Nie dziala ie (nie wyswietla stron)

**Posty:** 4 · przez **sheee** 20 Gru 2008, 17:51

Witam
Jak w temacie, TYLKO IE nie wyświetla stron (FF działa ok, net działa normalnie, FTP i inne usługi działają prawidłowo),
i nie mogę znaleźć przyczyny

log z ComobFixa

Kod: Zaznacz wszystko: ComboFix 08-12-18.03 - xxxxxxxx 2008-12-20 9:43:13.2 - NTFSx86 Microsoft® Windows Vista™ Ultimate 6.0.6001.1.1250.48.1033.18.3069.1661 [GMT -5:00] Uruchomiony z: c:\users\xxxxxxx\Downloads\ComboFix.exe * Utworzono nowy punkt przywracania * Resident AV is active . ((((((((((((((((((((((((( Pliki utworzone od 2008-11-20 do 2008-12-20 ))))))))))))))))))))))))))))))) . 2008-12-20 08:11 . 2008-12-20 08:11 <DIR> d-------- C:\rsit 2008-12-20 07:53 . 2008-12-20 07:53 <DIR> d-------- c:\windows\ERUNT 2008-12-20 07:53 . 2008-12-20 07:53 <DIR> d-------- C:\ERDNT 2008-12-20 07:53 . 2008-12-20 07:53 <DIR> d-------- C:\!FixIEDef 2008-12-20 07:40 . 2008-12-20 07:40 <DIR> d-------- C:\!KillBox 2008-12-20 07:36 . 2008-12-20 07:36 <DIR> d-------- c:\program files\Trend Micro 2008-12-20 06:59 . 2008-12-20 06:59 0 --ah----- c:\windows\System32\drivers\Msft_Kernel_LHidFilt_01005.Wdf 2008-12-18 22:20 . 2008-12-17 16:22 33,632 --a------ c:\windows\System32\DfSdkBt.exe 2008-12-18 18:47 . 2008-12-18 18:48 <DIR> d-------- c:\users\All Users\SmartSound Software Inc 2008-12-18 18:47 . 2008-12-18 18:47 <DIR> d-------- c:\users\All Users\eSellerate 2008-12-18 18:47 . 2008-12-18 18:48 <DIR> d-------- c:\programdata\SmartSound Software Inc 2008-12-18 18:47 . 2008-12-18 18:47 <DIR> d-------- c:\programdata\eSellerate 2008-12-18 18:46 . 2008-12-18 18:47 <DIR> d-------- c:\program files\SmartSound Software 2008-12-17 22:22 . 2008-12-17 22:22 <DIR> d-------- c:\users\All Users\FLEXnet 2008-12-17 22:22 . 2008-12-17 22:22 <DIR> d-------- c:\programdata\FLEXnet 2008-12-17 07:45 . 2008-12-17 07:45 <DIR> d-------- c:\program files\Common Files\Macrovision Shared 2008-12-16 22:54 . 2008-12-16 23:52 <DIR> d-------- c:\users\xxxxxxxx\AppData\Roaming\Download Manager 2008-12-15 22:55 . 2008-12-15 22:55 <DIR> d-------- c:\program files\Bonjour 2008-12-12 11:18 . 2008-12-12 11:18 87,336 --a------ c:\windows\System32\dns-sd.exe 2008-12-12 11:11 . 2008-12-12 11:11 61,440 --a------ c:\windows\System32\dnssd.dll 2008-12-11 18:17 . 2008-12-16 21:16 <DIR> d-------- c:\users\xxxxxxx\.gstreamer-0.10 2008-12-09 20:43 . 2008-10-21 20:22 2,048 --a------ c:\windows\System32\tzres.dll 2008-12-09 20:39 . 2008-10-31 20:21 4,240,384 --a------ c:\windows\System32\GameUXLegacyGDFs.dll 2008-12-09 20:39 . 2008-06-22 20:59 2,868,736 --a------ c:\windows\System32\mf.dll 2008-12-09 20:39 . 2008-10-31 22:44 28,672 --a------ c:\windows\System32\Apphlpdm.dll 2008-12-09 20:38 . 2008-10-29 01:29 2,927,104 --a------ c:\windows\explorer.exe 2008-12-09 20:38 . 2008-06-22 20:59 996,352 --a------ c:\windows\System32\WMNetMgr.dll 2008-12-09 20:38 . 2008-10-21 00:25 296,960 --a------ c:\windows\System32\gdi32.dll 2008-12-09 20:38 . 2008-06-22 20:58 94,720 --a------ c:\windows\System32\logagent.exe 2008-11-30 09:11 . 2008-11-30 09:11 21,840 --a------ c:\windows\System32\SIntfNT.dll 2008-11-30 09:11 . 2008-11-30 09:11 17,212 --a------ c:\windows\System32\SIntf32.dll 2008-11-30 09:11 . 2008-11-30 09:11 12,067 --a------ c:\windows\System32\SIntf16.dll 2008-11-30 09:02 . 2008-11-30 09:02 106,496 --a------ c:\windows\DIIUnin.exe 2008-11-30 09:02 . 2008-11-30 09:13 36,199 --a------ c:\windows\DIIUnin.dat 2008-11-30 09:02 . 2008-11-30 09:02 2,829 --a------ c:\windows\DIIUnin.pif 2008-11-30 08:58 . 2008-11-30 09:14 <DIR> d-------- c:\program files\Diablo II 2008-11-29 21:42 . 2008-11-29 21:42 <DIR> d-------- c:\users\xxxxxx\AppData\Roaming\CyberLink 2008-11-28 09:51 . 2008-11-28 09:51 <DIR> d-------- c:\users\All Users\Real 2008-11-28 09:51 . 2008-11-28 09:51 <DIR> d-------- c:\program files\K-Lite Codec Pack 2008-11-26 00:21 . 2008-10-21 00:25 1,645,568 --a------ c:\windows\System32\connect.dll 2008-11-26 00:21 . 2008-08-27 22:40 712,704 --a------ c:\windows\System32\WindowsCodecs.dll 2008-11-26 00:21 . 2008-08-27 22:40 425,472 --a------ c:\windows\System32\PhotoMetadataHandler.dll 2008-11-26 00:21 . 2008-08-27 22:40 347,136 --a------ c:\windows\System32\WindowsCodecsExt.dll 2008-11-26 00:21 . 2008-10-21 22:57 241,152 --a------ c:\windows\System32\PortableDeviceApi.dll 2008-11-24 06:34 . 2008-11-24 06:34 <DIR> d-------- c:\users\All Users\HP Product Assistant 2008-11-24 06:34 . 2008-11-24 06:34 <DIR> d-------- c:\programdata\HP Product Assistant 2008-11-23 16:58 . 2008-11-23 17:19 <DIR> d-------- c:\users\All Users\Creative 2008-11-23 16:58 . 2008-11-23 17:19 <DIR> d-------- c:\programdata\Creative 2008-11-23 16:49 . 2006-12-13 16:57 4,626 --------- c:\windows\System32\AudioDrv.ini 2008-11-23 16:49 . 2006-02-15 01:05 49 -ra------ c:\windows\System32\ctzapxx.ini 2008-11-23 16:45 . 2008-11-23 16:49 <DIR> d-------- c:\program files\Creative 2008-11-23 14:07 . 2008-11-23 14:07 <DIR> d-------- c:\users\xxxxxxx\AppData\Roaming\Media Player Classic 2008-11-23 11:43 . 2006-10-26 19:56 32,592 --a------ c:\windows\System32\msonpmon.dll 2008-11-23 11:41 . 2008-11-23 11:41 <DIR> d-------- c:\program files\Microsoft Works 2008-11-23 11:39 . 2008-11-23 11:39 <DIR> d-------- c:\program files\Microsoft.NET 2008-11-23 11:38 . 2008-11-23 11:38 <DIR> d-------- c:\program files\Microsoft Visual Studio 8 2008-11-23 11:36 . 2008-12-09 20:46 <DIR> d-------- c:\users\All Users\Microsoft Help 2008-11-23 11:36 . 2008-12-09 20:46 <DIR> d-------- c:\programdata\Microsoft Help 2008-11-23 11:36 . 2008-11-23 11:36 <DIR> dr-h----- C:\MSOCache 2008-11-23 10:54 . 2008-11-23 10:54 <DIR> d-------- c:\program files\Longman 2008-11-23 10:48 . 2008-04-26 03:26 891,448 --a------ c:\windows\System32\drivers\tcpip.sys 2008-11-23 10:39 . 2008-08-17 05:33 678,408 --a------ c:\windows\System32\gpprefcl.dll 2008-11-23 10:20 . 2008-11-23 10:20 <DIR> d-------- c:\program files\Microsoft Silverlight 2008-11-23 10:02 . 2008-11-23 10:02 146 --a------ c:\windows\ODBC.INI 2008-11-23 09:49 . 2008-11-23 09:49 <DIR> d-------- C:\PerfLogs 2008-11-23 09:17 . 2008-01-19 02:33 8,139,264 --a------ c:\windows\System32\ssBranded.scr 2008-11-23 09:16 . 2008-01-19 02:32 5,714,432 --a------ c:\windows\System32\logon.scr 2008-11-23 09:15 . 2008-01-19 01:06 8,147,456 --a------ c:\windows\System32\wmploc.DLL 2008-11-23 09:14 . 2008-01-19 02:34 305,152 --a------ c:\windows\System32\msdelta.dll 2008-11-23 09:14 . 2008-01-19 02:34 258,560 --a------ c:\windows\System32\dpx.dll 2008-11-23 09:14 . 2008-01-19 02:34 246,784 --a------ c:\windows\System32\drvstore.dll 2008-11-23 09:14 . 2008-01-19 02:35 35,328 --a------ c:\windows\System32\mspatcha.dll 2008-11-23 08:42 . 2008-11-23 08:42 <DIR> d-------- c:\users\All Users\Adobe Systems 2008-11-23 08:42 . 2008-11-23 08:42 <DIR> d-------- c:\programdata\Adobe Systems 2008-11-23 08:38 . 2008-11-23 08:38 <DIR> d-------- c:\program files\Common Files\Adobe Systems Shared 2008-11-23 08:33 . 2008-11-23 08:33 <DIR> d-------- c:\program files\Microsoft SQL Server Compact Edition 2008-11-23 08:33 . 2006-11-29 13:06 3,426,072 --a------ c:\windows\System32\d3dx9_32.dll 2008-11-23 08:25 . 2008-11-23 08:25 <DIR> d-------- c:\windows\PCHEALTH 2008-11-23 08:15 . 2008-11-23 08:15 <DIR> d-------- c:\users\xxxxxxx\AppData\Roaming\Ashampoo 2008-11-23 08:15 . 2008-11-23 08:15 <DIR> d-------- c:\users\All Users\ashampoo 2008-11-23 08:15 . 2008-11-23 08:15 <DIR> d-------- c:\programdata\ashampoo 2008-11-23 08:15 . 2008-12-18 22:20 <DIR> d-------- c:\program files\Ashampoo 2008-11-23 08:14 . 2008-11-23 08:23 <DIR> d--hsc--- c:\program files\Common Files\WindowsLiveInstaller 2008-11-23 08:13 . 2008-11-23 08:18 <DIR> d-------- c:\users\All Users\WLInstaller 2008-11-23 08:13 . 2008-11-23 08:18 <DIR> d-------- c:\programdata\WLInstaller 2008-11-23 08:13 . 2008-11-23 09:23 <DIR> d-------- c:\program files\Windows Live 2008-11-23 08:02 . 2008-11-23 08:02 988,216 --a------ c:\windows\System32\winload.exe 2008-11-23 08:02 . 2008-11-23 08:02 927,288 --a------ c:\windows\System32\winresume.exe 2008-11-23 08:02 . 2008-11-23 08:02 615,992 --a------ c:\windows\System32\ci.dll 2008-11-23 08:02 . 2008-11-23 08:02 378,368 --a------ c:\windows\System32\srcore.dll 2008-11-23 08:02 . 2008-11-23 08:02 318,464 --a------ c:\windows\System32\rstrui.exe 2008-11-23 08:02 . 2008-11-23 08:02 269,312 --a------ c:\windows\System32\es.dll 2008-11-23 08:02 . 2008-11-23 08:02 46,592 --a------ c:\windows\System32\setbcdlocale.dll 2008-11-23 08:02 . 2008-11-23 08:02 40,960 --a------ c:\windows\System32\srclient.dll 2008-11-23 08:02 . 2008-11-23 08:02 19,000 --a------ c:\windows\System32\kd1394.dll 2008-11-23 08:02 . 2008-11-23 08:02 14,848 --a------ c:\windows\System32\srdelayed.exe 2008-11-23 08:02 . 2008-11-23 08:02 6,656 --a------ c:\windows\System32\kbd106n.dll 2008-11-23 08:01 . 2008-11-23 08:01 <DIR> d-------- c:\program files\MSXML 4.0 2008-11-23 08:00 . 2008-12-13 16:28 <DIR> d-------- c:\users\All Users\CyberLink 2008-11-23 08:00 . 2008-12-13 16:28 <DIR> d-------- c:\programdata\CyberLink 2008-11-23 07:45 . 2008-11-23 07:45 <DIR> d-------- c:\users\All Users\Dell 2008-11-23 07:45 . 2008-11-23 07:45 <DIR> d-------- c:\programdata\Dell 2008-11-23 07:44 . 2008-11-29 22:09 <DIR> d-------- c:\program files\CyberLink 2008-11-23 00:46 . 2008-11-23 00:46 1,809,944 --a------ c:\windows\System32\wuaueng.dll 2008-11-23 00:46 . 2008-11-23 00:46 1,524,736 --a------ c:\windows\System32\wucltux.dll 2008-11-23 00:46 . 2008-11-23 00:46 51,224 --a------ c:\windows\System32\wuauclt.exe 2008-11-23 00:46 . 2008-11-23 00:46 43,544 --a------ c:\windows\System32\wups2.dll 2008-11-23 00:45 . 2008-11-23 00:45 561,688 --a------ c:\windows\System32\wuapi.dll 2008-11-23 00:45 . 2008-11-23 00:45 162,064 --a------ c:\windows\System32\wuwebv.dll 2008-11-23 00:45 . 2008-11-23 00:45 83,456 --a------ c:\windows\System32\wudriver.dll 2008-11-23 00:45 . 2008-11-23 00:45 34,328 --a------ c:\windows\System32\wups.dll 2008-11-23 00:45 . 2008-11-23 00:45 31,232 --a------ c:\windows\System32\wuapp.exe 2008-11-23 00:42 . 2008-11-23 00:42 <DIR> d-------- c:\program files\The Weather Channel FW 2008-11-23 00:39 . 2008-11-23 00:39 <DIR> d-------- c:\program files\Alcohol Soft 2008-11-23 00:36 . 2008-11-23 13:57 717,296 --a------ c:\windows\System32\drivers\sptd.sys 2008-11-23 00:25 . 2008-11-23 00:25 <DIR> d-------- c:\users\All Users\eMule 2008-11-23 00:25 . 2008-11-23 00:25 <DIR> d-------- c:\programdata\eMule 2008-11-23 00:25 . 2008-11-23 00:25 <DIR> d-------- c:\program files\eMule 2008-11-23 00:16 . 2008-12-11 18:17 <DIR> d-------- c:\users\xxxxxxx\AppData\Roaming\Nowe Gadu-Gadu 2008-11-23 00:16 . 2008-11-23 00:16 <DIR> d-------- c:\program files\Nowe Gadu-Gadu 2008-11-23 00:12 . 2008-11-22 23:16 <DIR> d-------- c:\windows\Debug 2008-11-23 00:12 . 2008-12-20 08:07 <DIR> d-------- c:\users\xxxxxxx\AppData\Roaming\skypePM 2008-11-23 00:12 . 2008-12-20 09:37 <DIR> d-------- c:\users\xxxxxxx\AppData\Roaming\Skype 2008-11-23 00:12 . 2008-11-23 00:12 <DIR> dr------- c:\program files\Skype 2008-11-23 00:12 . 2008-11-23 00:12 <DIR> d-------- c:\program files\Common Files\Skype . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-12-17 12:40 43,528 ------w c:\windows\system32\drivers\PxHelp20.sys 2008-12-17 12:40 129,784 ------w c:\windows\System32\pxafs.dll 2008-12-17 12:40 118,520 ------w c:\windows\System32\pxinsi64.exe 2008-12-17 12:40 116,472 ------w c:\windows\System32\pxcpyi64.exe 2008-12-10 04:35 --------- d-----w c:\program files\Windows Mail 2008-11-23 21:48 409,600 ----a-w c:\windows\System32\wrap_oal.dll 2008-11-23 21:48 114,688 ----a-w c:\windows\System32\OpenAL32.dll 2008-11-23 16:41 --------- d-----w c:\program files\MSBuild 2008-11-23 14:57 174 --sha-w c:\program files\desktop.ini 2008-11-23 14:50 --------- d-----w c:\program files\Windows Sidebar 2008-11-23 14:50 --------- d-----w c:\program files\Windows Photo Gallery 2008-11-23 14:50 --------- d-----w c:\program files\Windows Journal 2008-11-23 14:50 --------- d-----w c:\program files\Windows Defender 2008-11-23 14:50 --------- d-----w c:\program files\Windows Collaboration 2008-11-23 14:50 --------- d-----w c:\program files\Windows Calendar 2008-11-23 14:38 82,432 ----a-w c:\windows\System32\axaltocm.dll 2008-11-23 14:38 101,888 ----a-w c:\windows\System32\ifxcardm.dll 2008-11-23 04:19 --------- d-----w c:\program files\Microsoft Games 2008-11-23 03:41 2,560 ----a-w c:\windows\AppPatch\AcRes.dll 2008-11-12 21:02 29,808 ----a-w c:\windows\system32\drivers\ssfs0bbc.sys 2008-11-12 21:02 23,152 ----a-w c:\windows\system32\drivers\sshrmd.sys 2008-11-12 21:02 170,608 ----a-w c:\windows\system32\drivers\ssidrv.sys 2008-11-07 19:23 32,000 ----a-w c:\windows\system32\drivers\usbaapl.sys 2008-11-02 14:02 7,680 ----a-w c:\windows\System32\ff_vfw.dll 2008-11-01 03:44 541,696 ----a-w c:\windows\AppPatch\AcLayers.dll 2008-11-01 03:44 52,736 ----a-w c:\windows\AppPatch\iebrshim.dll 2008-11-01 03:44 460,288 ----a-w c:\windows\AppPatch\AcSpecfc.dll 2008-11-01 03:44 2,154,496 ----a-w c:\windows\AppPatch\AcGenral.dll 2008-11-01 03:44 173,056 ----a-w c:\windows\AppPatch\AcXtrnal.dll 2008-10-28 22:35 684,032 ----a-w c:\windows\System32\divx.dll 2008-10-17 06:33 150,528 ----a-w c:\windows\System32\OemSpiE.dll 2008-10-10 19:46 69,632 ----a-w c:\windows\KHALMNPR.Exe 2008-09-30 21:43 1,286,152 ----a-w c:\windows\System32\msxml4.dll 2008-09-25 08:03 81,920 ----a-w c:\windows\System32\dpl100.dll . ((((((((((((((((((((((((((((( snapshot@2008-12-20_ 8.06.02.67 ))))))))))))))))))))))))))))))))))))))))) . - 2008-12-20 12:55:46 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2008-12-20 13:17:31 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2008-12-20 12:55:46 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2008-12-20 13:17:31 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2008-12-20 12:56:41 262,144 --sha-w c:\windows\ServiceProfiles\LocalService\NTUSER.DAT + 2008-12-20 13:18:28 262,144 --sha-w c:\windows\ServiceProfiles\LocalService\NTUSER.DAT - 2008-12-20 12:56:36 262,144 --sha-w c:\windows\ServiceProfiles\NetworkService\NTUSER.DAT + 2008-12-20 14:45:09 262,144 --sha-w c:\windows\ServiceProfiles\NetworkService\NTUSER.DAT - 2008-12-20 12:55:46 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2008-12-20 13:17:31 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2008-12-20 12:55:46 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2008-12-20 13:17:31 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2008-12-20 12:55:46 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2008-12-20 13:17:31 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2008-12-20 13:04:21 262,144 ----a-w c:\windows\System32\config\systemprofile\ntuser.dat + 2008-12-20 14:43:04 262,144 ----a-w c:\windows\System32\config\systemprofile\ntuser.dat - 2008-12-20 12:51:28 101,052 ----a-w c:\windows\System32\perfc009.dat + 2008-12-20 13:27:17 101,052 ----a-w c:\windows\System32\perfc009.dat - 2008-12-20 12:51:28 586,980 ----a-w c:\windows\System32\perfh009.dat + 2008-12-20 13:27:17 586,980 ----a-w c:\windows\System32\perfh009.dat + 2006-11-02 09:45:39 31,744 ----a-w c:\windows\System32\swsc.exe - 2008-12-20 12:57:39 7,276 ----a-w c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-4187705331-2662359322-2024048794-1000_UserData.bin + 2008-12-20 13:19:24 7,276 ----a-w c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-4187705331-2662359322-2024048794-1000_UserData.bin - 2008-12-20 12:57:38 56,266 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin + 2008-12-20 13:19:24 56,328 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin - 2008-12-20 12:57:35 37,344 ----a-w c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin + 2008-12-20 13:19:23 37,440 ----a-w c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin + 2008-12-20 14:45:16 2,566 ----a-w c:\windows\Temp\wrstemp\S-1-5-18.dat + 2008-12-20 14:45:16 2,764 ----a-w c:\windows\Temp\wrstemp\S-1-5-19.dat + 2008-12-20 14:45:16 2,764 ----a-w c:\windows\Temp\wrstemp\S-1-5-20.dat + 2008-12-20 14:45:16 6,408 ----a-w c:\windows\Temp\wrstemp\S-1-5-21-4187705331-2662359322-2024048794-1000.dat . -- Migawka wyzerowana -- . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupIconOverlayId] @="{2EE61E5C-8F94-4AAB-8A80-D2A8CD1FEDAD}" [HKEY_CLASSES_ROOT\CLSID\{2EE61E5C-8F94-4AAB-8A80-D2A8CD1FEDAD}] 2008-11-13 17:04 238968 --a------ c:\program files\Webroot\WebrootSecurity\Backup\CtxMenu_1_0_0_10.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-12-08 26502952] "Nowe Gadu-Gadu"="c:\program files\Nowe Gadu-Gadu\gg.exe" [2008-12-12 8966760] "DW6"="c:\program files\The Weather Channel FW\Desktop\DesktopWeather.exe" [2008-10-06 793712] "MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184] "AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 120\axcmd.exe" [2008-11-22 203720] "eMuleAutoStart"="c:\program files\eMule\emule.exe" [2008-08-01 5480448] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-07 13584928] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-10-07 92704] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-12-10 49152] "LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2008-08-14 565008] "LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2008-08-14 2407184] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-11-04 413696] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088] "Kernel and Hardware Abstraction Layer"="c:\windows\KHALMNPR.EXE" [2008-10-10 69632] "Webroot Desktop Firewall"="c:\program files\Webroot\Webroot Desktop Firewall\WDF.exe" [2008-07-31 2401672] "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648] "VolPanel"="c:\program files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" [2007-02-28 180224] "AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-11-07 111936] "PDVDDXSrv"="c:\program files\CyberLink\PowerDVD DX\PDVDDXSrv.exe" [2008-10-27 128296] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-10 136600] "SpySweeper"="c:\program files\Webroot\WebrootSecurity\SpySweeperUI.exe" [2008-11-13 6273400] "SPIRunE"="SPIRunE.dll" [2007-05-09 c:\windows\System32\SpiRunE.dll] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-01-02 210520] Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2008-11-22 809488] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoResolveTrack"= 1 (0x1) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WRConsumerService] @="Service" [HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules] "{BD66F0EB-CE7D-44C3-BF9F-924F1A36D248}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes "{91ED4FD2-1D0D-43D4-BF51-8907A9A039E2}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes "{2F8189B9-9839-491C-92BD-80C49F07F03C}"= c:\program files\Skype\Phone\Skype.exe:Skype "TCP Query User{2C6436AB-442A-47EC-921F-D12CB58D0544}c:\\program files\\emule\\emule.exe"= UDP:c:\program files\emule\emule.exe:eMule "UDP Query User{365FCB74-8A51-4644-822F-1CB6234E0AAD}c:\\program files\\emule\\emule.exe"= TCP:c:\program files\emule\emule.exe:eMule "{DB9EFD57-A99B-4228-8FF6-53E669773FCA}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone) "TCP Query User{18CA10C4-6575-4036-ABA6-B17471734E3A}c:\\totalcmd\\totalcmd.exe"= UDP:c:\totalcmd\totalcmd.exe:Total Commander 32 bit international version, file manager replacement for Windows "UDP Query User{DFC82B67-8C70-42AC-86C6-9853DDFD6F98}c:\\totalcmd\\totalcmd.exe"= TCP:c:\totalcmd\totalcmd.exe:Total Commander 32 bit international version, file manager replacement for Windows "{35457379-B314-449B-8F85-34F3D9191645}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook "{3348630F-DA51-41F1-8DD4-15097E2611BC}"= UDP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove "{76E503E0-3F23-4A6A-8A6C-DEB639C38BD5}"= TCP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove "{83ACD0E1-7377-46D3-AADD-FD57D702C5A8}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote "{514E8EAF-8DF8-471B-9E45-7E64913DC73C}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote "{4D9B5495-A615-4046-B6B1-AF216173F893}"= c:\program files\CyberLink\PowerDVD DX\PowerDVD.exe:CyberLink PowerDVD DX "{5021F7D6-3A54-43BB-8B4E-6C52B2D08868}"= c:\program files\CyberLink\PowerDVD DX\PDVDDXSrv.exe:CyberLink PowerDVD DX Resident Program "{B4C8D166-4EED-4B11-AA06-034B60873A61}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour "{D5532871-3A4F-48EC-AC13-57F6FD86A422}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour "{F1C78DC2-793D-4B13-90D6-E88D93950C4E}"= Disabled:UDP:c:\program files\Adobe\Photoshop Elements 7.0\AdobePhotoshopElementsMediaServer.exe:Adobe Photoshop Elements Media Server "{A8F4B177-86ED-4536-AE24-78ACA29728FE}"= Disabled:TCP:c:\program files\Adobe\Photoshop Elements 7.0\AdobePhotoshopElementsMediaServer.exe:Adobe Photoshop Elements Media Server [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile] "EnableFirewall"= 0 (0x0) R0 ssfs0bbc;ssfs0bbc;c:\windows\system32\DRIVERS\ssfs0bbc.sys [2008-11-12 29808] R1 pwipf6;Privacyware Filter Driver;c:\windows\system32\DRIVERS\pwipf6.sys [2008-07-31 95624] R2 {1E444BE9-B8EC-4ce6-8C2B-6536FB7F4FB7};Power Control [2008/11/29 22:09:48];\??\c:\program files\CyberLink\PowerDVD DX\[u]0[/u]00.fcl [2008-11-23 07:59:50 87536] R2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [2008-09-16 163840] R2 DfSdkS;Defragmentation-Service;"c:\program files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe" [2008-12-18 410976] R2 WDFNet;Webroot Desktop Firewall network service;c:\program files\Webroot\Webroot Desktop Firewall\wdfsvc.exe [2008-07-31 353672] R2 WRConsumerService;Webroot Client Service;"c:\program files\Webroot\WebrootSecurity\WRConsumerService.exe" [2008-11-22 1086840] R3 t3;Sound Blaster X-Fi Xtreme Audio (Vista);c:\windows\system32\drivers\t3.sys [2008-10-17 404992] R3 VST_DPV;VST_DPV;c:\windows\system32\DRIVERS\VSTDPV3.SYS [2006-11-02 987648] R3 VSTHWBS2;VSTHWBS2;c:\windows\system32\DRIVERS\VSTBS23.SYS [2006-11-02 251904] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7070D8E0-650A-46b3-B03C-9497582E6A74}] %SystemRoot%\system32\soundschemes.exe /AddRegistration [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{B3688A53-AB2A-4b1d-8CEF-8F93D8C51C24}] %SystemRoot%\system32\soundschemes2.exe /AddRegistration . Zawartość folderu 'Zaplanowane zadania' 2008-12-20 c:\windows\Tasks\User_Feed_Synchronization-{7DF2061C-EAC8-48C0-9C11-DDA21B79776F}.job - c:\windows\system32\msfeedssync.exe [2008-08-22 05:05] 2008-12-20 c:\windows\Tasks\wrSpySweeper_L87F71B71C3F6470DAFAD446875667D8E.job - c:\program files\Webroot\WebrootSecurity\SpySweeperUI.exe [2008-11-13 17:11] 2008-12-20 c:\windows\Tasks\wrSpySweeper_L87F71B71C3F6470DAFAD446875667D8E.job - c:\program files\Webroot\WebrootSecurity\SpySweeperUI.exe [2008-11-13 17:11] 2008-12-20 c:\windows\Tasks\wrSpySweeper_L87F71B71C3F6470DAFAD446875667D8E.job - c:\","d:\","e:\","f:\","g:\","h:\","i:\","j:\","k:\","m:\" [] . . ------- Skan uzupełniający ------- . uStart Page = about:blank uInternet Settings,ProxyOverride = *.local IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000 FF - ProfilePath - c:\users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\8ku75dd8.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.she.fhi.pl/ FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll FF - plugin: c:\program files\Microsoft Silverlight\2.0.31005.0\npctrl.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-20 09:45:11 Windows 6.0.6001 Service Pack 1 NTFS skanowanie ukrytych procesów ... [0] 0x24048910 skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... ************************************************************************** . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- - - - - - - - > 'Explorer.exe'(4368) c:\program files\Logitech\SetPoint\GameHook.dll c:\program files\Logitech\SetPoint\lgscroll.dll c:\program files\Webroot\WebrootSecurity\Backup\CtxMenu_1_0_0_10.dll . Czas ukończenia: 2008-12-20 9:47:40 ComboFix-quarantined-files.txt 2008-12-20 14:46:23 ComboFix2.txt 2008-12-20 13:06:57 Przed: 184,835,534,848 bytes free Po: 184,804,974,592 bytes free 338 --- E O F --- 2008-12-18 23:23:16

log z HiJackThis

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:02:33 AM, on 12/20/2008 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v8.00 (8.00.6001.18241) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe C:\Windows\System32\rundll32.exe C:\Program Files\HP\HP Software Update\hpwuSchd2.exe C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe C:\Program Files\Logitech\QuickCam\Quickcam.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Webroot\Webroot Desktop Firewall\WDF.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe C:\Windows\System32\rundll32.exe C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Webroot\WebrootSecurity\SpySweeperUI.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Nowe Gadu-Gadu\gg.exe C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\eMule\emule.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Logitech\SetPoint\SetPoint.exe C:\Program Files\iTunes\iTunes.exe C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\distnoted.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\SyncServer.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\The Bat!\thebat.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\Windows\system32\SearchFilterHost.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Pomocnik rejestracji us3ugi Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O4 - HKLM\..\Run: [NvCplDaemon] "C:\Windows\system32\RUNDLL32.EXE" C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] "C:\Windows\system32\RUNDLL32.EXE" C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] "C:\Windows\KHALMNPR.EXE" O4 - HKLM\..\Run: [Webroot Desktop Firewall] "C:\Program Files\Webroot\Webroot Desktop Firewall\WDF.exe" O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r O4 - HKLM\..\Run: [SPIRunE] "C:\Windows\system32\rundll32.exe" SPIRunE.dll,RunDLLEntry O4 - HKLM\..\Run: [AppleSyncNotifier] "C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\WebrootSecurity\SpySweeperUI.exe" /startintray O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [Nowe Gadu-Gadu] "C:\Program Files\Nowe Gadu-Gadu\gg.exe" O4 - HKCU\..\Run: [DW6] "C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe" O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount O4 - HKCU\..\Run: [eMuleAutoStart] "C:\Program Files\eMule\emule.exe" -AutoStart O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000 O9 - Extra button: Wyolij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Wyolij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL O13 - Gopher Prefix: O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Adobe Active File Monitor V7 (AdobeActiveFileMonitor7.0) - Adobe Systems Incorporated - C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTAudSvc.exe O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\logishrd\Bluetooth\LBTServ.exe O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: Webroot Desktop Firewall network service (WDFNet) - Webroot Software Inc (http://www.webroot.com) - C:\Program Files\Webroot\Webroot Desktop Firewall\wdfsvc.exe O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. (http://www.webroot.com) - C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe O23 - Service: Webroot Client Service (WRConsumerService) - Webroot Software, Inc. - C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe -- End of file - 9472 bytes

Z góry dziękuje za wszelką pomoc.

**Posty:** 18165 · przez **wojtas** 20 Gru 2008, 18:04

uzyj opcji edytuj i wstaw logi w code

**Posty:** 4 · przez **sheee** 20 Gru 2008, 19:28

no to na razie nic nie zrobilem

nadmienie, ze nic w zasadzie nie instalowalem, omijam jakies dziwne strony ktore moglyby jakis syf na kompa wrzucic...

no a przeinstalowac kompa to zawsze moge, ale chce znalezc gdzie cos wlazlo, ze tylko IE zablokowalo....

**Posty:** 8001 · przez **Okocza** 20 Gru 2008, 19:34

sheee, obydwa logi są czyste, nie ma żadnego śladu infekcji, poza jednym malutkim wpisem, chodzi raczej o ustawienia IE.

Kod: Zaznacz wszystko: c:\windows\System32\DfSdkBt.exe

usuń ręcznie a potem:

Wykonaj to co jest podane w tym temacie

1. tym programem przejdź komputer
2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
5. Przeskanuj komputer pod względem Trojanów tym programem
6. Wstaw na forum screen z zakładki uruchamianie (start – uruchom – msconfig – uruchamianie) może uda się cos wyrzucic stamtąd.

**Posty:** 4 · przez **sheee** 21 Gru 2008, 00:28

na razie IE dalej nie pokazuje stron,

Okocz - w sumie nie udalo mi sie wszystkiego zrobic, bo komp mi mowil ze nie moze:

Windows Worms Doors Cleaner - blokowanie portow - 135 port - udalo mi sie zablokowac, ale 445 - pisalo mi juz przy uruchamianiu programiku ze:
"Value in registry can't be opened
(System\CurrentControlSet\Services\Messenger\)"

a przy probie zablokowania portu 445:
"Value in registry can't be opened
(System\CurrentControlSet\Services\NetBT\Parameters\)"

HDcleaner - jakos nie udalo mi sie go uruchomic - brak aktywnego guziczka NEXT (albo po niemiecku "Weiter")

w sumie tylko startup moge wrzucic - ale tam zagladalem, to chyba nic do wywalenia nie ma:

**Posty:** 8001 · przez **Okocza** 21 Gru 2008, 00:50

sheee,

hp digital
adobe acrobat
quick time
itunes
cyberlink
spy sweeper
skype
gadu gadu
alcohol
emule
hp digital

to możesz wyłączyć.

sheee napisał(a):Windows Worms Doors Cleaner - blokowanie portow - 135 port - udalo mi sie zablokowac, ale 445 - pisalo mi juz przy uruchamianiu programiku ze:
"Value in registry can't be opened
(System\CurrentControlSet\Services\Messenger\)"

a przy probie zablokowania portu 445:
"Value in registry can't be opened
(System\CurrentControlSet\Services\NetBT\Parameters\)"

na viście WWDC nie działa

a gdzie FixIEDef ?

**Posty:** 4 · przez **sheee** 21 Gru 2008, 04:41

a chyba zapomnialem loga wkleic z FixIEdef

Kod: Zaznacz wszystko: ******************************************************************************** * * * FixIEDef Log * * Version 1.7.20.6874 * * * ******************************************************************************** Created at 16:59:53 on Saturday, December 20, 2008 Time Zone : (GMT-05:00) Eastern Time (US & Canada) Logged On User : szilderki Operating System : Microsoft® Windows Vista™ Ultimate Service Pack 1 OS Version : 6.0.6001 System Langauge : English (United States) Keyboard Layout : English (United States) Processor : X86 Intel(R) Core(TM)2 CPU 6700 @ 2.66GHz System Drive : C:\ Windows Directory : C:\Windows System Directory : C:\Windows\system32 System Drive Type : Fixed System Drive Status : READY System Drive Label : system System Drive Size : 238.42 GB System Drive Free : 205.68 GB Total Physical Memory: 3069 MB Free Physical Memory : 2003 MB Total Page File : 3069 MB Free Page File : 5127 MB Total Virtual Memory : 2048 MB Free Virtual Memory : 1941 MB Boot State : Normal boot -------------------------------------------------------------------------------- !!! userinit.exe is Clean !!! -------------------------------------------------------------------------------- !!! Files that have been deleted !!! No malicious files found -------------------------------------------------------------------------------- !!! Directories that have been removed !!! No malicious directories to be removed -------------------------------------------------------------------------------- !!! Registry entries that have been removed !!! No malicious Registry entries found ================================================================================ All Done :) ShadowPuterDude Safe Surfing!!!

Startup powylaczalem to co podales....
restart i obadam...

/po restarcie

IE dziala !!
naprawde jestem zaskoczony...
loga z FixIEdef - tylko wkleiłem - wcześniej już przeskanowałem,
i tylko po wyłączeniu w Startupie tych programów zaczął IE działać...

no ale teraz nie wiem jak to zrobić, bo niektóre programy musze włączyć spowrotem,
np Spysweeper - koniecznie, a inne to jeszcze nie wiem, potestuje...

dzieki za pomoc Okocz, dalej myśle ze już metodą prób i błędów obadam który programik mi blokuje IE

pozdrawiam

/jeszcze jeden update
po wlaczeniu spowrotem Spysweepere IE znowu przestal dzialac,
czyli wiem co zablokowalo, nie wiem dlaczego - bo wczesniej nie bylo zadnych problemow (od ok tygodnia IE nie dziala, a Spysweepera mam od paru lat i wczesniej IE dzialal)
na szczescie VISTA ma updaty zrobione osobno, to mi nie przeszkadza ze IE nie dziala, normalnie uzywam FF, ale czasami jakas stronke trzeba w IE obejrzec....
hmmm
no to mam zagwozdke w sumie

**Posty:** 8001 · przez **Okocza** 21 Gru 2008, 14:10

zamiast SPYSWEEPERA polecam Ewido, bardzo dobry antyspyware