Gość: mors
IP: *.internetdsl.tpnet.pl
06.02.05, 21:10
Mam prosbe, zupelnie nie wiem co zrobic. Przeskanowanie anty-virem, spyware
nic nie dalo. Po prostu czysto. A przeciez to niemozliwe, zeby nie bylo
zadnych robali....Raz nie mam polskich czcionek, raz nie dziala skype itp. :(
Sam nie umie tego zrobic - pomozcie, dzieki..
Pozdrawiam - M
Logfile of HijackThis v1.99.0
Scan saved at 20:33:26, on 2005-02-06
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.ex e
C:\WINDOWS\system32\services.ex e
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.ex e
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.ex e
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Wirtualna Polska\wpkontakt\wpkontakt.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\AVPersonal\AVGNT.EXE
C:\Program Files\Java\jre1.5.0\bin\jusched .exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\skrzynka bogiego\skrzynka.exe
C:\Program Files\Chameleon Clock\ChamClock.exe
C:\Program Files\interMute\SpySubtract\Spy Sub.exe
C:\Program Files\AVPersonal\AVGUARD.EXE
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\Firebird\Firebird_1_5\bin \fbguard.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\PROGRA~1\NORTON~1\SPEEDD~1\n opdb.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vs mon.exe
C:\Program Files\Firebird\Firebird_1_5\bin \fbserver.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\AVPersonal\AVWIN.EXE
C:\Program Files\TC PowerPack\totalcmd.exe
C:\Program Files\Mozilla Firefox\firefox.exe
D:\a\HijackThis.exe
R0 - HKCU\Software\Microsoft\Interne t Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Interne t Explorer\Toolbar,LinksFolderNam e = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D 6BE0B3} -
C:\Program Files\Adobe\Acrobat 5.0 CE\Reader\ActiveX\AcroIEHelper. ocx
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone
Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [wpkontakt] C:\Program Files\Wirtualna
Polska\wpkontakt\wpkontakt.exe -autostart
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.e xe
O4 - HKLM\..\Run: [AtiPTA] C:\Program Files\ATI Technologies\ATI Control
Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
Files\Java\jre1.5.0\bin\jusched .exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [skrzynka bogiego] C:\Program Files\skrzynka
bogiego\skrzynka.exe
O4 - HKCU\..\Run: [HomeAlarm] C:\Program Files\Chameleon Clock\ChamClock.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash
/minimized
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
Office\Office\OSA9.EXE
O4 - Global Startup: SpySubtract.lnk = C:\Program
Files\interMute\SpySubtract\Spy Sub.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C 608501} -
C:\Program Files\Java\jre1.5.0\bin\npjpi15 0.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C 608501} - C:\Program
Files\Java\jre1.5.0\bin\npjpi15 0.dll
O17 -
HKLM\System\CCS\Services\Tcpip\ ..\{AEE157F9-B3BF-4DA4-AD9A-88A 967DED76E}:
NameServer = 157.25.5.3,212.191.132.126
O18 - Protocol: wpmsg - {2E0AC5A0-3597-11D6-B3ED-000102 1DC1C3} - C:\Program
Files\Wirtualna Polska\wpkontakt\url_wpmsg.dll
O23 - Service: AntiVir Service - H+BEDV Datentechnik GmbH - C:\Program
Files\AVPersonal\AVGUARD.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. -
C:\WINDOWS\system32\Ati2evxx.ex e
O23 - Service: ATI Smart - Unknown - C:\WINDOWS\system32\ati2sgag.ex e
O23 - Service: AntiVir Update - H+BEDV Datentechnik GmbH, Germany - C:\Program
Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: Firebird Guardian - DefaultInstance - The Firebird Project -
C:\Program Files\Firebird\Firebird_1_5\bin \fbguard.exe
O23 - Service: Firebird Server - DefaultInstance - The Firebird Project -
C:\Program Files\Firebird\Firebird_1_5\bin \fbserver.exe
O23 - Service: Norton Unerase Protection - Symantec Corporation - C:\Program
Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O23 - Service: Speed Disk service - Symantec Corporation -
C:\PROGRA~1\NORTON~1\SPEEDD~1\n opdb.exe
O23 - Service: TrueVector Internet Monitor - Zone Labs Inc. -
C:\WINDOWS\system32\ZoneLabs\vs mon.exe