Prośba o sprawdzenie mojego loga. Coś mi nie trybi ;]

vegierarsco · 17 Wrzesień 2007 16:51

Logfile of HijackThis v1.99.1 Scan saved at 18:49:54, on 2007-09-17 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16414) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\system32\PnkBstrA.exe C:\Program Files\D-Tools\daemon.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe C:\Program Files\Eset\nod32kui.exe C:\Program Files\Real Alternative\Update_OB\realsched.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\VDOTool\TBPanel.exe C:\Program Files\Konnekt\konnekt.exe C:\Program Files\RMClock\RMClock.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\TXP\Pulpit\speedsim\SpeedSim.exe E:\PROGRAMS\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl O2 - BHO: IE7pro BHO - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IE7pro\IE7pro.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file) O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM…\Run: [nwiz] nwiz.exe /install O4 - HKLM…\Run: [Licence] Licence.exe O4 - HKLM…\Run: [DAEMON Tools-1033] “C:\Program Files\D-Tools\daemon.exe” -lang 1033 O4 - HKLM…\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM…\Run: [GrooveMonitor] “C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe” O4 - HKLM…\Run: [sunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe” O4 - HKLM…\Run: [nod32kui] “C:\Program Files\Eset\nod32kui.exe” /WAITSERVICE O4 - HKLM…\Run: [TkBellExe] “C:\Program Files\Real Alternative\Update_OB\realsched.exe” -osboot O4 - HKLM…\Run: [EasyTuneV] C:\Program Files\Gigabyte\ET5\GUI.exe O4 - HKLM…\Run: [RivaTunerStartupDaemon] “C:\Program Files\RivaTuner v2.02\RivaTuner.exe” /S O4 - HKLM…\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM…\Run: [Gainward] C:\Program Files\VDOTool\TBPanel.exe /A O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKCU…\Run: [Konnekt] “C:\Program Files\Konnekt\konnekt.exe” /autostart O4 - HKCU…\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9 O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: &Stáhnout FlashGetem - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: &Stáhnout všechno FlashGetem - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: IE7pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IE7pro\IE7pro.dll O9 - Extra ‘Tools’ menuitem: IE7pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IE7pro\IE7pro.dll O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll O9 - Extra ‘Tools’ menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} - O17 - HKLM\System\CCS\Services\Tcpip…{48ACF7B5-133E-4851-B042-46C1EA0F0393}: NameServer = 85.255.115.68,85.255.112.64 O17 - HKLM\System\CCS\Services\Tcpip…{FE9AB1E0-AE61-453B-A2F9-2F6FB9293EA4}: NameServer = 85.255.115.68,85.255.112.64 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.115.68 85.255.112.64 O17 - HKLM\System\CS1\Services\Tcpip…{48ACF7B5-133E-4851-B042-46C1EA0F0393}: NameServer = 85.255.115.68,85.255.112.64 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.115.68 85.255.112.64 O17 - HKLM\System\CS2\Services\Tcpip…{48ACF7B5-133E-4851-B042-46C1EA0F0393}: NameServer = 85.255.115.68,85.255.112.64 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.68 85.255.112.64 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~1\Office12\GR99D3~1.DLL O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

LostWorld · 17 Wrzesień 2007 17:13

Znasz to?

Użyj Fixwareuot

Po jego użyciu może zajść potrzeba ustawiania od nowa DNS Twojego dostawcy internetowego.

Po użyciu programu wpisy kasujesz w hjt.

Pobierz program SDFix

Opis programu

vegierarsco · 17 Wrzesień 2007 17:28

o kurde krotoszyniak mi pomaga ;]

pozdro z milicz

Złączono Posta : 17.09.2007 (Pon) 19:51

Deckard’s System Scanner v20070905.67 Run by TXP on 2007-09-17 19:41:15 Computer is in Safe Mode. -------------------------------------------------------------------------------- – System Restore -------------------------------------------------------------- Unable to create WMI object; Operacja ukończona pomyślnie. Backed up registry hives. Performed disk cleanup. – HijackThis (run as TXP.exe) ------------------------------------------------- Unable to find log (file not found); running clone. – HijackThis Clone ------------------------------------------------------------ Emulating logfile of HijackThis v1.99.1 Scan saved at 2007-09-17 19:44:50 Platform: Windows XP Dodatek Service Pack 2 (5.01.2600) MSIE: Internet Explorer (7.00.6000.16414) Running processes: C:\WINDOWS\system32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\explorer.exe C:\Documents and Settings\TXP\Pulpit\dss.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.com/keyword/%s R1 - HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm O2 - BHO: IE7pro BHO - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IE7pro\IE7pro.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\Program Files\MegauploadToolbar\megauploadtoolbar.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\Program Files\MegauploadToolbar\megauploadtoolbar.dll O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file) O4 - HKEY_LOCAL_MACHINE…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKEY_LOCAL_MACHINE…\Run: [nwiz] nwiz.exe /install O4 - HKEY_LOCAL_MACHINE…\Run: [Licence] Licence.exe O4 - HKEY_LOCAL_MACHINE…\Run: [DAEMON Tools-1033] “C:\Program Files\D-Tools\daemon.exe” -lang 1033 O4 - HKEY_LOCAL_MACHINE…\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKEY_LOCAL_MACHINE…\Run: [GrooveMonitor] “C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe” O4 - HKEY_LOCAL_MACHINE…\Run: [sunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe” O4 - HKEY_LOCAL_MACHINE…\Run: [nod32kui] “C:\Program Files\Eset\nod32kui.exe” /WAITSERVICE O4 - HKEY_LOCAL_MACHINE…\Run: [TkBellExe] “C:\Program Files\Real Alternative\Update_OB\realsched.exe” -osboot O4 - HKEY_LOCAL_MACHINE…\Run: [EasyTuneV] C:\Program Files\Gigabyte\ET5\GUI.exe O4 - HKEY_LOCAL_MACHINE…\Run: [RivaTunerStartupDaemon] “C:\Program Files\RivaTuner v2.02\RivaTuner.exe” /S O4 - HKEY_LOCAL_MACHINE…\Run: [soundMan] SOUNDMAN.EXE O4 - HKEY_LOCAL_MACHINE…\Run: [Gainward] C:\Program Files\VDOTool\TBPanel.exe /A O4 - HKEY_LOCAL_MACHINE…\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKCU…\Run: [Konnekt] “C:\Program Files\Konnekt\konnekt.exe” /autostart O4 - HKCU…\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9 O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: &Stáhnout FlashGetem - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: &Stáhnout všechno FlashGetem - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: IE7pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IE7pro\IE7pro.dll O9 - Extra ‘Tools’ menuitem: IE7pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IE7pro\IE7pro.dll O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll O9 - Extra ‘Tools’ menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing) O9 - Extra ‘Tools’ menuitem: (no name) - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing) O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll O22 - SharedTaskScheduler: Moduł wstępnego ładowania interfejsu Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Demon buforu kategorii składników - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - “C:\Program Files\Eset\nod32krn.exe” O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe – File Associations ----------------------------------------------------------- .cpl - cplfile - shell\cplopen\command - rundll32.exe shell32.dll,Control_RunDLL “%1”,%* .cpl - cplfile - shell\runas\command - unable to read value – Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- R0 speedfan - c:\windows\system32\speedfan.sys S0 NVStrap - c:\windows\system32\drivers\nvstrap.sys S3 ENTECH - c:\windows\system32\drivers\entech.sys S3 ET5Drv - c:\windows\system32\drivers\et5drv.sys S3 gdrv - c:\windows\gdrv.sys S3 RivaTuner32 - c:\program files\rivatuner v2.02\rivatuner32.sys S3 RTCore32 - c:\program files\rmclock\rtcore32.sys (file missing) – Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- S4 UPHClean (User Profile Hive Cleanup) - c:\program files\uphclean\uphclean.exe – Device Manager: Disabled ---------------------------------------------------- Class GUID: Description: Kontroler multimediów wideo Device ID: PCI\VEN_109E&DEV_036E&SUBSYS_00000000&REV_11\4&1F7DBC9F&0&08F0 Manufacturer: Name: Kontroler multimediów wideo PNP Device ID: PCI\VEN_109E&DEV_036E&SUBSYS_00000000&REV_11\4&1F7DBC9F&0&08F0 Service: – Files created between 2007-08-17 and 2007-09-17 ----------------------------- 2007-09-16 01:27:19 4096 --a------ C:\WINDOWS\d3dx.dat 2007-09-15 11:59:23 0 d-------- C:\Program Files\Common Files\Adobe 2007-09-15 00:06:02 3972 --a------ C:\WINDOWS\system32\drivers\PciBus.sys 2007-09-15 00:06:02 5632 --a------ C:\WINDOWS\system32\drivers\Entech64.sys 2007-09-15 00:06:02 21664 --a------ C:\WINDOWS\system32\drivers\Entech.sys 2007-09-15 00:06:01 0 d-------- C:\WINDOWS\system32\Futuremark 2007-09-15 00:05:30 0 d-------- C:\Program Files\Futuremark 2007-09-14 20:26:34 0 d-------- C:\Program Files\VDOTool 2007-09-14 19:46:16 60416 --a------ C:\WINDOWS\ALCFDRTM.EXE 2007-09-14 19:46:10 0 d-------- C:\WINDOWS\system32\Lang 2007-09-14 19:38:40 40960 --a------ C:\WINDOWS\system32\ChCfg.exe 2007-09-14 19:38:26 0 d-------- C:\Program Files\Realtek Sound Manager 2007-09-14 19:38:26 0 d-------- C:\Program Files\AvRack 2007-09-14 19:38:23 0 d-------- C:\Program Files\Realtek AC97 2007-09-14 19:38:19 307200 --a------ C:\WINDOWS\alcupd.exe 2007-09-13 16:08:47 0 d-------- C:\Program Files\RegCleaner 2007-09-12 18:48:01 0 d-------- C:\WINDOWS\vf_hip 2007-09-12 18:47:58 0 d-------- C:\Program Files\Hide IP Platinum 2007-09-12 18:39:16 0 d-------- C:\Program Files\Lavasoft 2007-09-12 17:46:42 0 d-------- C:\Program Files\RMClock 2007-09-12 16:21:05 4224 --a------ C:\WINDOWS\system32\drivers\NVStrap.sys 2007-09-12 16:17:07 0 d-------- C:\Program Files\CCleaner 2007-09-12 16:05:56 186584 --a------ C:\WINDOWS\system32\drivers\ET5Drv.sys 2007-09-12 16:04:31 0 d-------- C:\Program Files\Gigabyte 2007-09-12 16:04:24 327168 --a------ C:\WINDOWS\IsUninst.exe 2007-09-12 16:02:27 0 d-------- C:\Program Files\RivaTuner v2.02 2007-09-09 22:02:39 0 d-------- C:\Program Files\Rapidshare Unlimited 2007-09-09 20:55:14 32 --a------ C:\WINDOWS\go 2007-09-08 20:28:51 2560 --a------ C:\WINDOWS_MSRSTRT.EXE 2007-09-08 20:24:14 0 d-------- C:\Downloads 2007-09-08 20:19:48 0 d-------- C:\Program Files\FlashGet 2007-09-08 00:32:36 32 --a------ C:\WINDOWS\hip 2007-09-07 22:48:47 0 d-------- C:\Program Files\Media Player Classic 2007-09-07 22:40:09 0 d-------- C:\Program Files\Common Files\xing shared 2007-09-07 22:40:07 0 d-------- C:\Program Files\Common Files\Real 2007-09-07 22:39:59 0 d-------- C:\Program Files\Real 2007-09-07 22:32:42 0 d-------- C:\Program Files\ICEOWS 2007-09-04 15:47:52 0 d-------- C:\tv 2007-09-04 15:00:01 0 d-------- C:\Program Files\Intel 2007-09-04 14:58:32 4716 --a------ C:\WINDOWS\gdrv.sys 2007-08-28 20:50:36 180224 --a------ C:\WINDOWS\system32\xvidvfw.dll 2007-08-28 20:50:36 765952 --a------ C:\WINDOWS\system32\xvidcore.dll 2007-08-28 20:50:36 0 d-------- C:\Program Files\Xvid 2007-08-28 18:31:08 0 d-------- C:\Program Files\The Bat! 2007-08-27 23:04:48 0 d-------- C:\WINDOWS\system32\ReinstallBackups 2007-08-27 23:04:19 0 d-------- C:\NVIDIA 2007-08-27 22:46:48 0 d-------- C:\WINDOWS\system32\DirectX 2007-08-27 22:46:03 413696 --a------ C:\WINDOWS\system32\wrap_oal.dll 2007-08-27 22:46:03 86016 --a------ C:\WINDOWS\system32\OpenAL32.dll 2007-08-27 22:46:03 0 d-------- C:\Program Files\OpenAL 2007-08-27 22:46:00 746496 --a------ C:\WINDOWS\system32\Ir50_32.dll 2007-08-27 22:42:13 0 d–h----- C:\Program Files\InstallShield Installation Information 2007-08-26 06:34:28 0 d-------- C:\Program Files\MegauploadToolbar 2007-08-25 22:37:41 0 d-------- C:\Program Files\Paint.NET 2007-08-25 15:44:32 0 d-------- C:\Program Files\7-Zip 2007-08-23 18:03:26 0 d-------- C:\Program Files\Common Files\InstallShield 2007-08-23 17:43:42 804 --a------ C:\WINDOWS\TSCTVDIV.BIN 2007-08-23 17:41:01 0 d-------- C:\Program Files\Prolink 2007-08-23 17:40:58 299520 --a------ C:\WINDOWS\uninst.exe 2007-08-23 17:34:11 0 d-------- C:\WINDOWS\SoftwareDistribution 2007-08-17 02:47:08 0 d-------- C:\Program Files\Windows Media Connect 2 2007-08-17 02:47:04 0 d-------- C:\WINDOWS\help 2007-08-17 02:46:28 0 d-------- C:\WINDOWS\system32\DllCache 2007-08-17 02:45:19 0 d-------- C:\WINDOWS\system32\LogFiles 2007-08-17 02:45:19 0 d-------- C:\WINDOWS\system32\drivers\UMDF – Find3M Report --------------------------------------------------------------- 2007-09-17 18:04:26 0 d-------- C:\Documents and Settings\TXP\Dane aplikacji\MegauploadToolbar 2007-09-15 19:51:57 0 d-------- C:\Documents and Settings\TXP\Dane aplikacji\Moje pliki Bitwy o Śródziemie™ II 2007-09-15 14:54:09 0 d-------- C:\Documents and Settings\TXP\Dane aplikacji\AdobeUM 2007-09-15 11:59:23 0 d-------- C:\Program Files\Common Files 2007-09-15 11:35:35 0 d-------- C:\Documents and Settings\TXP\Dane aplikacji\InstallShield 2007-09-15 11:35:00 0 d-------- C:\Documents and Settings\TXP\Dane aplikacji\Adobe 2007-09-12 19:14:29 0 d-------- C:\Documents and Settings\TXP\Dane aplikacji\Lavasoft 2007-09-12 16:20:26 0 d-------- C:\Documents and Settings\TXP\Dane aplikacji\gtopala 2007-09-08 20:34:09 433976 --a------ C:\WINDOWS\system32\perfh015.dat 2007-09-08 20:34:09 70548 --a------ C:\WINDOWS\system32\perfc015.dat 2007-09-07 22:51:36 0 d-------- C:\Documents and Settings\TXP\Dane aplikacji\Media Player Classic 2007-09-07 22:51:14 0 d-------- C:\Program Files\Real Alternative 2007-09-07 22:40:29 0 d-------- C:\Documents and Settings\TXP\Dane aplikacji\Real 2007-08-28 18:32:03 298104 --a------ C:\WINDOWS\system32\imon.dll 2007-08-27 21:57:03 0 d-------- C:\Documents and Settings\TXP\Dane aplikacji\Groove Games 2007-08-16 02:52:23 0 d-------- C:\Program Files\Winamp 2007-08-16 01:48:09 0 d-------- C:\Program Files\mIRC 2007-08-15 16:12:19 671 --a------ C:\WINDOWS\mozver.dat 2007-08-15 16:12:10 0 d-------- C:\Program Files\Java 2007-08-15 16:09:53 0 d-------- C:\Documents and Settings\TXP\Dane aplikacji\Sun 2007-08-15 16:07:04 0 d-------- C:\Program Files\Common Files\Java 2007-08-15 16:05:34 0 d-------- C:\Program Files\jv16 PowerTools 2006 2007-08-15 16:01:52 0 d-------- C:\Program Files\Konnekt 2007-08-15 16:01:38 0 d-------- C:\Program Files\Kaspersky Lab 2007-08-15 13:45:16 0 d-------- C:\Documents and Settings\TXP\Dane aplikacji\Macromedia 2007-08-15 00:00:14 0 d-------- C:\Program Files\Microsoft Works 2007-08-15 00:00:08 0 d-------- C:\Program Files\MSBuild 2007-08-14 23:23:38 0 d-------- C:\Program Files\Nero 2007-08-14 23:23:35 0 d-------- C:\Program Files\Common Files\Ahead 2007-08-14 22:38:10 0 d-------- C:\Program Files\Common Files\ODBC 2007-08-14 22:38:07 0 d-------- C:\Program Files\Common Files\SpeechEngines 2007-08-14 22:37:53 62 --ahs---- C:\Documents and Settings\TXP\Dane aplikacji\desktop.ini 2007-08-14 21:49:10 0 d-------- C:\Documents and Settings\TXP\Dane aplikacji\Mozilla 2007-08-14 21:47:39 0 d-------- C:\Program Files\Combined Community Codec Pack 2007-08-14 21:47:01 0 d-------- C:\Program Files\MarBit 2007-08-14 21:46:34 0 d-------- C:\Program Files\ffdshow 2007-08-14 21:30:55 0 d-------- C:\Documents and Settings\TXP\Dane aplikacji\IE7pro 2007-08-14 21:30:43 0 d-------- C:\Program Files\D-Tools 2007-08-14 20:52:36 25992 --a------ C:\WINDOWS\system32\pgdfgsvc.exe http://www.sysinternals.com; Page File Defragmenter> 2007-08-14 20:49:40 0 d-------- C:\Documents and Settings\TXP\Dane aplikacji\Identities 2007-08-14 20:48:54 0 d-------- C:\Documents and Settings\TXP\Dane aplikacji\IDMComp 2007-08-14 20:47:30 0 d-------- C:\Program Files\IE7pro 2007-08-14 20:46:24 0 d-------- C:\Program Files\HighMAT CD Writing Wizard 2007-08-14 20:46:16 0 d-------- C:\Program Files\UPHClean 2007-08-14 20:46:11 0 -rahs---- C:\MSDOS.SYS 2007-08-14 20:46:11 0 -rahs---- C:\IO.SYS 2007-08-14 20:46:11 0 --a------ C:\CONFIG.SYS 2007-08-14 20:46:11 0 --a------ C:\AUTOEXEC.BAT 2007-08-14 20:44:56 0 d–h----- C:\Program Files\WindowsUpdate 2007-08-14 20:44:48 0 d-------- C:\Program Files\Common Files\MSSoap 2007-08-14 20:44:30 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat – Registry Dump --------------------------------------------------------------- *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “NvCplDaemon”=“C:\WINDOWS\system32\NvCpl.dll” [2007-04-19 06:26] “nwiz”=“nwiz.exe” [2007-04-19 06:26 C:\WINDOWS\system32\nwiz.exe] “Licence”=“Licence.exe” [2007-01-08 20:49 C:\WINDOWS\system32\Licence.exe] “DAEMON Tools-1033”=“C:\Program Files\D-Tools\daemon.exe” [2004-08-22 17:05] “WinampAgent”=“C:\Program Files\Winamp\winampa.exe” [2007-02-13 20:29] “GrooveMonitor”=“C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe” [2006-10-27 00:47] “SunJavaUpdateSched”=“C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe” [2007-07-12 04:00] “nod32kui”=“C:\Program Files\Eset\nod32kui.exe” [2007-08-28 18:32] “TkBellExe”=“C:\Program Files\Real Alternative\Update_OB\realsched.exe” [2007-09-07 22:40] “EasyTuneV”=“C:\Program Files\Gigabyte\ET5\GUI.exe” [2004-06-14 11:54] “RivaTunerStartupDaemon”=“C:\Program Files\RivaTuner v2.02\RivaTuner.exe” [2007-07-01 21:20] “SoundMan”=“SOUNDMAN.EXE” [2005-12-14 18:06 C:\WINDOWS\soundman.exe] “Gainward”=“C:\Program Files\VDOTool\TBPanel.exe” [2007-04-23 19:19] “NvMediaCenter”=“C:\WINDOWS\system32\NvMcTray.dll” [2007-04-19 06:26] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “Konnekt”=“C:\Program Files\Konnekt\konnekt.exe” [2005-05-24 23:41] “updateMgr”=“C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe” [2006-03-30 16:45] [HKEY_USERS.default\software\microsoft\windows\currentversion\runonce] “nltide_3”=rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,4,N C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 22:05:26] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] “DisableStatusMessages”=1 (0x1) “SynchronousMachineGroupPolicy”=0 (0x0) “SynchronousUserGroupPolicy”=0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] “NoDesktopCleanupWizard”=1 (0x1) “NoSMHelp”=1 (0x1) “NoRemoteRecursiveEvents”=1 (0x1) “NoWelcomeScreen”=1 (0x1) “ForceClassicControlPanel”=1 (0x1) “NoSharedDocuments”=1 (0x1) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] “NoSMHelp”=1 (0x1) “NoSMBalloonTip”=0 (0x0) “StartMenuLogoff”=0 (0x0) “NoUserNameInStartMenu”=1 (0x1) “NoSMConfigurePrograms”=1 (0x1) “NoSaveSettings”=0 (0x0) “NoExpandedNewMenu”=1 (0x1) “NoResolveTrack”=1 (0x1) “NoResolveSearch”=1 (0x1) “NoLowDiskSpaceChecks”=1 (0x1) “NoSharedDocuments”=1 (0x1) “NoThumbnailCache”=1 (0x1) “NoTaskGrouping”=1 (0x1) [HKEY_USERS.default\software\microsoft\windows\currentversion\policies\explorer] “NoSMHelp”=1 (0x1) “NoSMBalloonTip”=0 (0x0) “StartMenuLogoff”=0 (0x0) “NoUserNameInStartMenu”=1 (0x1) “NoSMConfigurePrograms”=1 (0x1) “NoSaveSettings”=0 (0x0) “NoExpandedNewMenu”=1 (0x1) “NoResolveTrack”=1 (0x1) “NoResolveSearch”=1 (0x1) “NoLowDiskSpaceChecks”=1 (0x1) “NoSharedDocuments”=1 (0x1) “NoThumbnailCache”=1 (0x1) “NoTaskGrouping”=1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalService SSDPSRV *Newly Created Service* - NVCAP *Newly Created Service* - NVXBAR *Newly Created Service* - SPEEDFAN – End of Deckard’s System Scanner: finished at 2007-09-17 19:46:00 ------------

LostWorld · 17 Wrzesień 2007 19:11

Daj log z Combofix

Opis użycia ComboFix jest na tej stronie z linku.

Log może być długi, więc zapisz go sobie gdzieś, a potem wklej na http://wklej.org/, a tu daj tylko link.

Posiada on moduł usuwania , wiec sam rozumiesz…

sdar · 18 Wrzesień 2007 21:41

Proszę zastosować się do zaleceń zawartych w TYM temacie. W przeciwnym wypadku temat zostanie usunięty.

Dodatkowo, proponuję zapoznanie się z TYMI informacjami.