problem
nie wiem jak uzyc tego hijack a nie mam czasu na czytanie bo mi sie za chwile komp znowu zawiesi to jest log moze mi ktos pomoze co wykasowac?
Logfile of HijackThis v1.97.7
Scan saved at 00:14:45, on 2004–04–21
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32 undll32.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSSystem32DRIVERSCDANTSRV.EXE
C:WINDOWSSystem32mgabg.exe
C:Program FilesPanda SoftwarePanda Antivirus PlatinumFirewallPavFires.exe
C:Program FilesPanda SoftwarePanda Antivirus Platinumpavsrv51.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32Tablet.exe
C:Program FilesPanda SoftwarePanda Antivirus PlatinumAVENGINE.EXE
C:WINDOWSExplorer.EXE
C:WINDOWSSystem32PDeskPDesk.exe
C:WINDOWSSystem32CTHELPER.EXE
C:Program FilesPanda SoftwarePanda Antivirus PlatinumAPVXDWIN.EXE
C:Program FilesWacomTabUserW.exe
C:Program FilesPanda SoftwarePanda Antivirus PlatinumUpgrader.exe
C:Program FilesPanda SoftwarePanda Antivirus PlatinumpavProxy.exe
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:Documents and SettingsserafPulpithijackthisHijackThis.exe
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.onet.pl/
R0 – HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 – HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza
O1 – Hosts: 207.36.196.189 ieautosearch
O3 – Toolbar: &Radio – {8E718888–423F–11D2–876E–00A0C9082467} – C:WINDOWSSystem32msdxm.ocx
O4 – HKLM..Run: [Jet Detection] "C:Program FilesCreativeSBLivePROGRAMADGJDet.exe"
O4 – HKLM..Run: [Matrox Powerdesk] C:WINDOWSSystem32PDeskPDesk.exe /Autolaunch
O4 – HKLM..Run: [NeroCheck] C:WINDOWSSystem32\NeroCheck.exe
O4 – HKLM..Run: [UpdReg] C:WINDOWSUpdReg.EXE
O4 – HKLM..Run: [WINDVDPatch] CTHELPER.EXE
O4 – HKLM..Run: [zSPGuard] c:program filespjwspguardspguard.exe /s /r
O4 – HKLM..Run: [SCANINICIO] "C:Program FilesPanda SoftwarePanda Antivirus PlatinumInicio.exe"
O4 – HKLM..Run: [APVXDWIN] "C:Program FilesPanda SoftwarePanda Antivirus PlatinumAPVXDWIN.EXE" /s
O4 – HKCU..Run: [Gadu–Gadu] "C:Program FilesGadu–Gadugg.exe" /tray
O4 – HKCU..Run: [Skype] "C:Program FilesSkypePhoneSkype.exe" /nosplash /minimized
O4 – Startup: Rozmowa.lnk = C:Program FilesWirtualna PolskaSystem syntezy mowy ozmowy.exe
O4 – Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOfficeOSA9.EXE
O4 – Global Startup: TabUserW.lnk = C:Program FilesWacomTabUserW.exe
O6 – HKCUSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O10 – Unknown file in Winsock LSP: c:windowssystem32inetadpt.dll
O10 – Unknown file in Winsock LSP: c:windowssystem32inetadpt.dll
O10 – Unknown file in Winsock LSP: c:windowssystem32inetadpt.dll
O10 – Unknown file in Winsock LSP: c:windowssystem32inetadpt.dll
O12 – Plugin for .spop: C:Program FilesInternet ExplorerPluginsNPDocBox.dll
O16 – DPF: {0E5F0222–96B9–11D3–8997–00104BD12D94} (PCPitstop Utility) – http://pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 – DPF: {78AF2F24–A9C3–11D3–BF8C–0060B0FCC122} (AcDcToday Control) – file://C:Program FilesAutoCAD 2002AcDcToday.ocx
O16 – DPF: {9F1C11AA–197B–4942–BA54–47A8489BB47F} (Update Class) – http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38072.3995601852
O16 – DPF: {AE563720–B4F5–11D4–A415–00108302FDFD} (NOXLATE–BANR) – file://C:Program FilesAutoCAD 2002InstBanr.ocx
O16 – DPF: {C6637286–300D–11D4–AE0A–0010830243BD} (InstaFred) – file://C:Program FilesAutoCAD 2002InstFred.ocx
O16 – DPF: {D27CDB6E–AE6D–11CF–96B8–444553540000} (Shockwave Flash Object) – http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 – DPF: {DDFFA75A–E81D–4454–89FC–B9FD0631E726} – http://www.bettinghall.com/BettingHall.cab
O16 – DPF: {E7544C6C–CFD6–43EA–B4E9–360CEE20BDF7} (MainControl Class) – http://skaner.mks.com.pl/SkanerOnline.cab
O16 – DPF: {F281A59C–7B65–11D3–8617–0010830243BD} (AcPreview Control) – file://C:Program FilesAutoCAD 2002AcPreview.ocx
O17 – HKLMSystemCCSServicesTcpip..{3D0DC0D7–C2A4–4CA6–B250–611E9FC90494}: NameServer = 62.233.128.17,213.77.115.28
Logfile of HijackThis v1.97.7
Scan saved at 00:14:45, on 2004–04–21
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32 undll32.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSSystem32DRIVERSCDANTSRV.EXE
C:WINDOWSSystem32mgabg.exe
C:Program FilesPanda SoftwarePanda Antivirus PlatinumFirewallPavFires.exe
C:Program FilesPanda SoftwarePanda Antivirus Platinumpavsrv51.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32Tablet.exe
C:Program FilesPanda SoftwarePanda Antivirus PlatinumAVENGINE.EXE
C:WINDOWSExplorer.EXE
C:WINDOWSSystem32PDeskPDesk.exe
C:WINDOWSSystem32CTHELPER.EXE
C:Program FilesPanda SoftwarePanda Antivirus PlatinumAPVXDWIN.EXE
C:Program FilesWacomTabUserW.exe
C:Program FilesPanda SoftwarePanda Antivirus PlatinumUpgrader.exe
C:Program FilesPanda SoftwarePanda Antivirus PlatinumpavProxy.exe
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:Documents and SettingsserafPulpithijackthisHijackThis.exe
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.onet.pl/
R0 – HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 – HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza
O1 – Hosts: 207.36.196.189 ieautosearch
O3 – Toolbar: &Radio – {8E718888–423F–11D2–876E–00A0C9082467} – C:WINDOWSSystem32msdxm.ocx
O4 – HKLM..Run: [Jet Detection] "C:Program FilesCreativeSBLivePROGRAMADGJDet.exe"
O4 – HKLM..Run: [Matrox Powerdesk] C:WINDOWSSystem32PDeskPDesk.exe /Autolaunch
O4 – HKLM..Run: [NeroCheck] C:WINDOWSSystem32\NeroCheck.exe
O4 – HKLM..Run: [UpdReg] C:WINDOWSUpdReg.EXE
O4 – HKLM..Run: [WINDVDPatch] CTHELPER.EXE
O4 – HKLM..Run: [zSPGuard] c:program filespjwspguardspguard.exe /s /r
O4 – HKLM..Run: [SCANINICIO] "C:Program FilesPanda SoftwarePanda Antivirus PlatinumInicio.exe"
O4 – HKLM..Run: [APVXDWIN] "C:Program FilesPanda SoftwarePanda Antivirus PlatinumAPVXDWIN.EXE" /s
O4 – HKCU..Run: [Gadu–Gadu] "C:Program FilesGadu–Gadugg.exe" /tray
O4 – HKCU..Run: [Skype] "C:Program FilesSkypePhoneSkype.exe" /nosplash /minimized
O4 – Startup: Rozmowa.lnk = C:Program FilesWirtualna PolskaSystem syntezy mowy ozmowy.exe
O4 – Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOfficeOSA9.EXE
O4 – Global Startup: TabUserW.lnk = C:Program FilesWacomTabUserW.exe
O6 – HKCUSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O10 – Unknown file in Winsock LSP: c:windowssystem32inetadpt.dll
O10 – Unknown file in Winsock LSP: c:windowssystem32inetadpt.dll
O10 – Unknown file in Winsock LSP: c:windowssystem32inetadpt.dll
O10 – Unknown file in Winsock LSP: c:windowssystem32inetadpt.dll
O12 – Plugin for .spop: C:Program FilesInternet ExplorerPluginsNPDocBox.dll
O16 – DPF: {0E5F0222–96B9–11D3–8997–00104BD12D94} (PCPitstop Utility) – http://pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 – DPF: {78AF2F24–A9C3–11D3–BF8C–0060B0FCC122} (AcDcToday Control) – file://C:Program FilesAutoCAD 2002AcDcToday.ocx
O16 – DPF: {9F1C11AA–197B–4942–BA54–47A8489BB47F} (Update Class) – http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38072.3995601852
O16 – DPF: {AE563720–B4F5–11D4–A415–00108302FDFD} (NOXLATE–BANR) – file://C:Program FilesAutoCAD 2002InstBanr.ocx
O16 – DPF: {C6637286–300D–11D4–AE0A–0010830243BD} (InstaFred) – file://C:Program FilesAutoCAD 2002InstFred.ocx
O16 – DPF: {D27CDB6E–AE6D–11CF–96B8–444553540000} (Shockwave Flash Object) – http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 – DPF: {DDFFA75A–E81D–4454–89FC–B9FD0631E726} – http://www.bettinghall.com/BettingHall.cab
O16 – DPF: {E7544C6C–CFD6–43EA–B4E9–360CEE20BDF7} (MainControl Class) – http://skaner.mks.com.pl/SkanerOnline.cab
O16 – DPF: {F281A59C–7B65–11D3–8617–0010830243BD} (AcPreview Control) – file://C:Program FilesAutoCAD 2002AcPreview.ocx
O17 – HKLMSystemCCSServicesTcpip..{3D0DC0D7–C2A4–4CA6–B250–611E9FC90494}: NameServer = 62.233.128.17,213.77.115.28
Odpowiedzi: 2
O10 – Unknown file in Winsock LSP: c:windowssystem32inetadpt.dll
O10 – Unknown file in Winsock LSP: c:windowssystem32inetadpt.dll
O10 – Unknown file in Winsock LSP: c:windowssystem32inetadpt.dll
O10 – Unknown file in Winsock LSP: c:windowssystem32inetadpt.dll
Adware moźesz usunąc, pozatym jest czysto.
O12 – Plugin for .spop: C:Program FilesInternet ExplorerPluginsNPDocBox.dll – co do tego wpisu nie mam pojęcia co to za wtyczka bo nie znalazłem info o tym dll.
O10 – Unknown file in Winsock LSP: c:windowssystem32inetadpt.dll
O10 – Unknown file in Winsock LSP: c:windowssystem32inetadpt.dll
O10 – Unknown file in Winsock LSP: c:windowssystem32inetadpt.dll
Adware moźesz usunąc, pozatym jest czysto.
O12 – Plugin for .spop: C:Program FilesInternet ExplorerPluginsNPDocBox.dll – co do tego wpisu nie mam pojęcia co to za wtyczka bo nie znalazłem info o tym dll.
zadal sobie troszke trudu, porównaj z tym co znasz a tego co nie znasz to''kopiuj'' >google >szukaj.
Strona 1 / 1