Gość: zawirusowana
IP: *.sggw.waw.pl
17.04.05, 08:48
witam, przyczepilo sie mnie chyba jakies swinstwo, znalazlam wasze forum i
linka do HijackThis
wynik:
Logfile of HijackThis v1.99.1
Scan saved at 08:40:17, on 2005-04-17
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\ArchestrA\aaLogger.exe
C:\Program Files\Common Files\ArchestrA\NTServApp.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Common Files\ArchestrA\slssvc.exe
C:\WINDOWS\System32\msnmgd32.exe
C:\WINDOWS\System32\winmms32.exe
C:\WINDOWS\System32\sysdll.exe
C:\WINDOWS\System32\being0wned.exe
C:\WINDOWS\System32\taskmngr.exe
C:\WINDOWS\System32\cccApp.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\WINDOWS\System32\regedit.exe
C:\Program Files\Tlen.pl\tlen.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Kasia\USTAWI~1\Temp\Rar$EX00.615\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
www.gazeta.pl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D3882835F153} -
C:\PROGRA~1\TEXTware\QUICKF~1\PlugIns\IEHelp.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [System Configuration Manager] sysdll.exe
O4 - HKLM\..\Run: [autostart] being0wned.exe
O4 - HKLM\..\Run: [Offices] msnmgd32.exe
O4 - HKLM\..\Run: [Task manager] taskmngr.exe
O4 - HKLM\..\Run: [Common File] cccApp.exe
O4 - HKLM\..\Run: [Windows Network Controller] winmms32.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02
\bin\jusched.exe
O4 - HKLM\..\Run: [System Registry Settings] regedit.exe
O4 - HKLM\..\RunServices: [System Configuration Manager] sysdll.exe
O4 - HKLM\..\RunServices: [autostart] being0wned.exe
O4 - HKLM\..\RunServices: [Offices] msnmgd32.exe
O4 - HKLM\..\RunServices: [Task manager] taskmngr.exe
O4 - HKLM\..\RunServices: [Common File] cccApp.exe
O4 - HKLM\..\RunServices: [Windows Network Controller] winmms32.exe
O4 - HKLM\..\RunServices: [System Registry Settings] regedit.exe
O4 - HKLM\..\RunOnce: [Offices] msnmgd32.exe
O4 - HKLM\..\RunOnce: [Windows Network Controller] winmms32.exe
O4 - HKCU\..\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe
O4 - HKCU\..\Run: [Offices] msnmgd32.exe
O4 - HKCU\..\Run: [Windows Network Controller] winmms32.exe
O4 - HKCU\..\Run: [Task manager] taskmngr.exe
O4 - HKCU\..\Run: [System Registry Settings] regedit.exe
O4 - HKCU\..\RunOnce: [Offices] msnmgd32.exe
O4 - HKCU\..\RunOnce: [Windows Network Controller] winmms32.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
Office\Office10\OSA.EXE
O8 - Extra context menu item: E&ksport do programu Microsoft Excel -
res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-
00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} -
C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-
00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {00000000-0000-0000-0000-000020030000} - sesso.ragazze-
sexy.net/sessogratis/SESSOGRATIS.exe
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer
Class) - www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA} (Java Runtime Environment
1.4.0_02) -
O21 - SSODL: systemp - {A725D94B-1B5D-425C-BED0-6156FA5C360E} - systemp.dll
(file missing)
O23 - Service: ArchestrA Logger (aaLogger) - Invensys Systems, Inc. -
C:\Program Files\Common Files\ArchestrA\aaLogger.exe
O23 - Service: FS Service Control - Wonderware Corporation - C:\Program
Files\Common Files\ArchestrA\NTServApp.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program
Files\iPod\bin\iPodService.exe
O23 - Service: Wonderware SuiteLink (slssvc) - Invensys Systems, Inc. -
C:\Program Files\Common Files\ArchestrA\slssvc.exe
O23 - Service: Wonderware NetDDE Helper (WWNetDDE) - Invensys Systems, Inc. -
C:\Program Files\Common Files\ArchestrA\wwnetdde.exe
co robic?
wczesniej mialam gatora, a teraz to juz nie wiem co sie dzieje, regedit sie
nie otwiera
a na tych logach to wogole sie nie znam
pzdr
K
