Forum Komputery Wirusy, trojany, spyware
ZMIEŃ
    Dodaj do ulubionych

    Proszę o sprawdzenie loga

    IP: *.internetdsl.tpnet.pl 25.12.05, 18:43
    Logfile of HijackThis v1.99.1
    Scan saved at 18:38:29, on 2005-12-25
    Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\SYSTEM32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
    C:\PROGRA~1\SPAMEX~1\oeSpamExtractLdr.exe
    C:\Program Files\Winamp\winampa.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\WINDOWS\system32\r?ndll32.exe
    C:\PROGRA~1\Save\Save.exe
    C:\Program Files\adrp\ueru.exe
    C:\Program Files\WLAN\WConfig\WConfig.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\Gadu-Gadu\gg.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\a\Pulpit\hijackthis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
    www.accoona.com/search_assistant/accoona_search_assistant.jsp?&utm_id=400055&utm_content=leftnav&utm_source=wdz3&utm_medium=bund&utm_campaign=wdz0805
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
    www.accoona.com
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = onet.pl/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    www.accoona.com/search_assistant/accoona_search_assistant.jsp?&utm_id=400055&utm_content=leftnav&utm_source=wdz3&utm_medium=bund&utm_campaign=wdz0805
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
    www.accoona.com/search?q=%s
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - Default URLSearchHook is missing
    F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
    O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} -
    C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll (file missing)
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
    C:\Program Files\Adobe\Acrobat 5.0 CE\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {0BAB0442-A2B6-CE6D-FE8B-C027426B88AC} -
    C:\WINDOWS\system32\xaceyoj.dll (file missing)
    O2 - BHO: IE5BarLauncherBHO Class - {1ADBCCE8-CF84-441E-9B38-AFC7A19C06A4} -
    C:\Program Files\eZshopper\BarLcher.dll (file missing)
    O2 - BHO: Give4Free Plugin Installer - {208E7E77-507A-4649-B0C9-D39E9049C7A2}
    - C:\Program Files\Give4Free Plugin\ibho1.dll
    O2 - BHO: (no name) - {3B863440-8F8E-FF2C-D3B3-F00A042FA594} -
    C:\WINDOWS\system32\xaceyoj.dll (file missing)
    O2 - BHO: PBlockadeHelper Class - {4115122B-85FF-4DD3-9515-F075BEDE5EB5} -
    C:\Program Files\Oemji\Toolbar\PopupBlocker\PBHelper.dll (file missing)
    O2 - BHO: URLLink - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program
    Files\NewDotNet\newdotnet6_98.dll
    O2 - BHO: LinkTracker Class - {85A77577-A8CA-41b7-AA1E-DDAD4C0B12B1} -
    C:\WINDOWS\system32\hlwin.dll (file missing)
    O2 - BHO: Accoona Search Assistant - {944864A5-3916-46E2-96A9-A2E84F3F1208} -
    C:\Program Files\Accoona\ASearchAssist.dll (file missing)
    O2 - BHO: OemjiSearchPlus - {D240DC29-C093-4388-B71F-A7103C796B0C} -
    C:\Program Files\Oemji\OemjiSearchPlus\OemjiPls.dll (file missing)
    O3 - Toolbar: (no name) - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - (no file)
    O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} -
    C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll (file missing)
    O3 - Toolbar: Oemji - {804DB5C7-31E6-4885-850A-F1941B58A4C7} - C:\Program
    Files\Oemji\Toolbar\OemjiSrc.dll (file missing)
    O3 - Toolbar: eZ$hopper V1.20 -
    {3D782BB3-F2A5-11D3-BF4C-000000000000} - C:\Program
    Files\eZshopper\BarLcher.dll (file missing)
    O3 - Toolbar: Accoona - {364B6276-C6C1-40B6-A6D7-6C48871FD707} - C:\Program
    Files\Accoona\atoolbar.dll (file missing)
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE
    C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE
    C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
    Files\Java\jre1.5.0_04\bin\jusched.exe
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility]
    C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet
    Optimizer\optimize.exe"
    O4 - HKLM\..\Run: [SpamExtract] C:\PROGRA~1\SPAMEX~1\oeSpamExtractLdr.exe
    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
    O4 - HKLM\..\Run: [Media Gateway] C:\Program Files\Media Gateway\MediaGateway.exe
    O4 - HKLM\..\Run: [SurfAccuracy] C:\Program Files\SurfAccuracy\SAcc.exe
    O4 - HKLM\..\Run: [New.net Startup] rundll32
    C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,ClientStartup -s
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\RunServices: [Danton3] C:\WINDOWS\system32\Server.exe /lama
    O4 - HKCU\..\Run: [Ijcpi] C:\WINDOWS\system32\r?ndll32.exe
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash
    /minimized
    O4 - HKCU\..\Run: [WhenUSave] "C:\PROGRA~1\Save\Save.exe"
    O4 - HKCU\..\Run: [Eaad] "C:\Program Files\adrp\ueru.exe" -vt ndrv
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
    Office\Office\OSA9.EXE
    O4 - Global Startup: WConfig.lnk = ?
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
    C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console -
    {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
    Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra button: eZ$hopper - {BFA03761-5565-41b3-93D9-82B354C0A8EC} -
    SHDOCVW.DLL (file missing)
    O9 - Extra 'Tools' menuitem: eZ$hopper -
    {BFA03761-5565-41b3-93D9-82B354C0A8EC} - SHDOCVW.DLL (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
    C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger -
    {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Hijacked Internet access by New.Net
    O10 - Hijacked Internet access by New.Net
    O10 - Hijacked Internet access by New.Net
    O10 - Hijacked Internet access by New.Net
    O10 - Hijacked Internet access by New.Net
    O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} -
    static.windupdates.com/cab/MusicUnlimited/ie/bridge-c5.cab
    O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} -
    static.windupdates.com/cab/MediaAccess/ie/bridge-c5.cab
    O16 - DPF: {3D8700FB-86A4-4CB4-B738-6F0FC016
    Obserwuj wątek
      • Gość: Bartek Re: Proszę o sprawdzenie loga IP: *.internetdsl.tpnet.pl 25.12.05, 19:00
        dodam że komp sie zawiesza co jakieś 4godziny nawet jak nic nierobie:/
        • Gość: k Re: Proszę o sprawdzenie loga IP: *.warszawa.sdi.tpnet.pl 25.12.05, 19:04
          Sprawdz jaka temperature ma procesor, nie zaszkodzi tez sprawdzic ram memtestm
          (www.memtest.org)
      • Gość: k Re: Proszę o sprawdzenie loga IP: *.warszawa.sdi.tpnet.pl 25.12.05, 19:02
        W menadzerze zadan zakoncz:
        C:\WINDOWS\system32\r?ndll32.exe
        C:\PROGRA~1\Save\Save.exe
        C:\Program Files\adrp\ueru.exe
        Usun katalog Save i adrp oraz plik r?ndll32.exe tylko nie pomyl go z
        rundll32.exe!

        W hijackthis usun:
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
        www.accoona.com/search_assistant/accoona_search_assistant.jsp?
        &utm_id=400055&utm_content=leftnav&utm_source=wdz3&utm_medium=bund&utm_campaign=
        wdz0805
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
        www.accoona.com
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant =
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
        www.accoona.com/search_assistant/accoona_search_assistant.jsp?
        &utm_id=400055&utm_content=leftnav&utm_source=wdz3&utm_medium=bund&utm_campaign=
        wdz0805
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
        R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
        www.accoona.com/search?q=%s
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
        R3 - Default URLSearchHook is missing
        O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} -
        C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll (file missing)
        O2 - BHO: (no name) - {0BAB0442-A2B6-CE6D-FE8B-C027426B88AC} -
        C:\WINDOWS\system32\xaceyoj.dll (file missing)
        O2 - BHO: IE5BarLauncherBHO Class - {1ADBCCE8-CF84-441E-9B38-AFC7A19C06A4} -
        C:\Program Files\eZshopper\BarLcher.dll (file missing)
        O2 - BHO: Give4Free Plugin Installer - {208E7E77-507A-4649-B0C9-D39E9049C7A2}
        - C:\Program Files\Give4Free Plugin\ibho1.dll
        O2 - BHO: (no name) - {3B863440-8F8E-FF2C-D3B3-F00A042FA594} -
        C:\WINDOWS\system32\xaceyoj.dll (file missing)
        O2 - BHO: PBlockadeHelper Class - {4115122B-85FF-4DD3-9515-F075BEDE5EB5} -
        C:\Program Files\Oemji\Toolbar\PopupBlocker\PBHelper.dll (file missing)
        O2 - BHO: URLLink - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program
        Files\NewDotNet\newdotnet6_98.dll
        O2 - BHO: LinkTracker Class - {85A77577-A8CA-41b7-AA1E-DDAD4C0B12B1} -
        C:\WINDOWS\system32\hlwin.dll (file missing)
        O2 - BHO: Accoona Search Assistant - {944864A5-3916-46E2-96A9-A2E84F3F1208} -
        C:\Program Files\Accoona\ASearchAssist.dll (file missing)
        O2 - BHO: OemjiSearchPlus - {D240DC29-C093-4388-B71F-A7103C796B0C} -
        C:\Program Files\Oemji\OemjiSearchPlus\OemjiPls.dll (file missing)
        O3 - Toolbar: (no name) - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - (no file)
        O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} -
        C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll (file missing)
        O3 - Toolbar: Oemji - {804DB5C7-31E6-4885-850A-F1941B58A4C7} - C:\Program
        Files\Oemji\Toolbar\OemjiSrc.dll (file missing)
        O3 - Toolbar: eZ$hopper V1.20 -
        {3D782BB3-F2A5-11D3-BF4C-000000000000} - C:\Program
        Files\eZshopper\BarLcher.dll (file missing)
        O3 - Toolbar: Accoona - {364B6276-C6C1-40B6-A6D7-6C48871FD707} - C:\Program
        Files\Accoona\atoolbar.dll (file missing)
        O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet
        Optimizer\optimize.exe" <- usun katalog Internet...
        O4 - HKLM\..\Run: [SpamExtract] C:\PROGRA~1\SPAMEX~1\oeSpamExtractLdr.exe
        O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe <-
        usun katalog Media...
        O4 - HKLM\..\Run: [Media Gateway] C:\Program Files\Media
        Gateway\MediaGateway.exe <- usun katalog Media...
        O4 - HKLM\..\Run: [SurfAccuracy] C:\Program Files\SurfAccuracy\SAcc.exe <-
        odinstaluj i usun katalos Surf...
        O4 - HKLM\..\Run: [New.net Startup] rundll32
        C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,ClientStartup -s <- odinstaluj Newdotnet
        O4 - HKLM\..\RunServices: [Danton3] C:\WINDOWS\system32\Server.exe /lama <-
        usun plik
        O4 - HKCU\..\Run: [Ijcpi] C:\WINDOWS\system32\r?ndll32.exe
        O4 - HKCU\..\Run: [WhenUSave] "C:\PROGRA~1\Save\Save.exe"
        O4 - HKCU\..\Run: [Eaad] "C:\Program Files\adrp\ueru.exe" -vt ndrv
        O9 - Extra button: eZ$hopper - {BFA03761-5565-41b3-93D9-82B354C0A8EC} -
        SHDOCVW.DLL (file missing)
        O9 - Extra 'Tools' menuitem: eZ$hopper -
        {BFA03761-5565-41b3-93D9-82B354C0A8EC} - SHDOCVW.DLL (file missing)
        O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} -
        static.windupdates.com/cab/MusicUnlimited/ie/bridge-c5.cab
        O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} -
        static.windupdates.com/cab/MediaAccess/ie/bridge-c5.cab


        Sprawdz plik C:\WINDOWS\system32\userinit.exe tym skanerem ->
        virusscan.jotti.org/ i napisz czy cos znalazl.

        Przeskanuj system tym:
        download.ewido.net/ewido-setup.exe <- zrob update przed skanowaniem, po
        przeskanowaniu odinstaluj.

        Po wszystkim wklej nowy log.
        • Gość: Bartek Re: Proszę o sprawdzenie loga IP: *.internetdsl.tpnet.pl 25.12.05, 20:02
          Logfile of HijackThis v1.99.1
          Scan saved at 20:03:06, on 2005-12-25
          Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\SYSTEM32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\spoolsv.exe
          C:\WINDOWS\system32\RUNDLL32.EXE
          C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
          C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
          C:\Program Files\Winamp\winampa.exe
          C:\WINDOWS\system32\rundll32.exe
          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          C:\WINDOWS\system32\r?ndll32.exe
          C:\Program Files\WLAN\WConfig\WConfig.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\WINDOWS\system32\nvsvc32.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          C:\Program Files\Mozilla Firefox\firefox.exe
          C:\Program Files\Gadu-Gadu\gg.exe
          C:\Documents and Settings\a\Pulpit\hijackthis\HijackThis.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = onet.pl/
          F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
          O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
          C:\Program Files\Adobe\Acrobat 5.0 CE\Reader\ActiveX\AcroIEHelper.ocx
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
          O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE
          C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
          O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
          Files\Java\jre1.5.0_04\bin\jusched.exe
          O4 - HKLM\..\Run: [HPDJ Taskbar Utility]
          C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
          O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
          O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
          O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          O4 - HKLM\..\Run: [New.net Startup] rundll32
          C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,ClientStartup -s
          O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash
          /minimized
          O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
          Office\Office\OSA9.EXE
          O4 - Global Startup: WConfig.lnk = ?
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
          C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
          O9 - Extra 'Tools' menuitem: Sun Java Console -
          {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
          Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
          C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger -
          {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O10 - Hijacked Internet access by New.Net
          O10 - Hijacked Internet access by New.Net
          O10 - Hijacked Internet access by New.Net
          O10 - Hijacked Internet access by New.Net
          O10 - Hijacked Internet access by New.Net
          O16 - DPF: {3D8700FB-86A4-4CB4-B738-6F0FC016AC7D} (MainControl Class) -
          arcaonline.arcabit.com/ArcaOnline.cab
          O16 - DPF: {42F2C9BA-614F-47C0-B3E3-ECFD34EED658} (Installer Class) -
          www.ysbweb.com/ist/softwares/v4.0/ysb_mp3.cab
          O16 - DPF: {5DA9D8E0-5A57-11CF-9E36-00C0930198C0} (Pegasus ImagN' 32-bit
          (Windowed) ActiveX Control v4.00) - kamera.zsme.pl/LNetCam.cab
          O16 - DPF: {99410CDE-6F16-42ce-9D49-3807F78F0287} (ClientInstaller Class) -
          www.180searchassistant.com/180saax.cab
          O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) -
          skaner.mks.com.pl/SkanerOnline.cab
          O18 - Filter: text/html - {03974811-C15F-462c-B6B0-2D2336AA57D0} -
          C:\WINDOWS\system32\hlwin.dll
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner -
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil
          Software\Avast4\ashServ.exe
          O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil
          Software\Avast4\ashMaiSv.exe" /service (file missing)
          O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil
          Software\Avast4\ashWebSv.exe" /service (file missing)
          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation -
          C:\WINDOWS\system32\nvsvc32.exe
          O23 - Service: Panda Process Protection Service (PavPrSrv) - Unknown owner -
          C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe (file missing)

          • Gość: k Re: Proszę o sprawdzenie loga IP: *.warszawa.sdi.tpnet.pl 25.12.05, 21:32
            Usun:
            O4 - HKLM\..\Run: [New.net Startup] rundll32
            C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,ClientStartup -s <- pisalem Ci juz zebys
            odinstalowal new.net, usun tez jego katalog
            O10 - Hijacked Internet access by New.Net <- sciagnij z google lspfix.exe i
            usun w nim newdotnet ale nic wiecej nie ruszaj.
            O16 - DPF: {42F2C9BA-614F-47C0-B3E3-ECFD34EED658} (Installer Class) -
            www.ysbweb.com/ist/softwares/v4.0/ysb_mp3.cab
            O16 - DPF: {5DA9D8E0-5A57-11CF-9E36-00C0930198C0} (Pegasus ImagN' 32-bit
            (Windowed) ActiveX Control v4.00) - kamera.zsme.pl/LNetCam.cab
            O16 - DPF: {99410CDE-6F16-42ce-9D49-3807F78F0287} (ClientInstaller Class) -
            www.180searchassistant.com/180saax.cab
            O18 - Filter: text/html - {03974811-C15F-462c-B6B0-2D2336AA57D0} -
            C:\WINDOWS\system32\hlwin.dll <- usun plik
            O23 - Service: Panda Process Protection Service (PavPrSrv) - Unknown owner -
            C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe (file
            missing) <- start -> uruchom -> cmd -> sc stop PavPrSrv oraz sc delete PavPrSrv

            Miales sprawdzic plik userinit i co? Zero rekacji z Twojej strony? Czemu musze
            wszystko pisac pare razy?
            • Gość: Bartek Re: Proszę o sprawdzenie loga IP: *.internetdsl.tpnet.pl 25.12.05, 21:58
              Dzięki i sory, zapomniałem Ci napisać ze sprawdziłem ten plik który kazałeś ale
              nic niewykryło :) Dzięki Pozdrawiam :)
    Inne wątki na temat:

    Najnowsze z forum Wirusy, trojany, spyware

    Nie masz jeszcze konta? Zarejestruj się

    Nakarm Pajacyka
    Osoby zamieszczające wypowiedzi naruszające prawo lub prawem chronione dobra osób trzecich mogą ponieść z tego tytułu odpowiedzialność karną lub cywilną. Regulamin
    Treści z serwisów internetowych Grupy Wyborcza.pl oraz serwisu tokfm.pl prezentujemy w ramach komercyjnej współpracy z ich wydawcami: Wyborcza sp. z o.o. oraz Grupą Radiową Agory sp. z o.o.