Temp
MOzna usunac caly ten folder, bo dziwne sa tam rzeczy :)
Odpowiedzi: 4
Gdym zobaczył screen shota to moźe bym coś poradził, ale go jakoś nie ma :wink: .
Dzieki za pomoc ale jeszcze wyskakuje mi dziwny blad przy niektorych stronach: Blad jest na screnie
Ehhh nie moge wyslac tego screena, takie cos sie pojawia:
"Błąd ładowania pliku: Nie moźna załadować załącznika ./files/bug.jpeg na serwer"
Moge ci go na meila wyslac tylko go podaj :)
Ehhh nie moge wyslac tego screena, takie cos sie pojawia:
"Błąd ładowania pliku: Nie moźna załadować załącznika ./files/bug.jpeg na serwer"
Moge ci go na meila wyslac tylko go podaj :)
Ano moźna.
Co do logu :
FIND GRAM.exe co do tego to nie mam zielonego pojęcia co to jest :?:
Wyłączyć przywracanie systemu, wyszukać i usunąc :
CMESys.exe ( zamknąć najpierw proces w Tasku ).
lbbho.dll
GMT.exe ( to samo jeśli jest ).
Potem Fix`uj podane wpisy.
BTW, jak chcesz coś dopisać albo zmienić w poście uźyj funkcji zmień.
Co do logu :
D:Program FilesCommon FilesCMEIICMESys.exe
O2 – BHO: LBBHO – {EFD84954–6B46–42f4–81F3–94CE9A77052D} – D:WINDOWSlbbho.dll
O4 – HKLM..Run: [CMESys] "D:Program FilesCommon FilesCMEIICMESys.exe
O4 – Global Startup: GStartup.lnk = D:Program FilesCommon FilesGMTGMT.exe
FIND GRAM.exe co do tego to nie mam zielonego pojęcia co to jest :?:
Wyłączyć przywracanie systemu, wyszukać i usunąc :
CMESys.exe ( zamknąć najpierw proces w Tasku ).
lbbho.dll
GMT.exe ( to samo jeśli jest ).
Potem Fix`uj podane wpisy.
BTW, jak chcesz coś dopisać albo zmienić w poście uźyj funkcji zmień.
Moze jeszcze dodam log z Hijacka:
Logfile of HijackThis v1.97.7
Scan saved at 22:02:06, on 2004–07–04
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
D:WINDOWSSystem32smss.exe
D:WINDOWSsystem32winlogon.exe
D:WINDOWSsystem32services.exe
D:WINDOWSsystem32lsass.exe
D:WINDOWSsystem32svchost.exe
D:WINDOWSSystem32svchost.exe
D:WINDOWSsystem32spoolsv.exe
D:WINDOWSExplorer.EXE
D:WINDOWSSystem32RUNDLL32.EXE
D:Program FilesWinampwinampa.exe
D:PROGRA~1Trans Kind MapiFIND GRAM.exe
D:Program FilesCommon FilesCMEIICMESys.exe
D:Program FilesDU MeterDUMeter.exe
D:Program FilesMKSBinmks_menu.exe
D:Program FilesJavaj2re1.4.2_04injusched.exe
D:PROGRA~1ALWILS~1Avast4ashDisp.exe
D:PROGRA~1ALWILS~1Avast4ashmaisv.exe
D:WINDOWSSystem32ctfmon.exe
D:Program FilesMessengermsmsgs.exe
D:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
D:Program FilesAlwil SoftwareAvast4ashServ.exe
D:Program FilesCommon FilesMicrosoft SharedVS7Debugmdm.exe
D:Program FilesMKSBinNetMonSv.exe
D:Program FilesMKSBinmksmonsv.exe
D:WINDOWSSystem32 vsvc32.exe
D:Program FilesKerioPersonal Firewallpersfw.exe
D:Program FilesMKSBinmks_scan.exe
D:WINDOWSSystem32devldr32.exe
D:Program FilesOpera7Opera.exe
C:DownloadsAntywirusyhijackthisHijackThis.exe
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.onet.pl/
R0 – HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza
O2 – BHO: (no name) – {06849E9F–C8D7–4D59–B87D–784B7D6BE0B3} – D:Program FilesAdobeAcrobat 6.0 CEReaderActiveXAcroIEHelper.dll
O2 – BHO: (no name) – {A5366673–E8CA–11D3–9CD9–0090271D075B} – D:PROGRA~1FlashGetjccatch.dll
O2 – BHO: LBBHO – {EFD84954–6B46–42f4–81F3–94CE9A77052D} – D:WINDOWSlbbho.dll
O3 – Toolbar: &Radio – {8E718888–423F–11D2–876E–00A0C9082467} – D:WINDOWSSystem32msdxm.ocx
O3 – Toolbar: FlashGet Bar – {E0E899AB–F487–11D5–8D29–0050BA6940E3} – D:PROGRA~1FlashGetfgiebar.dll
O4 – HKLM..Run: [NvCplDaemon] RUNDLL32.EXE D:WINDOWSSystem32NvCpl.dll,NvStartup
O4 – HKLM..Run: [nwiz] nwiz.exe /install
O4 – HKLM..Run: [NvMediaCenter] RUNDLL32.EXE D:WINDOWSSystem32NvMcTray.dll,NvTaskbarInit
O4 – HKLM..Run: [WinampAgent] D:Program FilesWinampwinampa.exe
O4 – HKLM..Run: [junkinfo] D:PROGRA~1Trans Kind MapiFIND GRAM.exe
O4 – HKLM..Run: [AltnetPointsManager] c:program filesaltnetpoints managerpoints manager.exe –s
O4 – HKLM..Run: [CMESys] "D:Program FilesCommon FilesCMEIICMESys.exe"
O4 – HKLM..Run: [DU Meter] D:Program FilesDU MeterDUMeter.exe
O4 – HKLM..Run: [MKS_MENU] D:Program FilesMKSBinmks_menu.exe
O4 – HKLM..Run: [SunJavaUpdateSched] D:Program FilesJavaj2re1.4.2_04injusched.exe
O4 – HKLM..Run: [avast!] D:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 – HKLM..Run: [ashMaiSv] D:PROGRA~1ALWILS~1Avast4ashmaisv.exe
O4 – HKLM..Run: [SpyHunter] D:Program FilesEnigma Software GroupSpyHunterSpyHunter.exe
O4 – HKCU..Run: [CTFMON.EXE] D:WINDOWSSystem32ctfmon.exe
O4 – HKCU..Run: [MSMSGS] "D:Program FilesMessengermsmsgs.exe" /background
O4 – HKCU..Run: [Steam] "d:grysteamsteam.exe" –silent
O4 – Global Startup: GStartup.lnk = D:Program FilesCommon FilesGMTGMT.exe
O4 – Global Startup: Microsoft Office.lnk = D:Program FilesMicrosoft OfficeOffice10OSA.EXE
O8 – Extra context menu item: Download All by FlashGet – D:Program FilesFlashGetjc_all.htm
O8 – Extra context menu item: Download using FlashGet – D:Program FilesFlashGetjc_link.htm
O8 – Extra context menu item: E&ksport do programu Microsoft Excel – res://D:PROGRA~1MICROS~2Office10EXCEL.EXE/3000
O9 – Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 – Extra button: Related (HKLM)
O9 – Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 – Extra button: FlashGet (HKLM)
O9 – Extra 'Tools' menuitem: &FlashGet (HKLM)
O16 – DPF: {166B1BCA–3F9C–11CF–8075–444553540000} (Shockwave ActiveX Control) – http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 – DPF: {74D05D43–3236–11D4–BDCD–00C04F9A3B61} (HouseCall Control) – http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 – DPF: {917623D1–D8E5–11D2–BE8B–00104B06BDE3} (CamImage Class) – http://www.parispourvous.com/paris4you/activex/AxisCamControl.ocx
O16 – DPF: {9F1C11AA–197B–4942–BA54–47A8489BB47F} (Update Class) – http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38130.347962963
O16 – DPF: {E7544C6C–CFD6–43EA–B4E9–360CEE20BDF7} (MainControl Class) – http://bezpieczenstwo.onet.pl/skaner/SkanerOnline.cab
O17 – HKLMSystemCCSServicesTcpip..{349F9D5A–1EC1–4F7A–9ADD–82E042B93FC8}: NameServer = 213.227.72.1,194.204.159.1
Logfile of HijackThis v1.97.7
Scan saved at 22:02:06, on 2004–07–04
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
D:WINDOWSSystem32smss.exe
D:WINDOWSsystem32winlogon.exe
D:WINDOWSsystem32services.exe
D:WINDOWSsystem32lsass.exe
D:WINDOWSsystem32svchost.exe
D:WINDOWSSystem32svchost.exe
D:WINDOWSsystem32spoolsv.exe
D:WINDOWSExplorer.EXE
D:WINDOWSSystem32RUNDLL32.EXE
D:Program FilesWinampwinampa.exe
D:PROGRA~1Trans Kind MapiFIND GRAM.exe
D:Program FilesCommon FilesCMEIICMESys.exe
D:Program FilesDU MeterDUMeter.exe
D:Program FilesMKSBinmks_menu.exe
D:Program FilesJavaj2re1.4.2_04injusched.exe
D:PROGRA~1ALWILS~1Avast4ashDisp.exe
D:PROGRA~1ALWILS~1Avast4ashmaisv.exe
D:WINDOWSSystem32ctfmon.exe
D:Program FilesMessengermsmsgs.exe
D:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
D:Program FilesAlwil SoftwareAvast4ashServ.exe
D:Program FilesCommon FilesMicrosoft SharedVS7Debugmdm.exe
D:Program FilesMKSBinNetMonSv.exe
D:Program FilesMKSBinmksmonsv.exe
D:WINDOWSSystem32 vsvc32.exe
D:Program FilesKerioPersonal Firewallpersfw.exe
D:Program FilesMKSBinmks_scan.exe
D:WINDOWSSystem32devldr32.exe
D:Program FilesOpera7Opera.exe
C:DownloadsAntywirusyhijackthisHijackThis.exe
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.onet.pl/
R0 – HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza
O2 – BHO: (no name) – {06849E9F–C8D7–4D59–B87D–784B7D6BE0B3} – D:Program FilesAdobeAcrobat 6.0 CEReaderActiveXAcroIEHelper.dll
O2 – BHO: (no name) – {A5366673–E8CA–11D3–9CD9–0090271D075B} – D:PROGRA~1FlashGetjccatch.dll
O2 – BHO: LBBHO – {EFD84954–6B46–42f4–81F3–94CE9A77052D} – D:WINDOWSlbbho.dll
O3 – Toolbar: &Radio – {8E718888–423F–11D2–876E–00A0C9082467} – D:WINDOWSSystem32msdxm.ocx
O3 – Toolbar: FlashGet Bar – {E0E899AB–F487–11D5–8D29–0050BA6940E3} – D:PROGRA~1FlashGetfgiebar.dll
O4 – HKLM..Run: [NvCplDaemon] RUNDLL32.EXE D:WINDOWSSystem32NvCpl.dll,NvStartup
O4 – HKLM..Run: [nwiz] nwiz.exe /install
O4 – HKLM..Run: [NvMediaCenter] RUNDLL32.EXE D:WINDOWSSystem32NvMcTray.dll,NvTaskbarInit
O4 – HKLM..Run: [WinampAgent] D:Program FilesWinampwinampa.exe
O4 – HKLM..Run: [junkinfo] D:PROGRA~1Trans Kind MapiFIND GRAM.exe
O4 – HKLM..Run: [AltnetPointsManager] c:program filesaltnetpoints managerpoints manager.exe –s
O4 – HKLM..Run: [CMESys] "D:Program FilesCommon FilesCMEIICMESys.exe"
O4 – HKLM..Run: [DU Meter] D:Program FilesDU MeterDUMeter.exe
O4 – HKLM..Run: [MKS_MENU] D:Program FilesMKSBinmks_menu.exe
O4 – HKLM..Run: [SunJavaUpdateSched] D:Program FilesJavaj2re1.4.2_04injusched.exe
O4 – HKLM..Run: [avast!] D:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 – HKLM..Run: [ashMaiSv] D:PROGRA~1ALWILS~1Avast4ashmaisv.exe
O4 – HKLM..Run: [SpyHunter] D:Program FilesEnigma Software GroupSpyHunterSpyHunter.exe
O4 – HKCU..Run: [CTFMON.EXE] D:WINDOWSSystem32ctfmon.exe
O4 – HKCU..Run: [MSMSGS] "D:Program FilesMessengermsmsgs.exe" /background
O4 – HKCU..Run: [Steam] "d:grysteamsteam.exe" –silent
O4 – Global Startup: GStartup.lnk = D:Program FilesCommon FilesGMTGMT.exe
O4 – Global Startup: Microsoft Office.lnk = D:Program FilesMicrosoft OfficeOffice10OSA.EXE
O8 – Extra context menu item: Download All by FlashGet – D:Program FilesFlashGetjc_all.htm
O8 – Extra context menu item: Download using FlashGet – D:Program FilesFlashGetjc_link.htm
O8 – Extra context menu item: E&ksport do programu Microsoft Excel – res://D:PROGRA~1MICROS~2Office10EXCEL.EXE/3000
O9 – Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 – Extra button: Related (HKLM)
O9 – Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 – Extra button: FlashGet (HKLM)
O9 – Extra 'Tools' menuitem: &FlashGet (HKLM)
O16 – DPF: {166B1BCA–3F9C–11CF–8075–444553540000} (Shockwave ActiveX Control) – http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 – DPF: {74D05D43–3236–11D4–BDCD–00C04F9A3B61} (HouseCall Control) – http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 – DPF: {917623D1–D8E5–11D2–BE8B–00104B06BDE3} (CamImage Class) – http://www.parispourvous.com/paris4you/activex/AxisCamControl.ocx
O16 – DPF: {9F1C11AA–197B–4942–BA54–47A8489BB47F} (Update Class) – http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38130.347962963
O16 – DPF: {E7544C6C–CFD6–43EA–B4E9–360CEE20BDF7} (MainControl Class) – http://bezpieczenstwo.onet.pl/skaner/SkanerOnline.cab
O17 – HKLMSystemCCSServicesTcpip..{349F9D5A–1EC1–4F7A–9ADD–82E042B93FC8}: NameServer = 213.227.72.1,194.204.159.1
Strona 1 / 1