Pomoze ktos z logiem?

prosze o sprawdzenie i podpowiedz co mam zrobic zeby bylo ok

Logfile of HijackThis v1.98.2

Scan saved at 08:42:18, on 2004-10-27

Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\System32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

C:\Program Files\Norton SystemWorks\Norton Antivirus\navapsvc.exe

C:\PROGRA~1\NORTON~1\NORTON~2\NPROTECT.EXE

C:\Program Files\Norton SystemWorks\Norton Antivirus\SAVScan.exe

C:\PROGRA~1\NORTON~1\NORTON~2\SPEEDD~1\NOPDB.EXE

C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\PROGRA~1\T-Media\MMHotKey.EXE

C:\Program Files\Common Files\Symantec Shared\ccApp.exe

C:\Program Files\Norton SystemWorks\Password Manager\AcctMgr.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe

D:\AD-AWA~1\Ad-Watch.exe

C:\Program Files\Norton SystemWorks\Norton CleanSweep\CsinsmNT.exe

C:\WINDOWS\system32\ntvdm.exe

C:\Program Files\Gadu-Gadu\Gadu-Gadu\gg.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Messenger\msmsgs.exe

D:\Downloads\Programy\HijackThis19802.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza

R3 - Default URLSearchHook is missing

O2 - BHO: IEWatchObj Class - {9527D42F-D666-11D3-B8DD-00600838CD5F} - C:\WINDOWS\System32\IETie.dll

O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton Antivirus\NavShExt.dll

O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton Antivirus\NavShExt.dll

O4 - HKLM…\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM…\Run: [KE9801] C:\PROGRA~1\T-Media\MMHotKey.EXE

O4 - HKLM…\Run: [ccApp] “C:\Program Files\Common Files\Symantec Shared\ccApp.exe”

O4 - HKLM…\Run: [AcctMgr] C:\Program Files\Norton SystemWorks\Password Manager\AcctMgr.exe /startup

O4 - HKLM…\Run: [QD FastAndSafe] C:\Program Files\Norton SystemWorks\Norton CleanSweep\QDCSFS.exe /scheduler

O4 - HKLM…\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM…\Run: [sunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe

O4 - HKLM…\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM…\Run: [AWMON] “D:\AD-AWA~1\Ad-Watch.exe”

O4 - HKCU…\Run: [Gadu-Gadu] “C:\Program Files\Gadu-Gadu\Gadu-Gadu\gg.exe” /tray

O4 - Global Startup: CleanSweep Smart Sweep-Internet Sweep.lnk = C:\Program Files\Norton SystemWorks\Norton CleanSweep\CsinsmNT.exe

O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://D:\MICROS~1\Office10\EXCEL.EXE/3000

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {70B410C0-BADA-11D4-8308-0080C8D7ED4A} - http://67.15.101.3/g_bin/pl/bridge_2_0_0_15.cab

O16 - DPF: {FDDBE2B8-6602-4AD8-946D-94C5A32FA6C1} - http://67.15.101.3/g_bin/pl/billard8_2_0_0_21.cab

O17 - HKLM\System\CCS\Services\Tcpip…{553234F8-BB03-4E3E-ABD6-5B5AED6E275D}: NameServer = 195.114.161.2,195.114.181.130

O17 - HKLM\System\CCS\Services\Tcpip…{ACDAE0BD-468E-4135-9224-E33FCDFA8537}: NameServer = 195.114.161.2,195.114.181.130

Log czysty :smiley: Kosmetycznie:

START - uruchom - wpisz - msconfig - Uruchamianie i odznacz : jusched.exe

Log czysty

kasujesz tak tylko

R3 - Default URLSearchHook is missing

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

uzywasz kasujesz /NIE/ zostawiasz

O16 - DPF: {70B410C0-BADA-11D4-8308-0080C8D7ED4A} - http://67.15.101.3/g_bin/pl/bridge_2_0_0_15.cab

O16 - DPF: {FDDBE2B8-6602-4AD8-946D-94C5A32FA6C1} - http://67.15.101.3/g_bin/pl/billard8_2_0_0_21.cab

INFO:

016 - ActiveX ,a szczegolnie te grozne usuwasz/zabezpieczasz programem

SpywareBlaster

http://www.javacoolsoftware.com/sbdownload.html

zrob sobie skan skanerami AV

–Pest-Scan-- (tylko skanuje nieusuwa)

http://www.pestscan.com/

cos wykryje sciagasz wersje /full/ Pesta

http://download.zonelabs.com/bin/free/p … olHome.exe

INFO:

skanujesz wszystkie dyski HDD, potem /replay/ partycje systemowa

dalej robisz skan

–GeCAD (RAV)–

http://www.ravantivirus.com/scan/

–F-Secure–

http://support.f-secure.com/enu/home/ols.shtml