Internet wolno dziala

[noriss (Pbiedermann)]

Brat korzystał z komputera i internet zaczal wolno chodzic. Brata nie mam jak usunąć ale jakby mogł ktoś co zrobić z tym logiem. Korzystam z przenosnego urzadzenia, wczesniej sciagalo z predkosciami 100kB/s teraz chodzi sciaga z predkoscia 4kB/s. Może byc coś z ustawieniami sieci, korzystam z programu buissness everywhere i net mam na laptopie przez usługe orange. Problem pojawil sie ostatnio, programy Ad Aware i Spybot nic nie byly w stanie zdzialac. To jest log kiedy buissness everywhere nie jest polaczony z netem, zaraz po wlaczeniu programu hijackthis z uprawnieniami administratora. Mam jeszcze jakis problem ze sterownikami karty graficznej (niektore gry nie dzialaja) ale wiecej na ten temat w tej chwili nie powiem bo nie wiem.

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 16:00:22, on 2007-12-20 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16575) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RtHDVCpl.exe C:\Windows\SYSTEM32\taskeng.exe C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe C:\Program Files\TOSHIBA\Utilities\KeNotify.exe C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe C:\Program Files\TOSHIBA\Toshiba Online Product Information\TOPI.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\TOSHIBA\Registration\ToshibaRegistration.exe C:\Windows\System32\rundll32.exe C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Rainlendar2\Rainlendar2.exe C:\Program Files\Synaptics\SynTP\SynToshiba.exe C:\Program Files\OrangeBS\BEWInternet-PL\Launcher\Launcher.exe C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe C:\Program Files\OpenOffice.org 2.2\program\soffice.exe C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN C:\Windows\ehome\ehmsas.exe C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe C:\Program Files\OrangeBS\BEWInternet-PL\systray\systrayapp.exe C:\Program Files\OrangeBS\BEWInternet-PL\connectivity\connectivitymanager.exe C:\Program Files\OrangeBS\BEWInternet-PL\PhoneTools\TextMessaging.exe C:\Program Files\OrangeBS\BEWInternet-PL\Deskboard\deskboard.exe C:\Program Files\OrangeBS\BEWInternet-PL\connectivity\CoreCom\CoreCom.exe C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe C:\Program Files\OrangeBS\BEWInternet-PL\connectivity\CoreCom\OraConfigRecover.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O4 - HKLM…\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM…\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM…\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE O4 - HKLM…\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe O4 - HKLM…\Run: [smoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe O4 - HKLM…\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe O4 - HKLM…\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe O4 - HKLM…\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP O4 - HKLM…\Run: [sVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL O4 - HKLM…\Run: [NDSTray.exe] NDSTray.exe O4 - HKLM…\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup O4 - HKLM…\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM…\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM…\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe O4 - HKLM…\Run: [Camera Assistant Software] “C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe” O4 - HKLM…\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM…\Run: [bEWINTERNET-PLSessionManager] C:\Program Files\OrangeBS\BEWInternet-PL\SessionManager\SessionManager.exe O4 - HKLM…\Run: [GrooveMonitor] “C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe” O4 - HKLM…\Run: [WinampAgent] “C:\Program Files\Winamp\winampa.exe” O4 - HKLM…\Run: [sunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe” O4 - HKCU…\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU…\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe O4 - HKCU…\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU…\Run: [Rainlendar2] C:\Program Files\Rainlendar2\Rainlendar2.exe O4 - HKUS\S-1-5-19…\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘USŁUGA LOKALNA’) O4 - HKUS\S-1-5-19…\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘USŁUGA LOKALNA’) O4 - HKUS\S-1-5-20…\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘USŁUGA SIECIOWA’) O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe O4 - Startup: RavMonE.exe O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra ‘Tools’ menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O9 - Extra button: eBay - {C08CAF1D-C0A3-40D5-9970-06D067EAC017} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url.pl?PL (file missing) O13 - Gopher Prefix: O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s … wflash.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe – End of file - 9230 bytes

[Gutek]

Daj log z ComboFix

[noriss (Pbiedermann)]

Log z Combo Fix, Rainlendar to pulpitowy kalendarz. Ostatnio instalowalem jave i flasha. Stronki które uzywaja flasha u mnie w szczegolnoscy wolno chodza (zadne stronki z filmikami). Przy uruchamianiu combo fix pojawia sie okienko z napiesem “program REG przestał działac”

ComboFix 07-12-21.4 - piotr 2007-12-21 11:32:01.2 - NTFSx86 Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1250.1.1045.18.1236 [GMT 1:00] Running from: C:\Users\piotr\Desktop\instalki\ComboFix.exe . ((((((((((((((((((((((((( Files Created from 2007-11-21 to 2007-12-21 ))))))))))))))))))))))))))))))) . 2007-12-21 03:01 . 2007-12-21 03:02 2007-12-21 03:01 . 2007-12-21 03:02 2007-12-20 18:35 . 2007-12-21 11:01 2007-12-20 17:03 . 2007-12-20 17:03 2007-12-20 15:47 . 2007-12-20 15:47 2007-12-20 14:15 . 2007-12-20 14:15 2007-12-20 14:15 . 2007-12-20 14:15 2007-12-20 14:15 . 2007-12-20 14:15 2007-12-20 14:14 . 2007-12-20 14:14 2007-12-19 10:47 . 2007-09-24 23:31 69,632 --a------ C:\Windows\System32\javacpl.cpl 2007-12-19 10:46 . 2007-12-19 10:47 2007-12-19 09:59 . 2007-12-19 09:59 2007-12-15 23:04 . 2007-12-15 23:04 2007-12-15 20:18 . 2007-12-15 20:18 2007-12-12 14:30 . 2007-12-12 14:30 1,327,104 --a------ C:\Windows\System32\quartz.dll 2007-12-12 14:30 . 2007-12-12 14:30 223,232 --a------ C:\Windows\System32\WMASF.DLL 2007-12-12 14:30 . 2007-12-12 14:30 9,728 --a------ C:\Windows\System32\LAPRXY.DLL 2007-12-12 14:30 . 2007-12-12 14:30 2,048 --a------ C:\Windows\System32\asferror.dll 2007-12-12 14:28 . 2007-12-12 14:28 130,048 --a------ C:\Windows\System32\drivers\srv2.sys 2007-12-12 14:28 . 2007-12-12 14:28 101,888 --a------ C:\Windows\System32\drivers\mrxsmb.sys 2007-12-12 14:28 . 2007-12-12 14:28 84,992 --a------ C:\Windows\System32\drivers\srvnet.sys 2007-12-12 14:28 . 2007-12-12 14:28 58,368 --a------ C:\Windows\System32\drivers\mrxsmb20.sys 2007-12-12 14:27 . 2007-12-12 14:27 3,504,824 --a------ C:\Windows\System32\ntkrnlpa.exe 2007-12-12 14:27 . 2007-12-12 14:27 3,470,520 --a------ C:\Windows\System32\ntoskrnl.exe 2007-12-12 14:27 . 2007-12-12 14:27 2,048 --a------ C:\Windows\System32\tzres.dll 2007-12-11 12:48 . 2007-12-11 12:48 2007-12-11 12:41 . 2007-03-08 00:51 129,784 --------- C:\Windows\System32\pxafs.dll 2007-12-08 15:36 . 2007-12-08 22:41 2007-12-07 18:28 . 2007-12-07 18:28 224,768 --a------ C:\Windows\System32\drivers\usbport.sys 2007-12-07 18:28 . 2007-12-07 18:28 193,536 --a------ C:\Windows\System32\drivers\usbhub.sys 2007-12-07 18:28 . 2007-12-07 18:28 73,216 --a------ C:\Windows\System32\drivers\usbccgp.sys 2007-12-07 18:28 . 2007-12-07 18:28 38,400 --a------ C:\Windows\System32\drivers\usbehci.sys 2007-12-07 18:28 . 2007-12-07 18:28 23,040 --a------ C:\Windows\System32\drivers\usbuhci.sys 2007-12-07 18:28 . 2007-12-07 18:28 8,704 --a------ C:\Windows\System32\hcrstco.dll 2007-12-07 18:28 . 2007-12-07 18:28 8,704 --a------ C:\Windows\System32\hccoin.dll 2007-12-07 18:28 . 2007-12-07 18:28 5,888 --a------ C:\Windows\System32\drivers\usbd.sys 2007-12-03 11:21 . 2007-12-03 11:36 2007-11-29 15:48 . 2007-11-29 15:48 2007-11-29 08:42 . 2007-12-20 14:04 2007-11-29 08:42 . 2007-12-20 14:04 2007-11-26 08:35 . 2007-11-26 09:44 2007-11-26 08:01 . 2002-01-09 09:34 131,856 --a------ C:\Windows\System32\temp.005 2007-11-24 20:27 . 2007-11-24 20:27 1,244,672 --a------ C:\Windows\System32\mcmde.dll . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-21 10:01 13,025 ----a-w C:\Users\piotr\AppData\Roaming\nvModes.dat 2007-12-21 10:01 --------- d-----w C:\Users\piotr\AppData\Roaming\OpenOffice.org2 2007-12-20 13:08 --------- d-----w C:\Program Files\DAEMON Tools 2007-12-20 02:21 --------- d-----w C:\Users\piotr\AppData\Roaming\Skype 2007-12-20 00:21 --------- d-----w C:\Users\piotr\AppData\Roaming\skypePM 2007-12-18 13:40 --------- d-----w C:\Program Files\Google 2007-12-12 13:29 56,320 ----a-w C:\Windows\System32\iesetup.dll 2007-12-12 13:29 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll 2007-12-12 13:29 26,624 ----a-w C:\Windows\System32\ieUnatt.exe 2007-11-30 06:21 --------- d-----w C:\Users\piotr\AppData\Roaming\Toshiba 2007-11-29 14:48 --------- d–h--w C:\Program Files\InstallShield Installation Information 2007-11-24 19:48 --------- d-----w C:\Program Files\Windows Mail 2007-11-24 19:29 704,000 ----a-w C:\Windows\System32\PhotoScreensaver.scr 2007-11-24 19:29 67,584 ----a-w C:\Windows\System32\wlanhlp.dll 2007-11-24 19:29 542,720 ----a-w C:\Windows\System32\sysmain.dll 2007-11-24 19:29 502,784 ----a-w C:\Windows\System32\wlansvc.dll 2007-11-24 19:29 47,104 ----a-w C:\Windows\System32\wlanapi.dll 2007-11-24 19:29 297,984 ----a-w C:\Windows\System32\wlansec.dll 2007-11-24 19:29 290,816 ----a-w C:\Windows\System32\wlanmsm.dll 2007-11-24 19:29 28,344 ----a-w C:\Windows\system32\drivers\battc.sys 2007-11-24 19:29 258,232 ----a-w C:\Windows\system32\drivers\acpi.sys 2007-11-24 19:29 24,064 ----a-w C:\Windows\System32\wtsapi32.dll 2007-11-24 19:29 20,920 ----a-w C:\Windows\system32\drivers\compbatt.sys 2007-11-24 19:29 2,923,520 ----a-w C:\Windows\explorer.exe 2007-11-24 19:29 2,027,008 ----a-w C:\Windows\System32\win32k.sys 2007-11-24 19:29 14,208 ----a-w C:\Windows\system32\drivers\CmBatt.sys 2007-11-20 06:15 --------- d-----w C:\Program Files\Wiedźmin 2007-11-15 16:37 32 ----a-w C:\Users\All Users\ezsid.dat 2007-11-15 16:37 32 ----a-w C:\ProgramData\ezsid.dat 2007-11-15 16:36 --------- d-----w C:\ProgramData\Skype 2007-11-15 16:36 --------- d-----w C:\Program Files\Skype 2007-11-15 16:35 --------- d-----w C:\Program Files\Common Files\Skype 2007-11-07 16:01 621,056 ----a-w C:\Windows\system32\drivers\dxgkrnl.sys 2007-11-07 16:01 36,864 ----a-w C:\Windows\System32\cdd.dll 2007-11-06 16:30 --------- d-----w C:\ProgramData\Microsoft Help 2007-11-06 16:28 --------- d-----w C:\Program Files\Microsoft Works 2007-11-06 16:27 --------- d-----w C:\Program Files\MSBuild 2007-11-06 16:21 --------- d-----w C:\Program Files\Microsoft Visual Studio 8 2007-11-01 13:25 278,984 ----a-w C:\Windows\system32\drivers\atksgt.sys 2007-11-01 13:25 25,416 ----a-w C:\Windows\system32\drivers\lirsgt.sys 2007-10-29 14:57 --------- d-----w C:\Users\piotr\AppData\Roaming\Talkback 2007-10-25 12:20 --------- d-----w C:\Program Files\Common Files\France Telecom 2007-10-13 21:43 8,147,968 ----a-w C:\Windows\System32\wmploc.DLL 2007-10-13 21:43 7,680 ----a-w C:\Windows\System32\spwmp.dll 2007-10-13 21:43 4,096 ----a-w C:\Windows\System32\dxmasf.dll 2007-10-13 21:43 356,864 ----a-w C:\Windows\System32\MediaMetadataHandler.dll 2007-10-13 21:41 84,480 ----a-w C:\Windows\System32\INETRES.dll 2007-10-13 21:41 788,992 ----a-w C:\Windows\System32\rpcrt4.dll 2007-10-13 21:41 737,792 ----a-w C:\Windows\System32\inetcomm.dll 2007-10-12 18:47 33,280 ----a-w C:\Windows\System32\slwmi.dll 2007-10-12 18:47 268,288 ----a-w C:\Windows\System32\mcbuilder.exe 2007-10-12 18:47 223,232 ----a-w C:\Windows\System32\SLC.dll 2007-10-12 18:46 57,856 ----a-w C:\Windows\System32\SLUINotify.dll 2007-10-12 18:46 566,784 ----a-w C:\Windows\System32\SLCommDlg.dll 2007-10-12 18:46 39,936 ----a-w C:\Windows\System32\slcinst.dll 2007-10-12 18:46 351,232 ----a-w C:\Windows\System32\SLUI.exe 2007-10-12 18:46 2,605,568 ----a-w C:\Windows\System32\SLsvc.exe 2007-10-12 18:46 186,368 ----a-w C:\Windows\System32\SLLUA.exe 2007-09-06 07:39 174 --sha-w C:\Program Files\desktop.ini . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “Sidebar”=“C:\Program Files\Windows Sidebar\sidebar.exe” [2006-11-02 13:35] “TOSCDSPD”=“C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe” [2006-11-13 15:49] “ehTray.exe”=“C:\Windows\ehome\ehTray.exe” [2006-11-02 13:35] “Rainlendar2”=“C:\Program Files\Rainlendar2\Rainlendar2.exe” [2007-07-24 08:12] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “Windows Defender”=“C:\Program Files\Windows Defender\MSASCui.exe” [2007-09-04 20:58] “RtHDVCpl”=“RtHDVCpl.exe” [2007-01-18 14:46 C:\Windows\RtHDVCpl.exe] “TPwrMain”=“C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE” [2006-12-19 23:16] “HSON”=“C:\Program Files\TOSHIBA\TBS\HSON.exe” [2006-12-07 16:49] “SmoothView”=“C:\Program Files\Toshiba\SmoothView\SmoothView.exe” [2007-02-06 14:21] “00TCrdMain”=“C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe” [2007-01-17 13:46] “KeNotify”=“C:\Program Files\TOSHIBA\Utilities\KeNotify.exe” [2006-11-06 17:14] “HWSetup”=“C:\Program Files\TOSHIBA\Utilities\HWSetup.exe” [2006-11-01 08:06] “SVPWUTIL”=“C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe” [2006-11-01 11:08] “NDSTray.exe”=“NDSTray.exe” [] “topi”=“C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe” [2007-03-02 14:10] “NvSvc”=“RUNDLL32.exe” [2006-11-02 10:45 C:\Windows\System32\rundll32.exe] “NvCplDaemon”=“RUNDLL32.exe” [2006-11-02 10:45 C:\Windows\System32\rundll32.exe] “NvMediaCenter”=“RUNDLL32.exe” [2006-11-02 10:45 C:\Windows\System32\rundll32.exe] “SynTPEnh”=“C:\Program Files\Synaptics\SynTP\SynTPEnh.exe” [2007-02-02 13:36] “Toshiba Registration”=“C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe” [2007-02-19 15:00] “Camera Assistant Software”=“C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe” [2007-02-13 08:30] “avast!”=“C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe” [2007-09-06 11:06] “BEWINTERNET-PLSessionManager”=“C:\Program Files\OrangeBS\BEWInternet-PL\SessionManager\SessionManager.exe” [2007-07-24 18:03] “GrooveMonitor”=“C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe” [2006-10-27 00:47] “WinampAgent”=“C:\Program Files\Winamp\winampa.exe” [] “SunJavaUpdateSched”=“C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe” [2007-09-25 01:11] C:\Users\piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OpenOffice.org 2.2.lnk - C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe [2007-02-02 16:54:56] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] SecurityProviders credssp.dll R0 LPCFilter;LPC Lower Filter Driver;C:\Windows\system32\DRIVERS\LPCFilter.sys [2006-07-28 16:25] R2 aswMonFlt;aswMonFlt;C:\Windows\system32\DRIVERS\aswMonFlt.sys [2007-09-06 11:02] R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service;c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2007-02-02 14:56] R3 NETw4v32;Intel® Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit;C:\Windows\system32\DRIVERS\NETw4v32.sys [2006-12-09 01:01] R3 nvlddmkm;nvlddmkm;C:\Windows\system32\DRIVERS\nvlddmkm.sys [2007-01-13 09:40] R3 PCASp50;PCASp50 NDIS Protocol Driver;C:\Windows\system32\Drivers\PCASp50.sys [2006-11-28 20:46] R3 RTL8169;Realtek 8169 NT Driver;C:\Windows\system32\DRIVERS\Rtlh86.sys [2006-11-04 09:35] R3 tdcmdpst;TOSHIBA Writing Engine Filter Driver;C:\Windows\system32\DRIVERS\tdcmdpst.sys [2006-10-18 11:50] R3 tosrfec;Bluetooth ACPI;C:\Windows\system32\DRIVERS\tosrfec.sys [2006-10-23 16:32] R3 UVCFTR;UVCFTR;C:\Windows\system32\DRIVERS\UVCFTR_S.SYS [2007-01-26 16:13] S3 athr;Sterownik urządzenia rozszerzalnej bezprzewodowej sieci LAN Atheros;C:\Windows\system32\DRIVERS\athr.sys [2006-11-02 08:30] S3 NETw3v32;Sterownik karty Intel® PRO/Wireless 3945ABG dla 32-bitowej wersji systemu Windows Vista;C:\Windows\system32\DRIVERS\NETw3v32.sys [2006-11-02 08:30] S3 PCAMp50;PCAMp50 NDIS Protocol Driver;C:\Windows\system32\Drivers\PCAMp50.sys [2006-11-28 20:46] S3 SQLWriter;SQL Server VSS Writer;“C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe” [2005-10-14 02:53] S4 KR10I;KR10I;C:\Windows\system32\drivers\kr10i.sys [2007-01-18 15:40] S4 KR10N;KR10N;C:\Windows\system32\drivers\kr10n.sys [2007-01-18 15:47] S4 msvsmon80;Visual Studio 2005 Remote Debugger;“C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe” /service msvsmon80 [] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalSystemNetworkRestricted REG_MULTI_SZ hidserv UxSms WdiSystemHost Netman trkwks AudioEndpointBuilder WUDFSvc irmon sysmain IPBusEnum dot3svc PcaSvc EMDMgmt TabletInputService wlansvc WPDBusEnum [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{f75a7a31-6425-11dc-8dd9-001b3816c7b6}] \shell\AutoRun\command - H:\AutorunMenu.exe *Newly Created Service* - CATCHME *Newly Created Service* - PROCEXP90 . Contents of the ‘Scheduled Tasks’ folder “2007-12-20 19:33:29 C:\Windows\Tasks\User_Feed_Synchronization-{087B31D7-FE11-460E-BDEB-101A1A6742CB}.job” - C:\Windows\system32\msfeedssync.exe . ************************************************************************** catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-21 11:33:36 Windows 6.0.6000 NTFS scanning hidden processes … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-12-21 11:34:48 C:\ComboFix2.txt … 2007-12-21 11:27 . 2007-12-21 00:06:34 — E O F —

Zainstalowalem jeszcze programik a-squared, wykryl trojana (Trojan.Win32.Delf.abx)i niby usunal ale internet nadal muli. Mialem problemy z updatowaniem( sciagalo sie do pewnego momentu a potem pojawial sie komunikat ze "Nie mozna bylo sciagnac aktualizacji. Prosze sprawdzic swoje polaczenie z internetem i ustawienia serwera proxy). Podaje loga:

a-squared Free - Version 3.0 Last update: N/A Skanowanie ustawień: Obiekty: Pamięć, Ślady, Ciasteczka, C:, E:\ Skanowanie archiwów: Wł. Heurystyka: Wł. Skanowanie reklam: Wł. Uruchomione skanowanie: 2007-12-20 18:49:04 C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:96 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:97 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:98 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:99 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:100 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:101 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:126 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:156 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:158 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:199 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:205 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:210 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:211 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:212 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:213 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:214 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:215 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:216 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:217 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:218 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:219 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:220 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:221 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:222 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:223 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:224 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:225 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:226 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:227 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:231 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:232 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:233 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:234 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:235 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:236 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:237 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:238 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:239 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:240 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:241 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:242 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:243 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:244 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:245 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:247 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:315 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:347 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:475 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:518 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:570 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:571 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:572 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:573 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:574 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:695 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:711 wykryto: Trace.TrackingCookie C:\Users\piotr\AppData\Local\Temp\temp.00000.tmp wykryto: Trojan.Win32.Delf.abx C:\Users\piotr\AppData\Local\Temp\temp.00002.tmp wykryto: Trojan.Win32.Delf.abx C:\Users\piotr\AppData\Local\Temp\temp.00004.tmp wykryto: Trojan.Win32.Delf.abx C:\Users\piotr\AppData\Local\Temp\temp.00006.tmp wykryto: Trojan.Win32.Delf.abx C:\Users\piotr\AppData\Local\Temp\temp.00010.tmp wykryto: Trojan.Win32.Delf.abx C:\Users\piotr\AppData\Local\Temp\temp.00012.tmp wykryto: Trojan.Win32.Delf.abx C:\Users\piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RavMonE.exe wykryto: Trojan.Win32.Delf.abx Zeskanowano Pliki: 255502 Ślady: 278560 Ciasteczka: 777 Procesy: 82 Znaleziono Pliki: 7 Ślady: 0 Ciasteczka: 56 Procesy: 0 Klucze rejestru: 0 Zakończono skanowanie: 2007-12-20 20:30:12 Scan time: 1:41:08 C:\Users\piotr\AppData\Local\Temp\temp.00000.tmp Usunięte Trojan.Win32.Delf.abx C:\Users\piotr\AppData\Local\Temp\temp.00002.tmp Usunięte Trojan.Win32.Delf.abx C:\Users\piotr\AppData\Local\Temp\temp.00004.tmp Usunięte Trojan.Win32.Delf.abx C:\Users\piotr\AppData\Local\Temp\temp.00006.tmp Usunięte Trojan.Win32.Delf.abx C:\Users\piotr\AppData\Local\Temp\temp.00010.tmp Usunięte Trojan.Win32.Delf.abx C:\Users\piotr\AppData\Local\Temp\temp.00012.tmp Usunięte Trojan.Win32.Delf.abx C:\Users\piotr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RavMonE.exe Usunięte Trojan.Win32.Delf.abx C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:96 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:97 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:98 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:99 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:100 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:101 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:126 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:156 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:158 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:199 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:205 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:210 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:211 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:212 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:213 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:214 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:215 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:216 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:217 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:218 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:219 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:220 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:221 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:222 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:223 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:224 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:225 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:226 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:227 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:231 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:232 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:233 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:234 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:235 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:236 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:237 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:238 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:239 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:240 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:241 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:242 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:243 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:244 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:245 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:247 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:315 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:347 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:475 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:518 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:570 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:571 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:572 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:573 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:574 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:695 Usunięte Trace.TrackingCookie C:\Users\piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xo6axvnl.default\cookies.txt:711 Usunięte Trace.TrackingCookie Usunięte Pliki: 7 Ślady: 0 Ciasteczka: 56

Tutaj jest dzisiejszy log z HijackThis z wlaczonym netem, zaraz po starcie systemu:

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:49:33, on 2007-12-21 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16575) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\SYSTEM32\taskeng.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RtHDVCpl.exe C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe C:\Program Files\TOSHIBA\Utilities\KeNotify.exe C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe C:\Program Files\TOSHIBA\Toshiba Online Product Information\TOPI.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\TOSHIBA\Registration\ToshibaRegistration.exe C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Rainlendar2\Rainlendar2.exe C:\Windows\System32\rundll32.exe C:\Program Files\Synaptics\SynTP\SynToshiba.exe C:\Program Files\OrangeBS\BEWInternet-PL\Launcher\Launcher.exe C:\Windows\ehome\ehmsas.exe C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe C:\Program Files\OpenOffice.org 2.2\program\soffice.exe C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe C:\Program Files\OrangeBS\BEWInternet-PL\systray\systrayapp.exe C:\Program Files\OrangeBS\BEWInternet-PL\connectivity\connectivitymanager.exe C:\Program Files\OrangeBS\BEWInternet-PL\PhoneTools\TextMessaging.exe C:\Program Files\OrangeBS\BEWInternet-PL\Deskboard\deskboard.exe C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe C:\Program Files\OrangeBS\BEWInternet-PL\connectivity\CoreCom\CoreCom.exe C:\Program Files\OrangeBS\BEWInternet-PL\connectivity\CoreCom\OraConfigRecover.exe C:\Windows\system32\SearchFilterHost.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O4 - HKLM…\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM…\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM…\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE O4 - HKLM…\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe O4 - HKLM…\Run: [smoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe O4 - HKLM…\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe O4 - HKLM…\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe O4 - HKLM…\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP O4 - HKLM…\Run: [sVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL O4 - HKLM…\Run: [NDSTray.exe] NDSTray.exe O4 - HKLM…\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup O4 - HKLM…\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM…\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM…\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe O4 - HKLM…\Run: [Camera Assistant Software] “C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe” O4 - HKLM…\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM…\Run: [bEWINTERNET-PLSessionManager] C:\Program Files\OrangeBS\BEWInternet-PL\SessionManager\SessionManager.exe O4 - HKLM…\Run: [GrooveMonitor] “C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe” O4 - HKLM…\Run: [WinampAgent] “C:\Program Files\Winamp\winampa.exe” O4 - HKLM…\Run: [sunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe” O4 - HKCU…\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU…\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe O4 - HKCU…\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU…\Run: [Rainlendar2] C:\Program Files\Rainlendar2\Rainlendar2.exe O4 - HKUS\S-1-5-19…\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘USŁUGA LOKALNA’) O4 - HKUS\S-1-5-19…\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘USŁUGA LOKALNA’) O4 - HKUS\S-1-5-20…\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘USŁUGA SIECIOWA’) O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra ‘Tools’ menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O9 - Extra button: eBay - {C08CAF1D-C0A3-40D5-9970-06D067EAC017} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url.pl?PL (file missing) O13 - Gopher Prefix: O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s … wflash.cab O17 - HKLM\System\CCS\Services\Tcpip…{B3B383AF-670E-4BB9-BD20-662A21357440}: NameServer = 217.116.100.66 217.116.100.65 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe – End of file - 9277 bytes

[Gutek]

W logach nic nie widzę