Prosze o sprawdzenie loga

Alcapter · 30 Listopad 2006 20:48

Logfile of HijackThis v1.99.1

Scan saved at 21:47:37, on 2006-11-30

Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)


Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\LClock\LClock.exe

F:\INSTAL\Avast\ashDisp.exe

F:\INSTAL\Cursor\CursorXP.exe

F:\INSTAL\StatBar\StatBar.exe

F:\INSTAL\Winamp\Winamp.exe

F:\INSTAL\Avast\aswUpdSv.exe

F:\INSTAL\Avast\ashServ.exe

C:\WINDOWS\System32\svchost.exe

F:\INSTAL\Avast\ashMaiSv.exe

F:\INSTAL\Avast\ashWebSv.exe

H:\PROGRAMY\Programy\Do LOGA\hijackthis1.99.1\HijackThis.exe

F:\INSTAL\FireFox\firefox.exe


R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.bearshare.com/pl/

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.pl/

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.google.pl/search?q=%s

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza

O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL

O4 - HKLM\..\Run: [LClock] C:\Program Files\LClock\LClock.exe

O4 - HKLM\..\Run: [avast!] F:\INSTAL\Avast\ashDisp.exe

O4 - HKLM\..\Run: [jv16PT - Privacy Protector] F:\INSTAL\jv16 PowerTools 2006\jv16PT.exe -ExecTask "F:\INSTAL\jv16 PowerTools 2006\Tasks\_PrivacyProtector\Task.jvb"

O4 - HKCU\..\Run: [CursorXP] F:\INSTAL\Cursor\CursorXP.exe

O4 - HKCU\..\Run: [StatBar] F:\INSTAL\StatBar\StatBar.exe

O4 - HKCU\..\Run: [Kalendarz] F:\INSTAL\Kalendarz XP\Kalendarz.exe

O4 - HKCU\..\Run: [Winamp] F:\INSTAL\Winamp\Winamp.exe

O8 - Extra context menu item: &Clean Traces - F:\INSTAL\DAP\Privacy Package\dapcleanerie.htm

O8 - Extra context menu item: &Download with &DAP - F:\INSTAL\DAP\dapextie.htm

O8 - Extra context menu item: Download &all with DAP - F:\INSTAL\DAP\dapextie2.htm

O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://F:\INSTAL\Office\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\INSTAL\Office\OFFICE11\REFIEBAR.DLL

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - F:\INSTAL\Avast\aswUpdSv.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: avast! Antivirus - Unknown owner - F:\INSTAL\Avast\ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - F:\INSTAL\Avast\ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - F:\INSTAL\Avast\ashWebSv.exe" /service (file missing)

O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)

O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - F:\INSTAL\TuneUP\WinStylerThemeSvc.exe

adam9870 · 30 Listopad 2006 20:54

W trybie awaryjnym skasuj folder:

C:\Program Files** MyGlobalSearch**

a poniższy wpis usuń w hjt.

Po wykonaniu pokaż nowy log z hjt oraz SilentRunners.

Alcapter · 30 Listopad 2006 21:23

log z hjt:

Logfile of HijackThis v1.99.1

Scan saved at 22:21:03, on 2006-11-30

Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)


Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\LClock\LClock.exe

F:\INSTAL\Avast\ashDisp.exe

F:\INSTAL\Cursor\CursorXP.exe

F:\INSTAL\StatBar\StatBar.exe

F:\INSTAL\Avast\aswUpdSv.exe

F:\INSTAL\Avast\ashServ.exe

C:\WINDOWS\System32\svchost.exe

F:\INSTAL\Avast\ashMaiSv.exe

F:\INSTAL\Avast\ashWebSv.exe

F:\INSTAL\FireFox\firefox.exe

H:\PROGRAMY\Programy\Do LOGA\hijackthis1.99.1\HijackThis.exe


R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.bearshare.com/pl/

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.pl/

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.google.pl/search?q=%s

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza

O4 - HKLM\..\Run: [LClock] C:\Program Files\LClock\LClock.exe

O4 - HKLM\..\Run: [avast!] F:\INSTAL\Avast\ashDisp.exe

O4 - HKCU\..\Run: [CursorXP] F:\INSTAL\Cursor\CursorXP.exe

O4 - HKCU\..\Run: [StatBar] F:\INSTAL\StatBar\StatBar.exe

O4 - HKCU\..\Run: [Kalendarz] F:\INSTAL\Kalendarz XP\Kalendarz.exe

O4 - HKCU\..\Run: [Winamp] F:\INSTAL\Winamp\Winamp.exe

O8 - Extra context menu item: &Clean Traces - F:\INSTAL\DAP\Privacy Package\dapcleanerie.htm

O8 - Extra context menu item: &Download with &DAP - F:\INSTAL\DAP\dapextie.htm

O8 - Extra context menu item: Download &all with DAP - F:\INSTAL\DAP\dapextie2.htm

O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://F:\INSTAL\Office\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\INSTAL\Office\OFFICE11\REFIEBAR.DLL

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - F:\INSTAL\Avast\aswUpdSv.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: avast! Antivirus - Unknown owner - F:\INSTAL\Avast\ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - F:\INSTAL\Avast\ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - F:\INSTAL\Avast\ashWebSv.exe" /service (file missing)

O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)

O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - F:\INSTAL\TuneUP\WinStylerThemeSvc.exe

Joan · 30 Listopad 2006 21:48

Tu czysto, ale potrzebny jest jeszcze SilentRunners

Gutek · 30 Listopad 2006 22:24

Zastosuj się do tego Tematu i zmień tytuł tematu na konkretny inaczej KOSZ

Pozdrawiam Gutek2222