jak macie chwilke czasu to sprawdzcie mój log…dziękuje. mój brat przyszporzył mi kłopotów z antywirusem bo mam szczątki wpisów tych które były zaintalowane a które nie powinny być…nie odinstalowały mi sie wszystkie komponenty z niewiadomo jakiego względu… ;/ chodzi mi tutaj o bitdeffendera i antywirus firmy symantec…boje się samemu bawić z hijackiem więc prosze o pomoc
Logfile of HijackThis v1.99.1
Scan saved at 23:23:54, on 05-04-05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\INTERNAT.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\POWERS.EXE
C:\PROGRAM FILES\WINAMP\WINAMPA.EXE
C:\PROGRAM FILES\PESTPATROL\PPMEMCHECK.EXE
C:\PROGRAM FILES\PESTPATROL\PPCONTROL.EXE
C:\PROGRAM FILES\PESTPATROL\COOKIEPATROL.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\GADU-GADU\GG.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
C:\UNZIPPED\HIJACKTHIS\HIJACKTHIS.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://dobreprogramy.pl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\TOOLS\IESDPB.DLL (file missing)
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\TOOLS\IESDSG.DLL (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM…\Run: [scanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM…\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM…\Run: [internat.exe] internat.exe
O4 - HKLM…\Run: [systemTray] SysTray.Exe
O4 - HKLM…\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM…\Run: [Zasobnik systemowy] SysTray.Exe
O4 - HKLM…\Run: [soundMan] SOUNDMAN.EXE
O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
O4 - HKLM…\Run: [nwiz] nwiz.exe /install
O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvMcTray.dll,NvTaskbarInit
O4 - HKLM…\Run: [PowerS] “C:\WINDOWS\PowerS.exe”
O4 - HKLM…\Run: [internet Download Accelerator] C:\PROGRAM FILES\IDA\IDA.EXE -autorun
O4 - HKLM…\Run: [smcService] C:\PROGRA~1\SYGATE\SPF\SMC.EXE -startgui
O4 - HKLM…\Run: [AVK Mail Checker] “C:\PROGRAM FILES\COMMON FILES\G DATA\AVKMAIL\AVKPOP.EXE”
O4 - HKLM…\Run: [OfficeGuard RegChecker] “C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\ogrc.exe”
O4 - HKLM…\Run: [AVPCC] “C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe” /wait
O4 - HKLM…\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM…\Run: [bitDefender Virus Shield] C:\Program Files\Softwin\BitDefender Standard Edition\vsserv.exe
O4 - HKLM…\Run: [bDMCon] C:\Program Files\Softwin\BitDefender Standard Edition\bdmcon.exe
O4 - HKLM…\Run: [bDNewsAgent] C:\Program Files\Softwin\BitDefender Standardl Edition\bdnagent.exe
O4 - HKLM…\Run: [bDSwitchAgent] C:\PROGRAM FILES\SOFTWIN\BITDEFENDER STANDARDL EDITION\bdswitch.exe
O4 - HKLM…\Run: [KAVPersonal50] “C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe” /minimize
O4 - HKLM…\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
O4 - HKLM…\Run: [PestPatrol Control Center] C:\PROGRA~1\PESTPA~1\PPControl.exe
O4 - HKLM…\Run: [CookiePatrol] C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
O4 - HKLM…\RunServices: [scanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM…\RunServices: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM…\RunServices: [internat.exe] internat.exe
O4 - HKLM…\RunServices: [systemTray] SysTray.Exe
O4 - HKLM…\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM…\RunServices: [Zasobnik systemowy] SysTray.Exe
O4 - HKLM…\RunServices: [soundMan] SOUNDMAN.EXE
O4 - HKLM…\RunServices: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
O4 - HKLM…\RunServices: [nwiz] nwiz.exe /install
O4 - HKLM…\RunServices: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvMcTray.dll,NvTaskbarInit
O4 - HKLM…\RunServices: [PowerS] “C:\WINDOWS\PowerS.exe”
O4 - HKLM…\RunServices: [internet Download Accelerator] C:\PROGRAM FILES\IDA\IDA.EXE -autorun
O4 - HKLM…\RunServices: [smcService] C:\PROGRA~1\SYGATE\SPF\SMC.EXE -startgui
O4 - HKLM…\RunServices: [AVK Mail Checker] “C:\PROGRAM FILES\COMMON FILES\G DATA\AVKMAIL\AVKPOP.EXE”
O4 - HKLM…\RunServices: [OfficeGuard RegChecker] “C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\ogrc.exe”
O4 - HKLM…\RunServices: [AVPCC] “C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe” /wait
O4 - HKLM…\RunServices: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM…\RunServices: [bitDefender Virus Shield] C:\Program Files\Softwin\BitDefender Standard Edition\vsserv.exe
O4 - HKLM…\RunServices: [bDMCon] C:\Program Files\Softwin\BitDefender Standard Edition\bdmcon.exe
O4 - HKLM…\RunServices: [bDNewsAgent] C:\Program Files\Softwin\BitDefender Standard Edition\bdnagent.exe
O4 - HKLM…\RunServices: [bDSwitchAgent] C:\PROGRAM FILES\SOFTWIN\BITDEFENDER STANDARD EDITION\bdswitch.exe
O4 - HKLM…\RunServices: [KAVPersonal50] “C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe” /minimize
O4 - HKLM…\RunServices: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
O4 - HKLM…\RunServices: [PestPatrol Control Center] C:\PROGRA~1\PESTPA~1\PPControl.exe
O4 - HKLM…\RunServices: [CookiePatrol] C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
O4 - HKCU…\Run: [spyware Doctor] “C:\PROGRAM FILES\SPYWARE DOCTOR\SWDOCTOR.EXE” /Q
O4 - HKCU…\Run: [sSS5] “C:\PROGRAM FILES\STEGANOS SECURITY SUITE 5\STEGANOS5.EXE” /booting
O4 - HKCU…\Run: [sSS5SAFE] “C:\PROGRAM FILES\STEGANOS SECURITY SUITE 5\SAFE.EXE” /booting
O4 - HKCU…\Run: [sSS5SPM] “C:\PROGRAM FILES\STEGANOS SECURITY SUITE 5\SPM.EXE” /booting
O4 - HKCU…\Run: [Gadu-Gadu] “C:\PROGRAM FILES\GADU-GADU\GG.EXE” /tray
O4 - HKCU…\Run: [ETD Security Scanner] “C:\PROGRAM FILES\ETD SECURITY SCANNER\ETD SECURITY SCANNER.EXE” /s
O4 - HKCU…\RunServices: [spyware Doctor] “C:\PROGRAM FILES\SPYWARE DOCTOR\SWDOCTOR.EXE” /Q
O4 - HKCU…\RunServices: [Gadu-Gadu] “C:\PROGRAM FILES\GADU-GADU\GG.EXE” /tray
O4 - HKCU…\RunServices: [ETD Security Scanner] “C:\PROGRAM FILES\ETD SECURITY SCANNER\ETD SECURITY SCANNER.EXE” /s
O8 - Extra context menu item: Download with IDA - C:\Program Files\IDA\idaie.htm
O8 - Extra context menu item: Download ALL with IDA - C:\Program Files\IDA\idaieall.htm
O9 - Extra button: Internet Download Accelerator - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - C:\Program Files\IDA\ida.exe (file missing)
O9 - Extra ‘Tools’ menuitem: &Internet Download Accelerator - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - C:\Program Files\IDA\ida.exe (file missing)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\TOOLS\IESDPB.DLL (file missing)
O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) - http://skaner.mks.com.pl/SkanerOnline.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {DCB16E44-D6DB-473E-A251-F6FBB381C1C3} (GameDesire Chess) - http://67.15.101.3/g_bin/pl/chess_2_0_0_15.cab
O16 - DPF: {83AFB5CA-ED35-11D4-A452-0080C8D85045} (GameDesire Poker Games) - http://67.15.101.3/g_bin/pl/poker_2_0_0_36.cab
O16 - DPF: ppctlcab - http://ppupdates.ca.com/downloads/scanner/ppctlcab.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://ppupdates.ca.com/downloads/scanner/axscanner.cab
O16 - DPF: {1A781DED-C22D-4153-3213-A3211E29DF13} (GameDesire Card Games) - http://67.15.101.3/g_bin/pl/cards_2_0_0_58.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/Shar … /cabsa.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/Shar … vSniff.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain =
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer =
