Neostrada cały czas mi wysyła –prosze o pomoc.
Cały czas cos mi wysyła i odbiera z netu.Jakis program mcafee32. Podaje scan HijackThis. Co wykasować.
Logfile of HijackThis v1.97.7
Scan saved at 22:21:11, on 2005–02–25
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.exe
C:WINDOWSSystem32RUNDLL32.EXE
C:WINDOWSSystem32CTHELPER.EXE
C:WINDOWSSystem32ctfmon.exe
C:Program FilesAVERTV2KQuickTV.exe
C:Program FilesLogitechMouseWaresystemem_exec.exe
C:Program FilesKerioPersonal Firewall 4kpf4ss.exe
C:WINDOWSSystem32 vsvc32.exe
C:Program FilesKerioPersonal Firewall 4kpf4gui.exe
C:WINDOWSSystem32mcafee32.exe
C:Program FilesKerioPersonal Firewall 4kpf4gui.exe
C:Program FilesOperaOpera.exe
C:Program Files otalcmdTOTALCMD.EXE
D:Uzytkiapora KerioHijackHijackThis.exe
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.onet.pl/
R0 – HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza
F0 – system.ini: Shell=Explorer.exe mcafee32.exe
F2 – REG:system.ini: Shell=Explorer.exe mcafee32.exe
O3 – Toolbar: &Radio – {8E718888–423F–11D2–876E–00A0C9082467} – C:WINDOWSSystem32msdxm.ocx
O4 – HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 – HKLM..Run: [nwiz] nwiz.exe /install
O4 – HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSSystem32NvMcTray.dll,NvTaskbarInit
O4 – HKLM..Run: [UpdReg] C:WINDOWSUpdreg.exe
O4 – HKLM..Run: [CTStartup] C:Program FilesCreativeSplash ScreenCTEaxSpl.EXE /run
O4 – HKLM..Run: [Jet Detection] C:Program FilesCreativeSBAudigyPROGRAMADGJDet.exe
O4 – HKLM..Run: [Logitech Utility] Logi_MwX.Exe
O4 – HKLM..Run: [CTHelper] CTHELPER.EXE
O4 – HKLM..Run: [AsioReg] REGSVR32.EXE /S CTASIO.DLL
O4 – HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32ctfmon.exe
O4 – Global Startup: QuickTV.lnk = C:Program FilesAVERTV2KQuickTV.exe
O16 – DPF: {6414512B–B978–451D–A0D8–FCFDF33E833C} (WUWebControl Class) – http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1109356037187
O17 – HKLMSystemCCSServicesTcpip..{B2866A4F–52D4–4DE6–A2FD–D1B125A149E7}: NameServer = 194.204.152.34 217.98.63.164
Dziekuje za pomoc.
Logfile of HijackThis v1.97.7
Scan saved at 22:21:11, on 2005–02–25
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.exe
C:WINDOWSSystem32RUNDLL32.EXE
C:WINDOWSSystem32CTHELPER.EXE
C:WINDOWSSystem32ctfmon.exe
C:Program FilesAVERTV2KQuickTV.exe
C:Program FilesLogitechMouseWaresystemem_exec.exe
C:Program FilesKerioPersonal Firewall 4kpf4ss.exe
C:WINDOWSSystem32 vsvc32.exe
C:Program FilesKerioPersonal Firewall 4kpf4gui.exe
C:WINDOWSSystem32mcafee32.exe
C:Program FilesKerioPersonal Firewall 4kpf4gui.exe
C:Program FilesOperaOpera.exe
C:Program Files otalcmdTOTALCMD.EXE
D:Uzytkiapora KerioHijackHijackThis.exe
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.onet.pl/
R0 – HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza
F0 – system.ini: Shell=Explorer.exe mcafee32.exe
F2 – REG:system.ini: Shell=Explorer.exe mcafee32.exe
O3 – Toolbar: &Radio – {8E718888–423F–11D2–876E–00A0C9082467} – C:WINDOWSSystem32msdxm.ocx
O4 – HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 – HKLM..Run: [nwiz] nwiz.exe /install
O4 – HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSSystem32NvMcTray.dll,NvTaskbarInit
O4 – HKLM..Run: [UpdReg] C:WINDOWSUpdreg.exe
O4 – HKLM..Run: [CTStartup] C:Program FilesCreativeSplash ScreenCTEaxSpl.EXE /run
O4 – HKLM..Run: [Jet Detection] C:Program FilesCreativeSBAudigyPROGRAMADGJDet.exe
O4 – HKLM..Run: [Logitech Utility] Logi_MwX.Exe
O4 – HKLM..Run: [CTHelper] CTHELPER.EXE
O4 – HKLM..Run: [AsioReg] REGSVR32.EXE /S CTASIO.DLL
O4 – HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32ctfmon.exe
O4 – Global Startup: QuickTV.lnk = C:Program FilesAVERTV2KQuickTV.exe
O16 – DPF: {6414512B–B978–451D–A0D8–FCFDF33E833C} (WUWebControl Class) – http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1109356037187
O17 – HKLMSystemCCSServicesTcpip..{B2866A4F–52D4–4DE6–A2FD–D1B125A149E7}: NameServer = 194.204.152.34 217.98.63.164
Dziekuje za pomoc.
Odpowiedzi: 1
Wylacz przywracanie systemu
Zakoncz proces i usun plik:
mcafee32.exe
FIX:
Przeszukaj rejestr i usun wszystko co w nazwie bedzie miało mcafee32.exe
Poszukaj rowniez navprotect.exe
Zakoncz proces i usun plik:
mcafee32.exe
FIX:
F0 – system.ini: Shell=Explorer.exe mcafee32.exe
F2 – REG:system.ini: Shell=Explorer.exe mcafee32.exe
Przeszukaj rejestr i usun wszystko co w nazwie bedzie miało mcafee32.exe
Poszukaj rowniez navprotect.exe
Strona 1 / 1
<p>Witam Mam od kilku dni ten sam problem ale mimo zasatosowaniu róznego typu rad ciągle nie mogę sobie poradzić. Neostrada cały czas mi coś wysyła i przezto mam strasznie mały transfer.</p><p>Moze to coś pomoże w zbadaniu co jest nie tak: </p><p>Logfile of HijackThis v1.99.1<br />Scan saved at 12:22:57, on 2006-08-31<br />Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)<br />MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)</p><p>Running processes:<br />C:\WINDOWS\System32\smss.exe<br />C:\WINDOWS\system32\winlogon.exe<br />C:\WINDOWS\system32\services.exe<br />C:\WINDOWS\system32\lsass.exe<br />C:\WINDOWS\system32\svchost.exe<br />C:\WINDOWS\System32\svchost.exe<br />C:\WINDOWS\system32\spoolsv.exe<br />C:\Program Files\MKS\Bin\NetMonSV.exe<br />C:\Program Files\MKS\Bin\mksmonsv.exe<br />C:\WINDOWS\System32\nvsvc32.exe<br />C:\WINDOWS\System32\svchost.exe<br />C:\WINDOWS\Explorer.EXE<br />C:\WINDOWS\System32\devldr32.exe<br />C:\Program Files\Common Files\Real\Update_OB\realsched.exe<br />C:\Program Files\MKS\Bin\mks_menu.exe<br />C:\Program Files\MKS\Bin\ABregmon.exe<br />C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe<br />C:\Program Files\MKS\Bin\mks_scan.exe<br />C:\WINDOWS\System32\taskmgr.exe<br />C:\Program Files\Tlen.pl\tlen.exe<br />C:\Program Files\Opera\Opera.exe<br />C:\Documents and Settings\wodzu\Pulpit\hijackthis\HijackThis.exe</p><p>R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = <br />R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza<br />R3 - Default URLSearchHook is missing<br />F2 - REG:system.ini: UserInit=userinit.exe<br />O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll<br />O2 - BHO: (no name) - {1da7dbe8-c51b-4ae4-bc6e-21863349b0b4} - C:\Program Files\IntCodec\isaddon.dll (file missing)<br />O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll<br />O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll<br />O2 - BHO: (no name) - {B6F1A4CB-DADD-4D0C-BDFC-E945647302C1} - c:\system.dll (file missing)<br />O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx<br />O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe<br />O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot<br />O4 - HKLM\..\Run: [MKS_MENU] C:\Program Files\MKS\Bin\mks_menu.exe<br />O4 - HKLM\..\Run: [ABREGMON] C:\Program Files\MKS\Bin\ABregmon.exe<br />O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon<br />O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"<br />O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup<br />O4 - HKLM\..\Run: [nwiz] nwiz.exe /install<br />O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit<br />O4 - HKLM\..\RunServices: [stonedrv] c:\windows\system32\stonedrv.exe<br />O4 - HKCU\..\Run: [Komunikator] "C:\Program Files\Tlen.pl\tlen.exe" --confdir=home<br />O4 - HKCU\..\Run: [stonedrv] c:\windows\system32\stonedrv.exe<br />O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE<br />O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe<br />O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll<br />O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll<br />O15 - Trusted Zone: <a href="http://click.getmirar.com/">http://click.getmirar.com</a> (HKLM)<br />O15 - Trusted Zone: <a href="http://click.mirarsearch.com/">http://click.mirarsearch.com</a> (HKLM)<br />O15 - Trusted Zone: <a href="http://redirect.mirarsearch.com/">http://redirect.mirarsearch.com</a> (HKLM)<br />O15 - Trusted Zone: <a href="http://www.mirarsearch.com/">http://www.mirarsearch.com</a> (HKLM)<br />O16 - DPF: {33331111-1111-1111-1111-611111193423} - <br />O16 - DPF: {33331111-1111-1111-1111-611111193429} - <br />O16 - DPF: {33331111-1111-1111-1111-611111193457} - <a>file://c:\ex.cab</a><br />O16 - DPF: {33331111-1111-1111-1111-611111193458} - <a>file://c:\ex.cab</a><br />O16 - DPF: {33331111-1111-1111-1111-615111193427} - <br />O16 - DPF: {33331111-1111-1111-1111-622221193458} - <a>file://c:\ex.cab</a><br />O16 - DPF: {33331111-1131-1111-1111-611111193428} - <br />O16 - DPF: {43331111-1111-1111-1111-611111195622} - <br />O16 - DPF: {64311111-1111-1121-1111-111191113457} - <a>file://c:\eied_s7.cab</a><br />O17 - HKLM\System\CCS\Services\Tcpip\..\{89050E03-7203-403E-80C0-E48DC3F8F495}: NameServer = 194.204.152.34 217.98.63.164<br />O20 - AppInit_DLLs: C:\WINDOWS\System32\rundll32.dll<br />O21 - SSODL: SystemCheck2 - {54645654-2225-4455-44A1-9F4543D34546} - C:\WINDOWS\System32\vbsys2.dll<br />O23 - Service: ArcaBit NetMonitor (ABNetMon) - ArcaBit sp. z o.o. - C:\Program Files\MKS\Bin\NetMonSV.exe<br />O23 - Service: MS Software Shadow Download Provider (dnlsvc) - Unknown owner - C:\DOCUME~1\wodzu\USTAWI~1\Temp\dnlsvc.exe (file missing)<br />O23 - Service: MkSUpdateInt - MkS Sp. z o. o. - C:\Program Files\MKS\bin\MkSUpdateInt.exe<br />O23 - Service: MkS_Vir Monitor (MksVirMonSvc) - Unknown owner - C:\Program Files\MKS\Bin\mksmonsv.exe<br />O23 - Service: MkS_Scan - Unknown owner - C:\Program Files\MKS\Bin\mks_scan.exe<br />O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe</p><p>Prosze o pomoc bo już sam nie wiem co robić a nie mam czasu ani ochoty zeby bawić sie w foematowanie dysku</p>
W dziale Bezpieczeństwo jest instrukcja jak sobie loga sprawdzić - zajrzyj tam i najpierw sprawdź samodzielnie (a masz trochę syfów). Jak skończysz to wrzuć loga kontrolnego. Jak będziesz miał wątpliwości lub sobie nie będziesz z czymś radził to pisz.<br />
<p>Witam ponownie</p><p>Zrobiłem dokładnie tak jak opisane w dziale "bezpieczeństwo" I wydawało mnie sie że coś to pomogło bo było kilka dni spokoju. NIestety od dziś jest znowu to samo, z taką różnicą ze po sprawdzeniu loga analizator twierdzi ze wszysko jest już OK ale komp cały czas coś wysyła. </p><p>Oto obecny stan zeczy</p><p>Logfile of HijackThis v1.99.1<br />Scan saved at 11:00:36, on 2006-09-07<br />Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)<br />MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)</p><p>Running processes:<br />C:\WINDOWS\System32\smss.exe<br />C:\WINDOWS\system32\winlogon.exe<br />C:\WINDOWS\system32\services.exe<br />C:\WINDOWS\system32\lsass.exe<br />C:\WINDOWS\system32\svchost.exe<br />C:\WINDOWS\System32\svchost.exe<br />C:\WINDOWS\system32\spoolsv.exe<br />C:\Program Files\MKS\Bin\NetMonSV.exe<br />C:\Program Files\MKS\Bin\mksmonsv.exe<br />C:\WINDOWS\System32\nvsvc32.exe<br />C:\WINDOWS\System32\svchost.exe<br />C:\WINDOWS\Explorer.EXE<br />C:\Program Files\Common Files\Real\Update_OB\realsched.exe<br />C:\WINDOWS\System32\devldr32.exe<br />C:\Program Files\MKS\Bin\mks_menu.exe<br />C:\Program Files\MKS\Bin\ABregmon.exe<br />C:\WINDOWS\System32\taskmgr.exe<br />C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe<br />C:\Program Files\MKS\Bin\mks_scan.exe<br />C:\Program Files\Internet Explorer\iexplore.exe<br />C:\Documents and Settings\wodzu\Pulpit\hijackthis\HijackThis.exe</p><p>R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = <br />R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza<br />F2 - REG:system.ini: UserInit=userinit.exe<br />O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll<br />O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll<br />O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll<br />O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx<br />O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe<br />O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot<br />O4 - HKLM\..\Run: [MKS_MENU] C:\Program Files\MKS\Bin\mks_menu.exe<br />O4 - HKLM\..\Run: [ABREGMON] C:\Program Files\MKS\Bin\ABregmon.exe<br />O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon<br />O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"<br />O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup<br />O4 - HKLM\..\Run: [nwiz] nwiz.exe /install<br />O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit<br />O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe<br />O4 - HKCU\..\Run: [Komunikator] "C:\Program Files\Tlen.pl\tlen.exe" --confdir=home<br />O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE<br />O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe<br />O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll<br />O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll<br />O15 - Trusted Zone: <a href="http://click.getmirar.com/">http://click.getmirar.com</a> (HKLM)<br />O15 - Trusted Zone: <a href="http://click.mirarsearch.com/">http://click.mirarsearch.com</a> (HKLM)<br />O15 - Trusted Zone: <a href="http://redirect.mirarsearch.com/">http://redirect.mirarsearch.com</a> (HKLM)<br />O15 - Trusted Zone: <a href="http://www.mirarsearch.com/">http://www.mirarsearch.com</a> (HKLM)<br />O17 - HKLM\System\CCS\Services\Tcpip\..\{89050E03-7203-403E-80C0-E48DC3F8F495}: NameServer = 194.204.152.34 217.98.63.164<br />O23 - Service: ArcaBit NetMonitor (ABNetMon) - ArcaBit sp. z o.o. - C:\Program Files\MKS\Bin\NetMonSV.exe<br />O23 - Service: MS Software Shadow Download Provider (dnlsvc) - Unknown owner - C:\DOCUME~1\wodzu\USTAWI~1\Temp\dnlsvc.exe (file missing)<br />O23 - Service: MkSUpdateInt - MkS Sp. z o. o. - C:\Program Files\MKS\bin\MkSUpdateInt.exe<br />O23 - Service: MkS_Vir Monitor (MksVirMonSvc) - Unknown owner - C:\Program Files\MKS\Bin\mksmonsv.exe<br />O23 - Service: MkS_Scan - Unknown owner - C:\Program Files\MKS\Bin\mks_scan.exe<br />O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe</p><p> </p>
<p>to jeszce wywal</p><p>O17 - HKLM\System\CCS\Services\Tcpip\..\{89050E03-7203-403E-80C0-E48DC3F8F495}: NameServer = 194.204.152.34 217.98.63.164</p><p>-chyba że znasz ten adres i z nim jakieś wymiany plików robicie<br /></p><p>O wylaczeniu przywracania pamiętałeś? To mogło spowodować że problem powrócił</p>
<BLOCKQUOTE><div><img src="http://portal.centrumxp.pl/Themes/default/images/icon-quote.gif"> <strong>Seeker:</strong></div><div><p>to jeszce wywal</p><p>O17 - HKLM\System\CCS\Services\Tcpip\..\{89050E03-7203-403E-80C0-E48DC3F8F495}: NameServer = 194.204.152.34 217.98.63.164</p></div></BLOCKQUOTE>Seeker, toz to tepsniane DNSy. <br /><br />wodzu, nie usuwaj tego.<br /><br />Pozbadz sie uslugi:<br />O23 - Service: MS Software Shadow Download Provider (dnlsvc) - Unknown owner - C:\DOCUME~1\wodzu\USTAWI~1\Temp\dnlsvc.exe (file missing)<br />To trojan. Z Uruchom "services.msc", wyszukaj usluge MS Software Shadow Download Provider (dnlsvc), wylacz, uruchaianie ustaw na "wylaczone". Wyszukaj na dysku plik dnlsvc.exe i usun.<br />Pozniej wywolaj z Uruchom "cmd" i wykonaj:<br />sc delete dnlsvc <br /> <br />
<BLOCKQUOTE><div><img src="http://portal.centrumxp.pl/Themes/default/images/icon-quote.gif"> <strong>EL NINO:</strong></div><div><BLOCKQUOTE><div><img src="http://portal.centrumxp.pl/Themes/default/images/icon-quote.gif"> <strong>Seeker:</strong></div><div> <p>to jeszce wywal</p><p>O17 - HKLM\System\CCS\Services\Tcpip\..\{89050E03-7203-403E-80C0-E48DC3F8F495}: NameServer = 194.204.152.34 217.98.63.164</p><p></div></BLOCKQUOTE>Seeker, toz to tepsniane DNSy. <br /><br /></div></BLOCKQUOTE></p><p>Taaak? nie używam , ,<img src="http://portal.centrumxp.pl/emoticons/emotion-4.gif" alt="Stick out tongue" /></p><p> a bo mnie się pomylyło z takim jednym <img src="http://portal.centrumxp.pl/emoticons/emotion-10.gif" alt="Embarrassed" /> <img src="http://portal.centrumxp.pl/emoticons/emotion-2.gif" alt="Big Smile" /></p>
<BLOCKQUOTE><div><img src="http://portal.centrumxp.pl/Themes/default/images/icon-quote.gif"> <strong>Seeker:</strong></div><div>Taaak? nie używam , ,<img src="http://portal.centrumxp.pl/emoticons/emotion-4.gif" alt="Stick out tongue" /></div></BLOCKQUOTE>W Twoim wieku to nawet nie jest wskazane<img src="http://portal.centrumxp.pl/emoticons/emotion-4.gif" alt="Stick out tongue" />.
<p>Witam Zrobiłem wszystko dokłądnie tak ja napisane ale niestety to też nic nie pomogło. Neostrada dalej coś wysyła. </p><p>Oto najnowszy log</p><p>Logfile of HijackThis v1.99.1<br />Scan saved at 13:10:28, on 2006-09-07<br />Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)<br />MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)</p><p>Running processes:<br />C:\WINDOWS\System32\smss.exe<br />C:\WINDOWS\system32\winlogon.exe<br />C:\WINDOWS\system32\services.exe<br />C:\WINDOWS\system32\lsass.exe<br />C:\WINDOWS\system32\svchost.exe<br />C:\WINDOWS\System32\svchost.exe<br />C:\WINDOWS\system32\spoolsv.exe<br />C:\Program Files\MKS\Bin\NetMonSV.exe<br />C:\Program Files\MKS\Bin\mksmonsv.exe<br />C:\WINDOWS\System32\nvsvc32.exe<br />C:\WINDOWS\System32\svchost.exe<br />C:\WINDOWS\Explorer.EXE<br />C:\Program Files\Common Files\Real\Update_OB\realsched.exe<br />C:\WINDOWS\System32\devldr32.exe<br />C:\WINDOWS\System32\taskmgr.exe<br />C:\Program Files\MKS\Bin\mks_menu.exe<br />C:\Program Files\MKS\Bin\ABregmon.exe<br />C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe<br />C:\Program Files\MKS\Bin\mks_scan.exe<br />C:\Program Files\Internet Explorer\iexplore.exe<br />C:\WINDOWS\system32\mmc.exe<br />C:\Documents and Settings\wodzu\Pulpit\hijackthis\HijackThis.exe</p><p>R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = <br />R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza<br />F2 - REG:system.ini: UserInit=userinit.exe<br />O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll<br />O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll<br />O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll<br />O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx<br />O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe<br />O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot<br />O4 - HKLM\..\Run: [MKS_MENU] C:\Program Files\MKS\Bin\mks_menu.exe<br />O4 - HKLM\..\Run: [ABREGMON] C:\Program Files\MKS\Bin\ABregmon.exe<br />O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon<br />O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"<br />O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup<br />O4 - HKLM\..\Run: [nwiz] nwiz.exe /install<br />O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit<br />O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe<br />O4 - HKCU\..\Run: [Komunikator] "C:\Program Files\Tlen.pl\tlen.exe" --confdir=home<br />O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE<br />O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe<br />O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll<br />O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll<br />O15 - Trusted Zone: <a href="http://click.getmirar.com/">http://click.getmirar.com</a> (HKLM)<br />O15 - Trusted Zone: <a href="http://click.mirarsearch.com/">http://click.mirarsearch.com</a> (HKLM)<br />O15 - Trusted Zone: <a href="http://redirect.mirarsearch.com/">http://redirect.mirarsearch.com</a> (HKLM)<br />O15 - Trusted Zone: <a href="http://www.mirarsearch.com/">http://www.mirarsearch.com</a> (HKLM)<br />O17 - HKLM\System\CCS\Services\Tcpip\..\{89050E03-7203-403E-80C0-E48DC3F8F495}: NameServer = 194.204.152.34 217.98.63.164<br />O23 - Service: ArcaBit NetMonitor (ABNetMon) - ArcaBit sp. z o.o. - C:\Program Files\MKS\Bin\NetMonSV.exe<br />O23 - Service: MkSUpdateInt - MkS Sp. z o. o. - C:\Program Files\MKS\bin\MkSUpdateInt.exe<br />O23 - Service: MkS_Vir Monitor (MksVirMonSvc) - Unknown owner - C:\Program Files\MKS\Bin\mksmonsv.exe<br />O23 - Service: MkS_Scan - Unknown owner - C:\Program Files\MKS\Bin\mks_scan.exe<br />O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe</p><p> </p>
wodzu, dwie sprawy:<br /><br />1. Wszystkie wpisy (4 sztuki) O15 z "mirarsearch.com" - czy masz stamtad jakis Toolbar ? Bo jesli nie, trzeba czyscic.<br /><a href="http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453078818" target="_blank">http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453078818</a> na dole strony w okienkach znajdziesz nazwy plikow, wpisow w rejestrze.<br /><br />2. Czy podczas robienia loga korzystales z przystawki MMC ? -> C:\WINDOWS\system32\mmc.exe<br /> Jesli nie, bylaby to prawdopodobnie Nimda i oczywiscie na to tez jest lekarstwo -><a href="http://www.kaspersky.pl/services.html?s=faq&s_faq=details&category_id=3&details_id=29" target="_blank"> http://www.kaspersky.pl/services.html?s=faq&s_faq=details&category_id=3&details_id=29</a><br />
<p>Witam</p><p>Zrobiłem wszystko dokładnie tak jak opisane i nic sie niepoprawiło. Powiem wiecej jest chyab nawet gorzej bo zwiększył się transfer wysyłanych. Otworzenie tej strony zajeło mi około 10 min. Ja już sam nie wiem co jest i gdzie jeszcze mozna tego szukać.</p><p>Oto najnowszy log</p><p>Logfile of HijackThis v1.99.1<br />Scan saved at 15:58:23, on 2006-09-08<br />Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)<br />MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)</p><p>Running processes:<br />C:\WINDOWS\System32\smss.exe<br />C:\WINDOWS\system32\winlogon.exe<br />C:\WINDOWS\system32\services.exe<br />C:\WINDOWS\system32\lsass.exe<br />C:\WINDOWS\system32\svchost.exe<br />C:\WINDOWS\System32\svchost.exe<br />C:\WINDOWS\system32\spoolsv.exe<br />C:\Program Files\MKS\Bin\NetMonSV.exe<br />C:\Program Files\MKS\Bin\mksmonsv.exe<br />C:\WINDOWS\System32\nvsvc32.exe<br />C:\WINDOWS\System32\svchost.exe<br />C:\WINDOWS\Explorer.EXE<br />C:\WINDOWS\System32\taskmgr.exe<br />C:\WINDOWS\System32\devldr32.exe<br />C:\Program Files\Common Files\Real\Update_OB\realsched.exe<br />C:\Program Files\MKS\Bin\mks_menu.exe<br />C:\Program Files\MKS\Bin\mks_scan.exe<br />C:\Program Files\MKS\Bin\ABregmon.exe<br />C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe<br />C:\Program Files\Internet Explorer\iexplore.exe<br />C:\Documents and Settings\wodzu\Pulpit\hijackthis\HijackThis.exe</p><p>R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = <br />R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza<br />F2 - REG:system.ini: UserInit=userinit.exe<br />O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll<br />O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll<br />O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll<br />O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx<br />O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe<br />O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot<br />O4 - HKLM\..\Run: [MKS_MENU] C:\Program Files\MKS\Bin\mks_menu.exe<br />O4 - HKLM\..\Run: [ABREGMON] C:\Program Files\MKS\Bin\ABregmon.exe<br />O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon<br />O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup<br />O4 - HKLM\..\Run: [nwiz] nwiz.exe /install<br />O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit<br />O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe<br />O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto<br />O4 - HKCU\..\Run: [Komunikator] "C:\Program Files\Tlen.pl\tlen.exe" --confdir=home<br />O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE<br />O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe<br />O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll<br />O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll<br />O17 - HKLM\System\CCS\Services\Tcpip\..\{89050E03-7203-403E-80C0-E48DC3F8F495}: NameServer = 194.204.152.34 217.98.63.164<br />O23 - Service: ArcaBit NetMonitor (ABNetMon) - ArcaBit sp. z o.o. - C:\Program Files\MKS\Bin\NetMonSV.exe<br />O23 - Service: MkSUpdateInt - MkS Sp. z o. o. - C:\Program Files\MKS\bin\MkSUpdateInt.exe<br />O23 - Service: MkS_Vir Monitor (MksVirMonSvc) - Unknown owner - C:\Program Files\MKS\Bin\mksmonsv.exe<br />O23 - Service: MkS_Scan - Unknown owner - C:\Program Files\MKS\Bin\mks_scan.exe<br />O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe</p><p> </p>
<p>Ściągnij i zrób loga Silent Runners. Loga pokaż.<br /></p>
<p>Oto log z Silent Runners Nie wiem czy kompletny czy nie ale moze coś pomoże</p><p>"Silent Runners.vbs", revision 48, <a href="http://www.silentrunners.org/">http://www.silentrunners.org/</a><br />Operating System: Windows XP<br />Output limited to non-default values, except where indicated by "{++}"</p><p><br />Startup items buried in registry:<br />---------------------------------</p><p>HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}<br />"Komunikator" = ""C:\Program Files\Tlen.pl\tlen.exe" --confdir=home" ["o2.pl Sp. z o.o."]</p><p>HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\ {++}<br />"DriverLoad" = (empty string)<br />"DriverCheck" = (empty string)<br />"SystemDriverLoad" = (empty string)<br />"Winhost" = (empty string)<br />"Winhost1" = (empty string)<br />"Winhost2" = (empty string)<br />"Winhost3" = (empty string)<br />"Winhost4" = (empty string)<br />"SystemDriver" = "c:\DriverLoad\windrv.exe" [file not found]<br />"FDriver" = "c:\DriverLoad\windrv.exe" [file not found]<br />"ADriver" = "c:\DriverLoad\windrv.exe" [file not found]<br />"CDriver" = "c:\DriverLoad\windrv.exe" [file not found]<br />"DDriver" = "c:\DriverLoad\windrv.exe" [file not found]</p><p>HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}<br />"NeroFilterCheck" = "C:\WINDOWS\system32\NeroCheck.exe" ["Ahead Software Gmbh"]<br />"TkBellExe" = ""C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot" ["RealNetworks, Inc."]<br />"MKS_MENU" = "C:\Program Files\MKS\Bin\mks_menu.exe" ["MKS Sp. z o.o."]<br />"ABREGMON" = "C:\Program Files\MKS\Bin\ABregmon.exe" ["ArcaBit"]<br />"SpeedTouch USB Diagnostics" = ""C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon" ["THOMSON multimedia"]<br />"NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup" [MS]<br />"nwiz" = "nwiz.exe /install" ["NVIDIA Corporation"]<br />"NvMediaCenter" = "RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit" [MS]<br />"TrojanScanner" = "C:\Program Files\Trojan Remover\Trjscan.exe" ["Simply Super Software"]<br />"MSConfig" = "C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto" [MS]</p><p>HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\<br />{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided)<br /> -> {HKLM...CLSID} = "AcroIEHlprObj Class"<br /> \InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"]<br />{53707962-6F74-2D53-2644-206D7942484F}\(Default) = (no title provided)<br /> -> {HKLM...CLSID} = (no title provided)<br /> \InProcServer32\(Default) = "C:\PROGRA~1\SPYBOT~1\SDHelper.dll" ["Safer Networking Limited"]<br />{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided)<br /> -> {HKLM...CLSID} = "SSVHelper Class"<br /> \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll" ["Sun Microsystems, Inc."]</p><p>HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\<br />"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania"<br /> -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania"<br /> \InProcServer32\(Default) = "deskpan.dll" [file not found]<br />"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu"<br /> -> {HKLM...CLSID} = "HyperTerminal Icon Ext"<br /> \InProcServer32\(Default) = "C:\WINDOWS\System32\hticons.dll" ["Hilgraeve, Inc."]<br /></p>
Nie jest kompletny ten log. Zrób go jeszcze raz - poczekaj na komunikat o zakończeniu.<br />
Czekałem około 10 min i nic się nie pojawiło. Spróbuje zrobić jeszcze raz i poczekam dłóżej
<p>Czekałem 30 min i nic nie wyskoczyłe Ale w logu jest jakby wiecej informacji</p><p>"Silent Runners.vbs", revision 48, <a href="http://www.silentrunners.org/">http://www.silentrunners.org/</a><br />Operating System: Windows XP<br />Output limited to non-default values, except where indicated by "{++}"</p><p><br />Startup items buried in registry:<br />---------------------------------</p><p>HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}<br />"Komunikator" = ""C:\Program Files\Tlen.pl\tlen.exe" --confdir=home" ["o2.pl Sp. z o.o."]</p><p>HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\ {++}<br />"DriverLoad" = (empty string)<br />"DriverCheck" = (empty string)<br />"SystemDriverLoad" = (empty string)<br />"Winhost" = (empty string)<br />"Winhost1" = (empty string)<br />"Winhost2" = (empty string)<br />"Winhost3" = (empty string)<br />"Winhost4" = (empty string)<br />"SystemDriver" = "c:\DriverLoad\windrv.exe" [file not found]<br />"FDriver" = "c:\DriverLoad\windrv.exe" [file not found]<br />"ADriver" = "c:\DriverLoad\windrv.exe" [file not found]<br />"CDriver" = "c:\DriverLoad\windrv.exe" [file not found]<br />"DDriver" = "c:\DriverLoad\windrv.exe" [file not found]</p><p>HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}<br />"NeroFilterCheck" = "C:\WINDOWS\system32\NeroCheck.exe" ["Ahead Software Gmbh"]<br />"TkBellExe" = ""C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot" ["RealNetworks, Inc."]<br />"MKS_MENU" = "C:\Program Files\MKS\Bin\mks_menu.exe" ["MKS Sp. z o.o."]<br />"ABREGMON" = "C:\Program Files\MKS\Bin\ABregmon.exe" ["ArcaBit"]<br />"SpeedTouch USB Diagnostics" = ""C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon" ["THOMSON multimedia"]<br />"NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup" [MS]<br />"nwiz" = "nwiz.exe /install" ["NVIDIA Corporation"]<br />"NvMediaCenter" = "RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit" [MS]<br />"TrojanScanner" = "C:\Program Files\Trojan Remover\Trjscan.exe" ["Simply Super Software"]</p><p>HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\<br />{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided)<br /> -> {HKLM...CLSID} = "AcroIEHlprObj Class"<br /> \InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"]<br />{53707962-6F74-2D53-2644-206D7942484F}\(Default) = (no title provided)<br /> -> {HKLM...CLSID} = (no title provided)<br /> \InProcServer32\(Default) = "C:\PROGRA~1\SPYBOT~1\SDHelper.dll" ["Safer Networking Limited"]<br />{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided)<br /> -> {HKLM...CLSID} = "SSVHelper Class"<br /> \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll" ["Sun Microsystems, Inc."]</p><p>HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\<br />"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania"<br /> -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania"<br /> \InProcServer32\(Default) = "deskpan.dll" [file not found]<br />"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu"<br /> -> {HKLM...CLSID} = "HyperTerminal Icon Ext"<br /> \InProcServer32\(Default) = "C:\WINDOWS\System32\hticons.dll" ["Hilgraeve, Inc."]<br />"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"<br /> -> {HKLM...CLSID} = "WinRAR"<br /> \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]<br />"{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}" = "Shell Extensions for RealOne Player"<br /> -> {HKLM...CLSID} = "RealOne Player Context Menu Class"<br /> \InProcServer32\(Default) = "C:\Program Files\Real\RealPlayer\rpshell.dll" ["RealNetworks, Inc."]<br />"{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class"<br /> -> {HKLM...CLSID} = "DesktopContext Class"<br /> \InProcServer32\(Default) = "C:\WINDOWS\System32\nvcpl.dll" ["NVIDIA Corporation"]<br />"{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper"<br /> -> {HKLM...CLSID} = "NVIDIA CPL Extension"<br /> \InProcServer32\(Default) = "C:\WINDOWS\System32\nvcpl.dll" ["NVIDIA Corporation"]<br />"{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer"<br /> -> {HKLM...CLSID} = "Desktop Explorer"<br /> \InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"]<br />"{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu"<br /> -> {HKLM...CLSID} = (no title provided)<br /> \InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"]<br />"{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu"<br /> -> {HKLM...CLSID} = "nView Desktop Context Menu"<br /> \InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"]<br />"{52B87208-9CCF-42C9-B88E-069281105805}" = "Trojan Remover Shell Extension"<br /> -> {HKLM...CLSID} = "Trojan Remover Shell Extension"<br /> \InProcServer32\(Default) = "C:\PROGRA~1\TROJAN~1\Trshlex.dll" ["Simply Super Software"]</p><p>HKLM\Software\Classes\*\shellex\ContextMenuHandlers\<br />MkS_Vir\(Default) = "{CC4245C0-D511-11D0-8918-444553540000}"<br /> -> {HKLM...CLSID} = "MkS_Vir Shell Extension"<br /> \InProcServer32\(Default) = "C:\Program Files\MKS\Bin\MkSShell.dll" [null data]<br />Trojan Remover\(Default) = "{52B87208-9CCF-42C9-B88E-069281105805}"<br /> -> {HKLM...CLSID} = "Trojan Remover Shell Extension"<br /> \InProcServer32\(Default) = "C:\PROGRA~1\TROJAN~1\Trshlex.dll" ["Simply Super Software"]<br />WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"<br /> -> {HKLM...CLSID} = "WinRAR"<br /> \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]</p><p>HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\<br />WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"<br /> -> {HKLM...CLSID} = "WinRAR"<br /> \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]</p><p>HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\<br />MkS_Vir\(Default) = "{CC4245C0-D511-11D0-8918-444553540000}"<br /> -> {HKLM...CLSID} = "MkS_Vir Shell Extension"<br /> \InProcServer32\(Default) = "C:\Program Files\MKS\Bin\MkSShell.dll" [null data]<br />Trojan Remover\(Default) = "{52B87208-9CCF-42C9-B88E-069281105805}"<br /> -> {HKLM...CLSID} = "Trojan Remover Shell Extension"<br /> \InProcServer32\(Default) = "C:\PROGRA~1\TROJAN~1\Trshlex.dll" ["Simply Super Software"]<br />WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"<br /> -> {HKLM...CLSID} = "WinRAR"<br /> \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]</p><p><br />Active Desktop and Wallpaper:<br />-----------------------------</p><p>Active Desktop is disabled at this entry:<br />HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState</p><p>HKCU\Control Panel\Desktop\<br />"Wallpaper" = "C:\Documents and Settings\wodzu\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp"</p><p><br />Enabled Screen Saver:<br />---------------------</p><p>HKCU\Control Panel\Desktop\<br />"SCRNSAVE.EXE" = "C:\WINDOWS\System32\logon.scr" [MS]</p><p><br />Startup items in "wodzu" & "All Users" startup folders:<br />-------------------------------------------------------</p><p>C:\Documents and Settings\All Users\Menu Start\Programy\Autostart<br />"Microsoft Office" -> shortcut to: "C:\Program Files\Microsoft Office\Office\OSA9.EXE -b -l" [MS]<br />"Adobe Gamma Loader" -> shortcut to: "C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe" ["Adobe Systems, Inc."]</p><p><br />Winsock2 Service Provider DLLs:<br />-------------------------------</p><p>Namespace Service Providers</p><p>HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}<br />000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]<br />000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]<br />000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]</p><p>Transport Service Providers</p><p>HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}<br />0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:<br />%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 17<br />%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05</p><p><br />Toolbars, Explorer Bars, Extensions:<br />------------------------------------</p><p>Extensions (Tools menu items, main toolbar menu buttons)</p><p>HKLM\Software\Microsoft\Internet Explorer\Extensions\<br />{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\<br />"MenuText" = "Sun Java Console"<br /></p>
U mnie bylo tak samo. Pomogla instalacja firewalla. Konkretnie Outposta.
Zainstalowałem ten program co radził mi "hommini" ale mam z nim małe problemy. Albo blokuje mi sieć że nic nie działa albo mogę go wyłaczyć i wtedy i tak neostrada cały czas wysyła obciążając sieć.<br />No a co do loga z Silent Runners to znowu czekałem około 30 min i żadnego komunikatu nie było. Ja już sam nie wiem co jeszcze mozę być Jeśli ktoś ma jeszcze jakiś pomysła to BARDZO PROSZE pomocy bo jeśli nie to skończy sie na formacie :(<br />
<p>Witam</p><p>Chyba wreszcie udało mnie sie zrobić tego loga w Silent Runners. Oto on:</p><p>"Silent Runners.vbs", revision 48, <a href="http://www.silentrunners.org/">http://www.silentrunners.org/</a><br />Operating System: Windows XP<br />Output limited to non-default values, except where indicated by "{++}"</p><p><br />Startup items buried in registry:<br />---------------------------------</p><p>HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}<br />"Komunikator" = ""C:\Program Files\Tlen.pl\tlen.exe" --confdir=home" ["o2.pl Sp. z o.o."]</p><p>HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\ {++}<br />"DriverLoad" = (empty string)<br />"DriverCheck" = (empty string)<br />"SystemDriverLoad" = (empty string)<br />"Winhost" = (empty string)<br />"Winhost1" = (empty string)<br />"Winhost2" = (empty string)<br />"Winhost3" = (empty string)<br />"Winhost4" = (empty string)<br />"SystemDriver" = "c:\DriverLoad\windrv.exe" [file not found]<br />"FDriver" = "c:\DriverLoad\windrv.exe" [file not found]<br />"ADriver" = "c:\DriverLoad\windrv.exe" [file not found]<br />"CDriver" = "c:\DriverLoad\windrv.exe" [file not found]<br />"DDriver" = "c:\DriverLoad\windrv.exe" [file not found]</p><p>HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}<br />"NeroFilterCheck" = "C:\WINDOWS\system32\NeroCheck.exe" ["Ahead Software Gmbh"]<br />"TkBellExe" = ""C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot" ["RealNetworks, Inc."]<br />"MKS_MENU" = "C:\Program Files\MKS\Bin\mks_menu.exe" ["MKS Sp. z o.o."]<br />"ABREGMON" = "C:\Program Files\MKS\Bin\ABregmon.exe" ["ArcaBit"]<br />"SpeedTouch USB Diagnostics" = ""C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon" ["THOMSON multimedia"]<br />"NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup" [MS]<br />"nwiz" = "nwiz.exe /install" ["NVIDIA Corporation"]<br />"NvMediaCenter" = "RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit" [MS]<br />"Outpost Firewall" = "C:\PROGRA~1\AGNITUM\OUTPOS~1.0\outpost.exe /waitservice" ["Agnitum Ltd."]<br />"OutpostFeedBack" = "C:\PROGRA~1\AGNITUM\OUTPOS~1.0\feedback.exe /dump:os_startup" ["Agnitum Ltd."]</p><p>HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\<br />{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided)<br /> -> {HKLM...CLSID} = "AcroIEHlprObj Class"<br /> \InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"]<br />{53707962-6F74-2D53-2644-206D7942484F}\(Default) = (no title provided)<br /> -> {HKLM...CLSID} = (no title provided)<br /> \InProcServer32\(Default) = "C:\PROGRA~1\SPYBOT~1\SDHelper.dll" ["Safer Networking Limited"]<br />{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided)<br /> -> {HKLM...CLSID} = "SSVHelper Class"<br /> \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll" ["Sun Microsystems, Inc."]</p><p>HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\<br />"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania"<br /> -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania"<br /> \InProcServer32\(Default) = "deskpan.dll" [file not found]<br />"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu"<br /> -> {HKLM...CLSID} = "HyperTerminal Icon Ext"<br /> \InProcServer32\(Default) = "C:\WINDOWS\System32\hticons.dll" ["Hilgraeve, Inc."]<br />"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"<br /> -> {HKLM...CLSID} = "WinRAR"<br /> \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]<br />"{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}" = "Shell Extensions for RealOne Player"<br /> -> {HKLM...CLSID} = "RealOne Player Context Menu Class"<br /> \InProcServer32\(Default) = "C:\Program Files\Real\RealPlayer\rpshell.dll" ["RealNetworks, Inc."]<br />"{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class"<br /> -> {HKLM...CLSID} = "DesktopContext Class"<br /> \InProcServer32\(Default) = "C:\WINDOWS\System32\nvcpl.dll" ["NVIDIA Corporation"]<br />"{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper"<br /> -> {HKLM...CLSID} = "NVIDIA CPL Extension"<br /> \InProcServer32\(Default) = "C:\WINDOWS\System32\nvcpl.dll" ["NVIDIA Corporation"]<br />"{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer"<br /> -> {HKLM...CLSID} = "Desktop Explorer"<br /> \InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"]<br />"{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu"<br /> -> {HKLM...CLSID} = (no title provided)<br /> \InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"]<br />"{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu"<br /> -> {HKLM...CLSID} = "nView Desktop Context Menu"<br /> \InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"]<br />"{52B87208-9CCF-42C9-B88E-069281105805}" = "Trojan Remover Shell Extension"<br /> -> {HKLM...CLSID} = "Trojan Remover Shell Extension"<br /> \InProcServer32\(Default) = "C:\PROGRA~1\TROJAN~1\Trshlex.dll" ["Simply Super Software"]</p><p>HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\<br />INFECTION WARNING! "AppInit_DLLs" = " C:\PROGRA~1\AGNITUM\OUTPOS~1.0\wl_hook.dll" ["Agnitum Ltd."]</p><p>HKLM\Software\Classes\*\shellex\ContextMenuHandlers\<br />ASW\(Default) = "{33C9E362-3EDA-4930-8AFE-5DA39A8BB77A}"<br /> -> {HKLM...CLSID} = "Outpost.ASWShellExt Component"<br /> \InProcServer32\(Default) = "C:\PROGRA~1\AGNITUM\OUTPOS~1.0\op_shell.dll" ["Agnitum Ltd."]<br />MkS_Vir\(Default) = "{CC4245C0-D511-11D0-8918-444553540000}"<br /> -> {HKLM...CLSID} = "MkS_Vir Shell Extension"<br /> \InProcServer32\(Default) = "C:\Program Files\MKS\Bin\MkSShell.dll" [null data]<br />Trojan Remover\(Default) = "{52B87208-9CCF-42C9-B88E-069281105805}"<br /> -> {HKLM...CLSID} = "Trojan Remover Shell Extension"<br /> \InProcServer32\(Default) = "C:\PROGRA~1\TROJAN~1\Trshlex.dll" ["Simply Super Software"]<br />WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"<br /> -> {HKLM...CLSID} = "WinRAR"<br /> \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]</p><p>HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\<br />ASW\(Default) = "{33C9E362-3EDA-4930-8AFE-5DA39A8BB77A}"<br /> -> {HKLM...CLSID} = "Outpost.ASWShellExt Component"<br /> \InProcServer32\(Default) = "C:\PROGRA~1\AGNITUM\OUTPOS~1.0\op_shell.dll" ["Agnitum Ltd."]<br />WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"<br /> -> {HKLM...CLSID} = "WinRAR"<br /> \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]</p><p>HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\<br />ASW\(Default) = "{33C9E362-3EDA-4930-8AFE-5DA39A8BB77A}"<br /> -> {HKLM...CLSID} = "Outpost.ASWShellExt Component"<br /> \InProcServer32\(Default) = "C:\PROGRA~1\AGNITUM\OUTPOS~1.0\op_shell.dll" ["Agnitum Ltd."]<br />MkS_Vir\(Default) = "{CC4245C0-D511-11D0-8918-444553540000}"<br /> -> {HKLM...CLSID} = "MkS_Vir Shell Extension"<br /> \InProcServer32\(Default) = "C:\Program Files\MKS\Bin\MkSShell.dll" [null data]<br />Trojan Remover\(Default) = "{52B87208-9CCF-42C9-B88E-069281105805}"<br /> -> {HKLM...CLSID} = "Trojan Remover Shell Extension"<br /> \InProcServer32\(Default) = "C:\PROGRA~1\TROJAN~1\Trshlex.dll" ["Simply Super Software"]<br />WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"<br /> -> {HKLM...CLSID} = "WinRAR"<br /> \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]</p><p><br />Active Desktop and Wallpaper:<br />-----------------------------</p><p>Active Desktop is disabled at this entry:<br />HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState</p><p>HKCU\Control Panel\Desktop\<br />"Wallpaper" = "C:\Documents and Settings\wodzu\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp"</p><p><br />Enabled Screen Saver:<br />---------------------</p><p>HKCU\Control Panel\Desktop\<br />"SCRNSAVE.EXE" = "C:\WINDOWS\System32\logon.scr" [MS]</p><p><br />Startup items in "wodzu" & "All Users" startup folders:<br />-------------------------------------------------------</p><p>C:\Documents and Settings\All Users\Menu Start\Programy\Autostart<br />"Microsoft Office" -> shortcut to: "C:\Program Files\Microsoft Office\Office\OSA9.EXE -b -l" [MS]<br />"Adobe Gamma Loader" -> shortcut to: "C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe" ["Adobe Systems, Inc."]</p><p><br />Winsock2 Service Provider DLLs:<br />-------------------------------</p><p>Namespace Service Providers</p><p>HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}<br />000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]<br />000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]<br />000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]</p><p>Transport Service Providers</p><p>HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}<br />0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:<br />%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 17<br />%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05</p><p><br />Toolbars, Explorer Bars, Extensions:<br />------------------------------------</p><p>Explorer Bars</p><p>Dormant Explorer Bars in "View, Explorer Bar" menu</p><p>HKLM\Software\Classes\CLSID\{A1A7E22D-1587-4230-8F16-081C68D21448}\(Default) = "Szybkie dostosowywanie programu"<br />Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar]<br />InProcServer32\(Default) = "C:\PROGRA~1\AGNITUM\OUTPOS~1.0\Plugins\BrowserBar\ie_bar.dll" ["Agnitum Ltd."]</p><p>HKLM\Software\Classes\CLSID\{A2595F37-48D0-46A1-9B51-478591A97764}\(Default) = "Protection Bar"<br />Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar]<br />InProcServer32\(Default) = "C:\Program Files\IntCodec\iesplugin.dll" [file not found]</p><p>Extensions (Tools menu items, main toolbar menu buttons)</p><p>HKLM\Software\Microsoft\Internet Explorer\Extensions\<br />{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\<br />"MenuText" = "Sun Java Console"<br />"CLSIDExtension" = "{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}"<br /> -> {HKCU...CLSID} = "Java Plug-in"<br /> \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll" ["Sun Microsystems, Inc."]<br /> -> {HKLM...CLSID} = "Java Plug-in 1.5.0_06"<br /> \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll" ["Sun Microsystems, Inc."]</p><p>{44627E97-789B-40D4-B5C2-58BD171129A1}\<br />"ButtonText" = "Szybkie dostosowywanie programu Outpost Firewall Pro"</p><p><br />Running Services (Display Name, Service Name, Path {Service DLL}):<br />------------------------------------------------------------------</p><p>ArcaBit NetMonitor, ABNetMon, "C:\Program Files\MKS\Bin\NetMonSV.exe" ["ArcaBit sp. z o.o."]<br />MkS_Scan, MkS_Scan, "C:\Program Files\MKS\Bin\mks_scan.exe" [empty string]<br />MkS_Vir Monitor, MksVirMonSvc, "C:\Program Files\MKS\Bin\mksmonsv.exe" [empty string]<br />NVIDIA Display Driver Service, NVSvc, "C:\WINDOWS\System32\nvsvc32.exe" ["NVIDIA Corporation"]</p><p><br />----------<br />+ This report excludes default entries except where indicated.<br />+ To see *everywhere* the script checks and *everything* it finds,<br /> launch it from a command prompt or a shortcut with the -all parameter.<br />+ The search for DESKTOP.INI DLL launch points on all local fixed drives<br /> took 350 seconds.<br />+ The search for all Registry CLSIDs containing dormant Explorer Bars<br /> took 832 seconds.<br />---------- (total run time: 2792 seconds)<br /></p>
Fajnie że juz tydzień czekam na jaką kolwiek odpowiedź a tutaj nic a nic. Nawe nikt nieodwazyła się napisać że nie wie co zrobić. Najlepiej to zostawić człowieka samego z problemem. WIELKIE DZIĘKI ZA BRAK POMOCY
<p><BLOCKQUOTE><div>F2 - REG:system.ini: UserInit=userinit.exe</div></BLOCKQUOTE></p><p>ten wpis również należy usunąć </p>
Witam ponownie<br />Zrobiłem zgodnie za poradą De Niro ale niestety problem cały czas zostaje bez zmiany :( <br />