Prosze O Sprawdzenie Loga Problem Z Reklamami

[nieobeznany (Dudi55555)]

Prosze O Sprawdzenie Loga. Problem Z Reklamami

Logfile of HijackThis v1.99.1 Scan saved at 20:36:17, on 2006-03-17 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\system32\rundll32.exe D:\WINDOWS\Explorer.EXE D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe D:\Program Files\cFosSpeed\spd.exe D:\WINDOWS\eHh4\command.exe D:\Program Files\Network Monitor\netmon.exe D:\PROGRA~1\Wanadoo\TaskbarIcon.exe D:\Program Files\cFosSpeed\cFosSpeed.exe D:\Program Files\SPAMfighter\SFAgent.exe C:\mousepad3.exe D:\Program Files\Gadu-Gadu\gg.exe D:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe D:\Program Files\Wanadoo\EspaceWanadoo.exe D:\Program Files\Wanadoo\ComComp.exe D:\Program Files\Wanadoo\Watch.exe D:\WINDOWS\system32\wuauclt.exe D:\Program Files\Internet Explorer\iexplore.exe D:\Documents and Settings\DuD\Pulpit\hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.findthewebsiteyouneed.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchbar.findthewebsiteyouneed.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.findthewebsiteyouneed.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbar.findthewebsiteyouneed.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada Plus wita Cie w Internecie O3 - Toolbar: UCmore XP - The Search Accelerator - {44BE0690-5429-47f0-85BB-3FFD8020233E} - D:\Program Files\TheSearchAccelerator\UCMTSAIE.dll (file missing) O4 - HKLM…\Run: [WOOWATCH] D:\PROGRA~1\Wanadoo\Watch.exe O4 - HKLM…\Run: [WOOTASKBARICON] D:\PROGRA~1\Wanadoo\TaskbarIcon.exe O4 - HKLM…\Run: [cFosSpeed] D:\Program Files\cFosSpeed\cFosSpeed.exe O4 - HKLM…\Run: [sPAMfighter Agent] “D:\Program Files\SPAMfighter\SFAgent.exe” update delay 60 O4 - HKLM…\Run: [spySweeper] “D:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe” /startintray O4 - HKLM…\Run: [keyboard] C:\keyboard3.exe O4 - HKLM…\Run: [mousepad] C:\mousepad3.exe O4 - HKLM…\Run: [newname] C:\newname3.exe O4 - HKCU…\Run: [Gadu-Gadu] “D:\Program Files\Gadu-Gadu\gg.exe” /tray O4 - Global Startup: DSLMON.lnk = D:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O16 - DPF: {2A781DED-C22D-4153-9812-CEA98A32981C} (GameDesire Makao) - http://67.15.101.3/g_bin/pl/cardsmakao_2_0_0_21.cab O16 - DPF: {42F2C9BA-614F-47C0-B3E3-ECFD34EED658} - http://promo.dollarrevenue.com/webmaste … ad117a.exe O16 - DPF: {631FF594-EC25-4CFF-B869-402DF294E1D6} (Instalator oprogramowania Onet.pl) - http://slimak.onet.pl/_m/kamerzysta/One … or012s.ocx O16 - DPF: {83AFB5CA-ED35-11D4-A452-0080C8D85045} (GameDesire Poker Games) - http://67.15.101.3/g_bin/pl/poker_2_0_0_39.cab O16 - DPF: {881290B9-F53C-4676-8DAF-3DBEFC297308} (GameDesire Makao) - http://67.15.101.3/g_bin/pl/makao_2_0_0_16.cab O16 - DPF: {BFA1F11D-3121-AFE1-4112-894323212DAC} (GameDesire Word Games) - http://67.15.101.3/g_bin/pl/words_2_0_0_38.cab O16 - DPF: {FDDBE2B8-6602-4AD8-946D-94C5A32FA6C1} (GameDesire Pool 8) - http://67.15.101.3/g_bin/pl/billard8_2_0_0_24.cab O17 - HKLM\System\CCS\Services\Tcpip…{F6E9E418-0894-4A31-A224-66AD57109FB1}: NameServer = 194.204.152.34 217.98.63.164 O20 - Winlogon Notify: policies - D:\WINDOWS\system32\cwb.dll O20 - Winlogon Notify: Themes - D:\WINDOWS\system32\m664lgjq16oe.dll (file missing) O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing) O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: cFosSpeed System Service (cFosSpeedS) - Unknown owner - D:\Program Files\cFosSpeed\spd.exe" -service (file missing) O23 - Service: Command Service (cmdService) - Unknown owner - D:\WINDOWS\eHh4\command.exe O23 - Service: Kerio Personal Firewall 4 (KPF4) - Unknown owner - D:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe (file missing) O23 - Service: Network Monitor - Unknown owner - D:\Program Files\Network Monitor\netmon.exe O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - D:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

Uwaga: Jestem Słaby Z wiedzy O Komputarach wiec Prosze Wszystko Dokładnie Tłumaczyć Co I Jak

[marcin1989 (Wieliczka Marcin)]

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.findthewebsiteyouneed.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchbar.findthewebsiteyouneed.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.findthewebsiteyouneed.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbar.findthewebsiteyouneed.com O3 - Toolbar: UCmore XP - The Search Accelerator - {44BE0690-5429-47f0-85BB-3FFD8020233E} - D:\Program Files\TheSearchAccelerator\UCMTSAIE.dll (file missing) O4 - HKLM…\Run: [keyboard] C:\keyboard3.exe O4 - HKLM…\Run: [mousepad] C:\mousepad3.exe O4 - HKLM…\Run: [newname] C:\newname3.exe O20 - Winlogon Notify: policies - D:\WINDOWS\system32\cwb.dll O20 - Winlogon Notify: Themes - D:\WINDOWS\system32\m664lgjq16oe.dll (file missing)

1. Wyłanczasz przywracanie sysa

2. Lecisz do awaryjnego

3. Fixujesz w hijacku wpisy

4. Pliki, foldery na czerwono usuwasz ręcznie

5. Daj loga jak będzie po wszystkim =]

Użyj Look2Me-Destroyer następnie dal loga z L2Mfix

[Gutek]

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.findthewebsiteyouneed.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchbar.findthewebsiteyouneed.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.findthewebsiteyouneed.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbar.findthewebsiteyouneed.com O3 - Toolbar: UCmore XP - The Search Accelerator - {44BE0690-5429-47f0-85BB-3FFD8020233E} - D:\Program Files\TheSearchAccelerator\UCMTSAIE.dll (file missing) O4 - HKLM…\Run: [keyboard] C:\keyboard3.exe O4 - HKLM…\Run: [mousepad] C:\mousepad3.exe O4 - HKLM…\Run: [newname] C:\newname3.exe O20 - Winlogon Notify: policies - D:\WINDOWS\system32\cwb.dll O20 - Winlogon Notify: Themes - D:\WINDOWS\system32\m664lgjq16oe.dll (file missing) O23 - Service: Command Service (cmdService) - Unknown owner - D:\WINDOWS\eHh4\command.exe O23 - Service: Network Monitor - Unknown owner - D:\Program Files\Network Monitor\netmon.exe

Start >>> Uruchom >>> services.msc >>> zatrzymaj i wyłącz Command Service i Network Monitor

1. Wyłączyć Przywracanie systemu w XP TU

2. Zastartować do trybu awaryjnego bez internetu(opis w linku wyżej).

3. Zaznaczyć wskazane wpisy w Hijacku i kliknąć Fix checked. Wpisy zostaną usunięte.

4. Skasować z dysku pliki i foldery, które podkreśliłem na czerwono

5. Dokończyć skanerami online - Scanery do wyboru

6. Pokazać nowy log

Użyj Look2Me-Destroyer.exe

Ściągnij l2mfix.exe i daj log nr 1 z narzędzia L2Mfix

Scan EWIDO po update - http://www.ewido.net/en/