# # # LOGFILE OF HIJACKTHIS # # # - prosze :) - Wirusy, trojany, spyware - Forum dyskusyjne

Gość: Klaudiusz IP: *.w86-196.abo.wanadoo.fr 04.11.05, 20:01

Logfile of HijackThis v1.99.1
Scan saved at 19:59:37, on 04/11/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\hpnra.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\PROGRA~1\WANADOO\TaskBarIcon.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\JEFFREY\Bureau\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
www.msn.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
www.msn.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,ProxyOverride = localhost
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} -
C:\PROGRA~1\WANADOO\SEARCH~1.DLL
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HP Network Registry Agent] C:\WINDOWS\System32\hpnra.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\GestMaj.exe
TaskBarIcon.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft
AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [SpySpotter System Defender] C:\Program Files\SpySpotter3
\Defender.exe -startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN
Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe
appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
Office\Office\OSA9.EXE
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program
Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel -
res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Tout Télécharger avec Net Transport -
C:\Program Files\Xi\NetTransport 2\NTAddList.html
O8 - Extra context menu item: Télécharger avec Net Transport - C:\Program
Files\Xi\NetTransport 2\NTAddLink.html
O12 - Plugin for .mp3: C:\Program Files\Internet
Explorer\PLUGINS\npqtplugin4.dll
O12 - Plugin for ôå: C:\Program Files\Internet
Explorer\PLUGINS\npqtplugin4.dll
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer
Class) - acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) -
skaner.mks.com.pl/SkanerOnline.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{D8028FD2-CD6F-4E16-A545-
1AE204518C47}: NameServer = 193.252.19.3,193.252.19.4
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O23 - Service: DefWatch - Symantec Corporation - C:\Program
Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France
Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec
Corporation - C:\Program Files\Symantec_Client_Security\Symantec
AntiVirus\Rtvscan.exe

Obserwuj wątek

Gość: Klaudiusz Re: # # # LOGFILE OF HIJACKTHIS # # # - prosze :) IP: *.w86-196.abo.wanadoo.fr 04.11.05, 20:37

to tak kontrolnie ... poprosze oczywiscie :)
dla czystego sumienia ;)

Logfile of HijackThis v1.99.1
Scan saved at 20:34:51, on 04/11/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\hpnra.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\PROGRA~1\WANADOO\TaskBarIcon.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\JEFFREY\Bureau\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
www.msn.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
www.msn.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} -
C:\PROGRA~1\WANADOO\SEARCH~1.DLL
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HP Network Registry Agent] C:\WINDOWS\System32\hpnra.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\GestMaj.exe
TaskBarIcon.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft
AntiSpyware\gcasServ.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe
appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
Office\Office\OSA9.EXE
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program
Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1
\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Tout Télécharger avec Net Transport - C:\Program
Files\Xi\NetTransport 2\NTAddList.html
O8 - Extra context menu item: Télécharger avec Net Transport - C:\Program
Files\Xi\NetTransport 2\NTAddLink.html
O12 - Plugin for .mp3: C:\Program Files\Internet
Explorer\PLUGINS\npqtplugin4.dll
O12 - Plugin for ôå: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) -
skaner.mks.com.pl/SkanerOnline.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{D8028FD2-CD6F-4E16-A545-1AE204518C47}:
NameServer = 193.252.19.3,193.252.19.4
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O23 - Service: DefWatch - Symantec Corporation - C:\Program
Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom -
C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec
Corporation - C:\Program Files\Symantec_Client_Security\Symantec
AntiVirus\Rtvscan.exe

Drzewko
Od najstarszego
Od najnowszego

Gość: Kolobos Re: # # # LOGFILE OF HIJACKTHIS # # # - prosze :) IP: *.warszawa.sdi.tpnet.pl 04.11.05, 20:08

O4 - HKLM\..\Run: [SpySpotter System Defender] C:\Program Files\SpySpotter3
\Defender.exe -startup <- odinstaluj SpySpotter, to falszywy program anty!

Reszta ok.
- Gość: Klaudiusz Re: # # # LOGFILE OF HIJACKTHIS # # # - prosze :) IP: *.w86-196.abo.wanadoo.fr 04.11.05, 20:37
  
  to tak kontrolnie ... poprosze oczywiscie :)
  dla czystego sumienia ;)
  
  Logfile of HijackThis v1.99.1
  Scan saved at 20:34:51, on 04/11/2005
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
  C:\WINDOWS\System32\FTRTSVC.exe
  C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
  C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
  C:\WINDOWS\Explorer.EXE
  C:\WINDOWS\system32\fxssvc.exe
  C:\WINDOWS\System32\igfxtray.exe
  C:\WINDOWS\System32\hkcmd.exe
  C:\WINDOWS\SOUNDMAN.EXE
  C:\WINDOWS\AGRSMMSG.exe
  C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  C:\WINDOWS\System32\hpnra.exe
  C:\WINDOWS\system32\wscntfy.exe
  C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
  C:\PROGRA~1\WANADOO\TaskBarIcon.exe
  C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
  C:\WINDOWS\system32\ctfmon.exe
  C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
  C:\PROGRA~1\Wanadoo\ComComp.exe
  C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
  C:\PROGRA~1\Wanadoo\Toaster.exe
  C:\PROGRA~1\Wanadoo\Inactivity.exe
  C:\PROGRA~1\Wanadoo\PollingModule.exe
  C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
  C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
  C:\WINDOWS\system32\wuauclt.exe
  C:\Documents and Settings\JEFFREY\Bureau\hijackthis\HijackThis.exe
  
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
  www.msn.fr/
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
  www.msn.fr/
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
  R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} -
  C:\PROGRA~1\WANADOO\SEARCH~1.DLL
  O4 - HKLM\..\Run: [LaunchApp] Alaunch
  O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
  O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
  O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
  O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
  O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
  O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  O4 - HKLM\..\Run: [HP Network Registry Agent] C:\WINDOWS\System32\hpnra.exe
  O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
  O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
  O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\GestMaj.exe
  TaskBarIcon.exe
  O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft
  AntiSpyware\gcasServ.exe"
  O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
  O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe
  appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
  O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
  Office\Office\OSA9.EXE
  O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program
  Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1
  \MICROS~2\Office10\EXCEL.EXE/3000
  O8 - Extra context menu item: Tout Télécharger avec Net Transport - C:\Program
  Files\Xi\NetTransport 2\NTAddList.html
  O8 - Extra context menu item: Télécharger avec Net Transport - C:\Program
  Files\Xi\NetTransport 2\NTAddLink.html
  O12 - Plugin for .mp3: C:\Program Files\Internet
  Explorer\PLUGINS\npqtplugin4.dll
  O12 - Plugin for ôå: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll
  O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
  acs.pandasoftware.com/activescan/as5free/asinst.cab
  O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) -
  skaner.mks.com.pl/SkanerOnline.cab
  O17 - HKLM\System\CCS\Services\Tcpip\..\{D8028FD2-CD6F-4E16-A545-1AE204518C47}:
  NameServer = 193.252.19.3,193.252.19.4
  O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
  O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
  O23 - Service: DefWatch - Symantec Corporation - C:\Program
  Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
  O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom -
  C:\WINDOWS\System32\FTRTSVC.exe
  O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec
  Corporation - C:\Program Files\Symantec_Client_Security\Symantec
  AntiVirus\Rtvscan.exe
  - neder Re: # # # LOGFILE OF HIJACKTHIS # # # - prosze :) 04.11.05, 21:53
    
    wygląda już ok
    pzdr
    - Gość: Klaudiusz Re: # # # LOGFILE OF HIJACKTHIS # # # - prosze :) IP: *.w86-196.abo.wanadoo.fr 04.11.05, 22:05
      
      dziekuje cie :*
      - Gość: m Re: # # # LOGFILE OF HIJACKTHIS # # # - prosze :) IP: *.neoplus.adsl.tpnet.pl 04.11.05, 22:11
        
        Kolobosa teżbyś tak ucałował?? :P
        
        Gość: Klaudiusz Re: # # # LOGFILE OF HIJACKTHIS # # # - prosze :) IP: *.w86-196.abo.wanadoo.fr 04.11.05, 22:22
        
        niee :p bop Kolobos to ( chyba i mam nadzieje ;)) ze facet a ja gustuje w
        kobitkach :D

# # # LOGFILE OF HIJACKTHIS # # # - prosze :)

Najnowsze z forum Wirusy, trojany, spyware

Zaloguj się