Internet zamula do zera, co jest?

musti10 · 15 Sierpień 2007 20:25

Co chwila nie mam internetu, takimi falami raz jest przeplyw danych raz nie ma wcale, co to moze byc

Prosze o pomoc, moje dane:

Logfile of HijackThis v1.99.1 Scan saved at 21:19:25, on 2007-08-15 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS\system32\EpStsSrv.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\NETGEAR\WG111T\wlan111t.exe C:\Program Files\BitComet\BitComet.exe C:\Program Files\Winamp\winamp.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Winamp\winamp.exe C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\Administrator\Desktop\hijackthis.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O4 - HKLM…\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM…\Run: [skyTel] SkyTel.EXE O4 - HKLM…\Run: [startCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKLM…\Run: [Ashampoo FireWall] “C:\Program Files\Ashampoo\Ashampoo FireWall\FireWall.exe” -TRAY O4 - HKLM…\Run: [EPSON Stylus DX4000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBEE.EXE /FU “C:\WINDOWS\TEMP\E_S82.tmp” /EF “HKLM” O4 - HKLM…\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKCU…\Run: [Gadu-Gadu] “C:\Program Files\Gadu-Gadu\gg.exe” /tray O4 - Global Startup: NETGEAR WG111T Smart Wizard.lnk = ? O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O10 - Unknown file in Winsock LSP: c:\program files\ashampoo\ashampoo firewall\spi.dll O10 - Unknown file in Winsock LSP: c:\program files\ashampoo\ashampoo firewall\spi.dll O10 - Unknown file in Winsock LSP: c:\program files\ashampoo\ashampoo firewall\spi.dll O10 - Unknown file in Winsock LSP: c:\program files\ashampoo\ashampoo firewall\spi.dll O10 - Unknown file in Winsock LSP: c:\program files\ashampoo\ashampoo firewall\spi.dll O10 - Unknown file in Winsock LSP: c:\program files\ashampoo\ashampoo firewall\spi.dll O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing) O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Indexing Service (CiSvc) - Unknown owner - C:\WINDOWS\system32\cisvc.exe (file missing) O23 - Service: EPSON ESC/POS Status Service (EPSON ESCPOS Status Service) - SEIKO EPSON Corp. - C:\WINDOWS\SYSTEM32\EpStsSrv.exe O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe

moze to sie tez przyda

“Administrator” - 2007-08-15 21:25:08 Service Pack 2 ComboFix 07-05.27.BV - Running from: “C:\Documents and Settings\Administrator\Desktop” ((((((((((((((((((((((((((((((( Files Created from 2007-07-15 to 2007-08-15 )))))))))))))))))))))))))))))))))) 2007-08-15 20:09 2007-08-03 23:07 71,168 --a------ C:\WINDOWS\system32\E_FLBBEE.DLL 2007-08-03 23:07 62,976 --a------ C:\WINDOWS\system32\E_FD4BBEE.DLL 2007-08-03 23:07 49,152 --a------ C:\WINDOWS\system32\E_DCINST.DLL 2007-08-03 22:53 2007-08-03 21:48 2007-08-03 21:41 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys 2007-08-03 21:35 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys 2007-08-03 21:34 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys 2007-08-03 21:30 61,952 --a------ C:\WINDOWS\system32\escwiad.dll 2007-07-26 21:39 2007-07-26 21:39 2007-07-26 21:37 (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-08-07 09:12:12 -------- d-----w C:\Program Files\BitComet 2007-08-03 22:07:53 -------- d-----w C:\Program Files\EPSON 2007-08-03 21:52:23 -------- d–h--w C:\Program Files\InstallShield Installation Information 2007-08-03 20:02:28 -------- d-----w C:\Program Files\DC++ 2007-06-28 22:03:58 -------- d-----w C:\DOCUME~1\ADMINI~1\APPLIC~1\Ashampoo 2007-06-28 22:03:27 -------- d-----w C:\Program Files\Ashampoo 2007-06-28 21:48:30 36,441 ----a-w C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Music Converter.dat 2007-06-28 21:48:30 131,072 ----a-w C:\WINDOWS\system32\SpoonUninstall.exe 2007-06-28 21:48:22 -------- d-----w C:\Program Files\Illustrate 2007-05-18 01:58:58 339,968 ----a-w C:\WINDOWS\system32\ATIDEMGX.dll 2007-05-18 01:58:04 307,200 ----a-w C:\WINDOWS\system32\atiiiexx.dll 2007-05-18 01:57:53 268,288 ----a-w C:\WINDOWS\system32\ati2dvag.dll 2007-05-18 01:51:01 139,264 ----a-w C:\WINDOWS\system32\atipdlxx.dll 2007-05-18 01:50:52 26,112 ----a-w C:\WINDOWS\system32\Ati2mdxx.exe 2007-05-18 01:50:46 42,496 ----a-w C:\WINDOWS\system32\ati2edxx.dll 2007-05-18 01:50:34 118,784 ----a-w C:\WINDOWS\system32\ati2evxx.dll 2007-05-18 01:49:14 479,232 ----a-w C:\WINDOWS\system32\ati2evxx.exe 2007-05-18 01:48:26 53,248 ----a-w C:\WINDOWS\system32\ATIDDC.DLL 2007-05-18 01:41:03 2,922,144 ----a-w C:\WINDOWS\system32\ati3duag.dll 2007-05-18 01:39:54 7,610,368 ----a-w C:\WINDOWS\system32\atioglx2.dll 2007-05-18 01:30:58 1,512,960 ----a-w C:\WINDOWS\system32\ativvaxx.dll 2007-05-18 01:30:41 972,072 ----a-w C:\WINDOWS\system32\ativva6x.dat 2007-05-18 01:30:41 3,107,788 ----a-w C:\WINDOWS\system32\ativva5x.dat 2007-05-18 01:30:40 3,107,788 ----a-w C:\WINDOWS\system32\ativvaxx.dat 2007-05-18 01:19:50 5,431,296 ----a-w C:\WINDOWS\system32\atioglxx.dll 2007-05-18 01:17:27 262,144 ----a-w C:\WINDOWS\system32\atikvmag.dll 2007-05-18 01:16:04 17,408 ----a-w C:\WINDOWS\system32\atitvo32.dll 2007-05-18 01:14:21 46,592 ----a-w C:\WINDOWS\system32\atiok3x2.dll 2007-05-18 01:10:21 368,640 ----a-w C:\WINDOWS\system32\ati2cqag.dll 2007-05-17 20:05:00 520,192 ------w C:\WINDOWS\system32\ati2sgag.exe 2007-05-17 11:28:05 549,376 ----a-w C:\WINDOWS\system32\oleaut32.dll 2007-05-16 15:32:55 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2005-09-23 18:12] {53707962-6F74-2D53-2644-206D7942484F}=C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2005-05-31 02:04] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “avast!”=“C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe” [2007-04-30 16:42] “SkyTel”=“SkyTel.EXE” [] “StartCCC”=“C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe” [2006-11-10 12:35] “Ashampoo FireWall”=“C:\Program Files\Ashampoo\Ashampoo FireWall\FireWall.exe” [2007-04-05 14:57] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “Gadu-Gadu”=“C:\Program Files\Gadu-Gadu\gg.exe” [2007-01-30 15:58] [HKEY_USERS.default\software\microsoft\windows\currentversion\runonce] “nlsf”=cmd.exe /C move /Y “%SystemRoot%\System32\syssetub.dll” “%SystemRoot%\System32\syssetup.dll” “tscuninstall”=%systemroot%\system32\tscupgrd.exe “nltide3”=cmd.exe /C rundll32 advpack.dll,LaunchINFSection nLite.inf,C [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] “NoDesktopCleanupWizard”=1 (0x1) “NoRemoteRecursiveEvents”=1 (0x1) “ClearRecentDocsOnExit”=1 (0x1) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] “ClearRecentDocsOnExit”=1 (0x1) “NoStartBanner”=1 (0x1) “NoSMHelp”=1 (0x1) “NoResolveTrack”=1 (0x1) "LinkResolveIgnoreLinkInfo "=1 (0x1) “NoLowDiskSpaceChecks”=1 (0x1) “LinkResolveIgnoreLinkInfo”=1 (0x1) “NoResolveSearch”=1 (0x1) “NoSaveSettings”=0 (0x0) [HKEY_USERS.default\software\microsoft\windows\currentversion\policies\explorer] “ClearRecentDocsOnExit”=1 (0x1) “NoStartBanner”=1 (0x1) “NoSMHelp”=1 (0x1) “NoResolveTrack”=1 (0x1) "LinkResolveIgnoreLinkInfo "=1 (0x1) “NoLowDiskSpaceChecks”=1 (0x1) “LinkResolveIgnoreLinkInfo”=1 (0x1) “NoResolveSearch”=1 (0x1) “NoSaveSettings”=0 (0x0) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] “{57B86673-276A-48B2-BAE7-C6DBB3020EB8}”=“C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll” [2007-07-08 09:19] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AVG Anti-Spyware Driver] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AVG Anti-Spyware Guard] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] “ctfmon.exe”=C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] “LClock”=C:\Program Files\LClock\LClock.exe HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost *netsvcs* Contents of the ‘Scheduled Tasks’ folder 2007-06-29 22:19:04 C:\WINDOWS\tasks{101DCFED-42F8-4494-9278-5D2BD9EA1CFC}_SHASHANK_Administrator.job 2007-06-29 22:24:04 C:\WINDOWS\tasks{D8CB4EDF-BD2E-4AC1-9EBD-B77004F37B2C}_SHASHANK_Administrator.job ******************************************************************** catchme 0.3.692 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net Rootkit scan 2007-08-15 21:26:22 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden files: 0 ******************************************************************** Completion time: 2007-08-15 21:27:08 C:\ComboFix2.txt … 2007-06-03 19:16 — E O F —

jessica · 16 Sierpień 2007 14:43

Nie widzę w tych logach nic podejrzanego.

Tylko kosmetycznie sfiksuj te w/w wpisy w Hijacku:

>>Hijack>>scan(Do a system scan only)>>zaznacz je >> Fix checked.

jessi

musti10 · 19 Sierpień 2007 19:05

w każdym razie dzieki