Forum Komputery Wirusy, trojany, spyware
ZMIEŃ
    Dodaj do ulubionych

    prosze o sprawdzenie

    IP: *.chello.pl 18.11.05, 23:33
    Logfile of HijackThis v1.99.1
    Scan saved at 23:00:13, on 2005-11-18
    Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\ibmpmsvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\Norton Internet Security\NISUM.EXE
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\Program Files\Norton Internet Security\ccPxySvc.exe
    C:\WINDOWS\system32\inetsrv\inetinfo.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\WINDOWS\system32\tp4serv.exe
    C:\PROGRA~1\ThinkPad\UTILIT~1\TP98TRAY.EXE
    C:\WINDOWS\system32\RunDll32.exe
    C:\Program Files\ThinkPad\ConnectUtilities\QCTRAY.EXE
    C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINDOWS\System32\QCONSVC.EXE
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\PROGRA~1\NEOSTR~1\CnxMon.exe
    C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
    C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
    C:\WINDOWS\System32\snmp.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\windows\system32\rlvknlg.exe
    C:\WINDOWS\system32\mqsvc.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Adobe\Acrobat 5.0 CE\Distillr\AcroTray.exe
    C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
    C:\Program Files\AVerTV\QuickTV.exe
    C:\Program Files\WinZip\WZQKPICK.EXE
    C:\WINDOWS\system32\mqtgsvc.exe
    C:\Program Files\Neostrada TP\NeostradaTP.exe
    C:\Program Files\Neostrada TP\ComComp.exe
    C:\Program Files\Neostrada TP\Watch.exe
    C:\Program Files\AVerTV\AVerTV.exe
    C:\Program Files\Real\RealPlayer\RealPlay.exe
    C:\Program Files\Gadu-Gadu\gg.exe
    C:\DOCUME~1\Zytka\USTAWI~1\Temp\Rar$EX02.218\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
    google.icq.com/search/search_frame.php
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
    google.icq.com
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
    www.onet.pl/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada
    TP
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} -
    C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL
    R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} -
    C:\Program Files\ICQToolbar\toolbaru.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
    C:\Program Files\Adobe\Acrobat 5.0 CE\Acrobat\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1
    \SPYBOT~1\SDHelper.dll
    O2 - BHO: IEHelperObj Class - {6754A456-BAD9-11D4-93D3-00B0D03A2F91} -
    C:\PROGRA~1\Odigo\Bin\OdigoBHO.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program
    Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} -
    C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} -
    C:\Program Files\ICQToolbar\toolbaru.dll
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
    O4 - HKLM\..\Run: [TrackPointSrv] tp4serv.exe
    O4 - HKLM\..\Run: [TPTRAY] C:\PROGRA~1\ThinkPad\UTILIT~1\TP98TRAY.EXE
    O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1
    \pwrmonit.dll,StartPwrMonitor
    O4 - HKLM\..\Run: [QCTRAY] C:\Program
    Files\ThinkPad\ConnectUtilities\QCTRAY.EXE
    O4 - HKLM\..\Run: [QCWLICON] C:\Program
    Files\ThinkPad\ConnectUtilities\QCWLICON.EXE
    O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
    O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec
    Shared\ccApp.exe"
    O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec
    Shared\ccRegVfy.exe"
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1
    \SNDMon.exe /Consumer
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
    Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe
    O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe
    O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe
    O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
    O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program
    Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -
    atboottime
    O4 - HKLM\..\Run: [MKS_MENU] C:\Program Files\MKS\Bin\mks_menu.exe
    O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
    O4 - HKLM\..\Run: [OSS] C:\windows\system32\rlvknlg.exe -boot
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat
    5.0 CE\Distillr\AcroTray.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
    Office\Office10\OSA.EXE
    O4 - Global Startup: QuickTV.lnk = C:\Program Files\AVerTV\QuickTV.exe
    O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program
    Files\WinZip\WZQKPICK.EXE
    O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program
    Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
    O8 - Extra context menu item: E&ksport do programu Microsoft Excel -
    res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} -
    C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-
    00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {2DF91772-19DC-47AE-B52F-B8E2FE545625} (Spd2 Class) -
    www.lemontv.pl/lmctrls.cab
    O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) -
    skaner.mks.com.pl/SkanerOnline.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{FED62C4B-D7BA-422A-B3AD-
    AA94F9C78D43}: NameServer = 194.204.152.34 217.98.63.164
    O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32
    \Ati2evxx.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation -
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec
    Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Proxy Service (ccPxySvc) - Symantec Corporation -
    C:\Program Files\Norton Internet Security\ccPxySvc.exe
    O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\System32
    \ibmpmsvc.exe
    O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec
    Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton Internet Security Accounts Manager (NISUM) - Symantec
    Corporation - C:\Program Files\Norton Internet Security\NISUM.EXE
    O23 - Service: QCONSVC - Unknown owner - C:\WINDOWS\System32\QCONSVC.EXE
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation -
    C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec
    Corporation - C:\Program Files\Common Files\Sy
    Obserwuj wątek
      • neder Re: prosze o sprawdzenie 19.11.05, 11:27
        albo podszywasz sie pod Login_niedpostepny albo masz iwele kompów do sprawdzania...


        > C:\windows\system32\rlvknlg.exe -> plik usuwasz

        w HJ wywalasz:
        > O4 - HKLM\..\Run: [OSS] C:\windows\system32\rlvknlg.exe -boot


        Zbędne wpisy w autostarcie, m.in.:
        > O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
        > Files\Real\Update_OB\realsched.exe" -osboot
        > O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe
        > O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -
        > atboottime
        > O4 - HKLM\..\Run: [MKS_MENU] C:\Program Files\MKS\Bin\mks_menu.exe
        > O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
        > O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
        > O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat
        > 5.0 CE\Distillr\AcroTray.exe
        > O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
        > Office\Office10\OSA.EXE
        > O4 - Global Startup: QuickTV.lnk = C:\Program Files\AVerTV\QuickTV.exe
        > O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program
        > Files\WinZip\WZQKPICK.EXE -> jak dla mnie to miniomum. Nie ma potrzeby żeby
        startowało razem z systemem.


        Pomyśl tez o odinstalowaniu aplikacji neostrady (poprzez dodaj/usuń programy) i
        ustanowieniu połaczenia rręcznego. Jak to zrobić masz opisane w FAQ Forum
        Komputery. Ta aplikacja jhest zbędna, potrzebne sa tylko sterowniki do modemu,
        które po jej odinstalowaniu i tak zostają.

        PS. masz 2 antywirusy? Nortona i coś siedzi w autostarcie od mks?

        restart i nowy log.
        pzdr

        • login_niedostepny Re: prosze o sprawdzenie 19.11.05, 15:02
          sorry, zapomnialam napisac, ze to oczywiscie nie moj log tylko znajomej, ktora
          poprosila mnie o pomoc, ale zaczelam jzu sie w tym gubic troszke. Kazalam jej
          wywalic prawie wszystko z autostartu (przyslala mi 3(!) skriny z msconfig'a),
          oraz wylaczyc bufor drukowania (nie ma drukarki), mysle tez ze moglaby wywalic
          O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program
          Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
          O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} -
          C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-
          00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) -
          skaner.mks.com.pl/SkanerOnline.cab
          Chodzi o to ze gdzies jej "zginelo" prawie 2GB na dysku... Ok
          1.5 "znalazlysmy", ale jeszcze troche brakuje.
          Dzieki za pomoc:)
          • Gość: k Re: prosze o sprawdzenie IP: *.warszawa.sdi.tpnet.pl 19.11.05, 16:14
            Przywracanie systemu wylaczone?
            Pliki temp i ie temp wykasowane?
            Nortony odinstalowane?
            • login_niedostepny Re: prosze o sprawdzenie 19.11.05, 18:13
              tempy wywalone jakims cud-programikiem, podobno bardzo odciazyl kompa,
              przywracanie - nie wiem, zapytam. Poprosze ja o nowego loga i zobacze co tam
              jeszcze siedzi.
              Dzieki za pomoc!!
              • login_niedostepny Re: prosze o sprawdzenie 27.11.05, 11:29
                mozecie rzucic okiem teraz? dzieki:)!!

                Logfile of HijackThis v1.99.1
                Scan saved at 03:24:46, on 2005-11-27
                Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
                MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                Running processes:
                C:\WINDOWS\System32\smss.exe
                C:\WINDOWS\system32\winlogon.exe
                C:\WINDOWS\system32\services.exe
                C:\WINDOWS\system32\lsass.exe
                C:\WINDOWS\System32\ibmpmsvc.exe
                C:\WINDOWS\system32\svchost.exe
                C:\WINDOWS\System32\svchost.exe
                C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
                C:\Program Files\Norton Internet Security\NISUM.EXE
                C:\WINDOWS\System32\Ati2evxx.exe
                C:\Program Files\Norton Internet Security\ccPxySvc.exe
                C:\WINDOWS\system32\inetsrv\inetinfo.exe
                C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
                C:\Program Files\Norton AntiVirus\navapsvc.exe
                C:\WINDOWS\System32\QCONSVC.EXE
                C:\WINDOWS\System32\snmp.exe
                C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
                C:\WINDOWS\system32\mqsvc.exe
                C:\WINDOWS\system32\mqtgsvc.exe
                C:\WINDOWS\Explorer.EXE
                C:\PROGRA~1\NEOSTR~1\CnxMon.exe
                C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
                C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
                C:\Program Files\Common Files\Real\Update_OB\realsched.exe
                C:\WINDOWS\system32\ctfmon.exe
                C:\Program Files\Neostrada TP\NeostradaTP.exe
                C:\Program Files\Neostrada TP\ComComp.exe
                C:\Program Files\Neostrada TP\Watch.exe
                C:\Program Files\Gadu-Gadu\gg.exe
                C:\Program Files\eMule\emule.exe
                C:\Program Files\Real\RealPlayer\RealPlay.exe
                C:\DOCUME~1\Zytka\USTAWI~1\Temp\Rar$EX00.518\HijackThis.exe

                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
                google.icq.com/search/search_frame.php
                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
                google.icq.com
                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
                www.onet.pl/
                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TP
                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
                R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} -
                C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL
                R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} -
                C:\Program Files\ICQToolbar\toolbaru.dll
                O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
                C:\Program Files\Adobe\Acrobat 5.0 CE\Acrobat\ActiveX\AcroIEHelper.ocx
                O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1
                \SPYBOT~1\SDHelper.dll
                O2 - BHO: IEHelperObj Class - {6754A456-BAD9-11D4-93D3-00B0D03A2F91} -
                C:\PROGRA~1\Odigo\Bin\OdigoBHO.dll
                O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program
                Files\Norton AntiVirus\NavShExt.dll
                O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} -
                C:\Program Files\Norton AntiVirus\NavShExt.dll
                O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} -
                C:\Program Files\ICQToolbar\toolbaru.dll
                O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe
                O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
                O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program
                Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
                O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
                Files\Real\Update_OB\realsched.exe" -osboot
                O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program
                Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
                O8 - Extra context menu item: E&ksport do programu Microsoft Excel -
                res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} -
                C:\Program Files\Messenger\msmsgs.exe
                O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-
                00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                O15 - Trusted Zone: skaner.mks.com.pl
                O16 - DPF: {2DF91772-19DC-47AE-B52F-B8E2FE545625} (Spd2 Class) -
                www.lemontv.pl/lmctrls.cab
                O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) -
                skaner.mks.com.pl/SkanerOnline.cab
                O17 - HKLM\System\CCS\Services\Tcpip\..\{FED62C4B-D7BA-422A-B3AD-AA94F9C78D43}:
                NameServer = 194.204.152.34 217.98.63.164
                O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32
                \Ati2evxx.exe
                O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation -
                C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
                O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec
                Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
                O23 - Service: Symantec Proxy Service (ccPxySvc) - Symantec Corporation -
                C:\Program Files\Norton Internet Security\ccPxySvc.exe
                O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\System32
                \ibmpmsvc.exe
                O23 - Service: MkS_Vir Monitor (MksVirMonSvc) - Unknown owner - C:\Program
                Files\MKS\Bin\mksmonsv.exe (file missing)
                O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec
                Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
                O23 - Service: Norton Internet Security Accounts Manager (NISUM) - Symantec
                Corporation - C:\Program Files\Norton Internet Security\NISUM.EXE
                O23 - Service: QCONSVC - Unknown owner - C:\WINDOWS\System32\QCONSVC.EXE
                O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation -
                C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
                O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec
                Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
                O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program
                Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
                • Gość: k Re: prosze o sprawdzenie IP: *.warszawa.sdi.tpnet.pl 27.11.05, 12:35
                  Wywal aplikacje od neostrady:
                  forum.gazeta.pl/forum/72,2.html?f=34&w=15679891&a=15680440
                  Ta usluge mozesz wylaczyc i usunac:
                  > O23 - Service: MkS_Vir Monitor (MksVirMonSvc) - Unknown owner - C:\Program
                  > Files\MKS\Bin\mksmonsv.exe (file missing)

                  services.msc i hijackthis -> delete nt service.

                  Logow juz nie wklejaj.
                  • login_niedostepny Re: prosze o sprawdzenie 27.11.05, 18:58
                    dzieki:)
    Inne wątki na temat:

    Najnowsze z forum Wirusy, trojany, spyware

    Nie masz jeszcze konta? Zarejestruj się

    Nakarm Pajacyka
    Osoby zamieszczające wypowiedzi naruszające prawo lub prawem chronione dobra osób trzecich mogą ponieść z tego tytułu odpowiedzialność karną lub cywilną. Regulamin
    Treści z serwisów internetowych Grupy Wyborcza.pl oraz serwisu tokfm.pl prezentujemy w ramach komercyjnej współpracy z ich wydawcami: Wyborcza sp. z o.o. oraz Grupą Radiową Agory sp. z o.o.