Mam problem z zawieszajacym sie komputerem

[majka102]

Witam.

Zaczne od poczatku.

Mialam robiony format.Byly zle podzielone partycje, pelno syfu i ogolnie zle zaisntalowany win.xp sp2. Wciaz mialam jak to okreslic problem z wlamaniami na moj komputer z sieci lan.

Po formacie zadobylam zonealarm pro i bylo ok.

Do mojego kompa miala dostep osoba, ktora nie koniecznie jest dla mnie zyczliwa. Zauwazylam podejrzane programy, ktore wywalalam odrazu…Wydaje mi sie, ze mialam jakiegos keyloggera.

Poza tym mialam norton antywir, ktory wczesniej pracowal ok, a teraz sie zbuntowal. Odinstalwalam go i jakos przestalo sie mulic.

Mimo wszystko, wciaz mi sie zawiesza komputer, szczegolnie przy uzywaniu AQQ z tym, ze mam podobno ta wersje, ktora nie jest testowa i jest/miala byc stabilna. Kiedy otwieram menedzera mam w 100% obciazony procek przewaznie przez AQQ.Kiedy je zamkne, procek dalej jest obciazony przez jakies aplikacje, ktorych nie rozpoznaje. Mam logi z hijacka w ktorych widze procesy programow, ktore byly ze tak powiem testowane przeze mnie, moze musze je usunac z rejestru windowsowskiego-nie wiem dokladnie jak to nazwac, bo nie znam sie na tym.Podejrzewam zle skonfigurowany zone alarm choc staralam sie pozostawic jego wlasne ustwienia automatyczne.W dodatku mam kasperskiego i one moga miec jakis konflikt ze soba, choc nie pokazuja sie zadne alarmy w tym kierunku. Jednak nie mam juz sily chodzic po google i probowac znalezc szczatkowe odpowiedzi na to, czy mam jeszcze jakies zle aplikacje w systemie.Pomozcie mi prosze poprzez sprawdzenie loga

Logfile of Trend Micro HijackThis v2.0.0 (BETA) Scan saved at 22:29:15, on 2007-06-25 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Google\Gmail Notifier\gnotify.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\QuickTime\qttask.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe C:\Program Files\Winamp\winamp.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Maja\Pulpit\HiJackThis_v2.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.imesh.com/sidebar.html?src=ssb R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.imesh.com/sidebar.html?src=ssb R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.imesh.com/sidebar.html?src=ssb R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.imesh.com/sidebar.html?src=ssb R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: iMesh MediaBar - {B7D3E479-CC68-42B5-A338-938ECE35F419} - (no file) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O4 - HKLM…\Run: [ZoneAlarm Client] “C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe” O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM…\Run: [nwiz] nwiz.exe /install O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM…\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe O4 - HKLM…\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM…\Run: [sunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe” O4 - HKLM…\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM…\Run: [QuickTime Task] “C:\Program Files\QuickTime\qttask.exe” -atboottime O4 - HKLM…\Run: [iTunesHelper] “C:\Program Files\iTunes\iTunesHelper.exe” O4 - HKLM…\Run: [spybotSnD] “C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe” O4 - HKLM…\Run: [AVP] “C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe” O4 - HKLM…\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKCU…\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] “C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe” O4 - HKCU…\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU…\Run: [AQQ] C:\PROGRA~1\Wapster\AQQ\AQQ.exe O4 - HKCU…\Run: [uniblue RegistryBooster 2] C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S O4 - HKUS\S-1-5-19…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘USŁUGA LOKALNA’) O4 - HKUS\S-1-5-20…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘USŁUGA SIECIOWA’) O4 - HKUS\S-1-5-18…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SYSTEM’) O4 - HKUS.DEFAULT…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘Default user’) O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\WINDOWS\system32\shdocvw.dll O9 - Extra ‘Tools’ menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\WINDOWS\system32\shdocvw.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O22 - SharedTaskScheduler: Moduł wstępnego ładowania interfejsu Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Demon buforu kategorii składników - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe – End of file - 6676 bytes Dodam jeszcze loga z Silent Runners “Silent Runners.vbs”, revision R50, http://www.silentrunners.org/ Operating System: Windows XP SP2 Output limited to non-default values, except where indicated by “{++}” Startup items buried in registry: --------------------------------- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++} “BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}” = ““C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe”” [“Nero AG”] “ctfmon.exe” = “C:\WINDOWS\system32\ctfmon.exe” [MS] “AQQ” = “C:\PROGRA~1\Wapster\AQQ\AQQ.exe” [“AQQ Sp. z o.o.”] “Uniblue RegistryBooster 2” = “C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S” [file not found] HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++} “ZoneAlarm Client” = ““C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe”” [“Zone Labs, LLC”] “NvCplDaemon” = “RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup” [MS] “nwiz” = “nwiz.exe /install” [“NVIDIA Corporation”] “NvMediaCenter” = “RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit” [MS] “{0228e555-4f9c-4e35-a3ec-b109a192b4c2}” = “C:\Program Files\Google\Gmail Notifier\gnotify.exe” [“Google Inc.”] “NWEReboot” = “(empty string)” [file not found] “NeroFilterCheck” = “C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe” [“Nero AG”] “SunJavaUpdateSched” = ““C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe”” [“Sun Microsystems, Inc.”] “SoundMan” = “SOUNDMAN.EXE” [“Realtek Semiconductor Corp.”] “QuickTime Task” = ““C:\Program Files\QuickTime\qttask.exe” -atboottime” [“Apple Inc.”] “iTunesHelper” = ““C:\Program Files\iTunes\iTunesHelper.exe”” [“Apple Inc.”] “SpybotSnD” = ““C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe”” [file not found] “AVP” = ““C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe”” [“Kaspersky Lab”] “WinampAgent” = “C:\Program Files\Winamp\winampa.exe” [null data] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}(Default) = (no title provided) -> {HKLM…CLSID} = “AcroIEHlprObj Class” \InProcServer32(Default) = “C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll” [“Adobe Systems Incorporated”] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}(Default) = (no title provided) -> {HKLM…CLSID} = “SSVHelper Class” \InProcServer32(Default) = “C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll” [“Sun Microsystems, Inc.”] HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ “{42071714-76d4-11d1-8b24-00a0c9068ff3}” = “Rozszerzenie CPL kadrowania wyświetlania” -> {HKLM…CLSID} = “Rozszerzenie CPL kadrowania wyświetlania” \InProcServer32(Default) = “deskpan.dll” [file not found] “{88895560-9AA2-1069-930E-00AA0030EBC8}” = “Rozszerzenie ikony HyperTerminalu” -> {HKLM…CLSID} = “HyperTerminal Icon Ext” \InProcServer32(Default) = “C:\WINDOWS\system32\hticons.dll” [“Hilgraeve, Inc.”] “{EFA24E62-B078-11d0-89E4-00C04FC9E26E}” = “History Band” -> {HKLM…CLSID} = “History Band” \InProcServer32(Default) = “C:\WINDOWS\system32\shdocvw.dll” [MS] “{A70C977A-BF00-412C-90B7-034C51DA2439}” = “NvCpl DesktopContext Class” -> {HKLM…CLSID} = “DesktopContext Class” \InProcServer32(Default) = “C:\WINDOWS\system32\nvcpl.dll” [“NVIDIA Corporation”] “{FFB699E0-306A-11d3-8BD1-00104B6F7516}” = “Play on my TV helper” -> {HKLM…CLSID} = “NVIDIA CPL Extension” \InProcServer32(Default) = “C:\WINDOWS\system32\nvcpl.dll” [“NVIDIA Corporation”] “{1CDB2949-8F65-4355-8456-263E7C208A5D}” = “Desktop Explorer” -> {HKLM…CLSID} = “Desktop Explorer” \InProcServer32(Default) = “C:\WINDOWS\system32\nvshell.dll” [“NVIDIA Corporation”] “{1E9B04FB-F9E5-4718-997B-B8DA88302A47}” = “Desktop Explorer Menu” -> {HKLM…CLSID} = (no title provided) \InProcServer32(Default) = “C:\WINDOWS\system32\nvshell.dll” [“NVIDIA Corporation”] “{1E9B04FB-F9E5-4718-997B-B8DA88302A48}” = “nView Desktop Context Menu” -> {HKLM…CLSID} = “nView Desktop Context Menu” \InProcServer32(Default) = “C:\WINDOWS\system32\nvshell.dll” [“NVIDIA Corporation”] “{B41DB860-8EE4-11D2-9906-E49FADC173CA}” = “WinRAR shell extension” -> {HKLM…CLSID} = “WinRAR” \InProcServer32(Default) = “C:\Program Files\WinRAR\rarext.dll” [null data] “{453D1B6D-BD6A-4FA1-B876-9E4DD848D434}” = “AQQ File Transfer Shell Extension” -> {HKLM…CLSID} = “AQQ File Transfer Shell Extension” \InProcServer32(Default) = “C:\PROGRA~1\Wapster\AQQ\System\AQQSHE~1.DLL” [file not found] “{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF}” = “iTunes” -> {HKLM…CLSID} = “iTunes” \InProcServer32(Default) = “C:\Program Files\iTunes\iTunesMiniPlayer.dll” [“Apple Inc.”] HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ “WPDShServiceObj” = “{AAA288BA-9A4C-45B0-95D7-94D524869DB5}” -> {HKLM…CLSID} = “WPDShServiceObj Class” \InProcServer32(Default) = “C:\WINDOWS\system32\WPDShServiceObj.dll” [MS] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ <> klogon\DLLName = “C:\WINDOWS\system32\klogon.dll” [“Kaspersky Lab”] HKLM\Software\Classes*\shellex\ContextMenuHandlers\ AQQFileTransfer(Default) = “{453D1B6D-BD6A-4FA1-B876-9E4DD848D434}” -> {HKLM…CLSID} = “AQQ File Transfer Shell Extension” \InProcServer32(Default) = “C:\PROGRA~1\Wapster\AQQ\System\AQQSHE~1.DLL” [file not found] Kaspersky Anti-Virus(Default) = “{dd230880-495a-11d1-b064-008048ec2fc5}” -> {HKLM…CLSID} = (no title provided) \InProcServer32(Default) = “C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\ShellEx.dll” [“Kaspersky Lab”] WinRAR(Default) = “{B41DB860-8EE4-11D2-9906-E49FADC173CA}” -> {HKLM…CLSID} = “WinRAR” \InProcServer32(Default) = “C:\Program Files\WinRAR\rarext.dll” [null data] HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\ WinRAR(Default) = “{B41DB860-8EE4-11D2-9906-E49FADC173CA}” -> {HKLM…CLSID} = “WinRAR” \InProcServer32(Default) = “C:\Program Files\WinRAR\rarext.dll” [null data] HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\ Kaspersky Anti-Virus(Default) = “{dd230880-495a-11d1-b064-008048ec2fc5}” -> {HKLM…CLSID} = (no title provided) \InProcServer32(Default) = “C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\ShellEx.dll” [“Kaspersky Lab”] WinRAR(Default) = “{B41DB860-8EE4-11D2-9906-E49FADC173CA}” -> {HKLM…CLSID} = “WinRAR” \InProcServer32(Default) = “C:\Program Files\WinRAR\rarext.dll” [null data] Group Policies {policy setting}: -------------------------------- Note: detected settings may not have any effect. HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\ “shutdownwithoutlogon” = (REG_DWORD) hex:0x00000001 {Shutdown: Allow system to be shut down without having to log on} “undockwithoutlogon” = (REG_DWORD) hex:0x00000001 {Devices: Allow undock without having to log on} Active Desktop and Wallpaper: ----------------------------- Active Desktop may be disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState Displayed if Active Desktop enabled and wallpaper not set by Group Policy: HKCU\Software\Microsoft\Internet Explorer\Desktop\General\ “Wallpaper” = “D:\Moje obrazy\screeny\34.bmp” Displayed if Active Desktop disabled and wallpaper not set by Group Policy: HKCU\Control Panel\Desktop\ “Wallpaper” = “D:\Moje obrazy\screeny\34.bmp” Enabled Screen Saver: --------------------- HKCU\Control Panel\Desktop\ “SCRNSAVE.EXE” = “C:\WINDOWS\System32\logon.scr” [MS] Enabled Scheduled Tasks: ------------------------ “AppleSoftwareUpdate” -> launches: “C:\Program Files\Apple Software Update\SoftwareUpdate.exe -Task” [“Apple Computer, Inc.”] “Uniblue SpyEraser Nag” -> launches: “C:\Program Files\Uniblue\SpyEraser\SpyEraser.exe -ynag” [file not found] “Uniblue SpyEraser” -> launches: “C:\Program Files\Uniblue\SpyEraser\SpyEraser.exe -s” [file not found] Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = “%SystemRoot%\System32\mswsock.dll” [MS] 000000000002\LibraryPath = “%SystemRoot%\System32\winrnr.dll” [MS] 000000000003\LibraryPath = “%SystemRoot%\System32\mswsock.dll” [MS] Transport Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: %SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 13 %SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05 Toolbars, Explorer Bars, Extensions: ------------------------------------ Toolbars HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ “{F2CF5485-4E02-4F68-819C-B92DE9277049}” -> {HKLM…CLSID} = “&Links” \InProcServer32(Default) = “C:\WINDOWS\system32\ieframe.dll” [MS] Extensions (Tools menu items, main toolbar menu buttons) HKLM\Software\Microsoft\Internet Explorer\Extensions\ {08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ “MenuText” = “Sun Java Console” “CLSIDExtension” = “{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}” -> {HKCU…CLSID} = “Java Plug-in 1.6.0_01” \InProcServer32(Default) = “C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll” [“Sun Microsystems, Inc.”] -> {HKLM…CLSID} = “Java Plug-in 1.6.0_01” \InProcServer32(Default) = “C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll” [“Sun Microsystems, Inc.”] {DFB852A3-47F8-48C4-A200-58CAB36FD2A2}\ “MenuText” = “Spybot - Search & Destroy Configuration” “CLSIDExtension” = “{53707962-6F74-2D53-2644-206D7942484F}” {E2E2DD38-D088-4134-82B7-F2BA38496583}\ “MenuText” = “@xpsp3res.dll,-20001” “Exec” = “%windir%\Network Diagnostic\xpnetdiag.exe” [MS] {FB5F1910-F110-11D2-BB9E-00C04F795683}\ “ButtonText” = “Messenger” “MenuText” = “Windows Messenger” “Exec” = “C:\Program Files\Messenger\msmsgs.exe” [MS] Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ iPod Service, iPod Service, ““C:\Program Files\iPod\bin\iPodService.exe”” [“Apple Inc.”] Kaspersky Anti-Virus 6.0, AVP, ““C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe” -r” [“Kaspersky Lab”] LightScribeService Direct Disc Labeling Service, LightScribeService, ““C:\Program Files\Common Files\LightScribe\LSSrvc.exe”” [“Hewlett-Packard Company”] NVIDIA Display Driver Service, NVSvc, “C:\WINDOWS\system32\nvsvc32.exe” [“NVIDIA Corporation”] TrueVector Internet Monitor, vsmon, “C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service” [“Zone Labs, LLC”] ---------- <>: Suspicious data at a malware launch point. + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + The search for DESKTOP.INI DLL launch points on all local fixed drives took 47 seconds. ---------- (total run time: 112 seconds)

Bardzo prosze o ewentualna podpowiedz, co moge zrobic, zeby odmulic kompa.

Dziekuje

[Joan (Joan Sunshine)]

Proszę objąć logi w tagi Quote lub Code i stosować polskie znaki w pisowni na Forum

[R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.imesh.com/sidebar.html?src=ssb R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.imesh.com/sidebar.html?src=ssb R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.imesh.com/sidebar.html?src=ssb R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.imesh.com/sidebar.html?src=ssb R3 - URLSearchHook: iMesh MediaBar - {B7D3E479-CC68-42B5-A338-938ECE35F419} - (no file)

usun wpisy

Przeczyść rejestr – użyj do tego jv16 PowerTools 2006 1.5.2.344.

Skan AVG AntiSpyware 7.5 po update, wklej raport.

[majka102]

Usunęłam te wspisy z pozycji Hijacka, Wyczyściłam rejestr… Przeskanowałam… Były same ciasteczka-tak mi się wydaje…

Oto raport:

--------------------------------------------------------- AVG Anti-Spyware - Scan Report --------------------------------------------------------- + Created at: 13:25:22 2007-06-26 + Scan result: D:\programy\instalki\angripscanner.rar/angripscanner\register.reg -> Hijacker.StartPage : No action taken. :mozilla.450:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.451:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.452:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.487:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.476:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Adbrite : No action taken. :mozilla.477:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Adbrite : No action taken. :mozilla.12:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Adocean : No action taken. :mozilla.13:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Adocean : No action taken. :mozilla.14:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Adocean : No action taken. :mozilla.194:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Adocean : No action taken. :mozilla.195:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Adocean : No action taken. :mozilla.222:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Adocean : No action taken. :mozilla.223:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Adocean : No action taken. :mozilla.245:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Adocean : No action taken. :mozilla.246:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Adocean : No action taken. :mozilla.467:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Adocean : No action taken. :mozilla.468:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Adocean : No action taken. :mozilla.59:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Adocean : No action taken. :mozilla.60:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Adocean : No action taken. :mozilla.77:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Adocean : No action taken. :mozilla.78:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Adocean : No action taken. :mozilla.79:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Adocean : No action taken. C:\Documents and Settings\Maja\Cookies\maja@gde.adocean[2].txt -> TrackingCookie.Adocean : No action taken. :mozilla.336:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Advertising : No action taken. :mozilla.337:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Advertising : No action taken. :mozilla.338:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Advertising : No action taken. :mozilla.339:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Advertising : No action taken. :mozilla.129:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Atdmt : No action taken. :mozilla.332:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. :mozilla.333:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. :mozilla.334:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. :mozilla.335:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. :mozilla.315:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Clickbank : No action taken. :mozilla.48:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Doubleclick : No action taken. :mozilla.6:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Gemius : No action taken. :mozilla.7:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Gemius : No action taken. :mozilla.8:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Gemius : No action taken. C:\Documents and Settings\Maja\Cookies\maja@hit.gemius[2].txt -> TrackingCookie.Gemius : No action taken. :mozilla.170:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken. :mozilla.253:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken. :mozilla.358:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken. :mozilla.397:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken. :mozilla.398:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken. :mozilla.438:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.439:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.440:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.471:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Hotlog : No action taken. :mozilla.271:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Imrworldwide : No action taken. :mozilla.272:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Imrworldwide : No action taken. :mozilla.458:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Information : No action taken. :mozilla.481:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Ivwbox : No action taken. :mozilla.453:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Mediaplex : No action taken. C:\Documents and Settings\Maja\Cookies\maja@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : No action taken. :mozilla.340:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Overture : No action taken. :mozilla.461:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Reliablestats : No action taken. :mozilla.462:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Reliablestats : No action taken. :mozilla.463:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Reliablestats : No action taken. :mozilla.464:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Reliablestats : No action taken. :mozilla.483:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Skype : No action taken. :mozilla.484:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Skype : No action taken. :mozilla.485:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Skype : No action taken. C:\Documents and Settings\Maja\Cookies\maja@skype[1].txt -> TrackingCookie.Skype : No action taken. :mozilla.304:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.305:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.306:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.307:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.61:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken. :mozilla.62:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken. :mozilla.63:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken. :mozilla.64:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken. :mozilla.107:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Webtrends : No action taken. C:\Documents and Settings\Maja\Cookies\maja@m.webtrends[1].txt -> TrackingCookie.Webtrends : No action taken. :mozilla.321:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Webtrendslive : No action taken. :mozilla.196:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Yadro : No action taken. :mozilla.197:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Yadro : No action taken. :mozilla.206:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken. :mozilla.207:C:\Documents and Settings\Maja\Dane aplikacji\Mozilla\Firefox\Profiles\2b0b3nfk.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken. ::Report end

Usunęłam wszystkie te przymioty w-g porady AVG i zdaje się być ok, choć nadal wiesza mi się AQQ…

To temat na inne forum, wiem.

W każdym razie dziękuję za zainteresowanie i podpowiedzi…

Dodam jeszcze, że wyłączyłam przywracanie systemu i nie włączyłam do teraz, czy powinnam to zrobić?

[qrczak13]

Na czas usuwania plików należy wyłączać przywracanie. Po oczyszczeniu możesz włączyć.

Poczytaj o zbędnikach w autostarcie.

Optymalizacja i odchudzanie Windows XP

[majka102]

:mrgreen: dziękuję szczerząco już sie do tego zabieram