Proszę o sprawdzenie loga! Małgos

[Malgos1 (Małgos)]

ArchiveData(auto-quarantine- 2005-12-23 12-28-54.bckp)

Referencefile : SE1R82 19.12.2005

======================================================

MRU LIST

»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

obj[0]=MRU FileReference : F:\Documents and Settings\Malgos\recent\Desktop.ini

obj[1]=MRU FileReference : F:\Documents and Settings\Malgos\recent\hs_err_pid1216.lnk

obj[3]=MRU RegReference : software\microsoft\direct3d\mostrecentapplication name

obj[4]=MRU RegReference : software\microsoft\direct3d\mostrecentapplication name

obj[5]=MRU RegReference : S-1-5-21-1844237615-884357618-725345543-1003\software\microsoft\windows\currentversion\explorer\recentdocs.log

obj[6]=MRU RegReference : S-1-5-21-1844237615-884357618-725345543-1003\software\microsoft\internet explorer\typedurls

POSSIBLE BROWSER HIJACK ATTEMPT

»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

obj[6]=Dane rejestru : S-1-5-21-1844237615-884357618-725345543-1003\Software\Microsoft\Internet Explorer\Main “Start Page”

TRACKING COOKIE

»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

obj[7]=IECache Entry : Cookie:malgos@adserver.o2.pl/

Ad-aware ciagle wywala a to sie pojawia…Pozdrawiam

[kuz5]

Wklej loga HijackThis

[Malgos1 (Małgos)]

Logfile of HijackThis v1.99.1 Scan saved at 17:08:12, on 2005-12-24 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: F:\WINDOWS\System32\smss.exe F:\WINDOWS\system32\winlogon.exe F:\WINDOWS\system32\services.exe F:\WINDOWS\system32\lsass.exe F:\WINDOWS\system32\svchost.exe F:\WINDOWS\System32\svchost.exe F:\WINDOWS\Explorer.EXE F:\WINDOWS\system32\spoolsv.exe F:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe F:\Program Files\Norton Utilities\NPROTECT.EXE F:\WINDOWS\system32\nvsvc32.exe F:\Program Files\Kerio\Personal Firewall\persfw.exe F:\Program Files\Speed Disk\nopdb.exe F:\WINDOWS\System32\svchost.exe F:\WINDOWS\system32\RunDll32.exe F:\Program Files\Java\jre1.5.0_06\bin\jusched.exe F:\Program Files\Winamp\winampa.exe F:\LifeView FlyVideo\RecSche.exe F:\WINDOWS\system32\ctfmon.exe F:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe F:\PROGRA~1\Lavasoft\AD-AWA~3\Ad-Watch.exe F:\Program Files\Kalendarz XP\Kalendarz.exe F:\Program Files\Norton Utilities\SYSDOC32.EXE F:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE F:\Program Files\Internet Explorer\iexplore.exe F:\Program Files\WinRAR\WinRAR.exe F:\DOCUME~1\Malgos\USTAWI~1\Temp\Rar$EX00.203\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://onet.pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O4 - HKLM…\Run: [siSUSBRG] F:\WINDOWS\SiSUSBrg.exe O4 - HKLM…\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM…\Run: [sunJavaUpdateSched] F:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM…\Run: [WinampAgent] F:\Program Files\Winamp\winampa.exe O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM…\Run: [nwiz] nwiz.exe /install O4 - HKLM…\Run: [RecSche] F:\LifeView FlyVideo\RecSche.exe O4 - HKLM…\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe O4 - HKLM…\Run: [KAVPersonal50] “F:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kav.exe” /minimize O4 - HKLM…\Run: [Ad-watch] “F:\Program Files\Lavasoft\Ad-aware 6\Ad-watch.exe” O4 - HKCU…\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe O4 - HKCU…\Run: [ccleaner] “F:\Program Files\CCleaner\ccleaner.exe” /AUTO O4 - HKCU…\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] “F:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe” O4 - HKCU…\Run: [MSMSGS] “F:\Program Files\Messenger\MSMSGS.EXE” /background O4 - HKCU…\Run: [AWMON] “F:\PROGRA~1\Lavasoft\AD-AWA~3\Ad-Watch.exe” O4 - Global Startup: Adobe Reader Speed Launch.lnk = F:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = F:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE O4 - Global Startup: Kalendarz XP.lnk = F:\Program Files\Kalendarz XP\Kalendarz.exe O4 - Global Startup: Norton System Doctor.lnk = F:\Program Files\Norton Utilities\SYSDOC32.EXE O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - F:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe O23 - Service: kavsvc - Kaspersky Lab - F:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kavsvc.exe O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - F:\Program Files\Norton Utilities\NPROTECT.EXE O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\system32\nvsvc32.exe O23 - Service: Kerio Personal Firewall (PersFw) - Kerio Technologies - F:\Program Files\Kerio\Personal Firewall\persfw.exe O23 - Service: Speed Disk service - Symantec Corporation - F:\Program Files\Speed Disk\nopdb.exe

dziękuje

====================================

Uwaga: Jak wklejasz loga to obejmuj go znacznikiem (tagiem) CODE lub QUOTE

Proponuje poczytać TEN temat i zobacz jaka jest prośba do userów wklejających loga.

Pozdrawiam kuz5

[Gutek]

Czysto - zainstaluj Ewido http://www.searchengines.pl/phpbb203/lo … 16762.html -zrób update i przeleć kompa