Witam, mam taki problem na laptopie, że wyskakuje reklama oczyszczaszkomputerza i nie bardzo wiem jak to usunąć kaspersky i no blokuje jak go wyłącze to to wyskakuje a nie o to chodzi… dodatkowo wyskakuje pełno okienek ie z nie odnalezieniem serwera --’ zamieszczam log z hijackthis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:09:14, on 2008-05-27
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16386)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\ASUS\Asus MultiFrame\MultiFrame.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\System32\rundll32.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\PowerForPhone\PowerForPhone.exe
C:\Windows\ASScrPro.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
C:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O4 - HKLM…\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM…\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM…\Run: [inCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM…\Run: [iAAnotif] “C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe”
O4 - HKLM…\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM…\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM…\Run: [sMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM…\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM…\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM…\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM…\Run: [PowerForPhone] C:\Program Files\PowerForPhone\PowerForPhone.exe
O4 - HKLM…\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe
O4 - HKLM…\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe
O4 - HKLM…\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM…\Run: [sunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe”
O4 - HKLM…\Run: [Corel File Shell Monitor] C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
O4 - HKLM…\Run: [Corel Photo Downloader] “C:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe” -startup
O4 - HKLM…\Run: [MSConfig] “C:\Windows\system32\msconfig.exe” /auto
O4 - HKLM…\Run: [AVP] “C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe”
O4 - HKCU…\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU…\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU…\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] “C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe”
O4 - HKCU…\Run: [cmds] rundll32.exe C:\Users\WACICI~1\AppData\Local\Temp\yayvWqqq.dll,c
O4 - HKUS\S-1-5-19…\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘USŁUGA LOKALNA’)
O4 - HKUS\S-1-5-19…\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘USŁUGA LOKALNA’)
O4 - HKUS\S-1-5-20…\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘USŁUGA SIECIOWA’)
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Symantec Fax Starter Edition Port.lnk = C:\Program Files\Microsoft Office\Office\1045\OLFSNT40.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Statystyki dla ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: Kolekcja wycinków HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Zaznaczanie HP Smart - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://sdlc-esd.sun.com/ESD40/JSCDL/jre … 586-jc.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\r3hook.dll,C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ADSM Service (ADSMService) - Unknown owner - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\Windows\System32\StkCSrv.exe
–
End of file - 9766 bytes
Zamieszczę też z combofix’a i tutaj też mam kolejny problem… po wykonaniu operacji combofix’a cały ekran zrobił sie czarny i nic nie działało uruchomiłem go ponownie i strasznie długo się włanczał, nie które programy sie nie uruchomiły oraz nie ma ikonek tzn podpis do ikonki jest a nie ma obrazka 
i strasznie go muli… ehh i dopiero przed chwilą wyczytałem, ze combofix jest pod 2000/xp … Byłbym wdzięczny jakbyście mi pomogli.
ComboFix 08-05-26.2 - Właściciel 2008-05-27 21:30:45.1 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1250.1.1045.18.1201 [GMT 2:00]
Running from: G:\ComboFix.exe
* Created a new restore point
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Windows\system32\AutoRun.inf
C:\Windows\system32\mdm.exe
.
((((((((((((((((((((((((( Files Created from 2008-04-27 to 2008-05-27 )))))))))))))))))))))))))))))))
.
2008-05-25 13:33 . 2008-05-25 13:33
2008-05-25 11:59 . 2008-05-25 11:59
2008-05-25 00:03 . 2008-05-25 00:30 96,645 --a------ C:\Windows\System32\drivers\klin.dat
2008-05-25 00:03 . 2008-05-25 00:30 87,941 --a------ C:\Windows\System32\drivers\klick.dat
2008-05-25 00:01 . 2008-05-27 20:47
2008-05-25 00:01 . 2008-05-25 00:01
2008-05-25 00:01 . 2008-05-27 21:46 37,839,904 --ahs---- C:\Windows\System32\drivers\fidbox.dat
2008-05-25 00:01 . 2008-05-27 19:36 496,160 --ahs---- C:\Windows\System32\drivers\fidbox.idx
2008-05-24 23:59 . 2008-05-24 23:59
2008-05-24 16:56 . 2008-05-24 16:56
2008-05-24 16:56 . 2008-05-24 16:56
2008-05-24 16:56 . 2008-05-24 16:56 0 --a------ C:\Windows\nsreg.dat
2008-05-24 16:48 . 2008-05-24 16:48
2008-05-24 11:40 . 2008-05-24 11:40
2008-05-24 01:13 . 2008-05-24 01:13
2008-05-24 00:47 . 2008-05-24 00:47
2008-05-24 00:45 . 2008-05-24 00:46
2008-05-24 00:41 . 2008-05-24 00:41
2008-05-24 00:41 . 2008-05-24 00:41 717,296 --a------ C:\Windows\System32\drivers\sptd.sys
2008-05-24 00:24 . 2008-05-24 00:24
2008-05-24 00:17 . 2008-05-24 00:17
2008-05-23 23:57 . 2008-05-23 23:57
2008-05-23 23:57 . 2008-05-23 23:58
2008-05-23 23:44 . 2008-05-23 23:44
2008-05-23 23:44 . 2008-05-23 23:44
2008-05-23 23:44 . 2008-05-24 22:53 2,880 --ahs---- C:\Windows\System32\KGyGaAvL.sys
2008-05-23 23:44 . 2008-05-24 00:02 88 -r-hs---- C:\Windows\System32\69BFC4A141.sys
2008-05-13 14:45 . 2008-05-13 16:23
2008-05-13 14:44 . 2008-05-27 21:07
2008-05-13 14:43 . 2008-05-13 14:43
2008-05-13 14:39 . 2008-05-13 14:39
2008-05-13 13:49 . 2008-05-13 13:49
2008-05-13 13:49 . 2008-05-13 13:49
2008-05-13 13:49 . 2008-05-13 13:49
2008-05-11 14:18 . 2008-05-12 17:58
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-27 19:46 2,621,440 --sha-w C:\Users\Właściciel\NTUSER.DAT
2008-05-27 19:46 2,621,440 --sha-w C:\Users\Właściciel\NTUSER.DAT
2008-05-27 16:00 27,810 ----a-w C:\Users\Właściciel\AppData\Roaming\nvModes.dat
2008-05-24 22:05 --------- d-s—w C:\Users\Właściciel\AppData\Roaming\Microsoft
2008-05-24 15:22 --------- d-----w C:\Users\Właściciel\AppData\Roaming\Skype
2008-05-24 14:56 --------- d-----w C:\Users\Właściciel\AppData\Roaming\Talkback
2008-05-24 14:56 --------- d-----w C:\Users\Właściciel\AppData\Roaming\Mozilla
2008-05-24 14:22 --------- d–h--w C:\Program Files\InstallShield Installation Information
2008-05-23 23:14 --------- d-----w C:\Program Files\Common Files\Adobe
2008-05-23 22:41 --------- d-----w C:\Users\Właściciel\AppData\Roaming\DAEMON Tools
2008-05-23 22:25 --------- d-----w C:\Users\Właściciel\AppData\Roaming\Adobe
2008-05-23 21:44 --------- d-----w C:\Users\Właściciel\AppData\Roaming\Corel
2008-05-22 15:51 45,056 ----a-w C:\Windows\System32\acovcnt.exe
2008-05-13 14:23 --------- d-----w C:\Users\Właściciel\AppData\Roaming\Google
2008-05-13 13:11 --------- d-----w C:\Program Files\Common Files\Steam
2008-04-21 19:08 --------- d-----w C:\Users\Właściciel\AppData\Roaming\Ahead
2008-04-21 19:08 --------- d-----w C:\ProgramData\LightScribe
2008-04-07 21:36 --------- d-----w C:\Program Files\Devious Codeworks
2008-04-07 21:32 --------- d-----w C:\ProgramData\TEMP
2008-04-07 21:21 --------- d-----w C:\Program Files\Wisdom-soft AutoScreenRecorder 3 Free
2008-04-07 20:59 --------- d-----w C:\Program Files\NuGardt Software
2008-04-02 19:38 --------- d-----w C:\Users\Właściciel\AppData\Roaming\teamspeak2
2006-11-02 12:50 174 --sha-w C:\Program Files\desktop.ini
1999-05-17 12:58 99,840 ----a-w C:\Program Files\Common Files\IRAABOUT.DLL
1998-12-09 01:53 70,144 ----a-w C:\Program Files\Common Files\IRAMDMTR.DLL
1998-12-09 01:53 48,640 ----a-w C:\Program Files\Common Files\IRALPTTR.DLL
1998-12-09 01:53 31,744 ----a-w C:\Program Files\Common Files\IRAWEBTR.DLL
1998-12-09 01:53 186,368 ----a-w C:\Program Files\Common Files\IRAREG.DLL
1998-12-09 01:53 17,920 ----a-w C:\Program Files\Common Files\IRASRIAL.DLL
.
