Prosze o sprawdzenie loga


(Kosz201) #1

prosze sprawdzcie mi loga bo co chwila pisze aby zamykać proces bo jest bład

Logfile of HijackThis v1.98.2

Scan saved at 16:11:17, on 2005-01-23

Platform: Windows XP SP2(WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:

D:\WXP\System32\smss.exe

D:\WXP\system32\csrss.exe

D:\WXP\system32\winlogon.exe

D:\WXP\system32\services.exe

D:\WXP\system32\lsass.exe

D:\WXP\system32\svchost.exe

D:\WXP\System32\svchost.exe

D:\WXP\System32\svchost.exe

D:\WXP\System32\svchost.exe

D:\WXP\Explorer.EXE

D:\WXP\system32\spoolsv.exe

D:\WXP\System32\scvhosuing.exe

D:\WXP\System32\wualcts.exe

D:\PROGRA~1\Toolbar\PIB.exe

D:\PROGRA~1\Toolbar\TBPS.exe

D:\PROGRA~1\PESTPA~1\PPControl.exe

D:\PROGRA~1\PESTPA~1\CookiePatrol.exe

D:\WXP\System32\crcss.exe

D:\WXP\System32\services32.exe

D:\WXP\System32\rundll32.exe

D:\WXP\System32___r.exe

D:\WXP\System32\trass.exe

D:\temp\salm.exe

D:\Program Files\AdStatus Service\AdStatServ.exe

D:\Program Files\AdStatus Service\AdStatKeep.exe

D:\WXP\System32\SahAgent.exe

D:\WXP\System32\RunDLL32.exe

D:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

D:\WXP\System32\wuauclt.exe

D:\PROGRA~1\ICQ\ICQ.exe

D:\Documents and Settings\michał\Pulpit\HijackThis.exe

D:\WXP\System32\dwwin.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: Search Relevancy - {1D7E3B41-23CE-469B-BE1B-A64B877923E1} - D:\PROGRA~1\SEARCH~1\SEARCH~1.DLL

O2 - BHO: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - (no file)

O3 - Toolbar: &Search Toolbar - {339BB23F-A864-48C0-A59F-29EA915965EC} - D:\PROGRA~1\Toolbar\toolbar.dll

O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WXP\System32\NvCpl.dll,NvStartup

O4 - HKLM..\Run: [PPMemCheck] D:\PROGRA~1\PESTPA~1\PPMemCheck.exe

O4 - HKLM..\Run: [PestPatrol Control Center] D:\PROGRA~1\PESTPA~1\PPControl.exe

O4 - HKLM..\Run: [CookiePatrol] D:\PROGRA~1\PESTPA~1\CookiePatrol.exe

O4 - HKLM..\Run: [PCprot] crcss.exe

O4 - HKLM..\Run: [system32.exe] services32.exe

O4 - HKLM..\Run: [TBPS] D:\PROGRA~1\Toolbar\TBPS.exe

O4 - HKLM..\Run: [Microsoft Synchronization Manager] ___synmgr.exe

O4 - HKLM..\Run: [Microsoft Windows DHCP] D:\WXP\System32___r.exe

O4 - HKLM..\Run: [Windows Sound Manager] SndMon32.exe

O4 - HKLM..\Run: [Task Help] wualcts.exe

O4 - HKLM..\Run: [Microsoft Legacy Device] trass.exe

O4 - HKLM..\Run: [Microsoft Java Virtual Machine] MsConfiG.exe

O4 - HKLM..\Run: [starter] scvhosuing.exe

O4 - HKLM..\Run: [salm] d:\temp\salm.exe

O4 - HKLM..\Run: [AdStatus Service] D:\Program Files\AdStatus Service\AdStatServ.exe

O4 - HKLM..\Run: [bkf] D:\bkf.exe

O4 - HKLM..\Run: [sAHAgent] D:\WXP\System32\SahAgent.exe

O4 - HKLM..\Run: [Mirabilis ICQ] D:\PROGRA~1\ICQ\ICQNet.exe

O4 - HKLM..\RunServices: [system32.exe] services32.exe

O4 - HKLM..\RunServices: [PCprot] crcss.exe

O4 - HKLM..\RunServices: [Microsoft Synchronization Manager] ___synmgr.exe

O4 - HKLM..\RunServices: [Microsoft Legacy Device] trass.exe

O4 - HKLM..\RunServices: [starter] scvhosuing.exe

O4 - HKLM..\RunServices: [Windows Sound Manager] SndMon32.exe

O4 - HKLM..\RunServices: [Task Help] wualcts.exe

O4 - HKLM..\RunServices: [Microsoft Java Virtual Machine] MsConfiG.exe

O4 - HKLM..\RunOnce: [TBPS] D:\PROGRA~1\Toolbar\TBPS.exe /boot

O4 - HKLM..\RunOnce: [Task Help] wualcts.exe

O4 - HKLM..\RunOnce: [starter] scvhosuing.exe

O4 - HKLM..\RunOnce: [Windows Sound Manager] SndMon32.exe

O4 - HKLM..\RunOnce: [Microsoft Java Virtual Machine] MsConfiG.exe

O4 - HKCU..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit

O4 - HKCU..\Run: [spySweeper] "D:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0

O4 - HKCU..\Run: [Windows Sound Manager] SndMon32.exe

O4 - HKCU..\Run: [Microsoft Java Virtual Machine] MsConfiG.exe

O4 - HKCU..\Run: [Task Help] wualcts.exe

O4 - HKCU..\Run: [Microsoft Synchronization Manager] ___synmgr.exe

O4 - HKCU..\Run: [starter] scvhosuing.exe

O4 - HKCU..\RunOnce: [Task Help] wualcts.exe

O4 - HKCU..\RunOnce: [Microsoft Java Virtual Machine] MsConfiG.exe

O4 - HKCU..\RunOnce: [starter] scvhosuing.exe

O4 - HKCU..\RunOnce: [Windows Sound Manager] SndMon32.exe

O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - D:\PROGRA~1\ICQ\ICQ.exe

O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - D:\PROGRA~1\ICQ\ICQ.exe

O17 - HKLM\System\CCS\Services\Tcpip..{925F6B6B-DB58-47A0-833A-28FE89636ED4}: NameServer = 194.204.152.34 217.98.63.164


(Kuz5) #2

Bardzo grubo sie mylisz.

Do usunięcia:

D:\WXP\System32___r.exe

D:\temp\salm.exe

O2 - BHO: Search Relevancy - {1D7E3B41-23CE-469B-BE1B-A64B877923E1} - D:\PROGRA~1\SEARCH~1\SEARCH~1.DLL

O2 - BHO: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - (no file)

O4 - HKLM..\Run: [TBPS] D:\PROGRA~1\Toolbar\TBPS.exe

O4 - HKLM..\Run: [Windows Sound Manager] SndMon32.exe

O4 - HKLM..\Run: [salm] d:\temp\salm.exe

O4 - HKLM..\RunServices: [Windows Sound Manager] SndMon32.exe

O4 - HKLM..\RunOnce: [TBPS] D:\PROGRA~1\Toolbar\TBPS.exe /boot

O4 - HKLM..\RunOnce: [Windows Sound Manager] SndMon32.exe

O4 - HKCU..\Run: [Windows Sound Manager] SndMon32.exe

O4 - HKCU..\RunOnce: [Windows Sound Manager] SndMon32.exe

Poczekaj na potwierdzenie mojej wypowiedzi.

Zrób update IE


(Dragonlnx) #3

Narazie nie usuwaj nic z loga ...

Po pierwsze gdzie jest AntyWirus :>

Przeskanuj:

..::mks_vir::..

http://skaner.mks.com.pl

..::GeCAD (RAV)::..

http://www.ravantivirus.com/scan/

..::F-Secure::..

http://support.f-secure.com/enu/home/ols.shtml

..::BitDefender::..

http://www.bitdefender.com/scan/licence.php

..::Symantec {Norton}::..

http://security.symantec.com

..::HouseCall::..

http://pl.trendmicro-europe.com/consume ... ll_pre.php

I daj log...

[www.windowsupdate.com]