Bardzo proszę o sprawdzenie loga

[marcin1231 (Marcinm93)]

Bardzo proszę o sprawdzenie loga.

Z góry wielkie dzięki!

Logfile of HijackThis v1.99.1 Scan saved at 13:32:36, on 2006-03-06 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: E:\WINDOWS\System32\smss.exe E:\WINDOWS\system32\winlogon.exe E:\WINDOWS\system32\services.exe E:\WINDOWS\system32\lsass.exe E:\WINDOWS\system32\svchost.exe E:\WINDOWS\System32\svchost.exe E:\WINDOWS\system32\spoolsv.exe E:\WINDOWS\System32\svchost.exe E:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe E:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe E:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe E:\Program Files\Softwin\BitDefender9\vsserv.exe E:\WINDOWS\Explorer.EXE E:\progra~1\softwin\bitdef~1\bdmcon.exe E:\progra~1\softwin\bitdef~1\bdnagent.exe E:\progra~1\softwin\bitdef~1\bdswitch.exe D:\PROGRA~1\Wapster\AQQ\AQQ.exe D:\PROGRA~1\MyPortal\Speed-X\SpeedX.exe D:\Program Files\Skype\Phone\Skype.exe D:\Program Files\Google\Gmail Notifier\gnotify.exe C:\Program Files\Mozilla Firefox\firefox.exe E:\Documents and Settings\Marcin Malik\Pulpit\Programy i gry\Hijack\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - D:\PROGRA~1\STARDO~1\SDIEInt.dll O4 - HKLM…\Run: [bDMCon] e:\progra~1\softwin\bitdef~1\bdmcon.exe O4 - HKLM…\Run: [bDNewsAgent] “E:\progra~1\softwin\bitdef~1\bdnagent.exe” O4 - HKLM…\Run: [bDSwitchAgent] “E:\progra~1\softwin\bitdef~1\bdswitch.exe” O4 - HKCU…\Run: [AQQ] D:\PROGRA~1\Wapster\AQQ\AQQ.exe O4 - HKCU…\Run: [speedX] D:\PROGRA~1\MyPortal\Speed-X\SpeedX.exe O4 - HKCU…\Run: [skype] “D:\Program Files\Skype\Phone\Skype.exe” /nosplash /minimized O4 - Startup: Skrót do gnotify.lnk = D:\Program Files\Google\Gmail Notifier\gnotify.exe O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://E:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Program Files\ICQLite\ICQLite.exe O9 - Extra ‘Tools’ menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Program Files\ICQLite\ICQLite.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan … asinst.cab O17 - HKLM\System\CCS\Services\Tcpip…{BBA8CC23-3511-4E70-8A66-D9E13ED93441}: NameServer = 217.30.129.149,217.30.137.200 O18 - Protocol: Festoon - (no CLSID) - (no file) O18 - Protocol: vskype - (no CLSID) - (no file) O18 - Protocol: wpmsg - {2E0AC5A0-3597-11D6-B3ED-0001021DC1C3} - D:\Program Files\Spik\url_wpmsg.dll O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - E:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing) O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - E:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - E:\Program Files\iPod\bin\iPodService.exe O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - E:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing) O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f “%ProgramFiles%\WinPcap\rpcapd.ini (file missing) O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - E:\Program Files\Softwin\BitDefender9\vsserv.exe” /service (file missing) O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - E:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

[Robinhio (Micromac)]

Log jest OK

Hijackiem usun

O18 - Protocol: Festoon - (no CLSID) - (no file) O18 - Protocol: vskype - (no CLSID) - (no file)

Na drugi raz pisz jaki jest powod umieszczewnia loga.

[InfinityToJa (Gblade)]

Zgubiłeś:

Start>>>uruchom>>>services.msc wyłącz Remote Packet Capture Protocol v.0 (experimental) (rpcapd) Usuwasz wpis i pogrubiony plik: O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)

Skasuj kosmetycznie jesz to:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

Jeśli nie bawisz się w sniffing, to radze usunąć ten sterownik powyżej, być może ktoś cię podsłuchuje.

[kuz5]

Zgubiłeś: Cytat: Start>>>uruchom>>>services.msc wyłącz Remote Packet Capture Protocol v.0 (experimental) (rpcapd) Usuwasz wpis i pogrubiony plik: O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)

Nic nie zgubił ten wpis zostaw, jest ok

[marcin1231 (Marcinm93)]

Loga co jakiś czas zamieszczam tak profilaktycznie. Dzięki…