proszę o pomoc

Gość: vrinda IP: *.neoplus.adsl.tpnet.pl 22.06.05, 15:47

Proszę o sprawdzenie loga.
Coś z pewnością mam nie tak bo ciągle mam jakieś niespodzianki.
Niestety zupełnie sie na tym wszystkim nie znam i proszę o pomoc i rady.
Logfile of HijackThis v1.99.1
Scan saved at 15:34:39, on 2005-06-22
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\System32\Ati2evxx.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
F:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
F:\WINDOWS\system32\spoolsv.exe
F:\WINDOWS\system32\Ati2evxx.exe
F:\WINDOWS\Explorer.EXE
F:\WINDOWS\System32\RunDll32.exe
F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
F:\Program Files\Common Files\Symantec Shared\ccApp.exe
F:\Program Files\ATI Technologies\ATI HydraVision\HydraDM.exe
F:\Program Files\Winamp\Winampa.exe
F:\WINDOWS\System32\ctfmon.exe
F:\Program Files\Messenger\msmsgs.exe
F:\Program Files\Gadu-Gadu\gg.exe
F:\Program Files\Common Files\ARS Company\Agent\Agent.exe
F:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
F:\Program Files\Norton AntiVirus\navapsvc.exe
F:\Program Files\Norton AntiVirus\SAVScan.exe
F:\Program Files\Outlook Express\msimn.exe
F:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\totalcmd\TOTALCMD.EXE
F:\Documents and Settings\Marlena\Ustawienia lokalne\Temporary Internet
Files\Content.IE5\UDW9YHUP\HijackThis1991[1].exe
F:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
F:\WINDOWS\msagent\AgentSvr.exe
F:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} -
F:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
F:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {35E78239-811E-4c3f-B37D-F339AC16C2C0} - F:\PROGRA~1
\Comet\bin\autosearch.dll (file missing)
O2 - BHO: CSBrBho Class - {96DA5BEE-4ACC-476C-B3EC-54C6730C4293} - F:\PROGRA~1
\Comet\Install\Temp\brbho.dll (file missing)
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} -
F:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} -
F:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
F:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} -
F:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ATIPTA] F:\Program Files\ATI Technologies\ATI Control
Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ccApp] "F:\Program Files\Common Files\Symantec
Shared\ccApp.exe"
O4 - HKLM\..\Run: [SiSUSBRG] F:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [HydraVisionDesktopManager] F:\Program Files\ATI
Technologies\ATI HydraVision\HydraDM.exe
O4 - HKLM\..\Run: [KonektorTP] "f:\program files\konektortp\konektortp.exe"
tray
O4 - HKLM\..\Run: [CloneCDTray] "F:\Program
Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [WinampAgent] "F:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] F:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [SSC_UserPrompt] F:\Program Files\Common Files\Symantec
Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [NeroCheck] F:\WINDOWS\System32\\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "F:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Gadu-Gadu] "F:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [AMP Agent] F:\Program Files\Common Files\ARS
Company\Agent\Agent.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = F:\Program
Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O8 - Extra context menu item: E&ksport do programu Microsoft Excel -
res://F:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer
Class) - www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) -
skaner.mks.com.pl/SkanerOnline.cab
O23 - Service: Ati HotKey Poller - Unknown owner - F:\WINDOWS\System32
\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - F:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation -
F:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec
Corporation - F:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation -
F:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Usługa Auto Protect programu Norton AntiVirus (navapsvc) -
Symantec Corporation - F:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - F:\Program Files\Norton
AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation -
F:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec
Corporation - F:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - F:\Program
Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

Obserwuj wątek

Gość: vrinda Re: proszę o pomoc IP: *.neoplus.adsl.tpnet.pl 23.06.05, 22:11

Temperatura raport wyglada tak:--------[ EVEREST Home Edition (c) 2003-2005
Lavalys, Inc. ]------------------------------------------------------------

Wersja EVEREST v2.01.347/pl
Strona domowa www.lavalys.com/
Typ raportu Szybki raport
Komputer KOMPUTER (komputer)
Generator raportu Marlena
System operacyjny Microsoft Windows XP
Professional 5.1.2600 (WinXP Retail)
Data 2005-06-23
Czas 22:04

--------[ Czujnik ]-------------------------------------------------------------
----------------------------------------

Właściwości czujnika:
Typ czujnika Winbond W83697HF (ISA
290h)
Nazwa płyty głównej ASRock P4S61

Temperatury:
Płyta główna 37 °C (99 °F)
Procesor 53 °C (127 °F)
WDC WD800BB-00FJA0 36 °C (97 °F)

Wentylatory:
Procesor 2885 RPM

Wartości napięć:
Napięcie rdzenia procesora 1.39 V
+3.3 V 3.25 V
+5 V 4.87 V
+12 V 12.16 V
+5 V podczas wstrzymania pracy 4.95 V
Debug Info V 57 00 CB B5 C8 00 00 25
(01)
Debug Info T 37 53 255

--------[ Debug - PCI ]---------------------------------------------------------
----------------------------------------

B00 D00 F00: SiS 661FX/GX Chipset - Host-PCI Bridge

Offset 00: 39 10 61 06 07 00 10 22 11 00 00 06 00 20 80 00
Offset 10: 00 00 00 E0 00 00 00 00 00 00 00 00 00 00 00 00
Offset 20: 00 00 00 00 00 00 00 00 00 00 00 00 49 18 61 06
Offset 30: 00 00 00 00 C0 00 00 00 00 00 00 00 00 00 00 00
Offset 40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 50: FF 09 40 83 43 03 8C 09 03 B4 08 00 12 D5 20 26
Offset 60: 67 40 00 40 01 82 29 82 01 08 E0 00 6A 00 80 00
Offset 70: 07 9F 00 80 02 00 3C 80 00 00 00 00 02 0F 01 44
Offset 80: 22 27 30 03 81 00 04 2B 00 00 00 01 00 00 00 10
Offset 90: 00 00 00 00 40 03 00 00 B0 80 29 02 00 00 00 15
Offset A0: A5 86 77 42 03 03 01 33 41 AA 18 00 44 01 00 01
Offset B0: 00 00 00 80 81 01 20 00 FB 77 35 33 00 00 00 00
Offset C0: 02 00 35 00 1B 4E 00 1F 02 03 00 00 00 00 00 00
Offset D0: E0 01 00 00 30 0F 01 00 00 00 01 00 01 00 00 88
Offset E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset F0: 18 15 00 00 00 00 00 00 00 00 00 00 00 00 00 00

B00 D01 F00: SiS AGP Controller

Offset 00: 39 10 03 00 07 01 20 00 00 00 04 06 00 20 01 00
Offset 10: 00 00 00 00 00 00 00 00 00 01 02 20 B0 B0 20 20
Offset 20: D0 CF E0 CF A0 AF B0 CF 00 00 00 00 00 00 00 00
Offset 30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0A 00
Offset 40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset D0: 22 42 30 02 09 FF FF 01 60 60 AA 10 03 07 07 23
Offset E0: 23 47 15 A0 00 00 00 00 55 00 55 05 00 00 00 00
Offset F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

B00 D02 F00: SiS 85C503/5513/5595/961/962/963 PCI-ISA Bridge

Offset 00: 39 10 08 00 0F 00 00 02 25 00 01 06 00 00 80 00
Offset 10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 40: 93 8B 80 8A 8B 00 21 D9 10 00 00 00 11 30 04 01
Offset 50: 11 38 02 01 20 0B 20 0B 00 00 12 00 05 05 B6 00
Offset 60: 83 85 80 8C FF C1 10 12 09 80 00 46 D7 00 02 11
Offset 70: 00 00 FF FF 00 08 00 0C 00 00 00 80 02 00 00 00
Offset 80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 90: FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset C0: 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 41
Offset D0: 20 05 00 01 22 62 30 00 85 00 80 3B AA AA AA AA
Offset E0: 40 00 00 D8 7C 00 44 00 01 00 00 00 00 00 00 00
Offset F0: 0A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

B00 D02 F01: SiS SMBus Controller

Offset 00: 39 10 16 00 01 00 80 02 00 00 05 0C 00 00 00 00
Offset 10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 20: 01 0C 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 30: 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00
Offset 40: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

B00 D02 F05: SiS 85C513 IDE Controller

Offset 00: 39 10 13 55 05 00 00 02 00 80 01 01 00 80 00 00
Offset 10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 20: 01 FF 00 00 00 00 00 00 00 00 00 00 49 18 13 55
Offset 30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 40: 00 00 00 00 00 00 00 00 20 00 06 00 00 00 00 00
Offset 50: F2 00 F3 80 2A 96 D5 C0 00 00 00 00 00 00 00 00
Offset 60: FB FF FB FF 00 00 00 00 00 00 00 00 00 00 00 00
Offset 70: 17 21 06 04 00 00 00 00 56 23 06 04 56 23 06 04
Offset 80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Offset E0: 00 00 00 00

Drzewko
Od najstarszego
Od najnowszego

Gość: Kolobos Re: proszę o pomoc IP: *.warszawa.sdi.tpnet.pl 22.06.05, 16:35

Jakie niespodzianki? Nie masz żadnych aktualizacji do windowsa!
Nie uruchamiaj hijackthis z zipa tylko rozpakuj!

Uzyj tego:
www.firewallleaktester.com/tools/wwdc.exe
Skan tym:
download.microsoft.com/download/8/1/5/815d2d60-49b5-44dc-ae35-fca2f2c6f0cc/MicrosoftAntiSpywareInstall.exe
I usun co znajdzie.

Nortona odinstaluj i zamiast niego zainstaluj Avast!:
www.avast.com/eng/avast_4_home.html
W hijackthis usun:

O2 - BHO: (no name) - {35E78239-811E-4c3f-B37D-F339AC16C2C0} - F:\PROGRA~1
\Comet\bin\autosearch.dll (file missing)
O2 - BHO: CSBrBho Class - {96DA5BEE-4ACC-476C-B3EC-54C6730C4293} - F:\PROGRA~1
\Comet\Install\Temp\brbho.dll (file missing)

Po wszystkim wklej nowy log.
- Gość: vrinda Re: proszę o pomoc IP: *.neoplus.adsl.tpnet.pl 23.06.05, 10:15
  
  Zrobiłam wszystko zgodnie z Twoimi instrukcjami(mam przynajmniej taką nadzieję)
  Avast wykrył nawet jekigoś trojana, z który norton sobie żył w harmonii.
  Wklejam nowy log ma nadzieję że teraz będzie ok? Napisz proszę.Pozdrawiam
  Logfile of HijackThis v1.98.2
  Scan saved at 10:03:35, on 2005-06-23
  Platform: Windows XP (WinNT 5.01.2600)
  MSIE: Internet Explorer v6.00 (6.00.2600.0000)
  
  Running processes:
  F:\WINDOWS\System32\smss.exe
  F:\WINDOWS\system32\winlogon.exe
  F:\WINDOWS\system32\services.exe
  F:\WINDOWS\system32\lsass.exe
  F:\WINDOWS\System32\Ati2evxx.exe
  F:\WINDOWS\system32\svchost.exe
  F:\WINDOWS\System32\svchost.exe
  F:\WINDOWS\system32\spoolsv.exe
  F:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
  F:\Program Files\Alwil Software\Avast4\ashServ.exe
  F:\Program Files\Alwil Software\Avast4\ashWebSv.exe
  F:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
  F:\WINDOWS\system32\Ati2evxx.exe
  F:\WINDOWS\Explorer.EXE
  F:\WINDOWS\System32\RunDll32.exe
  F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
  F:\Program Files\ATI Technologies\ATI HydraVision\HydraDM.exe
  F:\Program Files\Winamp\Winampa.exe
  F:\Program Files\Microsoft AntiSpyware\gcasServ.exe
  F:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
  F:\WINDOWS\System32\ctfmon.exe
  F:\Program Files\Messenger\msmsgs.exe
  F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
  F:\Program Files\Gadu-Gadu\gg.exe
  F:\Program Files\Common Files\ARS Company\Agent\Agent.exe
  F:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
  F:\Program Files\Internet Explorer\IEXPLORE.EXE
  F:\Program Files\Internet Explorer\IEXPLORE.EXE
  C:\totalcmd\TOTALCMD.EXE
  F:\Documents and Settings\Marlena\Moje dokumenty\HijackThis19802.exe
  
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
  F:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
  O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
  F:\WINDOWS\System32\msdxm.ocx
  O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
  O4 - HKLM\..\Run: [ATIPTA] F:\Program Files\ATI Technologies\ATI Control
  Panel\atiptaxx.exe
  O4 - HKLM\..\Run: [SiSUSBRG] F:\WINDOWS\SiSUSBrg.exe
  O4 - HKLM\..\Run: [HydraVisionDesktopManager] F:\Program Files\ATI
  Technologies\ATI HydraVision\HydraDM.exe
  O4 - HKLM\..\Run: [KonektorTP] "f:\program files\konektortp\konektortp.exe" tray
  O4 - HKLM\..\Run: [CloneCDTray] "F:\Program
  Files\SlySoft\CloneCD\CloneCDTray.exe" /s
  O4 - HKLM\..\Run: [WinampAgent] "F:\Program Files\Winamp\Winampa.exe"
  O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe
  O4 - HKLM\..\Run: [SSC_UserPrompt] F:\Program Files\Common Files\Symantec
  Shared\Security Center\UsrPrmpt.exe
  O4 - HKLM\..\Run: [NeroCheck] F:\WINDOWS\System32\\NeroCheck.exe
  O4 - HKLM\..\Run: [gcasServ] "F:\Program Files\Microsoft
  AntiSpyware\gcasServ.exe"
  O4 - HKLM\..\Run: [avast!] F:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
  O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\ctfmon.exe
  O4 - HKCU\..\Run: [MSMSGS] "F:\Program Files\Messenger\msmsgs.exe" /background
  O4 - HKCU\..\Run: [Gadu-Gadu] "F:\Program Files\Gadu-Gadu\gg.exe" /tray
  O4 - HKCU\..\Run: [AMP Agent] F:\Program Files\Common Files\ARS
  Company\Agent\Agent.exe
  O4 - HKCU\..\RunOnce: [BullguardoptIn]
  F:\WINDOWS\Temp\BullGuard\bulldownload.exe
  O4 - Global Startup: InterVideo WinCinema Manager.lnk = F:\Program
  Files\InterVideo\Common\Bin\WinCinemaMgr.exe
  O8 - Extra context menu item: E&ksport do programu Microsoft Excel -
  res://F:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
  O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
  F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
  O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
  www.pandasoftware.com/activescan/as5/asinst.cab
  O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) -
  skaner.mks.com.pl/SkanerOnline.cab
- Gość: vrinda Re: proszę o pomoc IP: *.neoplus.adsl.tpnet.pl 23.06.05, 10:56
  
  Troszkę poczytałam Twoje rady dla innych na tym forum i niestety dowiedziałam
  się, że mam zainstalowaną jakąś chamsko piracką wersję XP-ka. Aż mi wstyd.
  Postanowiłam zainstalować aktualizacje no i wyszlo szydło z worka.
  Czy to może być przyczyną tego, że czasmi komputer ni z tego ni z owego wyłącza
  mi sie (a raczej sam resetuje) i tak potrafi zrobic nawet 5razy pod rzad a
  potem znow spokój. To się zdarzyło mi już kilka razy(chyba 4).
  Przepraszam, że nie wszystko w jednym poście ale to nowe odkrycie.
  Jestem wdzięczna za pomoc.
  - Gość: Kolobos Re: proszę o pomoc IP: *.warszawa.sdi.tpnet.pl 23.06.05, 13:05
    
    Czemu pierwszy log jest z nowego hijackthis, a drugi z jakiejs stary wersji?
    Wklej log zrobiony najnowasza wersja.
    
    Komputer moze sie resetowac od przegrzania procesora, sprawdz w everest:
    www.lavalys.com/products/overview.php?pid=1&lang=en
    (zakladka czujniki)
    
    Moze tez byc uszkodzony ram, sprawdz:
    www.memtest.org
    sciagnij image dyskietki, rozpakuj, nagraj, uruchom z niej komputer i zostaw na
    2-4 godziny, po tym czasie sprawdz czy znalazl jakies bledy.
    
    To na poczatek, oczywiscie reset moze powodowac uszkodzony zasilacz/plyta itd.
    Czy resetuje sie nagle czy wyskakuje niebieski ekran najpierw?
    - Gość: vrinda Re: proszę o pomoc IP: *.neoplus.adsl.tpnet.pl 23.06.05, 21:31
      
      wklejam nowy log.
      Komputer resetuje się z nienacka, nie robi się niebieski.
      Pozdrawiam
      Logfile of HijackThis v1.99.1
      Scan saved at 21:26:58, on 2005-06-23
      Platform: Windows XP (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 (6.00.2600.0000)
      
      Running processes:
      F:\WINDOWS\System32\smss.exe
      F:\WINDOWS\system32\winlogon.exe
      F:\WINDOWS\system32\services.exe
      F:\WINDOWS\system32\lsass.exe
      F:\WINDOWS\System32\Ati2evxx.exe
      F:\WINDOWS\system32\svchost.exe
      F:\WINDOWS\System32\svchost.exe
      F:\WINDOWS\system32\spoolsv.exe
      F:\WINDOWS\system32\Ati2evxx.exe
      F:\WINDOWS\Explorer.EXE
      F:\WINDOWS\System32\RunDll32.exe
      F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      F:\Program Files\ATI Technologies\ATI HydraVision\HydraDM.exe
      F:\Program Files\Winamp\Winampa.exe
      F:\Program Files\Microsoft AntiSpyware\gcasServ.exe
      F:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      F:\WINDOWS\System32\ctfmon.exe
      F:\Program Files\Gadu-Gadu\gg.exe
      F:\Program Files\Common Files\ARS Company\Agent\Agent.exe
      F:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
      F:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      F:\Program Files\Alwil Software\Avast4\ashServ.exe
      F:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      F:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      F:\WINDOWS\System32\wuauclt.exe
      F:\Documents and Settings\Marlena\Moje dokumenty\HijackThis1991.exe
      
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
      F:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
      F:\WINDOWS\System32\msdxm.ocx
      O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
      O4 - HKLM\..\Run: [ATIPTA] F:\Program Files\ATI Technologies\ATI Control
      Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [SiSUSBRG] F:\WINDOWS\SiSUSBrg.exe
      O4 - HKLM\..\Run: [HydraVisionDesktopManager] F:\Program Files\ATI
      Technologies\ATI HydraVision\HydraDM.exe
      O4 - HKLM\..\Run: [KonektorTP] "f:\program files\konektortp\konektortp.exe" tray
      O4 - HKLM\..\Run: [CloneCDTray] "F:\Program
      Files\SlySoft\CloneCD\CloneCDTray.exe" /s
      O4 - HKLM\..\Run: [WinampAgent] "F:\Program Files\Winamp\Winampa.exe"
      O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [SSC_UserPrompt] F:\Program Files\Common Files\Symantec
      Shared\Security Center\UsrPrmpt.exe
      O4 - HKLM\..\Run: [NeroCheck] F:\WINDOWS\System32\\NeroCheck.exe
      O4 - HKLM\..\Run: [gcasServ] "F:\Program Files\Microsoft
      AntiSpyware\gcasServ.exe"
      O4 - HKLM\..\Run: [avast!] F:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\ctfmon.exe
      O4 - HKCU\..\Run: [Gadu-Gadu] "F:\Program Files\Gadu-Gadu\gg.exe" /tray
      O4 - HKCU\..\Run: [AMP Agent] F:\Program Files\Common Files\ARS
      Company\Agent\Agent.exe
      O4 - Global Startup: InterVideo WinCinema Manager.lnk = F:\Program
      Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      O8 - Extra context menu item: E&ksport do programu Microsoft Excel -
      res://F:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
      F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
      www.pandasoftware.com/activescan/as5/asinst.cab
      O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) -
      skaner.mks.com.pl/SkanerOnline.cab
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner -
      F:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Ati HotKey Poller - Unknown owner - F:\WINDOWS\System32
      \Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - F:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: avast! Antivirus - Unknown owner - F:\Program Files\Alwil
      Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - Unknown owner - F:\Program Files\Alwil
      Software\Avast4\ashMaiSv.exe" /service (file missing)
      O23 - Service: avast! Web Scanner - Unknown owner - F:\Program Files\Alwil
      Software\Avast4\ashWebSv.exe" /service (file missing)
      O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - F:\Program
      Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
      - Gość: Kolobos Re: proszę o pomoc IP: *.warszawa.sdi.tpnet.pl 23.06.05, 21:53
        
        Log jest ok wiec to nie to.Sprawdz ram i temperature procesora tak jak
        napisalem.
        
        Gość: vrinda Re: proszę o pomoc IP: *.neoplus.adsl.tpnet.pl 23.06.05, 22:11
        
        Temperatura raport wyglada tak:--------[ EVEREST Home Edition (c) 2003-2005
        Lavalys, Inc. ]------------------------------------------------------------
        
        Wersja EVEREST v2.01.347/pl
        Strona domowa www.lavalys.com/
        Typ raportu Szybki raport
        Komputer KOMPUTER (komputer)
        Generator raportu Marlena
        System operacyjny Microsoft Windows XP
        Professional 5.1.2600 (WinXP Retail)
        Data 2005-06-23
        Czas 22:04
        
        --------[ Czujnik ]-------------------------------------------------------------
        ----------------------------------------
        
        Właściwości czujnika:
        Typ czujnika Winbond W83697HF (ISA
        290h)
        Nazwa płyty głównej ASRock P4S61
        
        Temperatury:
        Płyta główna 37 °C (99 °F)
        Procesor 53 °C (127 °F)
        WDC WD800BB-00FJA0 36 °C (97 °F)
        
        Wentylatory:
        Procesor 2885 RPM
        
        Wartości napięć:
        Napięcie rdzenia procesora 1.39 V
        +3.3 V 3.25 V
        +5 V 4.87 V
        +12 V 12.16 V
        +5 V podczas wstrzymania pracy 4.95 V
        Debug Info V 57 00 CB B5 C8 00 00 25
        (01)
        Debug Info T 37 53 255
        
        --------[ Debug - PCI ]---------------------------------------------------------
        ----------------------------------------
        
        B00 D00 F00: SiS 661FX/GX Chipset - Host-PCI Bridge
        
        Offset 00: 39 10 61 06 07 00 10 22 11 00 00 06 00 20 80 00
        Offset 10: 00 00 00 E0 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 20: 00 00 00 00 00 00 00 00 00 00 00 00 49 18 61 06
        Offset 30: 00 00 00 00 C0 00 00 00 00 00 00 00 00 00 00 00
        Offset 40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 50: FF 09 40 83 43 03 8C 09 03 B4 08 00 12 D5 20 26
        Offset 60: 67 40 00 40 01 82 29 82 01 08 E0 00 6A 00 80 00
        Offset 70: 07 9F 00 80 02 00 3C 80 00 00 00 00 02 0F 01 44
        Offset 80: 22 27 30 03 81 00 04 2B 00 00 00 01 00 00 00 10
        Offset 90: 00 00 00 00 40 03 00 00 B0 80 29 02 00 00 00 15
        Offset A0: A5 86 77 42 03 03 01 33 41 AA 18 00 44 01 00 01
        Offset B0: 00 00 00 80 81 01 20 00 FB 77 35 33 00 00 00 00
        Offset C0: 02 00 35 00 1B 4E 00 1F 02 03 00 00 00 00 00 00
        Offset D0: E0 01 00 00 30 0F 01 00 00 00 01 00 01 00 00 88
        Offset E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset F0: 18 15 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        
        B00 D01 F00: SiS AGP Controller
        
        Offset 00: 39 10 03 00 07 01 20 00 00 00 04 06 00 20 01 00
        Offset 10: 00 00 00 00 00 00 00 00 00 01 02 20 B0 B0 20 20
        Offset 20: D0 CF E0 CF A0 AF B0 CF 00 00 00 00 00 00 00 00
        Offset 30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0A 00
        Offset 40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset D0: 22 42 30 02 09 FF FF 01 60 60 AA 10 03 07 07 23
        Offset E0: 23 47 15 A0 00 00 00 00 55 00 55 05 00 00 00 00
        Offset F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        
        B00 D02 F00: SiS 85C503/5513/5595/961/962/963 PCI-ISA Bridge
        
        Offset 00: 39 10 08 00 0F 00 00 02 25 00 01 06 00 00 80 00
        Offset 10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 40: 93 8B 80 8A 8B 00 21 D9 10 00 00 00 11 30 04 01
        Offset 50: 11 38 02 01 20 0B 20 0B 00 00 12 00 05 05 B6 00
        Offset 60: 83 85 80 8C FF C1 10 12 09 80 00 46 D7 00 02 11
        Offset 70: 00 00 FF FF 00 08 00 0C 00 00 00 80 02 00 00 00
        Offset 80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 90: FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset C0: 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 41
        Offset D0: 20 05 00 01 22 62 30 00 85 00 80 3B AA AA AA AA
        Offset E0: 40 00 00 D8 7C 00 44 00 01 00 00 00 00 00 00 00
        Offset F0: 0A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        
        B00 D02 F01: SiS SMBus Controller
        
        Offset 00: 39 10 16 00 01 00 80 02 00 00 05 0C 00 00 00 00
        Offset 10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 20: 01 0C 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 30: 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00
        Offset 40: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        
        B00 D02 F05: SiS 85C513 IDE Controller
        
        Offset 00: 39 10 13 55 05 00 00 02 00 80 01 01 00 80 00 00
        Offset 10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 20: 01 FF 00 00 00 00 00 00 00 00 00 00 49 18 13 55
        Offset 30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 40: 00 00 00 00 00 00 00 00 20 00 06 00 00 00 00 00
        Offset 50: F2 00 F3 80 2A 96 D5 C0 00 00 00 00 00 00 00 00
        Offset 60: FB FF FB FF 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 70: 17 21 06 04 00 00 00 00 56 23 06 04 56 23 06 04
        Offset 80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        Offset E0: 00 00 00 00
        
        Gość: Kolobos Re: proszę o pomoc IP: *.warszawa.sdi.tpnet.pl 24.06.05, 00:28
        
        50 stopni to troche duzo ale moze byc.Ram tez juz sprawdzony?
        
        Gość: vrinda Re: proszę o pomoc IP: *.neoplus.adsl.tpnet.pl 25.06.05, 06:55
        
        Witaj!
        Trochę to trwalo ale w końcu sprawdziłam Ram
        i jest ok.
        Tak sobie myślę, że skoro jest 50 stopni to może np. czasami jest
        wyższa i wtedy się wyłącza.
        Jak na razie wszystko działa bez zarzutu wręcz doskonale.
        Avast zainstalowany z a Twoją namową jest super, jakiś taki dla mnie bardziej
        do pojęcia, przyjazdniejszy i skuteczniejszy.
        Bardzo Ci za pomoc dziękuję i jestem bardzo wdzięczna.
        Zamierzam nabyć leg.Windowsa.
        Wtedy wszystko zrobię tak jak tu piszesz i myślę, że wszystko będzie działało
        cudnie.
        Pozdrawiam:)
        
        Gość: vrinda Re: proszę o pomoc IP: *.neoplus.adsl.tpnet.pl 25.06.05, 06:57
        
        Czy w związku z tą dość wysoką temperaturą powinnam coś zrobić z komputerem?
        Dorzucić mu jakiś lepszy, mocniejszy wentylatorek?
        
        Gość: Kolobos Re: proszę o pomoc IP: *.warszawa.sdi.tpnet.pl 25.06.05, 10:55
        
        Moze wystarczy wymienic paste termoprzewodzaca miedzy procesorem,a radiatorem.
        
        Gość: vrinda Re: proszę o pomoc IP: *.neoplus.adsl.tpnet.pl 27.06.05, 13:21
        
        Witaj Kolobos!
        Znów mi się zaczął wyłączać. Sprawdzilam temperaturę no i kedy jest tak ciepło
        to wzrosła do 55-57 stopni. Może to dlatego się wyłącza?
        Ile może być tak bezpiecznie?
        Ale na dodatek abym miala więcej problemów wyskakuje mi taki komunikat.
        Po tym jak się zresetuje samoistnie jest ten komunikat.
        "Sterownik ekranu Radeon 9200 Series wydaje się ponosić odpowiedzialność za
        brak stabilności systemu"
        i "sterownik urzadzenia ekranowego nie może zakończyć operacji rysowania"
        Jak myślisz o co w tym wszystkim chodzi i co ja biedniutka mogę zrobić?
        Pozdrawiam
        
        kalinowski11 Re: proszę o pomoc 27.06.05, 13:33
        
        Może uaktualnij sterowniki do karty graficznej .
        
        www2.ati.com/drivers/5-6_xp-2k_dd_cp_wdm_23864.exe
        
        Tylko że Ati rekomenduje XP z SP2 . Pozdrawiam .
        
        Gość: vrinda Re: proszę o pomoc IP: *.neoplus.adsl.tpnet.pl 27.06.05, 19:11
        
        Zaktualizowalam.
        Bez SP2.
        Zobaczę czy rozwiąże to problem.
        Jak nie to będę czekać z jeszcze większym utesknieniem na extra kaskę
        żeby w końcu nabyć leg.XP.
        Pozdrawiam i dziekuję.
        Aha, i jeszcze raz zapytam czy uważasz, że to nie wina temperatury ok.57 stopni?
        Czy taka jeszcze jest w granicach normy?
        Bo nie wiem czy podejmować jakieś kroki aby ją obniżać.
        Nie ukrywam, że chętnie bym tego nie ruszała (kasa) ale jeszcze trzeba...
        Potrzebuję komputera do pracy i musze o niego dbać.
        POzdrawim raz jeszcze:)
Gość: vrinda Proszę o sprawdzenie loga IP: *.neoplus.adsl.tpnet.pl 01.07.05, 19:53

Proszę o sprawdzenie loga.
Troszkę experymentowałam i nie wiem czy nie narozrabiałam.
Bardzo dziękuję i pozdrawiam

Logfile of HijackThis v1.99.1
Scan saved at 19:52:05, on 2005-07-01
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\System32\Ati2evxx.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
F:\WINDOWS\system32\Ati2evxx.exe
F:\WINDOWS\Explorer.EXE
F:\WINDOWS\system32\RunDll32.exe
F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
F:\Program Files\ATI Technologies\ATI HydraVision\HydraDM.exe
F:\Program Files\Winamp\Winampa.exe
F:\Program Files\Microsoft AntiSpyware\gcasServ.exe
F:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
F:\Program Files\Alwil Software\Avast4\ashServ.exe
F:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
F:\WINDOWS\system32\ctfmon.exe
F:\Program Files\Gadu-Gadu\gg.exe
F:\Program Files\Common Files\ARS Company\Agent\Agent.exe
F:\Program Files\Messenger\msmsgs.exe
F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
F:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
F:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
F:\Program Files\Alwil Software\Avast4\ashWebSv.exe
F:\Program Files\Internet Explorer\IEXPLORE.EXE
F:\WINDOWS\system32\wuauclt.exe
F:\Documents and Settings\Marlena\Moje dokumenty\HijackThis1991.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
F:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ATIPTA] F:\Program Files\ATI Technologies\ATI Control
Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SiSUSBRG] F:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [HydraVisionDesktopManager] F:\Program Files\ATI
Technologies\ATI HydraVision\HydraDM.exe
O4 - HKLM\..\Run: [KonektorTP] "f:\program files\konektortp\konektortp.exe" tray
O4 - HKLM\..\Run: [CloneCDTray] "F:\Program
Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [WinampAgent] "F:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NeroCheck] F:\WINDOWS\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [gcasServ] "F:\Program Files\Microsoft
AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [avast!] F:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "F:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [AMP Agent] F:\Program Files\Common Files\ARS
Company\Agent\Agent.exe
O4 - HKCU\..\Run: [MSMSGS] "F:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: InterVideo WinCinema Manager.lnk = F:\Program
Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O8 - Extra context menu item: E&ksport do programu Microsoft Excel -
res://F:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
F:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-
00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .mid: F:\Program Files\Internet
Explorer\PLUGINS\npqtplugin2.dll
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) -
skaner.mks.com.pl/SkanerOnline.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner -
F:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - F:\WINDOWS\System32
\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - F:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - F:\Program Files\Alwil
Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - F:\Program Files\Alwil
Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - F:\Program Files\Alwil
Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - F:\Program
Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
- Gość: Kolobos Re: Proszę o sprawdzenie loga IP: *.warszawa.sdi.tpnet.pl 01.07.05, 20:16
  
  Wyglada ok z tego co widze :-)
  - Gość: vrinda Re: Proszę o sprawdzenie loga IP: *.neoplus.adsl.tpnet.pl 02.07.05, 06:13
    
    Wielkie dzięki-pozdrawiam ;)

Najnowsze z forum Wirusy, trojany, spyware

Zaloguj się