Gość: Arek
IP: 80.51.226.*
24.04.05, 21:50
Logfile of Browser Hijack Recover(BHR) v2.1
www.browser-hijack.com/
Log created on 2005-04-24 21:47:47
Microsoft Windows 2000 Professional Dodatek Service Pack. 2 (Build 2195)
Internet Explorer v5.00.3315.1000 Update Versions: ;SP2;
[Process Manager] - [Process]
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\SYSTEM32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PavProt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\LEXPPS.EXE
C:\WINNT\System32\nvsvc32.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PavFnSvr.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\Pavkre.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
C:\WINNT\System32\LXSUPMON.EXE
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\pavsrv50.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\APVXDWIN.EXE
C:\WINNT\System32\internat.exe
C:\Program Files\NetMeter\NetMeter.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\AVENGINE.EXE
C:\Program Files\Kerio\Personal Firewall\persfw.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\prevsrv.exe
C:\Program Files\stickies\stickies.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PsImSvc.exe
C:\WINNT\System32\rundll32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\WebProxy.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\FREEDO~1\fdm.exe
C:\Program Files\Browser Hijack Recover\bhr.exe
[IE Options] - [Normal]
R0 - HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main,Start Page =
www.onet.pl/
R0 - HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\Main,Default_Page_URL =
www.microsoft.com/windows/ie_intl/en/start/
R0 - HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main,Window Title
=
[IE Options] - [IE Menu]
[IE Options] - [Internet Options]
[IE Options] - [IE Search Hooks]
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-
00C04FD64497} - C:\WINNT\System32\shdocvw.dll
[IE Add-Ons] - [Toolbars]
[IE Add-Ons] - [Explorer Bars]
O9 - Extra "View" Explorer Bars: Pasek wyszukiwania - {30D02401-6A81-11D0-
8274-00C04FD5AE38} - C:\WINNT\System32\browseui.dll
O9 - Extra "View" Explorer Bars: Pasek multimediów - {32683183-48a0-441b-a342-
7c2a440a9478} - C:\WINNT\System32\browseui.dll
O9 - Extra "View" Explorer Bars: Formant ActiveX File and Folders Search -
{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1} - C:\WINNT\system32\shell32.dll
O9 - Extra "View" Explorer Bars: Favorites Band - {EFA24E61-B078-11D0-89E4-
00C04FC9E26E} - C:\WINNT\System32\shdocvw.dll
O9 - Extra "View" Explorer Bars: History Band - {EFA24E62-B078-11D0-89E4-
00C04FC9E26E} - C:\WINNT\System32\shdocvw.dll
[IE Add-Ons] - [Context Menu]
O8 - Extra context menu item: &Add animation to IncrediMail Style Box -
C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: + Offline &Explorer: Download the link -
C:\Program Files\Offline Explorer\Add_UrlO.htm
O8 - Extra context menu item: + Offline E&xplorer: Download the current page -
C:\Program Files\Offline Explorer\Add_AllO.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel -
res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Pobierz stronę WEB z Free Download Manager -
C:\Program Files\Free Download Manager\dlpage.htm
O8 - Extra context menu item: Pobierz wszystko z Free Download Manager -
C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Pobierz z Free Download Manager - C:\Program
Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Pobierz zaznaczenie z Free Download Manager -
C:\Program Files\Free Download Manager\dlselected.htm
[IE Add-Ons] - [BHOs]
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
[IE Add-Ons] - [Tools Menu]
O9 - Extra "Tool" Menu Item: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-
00401C608501} - C:\WINNT\System32\msjava.dll
O9 - Extra "Tool" Menu Item: Po&każ łącza pokrewne - {c95fe080-8f5d-11d2-a20b-
00aa003c157a} - C:\WINNT\web\related.htm
[IE Add-Ons] - [Tools Button]
O9 - Extra "Tool" Menu Item: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-
00401C608501} - C:\WINNT\System32\msjava.dll
O9 - Extra Button: Pokrewne - {c95fe080-8f5d-11d2-a20b-00aa003c157a} -
C:\WINNT\web\related.htm
[System Options]
[StartUp]
04 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
internat.exe = internat.exe
04 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
IncrediMail = C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
04 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Gadu-
Gadu = C:\Program Files\Gadu-Gadu\gg.exe" /tray
04 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
C:\Program Files\NetMeter\NetMeter.exe = C:\Program
Files\NetMeter\NetMeter.exe
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Synchronization Manager = mobsync.exe /logon
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
NvCplDaemon = RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run nwiz =
nwiz.exe /install
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
NvMediaCenter = RUNDLL32.EXE C:\WINNT\System32\NvMcTray.dll,NvTaskbarInit
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
NeroCheck = C:\WINNT\system32\NeroCheck.exe
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
PrinTray = C:\WINNT\System32\spool\DRIVERS\W32X86\2\printray.exe
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
LXSUPMON = C:\WINNT\System32\LXSUPMON.EXE RUN
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
APVXDWIN = C:\Program Files\Panda Software\Panda Titanium Antivirus 2005
\APVXDWIN.EXE" /s
O4 - C:\Documents and Settings\xxx1\Menu
Start\Programy\Autostart\Stickies.lnk = C:\PROGRA~1\stickies\stickies.exe
z góry dziękuję za pomoc !!!!!!!!!!
