [Win32 Secure Updates] spoolvsc.exe
O4 - HKLM\..\RunServices: [start uploading] crsss.exe
O4 - HKLM\..\RunOnce: [Win32 Secure Updates] spoolvsc.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32
\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [Microsoft AUT Update] winupgrd.exe
O4 - HKCU\..\Run: [Local Service] spoolsp.exe
O4 - HKCU\..\Run: [WIN USB 2.0] winusb.exe
O4 - HKCU\..\Run: [Win32 Secure Updates] spoolvsc.exe
O4 - HKCU\..\Run: [start uploading] crsss.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "D:\Programy\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\RunServices: [Local Service] spoolsp.exe
O4 - HKCU\..\RunServices: [start uploading] crsss.exe
O4 - HKCU\..\RunOnce: [Win32 Secure Updates] spoolvsc.exe
O4 - Global Startup: Microsoft Office.lnk = D:\Programy\Microsoft
Office\Office10\OSA.EXE
O4 - Global Startup: SATARaid.lnk = ?
O4 - Global Startup: Ulead Photo Express 4.0 SE Calendar Checker .lnk =
D:\Programy\Ulead Photo Express 4.0 SE\CalCheck.exe
O4 - Global Startup: ZoneAlarm Pro.lnk = C:\Program Files\Zone
Labs\ZoneAlarm\zapro.exe
O8 - Extra context menu item: E&ksport do programu Microsoft Excel -
res://D:\Programy\MICROS~1\Offi ce10\EXCEL.EXE/3000
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa00 3c157a} -
C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-
00aa003c157a} - C:\WINDOWS\web\related.htm
O12 - Plugin for .mov: C:\Program Files\Internet
Explorer\PLUGINS\npqtplugin.dll
O12 - Plugin for .mpeg: C:\Program Files\Internet
Explorer\PLUGINS\npqtplugin3.dl l
O12 - Plugin for .spop: C:\Program Files\Internet
Explorer\Plugins\NPDocBox.dll
O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE 20BDF7} (MainControl Class) -
skaner.mks.com.pl/SkanerOnline.cab
O17 - HKLM\System\CCS\Services\Tcpip\ ..\{9C1B534D-B01D-4431-B94C-
4DF21C1234AF}: NameServer = 194.204.152.34 217.98.63.164
O23 - Service: MkSUpdateInt - Unknown - C:\Program
Files\MKS\bin\MkSUpdateInt.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service - NVIDIA Corporation -
C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Panda Firewall Service - Unknown - D:\Programy\Panda Antivirus
Platinum\Firewall\PavFires.exe
O23 - Service: Panda anti-virus service - Unknown - D:\Programy\Panda
Antivirus Platinum\pavsrv51.exe
O23 - Service: TrueVector Internet Monitor - Zone Labs Inc. -
C:\WINDOWS\system32\ZoneLabs\vs mon.exe
