Forum Komputery Wirusy, trojany, spyware
ZMIEŃ
    Dodaj do ulubionych

    proszę o sprawdzenie loga

    IP: *.is.net.pl 10.02.07, 13:05
    Bardzo długo uruchamia mi sie komp. i na początku chodzi bardzo
    wolno..później jak już sie "zagrzeje" to chodzi szybciej..nie wiem czy to
    jest wina jakiegoś wirusa czy złych ustawień..proszę o jakieś rady
    pozdrawiam Elzza

    Logfile of HijackThis v1.99.1
    Scan saved at 12:56:16, on 2007-02-10
    Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    D:\WINDOWS\System32\smss.exe
    D:\WINDOWS\system32\winlogon.exe
    D:\WINDOWS\system32\services.exe
    D:\WINDOWS\system32\lsass.exe
    D:\WINDOWS\system32\svchost.exe
    D:\WINDOWS\System32\svchost.exe
    D:\WINDOWS\system32\spoolsv.exe
    D:\Program Files\Winamp\winampa.exe
    D:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
    D:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
    D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    D:\Program Files\Messenger\msmsgs.exe
    D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    D:\Program Files\Alwil Software\Avast4\ashServ.exe
    D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    D:\WINDOWS\system32\cisvc.exe
    D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    D:\WINDOWS\explorer.exe
    D:\WINDOWS\system32\cidaemon.exe
    D:\Program Files\Internet Explorer\iexplore.exe
    D:\Documents and Settings\asia\Pulpit\hijackthis\hijackthis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
    www.interia.pl/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
    Settings,AutoConfigURL = proxy.is.net.pl/auto.pac
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
    R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no
    file)
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
    D:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} -
    D:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
    D:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} -
    d:\program files\google\googletoolbar2.dll
    O3 - Toolbar: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - (no file)
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program
    files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [WinampAgent] D:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] D:\WINDOWS\system32
    \spool\drivers\w32x86\3\hpztsb04.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Java\jre1.5.0_10
    \bin\jusched.exe"
    O4 - HKLM\..\Run: [InstantAccess] D:\Program
    Files\ScannerP\TBRIDGE\BIN\InstantAccess.exe /h
    O4 - HKLM\..\Run: [RegisterDropHandler] D:\Program
    Files\ScannerP\TBRIDGE\BIN\RegisterDropHandler.exe
    O4 - HKLM\..\Run: [FineReader7NewsReaderPro] D:\Program Files\ABBYY
    FineReader 7.0 Professional Edition\AbbyyNewsReader.exe
    O4 - HKLM\..\Run: [NeroCheck] D:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Program Files\Grisoft\AVG Anti-
    Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\RunServices: [RegisterDropHandler] D:\Program
    Files\ScannerP\TBRIDGE\BIN\RegisterDropHandler.exe
    O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [Komunikator] D:\Program Files\Tlen.pl\tlen.exe
    O4 - HKCU\..\Run: [Skype] "D:\Program
    Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [Gadu-Gadu] "D:\Program Files\Gadu-Gadu\gg.exe" /tray
    O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft
    Office\Office10\OSA.EXE
    O4 - Global Startup: Action Manager 32.lnk = D:\Program
    Files\ScannerP\AM32.exe
    O4 - Global Startup: Kalendarz XP.lnk = D:\Program Files\Kalendarz
    XP\Kalendarz.exe
    O8 - Extra context menu item: &Google Search - res://d:\program
    files\google\GoogleToolbar2.dll/cmsearch.html
    O8 - Extra context menu item: &Search -
    edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZN
    O8 - Extra context menu item: &Translate English Word - res://d:\program
    files\google\GoogleToolbar2.dll/cmwordtrans.html
    O8 - Extra context menu item: Backward Links - res://d:\program
    files\google\GoogleToolbar2.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://d:\program
    files\google\GoogleToolbar2.dll/cmcache.html
    O8 - Extra context menu item: E&ksport do programu Microsoft Excel -
    res://D:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O8 - Extra context menu item: Similar Pages - res://d:\program
    files\google\GoogleToolbar2.dll/cmsimilar.html
    O8 - Extra context menu item: Translate Page into English - res://d:\program
    files\google\GoogleToolbar2.dll/cmtrans.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
    D:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-
    00401C608501} - D:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} -
    D:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
    D:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-
    00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) -
    www.ipix.com/viewers/ipixx.cab
    O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday) -
    file://D:\Program Files\AutoCAD LT 2002 Plk\AcDcToday.ocx
    O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) -
    217.117.128.162/activex/AxisCamControl.cab
    O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) -
    www.mks.com.pl/skaner/SkanerOnline.cab
    O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) -
    file://D:\Program Files\AutoCAD LT 2002 Plk\AcPreview.ocx
    O17 - HKLM\System\CCS\Services\Tcpip\..\{1B8D6742-5CCD-48BB-B0BB-
    11638EAFBD0C}: NameServer = 217.144.192.2,217.144.192.33
    O17 - HKLM\System\CS1\Services\Tcpip\..\{1B8D6742-5CCD-48BB-B0BB-
    11638EAFBD0C}: NameServer = 217.144.192.2,217.144.192.33
    O17 - HKLM\System\CS2\Services\Tcpip\..\{1B8D6742-5CCD-48BB-B0BB-
    11638EAFBD0C}: NameServer = 217.144.192.2,217.144.192.33
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -
    D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing)
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner -
    D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - Unknown owner - D:\Program Files\Alwil
    Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - D:\Program Files\Alwil
    Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - D:\Program Files\Alwil
    Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. -
    D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\gua
    Obserwuj wątek
      • Gość: Kolobos Re: proszę o sprawdzenie loga IP: *.escom.net.pl 10.02.07, 14:31
        Ile masz ramu?

        W Start->Uruchom->services.msc odszukaj, zatrzymaj i wylacz usluge indeksowania.

        W hjt usun:
        R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no
        file)
        O3 - Toolbar: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - (no file)
        O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing)

        Doklej reszte od:
        O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. -
        D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\gua

        Wylacz zbedne programy przy pomocy msconfig.
        • Gość: elzza Re: proszę o sprawdzenie loga IP: *.is.net.pl 10.02.07, 14:39
          128 ram
        • Gość: elzza Re: proszę o sprawdzenie loga IP: *.is.net.pl 10.02.07, 15:07
          to co miałam dokleić od 23 to na tym u mnie jest własnie koniec ..dalej już nie
          mam nic
          • Gość: Kolobos Re: proszę o sprawdzenie loga IP: *.escom.net.pl 10.02.07, 15:09
            Masz za malo ramu, dlatego dziala wolno. Do XP najlepiej miec 512MB, a do w miare normalnej pracy chociaz 256MB.
        • Gość: elzza logo po sprawdzeniu i usunięciu IP: *.is.net.pl 10.02.07, 15:10
          Logfile of HijackThis v1.99.1
          Scan saved at 15:09:59, on 2007-02-10
          Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

          Running processes:
          D:\WINDOWS\System32\smss.exe
          D:\WINDOWS\system32\winlogon.exe
          D:\WINDOWS\system32\services.exe
          D:\WINDOWS\system32\lsass.exe
          D:\WINDOWS\system32\svchost.exe
          D:\WINDOWS\Explorer.EXE
          D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
          D:\Program Files\Internet Explorer\iexplore.exe
          D:\WINDOWS\System32\svchost.exe
          D:\Program Files\Internet Explorer\iexplore.exe
          D:\Documents and Settings\asia\Pulpit\hijackthis\hijackthis.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
          www.interia.pl/
          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
          Settings,AutoConfigURL = proxy.is.net.pl/auto.pac
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
          O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
          D:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
          O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} -
          D:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program
          Files\Java\jre1.5.0_10\bin\ssv.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} -
          d:\program files\google\googletoolbar2.dll
          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program
          files\google\googletoolbar2.dll
          O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Program Files\Grisoft\AVG Anti-
          Spyware 7.5\avgas.exe" /minimized
          O4 - HKLM\..\Run: [WinampAgent] D:\Program Files\Winamp\winampa.exe
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Java\jre1.5.0_10
          \bin\jusched.exe"
          O4 - HKLM\..\Run: [RegisterDropHandler] D:\Program
          Files\ScannerP\TBRIDGE\BIN\RegisterDropHandler.exe
          O4 - HKLM\..\Run: [NeroCheck] D:\WINDOWS\system32\NeroCheck.exe
          O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
          O4 - HKLM\..\Run: [InstantAccess] D:\Program
          Files\ScannerP\TBRIDGE\BIN\InstantAccess.exe /h
          O4 - HKLM\..\Run: [HPDJ Taskbar Utility] D:\WINDOWS\system32
          \spool\drivers\w32x86\3\hpztsb04.exe
          O4 - HKLM\..\Run: [FineReader7NewsReaderPro] D:\Program Files\ABBYY FineReader
          7.0 Professional Edition\AbbyyNewsReader.exe
          O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          O4 - HKLM\..\RunServices: [RegisterDropHandler] D:\Program
          Files\ScannerP\TBRIDGE\BIN\RegisterDropHandler.exe
          O4 - HKCU\..\Run: [Skype] "D:\Program
          Files\Skype\Phone\Skype.exe" /nosplash /minimized
          O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background
          O4 - HKCU\..\Run: [Komunikator] D:\Program Files\Tlen.pl\tlen.exe
          O4 - HKCU\..\Run: [Gadu-Gadu] "D:\Program Files\Gadu-Gadu\gg.exe" /tray
          O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft
          Office\Office10\OSA.EXE
          O4 - Global Startup: Kalendarz XP.lnk = D:\Program Files\Kalendarz
          XP\Kalendarz.exe
          O4 - Global Startup: Action Manager 32.lnk = D:\Program Files\ScannerP\AM32.exe
          O8 - Extra context menu item: &Google Search - res://d:\program
          files\google\GoogleToolbar2.dll/cmsearch.html
          O8 - Extra context menu item: &Search -
          edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZN
          O8 - Extra context menu item: &Translate English Word - res://d:\program
          files\google\GoogleToolbar2.dll/cmwordtrans.html
          O8 - Extra context menu item: Backward Links - res://d:\program
          files\google\GoogleToolbar2.dll/cmbacklinks.html
          O8 - Extra context menu item: Cached Snapshot of Page - res://d:\program
          files\google\GoogleToolbar2.dll/cmcache.html
          O8 - Extra context menu item: E&ksport do programu Microsoft Excel -
          res://D:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
          O8 - Extra context menu item: Similar Pages - res://d:\program
          files\google\GoogleToolbar2.dll/cmsimilar.html
          O8 - Extra context menu item: Translate Page into English - res://d:\program
          files\google\GoogleToolbar2.dll/cmtrans.html
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
          D:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-
          00401C608501} - D:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
          O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - D:\PROGRA~1
          \Skype\Phone\IEPlugin\SKYPEI~1.DLL
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
          D:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-
          00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
          O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) -
          www.ipix.com/viewers/ipixx.cab
          O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday) -
          file://D:\Program Files\AutoCAD LT 2002 Plk\AcDcToday.ocx
          O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) -
          217.117.128.162/activex/AxisCamControl.cab
          O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) -
          www.mks.com.pl/skaner/SkanerOnline.cab
          O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) -
          file://D:\Program Files\AutoCAD LT 2002 Plk\AcPreview.ocx
          O17 - HKLM\System\CCS\Services\Tcpip\..\{1B8D6742-5CCD-48BB-B0BB-11638EAFBD0C}:
          NameServer = 217.144.192.2,217.144.192.33
          O17 - HKLM\System\CS1\Services\Tcpip\..\{1B8D6742-5CCD-48BB-B0BB-11638EAFBD0C}:
          NameServer = 217.144.192.2,217.144.192.33
          O17 - HKLM\System\CS2\Services\Tcpip\..\{1B8D6742-5CCD-48BB-B0BB-11638EAFBD0C}:
          NameServer = 217.144.192.2,217.144.192.33
          O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1
          \COMMON~1\Skype\SKYPE4~1.DLL
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner -
          D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          O23 - Service: avast! Antivirus - Unknown owner - D:\Program Files\Alwil
          Software\Avast4\ashServ.exe
          O23 - Service: avast! Mail Scanner - Unknown owner - D:\Program Files\Alwil
          Software\Avast4\ashMaiSv.exe" /service (file missing)
          O23 - Service: avast! Web Scanner - Unknown owner - D:\Program Files\Alwil
          Software\Avast4\ashWebSv.exe" /service (file missing)
          O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. -
          D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

          • Gość: Kolobos Re: logo po sprawdzeniu i usunięciu IP: *.escom.net.pl 10.02.07, 15:28
            Po co wklejasz nowy log?
    Inne wątki na temat:

    Najnowsze z forum Wirusy, trojany, spyware

    Nie masz jeszcze konta? Zarejestruj się

    Nakarm Pajacyka
    Osoby zamieszczające wypowiedzi naruszające prawo lub prawem chronione dobra osób trzecich mogą ponieść z tego tytułu odpowiedzialność karną lub cywilną. Regulamin
    Treści z serwisów internetowych Grupy Wyborcza.pl oraz serwisu tokfm.pl prezentujemy w ramach komercyjnej współpracy z ich wydawcami: Wyborcza sp. z o.o. oraz Grupą Radiową Agory sp. z o.o.
    Wybrane treści z serwisu Sport.pl są dostępne po wykupieniu płatnej subskrypcji