log podejrzenie wirów zawiechy kompa i same błędy

[Dudas bad boy]

jak wyżej.

Logfile of HijackThis v1.99.1
Scan saved at 12:57:42, on 2007-07-01
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AutoConnect\AutoConnect.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\AntiVir PersonalEdition Classic\avcenter.exe
C:\Program Files\AntiVir PersonalEdition Classic\avscan.exe
C:\Documents and Settings\Dudas\Ustawienia lokalne\Temp\Katalog tymczasowy 1 dla hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [Windows Network Firewall] C:\WINDOWS\System32\firewall.exe
O4 - HKLM\..\Run: [Microsoft Directx clicks] directxclickers.exe
O4 - HKLM\..\Run: [DXDllRegExe] C:\WINDOWS\System32\dxdllreg.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\RunServices: [Microsoft Directx clicks] directxclickers.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe
O4 - HKCU\..\Run: [WMI Standard Event Consumer - Scripting] C:\WINDOWS\System32\wbem\scrcons32.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [Microsoft Directx clicks] directxclickers.exe
O4 - HKCU\..\RunServices: [WMI Standard Event Consumer - Scripting] C:\WINDOWS\System32\wbem\scrcons32.exe
O4 - HKCU\..\RunServices: [Microsoft Directx clicks] directxclickers.exe
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{71DB3E83-EF73-466B-9BC5-BEC1E5A383EE}: NameServer = 213.241.79.37 83.238.255.76
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Local Service - Unknown owner - C:\WINDOWS\msantis.exe
O23 - Service: Windows NT Logon Application (WINLOGON32) - Unknown owner - C:\WINDOWS\system\winlogon.exe

[wojtas]

usuwasz z wylaczonym przywracaniem systemu w trybie awaryjnym

Start -> uruchom -> services.msc -> zatrzymaj i wyłącz usługi Local Service, Windows NT Logon Application
Otwórz hijackthis -> open misc tools section -> delete a NT service -> wpisz WINLOGON32 i OK

sciagnij killbox`a:

http://www.wiruskill.pl/forum/viewtopic.php?t=58

Odpalasz Killboxa zaznacz opcję Delete on Reboot następnie w polu Full Path of File to Delete wklej ścieżkę :

C:\WINDOWS\system\winlogon.exe

i nacisnij x
Program będzie pytał o restart (oczywiście zgadzasz się)

O4 - HKLM\..\Run: [Windows Network Firewall] C:\WINDOWS\System32\firewall.exe
O4 - HKLM\..\Run: [Microsoft Directx clicks] directxclickers.exe
O4 - HKCU\..\Run: [WMI Standard Event Consumer - Scripting] C:\WINDOWS\System32\wbem\scrcons32.exe
O4 - HKCU\..\Run: [Microsoft Directx clicks] directxclickers.exe
O4 - HKCU\..\RunServices: [WMI Standard Event Consumer - Scripting] C:\WINDOWS\System32\wbem\scrcons32.exe
O4 - HKCU\..\RunServices: [Microsoft Directx clicks] directxclickers.exe
O23 - Service: Local Service - Unknown owner - C:\WINDOWS\msantis.exe
O23 - Service: Windows NT Logon Application (WINLOGON32) - Unknown owner - C:\WINDOWS\system\winlogon.exe

najpierw kasujesz wpisy potem pogrubione do kosza

[Dudas bad boy]

Ok wszystko zrobiłem ale tera mam inny problem. Nie wiem dlaczego ale mam neta 1mn i tera przy małych plikach ściaga z normalną szybkością a gdy ściągam większe bliki z 50mb i wiecej transfer jest ok 50kb/s co robic?

[wojtas]

daj nowy log z hijacka oraz z:

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

[Dudas bad boy]

"Dudas" - 2007-07-01 20:27:21 - ComboFix 07-06-27.7 NTFS


((((((((((((((((((((((((( Files Created from 2007-06-01 to 2007-07-01 )))))))))))))))))))))))))))))))


2007-07-01 20:21 <DIR> d-------- C:\Program Files\CyberLink
2007-07-01 20:21 <DIR> d-------- C:\DOCUME~1\ALLUSE~1.WIN\DANEAP~1\CyberLink
2007-07-01 20:09 <DIR> d-------- C:\DOCUME~1\Dudas\DANEAP~1\Ahead
2007-07-01 20:07 <DIR> d-------- C:\Program Files\Nero
2007-07-01 20:07 <DIR> d-------- C:\Program Files\Common Files\Ahead
2007-07-01 20:06 <DIR> d-------- C:\WINDOWS\LastGood
2007-07-01 19:10 2,560 --------- C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-07-01 19:10 2,432 --------- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-07-01 19:10 <DIR> d-------- C:\Program Files\Picasa2
2007-07-01 19:10 <DIR> d-------- C:\Program Files\Google
2007-07-01 19:05 <DIR> d-------- C:\WINDOWS\forms
2007-07-01 19:05 <DIR> d-------- C:\Program Files\Windows Messaging
2007-07-01 18:52 <DIR> d-------- C:\DOCUME~1\Dudas\DANEAP~1\uTorrent
2007-07-01 18:49 <DIR> d-------- C:\Program Files\eMule
2007-07-01 18:37 <DIR> d-------- C:\DOCUME~1\Dudas\DANEAP~1\WinRAR
2007-07-01 18:23 <DIR> d-------- C:\Program Files\MarBit
2007-07-01 18:21 <DIR> d-------- C:\DOCUME~1\Dudas\DANEAP~1\Media Player Classic
2007-07-01 15:39 740,442 --a------ C:\WINDOWS\system32\divx.dll
2007-07-01 15:39 73,728 --a------ C:\WINDOWS\system32\dpl100.dll
2007-07-01 15:39 62,976 --ahs---- C:\WINDOWS\system32\irdvxc.exe
2007-07-01 15:39 593,920 --a------ C:\WINDOWS\system32\xvidcore.dll
2007-07-01 15:39 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll
2007-07-01 15:39 3,596,288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2007-07-01 15:39 217,088 --a------ C:\WINDOWS\system32\yv12vfw.dll
2007-07-01 15:39 180,224 --a------ C:\WINDOWS\system32\xvidvfw.dll
2007-07-01 15:39 10,752 --a------ C:\WINDOWS\system32\ff_vfw.dll
2007-07-01 15:39 <DIR> d-------- C:\Program Files\K-Lite Codec Pack
2007-07-01 14:05 49,152 --a------ C:\WINDOWS\nircmd.exe
2007-07-01 13:45 <DIR> d-------- C:\Program Files\Rockstar Games
2007-07-01 01:10 <DIR> d-------- C:\!KillBox
2007-07-01 01:04 <DIR> d-------- C:\WINDOWS\pss
2007-07-01 00:30 <DIR> d--hs---- C:\WINDOWS\CSC
2007-06-30 23:53 <DIR> d-------- C:\Program Files\SkanerOnline
2007-06-30 23:51 <DIR> d-------- C:\WINDOWS\system32\ActiveScan
2007-06-30 23:38 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-06-30 22:40 <DIR> d-------- C:\DOCUME~1\Dudas\DANEAP~1\COWON
2007-06-30 22:33 <DIR> d-------- C:\Program Files\JetAudio
2007-06-30 22:33 <DIR> d-------- C:\Program Files\Common Files\COWON
2007-06-30 21:56 1,165 --a------ C:\WINDOWS\mozver.dat
2007-06-30 20:48 <DIR> dr-hsc--- C:\WINDOWS\system32\dllcache
2007-06-30 20:48 <DIR> dr--s---- C:\WINDOWS\Fonts
2007-06-30 20:48 <DIR> dr------- C:\WINDOWS\Web
2007-06-30 20:48 <DIR> d--h----- C:\WINDOWS\inf
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\WinSxS
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\twain_32
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\wins
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\wbem
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\usmt
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\spool
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\ShellExt
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\Setup
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\ras
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\oobe
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\npp
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\mui
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\inetsrv
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\IME
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\icsxml
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\ias
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\export
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\drivers\etc
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\drivers\disdn
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\drivers
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\dhcp
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\config
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\3com_dmi
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\3076
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\2052
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\1054
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\1045
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\1042
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\1041
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\1037
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\1033
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\1031
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\1028
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32\1025
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system32
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\system
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\security
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\Resources
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\repair
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\mui
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\msapps
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\msagent
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\Media
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\ime
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\Help
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\Driver Cache
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\Debug
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\Cursors
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\Connection Wizard
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\Config
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\AppPatch
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS\addins
2007-06-30 20:48 <DIR> d-------- C:\WINDOWS
2007-06-30 20:33 <DIR> d-------- C:\DOCUME~1\Dudas\DANEAP~1\Gadu-Gadu
2007-06-30 20:12 <DIR> d-------- C:\Program Files\EA GAMES
2007-06-30 20:10 2,297,552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
2007-06-30 20:10 <DIR> d-------- C:\WINDOWS\RegisteredPackages


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-07-01 12:38:44 49,712 ----a-w C:\WINDOWS\system32\perfc015.dat
2007-07-01 12:38:44 355,830 ----a-w C:\WINDOWS\system32\perfh015.dat
2007-06-30 15:52:45 -------- d-----w C:\Program Files\Usługi online


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{53707962-6F74-2D53-2644-206D7942484F}=C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2005-05-31 01:04]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" [2006-10-31 17:07]
"AtiPTA"="atiptaxx.exe" [2006-02-22 02:05 C:\WINDOWS\system32\atiptaxx.exe]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-06-16 01:15]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 16:40]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AutoConnect"="C:\Program Files\AutoConnect\AutoConnect.exe" [2004-08-28 20:27]
"Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-04-17 23:41]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-04-21 17:03]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll" [2007-07-01 12:03]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AVG Anti-Spyware Driver]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AVG Anti-Spyware Guard]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware]
"C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
C:\WINDOWS\System32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadu-Gadu]
"C:\Program Files\Gadu-Gadu\gg.exe" /tray

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
"C:\Program Files\Messenger\msmsgs.exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
SOUNDMAN.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpeedTouch USB Diagnostics]
"C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon

*Newly Created Service* - UPNPHOST

HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{ACC563BC-4266-43f0-B6ED-9D38C4202C7E}
rundll32 iesetup.dll,IEAccessUserInst

**************************************************************************

catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-07-01 20:28:33
Windows 5.1.2600 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-07-01 20:29:22
C:\ComboFix-quarantined-files.txt ... 2007-07-01 20:29
C:\ComboFix2.txt ... 2007-07-01 16:31
C:\ComboFix3.txt ... 2007-07-01 14:40

--- E O F ---

Logfile of HijackThis v1.99.1
Scan saved at 20:30:08, on 2007-07-01
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\irdvxc.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AutoConnect\AutoConnect.exe
C:\Program Files\Microsoft Office\Office\findfast.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\explorer.exe
C:\DOCUME~1\Dudas\USTAWI~1\Temp\Rar$EX00.502\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{71DB3E83-EF73-466B-9BC5-BEC1E5A383EE}: NameServer = 213.241.79.37 83.238.255.76
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Network helper Service (MSDisk) - Unknown owner - C:\WINDOWS\System32\irdvxc.exe" /service (file missing)

Chociarz teraz zauważyłem że jak sciągam prze IE jest ok 90kb a wmozilli 50.

[wojtas]

start>uruchom>cmd>wpisz:

sc stop MSDisk

enter

sc delete MSDisk

enter

i skasuj wpis ( o ile bedzie) oraz pogruiobny do kosza

O23 - Service: Network helper Service (MSDisk) - Unknown owner - C:\WINDOWS\System32\irdvxc.exe" /service (file missing)

[Dudas bad boy]

Wpisu nie było pliku zresztą też.

[wojtas]

ok system juz masz wolny od wirusow

[Dudas bad boy]

Dzieki wielkieeee;d