Prosze o sprawdzenie loga


(Kosz201) #1

Logfile of HijackThis v1.98.2

Scan saved at 11:22:38, on 2005-02-03

Platform: Windows XP (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:

C:\WIND\System32\smss.exe

C:\WIND\system32\winlogon.exe

C:\WIND\system32\services.exe

C:\WIND\system32\lsass.exe

C:\WIND\system32\svchost.exe

C:\WIND\System32\svchost.exe

C:\WIND\system32\spoolsv.exe

C:\Program Files\ewido\security suite\ewidoctrl.exe

C:\Program Files\ewido\security suite\ewidoguard.exe

C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\Program Files\Norton AntiVirus\navapsvc.exe

C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe

C:\WIND\System32\nvsvc32.exe

C:\PROGRA~1\AGNITUM\OUTPOS~1.0\outpost.exe

C:\WIND\Explorer.EXE

C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe

C:\Program Files\Webroot\Accelerate\accelerate.exe

C:\Program Files\cFosSpeed\cFosSpeed.exe

C:\program files\powerstrip\pstrip.exe

C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe

C:\WIND\System32\ctfmon.exe

C:\Program Files\AutoConnect\AutoConnect.exe

C:\Program Files\ActiveScreenLock\ActiveScreenLock.exe

C:\Program Files\Gadu-Gadu\gg.exe

C:\FRAPS\FRAPS.EXE

C:\WIND\System32\RUNDLL32.EXE

C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\WIND\System32\wuauclt.exe

C:\Program Files\Symantec\LiveUpdate\AUpdate.exe

C:\Documents and Settings\kowal\Ustawienia lokalne\Temp\Katalog tymczasowy 7 dla hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://szukaj.wp.pl

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank

O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll

O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll

O4 - HKLM..\Run: [speedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon

O4 - HKLM..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

O4 - HKLM..\Run: [Accelerate] C:\Program Files\Webroot\Accelerate\accelerate.exe /S

O4 - HKLM..\Run: [cFosSpeed] C:\Program Files\cFosSpeed\cFosSpeed.exe

O4 - HKLM..\Run: [PowerStrip] c:\program files\powerstrip\pstrip.exe

O4 - HKLM..\Run: [HPDAgent] C:\Program Files\Hide and Protect any Drives\HPDAgent.exe

O4 - HKLM..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe

O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WIND\System32\NvCpl.dll,NvStartup

O4 - HKLM..\Run: [nwiz] nwiz.exe /install

O4 - HKCU..\Run: [CTFMON.EXE] C:\WIND\System32\ctfmon.exe

O4 - HKCU..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe

O4 - HKCU..\Run: [ActiveScreenLock] C:\Program Files\ActiveScreenLock\ActiveScreenLock.exe /s

O4 - HKCU..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray

O4 - HKCU..\Run: [Fraps] C:\FRAPS\FRAPS.EXE

O4 - HKCU..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WIND\System32\NVMCTRAY.DLL,NvTaskbarInit

O4 - Startup: Neostrada TP.lnk = ?

O8 - Extra context menu item: Download with Star Downloader - C:\Program Files\Star Downloader\sdie.htm

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL

O17 - HKLM\System\CCS\Services\Tcpip..{1089FFE5-1E45-4EE3-8B8D-7C8D518F08A1}: NameServer = 194.204.152.34 217.98.63.164

O17 - HKLM\System\CS1\Services\Tcpip..{1089FFE5-1E45-4EE3-8B8D-7C8D518F08A1}: NameServer = 194.204.152.34 217.98.63.164


(Musg) #2

oprocz kosmetycznych poprawek log masz czysty.A gdzie masz jakiego SP?????????


(adpawl) #3

Czysto!

To można wyłączyć z autostartu : Start >> Uruchom: msconfig

[sunJavaUpdateSched] jusched.exe

[nwiz] nwiz.exe

ctfmon.exe -Panel sterowania >> Ustawienia regionalne >> Języki >> Detale >> Zaawansowane >> odznaczyć usługi tekstowe


(Kosz201) #4

nie mogezainstalować sp 2 an 1 bo nie mam orginała widnowsa.


(Damian) #5

:x :x


(boczi) #6

Możesz. Ale piratom nie pomagamy...


(Qbek50) #7

lektura do poduchy:

http://forum.dobreprogramy.pl/rules.php

:wink:


(fiesta) #8

I dlatego topic zamykam.