Błąd podczas uruchamiania mozilli

**Posty:** 79 · przez **BOT** 24 Paź 2008, 12:58

Witam od jakiegos czasu mam problem nie raz jak uruchamiam mozille to wyskakuje mi błąd :
http://img231.imageshack.us/my.php?image=dasdaed8.jpg
i chciałbym się dowiedzieć od czego ten błąd wyskakuje sciana

**Posty:** 7956 · przez **Magik** 24 Paź 2008, 13:34

wkelj log z combofixa i HJT ino chyzio

**Posty:** 79 · przez **BOT** 24 Paź 2008, 14:16

Kod: Zaznacz wszystko: ComboFix 08-10-23.08 - Lewis 2008-10-24 14:07:32.1 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.3.1250.1.1045.18.2435 [GMT 2:00] Uruchomiony z: C:\Documents and Settings\Lewis\Pulpit\ComboFix.exe * Utworzono nowy punkt przywracania . Error: Cfiles.dat ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\system32\drivers\oreans32.sys . ((((((((((((((((((((((((((((((((((((((( Sterowniki/Usługi ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_OREANS32 -------\Service_oreans32 ((((((((((((((((((((((((( Pliki utworzone od 2008-09-24 do 2008-10-24 ))))))))))))))))))))))))))))))) . 2008-10-23 23:12 . 2008-10-23 23:12 <DIR> d-------- C:\Program Files\Hamachi 2008-10-23 23:12 . 2008-10-24 10:55 <DIR> d-------- C:\Documents and Settings\Lewis\Dane aplikacji\Hamachi 2008-10-23 23:12 . 2008-10-23 23:12 25,280 --a------ C:\WINDOWS\system32\drivers\hamachi.sys 2008-10-21 11:59 . 2008-10-21 11:59 <DIR> d-------- C:\Program Files\NAPI-PROJEKT 2008-10-21 02:19 . 2008-10-21 02:22 <DIR> d-------- C:\Program Files\ElcomSoft 2008-10-21 01:26 . 2008-10-21 01:26 <DIR> dr-h----- C:\Documents and Settings\Lewis\Dane aplikacji\SecuROM 2008-10-21 01:24 . 2008-10-21 01:25 107,888 --a------ C:\WINDOWS\system32\CmdLineExt.dll 2008-10-21 01:21 . 2008-10-21 01:21 <DIR> d-------- C:\WINDOWS\Logs 2008-10-21 01:21 . 2008-05-30 14:11 3,850,760 --a------ C:\WINDOWS\system32\D3DX9_38.dll 2008-10-21 01:21 . 2008-05-30 14:11 1,491,992 --a------ C:\WINDOWS\system32\D3DCompiler_38.dll 2008-10-21 01:21 . 2008-05-30 14:19 507,400 --a------ C:\WINDOWS\system32\XAudio2_1.dll 2008-10-21 01:21 . 2008-05-30 14:11 467,984 --a------ C:\WINDOWS\system32\d3dx10_38.dll 2008-10-21 01:21 . 2008-05-30 14:18 238,088 --a------ C:\WINDOWS\system32\xactengine3_1.dll 2008-10-21 01:21 . 2008-05-30 14:17 65,032 --a------ C:\WINDOWS\system32\XAPOFX1_0.dll 2008-10-21 01:21 . 2008-05-30 14:17 25,608 --a------ C:\WINDOWS\system32\X3DAudio1_4.dll 2008-10-17 16:57 . 2008-04-13 20:54 22,016 --a------ C:\WINDOWS\system32\drivers\MSIRCOMM.sys 2008-10-17 16:57 . 2008-04-13 20:54 22,016 --a--c--- C:\WINDOWS\system32\dllcache\msircomm.sys 2008-10-17 16:56 . 2008-04-14 19:21 152,064 --a------ C:\WINDOWS\system32\irftp.exe 2008-10-17 16:56 . 2008-04-14 19:21 152,064 --a--c--- C:\WINDOWS\system32\dllcache\irftp.exe 2008-10-17 16:56 . 2008-04-13 20:54 88,192 --a------ C:\WINDOWS\system32\drivers\irda.sys 2008-10-17 16:56 . 2008-04-13 20:54 88,192 --a--c--- C:\WINDOWS\system32\dllcache\irda.sys 2008-10-17 16:56 . 2008-04-14 19:20 28,672 --a------ C:\WINDOWS\system32\irmon.dll 2008-10-17 16:56 . 2008-04-14 19:20 28,672 --a--c--- C:\WINDOWS\system32\dllcache\irmon.dll 2008-10-17 16:56 . 2001-08-17 21:49 26,624 --a------ C:\WINDOWS\system32\drivers\irstusb.sys 2008-10-17 16:56 . 2001-08-17 21:49 26,624 --a--c--- C:\WINDOWS\system32\dllcache\irstusb.sys 2008-10-17 16:56 . 2001-08-17 21:51 19,584 --a------ C:\WINDOWS\system32\drivers\rasirda.sys 2008-10-17 16:56 . 2001-08-17 21:51 19,584 --a--c--- C:\WINDOWS\system32\dllcache\rasirda.sys 2008-10-17 16:56 . 2008-04-14 19:21 8,192 --a------ C:\WINDOWS\system32\wshirda.dll 2008-10-17 16:56 . 2008-04-14 19:21 8,192 --a--c--- C:\WINDOWS\system32\dllcache\wshirda.dll 2008-10-15 10:11 . 2008-09-08 12:41 333,824 -----c--- C:\WINDOWS\system32\dllcache\srv.sys 2008-10-15 10:10 . 2008-08-14 15:26 2,190,464 -----c--- C:\WINDOWS\system32\dllcache\ntoskrnl.exe 2008-10-15 10:10 . 2008-08-14 15:26 2,146,816 -----c--- C:\WINDOWS\system32\dllcache\ntkrnlmp.exe 2008-10-15 10:10 . 2008-08-14 15:26 2,067,328 -----c--- C:\WINDOWS\system32\dllcache\ntkrnlpa.exe 2008-10-15 10:10 . 2008-08-14 15:26 2,025,472 -----c--- C:\WINDOWS\system32\dllcache\ntkrpamp.exe 2008-10-15 10:10 . 2008-09-15 17:27 1,846,656 -----c--- C:\WINDOWS\system32\dllcache\win32k.sys 2008-10-13 11:18 . 2007-10-12 15:14 3,734,536 --a------ C:\WINDOWS\system32\d3dx9_36.dll 2008-10-13 11:18 . 2008-03-05 15:56 1,420,824 --a------ C:\WINDOWS\system32\D3DCompiler_37.dll 2008-10-13 11:18 . 2007-10-12 15:14 1,374,232 --a------ C:\WINDOWS\system32\D3DCompiler_36.dll 2008-10-13 11:18 . 2007-07-19 18:14 1,358,192 --a------ C:\WINDOWS\system32\D3DCompiler_35.dll 2008-10-13 11:18 . 2008-03-05 16:03 479,752 --a------ C:\WINDOWS\system32\XAudio2_0.dll 2008-10-13 11:18 . 2008-02-05 23:07 462,864 --a------ C:\WINDOWS\system32\d3dx10_37.dll 2008-10-13 11:18 . 2007-10-02 09:56 444,776 --a------ C:\WINDOWS\system32\d3dx10_36.dll 2008-10-13 11:18 . 2007-07-19 18:14 444,776 --a------ C:\WINDOWS\system32\d3dx10_35.dll 2008-10-13 11:18 . 2007-10-22 03:39 267,272 --a------ C:\WINDOWS\system32\xactengine2_10.dll 2008-10-13 11:18 . 2007-07-20 00:57 267,112 --a------ C:\WINDOWS\system32\xactengine2_9.dll 2008-10-13 11:18 . 2008-03-05 16:03 238,088 --a------ C:\WINDOWS\system32\xactengine3_0.dll 2008-10-13 11:18 . 2008-03-05 16:00 25,608 --a------ C:\WINDOWS\system32\X3DAudio1_3.dll 2008-10-13 11:17 . 2008-10-13 11:17 <DIR> d-------- C:\WINDOWS\system32\AGEIA 2008-10-13 11:17 . 2008-10-13 11:17 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard 2008-10-13 11:17 . 2008-10-13 11:17 <DIR> d-------- C:\Program Files\AGEIA Technologies 2008-10-11 22:39 . 2008-10-11 22:39 <DIR> d-------- C:\Documents and Settings\Lewis\Dane aplikacji\Activision 2008-10-11 22:37 . 2008-10-11 22:37 307 --a------ C:\WINDOWS\game.ini 2008-10-11 22:09 . 2008-10-11 22:09 <DIR> d--hs---- C:\WINDOWS\ftpcache 2008-10-10 21:26 . 2008-04-14 19:20 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll 2008-10-10 21:26 . 2008-04-13 20:45 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys 2008-10-10 21:26 . 2008-04-13 20:45 15,104 --a--c--- C:\WINDOWS\system32\dllcache\usbscan.sys 2008-10-10 21:26 . 2001-10-26 17:29 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll 2008-10-09 22:04 . 2008-10-09 22:04 <DIR> d-------- C:\WINDOWS\Cache 2008-10-08 20:45 . 2008-10-08 20:45 <DIR> d-------- C:\Program Files\uTorrent 2008-10-07 23:35 . 2008-10-07 23:35 741 --a------ C:\WINDOWS\wininit.ini 2008-10-07 23:25 . 2008-10-07 23:25 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy 2008-10-07 23:25 . 2008-10-08 11:40 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy 2008-10-05 20:26 . 2008-10-05 20:26 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\nView_Profiles 2008-10-04 14:40 . 2008-10-04 14:40 <DIR> d-------- C:\Documents and Settings\Lewis\Dane aplikacji\Leadertech 2008-10-04 14:33 . 2008-03-05 15:56 3,786,760 --a------ C:\WINDOWS\system32\D3DX9_37.dll 2008-10-04 14:33 . 2007-07-19 18:14 3,727,720 --a------ C:\WINDOWS\system32\d3dx9_35.dll 2008-10-04 14:25 . 2008-10-04 14:25 <DIR> d-------- C:\Program Files\Alcohol Soft 2008-10-04 13:58 . 2008-10-04 13:58 716,272 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2008-10-02 11:15 . 2008-10-02 11:15 151 --a------ C:\WINDOWS\PhotoSnapViewer.INI 2008-10-01 20:29 . 2008-04-13 20:45 26,368 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys 2008-09-26 17:49 . 2008-09-26 17:49 <DIR> d-------- C:\Program Files\Common Files\NSV 2008-09-26 17:46 . 2008-09-26 17:46 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\LightScribe 2008-09-25 11:31 . 2008-09-25 11:31 <DIR> d-------- C:\Program Files\Kaspersky Lab 2008-09-25 11:31 . 2008-10-24 13:28 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab 2008-09-25 11:31 . 2008-10-24 14:12 7,761,184 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat 2008-09-25 11:31 . 2008-10-24 14:12 349,472 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat 2008-09-25 11:31 . 2008-10-24 14:11 108,104 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx 2008-09-25 11:31 . 2008-09-25 11:43 96,976 --a------ C:\WINDOWS\system32\drivers\klin.dat 2008-09-25 11:31 . 2008-09-25 11:43 87,855 --a------ C:\WINDOWS\system32\drivers\klick.dat 2008-09-25 11:31 . 2008-10-24 14:11 36,920 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.idx 2008-09-24 21:55 . 2008-10-21 12:33 69 --a------ C:\WINDOWS\NeroDigital.ini 2008-09-24 20:18 . 2008-09-24 20:18 <DIR> d-------- C:\Program Files\ffdshow 2008-09-24 20:18 . 2006-12-10 23:32 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll 2008-09-24 20:18 . 2006-12-10 23:32 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll 2008-09-24 20:18 . 2008-06-08 23:58 60,273 --a------ C:\WINDOWS\system32\pthreadGC2.dll 2008-09-24 20:18 . 2008-06-12 20:36 7,680 --a------ C:\WINDOWS\system32\ff_vfw.dll 2008-09-24 20:18 . 2007-07-10 18:10 547 --a------ C:\WINDOWS\system32\ff_vfw.dll.manifest 2008-09-24 16:40 . 2008-10-22 11:42 <DIR> d-------- C:\Program Files\DC++ 2008-09-24 15:27 . 2008-09-24 15:27 <DIR> d-------- C:\Program Files\xchat 2008-09-24 15:27 . 2008-10-23 22:45 <DIR> d-------- C:\Documents and Settings\Lewis\Dane aplikacji\X-Chat 2 2008-09-24 14:17 . 2008-09-24 14:17 <DIR> d-------- C:\Program Files\Lavalys 2008-09-24 13:01 . 2008-10-12 22:23 <DIR> d-------- C:\Documents and Settings\Lewis\Dane aplikacji\Ventrilo . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-10-24 12:04 --------- d-----w C:\Documents and Settings\Lewis\Dane aplikacji\uTorrent 2008-10-22 10:48 --------- d-----w C:\Program Files\Winamp 2008-10-20 23:18 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-10-20 14:31 --------- d-----w C:\Program Files\Gadu-Gadu 2008-10-09 20:05 --------- d-----w C:\Program Files\Common Files\Adobe 2008-10-09 09:01 --------- d-----w C:\Program Files\BearShare 2008-09-25 09:43 112,144 ----a-w C:\WINDOWS\system32\drivers\kl1.sys 2008-09-25 09:31 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files 2008-09-24 10:46 --------- d-----w C:\Program Files\MSXML 4.0 2008-09-24 10:37 --------- d-----w C:\Documents and Settings\Lewis\Dane aplikacji\Gadu-Gadu 2008-09-24 09:59 --------- d-----w C:\Program Files\Realtek 2008-09-24 09:42 --------- d-----w C:\Program Files\VentriloMIX 2008-09-24 09:38 82,380 ----a-w C:\WINDOWS\system32\drivers\AFS2K.SYS 2008-09-24 09:38 --------- d-----w C:\Program Files\Hewlett-Packard 2008-09-24 09:36 --------- d-----w C:\Program Files\HP 2008-09-24 09:34 --------- d-----w C:\Program Files\ABBYY FineReader 4.0 Sprint 2008-09-24 09:32 --------- d-----w C:\Program Files\BearPaw 2400CU Plus 2008-09-24 09:31 --------- d-----w C:\Program Files\Common Files\LightScribe 2008-09-24 09:31 --------- d-----w C:\Program Files\Common Files\Ahead 2008-09-24 09:31 --------- d-----w C:\Documents and Settings\Lewis\Dane aplikacji\Ahead 2008-09-24 09:29 --------- d-----w C:\Program Files\Nero 2008-09-24 09:29 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Nero 2008-09-24 09:25 --------- d-----w C:\Program Files\VDOTool 2008-09-24 09:25 --------- d-----w C:\Program Files\Common Files\InstallShield 2008-09-24 09:21 --------- d-----w C:\Program Files\ScanSoft 2008-09-24 09:02 --------- d-----w C:\Program Files\DIFX 2008-09-24 09:00 --------- d-----w C:\Documents and Settings\Lewis\Dane aplikacji\InstallShield 2008-09-24 08:59 15,600 ----a-w C:\WINDOWS\gdrv.sys 2008-09-24 08:47 --------- d-----w C:\Program Files\microsoft frontpage 2008-09-24 08:46 --------- d-----w C:\Program Files\Usługi online 2008-09-15 15:27 1,846,656 ----a-w C:\WINDOWS\system32\win32k.sys 2008-09-08 10:41 333,824 ----a-w C:\WINDOWS\system32\drivers\srv.sys 2008-08-20 05:11 668,672 ----a-w C:\WINDOWS\system32\wininet.dll 2008-08-14 13:26 2,146,816 ----a-w C:\WINDOWS\system32\ntoskrnl.exe 2008-08-14 13:26 2,025,472 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2008-03-20 2127296] "uTorrent"="C:\Program Files\uTorrent\uTorrent.exe" [2008-10-08 270128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-07-23 8466432] "MSConfig"="C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe" [2008-04-14 171520] "AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" [2008-02-08 227856] "nwiz"="nwiz.exe" [2007-07-23 C:\WINDOWS\system32\nwiz.exe] "NvMediaCenter"="NvMCTray.dll" [2007-07-23 C:\WINDOWS\system32\nvmctray.dll] "RTHDCPL"="RTHDCPL.EXE" [2006-12-19 C:\WINDOWS\RTHDCPL.exe] "SkyTel"="SkyTel.EXE" [2006-05-16 C:\WINDOWS\SkyTel.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360] [HKLM\~\startupfolder\C:^Documents and Settings^Lewis^Menu Start^Programy^Autostart^hamachi.lnk] path=C:\Documents and Settings\Lewis\Menu Start\Programy\Autostart\hamachi.lnk backup=C:\WINDOWS\pss\hamachi.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount] --a------ 2008-02-22 13:30 217544 C:\Program Files\Alcohol Soft\Alcohol 120\AxCmd.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] --a------ 2007-05-04 10:39 149040 C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DeviceDiscovery] --a------ 2003-05-21 18:37 229437 C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gainward] --a------ 2007-06-26 14:58 2165272 C:\Program Files\VDOTool\TBPANEL.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Component Manager] --a------ 2003-10-23 19:51 233472 C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] --a------ 2003-06-25 11:24 49152 C:\Program Files\Hewlett-Packard\HP Software Update\hpwuSchd.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPDJ Taskbar Utility] --a------ 2003-09-01 13:42 176128 C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel] --a------ 2007-04-19 13:26 484904 C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] --a------ 2007-05-04 10:59 161328 C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer] -rahs---- 2008-07-07 09:42 2156368 C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] --a------ 2004-12-20 20:41 33792 C:\Program Files\Winamp\winampa.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "C:\\Program Files\\uTorrent\\uTorrent.exe"= "E:\\Program Files\\Valve\\Steam\\SteamApps\\gumis_100\\counter-strike\\hl.exe"= "C:\\Program Files\\xchat\\xchat.exe"= "C:\\Program Files\\DC++\\DCPlusPlus.exe"= "C:\\Documents and Settings\\All Users\\Dane aplikacji\\Kaspersky Lab Setup Files\\Kaspersky Anti-Virus 7.0.1.325\\Polish\\setup.exe"= "C:\\Program Files\\Gadu-Gadu\\gg.exe"= "E:\\Program Files\\EA Sports\\FIFA 09\\FIFA09.exe"= "C:\\Program Files\\BearShare\\BearShare.EXE"= "E:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FarCry2.exe"= "E:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Launcher.exe"= "E:\\Program Files\\Ubisoft\\Far Cry 2\\bin\\FC2Editor.exe"= R3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\DRIVERS\klim5.sys [2007-12-13 24592] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] "C:\Program Files\Common Files\LightScribe\LSRunOnce.exe" . . ------- Skan uzupełniający ------- . FireFox -: Profile - C:\Documents and Settings\Lewis\Dane aplikacji\Mozilla\Firefox\Profiles\lne0dgoi.default\ FireFox -: prefs.js - STARTUP.HOMEPAGE - wp.pl FF -: plugin - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\browser\nppdf32.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-10-24 14:12:55 Windows 5.1.2600 Dodatek Service Pack 3 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . ------------------------ Pozostałe uruchomione procesy ------------------------ . C:\WINDOWS\system32\rundll32.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\WINDOWS\system32\wdfmgr.exe C:\WINDOWS\system32\wscntfy.exe . ************************************************************************** . Czas ukończenia: 2008-10-24 14:14:19 - komputer został uruchomiony ponownie ComboFix-quarantined-files.txt 2008-10-24 12:14:15 Przed: 11 332 644 864 bajtów wolnych Po: 11,365,388,288 bajtów wolnych WindowsXP-KB310994-SP2-Home-BootDisk-PLK.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect /usepmtimer 250 --- E O F --- 2008-10-15 11:01:05

log HJT

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:20:16, on 2008-10-24 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\RunDLL32.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O9 - Extra button: Statystyki dla ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- End of file - 3894 bytes

**Posty:** 7956 · przez **Magik** 24 Paź 2008, 14:30

i teraz wiem, ze jest to zwiazane z modulem ochrony proaktywnej w Kasperskim.

Sparwdz czy wlaczonej tej funkcji i wylaczonek-->ponowna instalacja firefox'a i proby przy on/off tej usludze ochrony

nt. uslugi
https://support.kaspersky.com/pl/kis6mp2/proactive