prośba o sprawdzenie logu

03.02.07, 12:59
    • jan381 Re: prośba o sprawdzenie logu 03.02.07, 13:00
      Logfile of HijackThis v1.99.1
      Scan saved at 12:58:27, on 2007-02-03
      Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      E:\NARZĘDZIA\DISKEEPER PROFESSIONAL\DkService.exe
      E:\NARZĘDZIA\ewido anti-spyware 4.0\guard.exe
      C:\Program Files\Eset\nod32krn.exe
      C:\WINDOWS\system32\svchost.exe
      E:\NARZĘDZIA\DU Meter\DUMeter.exe
      C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
      C:\Program Files\PWN\Definicje\Bin\Starter.exe
      C:\Program Files\Eset\nod32kui.exe
      C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\Program Files\AutoConnect\AutoConnect.exe
      E:\NARZDZ~1\Speed-X\SpeedX.exe
      C:\PROGRA~1\INCRED~1\bin\IMApp.exe
      I:\odtwarzacze\ALLPlayer\UniSpiker-2.6\uni_spiker-2.6.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
      C:\Program Files\Windows Media Player\wmplayer.exe
      C:\Program Files\Tlen.pl\tlen.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTC08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZENG08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\system32\WISPTIS.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      E:\BitComet\BitComet.exe
      C:\Program Files\Opera\Opera.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
      I:\internet\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.eu.microsoft.com/poland/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
      O2 - BHO: XBTP00764 - {5D901040-C9C9-4162-8A60-2BECCD98B5A9} - C:\PROGRA~1\POKERT~1\PokerTB.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
      O2 - BHO: Expressivo - {85F685C3-20D9-4943-95E4-EB4224056C3F} - E:\NARZĘDZIA\Expressivo Demo\IH_iexplore.dll
      O3 - Toolbar: Expressivo - {85F685C3-20D9-4943-95E4-EB4224056C3F} - E:\NARZĘDZIA\Expressivo Demo\IH_iexplore.dll
      O4 - HKLM\..\Run: [DU Meter] E:\NARZĘDZIA\DU Meter\DUMeter.exe
      O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
      O4 - HKLM\..\Run: [DemonStarter] "C:\Program Files\PWN\Definicje\Bin\Starter.exe"
      O4 - HKLM\..\Run: [KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k
      O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
      O4 - HKLM\..\Run: [DiskeeperSystray] "E:\NARZĘDZIA\DISKEEPER PROFESSIONAL\DkIcon.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
      O4 - HKLM\..\RunOnce: [SWUPath] C:\Program Files\Hewlett-Packard\HP Software Update\shellExWin.exe -m
      O4 - HKCU\..\Run: [IncrediMail] "C:\PROGRA~1\INCRED~1\bin\IncMail.exe" /c
      O4 - HKCU\..\Run: [AutoConnect] "C:\Program Files\AutoConnect\AutoConnect.exe"
      O4 - HKCU\..\Run: [SpeedX] E:\NARZDZ~1\Speed-X\SpeedX.exe
      O4 - Startup: UniSpiker-2.6.lnk = ?
      O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
      O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://d:\EDUKACJA\MICROS~1\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
      O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\EDUKACJA\MICROS~1\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {FDDBE2B8-6602-4AD8-946D-94C5A32FA6C1} (GameDesire Pool 8) - 67.15.101.3/g_bin/pl/billard8_2_0_0_24.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{4C67F116-F63E-4F9F-82AF-86FC73DA966B}: NameServer = 194.204.152.34 217.98.63.164
      O17 - HKLM\System\CS1\Services\Tcpip\..\{4C67F116-F63E-4F9F-82AF-86FC73DA966B}: NameServer = 194.204.152.34 217.98.63.164
      O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
      O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: Diskeeper - Diskeeper Corporation - E:\NARZĘDZIA\DISKEEPER PROFESSIONAL\DkService.exe
      O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - E:\NARZĘDZIA\ewido anti-spyware 4.0\guard.exe
      O23 - Service: hpdj - HP - C:\DOCUME~1\WADEK~1\USTAWI~1\Temp\hpdj.exe
      O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
      O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe

      • Gość: Kolobos Re: prośba o sprawdzenie logu IP: *.escom.net.pl 03.02.07, 13:16
        Nie za duzo Ci sie tego otworzylo?
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTC08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZENG08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTW08.EXE

        W hjt usun:
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
        O2 - BHO: XBTP00764 - {5D901040-C9C9-4162-8A60-2BECCD98B5A9} - C:\PROGRA~1\POKERT~1\PokerTB.dll
        O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
Pełna wersja