Log do spr

to jest log z trzeciego kompa :smiley:

(zeby nikt nie pomyslal ze 3 raz to samo

Logfile of HijackThis v1.99.1

Scan saved at 18:36:03, on 2005-04-01

Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)


Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe

C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe

C:\Program Files\VIAudioi\SBADeck\ADeck.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Messenger\msmsgs.exe

D:\install\dyndns\DynDNS.exe

C:\Program Files\DVR SYSTEM\Web\DirectWeb.exe

C:\Program Files\DVR SYSTEM\DVRMain.exe

C:\Program Files\DVR SYSTEM\SNetEx.exe

C:\WINDOWS\System32\inetsrv\inetinfo.exe

C:\WINDOWS\System32\nvsvc32.exe

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\System32\svchost.exe

C:\Documents and Settings\serwer_video\Pulpit\HijackThis.exe


R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon

O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe

O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1

O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [DynDNS Updater] "D:\install\dyndns\DynDNS.exe"

O4 - Startup: DVR Main.lnk = ?

O4 - Startup: neo.lnk = ?

O4 - Global Startup: Direct Web.lnk = ?

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {AB8638BB-79E8-4E9D-ABF2-8F33054E3941} (Guesser Class) - http://czat.onet.pl/client/kalambury/NetPunGame.dll

O16 - DPF: {F255050F-988C-4683-AAEB-2523A2CE885D} (DVSView Control) - http://*/DvsView.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{29C0862C-EA22-415A-9AF1-011CFE39900F}: NameServer = *

O17 - HKLM\System\CCS\Services\Tcpip\..\{3FA057E6-CBE1-4ECC-84E6-501DAD86EE77}: NameServer = *

O17 - HKLM\System\CCS\Services\Tcpip\..\{5C440AAC-1D0E-4F96-B3EB-1532FE2007B6}: NameServer = *

O17 - HKLM\System\CS1\Services\Tcpip\..\{29C0862C-EA22-415A-9AF1-011CFE39900F}: NameServer = *

O17 - HKLM\System\CS2\Services\Tcpip\..\{29C0862C-EA22-415A-9AF1-011CFE39900F}: NameServer = *

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

*- tam jest adres strony i IP (z racji bezpieczenstaw nie moge podac, chociaz ztym Ip to do konca nie jestem pewien?)

te kalambury mi nie pasuja :?

Kalambury to zwyczajna kontrolka ActiveX od Onetu. Nieszkodlilwe.

IMHO jest czysto… Usuń kosmetycznie wpis:

O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u

wedlug mnie czysto

:wink: :wink:

skanery AV w ruch i szczepionka G DATA

tzn. o co chodzi :?

skanery antywirusowe On-Line :

http://forum.dobreprogramy.pl/viewtopic.php?t=8175

Znajdziesz ją tu: Szczepionki 1.003.0107

zupelniy brak zabezpieczen

firewall

http://www.dobreprogramy.pl/index.php?dz=1&t=55

oraz brak programu av

http://www.dobreprogramy.pl/index.php?dz=1&t=30

zacznij od tego.