Dodaj do ulubionych

Proszę sprawdź mi loga

IP: *.chello.pl 15.06.06, 15:58
Logfile of HijackThis v1.99.1
Scan saved at 15:55:22, on 2006-06-15
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\Program Files\Gigabyte\ET5\GUI.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\SPAMfighter\SFAgent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480
\Program\LogitechDesktopMessenger.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Jacek\Pulpit\hijackthis\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
www.onet.pl/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
F2 - REG:system.ini: Shell=explorer.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: WPCIE Class - {259CC600-C2B4-11d3-8754-008048C4AC6F} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1
\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [Skrót do strony właściwości High Definition Audio]
HDAudPropShortcut.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [EasyTuneV] C:\Program Files\Gigabyte\ET5\GUI.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Program
Files\SPAMfighter\SFAgent.exe" update delay 60
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480
\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [Skype] "C:\Program
Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program
Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
Office\Office\OSA9.EXE
O9 - Extra button: WPinacz - {42E79823-DFB9-11d3-875D-008048C4AC6F} -
C:\PROGRA~1\WIRTUA~1\Wpinacz\WPINAC~1.DLL
O9 - Extra 'Tools' menuitem: WPinacz Pokaż/Ukryj - {42E79823-DFB9-11d3-875D-
008048C4AC6F} - C:\PROGRA~1\WIRTUA~1\Wpinacz\WPINAC~1.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-
00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet
Explorer\Plugins\NPDocBox.dll
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility
Class) - security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer
Class) - acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) -
www.mks.com.pl/skaner/SkanerOnline.cab
O18 - Protocol: bw+0 - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {FD651A57-4065-4754-BC34-0388C90A660E} - C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-
Obserwuj wątek
    • Gość: k Re: Proszę sprawdź mi loga IP: *.warszawa.sdi.tpnet.pl 15.06.06, 22:22
      Odinstaluj Logitech Desktop Messenger, nastepnie usun w hjt wszystkie wpisy O18
      i dopiero wklej nowy log.
    • Gość: Clash Re: Proszę sprawdź mi loga IP: *.chello.pl 18.06.06, 11:50
      Nowy log(po ewido)Logfile of HijackThis v1.99.1
      Scan saved at 11:49:34, on 2006-06-18
      Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\SYSTEM32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\System32\igfxtray.exe
      C:\WINDOWS\System32\hkcmd.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\WINDOWS\ALCWZRD.EXE
      C:\Program Files\Gigabyte\ET5\GUI.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Gadu-Gadu\gg.exe
      C:\Program Files\Skype\Phone\Skype.exe
      C:\Program Files\Logitech\SetPoint\KEM.exe
      C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\Documents and Settings\Jacek\Pulpit\hijackthis\hijackthis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
      www.onet.pl/
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
      Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
      C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
      O2 - BHO: WPCIE Class - {259CC600-C2B4-11d3-8754-008048C4AC6F} - (no file)
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1
      \SPYBOT~1\SDHelper.dll
      O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
      O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
      O4 - HKLM\..\Run: [Skrót do strony właściwości High Definition Audio]
      HDAudPropShortcut.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
      O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
      O4 - HKLM\..\Run: [EasyTuneV] C:\Program Files\Gigabyte\ET5\GUI.exe
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
      O4 - HKCU\..\Run: [Skype] "C:\Program
      Files\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - Global Startup: Logitech SetPoint.lnk = C:\Program
      Files\Logitech\SetPoint\KEM.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
      Office\Office\OSA9.EXE
      O9 - Extra button: WPinacz - {42E79823-DFB9-11d3-875D-008048C4AC6F} -
      C:\PROGRA~1\WIRTUA~1\Wpinacz\WPINAC~1.DLL
      O9 - Extra 'Tools' menuitem: WPinacz Pokaż/Ukryj - {42E79823-DFB9-11d3-875D-
      008048C4AC6F} - C:\PROGRA~1\WIRTUA~1\Wpinacz\WPINAC~1.DLL
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
      C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-
      00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility
      Class) - security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
      acs.pandasoftware.com/activescan/as5free/asinst.cab
      O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) -
      www.mks.com.pl/skaner/SkanerOnline.cab
      O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner -
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil
      Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil
      Software\Avast4\ashMaiSv.exe" /service (file missing)
      O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil
      Software\Avast4\ashWebSv.exe" /service (file missing)
      O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner -
      C:\VIRUSfighter\Nvc\BIN\nipsvc.exe (file missing)


      • Gość: k Re: Proszę sprawdź mi loga IP: *.warszawa.sdi.tpnet.pl 18.06.06, 14:05
        Usun w hjt:
        O2 - BHO: WPCIE Class - {259CC600-C2B4-11d3-8754-008048C4AC6F} - (no file)

        Do tego usluga do kasacji (opis jak usuwac w faq):
        O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner -
        C:\VIRUSfighter\Nvc\BIN\nipsvc.exe (file missing)
        • Gość: Clash Re: Proszę sprawdź mi loga IP: *.aster.pl / *.aster.pl 18.06.06, 21:51
          Do tego usluga do kasacji (opis jak usuwac w faq):
          O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner -
          C:\VIRUSfighter\Nvc\BIN\nipsvc.exe (file missing)

          Sorka ale gdzie szukać "faq" aby to usunąć?
          • kolobos Re: Proszę sprawdź mi loga 18.06.06, 22:24
            W naglowku forum lub w przyklejonym poscie...
            • Gość: Clash Re: Proszę sprawdź mi loga IP: *.chello.pl 18.06.06, 22:46
              Za groma nie mogę znaleźć "faq".....
              • neder Re: Proszę sprawdź mi loga 18.06.06, 22:48
                To ja powtórzę:
                w nagłówku forum, albo w przyklejonym... nagłówek to to co można nazwać tez
                opisem forum. Na jego pierwszej stronie. Przyklejony to to co ma ikonkę
                szpileczki i wisi nad wszystkimi watkami na forum Wirusy. A wszystko to po to,
                żeby było go łatwo dojrzeć...
                pzdr
                • Gość: Clash Re: Proszę sprawdź mi loga IP: *.chello.pl 19.06.06, 07:30
                  Zrobiłem wszystko o co prosiliście (tak mi sie przynajmniej wydaje)ale tego 023
                  ostatniego nie moge usunąć.W każdym razie dziękuje za zaangażowanie i pozdroowka
                  Logfile of HijackThis v1.99.1
                  Scan saved at 07:29:23, on 2006-06-19
                  Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\SYSTEM32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\WINDOWS\System32\igfxtray.exe
                  C:\WINDOWS\System32\hkcmd.exe
                  C:\WINDOWS\SOUNDMAN.EXE
                  C:\WINDOWS\ALCWZRD.EXE
                  C:\Program Files\Gigabyte\ET5\GUI.exe
                  C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\Gadu-Gadu\gg.exe
                  C:\Program Files\Skype\Phone\Skype.exe
                  C:\Program Files\Logitech\SetPoint\KEM.exe
                  C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
                  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashServ.exe
                  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                  C:\Program Files\Internet Explorer\iexplore.exe
                  C:\Documents and Settings\Jacek\Pulpit\hijackthis\hijackthis.exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
                  www.onet.pl/
                  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
                  Settings,ProxyOverride = localhost
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
                  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
                  C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
                  O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1
                  \SPYBOT~1\SDHelper.dll
                  O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
                  O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
                  O4 - HKLM\..\Run: [Skrót do strony właściwości High Definition Audio]
                  HDAudPropShortcut.exe
                  O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                  O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
                  O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                  O4 - HKLM\..\Run: [EasyTuneV] C:\Program Files\Gigabyte\ET5\GUI.exe
                  O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                  O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
                  O4 - HKCU\..\Run: [Skype] "C:\Program
                  Files\Skype\Phone\Skype.exe" /nosplash /minimized
                  O4 - Global Startup: Logitech SetPoint.lnk = C:\Program
                  Files\Logitech\SetPoint\KEM.exe
                  O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
                  Office\Office\OSA9.EXE
                  O9 - Extra button: WPinacz - {42E79823-DFB9-11d3-875D-008048C4AC6F} -
                  C:\PROGRA~1\WIRTUA~1\Wpinacz\WPINAC~1.DLL
                  O9 - Extra 'Tools' menuitem: WPinacz Pokaż/Ukryj - {42E79823-DFB9-11d3-875D-
                  008048C4AC6F} - C:\PROGRA~1\WIRTUA~1\Wpinacz\WPINAC~1.DLL
                  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
                  C:\Program Files\Messenger\msmsgs.exe
                  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-
                  00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
                  O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility
                  Class) - security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
                  O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
                  acs.pandasoftware.com/activescan/as5free/asinst.cab
                  O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) -
                  www.mks.com.pl/skaner/SkanerOnline.cab
                  O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
                  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner -
                  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                  O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil
                  Software\Avast4\ashServ.exe
                  O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil
                  Software\Avast4\ashMaiSv.exe" /service (file missing)
                  O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil
                  Software\Avast4\ashWebSv.exe" /service (file missing)
                  O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner -
                  C:\VIRUSfighter\Nvc\BIN\nipsvc.exe (file missing)

                  • wiewia1 Re: Proszę sprawdź mi loga 19.06.06, 09:37
                    O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner -
                    C:\VIRUSfighter\Nvc\BIN\nipsvc.exe (file missing)

                    No więc z usługą robisz tak.

                    Panel sterowania=>Narzędzia administracyjne=>usługi. Znajdujesz usługę "Service: Norman API-hooking helper" Klikasz na nią dwa razy zatrzymujesz ją i ustawiasz na wyłączony. Następnie kasujesz folder z dysku C:\VIRUSfighter.

                    A tak poza tym czysto
                    • Gość: Clash Re: Proszę sprawdź mi loga IP: *.chello.pl 19.06.06, 10:44
                      Wielkie dzięki w szczególności:"k","kolobos","neder'
                      i "wiewia1".Pozroowka!!!!!!!!

Nie masz jeszcze konta? Zarejestruj się


Nakarm Pajacyka