Witam.
Mam pewien problem otóż: Od wczoraj zamiast pulpitu pojawia mi się:
Zamiast pulpitu mam coś takiego, oczywiście da się to wyłączyć ale i tak za 15 sek pojawia się to znowu, nie wiecie w czym może być problem? Dodam że mam teraz avasta, ashampoo firewalla. Nie ściągałem żadnych rzeczy z nie pewnego źródła.
Prosiłbym o rade jak to usunąć. Wklejam również log z Hijackthis's:
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSExplorer.EXE
C
rogram FilesAlwil SoftwareAvast4aswUpdSv.exe
Crogram FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSsystem32spoolsv.exe
Crogram FilesAlwil SoftwareAvast4ashMaiSv.exe
Crogram FilesAlwil SoftwareAvast4ashWebSv.exe
CROGRA~1ALWILS~1Avast4ashDisp.exe
Crogram FilesAshampooAshampoo FireWallFireWall.exe
D:NeroNero 7Nero BackItUpNBKeyScan.exe
Crogram FilesAutoConnectAutoConnect.exe
Crogram FilesMSN MessengerMsnMsgr.Exe
Crogram FilesCommon FilesAheadLibNMBgMonitor.exe
Crogram FilesGadu-Gadugg.exe
Crogram FilesSony CorporationPicture PackagePicture Package MenuSonyTray.exe
Crogram FilesSony CorporationPicture PackagePicture Package ApplicationsResidence.exe
Crogram FilesCommon FilesAheadLibNMIndexingService.exe
Crogram FilesCommon FilesSystemsmss.exe
Crogram FilesCommon FilesAheadLibNMIndexStoreSvr.exe
C:WINDOWSsystem32devldr32.exe
Crogram FilesMozilla Firefoxfirefox.exe
C:WINDOWSsystem32wuauclt.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32cleanmgr.exe
Crogram FilesTrend MicroHijackThisHijackThis.exe
C:WINDOWSsystem32wuauclt.exe
Crogram FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://runonce.msn.com/
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - Crogram FilesAdobeAcrobat 5.0 CEReaderActiveXAcroIEHelper.ocx
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - Crogram FilesBitComettoolsBitCometBHO_1.1.7.4.dll
O2 - BHO: MSVPS System - {88418AA3-16F5-4FC2-A9D8-90B1266DF841} - C:WINDOWSnsduo.dll
O2 - BHO: TGTSoft Explorer Toolbar Changer - {C333CF63-767F-4831-94AC-E683D962C63C} - Crogram FilesTGTSoftStyleXPTGT_BHO.dll
O4 - HKLM..Run: [avast!] CROGRA~1ALWILS~1Avast4ashDisp.exe
O4 - HKLM..Run: [Ashampoo FireWall] "Crogram FilesAshampooAshampoo FireWallFireWall.exe" -TRAY
O4 - HKLM..Run: [NeroFilterCheck] Crogram FilesCommon FilesAheadLibNeroCheck.exe
O4 - HKLM..Run: [NBKeyScan] "D:NeroNero 7Nero BackItUpNBKeyScan.exe"
O4 - HKCU..Run: [AutoConnect] Crogram FilesAutoConnectAutoConnect.exe
O4 - HKCU..Run: [MsnMsgr] "Crogram FilesMSN MessengerMsnMsgr.Exe" /background
O4 - HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "Crogram FilesCommon FilesAheadLibNMBgMonitor.exe"
O4 - HKCU..Run: [Gadu-Gadu] "Crogram FilesGadu-Gadugg.exe" /tray
O4 - HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')
O4 - Startup: autostart.exe
O4 - Global Startup: Picture Package Menu.lnk = ?
O4 - Global Startup: Picture Package VCD Maker.lnk = ?
O8 - Extra context menu item: &D&ownload &with BitComet - res://Crogram FilesBitCometBitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://Crogram FilesBitCometBitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://Crogram FilesBitCometBitComet.exe/AddAllLink.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://CROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - Crogram FilesBitComettoolsBitCometBHO_1.1.7.4.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - CROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - Crogram FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - Crogram FilesMessengermsmsgs.exe
O17 - HKLMSystemCCSServicesTcpip..{6BFD3AC4-C215-4661-AC1E-0DE3A4E4D270}: NameServer = 85.255.113.125,85.255.112.159
O17 - HKLMSystemCCSServicesTcpip..{807513AC-DCB4-4A4C-B825-7B0C130E16D3}: NameServer = 85.255.113.125 85.255.112.159
O17 - HKLMSystemCS1ServicesTcpipParameters: NameServer = 85.255.113.125 85.255.112.159
O17 - HKLMSystemCS2ServicesTcpipParameters: NameServer = 85.255.113.125 85.255.112.159
O17 - HKLMSystemCCSServicesTcpipParameters: NameServer = 85.255.113.125 85.255.112.159
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - CROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 - Winlogon Notify: Antiwpa - C:WINDOWSSYSTEM32antiwpa.dll
O21 - SSODL: syscore - {999289EB-320C-4AC4-B931-35FDAD848553} - C:WINDOWSsyscore.dll (file missing)
O21 - SSODL: msmdev - {DC9FCAD3-CADB-434F-AA16-8F3D8A6DAE86} - C:WINDOWSmsmdev.dll (file missing)
O21 - SSODL: msmhost - {D918B88E-024A-4E88-9C1D-B9C9E78A465D} - C:WINDOWSmsmhost.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - Crogram FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - Crogram FilesAlwil SoftwareAvast4ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - Crogram FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - Crogram FilesAlwil SoftwareAvast4ashWebSv.exe
O23 - Service: NBService - Nero AG - D:NeroNero 7Nero BackItUpNBService.exe
O23 - Service: NMIndexingService - Nero AG - Crogram FilesCommon FilesAheadLibNMIndexingService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - Crogram FilesWinPcaprpcapd.exe
O24 - Desktop Component 0: Privacy Protection - file:///C:WINDOWSprivacy_dangerindex.htm
Dodam że skanowałem komputer Ad-Aware i nic nie wykrył. Pozdro
Edit:
usuwam to ale i tak po ponownym uruchomieniu komputera jest to samo.
Mam pewien problem otóż: Od wczoraj zamiast pulpitu pojawia mi się:
Zamiast pulpitu mam coś takiego, oczywiście da się to wyłączyć ale i tak za 15 sek pojawia się to znowu, nie wiecie w czym może być problem? Dodam że mam teraz avasta, ashampoo firewalla. Nie ściągałem żadnych rzeczy z nie pewnego źródła.
Prosiłbym o rade jak to usunąć. Wklejam również log z Hijackthis's:
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSExplorer.EXE
C
rogram FilesAlwil SoftwareAvast4aswUpdSv.exeC
rogram FilesAlwil SoftwareAvast4ashServ.exeC:WINDOWSsystem32spoolsv.exe
C
rogram FilesAlwil SoftwareAvast4ashMaiSv.exeC
rogram FilesAlwil SoftwareAvast4ashWebSv.exeC
ROGRA~1ALWILS~1Avast4ashDisp.exeC
rogram FilesAshampooAshampoo FireWallFireWall.exeD:NeroNero 7Nero BackItUpNBKeyScan.exe
C
rogram FilesAutoConnectAutoConnect.exeC
rogram FilesMSN MessengerMsnMsgr.ExeC
rogram FilesCommon FilesAheadLibNMBgMonitor.exeC
rogram FilesGadu-Gadugg.exeC
rogram FilesSony CorporationPicture PackagePicture Package MenuSonyTray.exeC
rogram FilesSony CorporationPicture PackagePicture Package ApplicationsResidence.exeC
rogram FilesCommon FilesAheadLibNMIndexingService.exeC
rogram FilesCommon FilesSystemsmss.exeC
rogram FilesCommon FilesAheadLibNMIndexStoreSvr.exeC:WINDOWSsystem32devldr32.exe
C
rogram FilesMozilla Firefoxfirefox.exeC:WINDOWSsystem32wuauclt.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32cleanmgr.exe
C
rogram FilesTrend MicroHijackThisHijackThis.exeC:WINDOWSsystem32wuauclt.exe
C
rogram FilesCommon FilesMicrosoft SharedSource EngineOSE.EXER0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://runonce.msn.com/
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C
rogram FilesAdobeAcrobat 5.0 CEReaderActiveXAcroIEHelper.ocxO2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C
rogram FilesBitComettoolsBitCometBHO_1.1.7.4.dllO2 - BHO: MSVPS System - {88418AA3-16F5-4FC2-A9D8-90B1266DF841} - C:WINDOWSnsduo.dll
O2 - BHO: TGTSoft Explorer Toolbar Changer - {C333CF63-767F-4831-94AC-E683D962C63C} - C
rogram FilesTGTSoftStyleXPTGT_BHO.dllO4 - HKLM..Run: [avast!] C
ROGRA~1ALWILS~1Avast4ashDisp.exeO4 - HKLM..Run: [Ashampoo FireWall] "C
rogram FilesAshampooAshampoo FireWallFireWall.exe" -TRAYO4 - HKLM..Run: [NeroFilterCheck] C
rogram FilesCommon FilesAheadLibNeroCheck.exeO4 - HKLM..Run: [NBKeyScan] "D:NeroNero 7Nero BackItUpNBKeyScan.exe"
O4 - HKCU..Run: [AutoConnect] C
rogram FilesAutoConnectAutoConnect.exeO4 - HKCU..Run: [MsnMsgr] "C
rogram FilesMSN MessengerMsnMsgr.Exe" /backgroundO4 - HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C
rogram FilesCommon FilesAheadLibNMBgMonitor.exe"O4 - HKCU..Run: [Gadu-Gadu] "C
rogram FilesGadu-Gadugg.exe" /trayO4 - HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')
O4 - Startup: autostart.exe
O4 - Global Startup: Picture Package Menu.lnk = ?
O4 - Global Startup: Picture Package VCD Maker.lnk = ?
O8 - Extra context menu item: &D&ownload &with BitComet - res://C
rogram FilesBitCometBitComet.exe/AddLink.htmO8 - Extra context menu item: &D&ownload all video with BitComet - res://C
rogram FilesBitCometBitComet.exe/AddVideo.htmO8 - Extra context menu item: &D&ownload all with BitComet - res://C
rogram FilesBitCometBitComet.exe/AddAllLink.htmO8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C
ROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C
rogram FilesBitComettoolsBitCometBHO_1.1.7.4.dllO9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C
ROGRA~1MICROS~2OFFICE11REFIEBAR.DLLO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C
rogram FilesMessengermsmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C
rogram FilesMessengermsmsgs.exeO17 - HKLMSystemCCSServicesTcpip..{6BFD3AC4-C215-4661-AC1E-0DE3A4E4D270}: NameServer = 85.255.113.125,85.255.112.159
O17 - HKLMSystemCCSServicesTcpip..{807513AC-DCB4-4A4C-B825-7B0C130E16D3}: NameServer = 85.255.113.125 85.255.112.159
O17 - HKLMSystemCS1ServicesTcpipParameters: NameServer = 85.255.113.125 85.255.112.159
O17 - HKLMSystemCS2ServicesTcpipParameters: NameServer = 85.255.113.125 85.255.112.159
O17 - HKLMSystemCCSServicesTcpipParameters: NameServer = 85.255.113.125 85.255.112.159
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C
ROGRA~1COMMON~1SkypeSKYPE4~1.DLLO20 - Winlogon Notify: Antiwpa - C:WINDOWSSYSTEM32antiwpa.dll
O21 - SSODL: syscore - {999289EB-320C-4AC4-B931-35FDAD848553} - C:WINDOWSsyscore.dll (file missing)
O21 - SSODL: msmdev - {DC9FCAD3-CADB-434F-AA16-8F3D8A6DAE86} - C:WINDOWSmsmdev.dll (file missing)
O21 - SSODL: msmhost - {D918B88E-024A-4E88-9C1D-B9C9E78A465D} - C:WINDOWSmsmhost.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C
rogram FilesAlwil SoftwareAvast4aswUpdSv.exeO23 - Service: avast! Antivirus - ALWIL Software - C
rogram FilesAlwil SoftwareAvast4ashServ.exeO23 - Service: avast! Mail Scanner - ALWIL Software - C
rogram FilesAlwil SoftwareAvast4ashMaiSv.exeO23 - Service: avast! Web Scanner - ALWIL Software - C
rogram FilesAlwil SoftwareAvast4ashWebSv.exeO23 - Service: NBService - Nero AG - D:NeroNero 7Nero BackItUpNBService.exe
O23 - Service: NMIndexingService - Nero AG - C
rogram FilesCommon FilesAheadLibNMIndexingService.exeO23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - C
rogram FilesWinPcaprpcapd.exeO24 - Desktop Component 0: Privacy Protection - file:///C:WINDOWSprivacy_dangerindex.htm
Dodam że skanowałem komputer Ad-Aware i nic nie wykrył. Pozdro
Edit:
Kod:
O24 - Desktop Component 0: Privacy Protection - file:///C:WINDOWSprivacy_dangerindex.htm