Bardzo proszę o pomoc!! hijackthis.
Oto mój log:
Logfile of HijackThis v1.98.2
Scan saved at 15:52:40, on 2004–11–26
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:WINDOWSatlze.exe
C:Program FilesGadu–Gadugg.exe
C:WINDOWSsystem32driversKodakCCS.exe
C:Program FilesCommon FilesMicrosoft SharedVS7Debugmdm.exe
C:WINDOWSSystem32 vsvc32.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSd3pe.exe
C:Program FilesKodakKodak EasyShare softwareinEasyShare.exe
C:Program FilesKodakKODAK Software Updater7288971ProgramKodak Software Updater.exe
C:Program FilesSpyware Doctorspydoctor.exe
D:HijackThis.exe
C:Program FilesInternet ExplorerIEXPLORE.EXE
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = res://C:WINDOWSjwumr.dll/sp.html#37049
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = res://C:WINDOWSjwumr.dll/sp.html#37049
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = about:blank
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = res://C:WINDOWSjwumr.dll/sp.html#37049
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = res://C:WINDOWSjwumr.dll/sp.html#37049
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = res://C:WINDOWSjwumr.dll/sp.html#37049
R1 – HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = res://C:WINDOWSjwumr.dll/sp.html#37049
R0 – HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = res://C:WINDOWSjwumr.dll/sp.html#37049
R3 – Default URLSearchHook is missing
O2 – BHO: (no name) – {ABCEAB6D–262C–9FCA–02CB–207C20A038AE} – C:WINDOWSatlqc32.dll
O4 – HKLM..Run: [SpyHunter] C:Program FilesEnigma Software GroupSpyHunterSpyHunter.exe
O4 – HKLM..Run: [Spyware Stormer] C:Program FilesSpyware StormerSpywareStormer.Exe
O4 – HKLM..Run: [MSConfig] C:WINDOWSPCHealthHelpCtrBinariesMSConfig.exe /auto
O4 – HKLM..Run: [atlze.exe] C:WINDOWSatlze.exe
O4 – HKCU..Run: [Gadu–Gadu] "C:Program FilesGadu–Gadugg.exe" /tray
O4 – HKCU..Run: [SpySweeper] "C:Program FilesWebrootSpy SweeperSpySweeper.exe" /0
O4 – Global Startup: Kodak EasyShare software.lnk = C:Program FilesKodakKodak EasyShare softwareinEasyShare.exe
O4 – Global Startup: Kodak software updater.lnk = C:Program FilesKodakKODAK Software Updater7288971ProgramKodak Software Updater.exe
O16 – DPF: {6414512B–B978–451D–A0D8–FCFDF33E833C} (WUWebControl Class) – http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1096655549233
O16 – DPF: {D719897A–B07A–4C0C–AEA9–9B663A28DFCB} (iTunesDetector Class) – http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
O16 – DPF: {E7544C6C–CFD6–43EA–B4E9–360CEE20BDF7} (MainControl Class) – http://skaner.mks.com.pl/SkanerOnline.cab
Z góry BARDZO dziekuje
pozdrawiam
Filip
Logfile of HijackThis v1.98.2
Scan saved at 15:52:40, on 2004–11–26
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:WINDOWSatlze.exe
C:Program FilesGadu–Gadugg.exe
C:WINDOWSsystem32driversKodakCCS.exe
C:Program FilesCommon FilesMicrosoft SharedVS7Debugmdm.exe
C:WINDOWSSystem32 vsvc32.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSd3pe.exe
C:Program FilesKodakKodak EasyShare softwareinEasyShare.exe
C:Program FilesKodakKODAK Software Updater7288971ProgramKodak Software Updater.exe
C:Program FilesSpyware Doctorspydoctor.exe
D:HijackThis.exe
C:Program FilesInternet ExplorerIEXPLORE.EXE
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = res://C:WINDOWSjwumr.dll/sp.html#37049
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = res://C:WINDOWSjwumr.dll/sp.html#37049
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = about:blank
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = res://C:WINDOWSjwumr.dll/sp.html#37049
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = res://C:WINDOWSjwumr.dll/sp.html#37049
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = res://C:WINDOWSjwumr.dll/sp.html#37049
R1 – HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = res://C:WINDOWSjwumr.dll/sp.html#37049
R0 – HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = res://C:WINDOWSjwumr.dll/sp.html#37049
R3 – Default URLSearchHook is missing
O2 – BHO: (no name) – {ABCEAB6D–262C–9FCA–02CB–207C20A038AE} – C:WINDOWSatlqc32.dll
O4 – HKLM..Run: [SpyHunter] C:Program FilesEnigma Software GroupSpyHunterSpyHunter.exe
O4 – HKLM..Run: [Spyware Stormer] C:Program FilesSpyware StormerSpywareStormer.Exe
O4 – HKLM..Run: [MSConfig] C:WINDOWSPCHealthHelpCtrBinariesMSConfig.exe /auto
O4 – HKLM..Run: [atlze.exe] C:WINDOWSatlze.exe
O4 – HKCU..Run: [Gadu–Gadu] "C:Program FilesGadu–Gadugg.exe" /tray
O4 – HKCU..Run: [SpySweeper] "C:Program FilesWebrootSpy SweeperSpySweeper.exe" /0
O4 – Global Startup: Kodak EasyShare software.lnk = C:Program FilesKodakKodak EasyShare softwareinEasyShare.exe
O4 – Global Startup: Kodak software updater.lnk = C:Program FilesKodakKODAK Software Updater7288971ProgramKodak Software Updater.exe
O16 – DPF: {6414512B–B978–451D–A0D8–FCFDF33E833C} (WUWebControl Class) – http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1096655549233
O16 – DPF: {D719897A–B07A–4C0C–AEA9–9B663A28DFCB} (iTunesDetector Class) – http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
O16 – DPF: {E7544C6C–CFD6–43EA–B4E9–360CEE20BDF7} (MainControl Class) – http://skaner.mks.com.pl/SkanerOnline.cab
Z góry BARDZO dziekuje
pozdrawiam
Filip
Odpowiedzi: 1
Wylacz przywracanie
Zakoncz procesy:
atlze.exe
d3pe.exe
Wywal z HDD:
atlze.exe
d3pe.exe
jwumr.dll/sp.html#37049
atlqc32.dll
FIX:
Wlacz przywracanie
O4 – HKLM..Run: [MSConfig] C:WINDOWSPCHealthHelpCtrBinariesMSConfig.exe /auto >> start msconfig przy starcie, nie potrzebujesz fix
Zakoncz procesy:
atlze.exe
d3pe.exe
Wywal z HDD:
atlze.exe
d3pe.exe
jwumr.dll/sp.html#37049
atlqc32.dll
FIX:
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = res://C:WINDOWSjwumr.dll/sp.html#37049
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = res://C:WINDOWSjwumr.dll/sp.html#37049
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = about:blank
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = res://C:WINDOWSjwumr.dll/sp.html#37049
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = res://C:WINDOWSjwumr.dll/sp.html#37049
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = res://C:WINDOWSjwumr.dll/sp.html#37049
R1 – HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = res://C:WINDOWSjwumr.dll/sp.html#37049
R0 – HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = res://C:WINDOWSjwumr.dll/sp.html#37049
R3 – Default URLSearchHook is missing
O2 – BHO: (no name) – {ABCEAB6D–262C–9FCA–02CB–207C20A038AE} – C:WINDOWSatlqc32.dll
O4 – HKLM..Run: [atlze.exe] C:WINDOWSatlze.exe
Wlacz przywracanie
O4 – HKLM..Run: [MSConfig] C:WINDOWSPCHealthHelpCtrBinariesMSConfig.exe /auto >> start msconfig przy starcie, nie potrzebujesz fix
Strona 1 / 1