Prośba o sprawdzenie loga (co kilka minut komp robi out)

[PATS (Kviatek4)]

Witam

prośba o sprawdzenie loga i podpowiedzenie co i w jaki sposób wyrzucić, bo niestety komp zaczął wariować Kerio zaczął blokować prawie wszystko (tj zawieszać system) a teraz co chwila włącza się komunikat że za mało pamięci iżeby zamknąć niepotrzebne procesy…

Prośba o sprawdzenie

Z góry

THX

Logfile of HijackThis v1.99.1 Scan saved at 23:26:29, on 2005-11-16 Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: E:\WINDOWS\System32\smss.exe E:\WINDOWS\system32\winlogon.exe E:\WINDOWS\system32\services.exe E:\WINDOWS\system32\lsass.exe E:\WINDOWS\System32\Ati2evxx.exe E:\WINDOWS\system32\svchost.exe E:\WINDOWS\System32\svchost.exe E:\WINDOWS\system32\spoolsv.exe E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe E:\Program Files\Alwil Software\Avast4\ashServ.exe E:\WINDOWS\system32\Ati2evxx.exe E:\WINDOWS\explorer.exe E:\Program Files\Ahead\InCD\InCDsrv.exe E:\Program Files\Analog Devices\SoundMAX\SMAgent.exe E:\WINDOWS\System32\svchost.exe E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe E:\Program Files\Ahead\InCD\InCD.exe E:\Program Files\CyberLink\PowerDVD\PDVDServ.exe E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe E:\WINDOWS\System32\rtf32.exe E:\Program Files\Messenger\msmsgs.exe E:\Program Files\Windows Uptime\Windows Uptime.exe E:\Program Files\VIA\RAID\raid_tool.exe E:\Program Files\Alwil Software\Avast4\ashWebSv.exe E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe E:\Program Files\Mobile Phone Manager\GPRSv2\Siemens GPRS.exe E:\Program Files\Internet Explorer\iexplore.exe E:\Program Files\Internet Explorer\IEXPLORE.EXE E:\WINDOWS\System32\taskmgr.exe E:\Program Files\hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gogle.pl/ R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza F2 - REG:system.ini: Shell=explorer.exe “E:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00003.exe” O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: XBTP00558 - {96D39527-7C5C-4507-953B-4A665D5883F7} - E:\WINDOWS\DOWNLO~1\toolbar.dll O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - E:\PROGRA~1\FlashGet\jccatch.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - E:\PROGRA~1\FlashGet\fgiebar.dll (file missing) O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - E:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: NetSprint Toolbar - {34F459B8-1D37-4FF2-9EFA-192D8E3ABA6F} - E:\WINDOWS\Downloaded Program Files\toolbar.dll O4 - HKLM…\Run: [ATIPTA] E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM…\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM…\Run: [NeroFilterCheck] E:\WINDOWS\system32\NeroCheck.exe O4 - HKLM…\Run: [inCD] E:\Program Files\Ahead\InCD\InCD.exe O4 - HKLM…\Run: [RemoteControl] “E:\Program Files\CyberLink\PowerDVD\PDVDServ.exe” O4 - HKLM…\Run: [Anti-Blaxx Manager] E:\Program Files\Anti-Blaxx\Anti-Blaxx.exe O4 - HKLM…\Run: [avast!] E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM…\Run: [rtf32.exe] rtf32.exe O4 - HKCU…\Run: [MSMSGS] “E:\Program Files\Messenger\msmsgs.exe” /background O4 - HKCU…\Run: [WindowsUptime] “E:\Program Files\Windows Uptime\Windows Uptime.exe” /i O4 - HKCU…\Run: [shell] “E:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00003.exe” O4 - Global Startup: raid_tool.exe.lnk = E:\Program Files\VIA\RAID\raid_tool.exe O8 - Extra context menu item: Blokuj wszystkie obrazy z tego serwera - E:\Program Files\Avant Browser\AddAllToADBlackList.htm O8 - Extra context menu item: Dodaj do listy blokowanych reklam - E:\Program Files\Avant Browser\AddToADBlackList.htm O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://E:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Otwórz wszystkie adresy z tej strony… - E:\Program Files\Avant Browser\OpenAllLinks.htm O8 - Extra context menu item: Podświetl - E:\Program Files\Avant Browser\Highlight.htm O8 - Extra context menu item: Szukaj - E:\Program Files\Avant Browser\Search.htm O8 - Extra context menu item: Ściągnij przy pomocy FlashGet’a - E:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: Ściągnij wszystko przy pomocy FlashGet’a - E:\Program Files\FlashGet\jc_all.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\WINDOWS\System32\msjava.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\WINDOWS\System32\msjava.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - E:\WINDOWS\web\related.htm O9 - Extra ‘Tools’ menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - E:\WINDOWS\web\related.htm O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\PROGRA~1\FlashGet\flashget.exe O9 - Extra ‘Tools’ menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\PROGRA~1\FlashGet\flashget.exe O10 - Broken Internet access because of LSP provider ‘mswsck2.dll’ missing O16 - DPF: {1A781DED-C22D-4153-3213-A3211E29DF13} (GameDesire Card Games) - http://67.15.101.3/g_bin/pl/cards_2_0_0_65.cab O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) - http://secure2.comned.com/signuptemplat … -devel.cab O16 - DPF: {92F02779-6D88-4958-8AD3-83C12D86ADC7} - http://netsprint.pl/toolbar/toolbar.cab O16 - DPF: {BFA1F11D-3121-AFE1-4112-894323212DAC} (GameDesire Word Games) - http://67.15.101.3/g_bin/pl/words_2_0_0_38.cab O17 - HKLM\System\CCS\Services\Tcpip…{B3862A51-2A3A-4AF6-B418-D952DCD78526}: NameServer = 212.2.96.62 212.2.96.52 O20 - Winlogon Notify: msctl32.dll - E:\WINDOWS\System32\msctl32.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - Unknown owner - E:\WINDOWS\System32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - E:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - Unknown owner - E:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - E:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: InCD File System Service (InCDsrv) - AHEAD Software - E:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: Kerio Personal Firewall 4 (KPF4) - Unknown owner - E:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe (file missing) O23 - Service: Macromedia Licensing Service - Unknown owner - E:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - E:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

[Gutek]

1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank F2 - REG:system.ini: Shell=explorer.exe “E:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00003.exe” O2 - BHO: XBTP00558 - {96D39527-7C5C-4507-953B-4A665D5883F7} - E:\WINDOWS\DOWNLO~1\toolbar.dll O3 - Toolbar: NetSprint Toolbar - {34F459B8-1D37-4FF2-9EFA-192D8E3ABA6F} - E:\WINDOWS\Downloaded Program Files\toolbar.dll O4 - HKLM…\Run: [rtf32.exe] rtf32.exe O4 - HKCU…\Run: [shell] “E:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00003.exe” 16 - DPF: {92F02779-6D88-4958-8AD3-83C12D86ADC7} - http://netsprint.pl/toolbar/toolbar.cab

1. Wyłączyć Przywracanie systemu w XP TU

2. Zastartować do trybu awaryjnego bez internetu(opis w linku wyżej).

3. Zaznaczyć wskazane wpisy w Hijacku i kliknąć Fix checked. Wpisy zostaną usunięte.

4. Skasować z dysku pliki, które podkreśliłem na czerwono

5. Dokończyć skanerami online - Scanery do wyboru

6. Pokazać nowy log

[PATS (Kviatek4)]

Proszę bardzo oto log

zrobiłem co było wskazane

dodatkowo usunąłem trochę z O 9 i 0 10

Prośba o ponowne sprawdzenie

Mam prośbę również o podpowiedź dotyczącą firewalla

czytałem trochę i ciężko coś wybrać :shock:

co mogę ściągnąć free i nie obciąży zbytnio modemu??

Kerio odpada same problemy!

Logfile of HijackThis v1.99.1 Scan saved at 22:02:09, on 2005-11-17 Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: E:\WINDOWS\System32\smss.exe E:\WINDOWS\system32\winlogon.exe E:\WINDOWS\system32\services.exe E:\WINDOWS\system32\lsass.exe E:\WINDOWS\System32\Ati2evxx.exe E:\WINDOWS\system32\svchost.exe E:\WINDOWS\System32\svchost.exe E:\WINDOWS\system32\spoolsv.exe E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe E:\Program Files\Alwil Software\Avast4\ashServ.exe E:\Program Files\Ahead\InCD\InCDsrv.exe E:\Program Files\Analog Devices\SoundMAX\SMAgent.exe E:\WINDOWS\System32\svchost.exe E:\WINDOWS\system32\Ati2evxx.exe E:\WINDOWS\Explorer.EXE E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe E:\Program Files\CyberLink\PowerDVD\PDVDServ.exe E:\Program Files\Anti-Blaxx\Anti-Blaxx.exe E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe E:\Program Files\Messenger\msmsgs.exe E:\Program Files\Windows Uptime\Windows Uptime.exe E:\Program Files\VIA\RAID\raid_tool.exe E:\Program Files\Alwil Software\Avast4\ashWebSv.exe E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe E:\Program Files\Mobile Phone Manager\GPRSv2\Siemens GPRS.exe E:\Program Files\Internet Explorer\iexplore.exe E:\Program Files\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gogle.pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - E:\PROGRA~1\FlashGet\jccatch.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - E:\PROGRA~1\FlashGet\fgiebar.dll (file missing) O3 - Toolbar: Radio - {8E718888-423F-11D2-876E-00A0C9082467} - E:\WINDOWS\System32\msdxm.ocx O4 - HKLM…\Run: [ATIPTA] E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM…\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM…\Run: [NeroFilterCheck] E:\WINDOWS\system32\NeroCheck.exe O4 - HKLM…\Run: [RemoteControl] “E:\Program Files\CyberLink\PowerDVD\PDVDServ.exe” O4 - HKLM…\Run: [Anti-Blaxx Manager] E:\Program Files\Anti-Blaxx\Anti-Blaxx.exe O4 - HKLM…\Run: [avast!] E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKCU…\Run: [MSMSGS] “E:\Program Files\Messenger\msmsgs.exe” /background O4 - HKCU…\Run: [WindowsUptime] “E:\Program Files\Windows Uptime\Windows Uptime.exe” /i O4 - Global Startup: raid_tool.exe.lnk = E:\Program Files\VIA\RAID\raid_tool.exe O8 - Extra context menu item: Blokuj wszystkie obrazy z tego serwera - E:\Program Files\Avant Browser\AddAllToADBlackList.htm O8 - Extra context menu item: Dodaj do listy blokowanych reklam - E:\Program Files\Avant Browser\AddToADBlackList.htm O8 - Extra context menu item: Eksport do programu Microsoft Excel - res://E:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Otwórz wszystkie adresy z tej strony… - E:\Program Files\Avant Browser\OpenAllLinks.htm O8 - Extra context menu item: Podświetl - E:\Program Files\Avant Browser\Highlight.htm O8 - Extra context menu item: Szukaj - E:\Program Files\Avant Browser\Search.htm O8 - Extra context menu item: Ściągnij przy pomocy FlashGet’a - E:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: Ściągnij wszystko przy pomocy FlashGet’a - E:\Program Files\FlashGet\jc_all.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\WINDOWS\System32\msjava.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\WINDOWS\System32\msjava.dll O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\PROGRA~1\FlashGet\flashget.exe O9 - Extra ‘Tools’ menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\PROGRA~1\FlashGet\flashget.exe O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) - http://secure2.comned.com/signuptemplat … -devel.cab O17 - HKLM\System\CCS\Services\Tcpip…{B3862A51-2A3A-4AF6-B418-D952DCD78526}: NameServer = 212.2.96.62 212.2.96.52 O20 - Winlogon Notify: msctl32.dll - E:\WINDOWS\System32\msctl32.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - Unknown owner - E:\WINDOWS\System32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - E:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - Unknown owner - E:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - E:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: InCD File System Service (InCDsrv) - AHEAD Software - E:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: Macromedia Licensing Service - Unknown owner - E:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - E:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

[Gutek]

dodatkowo usunąłem trochę z O 9 i 0 10 Prośba o ponowne sprawdzenie

:shock: :shock: :shock:

jakie to O10???

Ja nie wiem dlaczego ale pominołem i nawet nie były u ciebie zaznaczone na czerwono wpisy niektóre :shock:

Ok poprawiamy

O20 - Winlogon Notify: msctl32.dll - E:\WINDOWS\System32\msctl32.dll

1. Wyłączyć Przywracanie systemu w XP TU

2. Zastartować do trybu awaryjnego bez internetu(opis w linku wyżej).

3. Zaznaczyć wskazane wpisy w Hijacku i kliknąć Fix checked. Wpisy zostaną usunięte.

4. Skasować z dysku pliki i foldery, które podkreśliłem na czerwono

5. Dokończyć skanerami online - Scanery do wyboru

6. Pokazać nowy log

[PATS (Kviatek4)]

o10 czyli coś takiego

O10 - Broken Internet access because of LSP provider ‘mswsck2.dll’ missing

Oto Log po kolejnym czyszczeniu

Niestety spotkałem się z odmową dostępu jeśli chodzi o usunięcie

msctl32.dll

z dysku “chroniony lub w użyciu”

Logfile of HijackThis v1.99.1 Scan saved at 23:15:55, on 2005-11-17 Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: E:\WINDOWS\System32\smss.exe E:\WINDOWS\system32\winlogon.exe E:\WINDOWS\system32\services.exe E:\WINDOWS\system32\lsass.exe E:\WINDOWS\System32\Ati2evxx.exe E:\WINDOWS\system32\svchost.exe E:\WINDOWS\System32\svchost.exe E:\WINDOWS\system32\spoolsv.exe E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe E:\Program Files\Alwil Software\Avast4\ashServ.exe E:\WINDOWS\system32\Ati2evxx.exe E:\WINDOWS\Explorer.EXE E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe E:\Program Files\CyberLink\PowerDVD\PDVDServ.exe E:\Program Files\Anti-Blaxx\Anti-Blaxx.exe E:\Program Files\Ahead\InCD\InCDsrv.exe E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe E:\Program Files\Messenger\msmsgs.exe E:\Program Files\VIA\RAID\raid_tool.exe E:\Program Files\Analog Devices\SoundMAX\SMAgent.exe E:\WINDOWS\System32\svchost.exe E:\Program Files\Alwil Software\Avast4\ashWebSv.exe E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe E:\Program Files\Mobile Phone Manager\GPRSv2\Siemens GPRS.exe E:\Program Files\Internet Explorer\iexplore.exe E:\WINDOWS\System32\wuauclt.exe E:\Program Files\Alwil Software\Avast4\setup\avast.setup E:\Program Files\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gogle.pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - E:\PROGRA~1\FlashGet\jccatch.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - E:\PROGRA~1\FlashGet\fgiebar.dll (file missing) O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - E:\WINDOWS\System32\msdxm.ocx O4 - HKLM…\Run: [ATIPTA] E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM…\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM…\Run: [NeroFilterCheck] E:\WINDOWS\system32\NeroCheck.exe O4 - HKLM…\Run: [RemoteControl] “E:\Program Files\CyberLink\PowerDVD\PDVDServ.exe” O4 - HKLM…\Run: [Anti-Blaxx Manager] E:\Program Files\Anti-Blaxx\Anti-Blaxx.exe O4 - HKLM…\Run: [avast!] E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKCU…\Run: [MSMSGS] “E:\Program Files\Messenger\msmsgs.exe” /background O4 - Global Startup: raid_tool.exe.lnk = E:\Program Files\VIA\RAID\raid_tool.exe O8 - Extra context menu item: Blokuj wszystkie obrazy z tego serwera - E:\Program Files\Avant Browser\AddAllToADBlackList.htm O8 - Extra context menu item: Dodaj do listy blokowanych reklam - E:\Program Files\Avant Browser\AddToADBlackList.htm O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://E:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Otwórz wszystkie adresy z tej strony… - E:\Program Files\Avant Browser\OpenAllLinks.htm O8 - Extra context menu item: Podświetl - E:\Program Files\Avant Browser\Highlight.htm O8 - Extra context menu item: Szukaj - E:\Program Files\Avant Browser\Search.htm O8 - Extra context menu item: Ściągnij przy pomocy FlashGet’a - E:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: Ściągnij wszystko przy pomocy FlashGet’a - E:\Program Files\FlashGet\jc_all.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\WINDOWS\System32\msjava.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\WINDOWS\System32\msjava.dll O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\PROGRA~1\FlashGet\flashget.exe O9 - Extra ‘Tools’ menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\PROGRA~1\FlashGet\flashget.exe O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) - http://secure2.comned.com/signuptemplat … -devel.cab O17 - HKLM\System\CCS\Services\Tcpip…{B3862A51-2A3A-4AF6-B418-D952DCD78526}: NameServer = 212.2.96.62 212.2.96.52 O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - Unknown owner - E:\WINDOWS\System32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - E:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - Unknown owner - E:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - E:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: InCD File System Service (InCDsrv) - AHEAD Software - E:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: Macromedia Licensing Service - Unknown owner - E:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - E:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

[Gutek]

Wiesz że musisz użyć Pocket KillboxZaznaczasz opcję Delete on Reboot i w polu Full Path of File to Delete wklejasz ścieżkę E:\WINDOWS\System32\msctl32.dll i naciśnij X czerwony. Program poprosi o reset kompa … czyli resetujesz.