Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\windows\System32\nvsvc32.exe
C:\windows\system32\rundll32.exe
C:\windows\Explorer.EXE
C:\WINDOWS\inet20003\services.exe
C:\windows\SOUNDMAN.EXE
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\System32\paytime.exe
C:\WINDOWS\smss.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\windows\System32\LSASS.EXE
C:\winstall.exe
C:\windows\System32\paytime.exe
C:\WINDOWS\System32\symsvcsa.exe
C:\WINDOWS\system32\RaConfig.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\inet20003\mm4.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\windows\System32\dllcache\IExplore.exe
C:\windows\System32\dllcache\IExplore.exe
C:\windows\System32\dllcache\IExplore.exe
C:\windows\System32\dllcache\IExplore.exe
C:\windows\System32\dllcache\IExplore.exe
C:\windows\System32\dllcache\IExplore.exe
C:\windows\System32\dllcache\IExplore.exe
C:\windows\System32\dllcache\IExplore.exe
C:\PROGRA~1\COMMON~1\mokf\mokfm.exe
C:\PROGRA~1\COMMON~1\mokf\mokfa.exe
C:\windows\winlogon.exe
C:\Documents and Settings\fresie\Pulpit\hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.cliprex.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
F3 - REG:win.ini: run=C:\WINDOWS\inet20003\services.exe
O2 - BHO: (no name) - {5321E378-FFAD-4999-8C62-03CA8155F0B3} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: My Search Bar - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - C:\Program Files\MySearch\bar\1.bin\S4BAR.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [taz] C:\WINDOWS\taz.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [PayTime] C:\windows\System32\paytime.exe
O4 - HKLM\..\Run: [xp_system] C:\WINDOWS\inet20003\services.exe
O4 - HKLM\..\Run: [Microsoft Office] C:\windows\System32\msoff.exe
O4 - HKLM\..\Run: [Microsoft Windows Session Manager Subsystem] C:\windows\smss.exe
O4 - HKLM\..\Run: [Microsoft Windows Logon Process] C:\windows\winlogon.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Windows installer] C:\winstall.exe
O4 - HKCU\..\Run: [PayTime] C:\windows\System32\paytime.exe
O4 - HKCU\..\Run: [aupd] C:\WINDOWS\System32\symsvcsa.exe
O4 - HKCU\..\Run: [xp_system] C:\WINDOWS\inet20003\services.exe
O4 - HKCU\..\Run: [mokf] C:\PROGRA~1\COMMON~1\mokf\mokfm.exe
O4 - Global Startup: RaConfig.lnk = C:\WINDOWS\system32\RaConfig.exe
O8 - Extra context menu item: &Search - http://bar.mytotalsearch.com/menusearch.html?p=CPXXXXXX59
O17 - HKLM\System\CCS\Services\Tcpip\..\{A5A5726F-CDC3-4B67-8D19-85084CF7CDD7}: NameServer = 194.204.159.1,194.204.152.34
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: Hints - C:\WINDOWS\system32\swndmail.dll
O20 - Winlogon Notify: Mixer - sndmixex.dl (file missing)
O23 - Service: Windows Logon Process Service (MSWinLogonProcService) - Unknown owner - C:\windows\winlogon.exe" -service (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\System32\nvsvc32.exe
wyskoczylo mi na pulpicie i pasku zadan “spyware infected” i teraz strasznie mi kompa muli. Prosze o sprawdzenie loga.
Złączono Posta : 13.01.2006 (Pią) 14:18
pomocy bo przez ten ■■■■ niemoge nic na kompie robic