Log do sprawdzenia, muli mi system okropnie:(

felsky · 21 Grudzień 2005 19:28

Logfile of HijackThis v1.99.1

Scan saved at 20:21:43, on 2005-12-21

Platform: Windows XP (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 (6.00.2600.0000)


Running processes:

C:/WINDOWS/System32/smss.exe

C:/WINDOWS/SYSTEM32/winlogon.exe

C:/WINDOWS/system32/services.exe

C:/WINDOWS/system32/lsass.exe

C:/WINDOWS/system32/svchost.exe

C:/WINDOWS/System32/svchost.exe

C:/WINDOWS/SYSTEM32/logonui.exe

C:/WINDOWS/system32/spoolsv.exe

C:/Program Files/Eset/nod32krn.exe

C:/WINDOWS/System32/nvsvc32.exe

C:/Program Files/Alcohol Soft/Alcohol 120/StarWind/StarWindService.exe

C:/WINDOWS/System32/svchost.exe

C:/WINDOWS/Explorer.EXE

C:/PROGRA~1/NEOSTR~1/CnxMon.exe

C:/Program Files/Neostrada TP/taskbaricon.exe

C:/Program Files/Winamp/winampa.exe

C:/Program Files/Hewlett-Packard/HP Share-to-Web/hpgs2wnd.exe

C:/WINDOWS/System32/RUNDLL32.EXE

C:/Program Files/D-Tools/daemon.exe

C:/Program Files/Eset/nod32kui.exe

C:/WINDOWS/System32/ctfmon.exe

C:/Program Files/Messenger/msmsgs.exe

C:/Program Files/Hewlett-Packard/HP Share-to-Web/hpgs2wnf.exe

C:/Program Files/Neostrada TP/NeostradaTP.exe

C:/Program Files/Neostrada TP/ComComp.exe

C:/Program Files/Neostrada TP/Watch.exe

C:/Program Files/Winamp/winamp.exe

C:/Program Files/Gadu-Gadu/gg.exe

C:/Program Files/Internet Explorer/iexplore.exe

D:/programy/HijackThis.exe


R0 - HKCU/Software/Microsoft/Internet Explorer/Main,Start Page = http://www.onet.pl/

R1 - HKCU/Software/Microsoft/Internet Explorer/Main,Window Title = Neostrada TP

R0 - HKCU/Software/Microsoft/Internet Explorer/Toolbar,LinksFolderName = Łącza

R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:/PROGRA~1/NEOSTR~1/SEARCH~1.DLL

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:/Program Files/Adobe/Acrobat 5.0 CE/Reader/ActiveX/AcroIEHelper.ocx

O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:/PROGRA~1/FlashGet/jccatch.dll

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:/WINDOWS/System32/msdxm.ocx

O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:/Program Files/Canon/Easy-WebPrint/Toolband.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:/WINDOWS/Downloaded Program Files/googlenav.dll

O3 - Toolbar: 180search Toolbar - {93CECBB2-6B1B-448D-91B9-72604EF70105} - C:/Program Files/180search Assistant Programs/180search Toolbar/180ST.dll

O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:/PROGRA~1/FlashGet/fgiebar.dll

O4 - HKLM/../Run: [NvCplDaemon] RUNDLL32.EXE C:/WINDOWS/System32/NvCpl.dll,NvStartup

O4 - HKLM/../Run: [nwiz] nwiz.exe /install

O4 - HKLM/../Run: [Easy-PrintToolBox] C:/Program Files/Canon/Easy-PrintToolBox/BJPSMAIN.EXE /logon

O4 - HKLM/../Run: [WooCnxMon] C:/PROGRA~1/NEOSTR~1/CnxMon.exe

O4 - HKLM/../Run: [WOOWATCH] C:/PROGRA~1/NEOSTR~1/Watch.exe

O4 - HKLM/../Run: [WOOTASKBARICON] C:/Program Files/Neostrada TP/taskbaricon.exe

O4 - HKLM/../Run: [WinampAgent] C:/Program Files/Winamp/winampa.exe

O4 - HKLM/../Run: [NeroFilterCheck] C:/WINDOWS/system32/NeroCheck.exe

O4 - HKLM/../Run: [Share-to-Web Namespace Daemon] C:/Program Files/Hewlett-Packard/HP Share-to-Web/hpgs2wnd.exe

O4 - HKLM/../Run: [NvMediaCenter] RUNDLL32.EXE C:/WINDOWS/System32/NvMcTray.dll,NvTaskbarInit

O4 - HKLM/../Run: [DAEMON Tools-1033] "C:/Program Files/D-Tools/daemon.exe" -lang 1033

O4 - HKLM/../Run: [nod32kui] "C:/Program Files/Eset/nod32kui.exe" /WAITSERVICE

O4 - HKCU/../Run: [CTFMON.EXE] C:/WINDOWS/System32/ctfmon.exe

O4 - HKCU/../Run: [MSMSGS] "C:/Program Files/Messenger/msmsgs.exe" /background

O4 - Global Startup: Microsoft Office.lnk = C:/Program Files/Microsoft Office/Office/OSA9.EXE

O8 - Extra context menu item: &Google Search - res://C:/WINDOWS/Downloaded Program Files/googlenav.dll/cmsearch.html

O8 - Extra context menu item: Backward &Links - res://C:/WINDOWS/Downloaded Program Files/googlenav.dll/cmbacklinks.html

O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:/WINDOWS/Downloaded Program Files/googlenav.dll/cmcache.html

O8 - Extra context menu item: Download All by FlashGet - C:/Program Files/FlashGet/jc_all.htm

O8 - Extra context menu item: Download using FlashGet - C:/Program Files/FlashGet/jc_link.htm

O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:/Program Files/Canon/Easy-WebPrint/Resource.dll/RC_AddToList.html

O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:/Program Files/Canon/Easy-WebPrint/Resource.dll/RC_HSPrint.html

O8 - Extra context menu item: Easy-WebPrint Preview - res://C:/Program Files/Canon/Easy-WebPrint/Resource.dll/RC_Preview.html

O8 - Extra context menu item: Easy-WebPrint Print - res://C:/Program Files/Canon/Easy-WebPrint/Resource.dll/RC_Print.html

O8 - Extra context menu item: Si&milar Pages - res://C:/WINDOWS/Downloaded Program Files/googlenav.dll/cmsimilar.html

O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:/PROGRA~1/FlashGet/flashget.exe

O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:/PROGRA~1/FlashGet/flashget.exe

O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} (Google Activate) - http://toolbar.google.com/data/pl/big/1.1.62-big/GoogleNav.cab

O16 - DPF: {FDDBE2B8-6602-4AD8-946D-94C5A32FA6C5} (GameDesire Snooker) - http://67.15.101.3/g_bin/pl/snooker_2_0_0_24.cab

O17 - HKLM/System/CCS/Services/Tcpip/../{67CD082B-C4AC-46F4-9EE9-839F98F575D8}: NameServer = 194.204.152.34 217.98.63.164

O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:/Program Files/Eset/nod32krn.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:/WINDOWS/System32/nvsvc32.exe

O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:/Program Files/Alcohol Soft/Alcohol 120/StarWind/StarWindService.exe

Gutek · 21 Grudzień 2005 19:34

odinstaluj a folder ręcznie usuniesz w trybie awaryjnym, hijackiem wpis usuniesz

kuz5 · 21 Grudzień 2005 23:53

Już dzisiaj wklejałeś loga, nie rób bałaganu na forum :?

Jeżeli ten log nie jest twój tylko kolegi to zaznacz to w opisie, bo na drugi raz taki temat poleci do śmietnika

felsky · 22 Grudzień 2005 11:35

Sorki, mam dwa kompy! Jeden w biurze, drugi w domu! Co mam w tej sytuacji zrobić?

Gutek · 22 Grudzień 2005 13:55

Masz napisane odinstaluj 180search Assistant Programs a w trybie awaryjnym usuń folder. Potem zaznaczyć wskazane wpis w Hijacku i kliknąć Fix checked.