Proszę o sprawdzenie loga
Logfile of HijackThis v1.98.2
Scan saved at 17:03:05, on 2005–02–03
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesAheadInCDInCDsrv.exe
C:Program FilesTGTSoftStyleXPStyleXPService.exe
C:WINDOWSexplorer.exe
C:Program FilesCommon FilesSymantec SharedccProxy.exe
C:Program FilesCommon FilesSymantec SharedccSetMgr.exe
C:Program FilesNorton Internet SecurityISSVC.exe
C:Program FilesCommon FilesSymantec SharedSNDSrvc.exe
C:Program FilesCommon FilesSymantec SharedSPBBCSPBBCSvc.exe
C:Program FilesCommon FilesSymantec SharedccEvtMgr.exe
C:WINDOWSsystem32LEXBCES.EXE
C:WINDOWSsystem32spoolsv.exe
C:Program FilesCommon FilesSymantec SharedccApp.exe
C:PROGRA~1A4TechMouseAmoumain.exe
C:Program FilesTGTSoftStyleXPStyleXP.exe
C:Program FilesMyCompmycomp.exe
C:Program FilesPopTrayPopTray.exe
C:Program FilesSysInfoMyWorkSysInfoMyWork.exe
C:Program FilesExecutive SoftwareDiskeeperDkService.exe
C:Program FilesNorton Internet SecurityNorton AntiVirus avapsvc.exe
C:WINDOWSSystem32 vsvc32.exe
C:Program FilesCommon FilesSymantec SharedCCPD–LCsymlcsvc.exe
C:WINDOWSSystem32wbemwmiapsrv.exe
C:Program FileseMuleeMule.exe
C:Documents and Settingsmawik57Moje dokumentyNARZĘDZIA NA WIRUSYHijackThis.exe
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.onet.pl/
R0 – HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page =
R0 – HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page =
F2 – REG:system.ini: Shell=explorer.exe
O2 – BHO: AcroIEHlprObj Class – {06849E9F–C8D7–4D59–B87D–784B7D6BE0B3} – C:Program FilesAdobeAcrobat 6.0 CEReaderActiveXAcroIEHelper.dll
O2 – BHO: Norton Internet Security – {9ECB9560–04F9–4bbc–943D–298DDF1699E1} – C:Program FilesCommon FilesSymantec SharedAdBlockingNISShExt.dll
O2 – BHO: NAV Helper – {BDF3E430–B101–42AD–A544–FADC6B084872} – C:Program FilesNorton Internet SecurityNorton AntiVirusNavShExt.dll
O3 – Toolbar: Norton Internet Security – {0B53EAC3–8D69–4b9e–9B19–A37C9A5676A7} – C:Program FilesCommon FilesSymantec SharedAdBlockingNISShExt.dll
O3 – Toolbar: Norton AntiVirus – {42CDD1BF–3FFB–4238–8AD1–7859DF00B1D6} – C:Program FilesNorton Internet SecurityNorton AntiVirusNavShExt.dll
O3 – Toolbar: &Radio – {8E718888–423F–11D2–876E–00A0C9082467} – C:WINDOWSSystem32msdxm.ocx
O4 – HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 – HKLM..Run: [ccApp] "C:Program FilesCommon FilesSymantec SharedccApp.exe"
O4 – HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSSystem32NvMcTray.dll,NvTaskbarInit
O4 – HKLM..Run: [DiskeeperSystray] "C:Program FilesExecutive SoftwareDiskeeperDkIcon.exe"
O4 – HKLM..Run: [WheelMouse] C:PROGRA~1A4TechMouseAmoumain.exe
O4 – HKLM..Run: [SSC_UserPrompt] C:Program FilesCommon FilesSymantec SharedSecurity CenterUsrPrmpt.exe
O4 – HKLM..Run: [Symantec NetDriver Monitor] C:PROGRA~1SYMNET~1SNDMon.exe
O4 – HKCU..Run: [STYLEXP] C:Program FilesTGTSoftStyleXPStyleXP.exe –Hide
O4 – HKCU..Run: [Gadu–Gadu] "C:Program FilesGadu–GaduGG.EXE" /tray
O4 – Startup: MyComp.lnk = C:Program FilesMyCompmycomp.exe
O4 – Startup: PopTray.lnk = C:Program FilesPopTrayPopTray.exe
O4 – Startup: SysInfoMyWork.lnk = C:Program FilesSysInfoMyWorkSysInfoMyWork.exe
O8 – Extra context menu item: Analizuj za pomocą LeechGet – file://C:Program FilesLeechGet 2004\Parser.html
O8 – Extra context menu item: E&ksport do programu Microsoft Excel – res://C:PROGRA~1MICROS~2Office10EXCEL.EXE/3000
O8 – Extra context menu item: Pobierz uźywając kreatora LeechGet – file://C:Program FilesLeechGet 2004\Wizard.html
O8 – Extra context menu item: Pobierz uźywając LeechGet – file://C:Program FilesLeechGet 2004\AddUrl.html
O9 – Extra button: (no name) – {08B0E5C0–4FCB–11CF–AAA5–00401C608501} – C:Program FilesJavajre1.5.0in pjpi150.dll
O9 – Extra 'Tools' menuitem: Sun Java Console – {08B0E5C0–4FCB–11CF–AAA5–00401C608501} – C:Program FilesJavajre1.5.0in pjpi150.dll
O12 – Plugin for .exe: C:Program FilesOpera752PLUGINSNPFgc1.dll
O12 – Plugin for .zip: C:Program FilesOpera752PLUGINSNPFgc1.dll
O16 – DPF: {31B7EB4E–8B4B–11D1–A789–00A0CC6651A8} (Cult3D ActiveX Player) – http://www.cult3d.com/download/cult.cab
O16 – DPF: {6414512B–B978–451D–A0D8–FCFDF33E833C} (WUWebControl Class) – http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1093103508343
O16 – DPF: {E7544C6C–CFD6–43EA–B4E9–360CEE20BDF7} (MainControl Class) – http://skaner.mks.com.pl/SkanerOnline.cab
Scan saved at 17:03:05, on 2005–02–03
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesAheadInCDInCDsrv.exe
C:Program FilesTGTSoftStyleXPStyleXPService.exe
C:WINDOWSexplorer.exe
C:Program FilesCommon FilesSymantec SharedccProxy.exe
C:Program FilesCommon FilesSymantec SharedccSetMgr.exe
C:Program FilesNorton Internet SecurityISSVC.exe
C:Program FilesCommon FilesSymantec SharedSNDSrvc.exe
C:Program FilesCommon FilesSymantec SharedSPBBCSPBBCSvc.exe
C:Program FilesCommon FilesSymantec SharedccEvtMgr.exe
C:WINDOWSsystem32LEXBCES.EXE
C:WINDOWSsystem32spoolsv.exe
C:Program FilesCommon FilesSymantec SharedccApp.exe
C:PROGRA~1A4TechMouseAmoumain.exe
C:Program FilesTGTSoftStyleXPStyleXP.exe
C:Program FilesMyCompmycomp.exe
C:Program FilesPopTrayPopTray.exe
C:Program FilesSysInfoMyWorkSysInfoMyWork.exe
C:Program FilesExecutive SoftwareDiskeeperDkService.exe
C:Program FilesNorton Internet SecurityNorton AntiVirus avapsvc.exe
C:WINDOWSSystem32 vsvc32.exe
C:Program FilesCommon FilesSymantec SharedCCPD–LCsymlcsvc.exe
C:WINDOWSSystem32wbemwmiapsrv.exe
C:Program FileseMuleeMule.exe
C:Documents and Settingsmawik57Moje dokumentyNARZĘDZIA NA WIRUSYHijackThis.exe
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.onet.pl/
R0 – HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page =
R0 – HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page =
F2 – REG:system.ini: Shell=explorer.exe
O2 – BHO: AcroIEHlprObj Class – {06849E9F–C8D7–4D59–B87D–784B7D6BE0B3} – C:Program FilesAdobeAcrobat 6.0 CEReaderActiveXAcroIEHelper.dll
O2 – BHO: Norton Internet Security – {9ECB9560–04F9–4bbc–943D–298DDF1699E1} – C:Program FilesCommon FilesSymantec SharedAdBlockingNISShExt.dll
O2 – BHO: NAV Helper – {BDF3E430–B101–42AD–A544–FADC6B084872} – C:Program FilesNorton Internet SecurityNorton AntiVirusNavShExt.dll
O3 – Toolbar: Norton Internet Security – {0B53EAC3–8D69–4b9e–9B19–A37C9A5676A7} – C:Program FilesCommon FilesSymantec SharedAdBlockingNISShExt.dll
O3 – Toolbar: Norton AntiVirus – {42CDD1BF–3FFB–4238–8AD1–7859DF00B1D6} – C:Program FilesNorton Internet SecurityNorton AntiVirusNavShExt.dll
O3 – Toolbar: &Radio – {8E718888–423F–11D2–876E–00A0C9082467} – C:WINDOWSSystem32msdxm.ocx
O4 – HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 – HKLM..Run: [ccApp] "C:Program FilesCommon FilesSymantec SharedccApp.exe"
O4 – HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSSystem32NvMcTray.dll,NvTaskbarInit
O4 – HKLM..Run: [DiskeeperSystray] "C:Program FilesExecutive SoftwareDiskeeperDkIcon.exe"
O4 – HKLM..Run: [WheelMouse] C:PROGRA~1A4TechMouseAmoumain.exe
O4 – HKLM..Run: [SSC_UserPrompt] C:Program FilesCommon FilesSymantec SharedSecurity CenterUsrPrmpt.exe
O4 – HKLM..Run: [Symantec NetDriver Monitor] C:PROGRA~1SYMNET~1SNDMon.exe
O4 – HKCU..Run: [STYLEXP] C:Program FilesTGTSoftStyleXPStyleXP.exe –Hide
O4 – HKCU..Run: [Gadu–Gadu] "C:Program FilesGadu–GaduGG.EXE" /tray
O4 – Startup: MyComp.lnk = C:Program FilesMyCompmycomp.exe
O4 – Startup: PopTray.lnk = C:Program FilesPopTrayPopTray.exe
O4 – Startup: SysInfoMyWork.lnk = C:Program FilesSysInfoMyWorkSysInfoMyWork.exe
O8 – Extra context menu item: Analizuj za pomocą LeechGet – file://C:Program FilesLeechGet 2004\Parser.html
O8 – Extra context menu item: E&ksport do programu Microsoft Excel – res://C:PROGRA~1MICROS~2Office10EXCEL.EXE/3000
O8 – Extra context menu item: Pobierz uźywając kreatora LeechGet – file://C:Program FilesLeechGet 2004\Wizard.html
O8 – Extra context menu item: Pobierz uźywając LeechGet – file://C:Program FilesLeechGet 2004\AddUrl.html
O9 – Extra button: (no name) – {08B0E5C0–4FCB–11CF–AAA5–00401C608501} – C:Program FilesJavajre1.5.0in pjpi150.dll
O9 – Extra 'Tools' menuitem: Sun Java Console – {08B0E5C0–4FCB–11CF–AAA5–00401C608501} – C:Program FilesJavajre1.5.0in pjpi150.dll
O12 – Plugin for .exe: C:Program FilesOpera752PLUGINSNPFgc1.dll
O12 – Plugin for .zip: C:Program FilesOpera752PLUGINSNPFgc1.dll
O16 – DPF: {31B7EB4E–8B4B–11D1–A789–00A0CC6651A8} (Cult3D ActiveX Player) – http://www.cult3d.com/download/cult.cab
O16 – DPF: {6414512B–B978–451D–A0D8–FCFDF33E833C} (WUWebControl Class) – http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1093103508343
O16 – DPF: {E7544C6C–CFD6–43EA–B4E9–360CEE20BDF7} (MainControl Class) – http://skaner.mks.com.pl/SkanerOnline.cab
Odpowiedzi: 6
Pawko:troche poprzeglądam moźe teź nie naucze rozpoznawać narazie nie zaufałbym sobie :P
Wiec na razie zdawaj sie na bardziej doświadczonych tej materii :P
Mnie do nich zaliczyć nie mozna
troche poprzeglądam moźe teź nie naucze rozpoznawać narazie nie zaufałbym sobie :P
a w jakim sensie?poprostu ty się dobrze znasz i zbędnych rzeczy nie podasz do usunięcia.Pozdrawiam
@mawik57:
Napraw tylko to: F2 – REG:system.ini: Shell=explorer.exe
Przeskanuj dla pewnosci Ad–awere
To wszystko
@Pawko: Nie przesadzasz z tymi ekspertami ??
Napraw tylko to: F2 – REG:system.ini: Shell=explorer.exe
Przeskanuj dla pewnosci Ad–awere
To wszystko
@Pawko: Nie przesadzasz z tymi ekspertami ??
Wiem co to za programy.
Masz rację poczekam jeszcze na experta.
Masz rację poczekam jeszcze na experta.
jak zwykle podam co wywalić ale poczekaj na jakiegoś experta źeby powiedział co na 100 % bo moge się mylić i będzie źle
Pozdrawiam
C:Program FilesMyCompmycomp.exe
C:Program FilesSysInfoMyWorkSysInfoMyWork.exe
czy wiesz co to za 2 powyźsze programy?
F2 – REG:system.ini: Shell=explorer.exe
O4 – Startup: MyComp.lnk = C:Program FilesMyCompmycomp.exe
O4 – Startup: SysInfoMyWork.lnk = C:Program FilesSysInfoMyWorkSysInfoMyWork.exe
Pozdrawiam
Strona 1 / 1