Proszę o sprawdzenie loga (samoczynny ruch myszy - trojan?)

[Marcin16 (Sokopuesta)]

Kursor porusza się samoistnie, kilka minut po wyłączeniu komputer zaczyna się uruchamiać. Podejrzenie trojana.

Przepraszam za brak “:” po “C”.

Logfile of HijackThis v1.99.1 Scan saved at 17:59:07, on 2006-10-03 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: CWINDOWS\System32\smss.exe CWINDOWS\system32\winlogon.exe CWINDOWS\system32\services.exe CWINDOWS\system32\lsass.exe CWINDOWS\System32\Ati2evxx.exe CWINDOWS\system32\svchost.exe CWINDOWS\System32\svchost.exe CProgram Files\Common Files\Symantec Shared\ccSetMgr.exe CProgram Files\Common Files\Symantec Shared\SNDSrvc.exe CProgram Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe CProgram Files\Common Files\Symantec Shared\ccEvtMgr.exe CWINDOWS\system32\Ati2evxx.exe CWINDOWS\Explorer.EXE CWINDOWS\system32\spoolsv.exe CProgram Files\ATI Technologies\ATI Control Panel\atiptaxx.exe CWINDOWS\system32\RunDll32.exe CProgram Files\Winamp\winampa.exe CProgram Files\Lexmark 5200 series\lxbtbmgr.exe CProgram Files\Java\jre1.5.0_07\bin\jusched.exe CProgram Files\Lexmark 5200 series\lxbtbmon.exe CProgram Files\Common Files\Symantec Shared\ccApp.exe CWINDOWS\system32\ctfmon.exe CProgram Files\Creative\MediaSource\Detector\CTDetect.exe CProgram Files\BitComet\BitComet.exe CProgram Files\Alwil Software\Avast4\aswUpdSv.exe CProgram Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe CWINDOWS\system32\CTsvcCDA.EXE CProgram Files\Norton AntiVirus\navapsvc.exe CProgram Files\Norton AntiVirus\IWP\NPFMntor.exe CWINDOWS\System32\svchost.exe CProgram Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe CWINDOWS\system32\wuauclt.exe CProgram Files\Gadu-Gadu\gg.exe CProgram Files\Winamp\winamp.exe CWINDOWS\system32\drwtsn32.exe CWINDOWS\system32\drwtsn32.exe CPROGRA~1\MOZILL~1\FIREFOX.EXE CDocuments and Settings\Sałaty\Pulpit\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - CProgram Files\Adobe\Acrobat 5.0 CE\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - CProgram Files\Java\jre1.5.0_07\bin\ssv.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - CProgram Files\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - CProgram Files\Norton AntiVirus\NavShExt.dll O4 - HKLM…\Run: [ATIPTA] CProgram Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM…\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM…\Run: [CM-SmWizard] CWINDOWS\System\SmWizard.exe O4 - HKLM…\Run: [avast!] CPROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM…\Run: [WinampAgent] CProgram Files\Winamp\winampa.exe O4 - HKLM…\Run: [NeroCheck] CWINDOWS\System32\NeroCheck.exe O4 - HKLM…\Run: [Lexmark 5200 series] “CProgram Files\Lexmark 5200 series\lxbtbmgr.exe” O4 - HKLM…\Run: [sunJavaUpdateSched] CProgram Files\Java\jre1.5.0_07\bin\jusched.exe O4 - HKLM…\Run: [spik] CProgram Files\Spik\Spik.exe -autostart O4 - HKLM…\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM…\Run: [ccApp] “CProgram Files\Common Files\Symantec Shared\ccApp.exe” O4 - HKCU…\Run: [CTFMON.EXE] CWINDOWS\system32\ctfmon.exe O4 - HKCU…\Run: [Creative Detector] CProgram Files\Creative\MediaSource\Detector\CTDetect.exe /R O4 - HKCU…\Run: [skype] “CProgram Files\Skype\Phone\Skype.exe” /nosplash /minimized O4 - Startup: BitComet.lnk = CProgram Files\BitComet\BitComet.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - CProgram Files\Java\jre1.5.0_07\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - CProgram Files\Java\jre1.5.0_07\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - CProgram Files\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - CProgram Files\Messenger\msmsgs.exe O18 - Protocol: wpmsg - {2E0AC5A0-3597-11D6-B3ED-0001021DC1C3} - CProgram Files\Spik\url_wpmsg.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - CProgram Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - Unknown owner - CWINDOWS\System32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - CWINDOWS\system32\ati2sgag.exe O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - CProgram Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: avast! Antivirus - Unknown owner - CProgram Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - CProgram Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - CProgram Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - CProgram Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - CProgram Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - CProgram Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - CWINDOWS\system32\CTsvcCDA.EXE O23 - Service: LiveUpdate - Symantec Corporation - CPROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: lxbt_device - Lexmark International, Inc. - CWINDOWS\System32\lxbtcoms.exe O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - CProgram Files\Norton AntiVirus\navapsvc.exe O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - CProgram Files\Norton AntiVirus\IWP\NPFMntor.exe O23 - Service: SAVScan - Symantec Corporation - CProgram Files\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - CPROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - CProgram Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - CProgram Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Symantec Core LC - Symantec Corporation - CProgram Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

[Myszak (Myszonus)]

O4 - HKLM…\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

Możesz skasować. Ogólnie jest ok.

[Bieniol (Bbieniol)]

Masz dwa antywirusy (Norton i avast) - odinstaluj jednego, bo sie będą gryzły

[Gutek]

Zastosuj się do tego Tematu i zmień tytuł tematu na konkretny inaczej KOSZ

Pozdrawiam Gutek2222