log - czy devldr32 jest w systemie ??

[Gość: ibisz]

A JEZELI NIE TO CO ROZWALA MI NET??

Logfile of HijackThis v1.99.1
Scan saved at 10:40:42, on 2005-10-05
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\Explorer.EXE
F:\WINDOWS\system32\spoolsv.exe
F:\Program Files\Avast4\aswUpdSv.exe
F:\Program Files\Avast4\ashServ.exe
F:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
F:\WINDOWS\system32\nvsvc32.exe
F:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
F:\WINDOWS\system32\RUNDLL32.EXE
F:\PROGRA~1\Avast4\ashDisp.exe
F:\Program Files\wpkontakt\wpkontakt.exe
F:\Program Files\Messenger\msmsgs.exe
F:\Program Files\Avast4\ashMaiSv.exe
F:\WINDOWS\system32\devldr32.exe
F:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
F:\Program Files\Avast4\ashWebSv.exe
F:\Program Files\Internet Explorer\iexplore.exe
F:\Program Files\totalcmd\TOTALCMD.EXE
F:\!!!!\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
www.interia.pl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\system32
\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE F:\WINDOWS\system32
\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] F:\PROGRA~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [wpkontakt] F:\Program Files\wpkontakt\wpkontakt.exe -
autostart
O4 - HKCU\..\Run: [MSMSGS] "F:\Program Files\Messenger\msmsgs.exe" /background
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
F:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-
00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) -
skaner.mks.com.pl/SkanerOnline.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7C3EDA8E-2B69-4D7D-90A6-
40EC23ADEA66}: NameServer = 192.168.100.1
O18 - Protocol: wpmsg - {2E0AC5A0-3597-11D6-B3ED-0001021DC1C3} - F:\Program
Files\wpkontakt\url_wpmsg.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner -
F:\Program Files\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - F:\Program Files\Avast4
\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - F:\Program Files\Avast4
\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - F:\Program Files\Avast4
\ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
Corporation - F:\Program Files\Common Files\InstallShield\Driver\11\Intel 32
\IDriverT.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies -
F:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation -
F:\WINDOWS\system32\nvsvc32.exe

PROSZE O POMOC !!!!!!!!!!!!!!!!!!!!

[Gość: Kolobos]

Co prawda masz w procesach:
F:\WINDOWS\system32\devldr32.exe
Ale w logu nie widac, sprawdz ten plik tym:
virusscan.jotti.org/
Jak bedzie ok to zostaw, jak nie to wklej log z:
www.silentrunners.org/Silent%20Runners.vbs
zrobiony w trybie awaryjnym.