Chcesz sprawdzić swój log z Hijackthisa? Wklej go tutaj...

Kanciastoporty · Wrzesień 23, 2007

w trybie awaryjnym probowales?

qwerty6 · Wrzesień 23, 2007

hmm nie wiem czy ja to dobrze robie.. :nauka:

postepuje tak jak tu http://www.haker.com.pl/forum/viewtopic.php?t=27449

otwieram ten program Process Explorer ale nie widze tam tego procesu

C:WINDOWSSYSTEM32systemini.exe

a tego drugiego co wyzej pisalem to nie wiem jak zrobic... ;/

emlus · Wrzesień 30, 2007

Sprawcie czy jest tu coś bo mi net zabardzo nie chce chodzić ;/

Kod:

Logfile of HijackThis v1.99.1

Scan saved at 10:37:19, on 2007-09-30

Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)



Running processes:

C:WINDOWSSystem32smss.exe

C:WINDOWSsystem32winlogon.exe

C:WINDOWSsystem32services.exe

C:WINDOWSsystem32lsass.exe

C:WINDOWSsystem32svchost.exe

C:WINDOWSSystem32svchost.exe

C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe

C:Program FilesAlwil SoftwareAvast4ashServ.exe

C:WINDOWSsystem32spoolsv.exe

C:WINDOWSsystem32CTsvcCDA.exe

C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE

C:WINDOWSsystem32nvsvc32.exe

C:WINDOWSsystem32svchost.exe

C:WINDOWSsystem32MsPMSPSv.exe

C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe

C:Program FilesAlwil SoftwareAvast4ashWebSv.exe

C:WINDOWSExplorer.EXE

C:WINDOWSsystem32wscntfy.exe

C:WINDOWSsystem32CTHELPER.EXE

C:PROGRA~1ALWILS~1Avast4ashDisp.exe

C:Program FilesCyberLink DVD SolutionPowerDVDPDVDServ.exe

C:Program FilesHPHP Software UpdateHPWuSchd2.exe

C:WINDOWSsystem32RUNDLL32.EXE

C:Program FilessXe InjectedsXe Injected.exe

C:WINDOWSsystem32ctfmon.exe

C:program filesvalvesteamsteam.exe

D:ggGadu-Gadugg.exe

D:Spybot - Search & DestroyTeaTimer.exe

C:Program FilesOvislinkCommonTurboG-UI.exe

C:Program FilesHPDigital Imagingbinhpqtra08.exe

C:Program FilesHPDigital ImagingbinhpqSTE08.exe

C:Program FilesHPDigital ImagingProduct Assistantbinhprblog.exe

C:Program FilesWinampwinamp.exe

C:Program FilesAresAres.exe

C:PROGRA~1Mozilla Firefoxfirefox.exe

D:NAPI-PROJEKTnapisy.exe

C:Program FilesHijackThisHijackThis.exe



R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 5.0ReaderActiveXAcroIEHelper.ocx

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:SPYBOT~1SDHelper.dll

O4 - HKLM..Run: [CTHelper] CTHELPER.EXE

O4 - HKLM..Run: [UpdReg] C:WINDOWSUpdReg.EXE

O4 - HKLM..Run: [Jet Detection] "C:Program FilesCreativeSBLivePROGRAMADGJDet.exe"

O4 - HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe

O4 - HKLM..Run: [RemoteControl] "C:Program FilesCyberLink DVD SolutionPowerDVDPDVDServ.exe"

O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe

O4 - HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe

O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup

O4 - HKLM..Run: [nwiz] nwiz.exe /install

O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit

O4 - HKLM..Run: [sXe Injected] C:Program FilessXe InjectedsXe Injected.exe

O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe

O4 - HKCU..Run: [Steam] "c:program filesvalvesteamsteam.exe" -silent

O4 - HKCU..Run: [Gadu-Gadu] "D:ggGadu-Gadugg.exe" /tray

O4 - HKCU..Run: [SpybotSD TeaTimer] D:Spybot - Search & DestroyTeaTimer.exe

O4 - Global Startup: AirLive Turbo-G Wireless Utility.lnk = C:Program FilesOvislinkCommonTurboG-UI.exe

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:Program FilesHPDigital Imagingbinhpqtra08.exe

O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:OFFICE~1OFFICE11REFIEBAR.DLL

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:SPYBOT~1SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:SPYBOT~1SDHelper.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe

O12 - Plugin for .spop: C:Program FilesInternet ExplorerPluginsNPDocBox.dll

O17 - HKLMSystemCCSServicesTcpip..{A6A41A3B-4242-4839-9AA0-34507E9F395F}: NameServer = 213.173.209.70,213.173.209.71

O20 - Winlogon Notify: WgaLogon - C:WINDOWS

O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:Program FilesAreschatServer.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - C:Program FilesAlwil SoftwareAvast4ashWebSv.exe" /service (file missing)

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:WINDOWSsystem32CTsvcCDA.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32nvsvc32.exe

O23 - Service: Pml Driver HPZ12 - HP - C:WINDOWSsystem32HPZipm12.exe

0wn3r · Wrzesień 30, 2007

Wszystko w porządku..

Tylko do końca nie wiem co to jest :

Crogram FilesOvislinkCommonTurboG-UI.exe

O4 - Global Startup: AirLive Turbo-G Wireless Utility.lnk = Crogram FilesOvislinkCommonTurboG-UI.exe

O17 - HKLMSystemCCSServicesTcpip..{A6A41A3B-4242-4839-9AA0-34507E9F395F}: NameServer = 213.173.209.70,213.173.209.71[/b]

Kanciastoporty · Październik 1, 2007

pewnie od radiowki

OvisLink to profesjonalny dostawca sprzętu sieciowego LAN/WAN z siedzibą na Tajwanie. Firma istnieje na rynku od 1992 roku, dzisiaj dzięki dużemu ...[/b]

emlus · Październik 1, 2007

no to od radiowki ;] ;] ;]

szymcioooo · Październik 1, 2007

Witam

Możecie mi to spr

Logfile of HijackThis v1.99.1
Scan saved at 19:38:06, on 2007-10-01
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C

rogram FilesAlwil SoftwareAvast4aswUpdSv.exe
C

rogram FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSsystem32CTsvcCDA.exe
C

rogram FilesBorlandInterBasebinibguard.exe
C:WINDOWSsystem32nvsvc32.exe
C

rogram FilesAgnitumOutpost Firewalloutpost.exe
C:WINDOWSsystem32HPZipm12.exe
C

rogram FilesCommon FilesProtexisLicense ServicePSIService.exe
C

rogram FilesCyberLinkShared FilesRichVideo.exe
C

rogram FilesAlwil SoftwareAvast4ashMaiSv.exe
C

rogram FilesAlwil SoftwareAvast4ashWebSv.exe
C

rogram FilesBorlandInterBasebinibserver.exe
C:WINDOWSExplorer.EXE
C

rogram FilesCreativeShared FilesModule LoaderDLLML.exe
C:WINDOWSCTHELPER.EXE
C:WINDOWSsystem32CTXFIHLP.EXE
C

ROGRA~1NEOSTR~1CnxMon.exe
C:WINDOWSSYSTEM32CTXFISPI.EXE
C

ROGRA~1NEOSTR~1TaskbarIcon.exe
C:WINDOWSsystem32RUNDLL32.EXE
C

rogram FilesCyberLinkPowerDVDPDVDServ.exe
C

rogram FilesCommon FilesInstallShieldUpdateServiceissch.exe
C

rogram FilesHPHP Software UpdateHPWuSchd2.exe
C

ROGRA~1ALWILS~1Avast4ashDisp.exe
C

rogram FilesGadu-Gadugg.exe
C

ROGRA~1NEOSTR~1NeostradaTP.exe
C

rogram FilesHPDigital Imagingbinhpqtra08.exe
C

rogram FilesCorelGraphics9RegisterRemind32.exe
C

rogram FilesCommon FilesTeleca SharedGeneric.exe
C

ROGRA~1NEOSTR~1ComComp.exe
C

rogram FilesSony EricssonMobile2Mobile Phone Monitorepmworker.exe
C

ROGRA~1NEOSTR~1Watch.exe
C

rogram FilesHPDigital ImagingbinhpqSTE08.exe
C:WINDOWSsystem32wuauclt.exe
C

rogram FilesMozilla Firefoxfirefox.exe
C

rogram FilesHijackThisHijackThis.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://szukaj.wp.pl
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.neostrada.pl/
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Neostrada TP
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C

ROGRA~1NEOSTR~1SEARCH~1.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C

rogram FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [AudioDrvEmulator] "C

rogram FilesCreativeShared FilesModule LoaderDLLML.exe" -1 AudioDrvEmulator "C

rogram FilesCreativeShared FilesModule LoaderAudio EmulatorAudDrvEm.dll"
O4 - HKLM..Run: [CTHelper] CTHELPER.EXE
O4 - HKLM..Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM..Run: [UpdReg] C:WINDOWSUpdReg.EXE
O4 - HKLM..Run: [VolPanel] "C

rogram FilesCreativeSound Blaster X-FiVolume PanelVolPanlu.exe" /r
O4 - HKLM..Run: [WooCnxMon] C

ROGRA~1NEOSTR~1CnxMon.exe
O4 - HKLM..Run: [SpeedTouch USB Diagnostics] "C

rogram FilesThomsonSpeedTouch USBDragdiag.exe" /icon
O4 - HKLM..Run: [WOOWATCH] C

ROGRA~1NEOSTR~1Watch.exe
O4 - HKLM..Run: [WOOTASKBARICON] C

ROGRA~1NEOSTR~1TaskbarIcon.exe
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [RemoteControl] "C

rogram FilesCyberLinkPowerDVDPDVDServ.exe"
O4 - HKLM..Run: [LanguageShortcut] "C

rogram FilesCyberLinkPowerDVDLanguageLanguage.exe"
O4 - HKLM..Run: [Sony Ericsson PC Suite] "C

rogram FilesSony EricssonMobile2Application LauncherApplication Launcher.exe" /startoptions
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [QuickTime Task] "C

rogram FilesQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [WinampAgent] C

rogram FilesWinampwinampa.exe
O4 - HKLM..Run: [ISUSPM Startup] C

ROGRA~1COMMON~1INSTAL~1UPDATE~1ISUSPM.exe -startup
O4 - HKLM..Run: [ISUSScheduler] "C

rogram FilesCommon FilesInstallShieldUpdateServiceissch.exe" -start
O4 - HKLM..Run: [HP Software Update] C

rogram FilesHPHP Software UpdateHPWuSchd2.exe
O4 - HKLM..Run: [Outpost Firewall] "C

rogram FilesAgnitumOutpost Firewalloutpost.exe" /waitservice
O4 - HKLM..Run: [OutpostFeedBack] C

rogram FilesAgnitumOutpost Firewallfeedback.exe /dump

s_startup
O4 - HKLM..Run: [avast!] C

ROGRA~1ALWILS~1Avast4ashDisp.exe
O4 - HKLM..Run: [Windows] C:WINDOWSNOTEPADE.EXE
O4 - HKCU..Run: [Gadu-Gadu] "C

rogram FilesGadu-Gadugg.exe" /tray
O4 - HKCU..Run: [Skype] "C

rogram FilesSkypePhoneSkype.exe" /nosplash /minimized
O4 - Startup: Corel Registration.lnk = C

rogram FilesCorelGraphics9RegisterRemind32.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C

rogram FilesAdobeAcrobat 7.0Readerreader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C

rogram FilesHPDigital Imagingbinhpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C

rogram FilesMicrosoft OfficeOfficeOSA9.EXE
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C

rogram FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C

rogram FilesMessengermsmsgs.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C

ROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O17 - HKLMSystemCCSServicesTcpip..{A447B6B4-944D-4472-85C6-231A2916F0DD}: NameServer = 194.204.159.1 217.98.63.164
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C

ROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C

rogram FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C

rogram FilesAlwil SoftwareAvast4ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C

rogram FilesAlwil SoftwareAvast4ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C

rogram FilesAlwil SoftwareAvast4ashWebSv.exe" /service (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:WINDOWSsystem32CTsvcCDA.exe
O23 - Service: InterBase Guardian (InterBaseGuardian) - Borland Software Corporation - C

rogram FilesBorlandInterBasebinibguard.exe
O23 - Service: InterBase Server (InterBaseServer) - Borland Software Corporation - C

rogram FilesBorlandInterBasebinibserver.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32nvsvc32.exe
O23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum Ltd. - C

rogram FilesAgnitumOutpost Firewalloutpost.exe
O23 - Service: Pml Driver HPZ12 - HP - C:WINDOWSsystem32HPZipm12.exe
O23 - Service: ProtexisLicensing - Unknown owner - C

rogram FilesCommon FilesProtexisLicense ServicePSIService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C

rogram FilesCyberLinkShared FilesRichVideo.exe

Kanciastoporty · Październik 1, 2007

• O4 - HKLM..Run: [Windows] C:WINDOWSNOTEPADE.EXE - jakis syf (normalnie jest w system32)
• C

rogram FilesCommon FilesProtexisLicense ServicePSIService.exe - to chyba normalnie tez jest w system32

szymcioooo · Październik 1, 2007

Czyli co mam zrobic aby ten SYF usunąć i co to może być?

Kanciastoporty · Październik 1, 2007

Czyli co mam zrobic aby ten SYF usunąć[/b]

...? Nie wiesz jak usuwac pliki?

i co to może być?[/b]

trojan

4 · Październik 2, 2007

Proszę o sprawdzenie loga.
W tym momencie myślę o zainwestowaniu w modem, bo to to co można nazwać ....!!!.... chodzi gorzej niż modem :/

Z góry dzięki.

Kod:

Logfile of HijackThis v1.99.1

Scan saved at 11:18:03, on 2007-10-02

Platform: Windows XP  (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 (6.00.2600.0000)



Running processes:

C:WINDOWSSystem32smss.exe

C:WINDOWSsystem32winlogon.exe

C:WINDOWSsystem32services.exe

C:WINDOWSsystem32lsass.exe

C:WINDOWSSystem32Ati2evxx.exe

C:WINDOWSsystem32svchost.exe

C:WINDOWSSystem32svchost.exe

C:WINDOWSsystem32ZoneLabsvsmon.exe

C:WINDOWSsystem32Ati2evxx.exe

C:WINDOWSExplorer.EXE

C:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe

C:PROGRA~1A4TechMouseAmoumain.exe

C:Program FilesHotkeyHotkey.exe

E:Program FilesZone LabsZoneAlarmzlclient.exe

E:Program FilesWinampwinampa.exe

E:PROGRA~1ALWILS~1Avast4ashDisp.exe

C:Program FilesHPHP Software UpdateHPWuSchd2.exe

C:Program FilesHPhpcoretechhpcmpmgr.exe

C:WINDOWSSystem32ctfmon.exe

G:Program FilesBitCometBitComet.exe

C:Program FilesD-Link AirPlusAirPlus.exe

C:Program FilesOpenOffice.org 2.0programsoffice.exe

E:Program FilesAlwil SoftwareAvast4aswUpdSv.exe

E:Program FilesAlwil SoftwareAvast4ashServ.exe

C:Program FilesOpenOffice.org 2.0programsoffice.BIN

C:WINDOWSsystem32spoolsv.exe

E:Program FilesAlcohol SoftAlcohol 52StarWindStarWindService.exe

C:WINDOWSSystem32svchost.exe

E:Program FilesAlwil SoftwareAvast4ashWebSv.exe

E:Program FilesAlwil SoftwareAvast4ashMaiSv.exe

E:Program FilesMozilla Firefoxfirefox.exe

E:Program FilesGadu-Gadugg.exe

E:Program FilesHijack ThisHijackThis.exe



R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll

O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - G:Program FilesBitComettoolsBitCometBHO_1.1.8.30.dll

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx

O4 - HKLM..Run: [ATIPTA] C:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe

O4 - HKLM..Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd

O4 - HKLM..Run: [WheelMouse] C:PROGRA~1A4TechMouseAmoumain.exe

O4 - HKLM..Run: [Hotkey] C:Program FilesHotkeyHotkey.exe

O4 - HKLM..Run: [ZoneAlarm Client] "E:Program FilesZone LabsZoneAlarmzlclient.exe"

O4 - HKLM..Run: [WinampAgent] E:Program FilesWinampwinampa.exe

O4 - HKLM..Run: [avast!] E:PROGRA~1ALWILS~1Avast4ashDisp.exe

O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe

O4 - HKLM..Run: [HP Software Update] "C:Program FilesHPHP Software UpdateHPWuSchd2.exe"

O4 - HKLM..Run: [HP Component Manager] "C:Program FilesHPhpcoretechhpcmpmgr.exe"

O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32ctfmon.exe

O4 - HKCU..Run: [Gadu-Gadu] "E:Program FilesGadu-Gadugg.exe" /tray

O4 - HKCU..Run: [BitComet] "G:Program FilesBitCometBitComet.exe" /tray

O4 - Startup: OpenOffice.org 2.0.lnk = C:Program FilesOpenOffice.org 2.0programquickstart.exe

O4 - Global Startup: Adobe Reader Speed Launch.lnk = E:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe

O4 - Global Startup: D-Link AirPlus.lnk = ?

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:Program FilesHPDigital Imagingbinhpqtra08.exe

O8 - Extra context menu item: &D&ownload &with BitComet - res://G:Program FilesBitCometBitComet.exe/AddLink.htm

O8 - Extra context menu item: &D&ownload all video with BitComet - res://G:Program FilesBitCometBitComet.exe/AddVideo.htm

O8 - Extra context menu item: &D&ownload all with BitComet - res://G:Program FilesBitCometBitComet.exe/AddAllLink.htm

O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - G:Program FilesBitComettoolsBitCometBHO_1.1.8.30.dll

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:WINDOWSwebrelated.htm

O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:WINDOWSwebrelated.htm

O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - E:Program FilesIrfanViewEbayEbay.htm

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - E:Program FilesAlwil SoftwareAvast4aswUpdSv.exe

O23 - Service: Ati HotKey Poller - Unknown owner - C:WINDOWSSystem32Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:WINDOWSsystem32ati2sgag.exe

O23 - Service: avast! Antivirus - ALWIL Software - E:Program FilesAlwil SoftwareAvast4ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - E:Program FilesAlwil SoftwareAvast4ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - E:Program FilesAlwil SoftwareAvast4ashWebSv.exe" /service (file missing)

O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - E:Program FilesAlcohol SoftAlcohol 52StarWindStarWindService.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:WINDOWSsystem32ZoneLabsvsmon.exe

Kanciastoporty · Październik 2, 2007

log raczej czysty

maciex95 · Październik 4, 2007

Kod:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 19:22:46, on 2007-10-04

Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal



Running processes:

C:WINDOWSSystem32smss.exe

C:WINDOWSsystem32winlogon.exe

C:WINDOWSsystem32services.exe

C:WINDOWSsystem32lsass.exe

C:WINDOWSsystem32svchost.exe

C:WINDOWSSystem32svchost.exe

C:WINDOWSsystem32bgsvcgen.exe

C:Program FilesCommon FilesLightScribeLSSrvc.exe

C:WINDOWSsystem32svchost.exe

C:WINDOWSExplorer.EXE

C:WINDOWSsystem32wuauclt.exe

C:WINDOWSsystem32ctfmon.exe

C:WINDOWSsystem32spoolsv.exe

C:Program FilesDAEMON Tools SearchBarSearch.exe

C:Program FilesGadu-Gadugg.exe

C:Program FilesMozilla Firefoxfirefox.exe

C:Documents and SettingsmaciekPulpitHiJackThis.exe



R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = [url]http://www.nexon.com[/url]

R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = [url]http://count.flashget.com/count?status=0&ver=1.73.128&lng=en[/url]

R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza

O1 - Hosts: 89.149.200.219 l2authd.lineage2.com

O1 - Hosts: 89.149.200.219 l2testauthd.lineage2.com

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll

O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:PROGRA~1FlashGetjccatch.dll

O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:Program FilesMyGlobalSearchbar1.binMGSBAR.DLL

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_02binssv.dll

O2 - BHO: WhenUSearch Helper - {BA2325ED-F9EB-4830-8FCE-0BC35B16969B} - C:Program FilesDAEMON Tools SearchBarsearch.dll

O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:PROGRA~1FlashGetgetflash.dll

O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:Program FilesMyGlobalSearchbar1.binMGSBAR.DLL

O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:PROGRA~1FlashGetfgiebar.dll

O4 - HKLM..Run: [Symantec PIF AlertEng] "C:Program FilesCommon FilesSymantec SharedPIF{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}PIFSvc.exe" /a /m "C:Program FilesCommon FilesSymantec SharedPIF{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}AlertEng.dll"

O4 - HKLM..Run: [Acecad.Wtxpload] C:WINDOWSAcecadWtxpload.exe Acecad

O4 - HKLM..Run: [ZPOINT32] C:WINDOWSsystem32ZPOINT32.exe

O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe

O4 - HKCU..Run: [NexonPlug] C:NexonNexonPlugNexonPlug.exe

O4 - HKCU..Run: [Gadu-Gadu] "C:Program FilesGadu-Gadugg.exe" /tray

O4 - HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'USŁUGA LOKALNA')

O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'USŁUGA SIECIOWA')

O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM')

O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')

O4 - Startup: OpenOffice.org 2.2.lnk = C:Program FilesOpenOffice.org 2.2programquickstart.exe

O8 - Extra context menu item: &Download All with FlashGet - C:PROGRA~1FlashGetjc_all.htm

O8 - Extra context menu item: &Download with FlashGet - C:PROGRA~1FlashGetjc_link.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_02binssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_02binssv.dll

O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:PROGRA~1FlashGetFlashGet.exe

O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:PROGRA~1FlashGetFlashGet.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:Program FilesYahoo!CommonYinsthelper.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL

O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:WINDOWSsystem32bgsvcgen.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:Program FilesCommon FilesSymantec SharedccSvcHst.exe (file missing)

O23 - Service: Harmonogram automatycznej usługi LiveUpdate - Unknown owner - C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe (file missing)

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:Program FilesCommon FilesLightScribeLSSrvc.exe

O23 - Service: LiveUpdate - Unknown owner - C:PROGRA~1SymantecLIVEUP~1LUCOMS~1.EXE (file missing)

O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:Program FilesCommon FilesSymantec SharedccSvcHst.exe (file missing)

O23 - Service: LiveUpdate Notice Service - Unknown owner - C:Program FilesCommon FilesSymantec SharedPIF{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}PIFSvc.exe (file missing)

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32nvsvc32.exe

O23 - Service: Pml Driver HPZ12 - HP - C:WINDOWSsystem32HPZipm12.exe

O23 - Service: PnkBstrA - Unknown owner - C:WINDOWSsystem32PnkBstrA.exe

O23 - Service: Wintab32 - Unknown owner - C:WINDOWSsystem32Wintab32.exe



--

End of file - 5815 bytes

odpowiedzcie na PW

soyer181 · Październik 4, 2007

Kod:

Logfile of HijackThis v1.99.1

Scan saved at 20:04:38, on 2007-10-04

Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)



Running processes:

C:WINDOWSSystem32smss.exe

C:WINDOWSsystem32winlogon.exe

C:WINDOWSsystem32services.exe

C:WINDOWSsystem32lsass.exe

C:WINDOWSsystem32Ati2evxx.exe

C:WINDOWSsystem32svchost.exe

C:WINDOWSSystem32svchost.exe

C:WINDOWSsystem32Ati2evxx.exe

C:WINDOWSExplorer.EXE

C:WINDOWSsystem32spoolsv.exe

C:Program FilesEsetnod32krn.exe

C:Program FilesATI TechnologiesATI.ACEcli.exe

C:Program FilesPCI Audio ApplicationsBinEchoCtrl.exe

C:WINDOWSMixer.exe

C:WINDOWSsystem32ctfmon.exe

C:Program FilesWLANWConfigWConfig.exe

C:Program FilesATI TechnologiesATI.ACECLI.exe

C:WINDOWSsystem32wscntfy.exe

C:Program FilesGadu-Gadugg.exe

C:Program FilesAzureusAzureus.exe

C:PROGRA~1MOZILL~1FIREFOX.EXE

C:Program FilesHijackThisHijackThis.exe



R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_02binssv.dll

O4 - HKLM..Run: [ATIPTA] C:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe

O4 - HKLM..Run: [ATICCC] "C:Program FilesATI TechnologiesATI.ACEcli.exe" runtime

O4 - HKLM..Run: [C-Media Echo Control] C:Program FilesPCI Audio ApplicationsBinEchoCtrl.exe

O4 - HKLM..Run: [C-Media Mixer] Mixer.exe /startup

O4 - HKLM..Run: [Outpost Firewall] "C:Program FilesAgnitumOutpost Firewalloutpost.exe" /waitservice

O4 - HKLM..Run: [OutpostFeedBack] C:Program FilesAgnitumOutpost Firewallfeedback.exe /dump:os_startup

O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe

O4 - Global Startup: WConfig.lnk = ?

O4 - Global Startup: ATI CATALYST System Tray.lnk = C:Program FilesATI TechnologiesATI.ACECLI.exe

O8 - Extra context menu item: &D&ownload &with BitComet - res://C:Documents and SettingsSoyerPulpitBitComet_Win9x.exe/AddLink.htm

O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:Documents and SettingsSoyerPulpitBitComet_Win9x.exe/AddVideo.htm

O8 - Extra context menu item: &D&ownload all with BitComet - res://C:Documents and SettingsSoyerPulpitBitComet_Win9x.exe/AddAllLink.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_02binssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_02binssv.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe

O23 - Service: Ati HotKey Poller - Unknown owner - C:WINDOWSsystem32Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:WINDOWSsystem32ati2sgag.exe

O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset  - C:Program FilesEsetnod32krn.exe

O23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum Ltd. - C:Program FilesAgnitumOutpost Firewalloutpost.exe

Z góry dzięki

Kanciastoporty · Październik 4, 2007

• O4 - Global Startup: WConfig.lnk = ? - nie wiem tylko co to jest, reszta wydaje sie byc wporzadku
C

rogram FilesWLANWConfigWConfig.exe
w kazdym razie chyba od radiowki

maciex95 · Październik 6, 2007

możecie mi sprawdzic tego loga??

0wn3r · Październik 7, 2007

maciex95, nie wiem tylko co to jest :

O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C

rogram FilesMyGlobalSearchbar1.binMGSBAR.DLL

O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C

rogram FilesMyGlobalSearchbar1.binMGSBAR.DLL

Tak ogólnie to oprócz tego log czysty.

maciex95 · Październik 7, 2007

Dzięki

a to to jest z my global search jakis toolbar

niedawno mialem formata i zaraz po formacie to mialem

kiw kiw bomba · Październik 7, 2007

Kod:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 10:11:04, on 2007-10-07

Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal



Running processes:

C:WINDOWSSystem32smss.exe

C:WINDOWSSYSTEM32winlogon.exe

C:WINDOWSsystem32services.exe

C:WINDOWSsystem32lsass.exe

C:WINDOWSsystem32Ati2evxx.exe

C:WINDOWSsystem32svchost.exe

C:WINDOWSSystem32svchost.exe

C:WINDOWSsystem32spoolsv.exe

C:WINDOWSSYSTEM32Ati2evxx.exe

C:WINDOWSExplorer.EXE

C:Program FilesJavajre1.6.0_01binjusched.exe

C:Program FilesWinampwinampa.exe

C:Program FilesDAPDAP.EXE

C:Program FilesEsetnod32kui.exe

C:Program FilesEsetnod32krn.exe

C:WINDOWSsystem32ctfmon.exe

C:WINDOWSsystem32svchost.exe

C:Program FilesGadu-Gadugg.exe

C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe

C:PROGRA~1SPEEDB~1VideoAcceleratorEngine.exe

C:PROGRA~1SPEEDB~1VideoAccelerator.exe

C:Program FilesMozilla Firefoxfirefox.exe

C:Program FilesHijackThisHijackThis.exe



R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,SearchAssistant = [url]http://search.bearshare.com/sidebar.html?src=ssb[/url]

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = [url]http://www.mircarsivi.com/[/url]

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Microsoft Internet Explorer

R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza

R3 - URLSearchHook: (no name) - {0A94B116-4504-4e26-AB05-E61E474AA38B} - C:Program FilesAskPBarSrchAstt1.binA9SRCHAS.DLL

O2 - BHO: (no name) - Software - (no file)

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 5.0ReaderActiveXAcroIEHelper.ocx

O2 - BHO: Ask Search Assistant BHO - {0A94B111-4504-4e26-AB05-E61E474AA38B} - C:Program FilesAskPBarSrchAstt1.binA9SRCHAS.DLL

O2 - BHO: (no name) - {140BD8E3-C167-11D4-B4A3-080000180323} - (no file)

O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:Program FilesMyGlobalSearchbar1.binMGSBAR.DLL

O2 - BHO: CInterceptor Object - {38D3FE60-3D53-4F37-BB0E-C7A97A26A156} - C:Program FilesPando NetworksPandoPandoIEPlugin.dll

O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:PROGRA~1MEGAUP~1MEGAUP~1.DLL

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_01binssv.dll

O2 - BHO: Knight Online Toolbar Helper - {9D006D63-579B-4D77-9C12-15623661ADDA} - C:Program FilesKnight Online Toolbarv3.2.0.0Knight_Online_Toolbar.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar3.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier2.0.301.7164swg.dll

O2 - BHO: Ask Toolbar BHO - {F4D76F01-7896-458a-890F-E1F05C46069F} - C:Program FilesAskPBarbar1.binASKPBAR.DLL

O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:Program FilesMyGlobalSearchbar1.binMGSBAR.DLL

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar3.dll

O3 - Toolbar: Ask Toolbar - {F4D76F09-7896-458a-890F-E1F05C46069F} - C:Program FilesAskPBarbar1.binASKPBAR.DLL

O3 - Toolbar: Knight Online Toolbar - {E7D38ED4-2933-43B8-B0B9-52D11CE9CA10} - C:Program FilesKnight Online Toolbarv3.2.0.0Knight_Online_Toolbar.dll

O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:PROGRA~1MEGAUP~1MEGAUP~1.DLL

O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe

O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre1.6.0_01binjusched.exe"

O4 - HKLM..Run: [WinampAgent] C:Program FilesWinampwinampa.exe

O4 - HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k

O4 - HKLM..Run: [DownloadAccelerator] "C:Program FilesDAPDAP.EXE" /STARTUP

O4 - HKLM..Run: [nod32kui] "C:Program FilesEsetnod32kui.exe" /WAITSERVICE

O4 - HKLM..Run: [BearShare] "C:Program FilesBearShareBearShare.exe" /pause

O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe

O4 - HKCU..Run: [Gadu-Gadu] "C:Program FilesGadu-Gadugg.exe" /tray

O4 - HKCU..Run: [swg] C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe

O4 - HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'USŁUGA LOKALNA')

O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'USŁUGA SIECIOWA')

O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM')

O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')

O8 - Extra context menu item: &Clean Traces - C:Program FilesDAPPrivacy Packagedapcleanerie.htm

O8 - Extra context menu item: &Download with &DAP - C:Program FilesDAPdapextie.htm

O8 - Extra context menu item: Download &all with DAP - C:Program FilesDAPdapextie2.htm

O8 - Extra context menu item: Download All by FlashGet - C:PROGRA~1FlashGetjc_all.htm

O8 - Extra context menu item: Download using FlashGet - C:PROGRA~1FlashGetjc_link.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_01binssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_01binssv.dll

O9 - Extra button: Wyslij SMS'a - {215940F1-E7E0-4801-BEE3-44D045534106} - C:Program FilesCommon Filesmoje.js

O9 - Extra button: Rapidown - {57E91B47-F40A-11D1-B792-444553540011} - C:Program FilesRapidownrapidown.exe

O9 - Extra 'Tools' menuitem: Rapidown - {57E91B47-F40A-11D1-B792-444553540011} - C:Program FilesRapidownrapidown.exe

O12 - Plugin for .spop: C:Program FilesInternet ExplorerPluginsNPDocBox.dll

O16 - DPF: {48884C41-EFAC-433D-958A-9FADAC41408E} (EGamesPlugin Class) - [url]https://www.e-games.com.my/com/EGamesPlugin.cab[/url]

O17 - HKLMSystemCS1ServicesTcpipParameters: NameServer = 85.255.114.67 85.255.112.140

O17 - HKLMSystemCS2ServicesTcpipParameters: NameServer = 85.255.114.67 85.255.112.140

O17 - HKLMSystemCCSServicesTcpipParameters: NameServer = 85.255.114.67 85.255.112.140

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL

O20 - AppInit_DLLs: C:PROGRA~1GoogleGOOGLE~3GOEC62~1.DLL

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:WINDOWSsystem32Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:WINDOWSsystem32ati2sgag.exe

O23 - Service: GoogleDesktopManager - Google - C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe

O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset  - C:Program FilesEsetnod32krn.exe

O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:Program FilesSpyware Doctorsvcntaux.exe

O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:Program FilesSpyware Doctorswdsvc.exe

O23 - Service: VideoAcceleratorEngine - Speedbit Ltd. - C:PROGRA~1SPEEDB~1VideoAcceleratorEngine.exe



--

End of file - 7390 bytes

Mój pierwszy scan i kompletnie z tego nic nie rozumiem. Proszę o jak najdokładniejszy opis,
potrzebne do projektu. Chętnie poznam opinie kilku userów.

s0luti0n · Październik 7, 2007

Originally posted by kiw kiw bomba
Proszę o jak najdokładniejszy opis,
potrzebne do projektu

Projekt? Jesli chcesz poznac HJ to prosze: TU i TU

Chcesz sprawdzić swój log z Hijackthisa? Wklej go tutaj...

Były Moderator

Użytkownik

Użytkownik

Były Moderator

Były Moderator

Użytkownik

Użytkownik

Były Moderator

Użytkownik

Były Moderator

Użytkownik

Były Moderator

Użytkownik

Użytkownik

Były Moderator

Użytkownik

Były Moderator

Użytkownik

Użytkownik

Użytkownik