Witam,
Mój problem polega na tym, że miałem strasznie :o zabrudzony system przez te wszystkie robaki, trojanki. Próbowałem to sam pousuwać, bo oczywiście atntywir dawał alter, że co chwila cos wykrywa. I tak nie wiem czy juz system jest w porzadku? Nadal sie wiesza…może to tylko moje urojenie?
Mysle, że znajdziecie chwile w przed światecznej bieganinie, by pomóc koledze:)
Logfile of HijackThis v1.99.1
Scan saved at 21:52:13, on 2006-12-21
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AOL\Active Virus Shield\avp.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\system32\taskmgr.exe
E:\Odkurzacz\odkurzacz.exe
D:\Program Files\Opera\Opera.exe
C:\Documents and Settings\1\Pulpit\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com/english
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 201.0.0.2:80
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Poly HTML Filter BHO - {0140DF95-9128-4053-AE72-F43F0CFCA062} - C:\WINDOWS\system32\SiKernel.dll
O2 - BHO: XBTP06568 - {311F9DE8-6126-4EEE-B15F-65CBB3B4F9F6} - C:\Program Files\AOL Security Toolbar\AOL_security_toolbar.dll
O2 - BHO: Offliner AdFilter Helper - {DC9377A2-2E8D-44A1-99DB-F8A821DF254D} - C:\WINDOWS\system32\SiPlugins.dll
O2 - BHO: iNetAdviser Helper - {DD394F27-C634-4072-8EFF-021A07B4D1B7} - C:\Program Files\iNetAdviser Trial\IEHIEPlugins.dll
O3 - Toolbar: AOL Security Toolbar - {3BB63FD4-3C00-44D7-94A9-5DE211900DEF} - C:\Program Files\AOL Security Toolbar\AOL_security_toolbar.dll
O3 - Toolbar: iNetAdviser Links Bar - {E7E3C805-1202-4F30-8CCB-31726B15EED4} - C:\PROGRA~1\INETAD~1\IEHIEGUI.dll
O3 - Toolbar: iNetAdviser Bar - {33BB4936-3A35-46B8-840B-497DEAFCCF9B} - C:\PROGRA~1\INETAD~1\IEHIEGUI.dll
O4 - HKLM\..\Run: [lxcgmon.exe] "C:\Program Files\Lexmark 2300 Series\lxcgmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2300 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [aol] "C:\Program Files\AOL\Active Virus Shield\avp.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [iNetAdviser] C:\Program Files\iNetAdviser Trial\iNetAdviser.exe /MIN
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\PROGRA~1\GADU-G~1\GADU-G~1\gg.exe" /tray
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Odkurzacz-MCD] E:\Odkurzacz\odk_mcd.exe
O8 - Extra context menu item: Add banner url(s) to iNetAdviser - C:\Program Files\iNetAdviser Trial\System\Scripts\off_banner.htm
O8 - Extra context menu item: Add selected links to Link Container - C:\Program Files\iNetAdviser Trial\System\Scripts\off_collector_sel.htm
O8 - Extra context menu item: Bookmark all links in iNetAdviser - C:\Program Files\iNetAdviser Trial\System\Scripts\off_all.htm
O8 - Extra context menu item: Bookmark selected link(s) in iNetAdviser - C:\Program Files\iNetAdviser Trial\System\Scripts\off_sel.htm
O8 - Extra context menu item: Open all links in new windows - C:\Program Files\iNetAdviser Trial\System\Scripts\off_open_all.htm
O8 - Extra context menu item: Open selected link(s) in new windows - C:\Program Files\iNetAdviser Trial\System\Scripts\off_open_sel.htm
O8 - Extra context menu item: Say to iNetAdviser Team about banner - C:\Program Files\iNetAdviser Trial\System\Scripts\off_report_ad.htm
O8 - Extra context menu item: Show domain links - C:\Program Files\iNetAdviser Trial\System\Scripts\off_domain_links.htm
O17 - HKLM\System\CCS\Services\Tcpip\..\{0CE5E9B6-883C-4D69-8BF8-F50E3B926EB2}: NameServer = 10.1.88.5,194.204.159.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{0CE5E9B6-883C-4D69-8BF8-F50E3B926EB2}: NameServer = 10.1.88.5,194.204.159.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{0CE5E9B6-883C-4D69-8BF8-F50E3B926EB2}: NameServer = 10.1.88.5,194.204.159.1
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Active Virus Shield (AVP) - Unknown owner - C:\Program Files\AOL\Active Virus Shield\avp.exe" -r (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe (file missing)
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: lxcg_device - - C:\WINDOWS\system32\lxcgcoms.exe