Możecie luknąć?

PiotrekPlatek · 10 Lipiec 2005 09:54

Logfile of HijackThis v1.99.1 Scan saved at 11:57:46, on 2005-07-10 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\SYSTEM32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\spoolsv.exe D:\programy\antywir\aswUpdSv.exe D:\programy\antywir\ashServ.exe C:\WINNT\system32\cisvc.exe C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe D:\programy\antywir\ashMaiSv.exe D:\programy\antywir\ashWebSv.exe C:\WINNT\System32\svchost.exe C:\WINNT\Explorer.EXE D:\programy\antywir\ashDisp.exe C:\Program Files\PLANET\Planet Wireless Lan Configure Utility\RtlWake.exe D:\programy\Gadu-Gadu\gg.exe C:\WINNT\system32\cidaemon.exe D:\programy\Opera\Opera.exe D:\programy\hijack\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza F2 - REG:system.ini: UserInit=C:\WINNT\regedit /s C:\pav.reg,C:\WINNT\system32\pavdr.exe,C:\WINNT\system32\userinit.exe, O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\programy\Adobe\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\programy\SS&D~1\SPYBOT~1\SDHelper.dll O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\programy\FlashGet\FlashGet\jccatch.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file) O4 - HKLM…\Run: [avast!] D:\programy\antywir\ashDisp.exe O4 - HKLM…\Run: [synchronization Manager] mobsync.exe /logon O4 - Global Startup: WL-8303.lnk = C:\Program Files\PLANET\Planet Wireless Lan Configure Utility\RtlWake.exe O8 - Extra context menu item: Ściągnij przy pomocy FlashGet’a - D:\programy\FlashGet\FlashGet\jc_link.htm O8 - Extra context menu item: Ściągnij wszystko przy pomocy FlashGet’a - D:\programy\FlashGet\FlashGet\jc_all.htm O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm O9 - Extra ‘Tools’ menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\programy\FlashGet\FlashGet\flashget.exe O9 - Extra ‘Tools’ menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\programy\FlashGet\FlashGet\flashget.exe O16 - DPF: {BB47CA33-8B4D-11D0-9511-00C04FD9152D} (ExteriorSurround Object) - http://carpoint.msn.com/Components/Ocx/ … utside.cab O16 - DPF: {C6760A07-A574-4705-B113-7856315922C3} - http://akamai.downloadv3.com/binaries/I … c32_EN.cab O17 - HKLM\System\CCS\Services\Tcpip…{3884A1CA-C5BD-4720-AAA0-BAABDF8FE606}: NameServer = 62.233.197.225,213.77.115.28 O17 - HKLM\System\CCS\Services\Tcpip…{44F096E3-DDFE-4594-A5BB-9373B0AE313F}: NameServer = 157.25.5.18,217.8.168.244 O17 - HKLM\System\CS1\Services\Tcpip…{3884A1CA-C5BD-4720-AAA0-BAABDF8FE606}: NameServer = 62.233.197.225,213.77.115.28 O17 - HKLM\System\CS2\Services\Tcpip…{3884A1CA-C5BD-4720-AAA0-BAABDF8FE606}: NameServer = 62.233.197.225,213.77.115.28 O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - D:\programy\antywir\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - D:\programy\antywir\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - D:\programy\antywir\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - D:\programy\antywir\ashWebSv.exe" /service (file missing) O23 - Service: AVK Service (AVKService) - Unknown owner - (no file) O23 - Service: Strażnik AVK (AVKWCtl) - Unknown owner - (no file) O23 - Service: Usługa administracyjna Menedżera dysków logicznych (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe

Wiem, ze tego strażnika od AVK i AVK service powinienem usunąć, ale się kurcze nie daje Czy coś jeszcze ?

PZDR

Damian · 10 Lipiec 2005 10:02

F2 - REG:system.ini: UserInit=C:\WINNT\regedit /s C:\pav.reg,C:\WINNT\system32\pavdr.exe,C:\WINNT\system32\userinit.exe,

O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)

O16 - DPF: {C6760A07-A574-4705-B113-7856315922C3} - http://akamai.downloadv3.com/binaries/I … c32_EN.cab

Co do AVK to przeczyść rejestr programem jv16 PowerTools 1.3.0.195