dalik
1 Maj 2009 15:19
#1
Witam, kupiłem nowego laptopa Toshiba A300, zaistalowałem sobie wszystkie programy jakie używałem do tej pory na starych sprzętach F/S. NO i mam problem którego nie moge rozwiązać. Po przeglądaniu przez kilka minut stron w opera, blokuje sie ona dając komunikat brak odpowiedzi. I może tak wisieć do resetu kompa. Zaznaczę że wszystko inne działa bez zarzutu. Po zawieszce opery inne przeglądarki też nie reagują, ale gg, skype, draco wszystko działa.
oto mój log hijack:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:48:36, on 2009-05-01
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18226)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe
C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\program files\winamp toolbar\WinampTbServer.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Windows\system32\conime.exe
C:\Program Files\Opera\opera.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [cfFncEnabler.exe] cfFncEnabler.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
O4 - HKLM\..\Run: [HDMICtrlMan] C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
O4 - HKCU\..\Run: [Nowe Gadu-Gadu] "C:\Program Files\Nowe Gadu-Gadu\gg.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Draco Organizer] "C:\Program Files\Draco Software\Draco Organizer 3\Organizer.exe" /tray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'USŁUGA SIECIOWA')
O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (User 'Default user')
O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: eBay - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/4908-44618-9400-3/4 (file missing)
O9 - Extra button: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/redirect-home?tag=Toshibaukbholink-21&site=home (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: ASKService - Unknown owner - C:\Program Files\AskBarDis\bar\bin\AskService.exe
O23 - Service: ASKUpgrade - Unknown owner - C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Menedżer Google Desktop 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\partner.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: SmartFaceVWatchSrv - Toshiba - C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe
--
End of file - 10586 bytes
Proszę o pomoc
sorry nie doczytałem. Log jeszcze raz.
http://www.wklejto.pl/32579
log ogólnie czysty, kosmetycznie możesz usunąć wpisy:
Gutek
1 Maj 2009 16:19
#3
To nic nie da - daj log z ComboFix
dalik
1 Maj 2009 16:50
#4
Odinstalowałem AskBarDis, usunąłem to co zaproponował devil33 i znowu zawiecha. Róznica polega jednak teraz na tym, że po wyłaczeniu opery, zamyka się po kilku minutach, bez konieczności restartu kompa jak to było wcześniej.
Gutek poniżej aktualny log z combofix
http://www.wklejto.pl/32581
Poradzisz coś?
Gutek
1 Maj 2009 16:55
#5
dalik
1 Maj 2009 17:33
#6
Przeskanowałem tym programem, wyczyściłem i aktualny log.
ComboFix 09-05-01.1 - Darek i Ewa 2009-05-01 19:22.1 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1250.48.1045.18.3069.1899 [GMT 2:00]
Uruchomiony z: c:\users\Darek i Ewa\Downloads\ComboFix.exe
FW: ZoneAlarm Firewall *enabled*
.
((((((((((((((((((((((((( Pliki utworzone od 2009-04-01 do 2009-05-01 )))))))))))))))))))))))))))))))
.
2009-05-01 16:58 . 2009-05-01 16:58 23 --sha-w c:\windows\system32\edacded0_x.dat
2009-05-01 16:58 . 2009-05-01 16:58 -------- d-----w c:\program files\jv16 PowerTools 2009
2009-05-01 14:21 . 2009-05-01 14:21 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\Skunk Studios
2009-05-01 14:17 . 2009-05-01 14:17 -------- d-----w c:\windows\Flux Family Secrets - The Ripple Effect
2009-05-01 14:17 . 2009-05-01 14:17 -------- d-----w c:\program files\Flux Family Secrets - The Ripple Effect
2009-05-01 08:58 . 2009-05-01 08:58 -------- d-----w c:\users\Darek i Ewa\AppData\Local\WindowsUpdate
2009-05-01 08:29 . 2007-12-24 15:37 138384 ----a-w c:\windows\system32\drivers\tmcomm.sys
2009-05-01 08:28 . 2009-05-01 08:55 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\HouseCall 6.6
2009-05-01 08:28 . 2009-05-01 08:28 -------- d-----w c:\windows\system32\HouseCall 6.6
2009-05-01 08:26 . 2009-05-01 08:26 -------- d-----w c:\windows\Sun
2009-05-01 07:47 . 2008-11-06 00:03 -------- d-----w C:\SDFix
2009-05-01 06:48 . 2009-05-01 06:48 -------- d-----w c:\program files\Trend Micro
2009-05-01 06:35 . 2009-05-01 06:42 -------- d-----w c:\program files\SkanerOnline
2009-04-30 15:59 . 2009-05-01 06:38 -------- d-----w c:\program files\Panda Security
2009-04-29 17:45 . 2009-04-29 17:54 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\HiT-MM
2009-04-29 17:45 . 2009-05-01 17:09 -------- d---a-w c:\programdata\TEMP
2009-04-29 17:45 . 2009-05-01 17:09 -------- d---a-w c:\users\All Users\TEMP
2009-04-29 16:00 . 2009-04-29 16:00 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\VSRevoGroup
2009-04-28 20:22 . 2009-04-28 20:22 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\OpenOffice.org
2009-04-28 20:15 . 2009-04-28 20:15 -------- d-----w c:\program files\VS Revo Group
2009-04-27 19:21 . 2009-04-27 19:21 -------- d-----w c:\windows\Amelies Cafe
2009-04-27 19:21 . 2009-04-27 19:21 -------- d-----w c:\program files\Amelies Cafe
2009-04-27 18:57 . 2009-04-27 18:57 -------- d-----w c:\program files\OpenOffice.org 3
2009-04-27 16:55 . 2009-04-27 18:09 440864 --sha-w c:\windows\system32\drivers\fidbox.dat
2009-04-27 16:37 . 2009-04-27 18:02 -------- d-----w c:\program files\Common Files\ParetoLogic
2009-04-27 16:37 . 2009-04-27 18:02 -------- d-----w c:\programdata\ParetoLogic
2009-04-27 16:37 . 2009-04-27 18:02 -------- d-----w c:\users\All Users\ParetoLogic
2009-04-27 16:36 . 2009-04-27 16:36 -------- d-----w c:\users\Darek i Ewa\AppData\Local\Downloaded Installations
2009-04-27 15:07 . 2009-04-27 15:07 -------- d-----w c:\users\Darek i Ewa\AppData\Local\Apple Computer
2009-04-27 15:07 . 2009-04-27 15:07 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\Apple Computer
2009-04-27 15:07 . 2009-04-27 15:07 -------- d-----w c:\users\Darek i Ewa\AppData\Local\Apple
2009-04-27 15:07 . 2009-04-27 15:07 -------- d-----w c:\program files\Apple Software Update
2009-04-27 15:07 . 2009-04-27 15:07 -------- d-----w c:\programdata\Apple
2009-04-27 15:07 . 2009-04-27 15:07 -------- d-----w c:\users\All Users\Apple
2009-04-27 15:02 . 2009-04-27 15:02 -------- d-----w c:\users\Darek i Ewa\AppData\Local\Mozilla
2009-04-27 14:00 . 2009-04-27 14:00 -------- d-----w c:\users\Remek\AppData\Local\Toshiba
2009-04-26 19:09 . 2009-04-26 19:09 -------- d-----w c:\users\Darek i Ewa\AppData\Local\Winamp Toolbar
2009-04-26 05:07 . 2009-04-26 05:07 -------- d-----w c:\programdata\Alex Gordon
2009-04-26 05:07 . 2009-04-26 05:07 -------- d-----w c:\users\All Users\Alex Gordon
2009-04-26 05:00 . 2009-04-26 05:00 53248 ----a-w c:\windows\system32\unrar.dll
2009-04-26 04:58 . 2009-04-26 04:58 -------- d-----w c:\program files\Alex Gordon
2009-04-26 04:33 . 2009-04-26 04:33 -------- d-----w c:\users\Darek i Ewa\AppData\Local\Microsoft Games
2009-04-25 18:59 . 2009-04-25 18:59 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\DAEMON Tools
2009-04-25 18:59 . 2009-04-25 18:59 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\DAEMON Tools Pro
2009-04-25 18:59 . 2009-04-25 18:59 6944 ----a-w c:\users\Darek i Ewa\AppData\Local\d3d9caps.dat
2009-04-25 10:00 . 2009-04-25 10:00 -------- d-----w c:\users\Remek\AppData\Local\Opera
2009-04-25 09:59 . 2009-04-25 09:59 -------- d-----w c:\users\Remek\AppData\Roaming\ATI
2009-04-25 09:59 . 2009-04-25 09:59 -------- d-----w c:\users\Remek\AppData\Local\ATI
2009-04-25 09:59 . 2009-04-25 09:59 82720 ----a-w c:\users\Remek\AppData\Local\GDIPFONTCACHEV1.DAT
2009-04-25 09:59 . 2009-04-25 09:59 -------- d-----w c:\users\Remek\AppData\Local\Google
2009-04-25 09:59 . 2009-04-25 09:59 -------- d-----r c:\users\Remek\Searches
2009-04-24 22:12 . 2008-05-27 05:17 11776 ----a-w c:\windows\system32\msshooks.dll
2009-04-24 21:52 . 2009-04-24 21:52 -------- d-----w c:\windows\system32\IOSUBSYS
2009-04-24 21:42 . 2009-04-24 21:42 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\Toshiba
2009-04-24 21:23 . 2009-04-24 21:23 -------- d-----w c:\programdata\DAEMON Tools Lite
2009-04-24 21:23 . 2009-04-24 21:23 -------- d-----w c:\users\All Users\DAEMON Tools Lite
2009-04-24 21:23 . 2009-04-24 21:23 -------- d-----w c:\program files\DAEMON Tools Lite
2009-04-24 21:16 . 2009-04-24 21:16 -------- d-----w c:\program files\Common Files\Adobe
2009-04-24 21:14 . 2009-04-24 21:14 -------- d-----w c:\programdata\IsolatedStorage
2009-04-24 21:14 . 2009-04-24 21:14 -------- d-----w c:\users\All Users\IsolatedStorage
2009-04-24 21:14 . 2009-04-24 21:14 -------- d-----w c:\program files\CCleaner
2009-04-24 21:13 . 2009-04-24 21:13 717296 ----a-w c:\windows\system32\drivers\sptd.sys
2009-04-24 21:13 . 2009-04-26 05:00 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\DAEMON Tools Lite
2009-04-24 21:13 . 2009-04-24 21:13 -------- d-----w c:\program files\NAPI-PROJEKT
2009-04-24 21:07 . 2008-02-23 02:41 22528 ----a-w c:\windows\system32\netiougc.exe
2009-04-24 21:07 . 2008-02-23 04:38 170496 ----a-w c:\windows\system32\tcpipcfg.dll
2009-04-24 21:06 . 2009-05-01 16:14 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\Draco Organizer
2009-04-24 21:04 . 2009-04-24 21:04 -------- d-----w c:\programdata\CheckPoint
2009-04-24 21:04 . 2009-04-24 21:04 -------- d-----w c:\users\All Users\CheckPoint
2009-04-24 21:04 . 2009-05-01 17:16 -------- d-----w c:\windows\Internet Logs
2009-04-24 21:02 . 2009-04-24 21:02 -------- d-----w c:\programdata\Azureus
2009-04-24 21:02 . 2009-04-24 21:02 -------- d-----w c:\users\All Users\Azureus
2009-04-24 21:02 . 2009-05-01 17:20 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\Azureus
2009-04-24 20:59 . 2009-04-24 20:59 -------- d-----w c:\programdata\Winamp Toolbar
2009-04-24 20:59 . 2009-04-24 20:59 -------- d-----w c:\users\All Users\Winamp Toolbar
2009-04-24 20:59 . 2009-04-24 20:59 -------- d-----w c:\program files\Winamp Toolbar
2009-04-24 20:59 . 2009-04-24 20:59 -------- d-----w c:\program files\Common Files\PX Storage Engine
2009-04-24 20:59 . 2009-04-24 21:28 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\Winamp
2009-04-24 20:59 . 2009-04-30 15:44 -------- d-----w c:\program files\Winamp
2009-04-24 20:58 . 2009-04-24 20:58 -------- d-----w c:\program files\Vuze
2009-04-24 20:58 . 2009-04-24 21:00 -------- d-----w c:\program files\Spybot - Search & Destroy
2009-04-24 20:58 . 2009-05-01 06:45 -------- d-----w c:\programdata\Spybot - Search & Destroy
2009-04-24 20:58 . 2009-05-01 06:45 -------- d-----w c:\users\All Users\Spybot - Search & Destroy
2009-04-24 20:57 . 2009-03-02 17:10 67584 ----a-w c:\windows\system32\ff_vfw.dll
2009-04-24 20:57 . 2008-06-08 20:58 60273 ----a-w c:\windows\system32\pthreadGC2.dll
2009-04-24 20:57 . 2009-04-24 20:57 -------- d-----w c:\program files\ffdshow
2009-04-24 20:35 . 2009-04-24 20:35 -------- d-----w c:\windows\system32\Adobe
2009-04-24 20:33 . 2008-06-20 01:14 97800 ----a-w c:\windows\system32\infocardapi.dll
2009-04-24 20:33 . 2008-06-20 01:14 105016 ----a-w c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-04-24 20:33 . 2008-06-20 01:14 622080 ----a-w c:\windows\system32\icardagt.exe
2009-04-24 20:33 . 2008-06-20 01:14 11264 ----a-w c:\windows\system32\icardres.dll
2009-04-24 20:33 . 2008-06-20 01:14 43544 ----a-w c:\windows\system32\PresentationHostProxy.dll
2009-04-24 20:33 . 2008-06-20 01:14 781344 ----a-w c:\windows\system32\PresentationNative_v0300.dll
2009-04-24 20:33 . 2008-06-20 01:14 326160 ----a-w c:\windows\system32\PresentationHost.exe
2009-04-24 20:25 . 2009-04-24 20:28 -------- d-----w c:\users\Darek i Ewa\AppData\Roaming\Nowe Gadu-Gadu
2009-04-24 20:24 . 2009-04-24 20:54 -------- d-----w c:\program files\Nowe Gadu-Gadu
2009-04-24 20:24 . 2008-07-27 18:03 96760 ----a-w c:\windows\system32\dfshim.dll
2009-04-24 20:24 . 2008-07-27 18:03 282112 ----a-w c:\windows\system32\mscoree.dll
2009-04-24 20:24 . 2008-07-27 18:03 41984 ----a-w c:\windows\system32\netfxperf.dll
2009-04-24 20:23 . 2009-04-24 20:23 -------- d-----w c:\users\Darek i Ewa\AppData\Local\Sun
2009-04-24 20:22 . 2008-07-27 18:03 158720 ----a-w c:\windows\system32\mscorier.dll
2009-04-24 20:22 . 2008-07-27 18:03 83968 ----a-w c:\windows\system32\mscories.dll
2009-04-24 20:22 . 2009-04-24 20:22 -------- d-----w c:\users\Darek i Ewa\AppData\Local\Opera
2009-04-24 20:22 . 2009-04-24 20:22 -------- d-----w c:\program files\Opera
2009-04-24 20:17 . 2008-06-06 03:27 562176 ----a-w c:\windows\system32\msdtcprx.dll
2009-04-24 20:17 . 2008-06-06 03:27 38912 ----a-w c:\windows\system32\xolehlp.dll
2009-04-24 20:17 . 2009-02-13 08:49 1255936 ----a-w c:\windows\system32\lsasrv.dll
2009-04-24 20:17 . 2009-02-13 08:49 72704 ----a-w c:\windows\system32\secur32.dll
2009-04-24 20:17 . 2009-03-17 03:38 13824 ----a-w c:\windows\system32\apilogen.dll
2009-04-24 20:17 . 2009-03-17 03:38 24064 ----a-w c:\windows\system32\amxread.dll
2009-04-24 20:16 . 2009-04-24 21:43 -------- d-----w c:\users\Darek i Ewa\AppData\Local\Adobe
2009-04-24 20:13 . 2009-03-03 04:39 26112 ----a-w c:\windows\system32\printfilterpipelineprxy.dll
2009-04-24 20:12 . 2008-08-27 01:05 212480 ----a-w c:\windows\system32\drivers\mrxsmb10.sys
2009-04-24 20:12 . 2008-06-19 03:31 361984 ----a-w c:\windows\system32\IPSECSVC.DLL
2009-04-24 20:12 . 2008-04-18 05:48 269312 ----a-w c:\windows\system32\es.dll
2009-04-24 19:44 . 2008-08-28 03:40 425472 ----a-w c:\windows\system32\PhotoMetadataHandler.dll
2009-04-24 19:44 . 2008-08-28 03:40 347136 ----a-w c:\windows\system32\WindowsCodecsExt.dll
2009-04-24 19:44 . 2008-08-28 03:40 712704 ----a-w c:\windows\system32\WindowsCodecs.dll
2009-04-24 19:44 . 2008-09-18 04:56 147456 ----a-w c:\windows\system32\Faultrep.dll
2009-04-24 19:41 . 2008-06-23 01:59 2868736 ----a-w c:\windows\system32\mf.dll
2009-04-24 19:41 . 2008-06-23 01:59 996352 ----a-w c:\windows\system32\WMNetMgr.dll
2009-04-24 19:41 . 2008-06-23 01:58 94720 ----a-w c:\windows\system32\logagent.exe
2009-04-24 19:41 . 2008-10-21 05:25 1645568 ----a-w c:\windows\system32\connect.dll
2009-04-24 19:14 . 2009-02-09 03:10 2033152 ----a-w c:\windows\system32\win32k.sys
2009-04-24 19:14 . 2008-09-10 03:40 1334272 ----a-w c:\windows\system32\msxml6.dll
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-01 16:47 . 2008-01-21 06:24 662056 ----a-w c:\windows\system32\perfh015.dat
2009-05-01 16:47 . 2008-01-21 06:24 126908 ----a-w c:\windows\system32\perfc015.dat
2009-05-01 16:41 . 2009-04-24 21:05 350192 ---ha-w c:\windows\system32\drivers\vsconfig.xml
2009-05-01 07:42 . 2008-07-04 10:23 -------- d-----w c:\program files\Google
2009-04-27 18:09 . 2009-04-27 16:55 6980 --sha-w c:\windows\system32\drivers\fidbox.idx
2009-04-27 18:01 . 2008-07-04 09:59 -------- d-----w c:\program files\Toshiba
2009-04-27 18:01 . 2008-07-04 09:49 -------- d--h--w c:\program files\InstallShield Installation Information
2009-04-27 15:23 . 2006-11-02 10:25 51200 ----a-w c:\windows\inf\infpub.dat
2009-04-27 15:23 . 2006-11-02 10:25 143360 ----a-w c:\windows\inf\infstrng.dat
2009-04-25 05:21 . 2006-11-02 11:18 -------- d-----w c:\program files\Windows Mail
2009-04-24 21:05 . 2009-04-24 21:05 -------- d-----w c:\program files\Zone Labs
2009-04-24 21:05 . 2006-11-02 10:25 86016 ----a-w c:\windows\inf\infstor.dat
2009-04-24 21:05 . 2009-04-24 21:05 -------- d-----w c:\program files\Draco Software
2009-04-24 20:30 . 2009-04-24 20:30 -------- d-----r c:\program files\Skype
2009-04-24 20:30 . 2009-04-24 20:30 -------- d-----w c:\program files\Alwil Software
2009-04-24 20:23 . 2008-07-04 09:35 -------- d-----w c:\program files\Java
2009-04-24 17:36 . 2009-04-24 17:36 0 --sha-r c:\windows\system32\drivers\TOSHIBA_Satellite A300_08016-PL_PSAGCE-09000.MRK
2009-04-24 17:32 . 2009-04-24 17:32 -------- d-----w c:\program files\Realtek
2009-04-24 17:32 . 2008-07-04 09:50 319456 ----a-w c:\windows\DIFxAPI.dll
2009-04-24 17:31 . 2009-04-24 17:31 -------- d-----w c:\program files\ATI Technologies
2009-04-24 17:30 . 2008-07-04 09:36 -------- d-----w c:\program files\Intel
2009-03-17 03:38 . 2009-04-24 20:17 40960 ----a-w c:\windows\AppPatch\apihex86.dll
2009-03-03 04:46 . 2009-04-24 20:14 3599328 ----a-w c:\windows\system32\ntkrnlpa.exe
2009-03-03 04:46 . 2009-04-24 20:14 3547632 ----a-w c:\windows\system32\ntoskrnl.exe
2009-03-03 04:40 . 2009-04-24 19:42 827392 ----a-w c:\windows\system32\wininet.dll
2009-03-03 04:39 . 2009-04-24 20:13 183296 ----a-w c:\windows\system32\sdohlp.dll
2009-03-03 04:39 . 2009-04-24 20:14 551424 ----a-w c:\windows\system32\rpcss.dll
2009-03-03 04:37 . 2009-04-24 19:42 78336 ----a-w c:\windows\system32\ieencode.dll
2009-03-03 04:37 . 2009-04-24 20:13 98304 ----a-w c:\windows\system32\iasrecst.dll
2009-03-03 04:37 . 2009-04-24 20:13 54784 ----a-w c:\windows\system32\iasads.dll
2009-03-03 04:37 . 2009-04-24 20:13 44032 ----a-w c:\windows\system32\iasdatastore.dll
2009-03-03 03:04 . 2009-04-24 20:14 666624 ----a-w c:\windows\system32\printfilterpipelinesvc.exe
2009-03-03 02:38 . 2009-04-24 20:13 17408 ----a-w c:\windows\system32\iashost.exe
2009-03-03 02:28 . 2009-04-24 19:42 26624 ----a-w c:\windows\system32\ieUnatt.exe
2009-02-15 22:11 . 2009-04-24 21:05 293528 ----a-w c:\windows\system32\drivers\vsdatant.sys
2009-02-15 22:10 . 2009-04-24 21:06 1221512 ----a-w c:\windows\system32\zpeng25.dll
2009-02-05 20:06 . 2009-04-24 20:30 51792 ----a-w c:\windows\system32\drivers\aswMonFlt.sys
2008-01-21 02:43 . 2006-11-02 12:50 174 --sha-w c:\program files\desktop.ini
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-21 1233920]
"TOSCDSPD"="c:\program files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe" [2008-04-24 430080]
"Nowe Gadu-Gadu"="c:\program files\Nowe Gadu-Gadu\gg.exe" [2009-04-20 9818728]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"Draco Organizer"="c:\program files\Draco Software\Draco Organizer 3\Organizer.exe" [2009-02-22 10560512]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-07-04 68856]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_06\bin\jusched.exe" [2008-03-25 144784]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-06 1029416]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2008-04-29 417792]
"HDMICtrlMan"="c:\program files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe" [2008-04-26 716800]
"TPwrMain"="c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE" [2008-01-17 431456]
"HSON"="c:\program files\TOSHIBA\TBS\HSON.exe" [2007-10-31 54608]
"SmoothView"="c:\program files\Toshiba\SmoothView\SmoothView.exe" [2008-01-25 509816]
"00TCrdMain"="c:\program files\TOSHIBA\FlashCards\TCrdMain.exe" [2008-03-19 716800]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
"ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2009-02-15 981384]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"NDSTray.exe"="NDSTray.exe" [BU]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2008-04-08 6037504]
"Skytel"="Skytel.exe" - c:\windows\SkyTel.exe [2007-11-20 1826816]
c:\users\Remek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
TRDCReminder.lnk - c:\program files\Toshiba\TRDCReminder\TRDCReminder.exe [2008-3-5 393216]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~2\GOEC62~1.DLL
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{0C12CEC7-392B-43B9-B40C-07340BE0882A}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{EDF8BAA0-2546-417B-810E-78DDE9D6AA9F}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{A1EB7158-918B-486D-B2E6-6673E32ABABF}"= c:\program files\Skype\Phone\Skype.exe:Skype
"TCP Query User{3A9E1A36-3934-4EBA-A68C-6F2EB1CA0F20}c:\\program files\\vuze\\azureus.exe"= UDP:c:\program files\vuze\azureus.exe:Azureus
"UDP Query User{BA49DDCA-C67D-4C07-83A2-DBFC39C12185}c:\\program files\\vuze\\azureus.exe"= TCP:c:\program files\vuze\azureus.exe:Azureus
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)
R3 GoogleDesktopManager-022208-143751;Menedżer Google Desktop 5.7.802.22438;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2008-07-04 29744]
R3 Partner Service;Partner Service;c:\programdata\Partner\partner.exe [2008-07-04 110576]
S1 aswSP;avast! Self Protection; [x]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\DRIVERS\aswMonFlt.sys [2009-02-05 51792]
S2 ConfigFree Service;ConfigFree Service;c:\program files\TOSHIBA\ConfigFree\CFSvcs.exe [2008-04-16 40960]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service;c:\program files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [2007-12-03 126976]
S3 FwLnk;FwLnk Driver;c:\windows\system32\DRIVERS\FwLnk.sys [2006-11-20 7168]
S3 NETw5v32;Sterownik karty Intel(R) Wireless WiFi Link dla systemu Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw5v32.sys [2008-04-28 3658752]
S3 SmartFaceVWatchSrv;SmartFaceVWatchSrv;c:\program files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe [2008-04-24 73728]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{39d07498-30f6-11de-b7a3-806e6f6e6963}]
\shell\AutoRun\command - F:\autorun.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b0c83a3b-31ca-11de-a755-001e3398ae94}]
\shell\AutoRun\command - D:\csetup.exe
.
Zawartość folderu 'Zaplanowane zadania'
2009-05-01 c:\windows\Tasks\User_Feed_Synchronization-{99587E5E-A343-49EE-BF05-C8BC2F209EF1}.job
- c:\windows\system32\msfeedssync.exe [2008-01-21 02:24]
.
.
------- Skan uzupełniający -------
.
uStart Page = hxxp://www.google.com/ig/redirectdomain?brand=TSEA&bmod=TSEA;
mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=TSEA&bmod=TSEA
IE: &Winamp Search - c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} - hxxp://prerelease.trendmicro-europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
DPF: {68282C51-9459-467B-95BF-3C0E89627E55} - hxxp://www.mks.com.pl/skaner/SkanerOnline.cab
FF - ProfilePath - c:\users\Darek i Ewa\AppData\Roaming\Mozilla\Firefox\Profiles\n2no1xzj.default\
FF - prefs.js: network.proxy.type - 2
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-01 19:25
Windows 6.0.6001 Service Pack 1 NTFS
skanowanie ukrytych procesów ...
skanowanie ukrytych wpisów autostartu ...
skanowanie ukrytych plików ...
skanowanie pomyślnie ukończone
ukryte pliki: 0
**************************************************************************
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------
[HKEY_USERS\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\[u]0[/u]000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
[HKEY_USERS\SYSTEM\ControlSet004\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\[u]0[/u]000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
Czas ukończenia: 2009-05-01 19:26
ComboFix-quarantined-files.txt 2009-05-01 17:26
ComboFix2.txt 2009-05-01 16:44
ComboFix3.txt 2009-05-01 08:13
ComboFix4.txt 2009-05-01 07:06
Przed: 145 957 195 776 bajtów wolnych
Po: 145 927 213 056 bajtów wolnych
291 --- E O F --- 2009-05-01 10:29
nie wywalił mi tylko tego
HKEY_CURRENT_USER\Software\Microsoft\DirectInput\MostRecentApplication\Id : FLUX FAMILY SECRETS.EXE49B6D8FE0031354F
HKEY_CURRENT_USER\Software\Microsoft\DirectInput\MostRecentApplication\Name : FLUX FAMILY SECRETS.EXE
HKEY_USERS\S-1-5-21-484671504-2763304255-2626235754-1000\Software\Microsoft\DirectInput\MostRecentApplication\Id : FLUX FAMILY SECRETS.EXE49B6D8FE0031354F
HKEY_USERS\S-1-5-21-484671504-2763304255-2626235754-1000\Software\Microsoft\DirectInput\MostRecentApplication\Name : FLUX FAMILY SECRETS.EXE
tak na marginesie mam pytanie. Używam ccleanera i rewo uninstaler, za słabe programy, że zaproponowałeś jv16?
Niestety, wiesza się dalej. I wtedy żadna przegladarka nie działa.
– Dodane 02.05.2009 (So) 9:52 –
I ma ktos może jakieś rozwiązanie, bo tak się chroba nie da pracować, na necie.