Blędy systemu

andrzej7777 · 17 Maj 2008 10:46

Witam.Czy ktoś może wie co oznaczają te błędy: C:/DOCUME~1/USTAWI~1/Temp/WERcfb3.dir00/Mini051708-01.dmp

C:/DOCUME~1/USTAWI~1/Temp/WERcfb3.dir00/sysdata.xml

Czy ktoś wie z czym to jest związane że strony w internecie płynnie się nie przewijają i jak jest jakaś strona zmniejszona i sie nią porusza to ona też płynnie się nie porusza

huber2t · 17 Maj 2008 11:38

Jakiś wirusik zapewne

Podaj log z Hijackthis

JNJN · 17 Maj 2008 12:31

Proszę zmienić temat postu na konkretny, opcja edytuj i popraw.JNJN

andrzej7777 · 17 Maj 2008 17:56

Podaje log

Logfile of HijackThis v1.99.1

Scan saved at 19:53:36, on 2008-05-17

Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16640)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\bin\btwdins.exe

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\SiteAdvisor\6253\SAService.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\WINDOWS\system32\RunDll32.exe

C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe

C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE

C:\Program Files\Unlocker\UnlockerAssistant.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\SiteAdvisor\6253\SiteAdv.exe

C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe

C:\Program Files\Nero\Nero 7\InCD\InCD.exe

C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

C:\Program Files\HP\hpcoretech\hpcmpmgr.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Gadu-Gadu\gg.exe

C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\BTTray.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\AVerTV\QuickTV.exe

C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

C:\Program Files\Winamp\winamp.exe

C:\Program Files\Mozilla Firefox\firefox.exe

E:\Z internetu\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza

O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll

O4 - HKLM…\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd

O4 - HKLM…\Run: [ATICCC] “C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe”

O4 - HKLM…\Run: [sunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe”

O4 - HKLM…\Run: [GrooveMonitor] “C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe”

O4 - HKLM…\Run: [WinampAgent] “C:\Program Files\Winamp\winampa.exe”

O4 - HKLM…\Run: [unlockerAssistant] “C:\Program Files\Unlocker\UnlockerAssistant.exe”

O4 - HKLM…\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM…\Run: [siteAdvisor] C:\Program Files\SiteAdvisor\6253\SiteAdv.exe

O4 - HKLM…\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

O4 - HKLM…\Run: [securDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe

O4 - HKLM…\Run: [inCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe

O4 - HKLM…\Run: [HP Software Update] “C:\Program Files\HP\HP Software Update\HPWuSchd2.exe”

O4 - HKLM…\Run: [HP Component Manager] “C:\Program Files\HP\hpcoretech\hpcmpmgr.exe”

O4 - HKLM…\Run: [bearShare] “F:\Program Files\BearShare\BearShare.exe” /pause

O4 - HKCU…\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU…\Run: [Gadu-Gadu] “C:\Program Files\Gadu-Gadu\gg.exe” /tray

O4 - HKCU…\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden

O4 - HKCU…\Run: [Odkurzacz-MCD] C:\Program Files\Odkurzacz\odk_mcd.exe

O4 - Global Startup: BTTray.lnk = ?

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: HP Image Zone - szybkie uruchamianie.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe

O4 - Global Startup: QuickTV.lnk = C:\Program Files\AVerTV\QuickTV.exe

O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Wyślij do interfejsu &Bluetooth - C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\btsendto_ie_ctx.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra ‘Tools’ menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\btsendto_ie.htm

O9 - Extra ‘Tools’ menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\btsendto_ie.htm

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O11 - Options group: [iNTERNATIONAL] International*

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL

O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll

O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll

O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\bin\btwdins.exe

O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: Usługa SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6253\SAService.exe

huber2t · 17 Maj 2008 17:58

fix w hijackthis

Podaj log z Combofix

andrzej7777 · 17 Maj 2008 18:26

Deckard’s System Scanner v20071014.68

Extra logfile - please post this as an attachment with your post.

– System Information ----------------------------------------------------------

Microsoft Windows XP Professional (build 2600) SP 3.0

Architecture: X86; Language: Polish

CPU 0: AMD Sempron 2800+

Percentage of Memory in Use: 44%

Physical Memory (total/avail): 1279.48 MiB / 716 MiB

Pagefile Memory (total/avail): 2670.42 MiB / 2208.51 MiB

Virtual Memory (total/avail): 2047.88 MiB / 1907.81 MiB

A: is Removable (No Media)

C: is Fixed (NTFS) - 8.95 GiB total, 2.03 GiB free.

D: is Fixed (FAT32) - 21.64 GiB total, 6.47 GiB free.

E: is Fixed (FAT32) - 21.64 GiB total, 20.31 GiB free.

F: is Fixed (FAT32) - 22.27 GiB total, 20.21 GiB free.

G: is CDROM (No Media)

H: is CDROM (No Media)

\.\PHYSICALDRIVE0 - WDC WD800BB-00JHA0 - 74.53 GiB - 4 partitions

\PARTITION0 (bootable) - Instalowalny system plików - 8.95 GiB - C:

\PARTITION1 - Rozszerzona z rozszerzonym przerwaniem 13 - 65.58 GiB - D: - E: - F:

– Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.

– Environment Variables -------------------------------------------------------

ALLUSERSPROFILE=C:\Documents and Settings\All Users

APPDATA=C:\Documents and Settings\Andrzej\Dane aplikacji

CLIENTNAME=Console

CommonProgramFiles=C:\Program Files\Common Files

COMPUTERNAME=ANDRZEJ-1003599

ComSpec=C:\WINDOWS\system32\cmd.exe

FP_NO_HOST_CHECK=NO

HOMEDRIVE=C:

HOMEPATH=\Documents and Settings\Andrzej

LOGONSERVER=\ANDRZEJ-1003599

NUMBER_OF_PROCESSORS=1

OS=Windows_NT

Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE;C:\Program Files\Common Files\Ahead\Lib\

PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH

PROCESSOR_ARCHITECTURE=x86

PROCESSOR_IDENTIFIER=x86 Family 6 Model 8 Stepping 1, AuthenticAMD

PROCESSOR_LEVEL=6

PROCESSOR_REVISION=0801

ProgramFiles=C:\Program Files

PROMPT=$P$G

SESSIONNAME=Console

SystemDrive=C:

SystemRoot=C:\WINDOWS

TEMP=C:\DOCUME~1\Andrzej\USTAWI~1\Temp

TMP=C:\DOCUME~1\Andrzej\USTAWI~1\Temp

USERDOMAIN=ANDRZEJ-1003599

USERNAME=Andrzej

USERPROFILE=C:\Documents and Settings\Andrzej

windir=C:\WINDOWS

– User Profiles ---------------------------------------------------------------

Andrzej (admin)

– Add/Remove Programs ---------------------------------------------------------

–> C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL

–> C:\WINDOWS\NuNInst.exe /UNINSTALL

–> C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL

–> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

Adobe Flash Player Plugin --> C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe

Aktualizacja zabezpieczeń dla systemu Windows XP (KB923789) --> C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf

Aktualizacja zabezpieczeń dla Windows XP (KB941569) --> “C:\WINDOWS$NtUninstallKB941569$\spuninst\spuninst.exe”

Archiwizator WinRAR --> C:\Program Files\WinRAR\uninstall.exe

ATI - Software Uninstall Utility --> C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe

ATI Catalyst Control Center --> MsiExec.exe /I{B7777E08-1344-42E8-975B-6F541F9ADBD8}

ATI Display Driver --> rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean

avast! Antivirus --> C:\Program Files\Alwil Software\Avast4\aswRunDll.exe “C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll”,RunSetup

AVerTV GO 007 Plus --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{8DF56C91-281F-4C15-B954-F45FDC919568} /l1045

C-Media 3D Audio --> C:\WINDOWS\CMIUnInstall.exe

CANYON CN-WCAM21 PC-Camera --> C:\WINDOWS\PAC207\unins000.exe

Gadu-Gadu 7.7 --> C:\Program Files\Gadu-Gadu\Setup.exe

HijackThis 1.99.1 --> E:\Z internetu\HijackThis.exe /uninstall

HP Image Zone 4.2 --> C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat

HP PSC & OfficeJet 4.2 --> “C:\Program Files\HP\Digital Imaging{A1062847-0846-427A-92A1-BB8251A91E91}\setup\hpzscr01.exe” -datfile hposcr04.dat

HP Software Update --> MsiExec.exe /X{457791C5-D702-4143-A7B2-2744BE9573F2}

Java 6 Update 5 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}

K-Lite Mega Codec Pack 2.1.0 --> “C:\Program Files\K-Lite Codec Pack\unins000.exe”

McAfee SiteAdvisor --> C:\Program Files\SiteAdvisor\6253\uninstall.exe

Microsoft Compression Client Pack 1.0 for Windows XP --> “C:\WINDOWS$NtUninstallMSCompPackV1$\spuninst\spuninst.exe”

Microsoft Office Access MUI (Polish) 2007 --> MsiExec.exe /X{90120000-0015-0415-0000-0000000FF1CE}

Microsoft Office Enterprise 2007 --> “C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe” /uninstall ENTERPRISE /dll OSETUP.DLL

Microsoft Office Enterprise 2007 --> MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}

Microsoft Office Excel MUI (Polish) 2007 --> MsiExec.exe /X{90120000-0016-0415-0000-0000000FF1CE}

Microsoft Office Groove MUI (Polish) 2007 --> MsiExec.exe /X{90120000-00BA-0415-0000-0000000FF1CE}

Microsoft Office InfoPath MUI (Polish) 2007 --> MsiExec.exe /X{90120000-0044-0415-0000-0000000FF1CE}

Microsoft Office OneNote MUI (Polish) 2007 --> MsiExec.exe /X{90120000-00A1-0415-0000-0000000FF1CE}

Microsoft Office Outlook MUI (Polish) 2007 --> MsiExec.exe /X{90120000-001A-0415-0000-0000000FF1CE}

Microsoft Office PowerPoint MUI (Polish) 2007 --> MsiExec.exe /X{90120000-0018-0415-0000-0000000FF1CE}

Microsoft Office Proof (English) 2007 --> MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}

Microsoft Office Proof (German) 2007 --> MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}

Microsoft Office Proof (Polish) 2007 --> MsiExec.exe /X{90120000-001F-0415-0000-0000000FF1CE}

Microsoft Office Proofing (Polish) 2007 --> MsiExec.exe /X{90120000-002C-0415-0000-0000000FF1CE}

Microsoft Office Publisher MUI (Polish) 2007 --> MsiExec.exe /X{90120000-0019-0415-0000-0000000FF1CE}

Microsoft Office Shared MUI (Polish) 2007 --> MsiExec.exe /X{90120000-006E-0415-0000-0000000FF1CE}

Microsoft Office Word MUI (Polish) 2007 --> MsiExec.exe /X{90120000-001B-0415-0000-0000000FF1CE}

Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs --> MsiExec.exe /X{90120000-00B2-0409-0000-0000000FF1CE}

Microsoft User-Mode Driver Framework Feature Pack 1.0 --> “C:\WINDOWS$NtUninstallWudf01000$\spuninst\spuninst.exe”

Mozilla Firefox (2.0.0.14) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe

NAPIPROJEKT 1.0.6.1 --> “C:\Program Files\NAPI-PROJEKT\unins000.exe”

Nero 7 Essentials --> MsiExec.exe /X{A2104078-AAA5-449E-95DD-55C9443A1045}

neroxml --> MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}

Notepad++ --> C:\Program Files\Notepad++\uninstall.exe

Odkurzacz 11.2 Pro --> “C:\Program Files\Odkurzacz\unins000.exe”

Unlocker 1.8.7 --> C:\Program Files\Unlocker\uninst.exe

WIDCOMM Bluetooth Software --> MsiExec.exe /X{3F4EC965-28EF-45C3-B063-04B25D4E9679}

Winamp --> “C:\Program Files\Winamp\UninstWA.exe”

Windows Media Format 11 runtime --> “C:\WINDOWS$NtUninstallWMFDist11$\spuninst\spuninst.exe”

– Application Event Log -------------------------------------------------------

Event Record #/Type255 / Warning

Event Submitted/Written: 05/17/2008 00:49:51 PM

Event ID/Source: 1020 / ASP.NET 2.0.50727.0

Event Description:

Aktualizacje metabazy IIS zostały przerwane, ponieważ nie zainstalowano usług IIS na tym komputerze lub je wyłączono. Aby skonfigurować platformę ASP.NET w celu uruchamiania jej w usługach IIS, należy zainstalować lub włączyć usługi IIS i ponownie zarejestrować platformę ASP.NET, korzystając z programu aspnet_regiis.exe /i.

Event Record #/Type239 / Warning

Event Submitted/Written: 05/17/2008 11:18:19 AM

Event ID/Source: 1015 / MsiInstaller

Event Description:

Nie można połączyć się z serwerem. Błąd: 0x800401F0

Event Record #/Type237 / Warning

Event Submitted/Written: 05/17/2008 11:18:17 AM

Event ID/Source: 1015 / MsiInstaller

Event Description:

Nie można połączyć się z serwerem. Błąd: 0x800401F0

Event Record #/Type235 / Warning

Event Submitted/Written: 05/17/2008 11:18:14 AM

Event ID/Source: 1015 / MsiInstaller

Event Description:

Nie można połączyć się z serwerem. Błąd: 0x800401F0

Event Record #/Type233 / Warning

Event Submitted/Written: 05/17/2008 11:18:11 AM

Event ID/Source: 1015 / MsiInstaller

Event Description:

Nie można połączyć się z serwerem. Błąd: 0x800401F0

– Security Event Log ----------------------------------------------------------

No Errors/Warnings found.

– System Event Log ------------------------------------------------------------

Event Record #/Type468 / Warning

Event Submitted/Written: 05/17/2008 07:49:16 PM

Event ID/Source: 4226 / Tcpip

Event Description:

Protokół TCP/IP osiągnął limit zabezpieczeń ustalony dla liczby równoczesnych prób połączeń TCP.

Event Record #/Type467 / Warning

Event Submitted/Written: 05/17/2008 07:31:57 PM

Event ID/Source: 4226 / Tcpip

Event Description:

Protokół TCP/IP osiągnął limit zabezpieczeń ustalony dla liczby równoczesnych prób połączeń TCP.

Event Record #/Type409 / Warning

Event Submitted/Written: 05/17/2008 11:48:51 AM

Event ID/Source: 4226 / Tcpip

Event Description:

Protokół TCP/IP osiągnął limit zabezpieczeń ustalony dla liczby równoczesnych prób połączeń TCP.

Event Record #/Type370 / Warning

Event Submitted/Written: 05/17/2008 11:10:21 AM

Event ID/Source: 20 / Print

Event Description:

Sterownik drukarki hp psc 1310 series dla Windows NT x86 Version-3 został dodany lub zaktualizowany. Pliki:- hpz2ku10.dll, hpzpm310.dll, hpop8310.dat, hpfmom10.hlp, hpzimc10.dll, hpzstw10.exe, hpzslk10.dll, hpzr3210.dll, hpzrm310.dll, hpzcon10.dll, hpzcfg10.exe, hpzeng10.exe, hpzflt10.dll, hpzime10.dll, hpzjui10.dll, hpzpre10.exe, hpzres10.dll, hpzstc10.exe, hpztbi10.dll, hpztbu10.exe, hpztbx10.exe, hpzlnt10.dll, hpzsnt10.dll, hpzcoi10.dll, hpzvip10.dll, hpzims10.dll, hpzpcl10.dll.

Event Record #/Type369 / Warning

Event Submitted/Written: 05/17/2008 11:10:15 AM

Event ID/Source: 20 / Print

Event Description:

Sterownik drukarki hp psc 1310 series dla Windows NT x86 Version-3 został dodany lub zaktualizowany. Pliki:- hpz2ku10.dll, hpzpm310.dll, hpop8310.dat, hpfmom10.hlp, hpzimc10.dll, hpzstw10.exe, hpzslk10.dll, hpzr3210.dll, hpzrm310.dll, hpzcon10.dll, hpzcfg10.exe, hpzeng10.exe, hpzflt10.dll, hpzime10.dll, hpzjui10.dll, hpzpre10.exe, hpzres10.dll, hpzstc10.exe, hpztbi10.dll, hpztbu10.exe, hpztbx10.exe, hpzlnt10.dll, hpzsnt10.dll, hpzcoi10.dll, hpzvip10.dll, hpzims10.dll, hpzpcl10.dll.

– End of Deckard’s System Scanner: finished at 2008-05-17 20:17:45 ------------

Directories/Files moved to C:\Deckard\System Scanner\backup

2007-03-27 10:46:26 239616 --a------ C:\DOCUME~1\Andrzej\USTAWI~1\Temp\1d64d8.mst

2008-05-14 00:52:06 245 --a------ C:\DOCUME~1\Andrzej\USTAWI~1\Temp\1F1205F7.TMP

2008-05-17 11:40:53 31116 --a------ C:\DOCUME~1\Andrzej\USTAWI~1\Temp\btwinlog.txt

2008-05-17 19:30:02 173 --a------ C:\DOCUME~1\Andrzej\USTAWI~1\Temp\jusched.log

2008-05-17 19:25:02 0 d-------- C:\DOCUME~1\Andrzej\USTAWI~1\Temp\WPDNSE

2008-05-17 19:25:03 0 d-------- C:\DOCUME~1\Andrzej\USTAWI~1\Temp_avast4_

2008-05-17 12:49:51 5012 --a------ C:\WINDOWS\temp\ASPNETSetup_00000.log

2008-05-17 12:50:24 596 --a------ C:\WINDOWS\temp\hpzcoi00.log

2008-05-17 12:50:27 596 --a------ C:\WINDOWS\temp\hpzcoi01.log

-*- End of Logfile -*-

Deckard’s System Scanner v20071014.68

Run by Andrzej on 2008-05-17 20:13:09

Computer is in Normal Mode.

– System Restore --------------------------------------------------------------

Successfully created a Deckard’s System Scanner Restore Point.

– Last 5 Restore Point(s) –

15: 2008-05-17 18:13:14 UTC - RP25 - Deckard’s System Scanner Restore Point

14: 2008-05-17 10:48:02 UTC - RP24 - Software Distribution Service 3.0

13: 2008-05-17 09:39:52 UTC - RP23 - Instalacja niepodpisanego sterownika

12: 2008-05-17 09:39:20 UTC - RP22 - Instalacja niepodpisanego sterownika

11: 2008-05-17 09:36:04 UTC - RP21 - Zainstalowano: WIDCOMM Bluetooth Software

– First Restore Point –

1: 2008-05-17 07:25:09 UTC - RP11 - Installed Windows XP Wudf01000.

Backed up registry hives.

Performed disk cleanup.

– HijackThis (run as Andrzej.exe) ---------------------------------------------

Logfile of HijackThis v1.99.1

Scan saved at 20:14:26, on 2008-05-17

Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16640)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\bin\btwdins.exe

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\SiteAdvisor\6253\SAService.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\WINDOWS\system32\RunDll32.exe

C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe

C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE

C:\Program Files\Unlocker\UnlockerAssistant.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\SiteAdvisor\6253\SiteAdv.exe

C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe

C:\Program Files\Nero\Nero 7\InCD\InCD.exe

C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

C:\Program Files\HP\hpcoretech\hpcmpmgr.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Gadu-Gadu\gg.exe

C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\BTTray.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\AVerTV\QuickTV.exe

C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

C:\Program Files\Winamp\winamp.exe

C:\Program Files\Mozilla Firefox\firefox.exe

E:\Z internetu\dss.exe

E:\ZINTER~1\Andrzej.exe