log do sprawdzenia

**Posty:** 82 · przez **jack_28** 13 Gru 2007, 20:32

Witam

Robiłem reinstal bo neta mi rozłączało jak chciałem grać w mp.
po zainstalowaniu windy blad win32... ale juz sobie z nim poradziłem ale neta mi rozłącza

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 19:27:39, on 2007-12-13 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\RunDll32.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\PROGRA~1\INTERV~1\WinDVR\WINSCH~1.EXE C:\Program Files\InterVideo\WinDVR\WinRemote.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Netia\Net\netianet.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe C:\Program Files\Hamachi\hamachi.exe C:\Program Files\AntiVirenKit\AVKService.exe C:\Program Files\AntiVirenKit\AVKWCtl.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\SimTractor 3.5\SimTractor.exe C:\Program Files\WinRAR\WinRAR.exe C:\DOCUME~1\a\USTAWI~1\Temp\Rar$EX00.172\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL (file missing) O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [WINSCHEDULER] C:\PROGRA~1\INTERV~1\WinDVR\WINSCH~1.EXE O4 - HKLM\..\Run: [WinRemote] "C:\Program Files\InterVideo\WinDVR\WinRemote.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [NETIANET] C:\Program Files\Netia\Net\netianet.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{079491B6-4B58-4518-8C3E-9CE14EC0FE8A}: NameServer = 213.241.79.37 83.238.255.76 O17 - HKLM\System\CS1\Services\Tcpip\..\{079491B6-4B58-4518-8C3E-9CE14EC0FE8A}: NameServer = 213.241.79.37 83.238.255.76 O17 - HKLM\System\CS2\Services\Tcpip\..\{079491B6-4B58-4518-8C3E-9CE14EC0FE8A}: NameServer = 213.241.79.37 83.238.255.76 O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: AVK Service (AVKService) - Unknown owner - C:\Program Files\AntiVirenKit\AVKService.exe O23 - Service: Strażnik AVK (AVKWCtl) - Unknown owner - C:\Program Files\AntiVirenKit\AVKWCtl.exe

**Posty:** 18165 · przez **wojtas** 13 Gru 2007, 22:16

Wykonaj to co jest podane w tym temacie

daj loga z combofixa

**Posty:** 82 · przez **jack_28** 14 Gru 2007, 17:07

Te zadania co podałeś to zrobiłem przed wstawieniem loga w HT

Kod: Zaznacz wszystko: ComboFix 07-12-14.4 - a 2007-12-14 16:04:45.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.669 [GMT 1:00] Running from: C:\Documents and Settings\a\Pulpit\ComboFix.exe * Created a new restore point . ((((((((((((((((((((((((( Files Created from 2007-11-14 to 2007-12-14 ))))))))))))))))))))))))))))))) . 2007-12-13 21:11 . 2007-12-13 21:11 1,167 --a------ C:\WINDOWS\mozver.dat 2007-12-13 20:38 . 2007-12-13 20:38 <DIR> d-------- C:\Program Files\Common Files\Adobe 2007-12-13 19:04 . 2007-12-13 19:04 <DIR> d--h----- C:\WINDOWS\$hf_mig$ 2007-12-13 18:26 . 2007-12-13 18:27 <DIR> d-------- C:\WINDOWS\Downloaded Installations 2007-12-13 18:26 . 2007-12-13 18:27 <DIR> d-------- C:\Program Files\SimTractor 3.5 2007-12-13 18:16 . 2007-12-13 18:16 <DIR> d-------- C:\totalcmd 2007-12-13 18:16 . 2007-12-13 18:16 <DIR> d-------- C:\Program Files\Dziobas Rar Player 2007-12-13 18:16 . 2007-12-13 18:16 <DIR> d-------- C:\FoxitPdfReader 2007-12-13 18:16 . 2006-02-16 06:54 545 --a------ C:\WINDOWS\UC.PIF 2007-12-13 18:16 . 2006-02-16 06:54 545 --a------ C:\WINDOWS\RAR.PIF 2007-12-13 18:16 . 2006-02-16 06:54 545 --a------ C:\WINDOWS\PKZIP.PIF 2007-12-13 18:16 . 2006-02-16 06:54 545 --a------ C:\WINDOWS\PKUNZIP.PIF 2007-12-13 18:16 . 2006-02-16 06:54 545 --a------ C:\WINDOWS\NOCLOSE.PIF 2007-12-13 18:16 . 2006-02-16 06:54 545 --a------ C:\WINDOWS\LHA.PIF 2007-12-13 18:16 . 2006-02-16 06:54 545 --a------ C:\WINDOWS\ARJ.PIF 2007-12-13 18:16 . 2007-12-13 18:16 90 --a------ C:\WINDOWS\wincmd.ini . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-14 15:03 --------- d-----w C:\Documents and Settings\a\Dane aplikacji\Hamachi 2007-12-13 16:26 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\InterVideo 2007-12-13 16:24 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-12-13 16:24 --------- d-----w C:\Program Files\InterVideo 2007-12-13 16:08 --------- d-----w C:\Program Files\Hamachi 2007-12-13 16:07 25,280 ----a-w C:\WINDOWS\system32\drivers\hamachi.sys 2007-12-13 16:06 --------- d-----w C:\Program Files\Gadu-Gadu 2007-12-13 16:01 --------- d-----w C:\Program Files\Netia 2007-12-13 16:01 --------- d-----w C:\Program Files\Neostrada TP 2007-12-13 15:58 23 ----a-w C:\WINDOWS\system32\drivers\adidsl.cfg 2007-12-13 15:58 --------- d-----w C:\Program Files\SAGEM 2007-12-13 15:58 --------- d-----w C:\Program Files\Java 2007-12-13 15:55 50,458 ----a-w C:\WINDOWS\system32\interceptor.sys 2007-12-13 15:55 45,056 ----a-w C:\WINDOWS\system32\WNASPI32.DLL 2007-12-13 15:55 16,512 ----a-w C:\WINDOWS\system32\drivers\ASPI32.SYS 2007-12-13 15:55 12,738 ----a-w C:\WINDOWS\system32\drivers\HookCentre.sys 2007-12-13 15:55 --------- d-----w C:\Program Files\Common Files\G DATA 2007-12-13 15:55 --------- d-----w C:\Program Files\CDRecordKit 2007-12-13 15:55 --------- d-----w C:\Program Files\AntiVirenKit 2007-12-13 15:51 --------- d-----w C:\Program Files\ATI Technologies 2007-12-13 15:50 --------- d-----w C:\Program Files\Common Files\InstallShield 2007-12-13 15:45 --------- d-----w C:\Program Files\C-Media 3D Audio 2007-12-13 15:39 --------- d-----w C:\Program Files\microsoft frontpage 2007-12-13 15:37 --------- d-----w C:\Program Files\Usługi online 2001-11-23 04:08 712,704 ----a-r C:\WINDOWS\inf\OTHER\AUDIO3D.DLL . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 23:44] "NETIANET"="C:\Program Files\Netia\Net\netianet.exe" [2007-02-11 21:50] "Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2004-02-27 11:03] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Cmaudio"="RunDll32 cmicnfg.cpl" [] "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-02-01 21:05] "WINSCHEDULER"="C:\PROGRA~1\INTERV~1\WinDVR\WINSCH~1.EXE" [2003-09-03 18:49] "WinRemote"="C:\Program Files\InterVideo\WinDVR\WinRemote.exe" [2003-09-03 18:57] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 23:44] "NETIANET"="C:\Program Files\Netia\Net\netianet.exe" [2007-02-11 21:50] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ DSLMON.lnk - C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2007-12-13 16:58:36] InterVideo WinCinema Manager.lnk - C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe [2007-12-13 17:24:55] R2 AVKService;AVK Service;C:\Program Files\AntiVirenKit\AVKService.exe R2 AVKWCtl;Strażnik AVK;C:\Program Files\AntiVirenKit\AVKWCtl.exe *Newly Created Service* - PROCEXP90 . ************************************************************************** catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-14 16:05:35 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- PROCESS: C:\WINDOWS\explorer.exe [6.00.2900.2180] -> C:\Program Files\Gadu-Gadu\ggwhook.dll . Completion time: 2007-12-14 16:06:01

**Posty:** 18165 · przez **wojtas** 14 Gru 2007, 18:03

czysto jest nie masz wirusow

**Posty:** 82 · przez **jack_28** 14 Gru 2007, 22:00

Rozbiłem reinstal bo system mi padł. Ale rozłącza mi neta i hamachi jak chce pograć w mp.

Oto logi

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 20:54:54, on 2007-12-14 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\AntiVirenKit\AVKService.exe C:\Program Files\AntiVirenKit\AVKWCtl.exe C:\WINDOWS\system32\RunDll32.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe C:\Program Files\InterVideo\WinDVR\WinRemote.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Netia\Net\netianet.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Hamachi\hamachi.exe C:\Program Files\InterVideo\WinDVR\WinScheduler.exe C:\Program Files\WinRAR\WinRAR.exe C:\DOCUME~1\a\USTAWI~1\Temp\Rar$EX00.015\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL (file missing) O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [WINSCHEDULER] C:\PROGRA~1\INTERV~1\WinDVR\WINSCH~1.EXE O4 - HKLM\..\Run: [WinRemote] "C:\Program Files\InterVideo\WinDVR\WinRemote.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [NETIANET] C:\Program Files\Netia\Net\netianet.exe O4 - Startup: hamachi.lnk = C:\Program Files\Hamachi\hamachi.exe O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{FFD08571-658F-4C4F-A450-80E3121C4C80}: NameServer = 213.241.79.37 83.238.255.76 O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: AVK Service (AVKService) - Unknown owner - C:\Program Files\AntiVirenKit\AVKService.exe O23 - Service: Strażnik AVK (AVKWCtl) - Unknown owner - C:\Program Files\AntiVirenKit\AVKWCtl.exe

Jak chciałem zrobć loga z combofix'a to sam mi się usunął[/code]

**Posty:** 18165 · przez **wojtas** 14 Gru 2007, 22:07

sciagnij autoconnecta:

http://www.programosy.pl/program,autoconnect.html

i wykonaj

http://shider.net/AutoConnect/nowe_polaczenie/index.html

**Posty:** 82 · przez **jack_28** 14 Gru 2007, 22:22

no i nic nie pomogło
Nadal rozłacza mi hamachi i net się nie rozłącza ale jak chce na jakąś strone to jakbym nie był połączony.

**Posty:** 3854 · przez **Dzi@dek** 14 Gru 2007, 22:50

Daj screena.

log do sprawdzenia

Log do sprawdzenia

Kto jest na forum