Nie wyświetlają się niektóre strony

**Posty:** 2 · przez **Shayn** 20 Sie 2008, 20:11

Witam.
Mam taki problem:
Nie wyświetlają mi się strony takie jak:
- Google.pl (Wyszukiwanie się nie wyświetla)
- Nasz-Klasa.pl
- Fotka.pl
I inne, Mam Liveboxa bezprzewodowy internet przez Wi-Fi
Mam go od niedawna na laptopie Windows Vista
Ta strona też mi się nie wyświetla ;/
(Teraz jestem na kompie od brata)

Mam tylko log z Hijack bo coś mi nie wyszło z ComboFix oto on:

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:13, on 2008-08-20 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16711) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\taskeng.exe C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe C:\Program Files\Applications\wcs.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\McAfee.com\Agent\mcagent.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Windows\system32\rundll32.exe C:\Windows\system32\rundll32.exe c:\PROGRA~1\mcafee\msc\mcuimgr.exe C:\Windows\explorer.exe C:\Windows\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Windows\system32\conime.exe C:\Windows\system32\NOTEPAD.EXE C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\Windows\system32\NOTEPAD.EXE R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://internetsearchservice.com R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://internetsearchservice.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://internetsearchservice.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://internetsearchservice.com/ie6.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://internetsearchservice.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://internetsearchservice.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://internetsearchservice.com/ie6.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://internetsearchservice.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://internetsearchservice.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://internetsearchservice.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll O1 - Hosts: ::1 localhost O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: 734914 helper - {0BD071A6-C989-49E8-9B8E-80F92A868E26} - C:\Windows\system32\734914\734914.dll O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar O4 - HKLM\..\Run: [asd0.exe] C:\Users\samsung\AppData\Local\Temp\asd0.exe O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\efcdaArS.dll,#1 O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [Power2GoExpress] NA O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [MSServer] rundll32.exe C:\Users\samsung\AppData\Local\Temp\yaYooonn.dll,#1 O4 - HKCU\..\Run: [BM1bd704c2] Rundll32.exe "C:\Users\samsung\AppData\Local\Temp\cytlxegg.dll",s O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\samsung\AppData\Local\Temp\khfCvVlk.dll,c O4 - HKLM\..\Policies\Explorer\Run: [this] C:\Program Files\Applications\wcs.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'USŁUGA SIECIOWA') O4 - Startup: hamachi.lnk = C:\Program Files\Hamachi\hamachi.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html O13 - Gopher Prefix: O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: Samsung Update Plus - Unknown owner - C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe O23 - Service: Windows Tribute Service - Unknown owner - C:\Windows\system32\kdwlm.exe O23 - Service: Windows Tribute Service - Unknown owner - C:\Windows\system32\kdwlm.exe -- End of file - 7668 bytes

Edit by Mike013
Następnym razem zamieszczaj logi w tagi [code]

**Posty:** 18165 · przez **wojtas** 20 Sie 2008, 20:29

Wykonaj to co jest podane w tym temacie

Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu C:\SDFix wrzuc zawartość pliku Report.txt + log z combofixa oraz daj loga z hijacka

**Posty:** 2 · przez **Shayn** 21 Sie 2008, 13:12

"Twoja wiadomość zawiera 662090 znaków. Maksymalna dozwolona liczba znaków to 60000."
Nie mogę wkleić loga z SDFix.

A To z ComboFix:

Kod: Zaznacz wszystko: ComboFix 08-08-19.06 - samsung 2008-08-21 12:46:20.2 - NTFSx86 Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1250.1.1045.18.1335 [GMT 2:00] Running from: C:\Users\samsung\Desktop\ComboFix.exe * Created a new restore point * Resident AV is active . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . ---- Previous Run ------- . C:\Users\samsung\AppData\Local\Temp\khfCvVlk.dll C:\Users\samsung\AppData\Local\Temp\kxedqckv.dll C:\Windows\System32\734914 C:\Windows\System32\734914\734914.dll C:\Windows\system32\efcdaArS.dll C:\Windows\system32\qoMCrSlI.dll C:\Windows\system32\setup.ini . ((((((((((((((((((((((((( Files Created from 2008-07-21 to 2008-08-21 ))))))))))))))))))))))))))))))) . No new files created in this timespan . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-08-21 10:41 --------- d-----w C:\Users\samsung\AppData\Roaming\Hamachi 2008-08-21 09:54 --------- d-----w C:\Program Files\Winamp Remote 2008-08-20 17:11 --------- d-----w C:\Program Files\Trend Micro 2008-08-20 16:04 --------- d-----w C:\Users\samsung\AppData\Roaming\gtk-2.0 2008-08-20 11:13 --------- d-----w C:\Program Files\Valve 2008-08-20 11:07 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-08-20 08:33 --------- d-----w C:\Program Files\Tales of Pirates Online 2008-08-17 07:38 --------- d-----w C:\Program Files\Windows Calendar 2008-08-16 17:08 --------- d-----w C:\Program Files\Hamachi 2008-08-16 17:07 25,280 ----a-w C:\Windows\system32\drivers\hamachi.sys 2008-08-16 10:17 268,800 ----a-w C:\Windows\System32\es.dll 2008-08-16 10:14 6,917,120 ----a-w C:\Windows\System32\NlsLexicons0c1a.dll 2008-08-16 10:14 1,963,520 ----a-w C:\Windows\System32\NlsData0c1a.dll 2008-08-16 10:14 1,963,520 ----a-w C:\Windows\System32\NlsData081a.dll 2008-08-16 10:10 428,032 ----a-w C:\Windows\System32\EncDec.dll 2008-08-16 10:10 292,352 ----a-w C:\Windows\System32\psisdecd.dll 2008-08-16 10:10 1,244,672 ----a-w C:\Windows\System32\mcmde.dll 2008-08-15 07:36 174 --sha-w C:\Program Files\desktop.ini 2008-08-15 07:32 --------- d-----w C:\Program Files\Windows Sidebar 2008-08-15 07:32 --------- d-----w C:\Program Files\Windows Mail 2008-08-15 07:32 --------- d-----w C:\Program Files\Windows Defender 2008-08-14 20:53 61,440 ----a-w C:\Windows\System32\winipsec.dll 2008-08-14 20:53 361,984 ----a-w C:\Windows\System32\IPSECSVC.DLL 2008-08-14 20:53 28,672 ----a-w C:\Windows\System32\FwRemoteSvr.dll 2008-08-14 20:53 272,896 ----a-w C:\Windows\System32\polstore.dll 2008-08-14 20:52 87,040 ----a-w C:\Windows\System32\msoert2.dll 2008-08-14 20:52 39,424 ----a-w C:\Windows\System32\ACCTRES.dll 2008-08-14 20:52 205,824 ----a-w C:\Windows\System32\msoeacct.dll 2008-08-14 20:51 49,664 ----a-w C:\Windows\System32\csrsrv.dll 2008-08-14 20:51 376,320 ----a-w C:\Windows\System32\winsrv.dll 2008-08-14 20:51 194,560 ----a-w C:\Windows\System32\WebClnt.dll 2008-08-14 20:51 110,080 ----a-w C:\Windows\system32\drivers\mrxdav.sys 2008-08-14 20:47 41,984 ----a-w C:\Windows\system32\drivers\monitor.sys 2008-08-14 20:47 1,060,920 ----a-w C:\Windows\system32\drivers\ntfs.sys 2008-08-14 20:46 2,048 ----a-w C:\Windows\System32\tzres.dll 2008-08-14 20:43 86,016 ----a-w C:\Windows\System32\icfupgd.dll 2008-08-14 20:43 63,488 ----a-w C:\Windows\system32\drivers\mpsdrv.sys 2008-08-14 20:43 61,952 ----a-w C:\Windows\System32\cmifw.dll 2008-08-14 20:43 414,208 ----a-w C:\Windows\System32\msscp.dll 2008-08-14 20:43 396,800 ----a-w C:\Windows\System32\MPSSVC.dll 2008-08-14 20:43 392,192 ----a-w C:\Windows\System32\FirewallAPI.dll 2008-08-14 20:43 374,456 ----a-w C:\Windows\System32\mcupdate_GenuineIntel.dll 2008-08-14 20:43 23,040 ----a-w C:\Windows\system32\drivers\tunnel.sys 2008-08-14 20:43 178,688 ----a-w C:\Windows\System32\iphlpsvc.dll 2008-08-14 20:43 16,896 ----a-w C:\Windows\System32\wfapigp.dll 2008-08-14 20:43 15,360 ----a-w C:\Windows\system32\drivers\TUNMP.SYS 2008-08-14 20:42 45,112 ----a-w C:\Windows\system32\drivers\pciidex.sys 2008-08-14 20:42 3,505,720 ----a-w C:\Windows\System32\ntkrnlpa.exe 2008-08-14 20:42 3,471,928 ----a-w C:\Windows\System32\ntoskrnl.exe 2008-08-14 20:42 211,000 ----a-w C:\Windows\system32\drivers\volsnap.sys 2008-08-14 20:42 21,560 ----a-w C:\Windows\system32\drivers\atapi.sys 2008-08-14 20:42 154,624 ----a-w C:\Windows\system32\drivers\nwifi.sys 2008-08-14 20:42 15,928 ----a-w C:\Windows\system32\drivers\pciide.sys 2008-08-14 20:42 110,136 ----a-w C:\Windows\system32\drivers\ataport.sys 2008-08-14 20:42 104,448 ----a-w C:\Windows\System32\DWWIN.EXE 2008-08-14 20:41 2,048 ----a-w C:\Windows\System32\msxml3r.dll 2008-08-14 20:41 1,191,936 ----a-w C:\Windows\System32\msxml3.dll 2008-08-14 20:40 803,328 ----a-w C:\Windows\system32\drivers\tcpip.sys 2008-08-14 20:40 24,064 ----a-w C:\Windows\System32\netcfg.exe 2008-08-14 20:40 22,016 ----a-w C:\Windows\System32\netiougc.exe 2008-08-14 20:40 216,632 ----a-w C:\Windows\system32\drivers\netio.sys 2008-08-14 20:40 167,424 ----a-w C:\Windows\System32\tcpipcfg.dll 2008-08-14 20:39 826,368 ----a-w C:\Windows\System32\wininet.dll 2008-08-14 20:39 56,320 ----a-w C:\Windows\System32\iesetup.dll 2008-08-14 20:39 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll 2008-08-14 20:39 26,624 ----a-w C:\Windows\System32\ieUnatt.exe 2008-08-14 20:37 1,585,664 ----a-w C:\Windows\System32\setupapi.dll 2008-08-14 20:34 2,027,008 ----a-w C:\Windows\System32\win32k.sys 2008-08-14 20:33 296,448 ----a-w C:\Windows\System32\gdi32.dll 2008-08-14 20:31 11,776 ----a-w C:\Windows\System32\sbunattend.exe 2008-08-14 20:30 83,968 ----a-w C:\Windows\System32\dnsrslvr.dll 2008-08-14 20:30 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll 2008-08-14 20:30 449,536 ----a-w C:\Windows\AppPatch\AcSpecfc.dll 2008-08-14 20:30 4,247,552 ----a-w C:\Windows\System32\GameUXLegacyGDFs.dll 2008-08-14 20:30 24,576 ----a-w C:\Windows\System32\dnscacheugc.exe 2008-08-14 20:30 2,560 ----a-w C:\Windows\AppPatch\AcRes.dll 2008-08-14 20:30 2,144,256 ----a-w C:\Windows\AppPatch\AcGenral.dll 2008-08-14 20:30 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll 2008-08-14 20:30 1,686,528 ----a-w C:\Windows\System32\gameux.dll 2008-08-14 20:29 84,480 ----a-w C:\Windows\System32\INETRES.dll 2008-08-14 20:29 788,992 ----a-w C:\Windows\System32\rpcrt4.dll 2008-08-14 20:29 737,792 ----a-w C:\Windows\System32\inetcomm.dll 2008-08-14 20:29 5,120 ----a-w C:\Windows\System32\wmi.dll 2008-08-14 20:29 152,576 ----a-w C:\Windows\System32\imagehlp.dll 2008-08-14 20:29 12,800 ----a-w C:\Windows\system32\drivers\fs_rec.sys 2008-08-14 20:29 1,327,104 ----a-w C:\Windows\System32\quartz.dll 2008-08-14 20:28 974,336 ----a-w C:\Windows\System32\crypt32.dll 2008-08-14 20:28 633,856 ----a-w C:\Windows\System32\user32.dll 2008-08-14 14:25 --------- d-----w C:\Program Files\McAfee 2008-08-14 09:48 --------- d-----w C:\ProgramData\OrbNetworks 2008-08-13 21:12 --------- d-----w C:\Users\samsung\AppData\Roaming\Winamp 2008-08-13 20:56 --------- d-----w C:\ProgramData\Winamp Toolbar 2008-08-13 20:56 --------- d-----w C:\Program Files\Winamp Toolbar 2008-08-13 20:56 --------- d-----w C:\Program Files\Winamp 2008-08-13 18:20 --------- d-----w C:\Users\samsung\AppData\Roaming\Gadu-Gadu 2008-08-13 17:37 --------- d-----w C:\Program Files\Applications 2008-08-13 15:13 --------- d-----w C:\Program Files\Gadu-Gadu 2008-08-09 09:28 --------- d-----w C:\Program Files\SAGEM 2008-08-06 10:43 --------- d-----w C:\Program Files\neostrada tp 2008-08-02 12:55 --------- d-----w C:\Program Files\ZTE ZXDSL 852 . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{57BCA5FA-5DBB-45a2-B558-1755C3F6253B}"= "C:\Program Files\Winamp Toolbar\winamptb.dll" [2008-07-16 22:51 1266992] [HKEY_CLASSES_ROOT\clsid\{57bca5fa-5dbb-45a2-b558-1755c3f6253b}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLTBSearch.1] [HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLTBSearch] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Power2GoExpress"="NA" [X] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-08-14 22:31 1232896] "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 14:35 125440] "LightScribe Control Panel"="C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-07-18 17:55 451872] "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 14:36 201728] "Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2008-03-20 12:04 2127296] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 12:35 90112] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2007-10-26 07:39 1029416] "RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2007-01-08 22:26 68640] "LanguageShortcut"="C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" [2007-01-08 22:17 52256] "mcagent_exe"="C:\Program Files\McAfee.com\Agent\mcagent.exe" [2007-08-03 22:33 582992] "WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2008-08-04 01:02 36352] "RtHDVCpl"="RtHDVCpl.exe" [2007-06-13 06:11 4489216 C:\Windows\RtHDVCpl.exe] "AdslTaskBar"="stmctrl.dll" [2007-02-06 16:47 167936 C:\Windows\System32\stmctrl.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows\Currentversion\policies\explorer\Run] "this"="C:\Program Files\Applications\wcs.exe" [2008-08-13 19:37 7680] C:\Users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ hamachi.lnk - C:\Program Files\Hamachi\hamachi.exe [2008-08-16 19:07:57 624416] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 02:48:00 40048] Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-23 01:01:00 734872] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "NoHotStart"= 0 (0x0) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "NoHotStart"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.clmp3enc"= C:\PROGRA~1\CYBERL~1\Power2Go\CLMP3Enc.ACM [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules] "TCP Query User{587781E6-AFFE-4CC3-881F-D894A27B749D}C:\\users\\samsung\\desktop\\szefi\\gry\\ntsd beta 2.0\\ntsd beta 2.0.exe"= UDP:C:\users\samsung\desktop\szefi\gry\ntsd beta 2.0\ntsd beta 2.0.exe:ntsd beta 2.0.exe "UDP Query User{4FF91C67-B7B7-404B-889B-3CFB09E5CA9A}C:\\users\\samsung\\desktop\\szefi\\gry\\ntsd beta 2.0\\ntsd beta 2.0.exe"= TCP:C:\users\samsung\desktop\szefi\gry\ntsd beta 2.0\ntsd beta 2.0.exe:ntsd beta 2.0.exe "{EFFE5440-9752-4DE9-A29B-7A76D43DE255}"= C:\Program Files\CyberLink\PowerDVD\PowerDVD.EXE:CyberLink PowerDVD "{D926DF3D-38D2-46ED-B241-9380D35B82C2}"= C:\Program Files\CyberLink\PowerDirector\PDR.EXE:CyberLink PowerDirector "{F429E6F7-4C94-494C-BBE1-51B11F6D7A8E}"= Profile=Private|Profile=Public|C:\Program Files\Common Files\Mcafee\MNA\McNaSvc.exe:McAfee Network Agent "{8D801F4B-94DF-4220-BC65-D62EA04C30AB}"= UDP:C:\Program Files\Winamp Remote\bin\Orb.exe:Orb "{D68E5363-07DB-44FA-948C-EA18E7B0FE56}"= TCP:C:\Program Files\Winamp Remote\bin\Orb.exe:Orb "{F55EB200-7005-445D-912B-D457B30BCB85}"= UDP:C:\Program Files\Winamp Remote\bin\OrbTray.exe:OrbTray "{45A0CBBB-FBB2-47A5-A321-802B066AEB8F}"= TCP:C:\Program Files\Winamp Remote\bin\OrbTray.exe:OrbTray "{B30B009C-8B2A-4B03-BBA2-3AB90CD3B815}"= UDP:C:\Program Files\Winamp Remote\bin\OrbIR.exe:OrbIR "{EAE964B7-7122-4E8D-AF6A-1BE03B75DC93}"= TCP:C:\Program Files\Winamp Remote\bin\OrbIR.exe:OrbIR "{FBADFF42-392F-4541-BFA8-0F1B23368E05}"= UDP:C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:Orb Stream Client "{FFA4C518-6467-4FC4-82F6-2EC57F2F4D60}"= TCP:C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:Orb Stream Client [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System] "DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic| [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile] "EnableFirewall"= 0 (0x0) R0 AtiPcie;ATI PCI Express (3GIO) Filter;C:\Windows\system32\DRIVERS\AtiPcie.sys [2007-04-26 03:15] R2 KMDFMEMIO;SAMSUNG Kernel Driver;C:\Windows\system32\DRIVERS\kmdfmemio.sys [2006-11-14 09:11] R3 atikmdag;atikmdag;C:\Windows\system32\DRIVERS\atikmdag.sys [2007-08-07 02:30] R3 Stmatm;ATM/ADSL miniport;C:\Windows\system32\DRIVERS\stmatm.sys [2007-01-22 11:52] R3 VMC302;Vimicro Camera Service VMC302;C:\Windows\system32\Drivers\VMC302.sys [2007-10-17 08:48] R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\system32\DRIVERS\yk60x86.sys [2007-05-03 03:14] S2 Windows Tribute Service;Windows Tribute Service;C:\Windows\system32\kdwlm.exe [2008-06-16 21:28] S3 athrusb;Atheros Wireless LAN USB device driver;C:\Windows\system32\DRIVERS\athrusb.sys [2006-12-22 20:05] S3 TaurusUsb;ADSL Modem USB Service;C:\Windows\system32\DRIVERS\torususb.sys [2007-02-06 16:08] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] "C:\Program Files\Common Files\LightScribe\LSRunOnce.exe" . Contents of the 'Scheduled Tasks' folder 2008-06-17 C:\Windows\Tasks\McDefragTask.job - c:\PROGRA~1\mcafee\mqc\QcConsol.exe [2007-12-04 13:32] 2008-06-17 C:\Windows\Tasks\McQcTask.job - c:\PROGRA~1\mcafee\mqc\QcConsol.exe [2007-12-04 13:32] 2008-08-20 C:\Windows\Tasks\User_Feed_Synchronization-{92023193-1CEA-4704-A8A5-CD591D3B5326}.job - C:\Windows\system32\msfeedssync.exe [2006-11-02 11:45] . - - - - ORPHANS REMOVED - - - - HKLM-Run-MSServer - C:\Windows\system32\efcdaArS.dll . ------- Supplementary Scan ------- . FireFox -: Profile - C:\Users\samsung\AppData\Roaming\Mozilla\Firefox\Profiles\lag2j0q4.default\ FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query= . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-08-21 12:49:02 Windows 6.0.6000 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... ************************************************************************** . Completion time: 2008-08-21 12:51:42 ComboFix-quarantined-files.txt 2008-08-21 10:50:36 Pre-Run: System nie może znaleźć komunikatu dla numeru komunikatu 0x2379 w pliku komunikatów dla Application. Post-Run: 131,815,378,944 bajtów wolnych 235 --- E O F --- 2008-08-18 21:08:37

Dodano Dzisiaj, 13:13:
Hijack:

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:13, on 2008-08-20 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16711) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\taskeng.exe C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe C:\Program Files\Applications\wcs.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\McAfee.com\Agent\mcagent.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Windows\system32\rundll32.exe C:\Windows\system32\rundll32.exe c:\PROGRA~1\mcafee\msc\mcuimgr.exe C:\Windows\explorer.exe C:\Windows\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Windows\system32\conime.exe C:\Windows\system32\NOTEPAD.EXE C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\Windows\system32\NOTEPAD.EXE R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://internetsearchservice.com R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://internetsearchservice.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://internetsearchservice.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://internetsearchservice.com/ie6.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://internetsearchservice.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://internetsearchservice.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://internetsearchservice.com/ie6.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://internetsearchservice.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://internetsearchservice.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://internetsearchservice.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll O1 - Hosts: ::1 localhost O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: 734914 helper - {0BD071A6-C989-49E8-9B8E-80F92A868E26} - C:\Windows\system32\734914\734914.dll O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar O4 - HKLM\..\Run: [asd0.exe] C:\Users\samsung\AppData\Local\Temp\asd0.exe O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\efcdaArS.dll,#1 O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [Power2GoExpress] NA O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [MSServer] rundll32.exe C:\Users\samsung\AppData\Local\Temp\yaYooonn.dll,#1 O4 - HKCU\..\Run: [BM1bd704c2] Rundll32.exe "C:\Users\samsung\AppData\Local\Temp\cytlxegg.dll",s O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\samsung\AppData\Local\Temp\khfCvVlk.dll,c O4 - HKLM\..\Policies\Explorer\Run: [this] C:\Program Files\Applications\wcs.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'USŁUGA SIECIOWA') O4 - Startup: hamachi.lnk = C:\Program Files\Hamachi\hamachi.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html O13 - Gopher Prefix: O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: Samsung Update Plus - Unknown owner - C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe O23 - Service: Windows Tribute Service - Unknown owner - C:\Windows\system32\kdwlm.exe O23 - Service: Windows Tribute Service - Unknown owner - C:\Windows\system32\kdwlm.exe -- End of file - 7668 bytes

Dodano Dzisiaj, 13:30:
Kurde nie umie tego rozłożyć na części ;/ Może plikiem?

Dodano Dzisiaj, 13:34:
Ok macie plikiem Wystarczy Ściągnąć

http://www.wrzuta.pl/pliki/fjQ6U1wldX/

Dodano Dzisiaj, 20:34:
To pomoże ktoś czy nie?