Prosze o spr. loga

Dla specjalistów Bezpieczeństwo
#1 
Logfile of HijackThis v1.99.1

Scan saved at 17:23:41, on 2005-09-17

Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)


Running processes:

D:\WINDOWS\System32\smss.exe

D:\WINDOWS\system32\winlogon.exe

D:\WINDOWS\system32\services.exe

D:\WINDOWS\system32\lsass.exe

D:\WINDOWS\system32\svchost.exe

D:\WINDOWS\System32\svchost.exe

D:\WINDOWS\system32\spoolsv.exe

D:\WINDOWS\Explorer.EXE

D:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe

D:\WINDOWS\system32\nvsvc32.exe

D:\WINDOWS\system32\SLEE81.exe

D:\Program Files\Microsoft AntiSpyware\gcasServ.exe

D:\WINDOWS\system32\RUNDLL32.EXE

D:\WINDOWS\system32\ctfmon.exe

D:\Program Files\CursorXP\CursorXP.exe

D:\WINDOWS\BricoPacks\Longhorn Inspirat\YzToolBar\YzToolBar.exe

D:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe

D:\WINDOWS\system32\svchost.exe

D:\Program Files\Gadu-Gadu\gg.exe

D:\Program Files\Opera\Opera.exe

D:\Program Files\BitComet\BitComet.exe

D:\Program Files\Winamp\winamp.exe

D:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe

D:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe

D:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe

D:\Program Files\Agnitum\Tauscan 1.7\Taumon.exe

D:\Documents and Settings\Dentr0s\Moje dokumenty\HijackThis.exe


R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://onet.pl/

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://onet.pl/

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza

O1 - Hosts: 62.75.224.159 www.bns1.net

O1 - Hosts: 62.75.224.159 www.bns2.net

O1 - Hosts: 62.75.224.159 www.bns3.net

O1 - Hosts: 62.75.224.159 www.bns4.net

O1 - Hosts: 62.75.224.159 www.bns5.net

O1 - Hosts: 62.75.224.159 www.bns6.net

O1 - Hosts: 62.75.224.159 www.bns7.net

O1 - Hosts: 62.75.224.159 www.bns8.net

O1 - Hosts: 62.75.224.159 www.cms1.net

O1 - Hosts: 62.75.224.159 www.cms2.net

O1 - Hosts: 62.75.224.159 www.cms3.net

O1 - Hosts: 62.75.224.159 www.cms4.net

O1 - Hosts: 62.75.224.159 www.cms5.net

O1 - Hosts: 62.75.224.159 www.cms6.net

O1 - Hosts: 62.75.224.159 www.cms7.net

O1 - Hosts: 62.75.224.159 www.cms8.net

O1 - Hosts: 62.75.224.159 www.rg1.com

O1 - Hosts: 62.75.224.159 www.rg2.com

O1 - Hosts: 62.75.224.159 www.rg3.com

O1 - Hosts: 62.75.224.159 www.rg4.com

O1 - Hosts: 62.75.224.159 www.rg5.com

O1 - Hosts: 62.75.224.159 www.rg6.com

O1 - Hosts: 62.75.224.159 www.rg7.com

O1 - Hosts: 62.75.224.159 www.rg8.com

O1 - Hosts: 62.75.224.159 www.cjt1.net

O1 - Hosts: 62.75.224.159 www.rgs1.net

O1 - Hosts: 62.75.224.159 www.rgs2.net

O1 - Hosts: 62.75.224.159 www.bns1.net

O1 - Hosts: 62.75.224.159 www.bns2.net

O1 - Hosts: 62.75.224.159 www.cms1.net

O1 - Hosts: 62.75.224.159 www.cms2.net

O1 - Hosts: 62.75.224.159 bns1.net

O1 - Hosts: 62.75.224.159 bns2.net

O1 - Hosts: 62.75.224.159 bns3.net

O1 - Hosts: 62.75.224.159 bns4.net

O1 - Hosts: 62.75.224.159 bns5.net

O1 - Hosts: 62.75.224.159 bns6.net

O1 - Hosts: 62.75.224.159 bns7.net

O1 - Hosts: 62.75.224.159 bns8.net

O1 - Hosts: 62.75.224.159 cms1.net

O1 - Hosts: 62.75.224.159 cms2.net

O1 - Hosts: 62.75.224.159 cms3.net

O1 - Hosts: 62.75.224.159 cms4.net

O1 - Hosts: 62.75.224.159 cms5.net

O1 - Hosts: 62.75.224.159 cms6.net

O1 - Hosts: 62.75.224.159 cms7.net

O1 - Hosts: 62.75.224.159 cms8.net

O1 - Hosts: 62.75.224.159 rg1.com

O1 - Hosts: 62.75.224.159 rg2.com

O1 - Hosts: 62.75.224.159 rg3.com

O1 - Hosts: 62.75.224.159 rg4.com

O1 - Hosts: 62.75.224.159 rg5.com

O1 - Hosts: 62.75.224.159 rg6.com

O1 - Hosts: 62.75.224.159 rg7.com

O1 - Hosts: 62.75.224.159 rg8.com

O1 - Hosts: 62.75.224.159 cjt1.net

O1 - Hosts: 62.75.224.159 rgs1.net

O1 - Hosts: 62.75.224.159 rgs2.net

O1 - Hosts: 62.75.224.159 bns1.net

O1 - Hosts: 62.75.224.159 bns2.net

O1 - Hosts: 62.75.224.159 cms1.net

O1 - Hosts: 62.75.224.159 cms2.net

O1 - Hosts: 62.75.224.159 j800banners.cjt1.net

O1 - Hosts: 62.75.224.159 jadlogix.cjt1.net

O1 - Hosts: 62.75.224.159 jadtegrity.cjt1.net

O1 - Hosts: 62.75.224.159 jaimmedia.cjt1.net

O1 - Hosts: 62.75.224.159 javatar.cjt1.net

O1 - Hosts: 62.75.224.159 jbeet.cjt1.net

O1 - Hosts: 62.75.224.159 jbigpops.cjt1.net

O1 - Hosts: 62.75.224.159 jbouncetek.cjt1.net

O1 - Hosts: 62.75.224.159 jbravenet.cjt1.net

O1 - Hosts: 62.75.224.159 jcdcover.cjt1.net

O1 - Hosts: 62.75.224.159 jclickspring.cjt1.net

O1 - Hosts: 62.75.224.159 jcollegehumor.cjt1.net

O1 - Hosts: 62.75.224.159 jdownloadacc.cjt1.net

O1 - Hosts: 62.75.224.159 jedonkey.cjt1.net

O1 - Hosts: 62.75.224.159 jeuniverse.cjt1.net

O1 - Hosts: 62.75.224.159 jhot.cjt1.net

O1 - Hosts: 62.75.224.159 jicmedia.cjt1.net

O1 - Hosts: 62.75.224.159 jicq.cjt1.net

O1 - Hosts: 62.75.224.159 jieplugin.cjt1.net

O1 - Hosts: 62.75.224.159 jinternetoptimizer.cjt1.net

O1 - Hosts: 62.75.224.159 jmediabuy1.cjt1.net

O1 - Hosts: 62.75.224.159 jmediabuyad.cjt1.net

O1 - Hosts: 62.75.224.159 jmindset.cjt1.net

O1 - Hosts: 62.75.224.159 jmindsettest.cjt1.net

O1 - Hosts: 62.75.224.159 jnictech.cjt1.net

O1 - Hosts: 62.75.224.159 jnova.cjt1.net

O1 - Hosts: 62.75.224.159 jpiolet.cjt1.net

O1 - Hosts: 62.75.224.159 jsanboxer.cjt1.net

O1 - Hosts: 62.75.224.159 jsercee.cjt1.net

O1 - Hosts: 62.75.224.159 jthedelfin.cjt1.net

O1 - Hosts: 62.75.224.159 jwarezp2p.cjt1.net

O1 - Hosts: 62.75.224.159 jwildmedia.cjt1.net

O1 - Hosts: 62.75.224.159 mediabuy-nic.cjt1.net

O1 - Hosts: 62.75.224.159 www.m7z.net

O1 - Hosts: 62.75.224.159 m7z.net

O1 - Hosts: 62.75.224.159 jcms.cydoor.com

O1 - Hosts: 62.75.224.159 cydoor.com

O1 - Hosts: 62.75.224.159 www.cydoor.com

O1 - Hosts: 62.75.224.159 jnova.cjt1.net

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O4 - HKLM\..\Run: [KAVPersonal50] "D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kav.exe" /minimize

O4 - HKLM\..\Run: [gcasServ] "D:\Program Files\Microsoft AntiSpyware\gcasServ.exe"

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [MSConfig] D:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto

O4 - HKCU\..\Run: [Gadu-Gadu] "D:\Program Files\Gadu-Gadu\gg.exe" /tray

O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [CursorXP] "D:\Program Files\CursorXP\CursorXP.exe" -s

O4 - Startup: Y'z Toolbar.lnk = D:\WINDOWS\BricoPacks\Longhorn Inspirat\YzToolBar\YzToolBar.exe

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll

O17 - HKLM\System\CCS\Services\Tcpip\..\{EF027152-7AEB-4889-8623-D4567EFF36DF}: NameServer = 192.168.128.254,194.204.159.1

O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - D:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: kavsvc - Kaspersky Lab - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kavsvc.exe

O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - D:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Steganos Live Encryption Engine 8.1 [Service] (SLEE_81_SERVICE) - Unknown owner - D:\WINDOWS\system32\SLEE81.exe

O23 - Service: StyleXPService - Unknown owner - D:\Program Files\TGTSoft\StyleXP\StyleXPService.exe (file missing)
#2

wszystkie wpisy 01 usuwasz hijackiem

#3

już problem załatwiony. dziękuje za poświęcenie czasu :slight_smile: