Proszę o sprawdzenie loga :)

[matik_p]

• Logfile of HijackThis v1.99.1

[musg]

usun

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\WITEKP~1\USTAWI~1\Temp\se.dll/spage.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\WITEKP~1\USTAWI~1\Temp\se.dll/spage.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank

R3 - URLSearchHook: (no name) - {30192F8D-0958-44E6-B54D-331FD39AC959} - (no file) F2 - REG:system.ini: Shell=Explorer.exe init32m.exe O2 - BHO: (no name) - {338E6551-9D65-7E94-DC07-63550AFB7D3A} - (no file) O2 - BHO: (no name) - {B6C74B86-4FE4-4AB7-B72E-923269DD0154} - C:\WINDOWS\system32\aace.dll (file missing) O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file) O3 - Toolbar: Search Bar - {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} - (no file) O3 - Toolbar: (no name) - {9EAC0102-5E61-2312-BC2D-4D54434D5443} - (no file)

dalej usuwasz

O4 - HKLM…\Run: [userFaultCheck] %systemroot%\system32\dumprep 0 -u

sciagasz

http://www.searchengines.pl/phpbb203/in … ost&id=459

i usuwasz

O15 - Trusted Zone: http://www.wapster.pl O15 - ProtocolDefaults: ‘http’ protocol is in My Computer Zone, should be Internet Zone

wywal jeszcze

O16 - DPF: {9EB320CE-BE1D-4304-A081-4B4665414BEF} (MediaTicketsInstaller Control) - http://www.mt-download.com/MediaTicketsInstaller.cab

[kuz5]

Wyczyść katalog TEMP

Start=>Uruchom=>%temp%=>I usuń wszystko co sie tam znajduje

Usun jeszcze to:

O18 - Filter: text/html - {A5607151-0059-4463-9161-CAC3F97441E7} - C:\WINDOWS\system32\aace.dll 

O18 - Filter: text/plain - {A5607151-0059-4463-9161-CAC3F97441E7} - C:\WINDOWS\system32\aace.dll

Kosmetyka: Start=>Uruchom=>Wpisz polecenie msconfig=>Zakładka Uruchamianie i odchacz:

O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto 

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

Jeżeli nie używasz Windows Messenger to go usuń:

Start=>Uruchom=>Wpisz polecenie

RunDll32 advpack.dll,LaunchINFSection %windir%\INF\msmsgs.inf,BLC.Remove

Lub programem Xp-AntiSpy PL