Mam szpiegi prosze o spr.loga

x-awier · 30 Kwiecień 2006 15:18

skaner online wykryl mi szpiegi ale ich nie usunal oto olg

Logfile of HijackThis v1.99.1 Scan saved at 17:18:12, on 2006-04-30 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Symantec Client Security\Symantec Client Firewall\ISSVC.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Symantec Client Security\Symantec AntiVirus\DefWatch.exe C:\Program Files\Symantec Client Security\Symantec AntiVirus\Rtvscan.exe C:\Program Files\Symantec Client Security\Symantec Client Firewall\SymSPort.exe C:\WINDOWS\system32\UAService7.exe C:\WINDOWS\system32\WgaTray.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\htpatch.exe C:\WINDOWS\system32\RunDll32.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\PROGRA~1\SYMANT~1\SYMANT~2\VPTray.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\Glass2k\Glass2k.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Gadu-Gadu\gg.exe F:\Zegarynka.exe C:\Program Files\Skype\Phone\Skype.exe D:\Program Files\Vista Inspirat\ObjectDock\ObjectDock.exe D:\Program Files\Vista Inspirat\YzShadow\YzShadow.exe D:\Program Files\Vista Inspirat\YzToolbar\YzToolBar.exe F:\Azureus\Azureus.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\DOCUME~1\Radek\USTAWI~1\Temp\Rar$EX41.781\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O4 - HKLM…\Run: [HTpatch] C:\WINDOWS\htpatch.exe O4 - HKLM…\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe O4 - HKLM…\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM…\Run: [ccApp] “C:\Program Files\Common Files\Symantec Shared\ccApp.exe” O4 - HKLM…\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~2\VPTray.exe O4 - HKLM…\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM…\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM…\Run: [DAEMON Tools] “C:\Program Files\DAEMON Tools\daemon.exe” -lang 1033 O4 - HKLM…\Run: [Glass2k] C:\Program Files\Glass2k\Glass2k.exe O4 - HKLM…\Run: [LClock] C:\Program Files\LClock\LClock.exe O4 - HKCU…\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU…\Run: [Gadu-Gadu] “C:\Program Files\Gadu-Gadu\gg.exe” /tray O4 - HKCU…\Run: [Zegarynka] F:\Zegarynka.exe O4 - HKCU…\Run: [Skype] “C:\Program Files\Skype\Phone\Skype.exe” /nosplash /minimized O4 - HKCU…\Run: [Longhorn SideBar] C:\WINDOWS\SideBar\SideBar.exe O4 - Startup: Stardock ObjectDock.lnk = D:\Program Files\Vista Inspirat\ObjectDock\ObjectDock.exe O4 - Startup: Y’z Shadow.lnk = D:\Program Files\Vista Inspirat\YzShadow\YzShadow.exe O4 - Startup: Y’z ToolBar.lnk = D:\Program Files\Vista Inspirat\YzToolbar\YzToolBar.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Open With JPEGCompress - res://D:\ANIMOWANE GIFY\JPEGCompress\owjc.dll/CONTEXT_HANDLE.HTM O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O9 - Extra ‘Tools’ menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing) O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec Client Security\Symantec AntiVirus\DefWatch.exe O23 - Service: IS Service (ISSVC) - Symantec Corporation - C:\Program Files\Symantec Client Security\Symantec Client Firewall\ISSVC.exe O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec Client Security\Symantec AntiVirus\SavRoam.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec Client Security\Symantec AntiVirus\Rtvscan.exe O23 - Service: Symantec SecurePort (SymSecurePort) - Symantec Corporation - C:\Program Files\Symantec Client Security\Symantec Client Firewall\SymSPort.exe O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe

Gutek · 30 Kwiecień 2006 15:29

a lokalizacja, mozesz podać?

master_zonk6 · 30 Kwiecień 2006 16:25

to chyba ci pokazuje gdzie jest szpieg. To nie umiesz ich ręcznie wyczyścić?

x-awier · 30 Kwiecień 2006 18:22

cos takiego C:\Documents and Settings\Radek\Mozilla\Firefox\Profiles\7fsr72hu.default\ (i tam cos bylo cookies cos tam cos tam)

Złączono Posta : 30.04.2006 (Nie) 20:24

ale jak wszedlem w

to zadne cookie nie bylo

Bieniol · 30 Kwiecień 2006 18:25

Opróżnij TEMP i Temporary Internet Files - w trybie awaryjnym bierzesz:

Start --> Uruchom --> cmd

Dodatkowo przeskanuj EWIDO po update

x-awier · 30 Kwiecień 2006 19:23

przeskanowalem ale online i mi wykrylo cos takiego :

po przeskanowan iu wzialem remove ifect i tera bede robil to temprorry

Bieniol · 30 Kwiecień 2006 19:33

Ściągnij program na dysk, zrób update i przeskanuj system

Później wrzuć raport z tego programu

x-awier · 30 Kwiecień 2006 20:33

to raport z EWIDO

--------------------------------------------------------- ewido anti-malware - Scan report --------------------------------------------------------- + Created on: 22:33:36, 2006-04-30 + Report-Checksum: AA5DB787 + Scan result: :mozilla.19:C:\Documents and Settings\Radek\Dane aplikacji\Mozilla\Firefox\Profiles\7fsr72hu.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.20:C:\Documents and Settings\Radek\Dane aplikacji\Mozilla\Firefox\Profiles\7fsr72hu.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.21:C:\Documents and Settings\Radek\Dane aplikacji\Mozilla\Firefox\Profiles\7fsr72hu.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.22:C:\Documents and Settings\Radek\Dane aplikacji\Mozilla\Firefox\Profiles\7fsr72hu.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.24:C:\Documents and Settings\Radek\Dane aplikacji\Mozilla\Firefox\Profiles\7fsr72hu.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.33:C:\Documents and Settings\Radek\Dane aplikacji\Mozilla\Firefox\Profiles\7fsr72hu.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup :mozilla.38:C:\Documents and Settings\Radek\Dane aplikacji\Mozilla\Firefox\Profiles\7fsr72hu.default\cookies.txt -> TrackingCookie.Adocean : Cleaned with backup :mozilla.39:C:\Documents and Settings\Radek\Dane aplikacji\Mozilla\Firefox\Profiles\7fsr72hu.default\cookies.txt -> TrackingCookie.Adocean : Cleaned with backup ::Report End

InfinityToJa · 30 Kwiecień 2006 20:34

nic groźnego, wywal

x-awier · 30 Kwiecień 2006 20:53

juz usunalem ale komp sie strasznie muli

Bieniol · 30 Kwiecień 2006 21:03

Przeczyść rejestr (polecam do tego RegCleaner 4.3.0.780), zrób defragmentację, oraz przejrzyj: Optymalizacja XP

Wejdź: Start --> uruchom --> msconfig i w zakładce uruchamianie odznacz (według Ciebie) niepotrzbne przy autostarcie programy