Dodaj do ulubionych

prośba o sprawdzenie loga

05.03.07, 12:56
Logfile of HijackThis v1.99.1
Scan saved at 12:54:09, on 2007-03-05
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Video Access ActiveX Object\isamntr.exe
C:\Program Files\Video Access ActiveX Object\pmsnrr.exe
E:\NARZĘDZIA\DU Meter\DUMeter.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Video Access ActiveX Object\isamini.exe
C:\Program Files\PWN\Definicje\Bin\Starter.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\AutoConnect\AutoConnect.exe
E:\NARZDZ~1\Speed-X\SpeedX.exe
I:\odtwarzacze\ALLPlayer\UniSpiker-2.6\uni_spiker-2.6.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
E:\NARZĘDZIA\DISKEEPER PROFESSIONAL\DkService.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
E:\BitComet\BitComet.exe
C:\Program Files\Opera\Opera.exe
C:\Program Files\Tlen.pl\tlen.exe
C:\Program Files\Video Access ActiveX Object\pmmnt.exe
I:\internet\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.eu.microsoft.com/poland/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - {67982BB7-0F95-44C5-92DC-E3AF3DC19D6D} - C:\Program Files\Video Access ActiveX Object\isadd.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Expressivo - {85F685C3-20D9-4943-95E4-EB4224056C3F} - E:\NARZĘDZIA\Expressivo Demo\IH_iexplore.dll
O3 - Toolbar: Expressivo - {85F685C3-20D9-4943-95E4-EB4224056C3F} - E:\NARZĘDZIA\Expressivo Demo\IH_iexplore.dll
O3 - Toolbar: Protection Bar - {84938242-5C5B-4A55-B6B9-A1507543B418} - C:\Program Files\Video Access ActiveX Object\iesplugin.dll
O4 - HKLM\..\Run: [DU Meter] E:\NARZĘDZIA\DU Meter\DUMeter.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [DemonStarter] "C:\Program Files\PWN\Definicje\Bin\Starter.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [DiskeeperSystray] "E:\NARZĘDZIA\DISKEEPER PROFESSIONAL\DkIcon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKCU\..\Run: [IncrediMail] "C:\PROGRA~1\INCRED~1\bin\IncMail.exe" /c
O4 - HKCU\..\Run: [AutoConnect] "C:\Program Files\AutoConnect\AutoConnect.exe"
O4 - HKCU\..\Run: [SpeedX] E:\NARZDZ~1\Speed-X\SpeedX.exe
O4 - Startup: UniSpiker-2.6.lnk = ?
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://d:\EDUKACJA\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\EDUKACJA\MICROS~1\OFFICE11\REFIEBAR.DLL
O16 - DPF: {FDDBE2B8-6602-4AD8-946D-94C5A32FA6C1} (GameDesire Pool 8) - 67.15.101.3/g_bin/pl/billard8_2_0_0_24.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{4C67F116-F63E-4F9F-82AF-86FC73DA966B}: NameServer = 194.204.159.1 217.98.63.164
O17 - HKLM\System\CS1\Services\Tcpip\..\{4C67F116-F63E-4F9F-82AF-86FC73DA966B}: NameServer = 194.204.159.1 217.98.63.164
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Diskeeper - Diskeeper Corporation - E:\NARZĘDZIA\DISKEEPER PROFESSIONAL\DkService.exe
O23 - Service: hpdj - Unknown owner - C:\DOCUME~1\WADEK~1\USTAWI~1\Temp\hpdj.exe (file missing)
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe

Obserwuj wątek
    • Gość: @ Re: prośba o sprawdzenie loga IP: *.chello.pl 05.03.07, 13:13
      W trybie awaryjnym użyj narzędzia SmitFraudFix :
      siri.urz.free.fr/Fix/SmitfraudFix.zip
      Zrób to co jest opisane pod "clean" instrukcja tu:
      www.pcformat.pl/forum/showthread.php?tid=4505
      PO użyciu SmitFraudFix powstanie raport na C:\raport.txt ,wklej go na forum.
      • jan381 Re: prośba o sprawdzenie loga 05.03.07, 16:55
        Gość portalu: @ napisał(a):

        > W trybie awaryjnym użyj narzędzia SmitFraudFix :
        > siri.urz.free.fr/Fix/SmitfraudFix.zip
        > Zrób to co jest opisane pod "clean" instrukcja tu:
        > www.pcformat.pl/forum/showthread.php?tid=4505
        > PO użyciu SmitFraudFix powstanie raport na C:\raport.txt ,wklej go na forum.

        >nie mogę wejść do awaryjnego uruchamiania systemu
        • Gość: Kolobos Re: prośba o sprawdzenie loga IP: *.escom.net.pl 05.03.07, 17:03
          Widze, ze znowu psujesz...

          Uruchom w normalnym jezli nie mozesz w awaryjnym.
          • jan381 Re: prośba o sprawdzenie loga 05.03.07, 17:07
            Gość portalu: Kolobos napisał(a):

            > Widze, ze znowu psujesz...
            >
            > Uruchom w normalnym jezli nie mozesz w awaryjnym.

            >a nic nie sknocę
            • Gość: @ Re: prośba o sprawdzenie loga IP: *.chello.pl 05.03.07, 17:18
              Próbowałeś wejść do awaryjnego przez msconfig?.
              Start >>> Uruchom >>>wpisz: msconfig >>> w zakładce BOOT.INI zaznacz: /SAFEBOOT
              • jan381 Re: prośba o sprawdzenie loga 06.03.07, 10:55
                Gość portalu: @ napisał(a):

                > Próbowałeś wejść do awaryjnego przez msconfig?.
                > Start >>> Uruchom >>>wpisz: msconfig >>> w
                > zakładce BOOT.INI zaznacz: /SAFEBOOT

                >weszłem i zrobiłem jak mi polecaliście to jest raport


                SmitFraudFix v2.147

                Scan done at 10:38:21,06, 2007-03-06
                Run from C:\Documents and Settings\W?adek\Pulpit\SmitfraudFix
                OS: Microsoft Windows XP [Wersja 5.1.2600] - Windows_NT
                The filesystem type is NTFS
                Fix run in safe mode

                »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
                !!!Attention, following keys are not inevitably infected!!!

                SrchSTS.exe by S!Ri
                Search SharedTaskScheduler's .dll

                »»»»»»»»»»»»»»»»»»»»»»»» Killing process


                »»»»»»»»»»»»»»»»»»»»»»»» hosts

                127.0.0.1 localhost
                127.0.0.1 abcsearch.com
                127.0.0.1 admin.abcsearch.com
                127.0.0.1 www.abcsearch.com
                127.0.0.1 acestats.com
                127.0.0.1 www.acestats.com
                127.0.0.1 www.actualnames.com
                127.0.0.1 ad-up.com
                127.0.0.1 www.ad-up.com
                127.0.0.1 adatom.com
                127.0.0.1 aesp.adatom.com
                127.0.0.1 adbest.com
                127.0.0.1 adserv.adbonus.com
                127.0.0.1 www.adbonus.com
                127.0.0.1 ad2.adcept.net
                127.0.0.1 ad3.adcept.net
                127.0.0.1 www.adcept.net
                127.0.0.1 adcomplete.com
                127.0.0.1 www.adcomplete.com
                127.0.0.1 www.adcopy.info
                127.0.0.1 ads.adcorps.com
                127.0.0.1 ads.addynamix.com
                127.0.0.1 pt.server1.adexit.com
                127.0.0.1 www.adexit.com
                127.0.0.1 www.ad4ever.com
                127.0.0.1 ads.adfuzz.com
                127.0.0.1 www2.adhost.com
                127.0.0.1 www.addme.com
                127.0.0.1 te.adlandpro.com
                127.0.0.1 classic.adlink.de
                127.0.0.1 regio.adlink.de
                127.0.0.1 west.adlink.de
                127.0.0.1 www.adminder.com
                127.0.0.1 adsfac.net
                127.0.0.1 www.adonweb.com
                127.0.0.1 adroar.com
                127.0.0.1 ads.adroar.com
                127.0.0.1 delta.adroar.com
                127.0.0.1 lists.adroar.com
                127.0.0.1 www.adroar.com
                127.0.0.1 ads.adsag.com
                127.0.0.1 img.adsag.com
                127.0.0.1 publishers.adscholar.com
                127.0.0.1 adserv.com
                127.0.0.1 www.adserv.com
                127.0.0.1 www.adtoolsinc.com
                127.0.0.1 www.adtrader.com
                127.0.0.1 survey.advantageresearch.com
                127.0.0.1 ad.adver.com.tw
                127.0.0.1 ads.advertise.net
                127.0.0.1 www.advertisingvision.com
                127.0.0.1 adviva.com
                127.0.0.1 www.adviva.com
                127.0.0.1 ads.adviva.net
                127.0.0.1 adstats.adviva.net
                127.0.0.1 www.affiliatefuel.com
                127.0.0.1 banners.affiliatefuel.com
                127.0.0.1 affiliatetarget.com
                127.0.0.1 www.affiliatetarget.com
                127.0.0.1 www.affiliatetracking.net
                127.0.0.1 our.affiliatetracking.net
                127.0.0.1 www.affiliatetracking.com
                127.0.0.1 crs.akamai.com
                127.0.0.1 bantam.ai.net
                127.0.0.1 fiona.ai.net
                127.0.0.1 ads.amazingmedia.com
                127.0.0.1 ads.antionline.com
                127.0.0.1 ads.mm.ap.org
                127.0.0.1 junior.apk.net
                127.0.0.1 images.atweb.com
                127.0.0.1 banner.arttoday.com
                127.0.0.1 audiogalaxy.com
                127.0.0.1 adserving.autotrader.com
                127.0.0.1 www.aweber.com
                127.0.0.1 www.banner-mania.com
                127.0.0.1 www2.bannerspace.com
                127.0.0.1 www3.bannerspace.com
                127.0.0.1 www5.bannerspace.com
                127.0.0.1 www6.bannerspace.com
                127.0.0.1 www7.bannerspace.com
                127.0.0.1 bannerswap.com
                127.0.0.1 www.bannerswap.com
                127.0.0.1 www.bidclix.com
                127.0.0.1 bidclix.net
                127.0.0.1 www.bidclix.net
                127.0.0.1 ads.bigfoot.com
                127.0.0.1 bigtracker.com
                127.0.0.1 bigticker.bighits.net
                127.0.0.1 bounty.bighits.net
                127.0.0.1 www.bighits.net
                127.0.0.1 counter.bizland.com
                127.0.0.1 webads.bizservers.com
                127.0.0.1 ads.bluemongoose.com
                127.0.0.1 www1.boomerank.com
                127.0.0.1 boomerank.com
                127.0.0.1 rccl.bridgetrack.com
                127.0.0.1 www.browserwise.com
                127.0.0.1 ads.bugnet.com
                127.0.0.1 www.buildtraffic.com
                127.0.0.1 casalemedia.com
                127.0.0.1 as.casalemedia.com
                127.0.0.1 is.casalemedia.com
                127.0.0.1 www.casalemedia.com
                127.0.0.1 casino-on-net.com
                127.0.0.1 www.casino-on-net.com
                127.0.0.1 ads.cbc.ca
                127.0.0.1 ads.cc-dt.com
                127.0.0.1 clickserve.cc-dt.com
                127.0.0.1 cc-dt.com
                127.0.0.1 thunder.cc-dt.com
                127.0.0.1 adverts.carltononline.com
                127.0.0.1 ads.cars.com
                127.0.0.1 www.cashforclicks.com
                127.0.0.1 www.cashpile.com
                127.0.0.1 mds.centrport.net
                127.0.0.1 stats2.free.cgiserver.net
                127.0.0.1 bannerexchange.cjb.net
                127.0.0.1 classifieds1000.com
                127.0.0.1 www.classifieds1000.com
                127.0.0.1 ads4.clearchannel.com
                127.0.0.1 clearfind.com
                127.0.0.1 zzz.clickbank.net
                127.0.0.1 clickedyclick.com
                127.0.0.1 www.clickexchange.ru
                127.0.0.1 click2boost.com
                127.0.0.1 service.click2boost.com
                127.0.0.1 secure.click2boost.com
                127.0.0.1 www.click2boost.com
                127.0.0.1 servedby.clickexperts.net
                127.0.0.1 www.clicks2you.com
                127.0.0.1 www.clixgalore.com
                127.0.0.1 www1.click-fr.com
                127.0.0.1 www2.click-fr.com
                127.0.0.1 www3.click-fr.com
                127.0.0.1 www4.click-fr.com
                127.0.0.1 www.clickhouse.com
                127.0.0.1 www.clicks4u.com
                127.0.0.1 clicktilluwin.com
                127.0.0.1 comclick.com
                127.0.0.1 ct2.comclick.com
                127.0.0.1 fl01.ct2.comclick.com
                127.0.0.1 ihm01.ct2.comclick.com
                127.0.0.1 survey.confirmit.com
                127.0.0.1 coolshader.com
                127.0.0.1 www.coolshader.com
                127.0.0.1 www.count24.de
                127.0.0.1 counted.com
                127.0.0.1 bilbo.counted.com
                127.0.0.1 www.counted.com
                127.0.0.1 www.counterguide.com
                127.0.0.1 counter4u.de
                127.0.0.1 connectionzone.com
                127.0.0.1 count.casino-trade.com
                127.0.0.1 www.couponica.com
                127.0.0.1 data.coremetrics.com
                127.0.0.1 us.cqcounter.com
                127.0.0.1 zz.cqcounter.com
                127.0.0.1 1us.cqcounter.com
                127.0.0.1 ads.crosswinds.net
                127.0.0.1 megabyte.crosswinds.net
                127.0.0.1 cyberbounty.com
                127.0.0.1 js.cybermonitor.com
                127.0.0.1 stat3.cybermonitor.com
                127.0.0.1 www.cytron.com
                127.0.0.1 dw.dailywinner.net
                127.0.0.1 www.dailywinner.net
                127.0.0.1 ads.danni.com
                127.0.0.1 www.dash.com
                127.0.0.1 ads.date.com
                127.0.0.1 banner.date.com
                127.0.0.1 spyware.com.16871.fb.dbbsrv.com
                127.0.0.1 www.dealhelper.com
                127.0.0.1 collector.deepmetrix.com
                127.0.0.1 geo.deepmetrix.com
                127.0.0.1 www.deepmetrix.com
                127.0.0.1 ad.ads.dk
                127.0.0.1 tdkads.ads.dk
                127.0.0.1 www.didtheyreadit.com
                127.0.0.1 counter.digits.com
                127.0.0.1 downloadalot.com
                127.0.0.1 get.downloadalot.com
                127.0.0.1 doc-tracker.com
                127.0.0.1 www.duenow.com
                127.0.0.1 klipads.dvlabs.com
                127.0.0.1 www.e-bannerx.com
                127.0.0.1 www.easycounter.com
                127.0.0.1 banners.easydns.com
                127.0.0.1 banner.easyspace.com
                127.0.0.1 epeople.com
                127.0.0.1 er.errorplace.com
                127.0.0.1 www.errorplace.com
                127.0.0.1 perso.estat.com
                127.0.0.1 prof.estat.com
                127.0.0.1 eu-adcenter.net
                127.0.0.1 thinknyc.eu-adcenter.net
                127.0.0.1 engage.everyone.net
                127.0.0.1 static.everyone.net
                127.0.0.1 www.exchangead.com
                127.0.0.1 exitexchange.com
                127.0.0.1 count.exitexchange.com
                127.0.0.1 images.exitexchange.com
                127.0.0.1 www.exittraffic.net
                127.0.0.1 ezcybersearch.com
                127.0.0.1 ads.ezcybersearch.com
                127.0.0.1 ezcybersearch.mail.everyone.net
                127.0.0.1 www.evidence-eliminator.com
                127.0.0.1 ads.fairfax.com.au
                127.0.0.1 images.ads.fairfax.com.au
                127.0.0.1 redirect.fairfax.com.au
                127.0.0.1 campaigns.f2.com.au
                127.0.0.1 www.fast2net.com
                127.0.0.1 fasttrack.nu
                127.0.0.1 adserver.filefront.com
                127.0.0.1 www.fineclicks.com
                127.0.0.1 firstname.com
                127.0.0.1 clicks.firstname.com
                127.0.0.1 flashtrack.net
                127.0.0.1 coreg.flashtrack.net
                127.0.0.1 flyinads.com
                127.0.0.1 www.flyinads.com
                127.0.0.1 click.fool.com
                127.0.0.1 ads.forbes.com
                127.0.0.1 klipmart.forbes.com
                127.0.0.1 ads.fortunecity.com
                127.0.0.1 www2.fortunecity.com
                127.0.0.1 ads.fp.sandpiper.net
                127.0.0.1 ad.freefind.com
                127.0.0.1 free-stats.com
                127.0.0.1 www.free-stats.com
                127.0.0.1 www.freewebsites.com
                127.0.0.1 ads.gamespy.com
                127.0.0.1 adcontent.gamespy.com
                127.0.0.1 www.getsmart.com
                127.0.0.1 getupdate.com
                127.0.0.1 gigex.com
                • Gość: Kolobos Re: prośba o sprawdzenie loga IP: *.escom.net.pl 06.03.07, 11:08
                  Tekst z > to cytat, wiec jak odpowiadasz to nie pisz > !
                  Log sie nie zmiescil to zapewne widzisz, wklej bez czesci host.
                  • jan381 Re: prośba o sprawdzenie loga 06.03.07, 11:19
                    SmitFraudFix v2.147

                    Scan done at 10:38:21,06, 2007-03-06
                    Run from C:\Documents and Settings\W?adek\Pulpit\SmitfraudFix
                    OS: Microsoft Windows XP [Wersja 5.1.2600] - Windows_NT
                    The filesystem type is NTFS
                    Fix run in safe mode

                    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
                    !!!Attention, following keys are not inevitably infected!!!

                    SrchSTS.exe by S!Ri
                    Search SharedTaskScheduler's .dll

                    »»»»»»»»»»»»»»»»»»»»»»»» Killing process


                    »»»»»»»»»»»»»»»»»»»»»»»» hosts

                    127.0.0.1 localhost
                    127.0.0.1 abcsearch.com
                    127.0.0.1 admin.abcsearch.com
                    127.0.0.1 www.abcsearch.com
                    127.0.0.1 acestats.com
                    127.0.0.1 www.acestats.com
                    127.0.0.1 www.actualnames.com
                    127.0.0.1 ad-up.com
                    127.0.0.1 www.ad-up.com
                    127.0.0.1 adatom.com
                    127.0.0.1 aesp.adatom.com
                    127.0.0.1 adbest.com
                    127.0.0.1 adserv.adbonus.com
                    127.0.0.1 www.adbonus.com
                    127.0.0.1 ad2.adcept.net
                    127.0.0.1 ad3.adcept.net
                    127.0.0.1 www.adcept.net
                    127.0.0.1 adcomplete.com
                    127.0.0.1 www.adcomplete.com
                    127.0.0.1 www.adcopy.info
                    127.0.0.1 ads.adcorps.com
                    127.0.0.1 ads.addynamix.com
                    127.0.0.1 pt.server1.adexit.com
                    127.0.0.1 www.adexit.com
                    127.0.0.1 www.ad4ever.com
                    127.0.0.1 ads.adfuzz.com
                    127.0.0.1 www2.adhost.com
                    127.0.0.1 www.addme.com
                    127.0.0.1 te.adlandpro.com
                    127.0.0.1 classic.adlink.de
                    127.0.0.1 regio.adlink.de
                    127.0.0.1 west.adlink.de
                    127.0.0.1 www.adminder.com
                    127.0.0.1 adsfac.net
                    127.0.0.1 www.adonweb.com
                    127.0.0.1 adroar.com
                    127.0.0.1 ads.adroar.com
                    127.0.0.1 delta.adroar.com
                    127.0.0.1 lists.adroar.com
                    127.0.0.1 www.adroar.com
                    127.0.0.1 ads.adsag.com
                    127.0.0.1 img.adsag.com
                    127.0.0.1 publishers.adscholar.com
                    127.0.0.1 adserv.com
                    127.0.0.1 www.adserv.com
                    127.0.0.1 www.adtoolsinc.com
                    127.0.0.1 www.adtrader.com
                    127.0.0.1 survey.advantageresearch.com
                    127.0.0.1 ad.adver.com.tw
                    127.0.0.1 ads.advertise.net
                    127.0.0.1 www.advertisingvision.com
                    127.0.0.1 adviva.com
                    127.0.0.1 www.adviva.com
                    127.0.0.1 ads.adviva.net
                    127.0.0.1 adstats.adviva.net
                    127.0.0.1 www.affiliatefuel.com
                    127.0.0.1 banners.affiliatefuel.com
                    127.0.0.1 affiliatetarget.com
                    127.0.0.1 www.affiliatetarget.com
                    127.0.0.1 www.affiliatetracking.net
                    127.0.0.1 our.affiliatetracking.net
                    127.0.0.1 www.affiliatetracking.com
                    127.0.0.1 crs.akamai.com
                    127.0.0.1 bantam.ai.net
                    127.0.0.1 fiona.ai.net
                    127.0.0.1 ads.amazingmedia.com
                    127.0.0.1 ads.antionline.com
                    127.0.0.1 ads.mm.ap.org
                    127.0.0.1 junior.apk.net
                    127.0.0.1 images.atweb.com
                    127.0.0.1 banner.arttoday.com
                    127.0.0.1 audiogalaxy.com
                    127.0.0.1 adserving.autotrader.com
                    127.0.0.1 www.aweber.com
                    127.0.0.1 www.banner-mania.com
                    127.0.0.1 www2.bannerspace.com
                    127.0.0.1 www3.bannerspace.com
                    127.0.0.1 www5.bannerspace.com
                    127.0.0.1 www6.bannerspace.com
                    127.0.0.1 www7.bannerspace.com
                    127.0.0.1 bannerswap.com
                    127.0.0.1 www.bannerswap.com
                    127.0.0.1 www.bidclix.com
                    127.0.0.1 bidclix.net
                    127.0.0.1 www.bidclix.net
                    127.0.0.1 ads.bigfoot.com
                    127.0.0.1 bigtracker.com
                    127.0.0.1 bigticker.bighits.net
                    127.0.0.1 bounty.bighits.net
                    127.0.0.1 www.bighits.net
                    127.0.0.1 counter.bizland.com
                    127.0.0.1 webads.bizservers.com
                    127.0.0.1 ads.bluemongoose.com
                    127.0.0.1 www1.boomerank.com
                    127.0.0.1 boomerank.com
                    127.0.0.1 rccl.bridgetrack.com
                    127.0.0.1 www.browserwise.com
                    127.0.0.1 ads.bugnet.com
                    127.0.0.1 www.buildtraffic.com
                    127.0.0.1 casalemedia.com
                    127.0.0.1 as.casalemedia.com
                    127.0.0.1 is.casalemedia.com
                    127.0.0.1 www.casalemedia.com
                    127.0.0.1 casino-on-net.com
                    127.0.0.1 www.casino-on-net.com
                    127.0.0.1 ads.cbc.ca
                    127.0.0.1 ads.cc-dt.com
                    127.0.0.1 clickserve.cc-dt.com
                    127.0.0.1 cc-dt.com
                    127.0.0.1 thunder.cc-dt.com
                    127.0.0.1 adverts.carltononline.com
                    127.0.0.1 ads.cars.com
                    127.0.0.1 www.cashforclicks.com
                    127.0.0.1 www.cashpile.com
                    127.0.0.1 mds.centrport.net
                    127.0.0.1 stats2.free.cgiserver.net
                    127.0.0.1 bannerexchange.cjb.net
                    127.0.0.1 classifieds1000.com
                    127.0.0.1 www.classifieds1000.com
                    127.0.0.1 ads4.clearchannel.com
                    127.0.0.1 clearfind.com
                    127.0.0.1 zzz.clickbank.net
                    127.0.0.1 clickedyclick.com
                    127.0.0.1 www.clickexchange.ru
                    127.0.0.1 click2boost.com
                    127.0.0.1 service.click2boost.com
                    127.0.0.1 secure.click2boost.com
                    127.0.0.1 www.click2boost.com
                    127.0.0.1 servedby.clickexperts.net
                    127.0.0.1 www.clicks2you.com
                    127.0.0.1 www.clixgalore.com
                    127.0.0.1 www1.click-fr.com
                    127.0.0.1 www2.click-fr.com
                    127.0.0.1 www3.click-fr.com
                    127.0.0.1 www4.click-fr.com
                    127.0.0.1 www.clickhouse.com
                    127.0.0.1 www.clicks4u.com
                    127.0.0.1 clicktilluwin.com
                    127.0.0.1 comclick.com
                    127.0.0.1 ct2.comclick.com
                    127.0.0.1 fl01.ct2.comclick.com
                    127.0.0.1 ihm01.ct2.comclick.com
                    127.0.0.1 survey.confirmit.com
                    127.0.0.1 coolshader.com
                    127.0.0.1 www.coolshader.com
                    127.0.0.1 www.count24.de
                    127.0.0.1 counted.com
                    127.0.0.1 bilbo.counted.com
                    127.0.0.1 www.counted.com
                    127.0.0.1 www.counterguide.com
                    127.0.0.1 counter4u.de
                    127.0.0.1 connectionzone.com
                    127.0.0.1 count.casino-trade.com
                    127.0.0.1 www.couponica.com
                    127.0.0.1 data.coremetrics.com
                    127.0.0.1 us.cqcounter.com
                    127.0.0.1 zz.cqcounter.com
                    127.0.0.1 1us.cqcounter.com
                    127.0.0.1 ads.crosswinds.net
                    127.0.0.1 megabyte.crosswinds.net
                    127.0.0.1 cyberbounty.com
                    127.0.0.1 js.cybermonitor.com
                    127.0.0.1 stat3.cybermonitor.com
                    127.0.0.1 www.cytron.com
                    127.0.0.1 dw.dailywinner.net
                    127.0.0.1 www.dailywinner.net
                    127.0.0.1 ads.danni.com
                    127.0.0.1 www.dash.com
                    127.0.0.1 ads.date.com
                    127.0.0.1 banner.date.com
                    127.0.0.1 spyware.com.16871.fb.dbbsrv.com
                    127.0.0.1 www.dealhelper.com
                    127.0.0.1 collector.deepmetrix.com
                    127.0.0.1 geo.deepmetrix.com
                    127.0.0.1 www.deepmetrix.com
                    127.0.0.1 ad.ads.dk
                    127.0.0.1 tdkads.ads.dk
                    127.0.0.1 www.didtheyreadit.com
                    127.0.0.1 counter.digits.com
                    127.0.0.1 downloadalot.com
                    127.0.0.1 get.downloadalot.com
                    127.0.0.1 doc-tracker.com
                    127.0.0.1 www.duenow.com
                    127.0.0.1 klipads.dvlabs.com
                    127.0.0.1 www.e-bannerx.com
                    127.0.0.1 www.easycounter.com
                    127.0.0.1 banners.easydns.com
                    127.0.0.1 banner.easyspace.com
                    127.0.0.1 epeople.com
                    127.0.0.1 er.errorplace.com
                    127.0.0.1 www.errorplace.com
                    127.0.0.1 perso.estat.com
                    127.0.0.1 prof.estat.com
                    127.0.0.1 eu-adcenter.net
                    127.0.0.1 thinknyc.eu-adcenter.net
                    127.0.0.1 engage.everyone.net
                    127.0.0.1 static.everyone.net
                    127.0.0.1 www.exchangead.com
                    127.0.0.1 exitexchange.com
                    127.0.0.1 count.exitexchange.com
                    127.0.0.1 images.exitexchange.com
                    127.0.0.1 www.exittraffic.net
                    127.0.0.1 ezcybersearch.com
                    127.0.0.1 ads.ezcybersearch.com
                    127.0.0.1 ezcybersearch.mail.everyone.net
                    127.0.0.1 www.evidence-eliminator.com
                    127.0.0.1 ads.fairfax.com.au
                    127.0.0.1 images.ads.fairfax.com.au
                    127.0.0.1 redirect.fairfax.com.au
                    127.0.0.1 campaigns.f2.com.au
                    127.0.0.1 www.fast2net.com
                    127.0.0.1 fasttrack.nu
                    127.0.0.1 adserver.filefront.com
                    127.0.0.1 www.fineclicks.com
                    127.0.0.1 firstname.com
                    127.0.0.1 clicks.firstname.com
                    127.0.0.1 flashtrack.net
                    127.0.0.1 coreg.flashtrack.net
                    127.0.0.1 flyinads.com
                    127.0.0.1 www.flyinads.com
                    127.0.0.1 click.fool.com
                    127.0.0.1 ads.forbes.com
                    127.0.0.1 klipmart.forbes.com
                    127.0.0.1 ads.fortunecity.com
                    127.0.0.1 www2.fortunecity.com
                    127.0.0.1 ads.fp.sandpiper.net
                    127.0.0.1 ad.freefind.com
                    127.0.0.1 free-stats.com
                    127.0.0.1 www.free-stats.com
                    127.0.0.1 www.freewebsites.com
                    127.0.0.1 ads.gamespy.com
                    127.0.0.1 adcontent.gamespy.com
                    127.0.0.1 www.getsmart.com
                    127.0.0.1 getupdate.com
                    127.0.0.1 gigex.com
                    127.0.0.1 www.gigex.com
                    127.0.0.1 www.globaltoolbar.com
                    127.0.0.1 globesearch.com
                    127.0.0.1 goclick.com
                    127.0.0.1 earth.goclick.com
                    127.0.0.1 partner1.goclick.com
                    127.0.0.1 www.goclick.com
                    127.0.0.1 www.goldenwebawards.com
                    127.0.0.1 goldstats.net
                    127.0.0.1 www.goldstats.net
                    • Gość: @ Re: prośba o sprawdzenie loga IP: *.chello.pl 06.03.07, 11:27
                      Drugi raz wkleiłeś to samo,masz wkleić bez tej części "hosts".
                      • jan381 Re: prośba o sprawdzenie loga 06.03.07, 11:31
                        mitFraudFix v2.147

                        Scan done at 10:38:21,06, 2007-03-06
                        Run from C:\Documents and Settings\W?adek\Pulpit\SmitfraudFix
                        OS: Microsoft Windows XP [Wersja 5.1.2600] - Windows_NT
                        The filesystem type is NTFS
                        Fix run in safe mode

                        »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
                        !!!Attention, following keys are not inevitably infected!!!

                        SrchSTS.exe by S!Ri
                        Search SharedTaskScheduler's .dll

                        »»»»»»»»»»»»»»»»»»»»»»»» Killing process












                        GenericRenosFix by S!Ri


                        »»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files

                        C:\DOCUME~1\WADEK~1\Ulubione\Online Security Test.url Deleted
                        C:\Program Files\AntiVermeans\ Deleted
                        C:\Program Files\Video Access ActiveX Object\ Deleted

                        »»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


                        »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
                        !!!Attention, following keys are not inevitably infected!!!

                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                        "System"=""


                        »»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

                        Registry Cleaning done.

                        »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
                        !!!Attention, following keys are not inevitably infected!!!

                        SrchSTS.exe by S!Ri
                        Search SharedTaskScheduler's .dll


                        »»»»»»»»»»»»»»»»»»»»»»»» End

                        • jan381 Re: prośba o sprawdzenie loga 07.03.07, 11:50
                          co z mojm raportem czy wszysko ok czy nie
                          • Gość: @ Re: prośba o sprawdzenie loga IP: *.chello.pl 07.03.07, 11:54
                            Wygląda na to że wszystko usunięte.Czy masz jeszcze jakieś problemy ?.

Nie masz jeszcze konta? Zarejestruj się


Nakarm Pajacyka