Sprawdzenie logu wolny net

Dla specjalistów Bezpieczeństwo
#1

od kilku 3-4 tygodni mam problem z pobieraniem mam neta 256i powinno mi pobierać z prędkością 32kb/s a pobiera 10 czasami 15kb/s. i prosze o sprawdzenie loga.

#2

usuń wpisy w hijacku, daj loga z SilentRunners :slight_smile:

#3

wpisy usunołem a to next log z silentrunners

"Silent Runners.vbs", revision R50, http://www.silentrunners.org/

Operating System: Windows 98

Output limited to non-default values, except where indicated by "{++}"



Startup items buried in registry:

---------------------------------


HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}

"Gadu-Gadu" = ""C:\PROGRAM FILES\GADU-GADU\GG.EXE" /tray" ["Gadu-Gadu S.A."]

"AutoConnect" = "C:\PROGRAM FILES\AUTOCONNECT\AUTOCONNECT.EXE" ["http://autoconnect.prv.pl"]


HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++}

"avast! Web Scanner" = ""C:\Program Files\Alwil Software\Avast4\ashWebSv.exe"" ["ALWIL Software"]

"SpywareTerminator" = ""C:\PROGRAM FILES\SPYWARE TERMINATOR\SpywareTerminatorShield.exe"" ["Crawler.com"]

"USB Storage Toolbox" = "C:\Program Files\USBToolbox\Res.EXE" ["ali"]

"CHotkey" = "mHotkey.exe" ["Chicony"]

"SystemTray" = "SysTray.ExE" [MS]

"Zasobnik systemowy" = "SysTray.Exe" [MS]

"ashMaiSv" = "C:\PROGRA~1\ALWILS~1\AVAST4\ashmaisv.exe" ["ALWIL Software"]

"IgfxTray" = "C:\WINDOWS\SYSTEM\igfxtray.exe" ["Intel Corporation"]

"HotKeysCmds" = "C:\WINDOWS\SYSTEM\hkcmd.exe" ["Intel Corporation"]


HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\ {++}

"avast!" = "C:\Program Files\Alwil Software\Avast4\ashServ.exe" [null data]
#4

log jest urwany, poczekaj na komunikat “done”

#5

dobra juz masz log

"Silent Runners.vbs", revision R50, http://www.silentrunners.org/

Operating System: Windows 98

Output limited to non-default values, except where indicated by "{++}"



Startup items buried in registry:

---------------------------------


HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}

"Gadu-Gadu" = ""C:\PROGRAM FILES\GADU-GADU\GG.EXE" /tray" ["Gadu-Gadu S.A."]

"AutoConnect" = "C:\PROGRAM FILES\AUTOCONNECT\AUTOCONNECT.EXE" ["http://autoconnect.prv.pl"]


HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++}

"avast! Web Scanner" = ""C:\Program Files\Alwil Software\Avast4\ashWebSv.exe"" ["ALWIL Software"]

"SpywareTerminator" = ""C:\PROGRAM FILES\SPYWARE TERMINATOR\SpywareTerminatorShield.exe"" ["Crawler.com"]

"USB Storage Toolbox" = "C:\Program Files\USBToolbox\Res.EXE" ["ali"]

"CHotkey" = "mHotkey.exe" ["Chicony"]

"SystemTray" = "SysTray.ExE" [MS]

"Zasobnik systemowy" = "SysTray.Exe" [MS]

"ashMaiSv" = "C:\PROGRA~1\ALWILS~1\AVAST4\ashmaisv.exe" ["ALWIL Software"]

"IgfxTray" = "C:\WINDOWS\SYSTEM\igfxtray.exe" ["Intel Corporation"]

"HotKeysCmds" = "C:\WINDOWS\SYSTEM\hkcmd.exe" ["Intel Corporation"]


HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\ {++}

"avast!" = "C:\Program Files\Alwil Software\Avast4\ashServ.exe" [null data]


HKLM\Software\Microsoft\Active Setup\Installed Components\

{44BBA840-CC51-11CF-AAFA-00AA00B6015C}.Restore\(Default) = "Microsoft Outlook Express 6"

                                               \StubPath = "rundll32.exe advpack.dll,UserUnInstStubWrapper {44BBA840-CC51-11CF-AAFA-00AA00B6015C}" [MS]


HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\

"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"

  -> {HKLM...CLSID} = "WinRAR"

                   \InProcServer32\(Default) = "C:\PROGRAM FILES\WINRAR\rarext.dll" [null data]

"{472083B0-C522-11CF-8763-00608CC02F24}" = "avast"

  -> {HKLM...CLSID} = "avast"

                   \InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"]


HKLM\Software\Classes\*\shellex\ContextMenuHandlers\

WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"

  -> {HKLM...CLSID} = "WinRAR"

                   \InProcServer32\(Default) = "C:\PROGRAM FILES\WINRAR\rarext.dll" [null data]

avast\(Default) = "{472083B0-C522-11CF-8763-00608CC02F24}"

  -> {HKLM...CLSID} = "avast"

                   \InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"]


HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\

WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"

  -> {HKLM...CLSID} = "WinRAR"

                   \InProcServer32\(Default) = "C:\PROGRAM FILES\WINRAR\rarext.dll" [null data]


HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\

WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"

  -> {HKLM...CLSID} = "WinRAR"

                   \InProcServer32\(Default) = "C:\PROGRAM FILES\WINRAR\rarext.dll" [null data]

avast\(Default) = "{472083B0-C522-11CF-8763-00608CC02F24}"

  -> {HKLM...CLSID} = "avast"

                   \InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"]



Active Desktop and Wallpaper:

-----------------------------


Active Desktop may be enabled at this entry:

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState


Displayed if Active Desktop enabled and wallpaper not set by System Policy:

HKCU\Software\Microsoft\Internet Explorer\Desktop\General\

"Wallpaper" = "C:\WINDOWS\Web\Wallpaper\WALLPAPR.HTM"


Displayed if Active Desktop disabled and wallpaper not set by System Policy:

HKCU\Control Panel\Desktop\

"Wallpaper" = "C:\WINDOWS\Dane aplikacji\Microsoft\Internet Explorer\Tapeta programu Internet Explorer.bmp"



WIN.INI & SYSTEM.INI launch points:

-----------------------------------


SYSTEM.INI

[boot]

"SCRNSAVE.EXE=" [file not found]



Winsock2 Service Provider DLLs:

-------------------------------


Namespace Service Providers


HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}

000000000001\LibraryPath = "C:\WINDOWS\SYSTEM\rnr20.dll" [MS]


Transport Service Providers


HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}

00000000000#\PackedCatalogItem (contains) DLL [Company Name], (at) # range:

C:\WINDOWS\SYSTEM\mswsosp.dll [MS], 1

C:\WINDOWS\SYSTEM\msafd.dll [MS], 2 - 4

C:\WINDOWS\SYSTEM\rsvpsp.dll [MS], 5 - 6



Toolbars, Explorer Bars, Extensions:

------------------------------------


Toolbars


HKLM\Software\Microsoft\Internet Explorer\Toolbar\

"{2ECB7FB2-0333-416F-92FD-4904AD49252B}" = "3DNA Toolbar"

  -> {HKLM...CLSID} = "3DNA Toolbar"

                   \InProcServer32\(Default) = "C:\WINDOWS\SYSTEM\3DNATO~1.DLL" [","]



Miscellaneous IE Hijack Points

------------------------------


HKLM\Software\Microsoft\Internet Explorer\Version = (invalid data)

The Internet Explorer version cannot be found!


C:\WINDOWS\INF\IERESET.INF (used to "Reset Web Settings")

The contents of IERESET.INF cannot be reliably checked!


Added lines (compared with English-language version):

[Strings]: START_PAGE_URL="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

[Strings]: MS_START_PAGE_URL="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"


Missing lines (compared with English-language version):

[Strings]: 2 lines



----------

+ This report excludes default entries except where indicated.

+ To see *everywhere* the script checks and *everything* it finds,

  launch it from a command prompt or a shortcut with the -all parameter.

+ To search all directories of local fixed drives for DESKTOP.INI

  DLL launch points, use the -supp parameter or answer "No" at the

  first message box and "Yes" at the second message box.

---------- (total run time: 173 seconds, including 7 seconds for message boxes)

Złączono Posta : 13.04.2007 (Pią) 13:28

Sprawdzi mi ktoś te logi czy nie ?

Złączono Posta : 13.04.2007 (Pią) 13:30

prosze o sprawdzenie tych logów

#6

czysto.