Service: COM+ Messages nie mogę wyłaczyć

[betonik77 (Olimpiaolszanica)]

Logfile of HijackThis v1.99.1 Scan saved at 21:32:44, on 2005-01-09 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\Explorer.EXE D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe E:\Program Files\Anti-Blaxx\Anti-Blaxx.exe C:\WINDOWS\soundman.exe C:\Program Files\winupdates\winupdates.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe D:\Program Files\Winamp\winampa.exe C:\WINDOWS\system32\p2pnetworking.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\wscntfy.exe C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\taskmgr.exe E:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Common Files{28BD3BB2-05BA-1045-0419-020820020030}\Update.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Beton\Pulpit\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O1 - Hosts: 80.190.241.30 home.edonkey.com O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file) O4 - HKLM…\Run: [Anti-Blaxx Manager] e:\Program Files\Anti-Blaxx\Anti-Blaxx.exe O4 - HKLM…\Run: [soundMan] soundman.exe O4 - HKLM…\Run: [winupdates] C:\Program Files\winupdates\winupdates.exe /auto O4 - HKLM…\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM…\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM…\Run: [WinampAgent] D:\Program Files\Winamp\winampa.exe O4 - HKLM…\Run: [p2p networking] p2pnetworking.exe O4 - HKLM…\Run: [{28BD3BB2-05BA-1045-0419-020820020030}] “C:\Program Files\Common Files{28BD3BB2-05BA-1045-0419-020820020030}\Update.exe” mc-110-12-0000137 O4 - HKLM…\Run: [{28BD3BB2-05BB-1045-0419-020820020030}] “C:\Program Files\Common Files{28BD3BB2-05BB-1045-0419-020820020030}\Update.exe” mc-110-12-0000137 O4 - HKLM…\RunServices: [p2p networking] p2pnetworking.exe O4 - HKCU…\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU…\Run: [MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background O4 - HKCU…\Run: [ares] “D:\Program Files\Ares\Ares.exe” -h O4 - HKCU…\Run: [AQQ] D:\PROGRA~1\Wapster\AQQ\AQQ.exe O4 - HKCU…\Run: [Gadu-Gadu] “E:\Program Files\Gadu-Gadu\gg.exe” /tray O4 - HKCU…\RunOnce: [DeleteDLL] cmd.exe /c del C:\PROGRA~1\COMMON~1{38BD3~1\Bar888.dll > nul O4 - HKCU…\RunOnce: [DeleteExe] cmd.exe C:\WINDOWS\system32\cmd.exe /c del C:\PROGRA~1\COMMON~1{38BD3~1\UNINST~1.EXE > nul O4 - Global Startup: taskmgr.exe O8 - Extra context menu item: &Download with &DAP - D:\Program Files\DAP\dapextie.htm O8 - Extra context menu item: Download &all with DAP - D:\Program Files\DAP\dapextie2.htm O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} (MediaGatewayX) - http://static.zangocash.com/cab/180solu … e-c567.cab O23 - Service: COM+ Messages - Unknown owner - C:\WINDOWS\system32\svchosts.exe" -e mc-110-12-0000137 (file missing) O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

[Gutek]

O1 - Hosts: 80.190.241.30 home.edonkey.com O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file) O4 - HKLM…\Run: [winupdates] C:\Program Files\winupdates\winupdates.exe /auto O4 - HKLM…\Run: [p2p networking] p2pnetworking.exe O4 - HKLM…\Run: [{28BD3BB2-05BA-1045-0419-020820020030}] “C:\Program Files\Common Files{28BD3BB2-05BA-1045-0419-020820020030}\Update.exe” mc-110-12-0000137 O4 - HKLM…\Run: [{28BD3BB2-05BB-1045-0419-020820020030}] “C:\Program Files\Common Files{28BD3BB2-05BB-1045-0419-020820020030}\Update.exe” mc-110-12-0000137 O4 - HKLM…\RunServices: [p2p networking] p2pnetworking.exe O4 - HKCU…\RunOnce: [DeleteDLL] cmd.exe /c del C:\PROGRA~1\COMMON~1{38BD3~1\Bar888.dll > nul O4 - HKCU…\RunOnce: [DeleteExe] cmd.exe C:\WINDOWS\system32\cmd.exe /c del C:\PROGRA~1\COMMON~1{38BD3~1\UNINST~1.EXE > nul O4 - Global Startup: taskmgr.exe O16 - DPF: {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} (MediaGatewayX) - http://static.zangocash.com/cab/180solu … e-c567.cab O23 - Service: COM+ Messages - Unknown owner - C:\WINDOWS\system32\ svchosts.exe" -e mc-110-12-0000137 (file missing)

Start >>> Uruchom >>> services.msc >>> zatrzymaj i wyłącz COM+ Messages

1. Wyłączyć Przywracanie systemu w XP TU

2. Zastartować do trybu awaryjnego bez internetu(opis w linku wyżej).

3. Zaznaczyć wskazane wpisy w Hijacku i kliknąć Fix checked. Wpisy zostaną usunięte.

4. Skasować z dysku pliki i foldery, które podkreśliłem na czerwono

5. Dokończyć skanerami online - Skanery do wyboru

6. Pokazać nowe logi z SILENTA I HJT

Skan AVG Anti-Spyware 7.5 po update