dilbert
15 Grudzień 2007 21:43
#1
Witam,
Mam nietypowy problem nie miałem antywirusa przez 2 dni. Skutkiem tego jest wolna praca przy komputerze
hijackthis:
Logfile of HijackThis v1.99.1 Scan saved at 15:45:08, on 2007-12-12 Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\RUNDLL32.EXE C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\WINDOWS\System32\hphmon06.exe C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb11.exe C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 8.0\avp.exe C:\Program Files\outlook\outlook.exe C:\WINDOWS\System32\ctfmon.exe C:\Program Files\Tlen.pl\tlen.exe C:\Program Files\Microsoft ActiveSync\Wcescomm.exe C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe C:\PROGRA~1\MICROS~3\rapimgr.exe C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\Program Files\Java\jre1.6.0_02\bin\jucheck.exe C:\WINDOWS\System32\wuauclt.exe C:\WINDOWS\System32\HPZipm12.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 8.0\avp.exe C:\Program Files\Winamp\winamp.exe C:\Documents and Settings\lejas\Pulpit\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.windowsxlive.net R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.windowsxlive.net R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\2.bin\MGSBAR.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O2 - BHO: Expressivo - {85F685C3-20D9-4943-95E4-EB4224056C3F} - C:\Program Files\ivo\Expressivo\integr\ih-iexplorer\IH_iexplorer.dll O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll O3 - Toolbar: Expressivo - {85F685C3-20D9-4943-95E4-EB4224056C3F} - C:\Program Files\ivo\Expressivo\integr\ih-iexplorer\IH_iexplorer.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\2.bin\MGSBAR.DLL O4 - HKLM…\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM…\Run: [QuickTime Task] “C:\Program Files\QuickTime\qttask.exe” -atboottime O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM…\Run: [nwiz] nwiz.exe /install O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM…\Run: [HPHUPD06] C:\Program Files\HP{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe O4 - HKLM…\Run: [HP Software Update] “C:\Program Files\HP\HP Software Update\HPWuSchd2.exe” O4 - HKLM…\Run: [HP Component Manager] “C:\Program Files\HP\hpcoretech\hpcmpmgr.exe” O4 - HKLM…\Run: [HPHmon06] C:\WINDOWS\System32\hphmon06.exe O4 - HKLM…\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb11.exe O4 - HKLM…\Run: [sunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe” O4 - HKLM…\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup O4 - HKLM…\Run: [instantAccess] C:\Program Files\ScannerU\TBRIDGE\BIN\InstantAccess.exe /h O4 - HKLM…\Run: [RegisterDropHandler] C:\Program Files\ScannerU\TBRIDGE\BIN\RegisterDropHandler.exe O4 - HKLM…\Run: [WinampAgent] C:\Program Files\Winamp\wianmpa.exe O4 - HKLM…\Run: [AVP] “C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 8.0\avp.exe” O4 - HKLM…\Run: [outlook] C:\Program Files\outlook\outlook.exe /auto O4 - HKLM…\RunServices: [RegisterDropHandler] C:\Program Files\ScannerU\TBRIDGE\BIN\RegisterDropHandler.exe O4 - HKCU…\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU…\Run: [AlcoholAutomount] “C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe” /automount O4 - HKCU…\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe O4 - HKCU…\Run: [H/PC Connection Agent] “C:\Program Files\Microsoft ActiveSync\Wcescomm.exe” O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Action Manager 32.lnk = C:\Program Files\ScannerU\AM32.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: BlueSoleil.lnk = ? O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\digital imaging\bin\hpqtra08.exe O4 - Global Startup: HP Image Zone - szybkie uruchamianie.lnk = C:\Program Files\HP\digital imaging\bin\hpqthb08.exe O4 - Global Startup: Ulead Photo Express 4.0 SE Calendar Checker .lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: (no name) - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 8.0\SCIEPlgn.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll O9 - Extra ‘Tools’ menuitem: Utwórz Ulubione dla urządzenia przenośnego… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra ‘Tools’ menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll O20 - Winlogon Notify: klogon - C:\WINDOWS\System32\klogon.dll O23 - Service: Kaspersky Internet Security (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 8.0\avp.exe" -r (file missing) O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
COMBO:
ComboFix 07-12-12.3 - lejas 2007-12-12 16:04:51.1 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.1.1250.1.1045.18.159 [GMT 1:00] Running from: C:\Documents and Settings\lejas\Pulpit\ComboFix.exe * Created a new restore point . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\onoes.exe C:\Program Files\myglobalsearch C:\Program Files\myglobalsearch\bar\2.bin\M9FFXTBR.JAR C:\Program Files\myglobalsearch\bar\2.bin\M9FFXTBR.MANIFEST C:\Program Files\myglobalsearch\bar\2.bin\M9NTSTBR.JAR C:\Program Files\myglobalsearch\bar\2.bin\M9NTSTBR.MANIFEST C:\Program Files\myglobalsearch\bar\2.bin\M9PLUGIN.DLL C:\Program Files\myglobalsearch\bar\2.bin\MGSBAR.DLL C:\Program Files\myglobalsearch\bar\2.bin\NPMYGLSH.DLL C:\Program Files\myglobalsearch\bar\Cache\000BF9DA C:\Program Files\myglobalsearch\bar\Cache\000C012B C:\Program Files\myglobalsearch\bar\Cache\000C02BB.bin C:\Program Files\myglobalsearch\bar\Cache\000C09BC.bin C:\Program Files\myglobalsearch\bar\Cache\000C0F90.bin C:\Program Files\myglobalsearch\bar\Cache\files.ini C:\Program Files\myglobalsearch\bar\History\search C:\Program Files\myglobalsearch\bar\Settings\prevcfg.htm C:\Program Files\outlook C:\Program Files\outlook\outlook.exe C:\Program Files\outlook\p.zip C:\Program Files\outlook\v.tmp C:\WINDOWS\system32\bszip.dll C:\WINDOWS\system32\cmd.com C:\WINDOWS\system32\netstat.com C:\WINDOWS\system32\ping.com C:\WINDOWS\system32\regedit.com C:\WINDOWS\system32\taskkill.com C:\WINDOWS\system32\tasklist.com C:\WINDOWS\system32\tracert.com . ((((((((((((((((((((((((( Files Created from 2007-11-12 to 2007-12-12 ))))))))))))))))))))))))))))))) . 2007-12-11 17:57 . 2007-12-11 21:36 2007-12-10 20:36 . 2007-12-10 20:36 2,560 --a------ C:\WINDOWS_MSRSTRT.EXE 2007-12-08 21:32 . 2007-12-08 21:32 2007-12-08 21:24 . 2007-12-08 21:24 2007-12-07 21:54 . 2007-12-07 21:54 82,061 --a------ C:\WINDOWS\system32\drivers\klick.dat 2007-12-07 21:54 . 2007-12-07 21:54 81,549 --a------ C:\WINDOWS\system32\drivers\klin.dat 2007-12-07 21:52 . 2007-12-07 21:52 2007-12-05 18:57 . 2007-12-05 18:57 2007-12-05 18:52 . 2007-12-05 19:10 2007-12-05 18:52 . 2007-12-05 18:52 2007-12-02 18:21 . 2007-12-02 18:21 2007-12-01 19:37 . 2007-12-01 19:37 2007-11-30 20:14 . 2007-11-30 20:14 2007-11-30 20:08 . 2007-11-30 20:14 2007-11-30 16:09 . 2007-11-30 16:09 2007-11-28 20:10 . 2007-11-28 20:10 2007-11-28 20:07 . 2007-11-28 20:07 2007-11-28 16:49 . 2007-11-30 21:24 2007-11-26 18:38 . 2007-11-26 19:48 2007-11-26 18:37 . 2007-11-26 19:48 2007-11-26 18:35 . 1998-10-07 13:54 327,168 --a------ C:\WINDOWS\IsUn0415.exe 2007-11-26 18:35 . 1998-09-02 09:02 194,320 --a------ C:\WINDOWS\system32\qcut.dll 2007-11-26 18:35 . 1998-08-17 10:21 11,776 --a------ C:\WINDOWS\system32\mciqtz.drv 2007-11-26 18:35 . 1998-08-17 10:21 10,240 --a------ C:\WINDOWS\system32\vidx16.dll 2007-11-26 18:35 . 1998-08-17 10:21 5,672 --a------ C:\WINDOWS\system32\quartz.vxd 2007-11-26 18:35 . 2007-11-26 18:35 4,608 --a------ C:\WINDOWS\system32\w95inf32.dll 2007-11-26 18:35 . 2007-11-26 18:35 2,272 --a------ C:\WINDOWS\system32\w95inf16.dll 2007-11-24 19:37 . 2006-12-26 03:25 414,223 --a------ C:\WINDOWS\system32\vimc.exe 2007-11-24 19:26 . 2007-11-24 19:26 78,942 --a------ C:\WINDOWS\Icon_1.ico 2007-11-24 19:23 . 2007-11-24 19:49 2007-11-24 19:23 . 2006-12-03 17:15 111,104 --a------ C:\WINDOWS\system32\Uharc.exe 2007-11-24 19:23 . 2006-12-03 17:10 81,920 --a------ C:\WINDOWS\system32\closeapp.exe 2007-11-24 19:23 . 2006-12-03 17:15 19,968 --a------ C:\WINDOWS\system32\reico.exe 2007-11-24 19:23 . 2006-12-03 17:14 8,636 --a------ C:\WINDOWS\system32\modifype.exe 2007-11-24 15:07 . 2007-11-24 15:07 2007-11-22 17:24 . 2007-11-22 17:24 2007-11-22 17:21 . 2005-10-21 01:25 29,696 --------- C:\WINDOWS\system32\drivers\rndismpx.sys 2007-11-22 17:21 . 2005-10-21 01:25 12,032 --------- C:\WINDOWS\system32\drivers\usb8023x.sys 2007-11-22 17:20 . 2007-12-05 22:16 2007-11-20 15:33 . 2007-11-20 17:30 2007-11-19 18:08 . 2007-11-19 18:08 13,860 --a------ C:\WINDOWS\system32\drivers\klop.dat 2007-11-19 18:05 . 2007-11-19 18:05 200,704 --a------ C:\WINDOWS\system32\klogon.dll 2007-11-19 17:57 . 2007-11-19 17:57 10,011 --a------ C:\WINDOWS\system32\drivers\klnetinf.sys 2007-11-17 10:00 . 2004-09-03 23:43 199 --a------ C:\WINDOWS\system32\paypal.url 2007-11-17 10:00 . 2006-05-17 04:46 104 --a------ C:\WINDOWS\system32\winx.url 2007-11-16 16:38 . 2007-11-16 16:38 26,128 --a------ C:\WINDOWS\system32\drivers\klfltdev.sys 2007-11-13 17:37 . 2007-11-16 16:27 2007-11-12 20:02 . 2007-11-12 20:02 . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-12 14:20 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab 2007-12-11 19:50 --------- d-----w C:\Documents and Settings\lejas\Dane aplikacji\Tlen.pl 2007-12-10 19:39 --------- d-----w C:\Program Files\BearShare 2007-12-08 20:24 --------- d–h--w C:\Program Files\InstallShield Installation Information 2007-12-05 16:41 --------- d-----w C:\Program Files\Google 2007-12-05 16:40 --------- d-----w C:\Program Files\IrfanView 2007-11-30 21:17 --------- d-----w C:\Program Files\Winamp 2007-11-28 16:23 --------- d-----w C:\Program Files\English Translator 3 2007-11-25 12:19 --------- d-----w C:\Documents and Settings\lejas\Dane aplikacji\Azureus 2007-11-21 14:31 --------- d-----w C:\Program Files\Steam 2007-11-12 19:02 --------- d-----w C:\Program Files\Common Files\Adobe 2007-11-08 20:00 --------- d-----w C:\Program Files\Algo 2007-10-31 20:42 --------- d-----w C:\Program Files\ivo 2007-10-31 20:42 --------- d-----w C:\Documents and Settings\lejas\Dane aplikacji\Expressivo 2007-10-31 12:41 110,096 ----a-w C:\WINDOWS\system32\drivers\kl1.sys 2007-10-25 18:26 --------- d-----w C:\Documents and Settings\lejas\Dane aplikacji\PC Suite 2007-10-25 13:38 --------- d-----w C:\Documents and Settings\lejas\Dane aplikacji\Nokia 2007-10-25 13:20 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Bluetooth 2007-10-25 13:12 --------- d-----w C:\Program Files\IVT Corporation 2007-10-24 17:15 --------- d-----w C:\Program Files\Tlen.pl 2007-10-24 13:16 32,272 ----a-w C:\WINDOWS\system32\drivers\klbg.sys 2007-10-20 14:20 --------- d-----w C:\Program Files\Winamp Toolbar 2007-10-20 14:20 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar 2007-10-17 16:12 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Azureus 2007-10-17 16:11 --------- d-----w C:\Program Files\Azureus . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE~\Browser Helper Objects{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}] 2007-10-04 21:06 1135968 --a------ C:\Program Files\Winamp Toolbar\winamptb.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] “{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}”= C:\Program Files\Winamp Toolbar\winamptb.dll [2007-10-04 21:06 1135968] [HKEY_CLASSES_ROOT\clsid{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1] [HKEY_CLASSES_ROOT\TypeLib{538CD77C-BFDD-49b0-9562-77419CAB89D1}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser] “{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}”= C:\Program Files\Winamp Toolbar\winamptb.dll [2007-10-04 21:06 1135968] [HKEY_CLASSES_ROOT\clsid{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1] [HKEY_CLASSES_ROOT\TypeLib{538CD77C-BFDD-49b0-9562-77419CAB89D1}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “CTFMON.EXE”=“C:\WINDOWS\System32\ctfmon.exe” [2002-09-23 13:00] “AlcoholAutomount”=“C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe” [2004-05-06 11:13] “Komunikator”=“C:\Program Files\Tlen.pl\tlen.exe” [2007-10-16 11:53] “H/PC Connection Agent”=“C:\Program Files\Microsoft ActiveSync\Wcescomm.exe” [2006-11-13 15:57] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “NeroFilterCheck”=“C:\WINDOWS\system32\NeroCheck.exe” [2001-07-09 10:50] “QuickTime Task”=“C:\Program Files\QuickTime\qttask.exe” [2007-06-29 05:24] “NvCplDaemon”=“RUNDLL32.exe” [2002-09-23 13:00 C:\WINDOWS\system32\rundll32.exe] “nwiz”=“nwiz.exe” [2006-10-22 11:22 C:\WINDOWS\system32\nwiz.exe] “NvMediaCenter”=“RUNDLL32.exe” [2002-09-23 13:00 C:\WINDOWS\system32\rundll32.exe] “HPHUPD06”=“C:\Program Files\HP{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe” [2004-06-07 06:34] “HP Software Update”=“C:\Program Files\HP\HP Software Update\HPWuSchd2.exe” [2004-02-12 12:38] “HP Component Manager”=“C:\Program Files\HP\hpcoretech\hpcmpmgr.exe” [2004-05-12 14:18] “HPHmon06”=“C:\WINDOWS\System32\hphmon06.exe” [2004-06-07 06:28] “HPDJ Taskbar Utility”=“C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb11.exe” [2004-04-06 11:28] “SunJavaUpdateSched”=“C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe” [2007-07-12 03:00] “PCSuiteTrayApplication”=“C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe” [2007-06-18 14:10] “InstantAccess”=“C:\Program Files\ScannerU\TBRIDGE\BIN\InstantAccess.exe” [1998-07-08 06:04] “RegisterDropHandler”=“C:\Program Files\ScannerU\TBRIDGE\BIN\RegisterDropHandler.exe” [1998-07-08 06:20] “WinampAgent”=“C:\Program Files\Winamp\wianmpa.exe” [] “AVP”=“C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 8.0\avp.exe” [2007-11-19 18:05] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices] “RegisterDropHandler”=“C:\Program Files\ScannerU\TBRIDGE\BIN\RegisterDropHandler.exe” [1998-07-08 06:20] [HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] “CTFMON.EXE”=“C:\WINDOWS\System32\CTFMON.EXE” [2002-09-23 13:00] “Nokia.PCSync”=“C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe” [2007-06-19 09:17] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ Action Manager 32.lnk - C:\Program Files\ScannerU\AM32.exe [2007-09-23 17:28:18] Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 18:16:50] Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 21:05:26] BlueSoleil.lnk - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe [2007-10-25 14:12:54] HP Digital Imaging Monitor.lnk - C:\Program Files\HP\digital imaging\bin\hpqtra08.exe [2004-05-28 21:31:38] HP Image Zone - szybkie uruchamianie.lnk - C:\Program Files\HP\digital imaging\bin\hpqthb08.exe [2004-05-28 22:06:36] Ulead Photo Express 4.0 SE Calendar Checker .lnk - C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe [2007-12-08 21:26:08] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] “AppInit_DLLs”=C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll R3 KLFLTDEV;Kaspersky Lab KLFltDev;C:\WINDOWS\System32\DRIVERS\klfltdev.sys R3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\System32\DRIVERS\klim5.sys R3 Smcpwr2n;Sterownik karty SMC EtherPower II 10/100 Ethernet Adapter ;C:\WINDOWS\System32\DRIVERS\smcpwr2n.sys S0 KLBG;Kaspersky Lab Boot Guard Driver;C:\WINDOWS\System32\DRIVERS\klbg.sys S2 USB680x;USB Scanner;C:\WINDOWS\System32\DRIVERS\UScanner.SYS S3 BTNetFilter;Bluetooth Network Filter;??\C:\WINDOWS\system32\drivers\BTNetFilter.sys S3 KS-959;Kingsun KS-959 USB Infrared Adapter;C:\WINDOWS\System32\DRIVERS\KS-959.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{63991f78-70fb-11dc-974d-00e0293d8969}] \Shell\AutoRun\command - H:\setup.exe *Newly Created Service* - CATCHME *Newly Created Service* - PROCEXP90 . Contents of the ‘Scheduled Tasks’ folder “2007-12-11 20:38:02 C:\WINDOWS\Tasks\HP Usg Daily.job” - C:\Program Files\HP{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\pexpress\hphped05.exe . ************************************************************************** catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-12 16:13:25 Windows 5.1.2600 Dodatek Service Pack. 1 NTFS scanning hidden processes … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-12-12 16:14:22
Proszę o pomoc bo nie da się pracować. Myślałem o formatowaniu dysku, ale jeszcze się wstrzymam jak to nie pomoże to bede zmuszony.
sirmacik
15 Grudzień 2007 21:49
#2
W HijackThis usuń wpis:
O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\2.bin\MGSBAR.DLL
O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\2.bin\MGSBAR.DLL
O4 - HKLM\..\Run: [outlook] C:\Program Files\outlook\outlook.exe /auto
O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
dilbert
15 Grudzień 2007 21:59
#3
i już bedzie ok? a w Combo?
: