Witam.

Proszę o sprawdzenie loga z hijackthisa, poniewaź boję się samemu usuwać źeby se nie narobić bigosu...

Scieźki z nazwą programu cyt.:"HIDDEN RECORDER"– są w poźądku – to poźądany przezemnie program.

Objawy złej pracy komputera:

–komp. zwalnia juź po kilkunasto minutowej pracy

–przycina się IE , a dokładnie podczas otwierania strony internetowej bardzo często nie jest w stanie otwoźyć jej do końca – jak by stanoł w połowie pracy, muszę nacisnąć "zatrzymaj"(obok "odświeź")– wtedy czasem otwierana strona oraz się otwoźy, a przewaźnie muszę do paska adresowego wpisać jeszcze raz adres, wtedy dopiero otwiera mi tą stronę poprawnie (szybko)

LOG:

Logfile of HijackThis v1.99.1
Scan saved at 06:22:39, on 2005–12–21
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Alwil Software – Avast! home edition\aswUpdSv.exe
C:\Program Files\Alwil Software – Avast! home edition\ashServ.exe
D:\Programy\HDD Temperature v1.1\HDDTsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
D:\PROGRAMY\HIDDEN RECORDER 1.5\HR\Hr.exe
C:\PROGRA~1\ALWILS~1\ashDisp.exe
C:\Program Files\WLAN\WConfig\WConfig.exe
D:\Programy\HDD Temperature v1.1\HDDTemperature.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Alwil Software – Avast! home edition\ashMaiSv.exe
C:\Program Files\Alwil Software – Avast! home edition\ashWebSv.exe
C:\Program Files\Kerio Personal Firewall 4.2.0–785\Personal Firewall 4\kpf4ss.exe
C:\Program Files\Kerio Personal Firewall 4.2.0–785\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Kerio Personal Firewall 4.2.0–785\Personal Firewall 4\kpf4gui.exe
D:\Programy\Microsoft AntiSpyware Beta 1.0.701\gcasDtServ.exe
D:\Programy\Microsoft AntiSpyware Beta 1.0.701\gcasServ.exe
C:\PROGRA~1\MOZILL~1\THUNDE~1.EXE
D:\Programy\hijackthis\HijackThis.exe

R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
R0 – HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 – BHO: AcroIEHlprObj Class – {06849E9F–C8D7–4D59–B87D–784B7D6BE0B3} – C:\Program Files\Adobe\Acrobat 5.0 CE\Reader\ActiveX\AcroIEHelper.ocx
O2 – BHO: (no name) – {53707962–6F74–2D53–2644–206D7942484F} – D:\Programy\SpyBot\SPYBOT~1\SPYBOT~1\SDHelper.dll
O2 – BHO: Google Toolbar Helper – {AA58ED58–01DD–4d91–8333–CF10577473F7} – c:\program files\google\googletoolbar1.dll
O3 – Toolbar: &Google – {2318C2B1–4965–11d4–9B18–009027A5CD4F} – c:\program files\google\googletoolbar1.dll
O4 – HKLM\..\Run:

---

D:\PROGRAMY\HIDDEN RECORDER 1.5\HR\Hr.exe
O4 – HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\ashDisp.exe
O4 – HKLM\..\Run: [gcasServ] "D:\Programy\Microsoft AntiSpyware Beta 1.0.701\gcasServ.exe"
O4 – HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 – HKCU\..\Run: [Dzieńdobry!] D:\Moje programy\Dzień Dobry\Dzieńdobry!\dziendobry.exe /auto
O4 – HKCU\..\Run: [Gadu–Gadu] "D:\Programy\Gadu Gadu\Gadu–Gadu 2\Gadu–Gadu\gg.exe" /tray
O4 – HKCU\..\Run: [SpybotSD TeaTimer] D:\Programy\SpyBot\Spybot – Search & Destroy\Spybot – Search & Destroy\TeaTimer.exe
O4 – Startup: HDD temperature.lnk = D:\Programy\HDD Temperature v1.1\HDDTemperature.exe
O4 – Global Startup: WConfig.lnk = ?
O8 – Extra context menu item: &Google Search – res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 – Extra context menu item: &Translate English Word – res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 – Extra context menu item: Backward Links – res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 – Extra context menu item: Cached Snapshot of Page – res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 – Extra context menu item: Similar Pages – res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 – Extra context menu item: Translate Page into English – res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O15 – Trusted Zone: http://*.allegro.pl
O15 – Trusted Zone: http://arcaonline.arcabit.com
O15 – Trusted Zone: http://*.avast.com
O15 – Trusted Zone: http://www.avast.pl
O15 – Trusted Zone: http://www2.centrumxp.pl
O15 – Trusted Zone: http://*.centrumxp.pl
O15 – Trusted Zone: http://skaner.mks.com.pl
O15 – Trusted Zone: http://*.dsl.cz
O15 – Trusted Zone: http://*.ebay.pl
O15 – Trusted Zone: http://www.pandasoftware.com
O15 – Trusted Zone: http://*.poczta06.o2.pl
O15 – Trusted Zone: http://www.poltran.com
O15 – Trusted Zone: http://poczta.tenbit.pl
O16 – DPF: {0EB0E74A–2A76–4AB3–A7FB–9BD8C29F7F75} (CKAVWebScan Object) – http://kaspersky.pl/resources/virusscanner/kavwebscan_unicode.cab
O16 – DPF: {17492023–C23A–453E–A040–C7C580BBF700} (Windows Genuine Advantage Validation Tool) – http://go.microsoft.com/fwlink/?linkid=39204
O16 – DPF: {2BC66F54–93A8–11D3–BEB6–00105AA9B6AE} (Symantec AntiVirus scanner) – http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 – DPF: {3D8700FB–86A4–4CB4–B738–6F0FC016AC7D} (MainControl Class) – http://arcaonline.arcabit.com/ArcaOnline.cab
O16 – DPF: {4C39376E–FA9D–4349–BACC–D305C1750EF3} (EPUImageControl Class) – http://tools.ebayimg.com/eps/activex/EPUWALControl_v1–0–3–18.cab
O16 – DPF: {5D86DDB5–BDF9–441B–9E9E–D4730F4EE499} (BDSCANONLINE Control) – http://www.bitdefender.com/scan8/oscan8.cab
O16 – DPF: {5ED80217–570B–4DA9–BF44–BE107C0EC166} (CwlscInstall Object) – https://scan.safety.live.com/resource/download/scanner/en–us/wlscbase2213.cab
O16 – DPF: {644E432F–49D3–41A1–8DD5–E099162EEEC5} (Symantec RuFSI Utility Class) – http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 – DPF: {6E32070A–766D–4EE6–879C–DC1FA91D2FC3} (MUWebControl Class) – http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1125087612781
O16 – DPF: {7B297BFD–85E4–4092–B2AF–16A91B2EA103} (WScanCtl Class) – http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 – DPF: {917623D1–D8E5–11D2–BE8B–00104B06BDE3} (CamImage Class) – http://floridakeysmedia.tv/axiscam/Codebase/AxisCamControl.ocx
O16 – DPF: {E7544C6C–CFD6–43EA–B4E9–360CEE20BDF7} (MainControl Class) – http://skaner.mks.com.pl/SkanerOnline.cab
O16 – DPF: {EF791A6B–FC12–4C68–99EF–FB9E207A39E6} (McFreeScan Class) – http://download.mcafee.com/molbin/iss–loc/mcfscan/2,1,0,4635/mcfscan.cab
O17 – HKLM\System\CCS\Services\Tcpip\..\{D13643F0–D38B–41DA–AB34–7B35183C3910}: NameServer = 192.168.1.1 192.168.1.1
O23 – Service: avast! iAVS4 Control Service (aswUpdSv) – Unknown owner – C:\Program Files\Alwil Software – Avast! home edition\aswUpdSv.exe
O23 – Service: Ati HotKey Poller – ATI Technologies Inc. – C:\WINDOWS\system32\Ati2evxx.exe
O23 – Service: ATI Smart – Unknown owner – C:\WINDOWS\system32\ati2sgag.exe
O23 – Service: avast! Antivirus – Unknown owner – C:\Program Files\Alwil Software – Avast! home edition\ashServ.exe
O23 – Service: avast! Mail Scanner – Unknown owner – C:\Program Files\Alwil Software – Avast! home edition\ashMaiSv.exe" /service (file missing)
O23 – Service: avast! Web Scanner – Unknown owner – C:\Program Files\Alwil Software – Avast! home edition\ashWebSv.exe" /service (file missing)
O23 – Service: HDD Temperature (HDDTService) – PalickSoft – D:\Programy\HDD Temperature v1.1\HDDTsvc.exe
O23 – Service: InstallDriver Table Manager (IDriverT) – Macrovision Corporation – C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 – Service: Kerio Personal Firewall 4 (KPF4) – Kerio Technologies – C:\Program Files\Kerio Personal Firewall 4.2.0–785\Personal Firewall 4\kpf4ss.exe
O23 – Service: LexBce Server (LexBceS) – Lexmark International, Inc. – C:\WINDOWS\system32\LEXBCES.EXE
O23 – Service: RadClock – Unknown owner – C:\WINDOWS\system32\RadClock.exe