Problem z otwarciem okna "Mój komputer"

zwirek · 19 Czerwiec 2008 21:55

Windows XP sp2

Po zainstalowaniu FF3 zauważyłem że mam problem z wejściem do “mojego komputera” poprzez lp myszki. Zamiast okna “mój komputer” otwiera mi się winamp. Do okna “mojego komputera” mogę dostać się poprzez pp myszy i eksploruj. Dodam jeszcze że do “mojego komputera” wchodzę poprzez Start gdyż nie mam na pulpicie skrótu. Byłbym bardzo wdzięczny o porady jak mogę ustawić poprzednie ustawienie.pzdr serdecznie

lukasz02495 · 19 Czerwiec 2008 22:06

Tak więc menu kontekstowe mojego komputera i wybierz “pokaż na pulpicie”

zwirek · 19 Czerwiec 2008 22:08

Cały czas otwiera się winamp…czyli nic się nie zmieniło

lukasz02495 · 19 Czerwiec 2008 22:10

start -> uruchom -> explorer.exe

i zrób skrót na pulpit

zwirek · 19 Czerwiec 2008 23:22

nieśmiało muszę się przyznać że nie potrafię tego zrobić :oops: Byłbym wdzięczny o podanie receptury jak tego dokonać

ybu · 20 Czerwiec 2008 07:03

Sprawdź to: Kliknij prawym przyciskiem myszy na pulpit, wybierz Właściwości, zakładka Pulpit i na dole jest Dostosuj pulpit.

Tam możesz wybrać które ikony chcesz mieć na pulpicie .

zwirek · 20 Czerwiec 2008 08:26

Mam zaznaczony “Mój komputer”…problem tkwi w tym że jak chce uruchomić okno “Mój komputer” włącza mi się winamp i byłbym wdzięczny o pomoc w tej kwestii a nie co mam zrobić aby mieć ikonę na pulpicie pzdr serdecznie

Loookash89 · 20 Czerwiec 2008 09:16

A to nie jest skrót przypadkiem?Jeśli tak to go usuń.

Start->po prawej stronie masz pokazany Mój komputer->PPM(Prawy Przycisk Myszy) na niego->Pokaż na pulpicie.

system · 20 Czerwiec 2008 10:19

Sądzę, że ten problem nie jest związany z instalacją FF3, ale z ostatnio używanym dyskiem wymiennym.

Pobierz ComboFix i zamieść log na forum.

zwirek · 20 Czerwiec 2008 23:33

Mam problem z rozpoczęciem skanowania, a mianowicie Combofix nie może odnaleźć dysku rozruchowego " Instalation File - C:\Documents…\WindowsXp-KB310994-SP2-Home-BootDisk-ENU.exe - cannot be fund" ponieważ że posiadam angielską wersję Windowsa ściągałem pod język angielski. Wszytko robiłem wedle wyżej zamieszczonego linku. Próbowałem Wykonać skan kilka razy za każdym razem pobierając poszczególne pliki - bez rezultatu. Ściągałem je oczywiście przy wyłączonych programach ochronnych…czy może jest jakiś sposób na obejście tego? Czy może coś robię nie tak i w złej kolejności?pzdr serdecznie

huber2t · 21 Czerwiec 2008 07:17

Podaj log z pliku main.txt z Deckard’s System Scanner

zwirek · 21 Czerwiec 2008 08:09

Deckard’s System Scanner v20071014.68 Run by Sylwester Koźmic on 2008-06-21 08:55:09 Computer is in Normal Mode. -------------------------------------------------------------------------------- – System Restore -------------------------------------------------------------- Successfully created a Deckard’s System Scanner Restore Point. – Last 5 Restore Point(s) – 89: 2008-06-21 07:55:15 UTC - RP398 - Deckard’s System Scanner Restore Point 88: 2008-06-20 23:19:57 UTC - RP397 - ComboFix created restore point 87: 2008-06-20 23:08:57 UTC - RP396 - ComboFix created restore point 86: 2008-06-20 22:57:46 UTC - RP395 - ComboFix created restore point 85: 2008-06-20 22:44:49 UTC - RP394 - ComboFix created restore point – First Restore Point – 1: 2008-03-23 17:16:56 UTC - RP310 - System Checkpoint Backed up registry hives. Performed disk cleanup. – HijackThis (run as Sylwester Koźmic.exe) ------------------------------------ Unable to find log (file not found); running clone. – HijackThis Clone ------------------------------------------------------------ Emulating logfile of Trend Micro HijackThis v2.0.2 Scan saved at 2008-06-21 08:58:56 Platform: Windows XP Service Pack 2 (5.01.2600) MSIE: Internet Explorer (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\system32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ati2evxx.exe C:\WINDOWS\explorer.exe C:\Instalki\Ad-aware 2007\aawservice.exe C:\Instalki\avast\aswUpdSv.exe C:\Instalki\avast\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Instalki\bluetooth\bin\btwdins.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Instalki\Alcohol 52\StarWind\StarWindService.exe C:\WINDOWS\system32\PAStiSvc.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\HPQ\HP Wireless Assistant\HP Wireless Assistant.exe C:\Instalki\avast\ashDisp.exe C:\WINDOWS\system32\ctfmon.exe C:\Instalki\bluetooth\BTTray.exe C:\Program Files\HPQ\shared\HpqToaster.exe C:\WINDOWS\system32\svchost.exe C:\Instalki\avast\ashMaiSv.exe C:\Instalki\avast\ashWebSv.exe C:\Instalki\Gadu-Gadu\gg.exe C:\Documents and Settings\Sylwester Koźmic\Desktop\dss.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/ R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.com/search?q=%s R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.hp.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.hp.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie R3 - URLSearchHook: SrchHook Class - {F4F10C1D-87C7-404A-B4B3-000000000000} - C:\Instalki\DAP\SBSearch.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: Alcohol Toolbar Helper - {52D06F97-5511-43FA-8FDA-C481864FD26E} - C:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll (file missing) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O3 - Toolbar: Alcohol Toolbar - {4C4E7CDB-5BFC-4D74-83E2-8AE659B7EDA2} - C:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll (file missing) O4 - HKLM…\Run: [ATIPTA] “C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe” O4 - HKLM…\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM…\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe O4 - HKLM…\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe O4 - HKLM…\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe O4 - HKLM…\Run: [avast!] C:\Instalki\avast\ashDisp.exe O4 - HKLM…\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKCU…\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU…\Run: [Gadu-Gadu] “C:\Instalki\Gadu-Gadu\gg.exe” /tray O4 - HKUS\S-1-5-18…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SYSTEM’) O4 - HKUS.DEFAULT…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘Default user’) O4 - Global Startup: BTTray.lnk = C:\Instalki\bluetooth\BTTray.exe O8 - Extra context menu item: &Clean Traces - C:\Instalki\DAP\Privacy Package\dapcleanerie.htm O8 - Extra context menu item: &Download with &DAP - C:\Instalki\DAP\dapextie.htm O8 - Extra context menu item: Download &all with DAP - C:\Instalki\DAP\dapextie2.htm O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Wyślij do interfejsu &Bluetooth - C:\Instalki\bluetooth\btsendto_ie_ctx.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing) O9 - Extra button: Wyślij do interfejsu Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Instalki\bluetooth\btsendto_ie.htm O9 - Extra ‘Tools’ menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Instalki\bluetooth\btsendto_ie.htm O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: C:\WINDOWS\system32\nwprovau.dll O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup … 8989325828 O18 - Protocol: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Instalki\Ad-aware 2007\aawservice.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Instalki\avast\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Instalki\avast\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Instalki\avast\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Instalki\avast\ashWebSv.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Instalki\bluetooth\bin\btwdins.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Instalki\Alcohol 52\StarWind\StarWindService.exe O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\system32\PAStiSvc.exe – End of file - 7524 bytes – File Associations ----------------------------------------------------------- All associations okay. – Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- R0 prohlp02 (StarForce Protection Helper Driver v2) - c:\windows\system32\drivers\prohlp02.sys R0 prosync1 (StarForce Protection Synchronization Driver v1) - c:\windows\system32\drivers\prosync1.sys R0 sfhlp01 (StarForce Protection Helper Driver) - c:\windows\system32\drivers\sfhlp01.sys R1 prodrv06 (StarForce Protection Environment Driver v6) - c:\windows\system32\drivers\prodrv06.sys R2 BTSERIAL (Bluetooth Serial Driver) - c:\windows\system32\drivers\btserial.sys R2 BTSLBCSP (Bluetooth Port Client Driver) - c:\windows\system32\drivers\btslbcsp.sys S3 btwmodem (Modem Bluetooth) - c:\windows\system32\drivers\btwmodem.sys – Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- All services whitelisted. – Device Manager: Disabled ---------------------------------------------------- No disabled devices found. – Files created between 2008-05-21 and 2008-06-21 ----------------------------- 2008-06-20 23:44:25 68096 --a------ C:\WINDOWS\zip.exe 2008-06-20 23:44:25 49152 --a------ C:\WINDOWS\VFind.exe 2008-06-20 23:44:25 212480 --a------ C:\WINDOWS\swxcacls.exe 2008-06-20 23:44:25 136704 --a------ C:\WINDOWS\swsc.exe 2008-06-20 23:44:25 161792 --a------ C:\WINDOWS\swreg.exe 2008-06-20 23:44:25 98816 --a------ C:\WINDOWS\sed.exe 2008-06-20 23:44:25 80412 --a------ C:\WINDOWS\grep.exe 2008-06-20 23:44:25 89504 --a------ C:\WINDOWS\fdsv.exe 2008-06-19 00:26:47 0 d-------- C:\Documents and Settings\Sylwester Koźmic\Application Data\Winamp 2008-06-17 23:05:38 4718592 --a------ C:\Documents and Settings\Sylwester Koźmic\ntuser.dat 2008-06-16 22:04:27 0 d-------- C:\Documents and Settings\Administrator\Cookies 2008-06-16 22:04:27 0 d-------- C:\Documents and Settings\Administrator\Application Data 2008-06-16 22:04:27 0 d-------- C:\Documents and Settings\Administrator\Application Data\Symantec 2008-06-16 22:04:27 0 d-------- C:\Documents and Settings\Administrator\Application Data\Microsoft 2008-06-16 22:04:26 0 d-------- C:\Documents and Settings\Administrator\Favorites 2008-06-16 22:04:25 0 d-------- C:\Documents and Settings\Administrator\Local Settings 2008-06-16 22:04:24 0 d-------- C:\Documents and Settings\Administrator\Templates 2008-06-16 22:04:22 786432 --ah----- C:\Documents and Settings\Administrator\NTUSER.DAT 2008-06-15 06:24:19 753664 --a------ C:\Documents and Settings\LocalService\ntuser.dat 2008-06-08 22:52:57 2244 --a------ C:\Documents and Settings\Sylwester Koźmic\Application Data\filterclsid.dat 2008-06-08 22:51:17 174592 --a------ C:\WINDOWS\system32\framedyn.dll 2008-06-08 22:50:11 77824 --a------ C:\WINDOWS\system32\mp4_vcodec.dll 2008-06-08 22:50:09 684032 --a------ C:\WINDOWS\system32\fun_mp4_enc.dll 2008-06-08 22:50:09 77824 --a------ C:\WINDOWS\system32\fun_mp4_dec.dll 2008-06-08 22:50:07 49152 --a------ C:\WINDOWS\system32\Pal.dll 2008-06-08 22:50:07 167936 --a------ C:\WINDOWS\system32\Mpeg4Tools.dll 2008-06-08 22:50:07 2729472 --a------ C:\WINDOWS\system32\fun_avcodec.dll 2008-06-08 22:50:06 827392 --a------ C:\WINDOWS\system32\Mpeg4System.dll 2008-06-08 22:50:06 122880 --a------ C:\WINDOWS\system32\Mpeg4DSF.dll 2008-06-08 22:50:06 358 --a------ C:\WINDOWS\system32\InstallMe.bat 2008-06-08 22:50:04 57344 --a------ C:\WINDOWS\system32\EvrcDecDll.dll 2008-06-08 22:50:04 57344 --a------ C:\WINDOWS\system32\AMRDSF.dll 2008-06-08 22:50:04 241664 --a------ C:\WINDOWS\system32\AMR.dll 2008-06-08 22:49:57 2334720 --a------ C:\WINDOWS\system32\XTP9601LibU.dll 2008-06-08 22:49:56 2359296 --a------ C:\WINDOWS\system32\XTP9601LibL.dll 2008-06-08 22:49:54 2338816 --a------ C:\WINDOWS\system32\XTP9601LibA.dll 2008-06-08 22:49:53 2338816 --a------ C:\WINDOWS\system32\XTP9600LibL.dll 2008-06-08 22:49:51 557056 --a------ C:\WINDOWS\system32\MSLUR71D.DLL 2008-06-08 22:49:51 352256 --a------ C:\WINDOWS\system32\MSLUR71.DLL 2008-06-08 22:49:51 774144 --a------ C:\WINDOWS\system32\MSLUP71D.DLL 2008-06-08 22:49:51 507904 --a------ C:\WINDOWS\system32\MSLUP71.DLL 2008-06-06 17:25:15 0 d-------- C:\WINDOWS\AtOnce 2008-06-06 16:39:49 1415680 --a------ C:\WINDOWS\system32\wmv9vcm.dll 2008-06-01 21:21:22 0 --a------ C:\Documents and Settings\Sylwester Koźmic\Application Data\wklnhst.dat 2008-05-26 23:37:29 14806 --a------ C:\WINDOWS\War3Unin.dat 2008-05-26 23:37:26 2829 --a------ C:\WINDOWS\War3Unin.pif 2008-05-26 23:37:26 126976 --a------ C:\WINDOWS\War3Unin.exe – Find3M Report --------------------------------------------------------------- 2008-06-19 00:22:45 0 d-------- C:\Documents and Settings\Sylwester Koźmic\Application Data\XnView 2008-06-17 20:40:00 0 d-------- C:\Documents and Settings\Sylwester Koźmic\Application Data\Mozilla 2008-06-15 00:10:16 0 d-------- C:\Documents and Settings\Sylwester Koźmic\Application Data\Macromedia 2008-06-08 23:03:04 0 d–h----- C:\Program Files\InstallShield Installation Information 2008-06-01 16:06:51 0 d-------- C:\Documents and Settings\Sylwester Koźmic\Application Data\Skype 2008-05-28 21:23:00 0 d-------- C:\Documents and Settings\Sylwester Koźmic\Application Data\Adobe 2008-05-15 18:03:29 50688 --a------ C:\WINDOWS\system32\wbhelp2.dll – Registry Dump --------------------------------------------------------------- *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “ATIPTA”=“C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe” [2005-11-10 21:05] “SynTPEnh”=“C:\Program Files\Synaptics\SynTP\SynTPEnh.exe” [2005-06-19 21:50] “Cpqset”=“C:\Program Files\HPQ\Default Settings\cpqset.exe” [2005-08-01 14:26] “RecGuard”=“C:\Windows\SMINST\RecGuard.exe” [2005-10-11 10:23] “hpWirelessAssistant”=“C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe” [2005-12-13 16:45] “avast!”=“C:\Instalki\avast\ashDisp.exe” [2008-05-16 00:19] “NeroFilterCheck”=“C:\WINDOWS\system32\NeroCheck.exe” [2001-07-09 11:50] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “ctfmon.exe”=“C:\WINDOWS\system32\ctfmon.exe” [2004-08-04 09:00] “Gadu-Gadu”=“C:\Instalki\Gadu-Gadu\gg.exe” [2006-11-14 10:12] C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ BTTray.lnk - C:\Instalki\bluetooth\BTTray.exe [2005-07-22 17:50:16] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] “disableregistrytools”=0 (0x0) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice] @=“Service” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma.lnk] path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma.lnk backup=C:\WINDOWS\pss\Adobe Gamma.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk] path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Photosmart Premier Fast Start.lnk] path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Photosmart Premier Fast Start.lnk backup=C:\WINDOWS\pss\HP Photosmart Premier Fast Start.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp] “C:\Program Files\Common Files\Symantec Shared\ccApp.exe” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IS CfgWiz] C:\Program Files\Norton Internet Security\cfgwiz.exe /GUID {F073BDC9-0D67-4ff0-879E-27241C843828} /MODE CfgWiz /CMDLINE “REBOOT” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LANChatPro] C:\Instalki\LANCHAT\LANChat.exe /q [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QPService] “C:\Program Files\HP\QuickPlay\QPService.exe” [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Uniblue RegistryBooster 2] C:\Program Files\RegistryBooster 2\RegistryBooster.exe /S [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] C:\Instalki\Winamp\winampa.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender] “C:\Program Files\Windows Defender\MSASCui.exe” -hide [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{6098f834-0028-11dd-b2c6-0014a5a4402d}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe – End of Deckard’s System Scanner: finished at 2008-06-21 09:01:21 ------------

Deckard’s System Scanner v20071014.68 Extra logfile - please post this as an attachment with your post. -------------------------------------------------------------------------------- – System Information ---------------------------------------------------------- Microsoft Windows XP Home Edition (build 2600) SP 2.0 Architecture: X86; Language: English CPU 0: Mobile AMD Sempron Processor 3300+ Percentage of Memory in Use: 41% Physical Memory (total/avail): 894.17 MiB / 524.37 MiB Pagefile Memory (total/avail): 2166.71 MiB / 1841.18 MiB Virtual Memory (total/avail): 2047.88 MiB / 1918.38 MiB C: is Fixed (NTFS) - 49.98 GiB total, 10.63 GiB free. D: is Fixed (FAT32) - 5.9 GiB total, 1.02 GiB free. E: is CDROM (No Media) F: is CDROM (CDFS) \.\PHYSICALDRIVE0 - FUJITSU MHV2060AT PL - 55.89 GiB - 2 partitions \PARTITION0 (bootable) - Installable File System - 49.98 GiB - C: \PARTITION1 - Unknown - 5.91 GiB - D: – Security Center ------------------------------------------------------------- AUOptions is disabled. Windows Internal Firewall is disabled. FirstRunDisabled is set. FW: Norton Internet Security 2006 v2006 (Symantec Corporation) AV: Norton Internet Security 2006 v2006 (Symantec Corporation) AV: avast! antivirus 4.8.1201 [VPS 080620-0] v4.8.1201 (ALWIL Software) [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] “%windir%\system32\sessmgr.exe”="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] “C:\Instalki\Flashget\FlashGet.exe”=“C:\Instalki\Flashget\FlashGet.exe:*:Enabled:Flashget” “C:\Instalki\Skype\Phone\Skype.exe”=“C:\Instalki\Skype\Phone\Skype.exe:*:Enabled:Skype” – Environment Variables ------------------------------------------------------- ALLUSERSPROFILE=C:\Documents and Settings\All Users APPDATA=C:\Documents and Settings\Sylwester Ko«mic\Application Data CLIENTNAME=Console CommonProgramFiles=C:\Program Files\Common Files COMPUTERNAME=SYLWESTER ComSpec=C:\WINDOWS\system32\cmd.exe FP_NO_HOST_CHECK=NO HOMEDRIVE=C: HOMEPATH=\Documents and Settings\Sylwester Ko«mic LOGONSERVER=\SYLWESTER NUMBER_OF_PROCESSORS=1 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\Common Files\Adobe\AGL PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH PCTYPE=PRESARIO PLATFORM=MCD PROCESSOR_ARCHITECTURE=x86 PROCESSOR_IDENTIFIER=x86 Family 15 Model 44 Stepping 2, AuthenticAMD PROCESSOR_LEVEL=15 PROCESSOR_REVISION=2c02 ProgramFiles=C:\Program Files PROMPT=$P$G SESSIONNAME=Console SonicCentral=C:\Program Files\Common Files\Sonic Shared\Sonic Central\ SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\DOCUME~1\SYLWES~1\LOCALS~1\Temp TMP=C:\DOCUME~1\SYLWES~1\LOCALS~1\Temp USERDOMAIN=SYLWESTER USERNAME=Sylwester Ko«mic USERPROFILE=C:\Documents and Settings\Sylwester Ko«mic windir=C:\WINDOWS – User Profiles --------------------------------------------------------------- Sylwester Koźmic (admin) – Add/Remove Programs --------------------------------------------------------- --> C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu --> C:\WINDOWS\system32\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205} --> C:\WINDOWS\system32\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382} --> C:\WINDOWS\system32\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629} --> msiexec /I {236BB7C4-4419-42FD-0415-1E257A25E34D} --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf “SubEdit-Player + CodecPack” --> C:\INSTALKI\Subedit\Odinstaluj.exe Active@ ISO Burner v 1.1 --> “C:\Instalki\Active ISO Burner\UNWISE.EXE” “C:\Instalki\Active ISO Burner\INSTALL.LOG” Ad-Aware 2007 --> MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF} Adobe Bridge 1.0 --> MsiExec.exe /I{B74D4E10-6884-0000-0000-000000000101} Adobe Common File Installer --> MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5101} Adobe Creative Suite 2 --> C:\PROGRA~1\INSTAL~1{0134A~1\setup.exe /relaunched/rootloc=f:\adobe creative suite 2.0/lang=0415 Adobe Flash Player ActiveX --> C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player Plugin --> C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe Adobe Help Center 1.0 --> MsiExec.exe /I{E9787678-1033-0000-8E67-000000000001} Adobe Lightroom 2 Beta --> MsiExec.exe /I{C2C2101F-0538-4548-B5AF-39E0D3B3CB50} Adobe Reader 6.0.2 CE --> MsiExec.exe /I{AC76BA86-7AD7-1038-7B44-CEA000000001} Adobe Shockwave Player --> C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log Adobe Stock Photos 1.0 --> MsiExec.exe /I{786C5747-1437-443D-B06E-79A00FE45110} Alcohol Toolbar --> “C:\WINDOWS\Alcohol_Toolbar_Uninstaller_4796.exe” _?=C:\Program Files\Alcohol Toolbar Angielski At Once! --> c:\Instalki\Atonce\unins000.exe Archiwizator WinRAR --> C:\Program Files\WinRAR\uninstall.exe Athlon 64 Processor Driver --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe” -l0x9 ATI Control Panel --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe” ATI Display Driver --> rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean Audacity 1.2.6 --> “C:\Instalki\Audacity\unins000.exe” Audiograbber 1.83 SE --> C:\WINDOWS\uninstall\Audiograbber\setup.exe avast! Antivirus --> C:\Instalki\avast\aswRunDll.exe “C:\Instalki\avast\Setup\setiface.dll”,RunSetup Budzik 1.04 --> c:\Instalki\Budzik\unins000.exe Cammaestro 1.0PT build 146 --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{D9285F11-5CBE-4B2F-80F4-88357E242290} /l1033 Colin McRae Rally 2 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{19B72AA9-985A-11D4-9C8A-00D0B75D1498}\setup.exe” Conexant AC-Link Audio --> C:\Program Files\CONEXANT\CNXT_AUDIO\HXFSETUP.EXE -U -ICPL309BA.INF Customer Experience Enhancement --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{23012310-3E05-46A5-88A9-C6CBCABCAC79} /l1033 Download Accelerator Plus (DAP) --> C:\Instalki\DAP\DAPREMOVE.EXE Drive Rescue 1.9 --> “D:\Drive Rescue\unins000.exe” Dziobas Rar Player 0.007PL --> “C:\Instalki\Dziobas Rar Player\unins000.exe” Easy Internet Sign-up --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{8105684D-8CA6-440D-8F58-7E5FD67A499D} /l1033 EVEREST Home Edition v2.20 --> “C:\Instalki\EVEREST Home Edition\unins000.exe” FastStone Capture 5.3 --> C:\Instalki\FastStone Capture\uninst.exe ffdshow [rev 985] [2007-03-03] --> “C:\INSTALKI\Subedit\codec\ffdshow\unins000.exe” Gadu-Gadu 7.6 --> C:\Instalki\Gadu-Gadu\Setup.exe HijackThis 1.99.1 --> c:\Skróty\HijackThis.exe /uninstall Hotfix for Windows Media Format 11 SDK (KB929399) --> “C:\WINDOWS$NtUninstallKB929399$\spuninst\spuninst.exe” HP BatteryCheck 1.00 A7 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{69DAC00A-7665-4E9B-B441-093D40736429}\setup.exe” -l0x9 -removeonly uninst HP DVD Play 2.0 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{45D707E9-F3C4-11D9-A373-0050BAE317E1}\setup.exe” -uninstall HP Help and Support --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{A93C4E94-1005-489D-BEAA-B873C1AA6CFC}\setup.exe” -l0x9 -removeonly HP Imaging Device Functions 6.0 --> C:\Program Files\HP\Digital Imaging\DigitalImagingMonitor\hpzscr01.exe -datfile hpqbud01.dat HP Photosmart Premier Software 6.0 --> C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat HP Software Update --> MsiExec.exe /X{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E} HP User Guides–System Recovery --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{BC96BBA7-C634-460E-AD18-A0A994213F80}\Setup.exe” -l0x9 -removeonly HP User Guides 0025 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{52AE81CB-B786-490E-93CF-240A9891B392}\setup.exe” -l0x9 -removeonly HP Wireless Assistant 2.00 C1 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{4302B2DD-D958-40E3-BAF3-B07FFE1978CE}\setup.exe” -l0x9 hpquninst Image Signature 1.5.1 --> “C:\Instalki\Image Signature\unins000.exe” J2SE Runtime Environment 5.0 Update 6 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060} Java SE Runtime Environment 6 Update 1 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010} Microsoft Compression Client Pack 1.0 for Windows XP --> “C:\WINDOWS$NtUninstallMSCompPackV1$\spuninst\spuninst.exe” Microsoft Office Standard Edition 2003 --> MsiExec.exe /I{91120415-6000-11D3-8CFE-0150048383C9} Microsoft User-Mode Driver Framework Feature Pack 1.0 --> “C:\WINDOWS$NtUninstallWudf01000$\spuninst\spuninst.exe” Microsoft Visual C++ 2005 Redistributable --> MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Works --> MsiExec.exe /I{416D80BA-6F6D-4672-B7CF-F54DA2F80B44} Mozilla Firefox (2.0.0.14) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe Mozilla Firefox (3.0) --> C:\Instalki\Mozill Firefox\uninstall\helper.exe Nero 6 Ultra Edition --> C:\Instalki\nero\nero\uninstall\UNNERO.exe /UNINSTALL PhotoME --> “C:\Instalki\Aparat\PhotoME\unins000.exe” Quick Launch Buttons 5.20 G1 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{CEB326EC-8F40-47B2-BA22-BB092565D66F}\setup.exe” -l0x9 -uninst RapidShare Manager --> rundll32.exe dfshim.dll,ShArpMaintain RapidShareManager.application, Culture=neutral, PublicKeyToken=c14d24c3c9280019, processorArchitecture=msil Real Alternative 1.52 --> “C:\Instalki\Real Alternative\unins000.exe” Security Update for CAPICOM (KB931906) --> MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Security Update for CAPICOM (KB931906) --> MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Security Update for Step By Step Interactive Training (KB923723) --> “C:\WINDOWS$NtUninstallKB923723$\spuninst\spuninst.exe” Skype™ 3.2 --> MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82} Soft Data Fax Modem with SmartCP --> C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_1002&DEV_4378\HXFSETUP.EXE -U -Icpl309bk.inf Soldier of Fortune II - Double Helix MP TEST --> C:\Gry\SOLDIE~1\Uninstall\Unwise.exe /u C:\Gry\SOLDIE~1\Uninstall\Install.log Sonic Audio Module --> MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382} Sonic Copy Module --> MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629} Sonic Data Module --> MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205} Sonic Express Labeler --> MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA} Sonic MyDVD Plus --> MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29} Sonic Update Manager --> MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E} Stronghold Crusader --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup “C:\Program Files\InstallShield Installation Information{8C3727F2-8E37-49E4-820C-03B1677F53B6}\setup.exe” Suite Specific --> MsiExec.exe /I{C49DAA9C-5BA8-459A-8244-E57B69DF0F04} Switch --> C:\Program Files\NCH Swift Sound\Switch\uninst.exe Synaptics Pointing Device Driver --> rundll32.exe “C:\Program Files\Synaptics\SynTP\SynISDLL.dll”,standAloneUninstall Texas Instruments PCIxx21/x515/xx12 drivers. --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{7B6CF9EB-CB2B-4A1A-81A9-BE1A9044690A} /l1033 Warcraft III --> C:\WINDOWS\War3Unin.exe C:\WINDOWS\War3Unin.dat WavePad Uninstall --> C:\Program Files\NCH Swift Sound\WavePad\uninst.exe WIDCOMM Bluetooth Software --> MsiExec.exe /X{3F4EC965-28EF-45C3-B063-04B25D4E9679} Winamp --> “C:\Instalki\Winamp\UninstWA.exe” Windows Commander (Remove or Repair) --> C:\Instalki\wincmd\wcuninst.exe Windows Media Format 11 runtime --> “C:\WINDOWS$NtUninstallWMFDist11$\spuninst\spuninst.exe” XviD 1.1 final uninstall --> “C:\Skróty\kodeki1\XviD\unins000.exe” – Application Event Log ------------------------------------------------------- Event Record #/Type2143 / Error Event Submitted/Written: 06/21/2008 09:00:57 AM Event ID/Source: 8 / crypt32 Event Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: The specified server cannot perform the requested operation. Event Record #/Type2142 / Error Event Submitted/Written: 06/21/2008 09:00:53 AM Event ID/Source: 8 / crypt32 Event Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This operation returned because the timeout period expired. Event Record #/Type2141 / Error Event Submitted/Written: 06/21/2008 09:00:20 AM Event ID/Source: 8 / crypt32 Event Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: The specified server cannot perform the requested operation. Event Record #/Type2140 / Error Event Submitted/Written: 06/21/2008 09:00:20 AM Event ID/Source: 8 / crypt32 Event Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: The specified server cannot perform the requested operation. Event Record #/Type2138 / Error Event Submitted/Written: 06/21/2008 09:00:08 AM Event ID/Source: 8 / crypt32 Event Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: The specified server cannot perform the requested operation. – Security Event Log ---------------------------------------------------------- No Errors/Warnings found. – System Event Log ------------------------------------------------------------ Event Record #/Type38416 / Warning Event Submitted/Written: 06/21/2008 03:08:10 AM Event ID/Source: 8021 / BROWSER Event Description: The browser was unable to retrieve a list of servers from the browser master \STASO on the network \Device\NetBT_Tcpip_{A7EC1CD5-2E91-4AE2-AD79-B0E9BD7EAB19}. The data is the error code. Event Record #/Type38415 / Warning Event Submitted/Written: 06/21/2008 03:06:57 AM Event ID/Source: 8021 / BROWSER Event Description: The browser was unable to retrieve a list of servers from the browser master \STASO on the network \Device\NetBT_Tcpip_{A7EC1CD5-2E91-4AE2-AD79-B0E9BD7EAB19}. The data is the error code. Event Record #/Type38376 / Warning Event Submitted/Written: 06/20/2008 11:55:43 PM Event ID/Source: 2511 / Server Event Description: The server service was unable to recreate the share Zdjecia Bartek because the directory C:\Zdjecia Bartek no longer exists. Please run “net share Zdjecia Bartek /delete” to delete the share, or recreate the directory C:\Zdjecia Bartek. Event Record #/Type38341 / Warning Event Submitted/Written: 06/20/2008 11:36:11 PM Event ID/Source: 2511 / Server Event Description: The server service was unable to recreate the share Zdjecia Bartek because the directory C:\Zdjecia Bartek no longer exists. Please run “net share Zdjecia Bartek /delete” to delete the share, or recreate the directory C:\Zdjecia Bartek. Event Record #/Type38313 / Warning Event Submitted/Written: 06/20/2008 11:19:58 PM Event ID/Source: 2511 / Server Event Description: The server service was unable to recreate the share Zdjecia Bartek because the directory C:\Zdjecia Bartek no longer exists. Please run “net share Zdjecia Bartek /delete” to delete the share, or recreate the directory C:\Zdjecia Bartek. – End of Deckard’s System Scanner: finished at 2008-06-21 09:01:21 ------------

huber2t · 21 Czerwiec 2008 08:12

fix w hijackthis

otwórz notatnik i wklej

Z menu Notatnika -> Plik -> Zapisz jako -> Zmień rozszerzenie z .txt na wszystkie pliki -> zapisz pod nazwą Fix.reg

Uruchom ten plik, uruchom ponownie komputer

Przeczyść komputer Ccleanerem

Wykonaj optymalizację autostartu

Wyłącz i włącz przywracanie systemu na wszystkich dyskach. Instrukcja

Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum

lub

Dr.WEB CureIt!

zwirek · 21 Czerwiec 2008 11:10

21 czerwiec 2008 11:59:15 System operacyjny: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scanner wersja: 5.0.98.0 Ostatnia aktualizacja Kaspersky Anti-Virus21/06/2008 Liczba wpisów w bazie danych Kaspersky Anti-Virus879863 Ustawienia skanowania Skanowanie przy użyciu następujących baz danych rozszerzone Skanuj archiwa tak Skanuj pocztowe bazy danych tak Obszar skanowania Mój komputer C:\ D:\ E:\ F:\ Statystyki skanowania Liczba skanowanych obiektów 65397 Liczba wykrytych wirusów 2 Liczba zainfekowanych obiektów 4 Liczba podejrzanych obiektów 0 Czas trwania skanowania 01:21:45 Nazwa zainfekowanego obiektu Nazwa wirusa Ostatnie działanie C:\Deckard\System Scanner\backup\DOCUME~1\SYLWES~1\LOCALS~1\Temp\SIntfNT.dll Zainfekowanych: Trojan-Proxy.Win32.Ranky.kz pominięty C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked pominięty C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked pominięty C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked pominięty C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked pominięty C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked pominięty C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked pominięty C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked pominięty C:\Documents and Settings\LocalService\ntuser.dat Object is locked pominięty C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked pominięty C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked pominięty C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked pominięty C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked pominięty C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked pominięty C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked pominięty C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked pominięty C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Application Data\Mozilla\Firefox\Profiles\j22fwms3.default\cert8.db Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Application Data\Mozilla\Firefox\Profiles\j22fwms3.default\content-prefs.sqlite Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Application Data\Mozilla\Firefox\Profiles\j22fwms3.default\cookies.sqlite Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Application Data\Mozilla\Firefox\Profiles\j22fwms3.default\downloads.sqlite Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Application Data\Mozilla\Firefox\Profiles\j22fwms3.default\formhistory.sqlite Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Application Data\Mozilla\Firefox\Profiles\j22fwms3.default\key3.db Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Application Data\Mozilla\Firefox\Profiles\j22fwms3.default\parent.lock Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Application Data\Mozilla\Firefox\Profiles\j22fwms3.default\permissions.sqlite Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Application Data\Mozilla\Firefox\Profiles\j22fwms3.default\places.sqlite Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Application Data\Mozilla\Firefox\Profiles\j22fwms3.default\places.sqlite-journal Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Application Data\Mozilla\Firefox\Profiles\j22fwms3.default\places.sqlite-stmtjrnl Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Application Data\Mozilla\Firefox\Profiles\j22fwms3.default\search.sqlite Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Cookies\index.dat Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Local Settings\Application Data\Mozilla\Firefox\Profiles\j22fwms3.default\Cache_CACHE_001_ Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Local Settings\Application Data\Mozilla\Firefox\Profiles\j22fwms3.default\Cache_CACHE_002_ Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Local Settings\Application Data\Mozilla\Firefox\Profiles\j22fwms3.default\Cache_CACHE_003_ Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Local Settings\Application Data\Mozilla\Firefox\Profiles\j22fwms3.default\Cache_CACHE_MAP_ Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Local Settings\Application Data\Mozilla\Firefox\Profiles\j22fwms3.default\urlclassifier3.sqlite Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Local Settings\Application Data\Mozilla\Firefox\Profiles\j22fwms3.default\XUL.mfl Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Local Settings\History\History.IE5\index.dat Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Local Settings\History\History.IE5\MSHist012008062120080622\index.dat Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\Local Settings\Temp\hsperfdata_Sylwester Koźmic\1700 Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\ntuser.dat Object is locked pominięty C:\Documents and Settings\Sylwester Koźmic\ntuser.dat.LOG Object is locked pominięty C:\Instalki\Alcohol 52\StarWind\logs\starwind.2008-06-21.10-06-08.log Object is locked pominięty C:\Instalki\avast\DATA\aswResp.dat Object is locked pominięty C:\Instalki\avast\DATA\Avast4.db Object is locked pominięty C:\Instalki\avast\DATA\integ\avast.int Object is locked pominięty C:\Instalki\avast\DATA\log\AshWebSv.ws Object is locked pominięty C:\Instalki\avast\DATA\log\aswMaiSv.log Object is locked pominięty C:\Instalki\avast\DATA\log\nshield.log Object is locked pominięty C:\Instalki\avast\DATA\log\selfdef.log Object is locked pominięty C:\Instalki\avast\DATA\report\Osłona rezydentna.txt Object is locked pominięty C:\Program Files\Online Services\BTYahoo\HPPre05.msi/Data1.cab/btwebcontrol.dll Zainfekowanych: not-a-virus:Dialer.Win32.BT.g pominięty C:\Program Files\Online Services\BTYahoo\HPPre05.msi/Data1.cab Zainfekowanych: not-a-virus:Dialer.Win32.BT.g pominięty C:\Program Files\Online Services\BTYahoo\HPPre05.msi Embedded: zainfekowany - 2 pominięty C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked pominięty C:\System Volume Information_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP399\change.log Object is locked pominięty C:\WINDOWS\Debug\PASSWD.LOG Object is locked pominięty C:\WINDOWS\SchedLgU.Txt Object is locked pominięty C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked pominięty C:\WINDOWS\Sti_Trace.log Object is locked pominięty C:\WINDOWS\system32\CatRoot2\edb.log Object is locked pominięty C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked pominięty C:\WINDOWS\system32\config\Antivirus.Evt Object is locked pominięty C:\WINDOWS\system32\config\AppEvent.Evt Object is locked pominięty C:\WINDOWS\system32\config\default Object is locked pominięty C:\WINDOWS\system32\config\default.LOG Object is locked pominięty C:\WINDOWS\system32\config\SAM Object is locked pominięty C:\WINDOWS\system32\config\SAM.LOG Object is locked pominięty C:\WINDOWS\system32\config\SecEvent.Evt Object is locked pominięty C:\WINDOWS\system32\config\SECURITY Object is locked pominięty C:\WINDOWS\system32\config\SECURITY.LOG Object is locked pominięty C:\WINDOWS\system32\config\software Object is locked pominięty C:\WINDOWS\system32\config\software.LOG Object is locked pominięty C:\WINDOWS\system32\config\SysEvent.Evt Object is locked pominięty C:\WINDOWS\system32\config\system Object is locked pominięty C:\WINDOWS\system32\config\system.LOG Object is locked pominięty C:\WINDOWS\system32\drivers\sptd.sys Object is locked pominięty C:\WINDOWS\system32\h323log.txt Object is locked pominięty C:\WINDOWS\system32\LogFiles\HTTPERR\httperr1.log Object is locked pominięty C:\WINDOWS\system32\LogFiles\WUDF\WUDFTrace.etl Object is locked pominięty C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked pominięty C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked pominięty C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked pominięty C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked pominięty C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked pominięty C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked pominięty C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked pominięty C:\WINDOWS\Temp\Perflib_Perfdata_ac.dat Object is locked pominięty C:\WINDOWS\Temp_avast4_\Webshlock.txt Object is locked pominięty C:\WINDOWS\Temporary Internet Files\Content.IE5\index.dat Object is locked pominięty C:\WINDOWS\wiadebug.log Object is locked pominięty C:\WINDOWS\wiaservc.log Object is locked pominięty C:\WINDOWS\WindowsUpdate.log Object is locked pominięty Proces skanowania został zakończony.

huber2t · 21 Czerwiec 2008 11:17

Usuń to:

C:\Deckard

C:\Program Files\Online Services\BTYahoo\HPPre05.msi

zwirek · 21 Czerwiec 2008 16:57

Wszystko wykonałem wedle poleceń. Za porady jestem dozgonnie wdzięczny, jednakże problem z pierwszego postu nadal istnieje a mianowicie zamiast okna “Mój komputer” otwiera mi się winamp…nie jest to uciążliwe aczkolwiek lubię kiedy coś działa jak winno być :)pzdr serdecznie