Prosze o sprawdzenie loga (komp troche muli)

dominik_15 · 13 Marzec 2006 15:45

prosze o sprawdzenie loga, ogolnie syf na kompie

Logfile of HijackThis v1.99.1 Scan saved at 11:08:16 AM, on 3/13/2006 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Symantec AntiVirus\DefWatch.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\Symantec AntiVirus\Rtvscan.exe C:\WINDOWS\System32\wdfmgr.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\myLinker\myLinker.exe C:\Program Files\Ahead\InCD\InCD.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\PROGRA~1\SYMANT~1\VPTray.exe C:\Program Files\CodeKiller\Coderd.exe C:\WINDOWS\System32\qspop.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\System32\ctfmon.exe C:\Program Files\YBM\AllinAll\AllinAll.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\System32\msiexec.exe C:\Documents and Settings\Krysia\Desktop\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.empas.com/ F3 - REG:win.ini: run= F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\System32\explorer.exe, O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM…\Run: [iMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32 O4 - HKLM…\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - HKLM…\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM…\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM…\Run: [myLinker] C:\PROGRA~1\myLinker\myLinker.exe /B O4 - HKLM…\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM…\Run: [inCD] C:\Program Files\Ahead\InCD\InCD.exe O4 - HKLM…\Run: [TkBellExe] “C:\Program Files\Common Files\Real\Update_OB\realsched.exe” -osboot O4 - HKLM…\Run: [ccApp] “C:\Program Files\Common Files\Symantec Shared\ccApp.exe” O4 - HKLM…\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe O4 - HKLM…\Run: [Code JungBul] C:\Program Files\CodeJungBul\CodeJungBul.exe /start O4 - HKLM…\Run: [Coderd] C:\Program Files\CodeKiller\Coderd.exe O4 - HKLM…\Run: [QuickBar] C:\WINDOWS\System32\Quickbar.exe O4 - HKLM…\Run: [qspop] C:\WINDOWS\System32\qspop.exe O4 - HKLM…\Run: [MediaSoft] C:\Program Files\MediaSoft\MediaSoft.exe O4 - HKLM…\Run: [superclean] c:\Program Files\superclean\superclean.exe hidden O4 - HKLM…\Run: [pccop] C:\Program Files\pccop\pccop.exe bg O4 - HKLM…\Run: [C-Media Mixer] Mixer.exe /startup O4 - HKCU…\Run: [MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background O4 - HKCU…\Run: [NTFSS MICROSOFT SYSTEM] filees.exe O4 - HKCU…\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU…\Run: [AllinAll] C:\Program Files\YBM\AllinAll\AllinAllUpdate.exe -y O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O16 - DPF: {03F49E0E-C43A-4037-BBD6-D681E998A08E} (CodeAx Class) - http://ep.knou.ac.kr/EP/web/common/cabf … CodeAx.cab O16 - DPF: {072039AB-2117-4ED5-A85F-9B9EB903E021} (NowStarter Control) - http://www.pdbox.co.kr/boxmedia/ucv/NowStarter.cab O16 - DPF: {08AC405D-A4A0-448B-8AAF-9D2903CC4A51} (EmpasSM Control) - http://im.emimg.com/note/bin/empassm.cab O16 - DPF: {091CDD73-1401-4643-9B9C-65B091C88685} (MyLinker Control) - http://asiana.contents.mylinker.co.kr/m … Linker.cab O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX Basic) - http://www.sendbill.co.kr/jsp/sendbill/ScriptX.cab O16 - DPF: {18D63578-EA2F-4A59-A49A-7F62E6B3DF3E} (ImP3 Control) - http://activexdown.paran.com/paranactivex/data/ImP3.cab O16 - DPF: {1DE9BB01-B121-401D-8877-BCD5ED5B7EE5} (Tpwin Control) - http://www.zeromovie.com/obj/zero.CAB O16 - DPF: {2086592C-34CB-46BC-A042-715910AFBE81} (EBSSessionCheck.SessionCheck) - http://img.ebs.co.kr/ActiveX/Session/EB … nCheck.CAB O16 - DPF: {2D394D05-A066-4678-BA38-E85882B09B2E} (Controller Class) - http://www.cosmotan.com/cabinet/myspeed.cab O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.c … 040510.cab O16 - DPF: {316ED558-1FBB-4975-BE33-5C1D294BD0C2} (YBMFonts Control) - http://allinall.ybmsisa.com/cab/YBMFonts.CAB O16 - DPF: {340CCF52-D65F-4A11-80B3-13DC23697B59} (BugsInstall Control) - http://player.bugs.co.kr/install/BugsInstall_10_04.cab O16 - DPF: {35B4B192-1A69-444D-AA6B-8A4EE733B0A4} (YariMusicPlayer_EHom Control) - http://dojupa.ehome.co.kr/ocx/YariMusicPlayer.cab O16 - DPF: {3F0EECCE-E138-11D1-8712-0060083D83F5} (LPViewer Class) - http://www.mgisoft.com/ActiveX/LPControl.cab O16 - DPF: {48113527-E6C8-457D-87A1-5CD1DB2D0F8E} (MKImage Control) - http://www.mangazzang.co.kr/DRM/MKImage.cab O16 - DPF: {4875D0C5-5FE1-4488-8BB8-5A7D0ECDF93B} (Empas Filebox Control) - http://filebox.empas.com/EmpasFilebox.cab O16 - DPF: {48A80225-E859-4FF5-9E23-C64F356C2D10} (CTIViewer Control) - http://mangazzang.co.kr/DRM/CTIViewer.cab O16 - DPF: {48ECCD73-123C-4C25-A64C-76E8E8A30CAF} (XPayMPIOCX Control) - https://mpi.dacom.net/XPayMPI/Xecure_Li … MPIOCX.cab O16 - DPF: {48F55EDC-9847-41CF-88A9-30E7804AEFA3} (EBSPlayer Control) - http://www.ebsi.co.kr/ebs/ActiveX/EBSTPlayer.cab O16 - DPF: {4B48CEDD-EB09-4FD3-AA22-5BDE98EDEF90} (EZXSActiveX Control) - http://www.kotra.or.kr/main/ezxssso/ins … ctivex.cab O16 - DPF: {4F2487A5-F5A5-4C0F-BA4E-0A8965D82EE9} (UbwebUtil2 Control) - http://211.216.47.81/ubmark/admin/ubweb … 080501.cab O16 - DPF: {55218724-9E0F-4A9A-858C-B5E6F5A9C65F} (Idefense Control) - http://kings.cachenet.com/idf0610/idefense.cab O16 - DPF: {5586077A-2041-4710-8F2E-0D5060D0378D} (Kdfense Control) - http://kings.cachenet.com/kdfx215/kdfense.cab O16 - DPF: {598E9A0F-2292-4FBD-A577-A44352839FE9} (bizresume control) - http://www.bizresume.co.kr/bizresume.cab O16 - DPF: {630B5ED1-D6B0-4D31-8AE2-7687DF72BA9D} (Extream Class) - http://wmpdownload.nefficient.co.kr/wmp … DNExtX.cab O16 - DPF: {65195824-E35C-4D9F-BE8B-E4B6BFB65C0C} (supercleanX Control) - http://www.supercleani.com/in/cleani.cab O16 - DPF: {6AD92401-CE2D-452B-AA63-1291D60EC2D2} (AxINIplugin40 Control) - http://www.cjmall.com/initech/plugin/axINIplugin40.cab O16 - DPF: {6F4863C1-482C-4744-8946-4AEA34DF1A16} (FreechalOn Class) - http://login.freechal.com/freechalon/FcOnCtl12.cab O16 - DPF: {710E4921-F77C-4D42-8EC4-4DFDEE52508F} (ictPrintXForm Control) - http://211.35.57.161/web_kiosk_3/activeX/ictPrintX.cab O16 - DPF: {73257F5A-A0E3-4904-A64E-CE6D892E404D} (Empas File Upload Control) - http://mail.empas.com/kr/EmpasFileUpload.cab O16 - DPF: {7606693A-C18D-4567-AF85-6194FF70761E} (GomWeb Control) - http://app.ipop.co.kr/gom/GomWeb.cab O16 - DPF: {765A88D3-EB24-4A26-ACCF-1F754DB281FE} (pcbaksaActiveFormX Control) - http://pcbagsa.com/down/pcbaksaActiveFormProj1.cab O16 - DPF: {799BB2EC-572A-42A9-84AD-112806F4F551} (Imweb Control) - http://activexdown.paran.com/paranactiv … /imweb.cab O16 - DPF: {79C871A6-F9C8-44DA-B2C9-CD9438D9642C} (EZXSInstaller Control) - http://www.kotra.or.kr/main/ezxssso/ins … taller.cab O16 - DPF: {7E9FDB80-5316-11D4-B02C-00C04F0CD404} (XecureWeb 4.0 Client Control) - http://download.softforum.co.kr/Publish … nstall.cab O16 - DPF: {86C2FC1F-9D21-4BF1-A45F-BF11EFFB6046} - http://down.c-zero.co.kr/cab/CCInst.CAB O16 - DPF: {8BEBF6FF-B697-4CB0-8F92-4A0A1F828F22} (pccopax Control) - http://www.pc-cop.net/ax/pccopatx.cab O16 - DPF: {8CD17101-6B15-4B6C-B58B-A1930928A64E} (AtlCtrl Class) - http://www.findgood.co.kr/icon/icon0160.cab O16 - DPF: {8DA1E003-62EF-48DD-AC32-9D82F432B043} (QucikBar Control) - http://down.quickbar.co.kr/toolbar/tool … arProj.cab O16 - DPF: {91F1F5BA-866F-47D1-86A3-955EF0DD1717} (DaulSoftSetupCallerAX Control) - http://www.ebsi.co.kr/ebs/ActiveX/neote … llerAX.cab O16 - DPF: {932AFC62-9855-4889-81FA-426D20CEF06F} (DrPlusX Control) - http://www.dr-plus.net/pc/DrPlusAct.cab O16 - DPF: {938527D1-CDB7-4147-998A-B20FCA5CC976} (Cdmcco Class) - http://cafeimg.hanmail.net/cab9/dmcc2.cab O16 - DPF: {9675ABBF-8D0B-4956-868C-934B5A7928D4} - http://update.nprotect.net/nprotect2004/lgcns/npv.cab O16 - DPF: {970E1B88-8AC1-4E31-86D6-BFA769CEF7A6} (eGSignPlus For_EBS Class) - http://www.ebsi.co.kr/ebs/ActiveX/eGEBS.cab O16 - DPF: {9BDBC41E-C335-4263-83C0-ECE78EE28A33} (SysMonOCX Control) - http://ahnlabdownload.nefficient.co.kr/ … wall20.cab O16 - DPF: {9BED3AC7-E6D4-43E7-B8A1-1FA502F639E1} (XTools Control) - http://player.bugs.co.kr/install/mv/XTools.cab O16 - DPF: {9D649940-F589-4066-9BFD-3D0B26551523} (RewardNetwork Launcher Class) - http://affiliate.rewardnetwork.net/code … =bestanime O16 - DPF: {9ECEEA6E-D372-4D96-A67C-34CD8EBD6F34} (SmartUpdate Class) - http://www.nanet.go.kr/dl/ECOSmartUpdate.cab O16 - DPF: {A1832535-5218-42F9-8959-19E2BCABFABF} (INIwallet50 Control) - http://plugin.inicis.com/wallet50/INIwallet50.cab O16 - DPF: {A4508A45-F1C4-40F3-99B4-0CA08AC77E3B} (Kdfense8 Control) - http://kings.cachenet.com/kdfx213/kdfense8.cab O16 - DPF: {A62C4B20-ED56-4371-87EA-7909AB12EDB2} (Cryptocca Class) - http://www.sendbill.co.kr/jsp/sendbill/iCryptca.cab O16 - DPF: {B0485AF8-4034-4CCD-8CAE-69EBE198275D} (HIns Control) - http://www3.edaily.co.kr/BuyBuddy/buyactivex/BuyIns.CAB O16 - DPF: {B13DEA4C-88C3-492B-9387-63B2BB865CE9} (WebGraph.GraphUCTL) - http://www.sisajunior.com/Junior/Junior … /graph.CAB O16 - DPF: {B45E969D-924F-4C83-ACF3-38CDD115AA2C} (MpiPlugin Class) - https://www.interpark.com/visa3d/ilkactx.cab O16 - DPF: {B573A25F-27D5-4D22-9A51-C357A72F869C} (pcexAX Control) - http://pcex.co.kr/down/pcexAProj2.cab O16 - DPF: {B7F6F3B0-F5D3-4C9D-A610-1619059CF55A} (ClickPopWeb Control) - http://activexdown.paran.com/paranactiv … ckPop2.cab O16 - DPF: {BDD22343-1DF0-4983-947F-7604DD9838F8} (MagicController Control) - http://www.ebsi.co.kr/ebs/ActiveX/MagicSpeeder.cab O16 - DPF: {BF628973-1E86-4D0E-B42C-EDDECFFABDBC} (Bugs AoD Class) - http://player.bugs.co.kr/install/BugsLoader20041018.cab O16 - DPF: {C8F26FC9-9A44-4F32-93B3-8BDAFBFA8F25} (CodeKillerCtl Class) - http://www.codekiller.co.kr/activex/codekiller.cab O16 - DPF: {CFCB7308-782F-11D4-BE27-000102598CE4} (NPX Control) - http://update.nprotect.net/nprotect/module/npx.cab O16 - DPF: {D272260F-D335-4198-B0E5-B22F61141D79} (EBSiPlayerLibrary Control) - http://www.ebsi.co.kr/ebs/ActiveX/EBSiPlayer.cab O16 - DPF: {D2A4C311-F608-4E0E-BBFE-6B25E31AC15B} (Kdfense5 Control) - http://kings.cachenet.com/kdf5106/kdfense5.cab O16 - DPF: {D6FCA8ED-4715-43DE-9BD2-2789778A5B09} - http://update.nprotect.net/keycrypt/dla/npkcx.cab O16 - DPF: {D78E73EC-8D2A-4214-B3B3-EA85EA7291FE} (adantX Control) - http://ad-anti.com/down/adantProjx.cab O16 - DPF: {D96D2F74-0B74-47D2-964F-B67E9F69F1CD} (CongnamulMap4Asp Control) - http://map.empas.com/activex/CongnamulMap4Asp_V23.cab O16 - DPF: {D99A5708-3564-4E75-8DE5-3CE1B28C3AAF} (ZAquaSetup Class) - http://vod.pruna.com/AquaPlayer/Dist/AquaSetup.cab O16 - DPF: {DA4BF4BC-5BD8-452C-A1DC-AC119FD3153F} (Image Class) - http://img2.encar.com/common/cab/photoX.cab O16 - DPF: {DB04FBA0-F5B1-4105-BC71-401CF25369BB} (CjInst Control) - http://211.47.66.121:7464/Result1/p13/CjInst.cab O16 - DPF: {DCD7F1D9-8E57-45F8-8C0C-4400CD84C8BF} (Imhtml Control) - http://activexdown.paran.com/paranactiv … imhtml.cab O16 - DPF: {DF472C86-9DD8-46C4-86D3-4A861DE82650} (LiveUpdate Class) - http://www.seemedia.co.kr/products/lu/s … pdater.cab O16 - DPF: {E78928A6-3D2A-4BF7-A100-F3FBAA351B49} (KvpIspCtlD Control) - https://www.vpay.co.kr/kvpfiles/KVPISPCTLD.cab O16 - DPF: {EA0995BF-45DD-4DB0-ADD5-A39C37397841} (ShbAutoTrustSite Control) - http://image.shinhan.com/bank/etc/Trust … tSiteX.cab O16 - DPF: {EACD6BE5-C0EE-4909-9B71-B2807C8A245C} (JukeOn Login Control) - http://dl.jukeon.co.kr/jukeon/jukeon2/2 … keonax.cab O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: Windows update (msupdate) - Unknown owner - C:\WINDOWS\System32\msupdate.exe (file missing) O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe