System: Windows XP Pro SP2
Zabezpieczenia: Norton Antywirus, Microsoft AntiSpyware, Ad–Aware SE Personal
(wszystko aktualizowane codziennie)

Witam, dzisiaj po uruchomieniu komputera system wyświetlił informacje źe Microsoft Firewall jest wyłaczony, przy próbie włączenia komunikaty jak poniźej. System skanowany Ad–Awarem oraz AntiSpyware ....

Macie moźe pojęcie co go (czyt. PC) boli ? :o
Z góry dzięki za pomoc ...
_____________________________
Logfile of HijackThis v1.99.0
Scan saved at 11:19:06, on 2005–02–16
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:WindowsSystem32smss.exe
C:Windowssystem32winlogon.exe
C:Windowssystem32services.exe
C:Windowssystem32lsass.exe
C:Windowssystem32svchost.exe
C:WindowsSystem32svchost.exe
C:Windowssystem32spoolsv.exe
C:Program FilesCommon FilesSymantec SharedccEvtMgr.exe
C:WindowsExplorer.EXE
C:Windowssystem32igfxtray.exe
C:Windowssystem32hkcmd.exe
C:Program FilesCOMPAQEasy Access Button SupportStartEAK.exe
C:Program FilesAnalog DevicesSoundMAXSmtray.exe
C:Program FilesAnalog DevicesSoundMAXDrvLsnr.exe
C:Windowssystem32PROMon.exe
C:Program FilesCommon FilesSymantec SharedccApp.exe
C:Program FilesMicrosoft AntiSpywaregcasServ.exe
C:Program FilesMessengermsmsgs.exe
C:Windowssystem32ctfmon.exe
C:Program FilesAdobeAcrobat 6.0Distillracrotray.exe
C:Program FilesNorton AntiVirus avapsvc.exe
C:Program FilesNorton AntiVirusAdvToolsNPROTECT.EXE
C:Program FilesMicrosoft AntiSpywaregcasDtServ.exe
C:Program FilesCompaqEasy Access Button SupportCPQEAKSYSTEMTRAY.EXE
C:Program FilesCompaqEasy Access Button SupportCPQEADM.EXE
C:CompaqEAKDRVEAUSBKBD.EXE
C:PROGRA~1CompaqEASYAC~1BttnServ.exe
C:Program FilesAnalog DevicesSoundMAXSMAgent.exe
C:WindowsSystem32svchost.exe
C:Program FilesCommon FilesSymantec SharedSecurity CenterSymWSC.exe
C:WindowsSystem32svchost.exe
C:Windowssystem32wscntfy.exe
C:Program FilesWincmd50WINCMD32.EXE
c:Documents and SettingsAdministratorMy DocumentsHijackThis.exe

R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.onet.pl/
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://go.compaq.com/1Q00CDT/0415/bl8.asp
R1 – HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://search.qsrch.com/
R1 – HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = 192.189.173.15:80
O2 – BHO: AcroIEHlprObj Class – {06849E9F–C8D7–4D59–B87D–784B7D6BE0B3} – C:Program FilesAdobeAcrobat 6.0AcrobatActiveXAcroIEHelper.dll
O2 – BHO: AcroIEToolbarHelper Class – {AE7CD045–E861–484f–8273–0445EE161910} – C:Program FilesAdobeAcrobat 6.0AcrobatAcroIEFavClient.dll
O2 – BHO: NAV Helper – {BDF3E430–B101–42AD–A544–FADC6B084872} – C:Program FilesNorton AntiVirusNavShExt.dll
O3 – Toolbar: Norton AntiVirus – {42CDD1BF–3FFB–4238–8AD1–7859DF00B1D6} – C:Program FilesNorton AntiVirusNavShExt.dll
O3 – Toolbar: Adobe PDF – {47833539–D0C5–4125–9FA8–0819E2EAAC93} – C:Program FilesAdobeAcrobat 6.0AcrobatAcroIEFavClient.dll
O4 – HKLM..Run: [IgfxTray] C:Windowssystem32igfxtray.exe
O4 – HKLM..Run: [HotKeysCmds] C:Windowssystem32hkcmd.exe
O4 – HKLM..Run: [CPQEASYACC] C:Program FilesCOMPAQEasy Access Button SupportStartEAK.exe
O4 – HKLM..Run: [Smapp] C:Program FilesAnalog DevicesSoundMAXSmtray.exe
O4 – HKLM..Run: [DrvLsnr] C:Program FilesAnalog DevicesSoundMAXDrvLsnr.exe
O4 – HKLM..Run: [PROMon.exe] PROMon.exe
O4 – HKLM..Run: [WCOLOREAL] "C:Program FilesCOMPAQColorealcoloreal.exe"
O4 – HKLM..Run: [ccApp] "C:Program FilesCommon FilesSymantec SharedccApp.exe"
O4 – HKLM..Run: [ccRegVfy] "C:Program FilesCommon FilesSymantec SharedccRegVfy.exe"
O4 – HKLM..Run: [Advanced Tools Check] C:PROGRA~1NORTON~1AdvToolsADVCHK.EXE
O4 – HKLM..Run: [gcasServ] "C:Program FilesMicrosoft AntiSpywaregcasServ.exe"
O4 – HKLM..Run: [Symantec NetDriver Monitor] C:PROGRA~1SYMNET~1SNDMon.exe
O4 – HKLM..Run: [CloneCDElbyCDFL] "C:Program FilesElaborate BytesCloneCDElbyCheck.exe" /L ElbyCDFL
O4 – HKCU..Run: [MSMSGS] "C:Program FilesMessengermsmsgs.exe" /background
O4 – HKCU..Run: [ctfmon.exe] C:Windowssystem32ctfmon.exe
O4 – Global Startup: Acrobat Assistant.lnk = C:Program FilesAdobeAcrobat 6.0Distillracrotray.exe
O4 – Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOffice10OSA.EXE
O8 – Extra context menu item: E&xport to Microsoft Excel – res://C:PROGRA~1MICROS~3Office10EXCEL.EXE/3000
O9 – Extra button: Messenger – {FB5F1910–F110–11d2–BB9E–00C04F795683} – C:Program FilesMessengermsmsgs.exe
O9 – Extra 'Tools' menuitem: Windows Messenger – {FB5F1910–F110–11d2–BB9E–00C04F795683} – C:Program FilesMessengermsmsgs.exe
O16 – DPF: {17492023–C23A–453E–A040–C7C580BBF700} (Windows Genuine Advantage Validation Tool) – http://go.microsoft.com/fwlink/?linkid=34738&clcid=0x409
O16 – DPF: {6414512B–B978–451D–A0D8–FCFDF33E833C} (WUWebControl Class) – http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1106318868468
O16 – DPF: {92ECE6FA–AC2E–4042–BFAE–0C8608E52A43} (SignActivX Control) – https://www.bph.pl/pi/components/SignActivX.cab
O23 – Service: Symantec Event Manager – Symantec Corporation – C:Program FilesCommon FilesSymantec SharedccEvtMgr.exe
O23 – Service: Symantec Password Validation Service – Symantec Corporation – C:Program FilesCommon FilesSymantec SharedccPwdSvc.exe
O23 – Service: Norton AntiVirus Auto Protect Service – Symantec Corporation – C:Program FilesNorton AntiVirus avapsvc.exe
O23 – Service: Intel(R) NMS – Intel Corporation – C:WindowsSystem32NMSSvc.exe
O23 – Service: Norton Unerase Protection – Symantec Corporation – C:Program FilesNorton AntiVirusAdvToolsNPROTECT.EXE
O23 – Service: ScriptBlocking Service – Symantec Corporation – C:PROGRA~1COMMON~1SYMANT~1SCRIPT~1SBServ.exe
O23 – Service: Symantec Network Drivers Service – Symantec Corporation – C:Program FilesCommon FilesSymantec SharedSNDSrvc.exe
O23 – Service: SoundMAX Agent Service – Analog Devices, Inc. – C:Program FilesAnalog DevicesSoundMAXSMAgent.exe
O23 – Service: SymWMI Service – Symantec Corporation – C:Program FilesCommon FilesSymantec SharedSecurity CenterSymWSC.exe