O17 - HKLM\System\CCS\Services\Tcpip\..\{0FF82C84-02A6-4990-9F67-848146F773C5}: NameServer = 194.204.152.34 217.98.63.164
O17 - HKLM\System\CS1\Services\Tcpip\..\{0FF82C84-02A6-4990-9F67-848146F773C5}: NameServer = 194.204.152.34 217.98.63.164
Gdy je usuwam wracają za każdym razem jak zrestartuje kompa.
A oto cały log
Logfile of HijackThis v1.99.1
Scan saved at 09:33:46, on 2006-12-04
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
D:\programy\Kaspersky Anti-Virus 6.0\avp.exe
D:\programy\ewido anti-spyware 4.0\guard.exe
D:\programy\Kaspersky Anti-Virus 6.0\avp.exe
D:\programy\MYSECR~1\MSFMON.exe
C:\WINDOWS\system32\nvsvc32.exe
D:\programy\Personal Firewall\persfw.exe
D:\programy\AutoConnect\AutoConnect.exe
D:\programy\Uptime\client.exe
D:\programy\Gadu-Gadu\gg.exe
C:\Documents and Settings\Administrator\Pulpit\utorrent-1.6.1-beta-build-483.exe
C:\Program Files\Mozilla Firefox\firefox.exe
D:\programy\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TP
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O4 - HKLM\..\Run: [AVP] "D:\programy\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [!ewido] "D:\programy\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [MSF_Monitor] D:\programy\MYSECR~1\MSFMON.exe /Start
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "D:\programy\RivaTuner v2.0 RC 16.2\RivaTuner.exe" /S
O4 - HKCU\..\Run: [AutoConnect] D:\programy\AutoConnect\AutoConnect.exe
O4 - HKCU\..\Run: [Uptime-Project] D:\programy\Uptime\client.exe
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - D:\programy\Kaspersky Anti-Virus 6.0\scieplugin.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{0FF82C84-02A6-4990-9F67-848146F773C5}: NameServer = 194.204.152.34 217.98.63.164
O17 - HKLM\System\CS1\Services\Tcpip\..\{0FF82C84-02A6-4990-9F67-848146F773C5}: NameServer = 194.204.152.34 217.98.63.164
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - D:\programy\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - D:\programy\ewido anti-spyware 4.0\guard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Kerio Personal Firewall (PersFw) - Kerio Technologies - D:\programy\Personal Firewall\persfw.exe
