Forum Komputery Wirusy, trojany, spyware
ZMIEŃ
    Dodaj do ulubionych

    poprosze o spr loga

    IP: *.teleton.pl 26.12.05, 22:51
    jak w temacie:

    Logfile of HijackThis v1.99.1
    Scan saved at 22:46:37, on 2005-12-26
    Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\windows\System32\smss.exe
    C:\windows\system32\winlogon.exe
    C:\windows\system32\services.exe
    C:\windows\system32\lsass.exe
    C:\windows\system32\svchost.exe
    C:\windows\System32\svchost.exe
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
    C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
    C:\windows\Explorer.EXE
    C:\windows\system32\spoolsv.exe
    C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
    C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
    C:\windows\system32\svchost.exe
    C:\WINDOWS\inet20003\winlogon.exe
    C:\WINDOWS\ATK0100\HControl.exe
    C:\windows\system32\Rundll32.exe
    C:\windows\SOUNDMAN.EXE
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
    C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
    C:\Program Files\ASUS\NB Probe\NBProbe.exe
    C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe
    C:\Program Files\D-Tools\daemon.exe
    C:\windows\system32\ctfmon.exe
    C:\Program Files\Tlen.pl\tlen.exe
    C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
    C:\WINDOWS\system32\sistray.exe
    C:\WINDOWS\ATK0100\ATKOSD.exe
    C:\windows\inet20003\mm4.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
    C:\windows\system32\NOTEPAD.EXE
    C:\windows\inet20003\mm4.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\windows\system32\dllcache\IExplore.exe
    C:\Documents and Settings\f\Pulpit\hijackthis\hijackthis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
    c:\secure32.html
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
    c:\secure32.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
    F3 - REG:win.ini: run=C:\WINDOWS\inet20003\winlogon.exe
    O2 - BHO: - {1E6CE4CD-161B-4847-B8BF-E2EF72299D69} - C:\WINDOWS\system32\ib6.dll
    O2 - BHO: HBO Class - {5321E378-FFAD-4999-8C62-03CA8155F0B3} -
    C:\windows\inet20003\3.00.12.dll
    O2 - BHO: FlashFXP Helper for Internet Explorer -
    {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
    O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
    O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [IntelWireless] C:\Program
    Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
    O4 - HKLM\..\Run: [EOUApp] C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
    O4 - HKLM\..\Run: [NB Probe] C:\Program Files\ASUS\NB Probe\NBProbe.exe
    O4 - HKLM\..\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1
    O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe"
    -lang 1033
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [Microsoft Windows Session Manager Subsystem]
    C:\windows\smss.exe
    O4 - HKLM\..\Run: [Microsoft Windows Logon Process] C:\windows\winlogon.exe
    O4 - HKLM\..\Run: [xp_system] C:\WINDOWS\inet20003\winlogon.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
    "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [xp_system] C:\WINDOWS\inet20003\winlogon.exe
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common
    Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
    Office\Office10\OSA.EXE
    O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel -
    res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
    C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger -
    {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O20 - Winlogon Notify: IntelWireless - C:\Program
    Files\Intel\Wireless\Bin\LgNotify.dll
    O20 - Winlogon Notify: ssldr - ssldr32.dll (file missing)
    O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common
    Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: EvtEng - Intel Corporation - C:\Program
    Files\Intel\Wireless\Bin\EvtEng.exe
    O23 - Service: Windows Logon Process Service (MSWinLogonProcService) - Unknown
    owner - C:\WINDOWS\winlogon.exe" -service (file missing)
    O23 - Service: OwnershipProtocol - Intel Corporation - C:\Program
    Files\Intel\Wireless\Bin\OProtSvc.exe
    O23 - Service: RegSrvc - Intel Corporation - C:\Program
    Files\Intel\Wireless\Bin\RegSrvc.exe
    O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation
    - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB
    Probe\SPM\spmgr.exe
    O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program
    Files\Intel\Wireless\Bin\WLKeeper.exe

    Obserwuj wątek
      • Gość: k Re: poprosze o spr loga IP: *.warszawa.sdi.tpnet.pl 27.12.05, 11:25
        Zakoncz w menadzerze zadan:
        C:\WINDOWS\inet20003\winlogon.exe
        C:\windows\inet20003\mm4.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\inet20003\mm4.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\system32\dllcache\IExplore.exe
        C:\windows\system32\dllcache\IExplore.exe

        W hijackthis:

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
        c:\secure32.html
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
        c:\secure32.html
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
        c:\secure32.html
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
        c:\secure32.html <- usun plik
        F3 - REG:win.ini: run=C:\WINDOWS\inet20003\winlogon.exe <- usun katalog
        inet20003
        O2 - BHO: - {1E6CE4CD-161B-4847-B8BF-E2EF72299D69} - C:\WINDOWS\system32
        \ib6.dll <- usun plik
        O2 - BHO: HBO Class - {5321E378-FFAD-4999-8C62-03CA8155F0B3} -
        C:\windows\inet20003\3.00.12.dll
        O4- HKLM\..\Run: [Microsoft Windows Session Manager Subsystem]
        C:\windows\smss.exe <- usun plik
        O4 - HKLM\..\Run: [Microsoft Windows Logon Process] C:\windows\winlogon.exe <-
        usun plik
        O4 - HKLM\..\Run: [xp_system] C:\WINDOWS\inet20003\winlogon.exe
        O4 - HKCU\..\Run: [xp_system] C:\WINDOWS\inet20003\winlogon.exe <- usun katalog
        inet20003
        O20 - Winlogon Notify: ssldr - ssldr32.dll (file missing)
        O23 - Service: Windows Logon Process Service (MSWinLogonProcService) - Unknown
        owner - C:\WINDOWS\winlogon.exe" -service (file missing)

        I skan tym:
        download.ewido.net/ewido-setup.exe <- zrob update przed skanowaniem, po
        przeskanowaniu odinstaluj.

    Najnowsze z forum Wirusy, trojany, spyware

    Nie masz jeszcze konta? Zarejestruj się

    Nakarm Pajacyka
    Osoby zamieszczające wypowiedzi naruszające prawo lub prawem chronione dobra osób trzecich mogą ponieść z tego tytułu odpowiedzialność karną lub cywilną. Regulamin
    Treści z serwisów internetowych Grupy Wyborcza.pl oraz serwisu tokfm.pl prezentujemy w ramach komercyjnej współpracy z ich wydawcami: Wyborcza sp. z o.o. oraz Grupą Radiową Agory sp. z o.o.