Problem z wirusem/ami

system · 14 Czerwiec 2009 19:40

oto mój log z HiJackThis. Na komputerze dzieją się różne cuda począwszy od nieuruchamiania się przeglądarek po zawieszanie sie systemu przy kazdej okazji. A system był stawiany jakies 3 tygodnie temu.

Oto log:

http://wklej.org/id/106205/

daje od razu drugi, bo przeniosl sie na drugi komputer poprzez pamiec…

http://wklej.org/id/106212/

jasio96 · 15 Czerwiec 2009 10:44

1 log

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:7171 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local; O1 - Hosts: 24.173.86.145 http://www.safe.google.com O1 - Hosts: 24.173.86.145 safe.google.com 24.173.86.145 http://www.safe.google.com O1 - Hosts: 24.173.86.145 safe.google.com 24.173.86.145 http://www.safe.google.com O1 - Hosts: 24.173.86.145 safe.google.com 24.173.86.145 http://www.safe.google.com O1 - Hosts: 24.173.86.145 safe.google.com 24.173.86.145 http://www.safe.google.com O1 - Hosts: 24.173.86.145 safe.google.com 24.173.86.145 http://www.safe.google.com O1 - Hosts: 24.173.86.145 safe.google.com 24.173.86.145 http://www.safe.google.com O1 - Hosts: 24.173.86.145 safe.google.com 24.173.86.145 http://www.safe.google.com O1 - Hosts: 24.173.86.145 safe.google.com 24.173.86.145 http://www.safe.google.com O1 - Hosts: 24.173.86.145 safe.google.com 24.173.86.145 http://www.safe.google.com O1 - Hosts: 24.173.86.145 safe.google.com 24.173.86.145 http://www.safe.google.com O1 - Hosts: 24.173.86.145 safe.google.com 24.173.86.145 http://www.safe.google.com O1 - Hosts: 24.173.86.145 safe.google.com 24.173.86.145 http://www.safe.google.com O1 - Hosts: 24.173.86.145 safe.google.com 24.173.86.145 http://www.safe.google.com O1 - Hosts: 24.173.86.145 safe.google.com O2 - BHO: (no name) - {2F3C3589-7DF4-415F-A576-75D2D1E3037B} - c:\windows\system32\dhbcllu.dll (file missing) O4 - Startup: fmnupd32.exe O4 - Startup: zqosys32.exe O20 - Winlogon Notify: kmdkdwmr - dhbcllu.dll (file missing)

Sfiksuj w HijackThis

Daj log z ComboFix

2 log

R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\pdfforge Toolbar\SearchSettings.dll O1 - Hosts: 24.173.86.145 www.safe.google.com O1 - Hosts: 24.173.86.145 safe.google.com 24.173.86.145 www.safe.google.com O1 - Hosts: 24.173.86.145 safe.google.com O2 - BHO: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\WidgiToolbarIE.dll O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\pdfforge Toolbar\SearchSettings.dll O3 - Toolbar: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\WidgiToolbarIE.dll O4 - HKLM…\Run: [searchSettings] C:\Program Files\pdfforge Toolbar\SearchSettings.exe O4 - Startup: fmnupd32.exe O4 - Startup: zqosys32.exe O9 - Extra button: Tobet - {00000000-0000-0000-0000-000000000000} - C:\MicroGaming\Poker\TobetMPP\MPPoker.exe (HKCU)

Odinstaluj pdfforge Toolbar

Sfiksuj w HijackThis

Daj log z ComboFix