Prosze o sprawdzenie loga

[genertel (Mis10)]

Logfile of HijackThis v1.99.1 Scan saved at 07:18:07, on 2006-02-02 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE D:\INSTALKI\programy\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O1 - Hosts: 17.145.117.11 d-ru-1f.kaspersky-labs.com O1 - Hosts: 17.145.117.11 d-ru-1h.kaspersky-labs.com O1 - Hosts: 17.145.117.11 d-ru-2f.kaspersky-labs.com O1 - Hosts: 17.145.117.11 d-ru-2h.kaspersky-labs.com O1 - Hosts: 17.145.117.11 d-eu-2f.kaspersky-labs.com O1 - Hosts: 17.145.117.11 d-eu-2h.kaspersky-labs.com O1 - Hosts: 17.145.117.11 d-eu-1f.kaspersky-labs.com O1 - Hosts: 17.145.117.11 d-eu-1h.kaspersky-labs.com O1 - Hosts: 17.145.117.11 d-us-1f.kaspersky-labs.com O1 - Hosts: 17.145.117.11 d-us-1h.kaspersky-labs.com O1 - Hosts: 17.145.117.11 downloads1.kaspersky.ru O1 - Hosts: 17.145.117.11 downloads2.kaspersky.ru O1 - Hosts: 17.145.117.11 downloads3.kaspersky.ru O1 - Hosts: 17.145.117.11 downloads4.kaspersky.ru O1 - Hosts: 17.145.117.11 downloads5.kaspersky.ru O1 - Hosts: 17.145.117.11 http://www.kaspersky.ru O1 - Hosts: 17.145.117.11 kaspersky.ru O1 - Hosts: 17.145.117.11 kaspersky-labs.com O1 - Hosts: 17.145.117.11 http://www.kaspersky-labs.com O1 - Hosts: 82.146.42.123 lloydstsb.co.uk O1 - Hosts: 82.146.42.123 online.lloydstsb.co.uk O1 - Hosts: 82.146.42.123 http://www.lloydstsb.co.uk O1 - Hosts: 82.146.42.123 http://www.lloydstsb.com O1 - Hosts: 82.146.42.123 personal.barclays.co.uk O1 - Hosts: 82.146.42.123 barclays.co.uk O1 - Hosts: 82.146.42.123 ibank.barclays.co.uk O1 - Hosts: 82.146.42.123 http://www.barclays.co.uk O1 - Hosts: 82.146.42.123 http://www.nwolb.com O1 - Hosts: 82.146.42.123 nwolb.com O1 - Hosts: 82.146.42.123 hsbc.co.uk O1 - Hosts: 82.146.42.123 http://www.hsbc.co.uk O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM…\Run: [spools Service Controller] C:\WINDOWS\system32\BcdHPlpP.exe O4 - HKLM…\Run: [C] C:\WINDOWS\system32\mmsvc32.exe O4 - HKLM…\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM…\Run: [KAVPersonal50] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe /minimize O4 - HKLM…\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM…\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe O4 - HKLM…\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKCU…\Run: [Gadu-Gadu] “D:\Program Files\Gadu-Gadu\gg.exe” /tray O4 - HKCU…\Run: [eMuleAutoStart] D:\Program Files\eMule\emule.exe -AutoStart O4 - Global Startup: Kaspersky Anti-Hacker.lnk = C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra ‘Tools’ menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O16 - DPF: {41ACD49D-1974-791A-0981-AA9872721044} (Ganymede Board Games) - http://67.15.101.3/g_bin/pl/boards_2_0_0_21.cab O16 - DPF: {E95CF138-A587-4C54-8175-3AD80997CB14} (GameDesire Soccer) - http://67.15.101.3/g_bin/pl/soccer_2_0_0_8.cab O16 - DPF: {FDDBE2B8-6602-4AD8-946D-94C5A32FA6C5} (GameDesire Snooker) - http://67.15.101.3/g_bin/pl/snooker_2_0_0_23.cab O17 - HKLM\System\CCS\Services\Tcpip…{D8887032-FC2F-4253-B67A-1008D6AE03B7}: NameServer = 194.204.159.1,194.204.152.34 O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe

[Gutek]

O1 - Hosts: 17.145.117.11 d-ru-1f.kaspersky-labs.com O1 - Hosts: 17.145.117.11 d-ru-1h.kaspersky-labs.com O1 - Hosts: 17.145.117.11 d-ru-2f.kaspersky-labs.com O1 - Hosts: 17.145.117.11 d-ru-2h.kaspersky-labs.com O1 - Hosts: 17.145.117.11 d-eu-2f.kaspersky-labs.com O1 - Hosts: 17.145.117.11 d-eu-2h.kaspersky-labs.com O1 - Hosts: 17.145.117.11 d-eu-1f.kaspersky-labs.com O1 - Hosts: 17.145.117.11 d-eu-1h.kaspersky-labs.com O1 - Hosts: 17.145.117.11 d-us-1f.kaspersky-labs.com O1 - Hosts: 17.145.117.11 d-us-1h.kaspersky-labs.com O1 - Hosts: 17.145.117.11 downloads1.kaspersky.ru O1 - Hosts: 17.145.117.11 downloads2.kaspersky.ru O1 - Hosts: 17.145.117.11 downloads3.kaspersky.ru O1 - Hosts: 17.145.117.11 downloads4.kaspersky.ru O1 - Hosts: 17.145.117.11 downloads5.kaspersky.ru O1 - Hosts: 17.145.117.11 http://www.kaspersky.ru O1 - Hosts: 17.145.117.11 kaspersky.ru O1 - Hosts: 17.145.117.11 kaspersky-labs.com O1 - Hosts: 17.145.117.11 http://www.kaspersky-labs.com O1 - Hosts: 82.146.42.123 lloydstsb.co.uk O1 - Hosts: 82.146.42.123 online.lloydstsb.co.uk O1 - Hosts: 82.146.42.123 http://www.lloydstsb.co.uk O1 - Hosts: 82.146.42.123 http://www.lloydstsb.com O1 - Hosts: 82.146.42.123 personal.barclays.co.uk O1 - Hosts: 82.146.42.123 barclays.co.uk O1 - Hosts: 82.146.42.123 ibank.barclays.co.uk O1 - Hosts: 82.146.42.123 http://www.barclays.co.uk O1 - Hosts: 82.146.42.123 http://www.nwolb.com O1 - Hosts: 82.146.42.123 nwolb.com O1 - Hosts: 82.146.42.123 hsbc.co.uk O1 - Hosts: 82.146.42.123 http://www.hsbc.co.uk O4 - HKLM…\Run: [spools Service Controller] C:\WINDOWS\system32\BcdHPlpP.exe O4 - HKLM…\Run: [C] C:\WINDOWS\system32\mmsvc32.exe O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra ‘Tools’ menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

w trybie awaryjnym pliki na czerwono ręcznie a wpisy hijackiem

[genertel (Mis10)]

Gutek2222 to co mam zrobic wejdz na genertel i napisz pokolei co mam zrobic

[Gutek]

1. Zastartować do trybu awaryjnego bez internetu(opis TU).

2. Zaznaczyć wskazane wpisy w Hijacku i kliknąć Fix checked. Wpisy zostaną usunięte.

3. Skasować z dysku pliki i foldery, które podkreśliłem na czerwono

4. Dokończyć skanerami online - Scanery do wyboru

5. Pokazać nowy log

[genertel (Mis10)]

Logfile of HijackThis v1.99.1 Scan saved at 17:22:16, on 2006-02-02 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE D:\INSTALKI\programy\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/ O4 - HKLM…\Run: [KAVPersonal50] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe /minimize O4 - HKCU…\Run: [Gadu-Gadu] “D:\Program Files\Gadu-Gadu\gg.exe” /tray O17 - HKLM\System\CCS\Services\Tcpip…{D8887032-FC2F-4253-B67A-1008D6AE03B7}: NameServer = 194.204.159.1,194.204.152.34 O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe

[Gutek]

Jest Ok