Witam
takie coś mnie włąsnie spotkało dzisiaj. Poniźej mój log. Pomoźe ktoś ? :) Oprócz podmiany tapety, miałem jeszcze jakiegoś psa w pasku (Cash back się to nazwyało) oraz pojawiał się plik w głównym c: 125029.exe oraz ikonka free xxx na pulpicie. Jakos udało mi sie to usunąć. Została jeszcze czarna tapeta. Gorąca prośba o pomoc :D

Logfile of HijackThis v1.99.0
Scan saved at 23:24:59, on 2005–01–02
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesCommon FilesSymantec SharedccSetMgr.exe
C:Program FilesCommon FilesSymantec SharedccEvtMgr.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32 tvdm.exe
C:WINDOWSSystem32spooldriversw32x863hpztsb04.exe
C:WINDOWSTBPanel.exe
C:Program FilesMKSBinmks_mail.exe
C:Program FilesWinampWinampa.exe
C:PROGRAM FILESFAXTALK COMMUNICATORFTCtrl32.exe
C:WINDOWSSOUNDMAN.EXE
C:PROGRA~1VIRTUA~1SystemVCDPlay.exe
C:WINDOWSsystem32RUNDLL32.EXE
C:Program FilesCommon FilesSymantec SharedccApp.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesGadu–Gadugg.exe
C:program filessteamsteam.exe
C:Program FilesMKSBinmks_menu.exe
C:Program FilesMSIPC Alert 4PCAlert4.exe
C:PROGRAM FILESFAXTALK COMMUNICATORFAPIEXE.EXE
C:Program FilesCommon FilesMicrosoft SharedVS7Debugmdm.exe
C:Program FilesMKSBinmksmonsv.exe
C:Program FilesVirtual CD v4SystemVCDTray.exe
C:Program FilesNorton AntiVirus avapsvc.exe
C:WINDOWSSystem32 vsvc32.exe
C:Program FilesNorton AntiVirusSAVScan.exe
C:WINDOWSSystem32 cpsvcs.exe
C:WINDOWSSystem32snmp.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesVirtual CD v4Systemvcdsecs.exe
C:Program FilesMKSBinmks_scan.exe
C:WINDOWSsystem32wscntfy.exe
C:WINDOWSsystem32 undll32.exe
C:Program FilesCommon FilesSymantec SharedNMain.exe
C:PROGRA~1NORTON~1 avw32.exe
C:Program FilesMessengermsmsgs.exe
C:Program FilesSymantecLiveUpdateLUALL.EXE
C:Program FilesInternet Exploreriexplore.exe
C:WINDOWSsystem32wuauclt.exe
D:TataWinPakerWinZipwinzip32.exe
C:WINDOWSsystem32wuauclt.exe
D:TataWinPakerWinZipwinzip32.exe
C:DOCUME~1TataUSTAWI~1TempHijackThis.exe

R0 – HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza
R3 – Default URLSearchHook is missing
F3 – REG:win.ini: load=C:YDPDictwatch.exe
O1 – Hosts: 69.20.16.183 auto.search.msn.com
O1 – Hosts: 69.20.16.183 search.netscape.com
O1 – Hosts: 69.20.16.183 ieautosearch
O1 – Hosts: 69.20.16.183 ieautosearch
O1 – Hosts: 69.20.16.183 ieautosearch
O1 – Hosts: 69.20.16.183 ieautosearch
O3 – Toolbar: Norton AntiVirus – {42CDD1BF–3FFB–4238–8AD1–7859DF00B1D6} – C:Program FilesNorton AntiVirusNavShExt.dll
O4 – HKLM..Run: [HPDJ Taskbar Utility] C:WINDOWSSystem32spooldriversw32x863hpztsb04.exe
O4 – HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 – HKLM..Run: [Gainward] C:WINDOWSTBPanel.exe /A
O4 – HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 – HKLM..Run: [nwiz] nwiz.exe /install
O4 – HKLM..Run: [MailScanner] C:Program FilesMKSBinmks_mail.exe
O4 – HKLM..Run: [WinampAgent] "C:Program FilesWinampWinampa.exe"
O4 – HKLM..Run: [CallControl 4.5] C:PROGRAM FILESFAXTALK COMMUNICATORFTCtrl32.exe /autoload
O4 – HKLM..Run: [SoundMan] SOUNDMAN.EXE
O4 – HKLM..Run: [VCDPlayer] C:PROGRA~1VIRTUA~1SystemVCDPlay.exe
O4 – HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSSystem32NvMcTray.dll,NvTaskbarInit
O4 – HKLM..Run: [SysTime] C:WINDOWSsystem32systime.exe
O4 – HKLM..Run: [ccApp] "C:Program FilesCommon FilesSymantec SharedccApp.exe"
O4 – HKLM..Run: [NAV CfgWiz] C:Program FilesCommon FilesSymantec SharedCfgWiz.exe /GUID NAV /CMDLINE "REBOOT"
O4 – HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 – HKCU..Run: [Gadu–Gadu] "C:Program FilesGadu–Gadugg.exe" /tray
O4 – HKCU..Run: [Steam] "c:program filessteamsteam.exe" –silent
O4 – HKCU..Run: [Registry Cleaner] "C:Program FilesRegistry CleanerRegClean.exe"
O4 – Startup: Skrót do zonealarm.lnk = C:Program Filesone LabsoneAlarmzonealarm.exe
O4 – Global Startup: Menu mks_vir.lnk = C:Program FilesMKSBinmks_menu.exe
O4 – Global Startup: PC Alert 4.lnk = C:Program FilesMSIPC Alert 4PCAlert4.exe
O8 – Extra context menu item: E&ksport do programu Microsoft Excel – res://C:PROGRA~1MICROS~2Office10EXCEL.EXE/3000
O9 – Extra button: Messenger – {FB5F1910–F110–11d2–BB9E–00C04F795683} – C:Program FilesMessengermsmsgs.exe
O9 – Extra 'Tools' menuitem: Windows Messenger – {FB5F1910–F110–11d2–BB9E–00C04F795683} – C:Program FilesMessengermsmsgs.exe
O10 – Unknown file in Winsock LSP: c:windowssystem32aklsp.dll
O10 – Unknown file in Winsock LSP: c:windowssystem32aklsp.dll
O10 – Unknown file in Winsock LSP: c:windowssystem32aklsp.dll
O10 – Unknown file in Winsock LSP: c:windowssystem32aklsp.dll
O12 – Plugin for .spop: C:Program FilesInternet ExplorerPluginsNPDocBox.dll
O15 – Trusted Zone: *.iframedollars.biz
O15 – Trusted Zone: *.skoobidoo.com
O15 – Trusted Zone: *.slotchbar.com
O15 – Trusted Zone: *.windupdates.com
O15 – Trusted Zone: *.iframedollars.biz (HKLM)
O15 – Trusted Zone: *.skoobidoo.com (HKLM)
O15 – Trusted Zone: *.slotchbar.com (HKLM)
O15 – Trusted Zone: *.windupdates.com (HKLM)
O15 – Trusted IP range: 213.159.117.202
O15 – Trusted IP range: (HKLM)
O16 – DPF: {27527D31–447B–11D5–A46E–0001023B4289} (CoGSManager Class) – http://gamingzone.ubisoft.com/dev/packages/GSManager.cab
O16 – DPF: {79849612–A98F–45B8–95E9–4D13C7B6B35C} – http://iframedollars.biz/tb/loader2.ocx
O23 – Service: Symantec Event Manager – Symantec Corporation – C:Program FilesCommon FilesSymantec SharedccEvtMgr.exe
O23 – Service: Symantec Password Validation – Symantec Corporation – C:Program FilesCommon FilesSymantec SharedccPwdSvc.exe
O23 – Service: Symantec Settings Manager – Symantec Corporation – C:Program FilesCommon FilesSymantec SharedccSetMgr.exe
O23 – Service: MkSUpdateInt – MkS Sp. z o. o. – C:Program FilesMKSinMkSUpdateInt.exe
O23 – Service: MkS_Vir Monitor – Unknown – C:Program FilesMKSBinmksmonsv.exe
O23 – Service: MkS_Scan – Unknown – C:Program FilesMKSBinmks_scan.exe
O23 – Service: Usługa Auto Protect programu Norton AntiVirus – Symantec Corporation – C:Program FilesNorton AntiVirus avapsvc.exe
O23 – Service: NVIDIA Display Driver Service – NVIDIA Corporation – C:WINDOWSSystem32 vsvc32.exe
O23 – Service: SAVScan – Symantec Corporation – C:Program FilesNorton AntiVirusSAVScan.exe
O23 – Service: ScriptBlocking Service – Symantec Corporation – C:PROGRA~1COMMON~1SYMANT~1SCRIPT~1SBServ.exe
O23 – Service: Virtual CD v4 Security service – H+H Software GmbH – C:Program FilesVirtual CD v4Systemvcdsecs.exe



I jeszcze takie pytanie na koniec. Co te śmieci robią. Czy mogę bez obaw korzystać z półączeń z bankami internetowymi?
Pozdrawiam
Jacek