niechciane reklamy cid

**Posty:** 31 · przez **modeCom** 12 Kwi 2007, 20:51

J/w przy korzystaniu z IE badź podczas gry w CS`a wyświetlają mi sie jakies durne reklamy CiD

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 20:38:58, on 2007-04-12 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Documents and Settings\Dawid\Pulpit\Glass2k.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe c:\progra~1\intern~1\iexplore.exe C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\uTorrent\utorrent.exe C:\Program Files\Opera\Opera.exe C:\Documents and Settings\Dawid\Moje dokumenty\Logi komputerowe\HijackThis.exe R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.windowsxlive.net R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 88.156.96.8:8080 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O3 - Toolbar: (no name) - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - (no file) O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [Glass2k] C:\Documents and Settings\Dawid\Pulpit\Glass2k.exe O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [Modeblue] C:\DOCUME~1\Dawid\DANEAP~1\ONEVC~1\seek heck.exe O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm O8 - Extra context menu item: Pobierz z &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: MSSQL$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: SQLAgent$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE (file missing)

[ Dodano: Dzisiaj o 19:52 ]
aha...czemu w uruchomionych procesach jest cały czas IE skoro korzystam z Opery?

**Posty:** 18165 · przez **wojtas** 12 Kwi 2007, 20:53

Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach)
Start do awaryjnego ( F8 ) przy starcie komputera.

O3 - Toolbar: (no name) - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - (no file)
O4 - HKCU\..\Run: [Modeblue] C:\DOCUME~1\Dawid\DANEAP~1\ONEVC~1\seek heck.exe

Odpalasz hijackthis i zaznaczasz ptaszkami powyższe wpisy i dajesz Fix checked.
Pogrubione pliki usuwasz ręcznie z dysku
potem nowe logi z Hijack This oraz Silent runners

**Posty:** 31 · przez **modeCom** 12 Kwi 2007, 21:11

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 20:59:48, on 2007-04-12 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Documents and Settings\Dawid\Pulpit\Glass2k.exe C:\Program Files\uTorrent\utorrent.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe c:\progra~1\intern~1\iexplore.exe C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Opera\Opera.exe C:\Documents and Settings\Dawid\Moje dokumenty\Logi komputerowe\HijackThis.exe R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.windowsxlive.net R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 88.156.96.8:8080 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O3 - Toolbar: (no name) - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - (no file) O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [Glass2k] C:\Documents and Settings\Dawid\Pulpit\Glass2k.exe O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [µTorrent] "C:\Program Files\uTorrent\utorrent.exe" O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm O8 - Extra context menu item: Pobierz z &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: MSSQL$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: SQLAgent$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE (file missing)

niestety dalej to samo...zaraz dam z silenta

[ Dodano: Dzisiaj o 20:30 ]

Kod: Zaznacz wszystko: "Silent Runners.vbs", revision 49, http://www.silentrunners.org/ Operating System: Windows XP Output limited to non-default values, except where indicated by "{++}" Startup items buried in registry: --------------------------------- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++} "CTFMON.EXE" = "C:\WINDOWS\System32\ctfmon.exe" [MS] "Skype" = ""C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized" ["Skype Technologies S.A."] HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++} "avast!" = "C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [null data] "CorelDRAW Graphics Suite 11b" = "(empty string)" [file not found] "NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup" [MS] "NvMediaCenter" = "RunDLL32.exe NvMCTray.dll,NvTaskbarInit" [MS] HKLM\Software\Microsoft\Active Setup\Installed Components\ {ACC563BC-4266-43f0-B6ED-9D38C4202C7E}\(Default) = "Dostęp do programu Internet Explorer" \StubPath = "rundll32 iesetup.dll,IEAccessUserInst" [MS] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided) -> {HKLM...CLSID} = "SSVHelper Class" \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll" ["Sun Microsystems, Inc."] HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ "{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania" -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania" \InProcServer32\(Default) = "deskpan.dll" [file not found] "{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu" -> {HKLM...CLSID} = "HyperTerminal Icon Ext" \InProcServer32\(Default) = "C:\WINDOWS\System32\hticons.dll" ["Hilgraeve, Inc."] "{472083B0-C522-11CF-8763-00608CC02F24}" = "avast" -> {HKLM...CLSID} = "avast" \InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"] "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] "{0006F045-0000-0000-C000-000000000046}" = "Microsoft Outlook Custom Icon Handler" -> {HKLM...CLSID} = "Outlook File Icon Extension" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office\OLKFSTUB.DLL" [MS] "{E0D79300-84BE-11CE-9641-444553540000}" = "WinZip" -> {HKLM...CLSID} = "WinZip" \InProcServer32\(Default) = "C:\PROGRA~1\WinZip\wzshlext.dll" [null data] "{E0D79301-84BE-11CE-9641-444553540000}" = "WinZip" -> {HKLM...CLSID} = "WinZip" \InProcServer32\(Default) = "C:\PROGRA~1\WinZip\wzshlext.dll" [null data] "{E0D79302-84BE-11CE-9641-444553540000}" = "WinZip" -> {HKLM...CLSID} = "WinZip" \InProcServer32\(Default) = "C:\PROGRA~1\WinZip\wzshlext.dll" [null data] "{32020A01-506E-484D-A2A8-BE3CF17601C3}" = "AlcoholShellEx" -> {HKLM...CLSID} = "AlcoholShellEx" \InProcServer32\(Default) = "C:\PROGRA~1\ALCOHO~1\ALCOHO~1\AXShlEx.dll" ["Alcohol Soft Development Team"] "{A5110426-177D-4e08-AB3F-785F10B4439C}" = "My Phones" -> {HKLM...CLSID} = "My Phones" \InProcServer32\(Default) = "C:\Program Files\Sony Ericsson\Mobile\File Manager\fmgrgui.dll" ["Sony Ericsson Mobile Communications AB"] "{8D1636FD-CA49-4B4E-90E4-0A20E03A15E8}" = "jetAudio" -> {HKLM...CLSID} = "JetFlExt Class" \InProcServer32\(Default) = "C:\Program Files\JetAudio\JetFlExt.dll" ["JetAudio, Inc."] "{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class" -> {HKLM...CLSID} = "DesktopContext Class" \InProcServer32\(Default) = "C:\WINDOWS\System32\nvcpl.dll" ["NVIDIA Corporation"] "{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper" -> {HKLM...CLSID} = "NVIDIA CPL Extension" \InProcServer32\(Default) = "C:\WINDOWS\System32\nvcpl.dll" ["NVIDIA Corporation"] "{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer" -> {HKLM...CLSID} = "Desktop Explorer" \InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu" -> {HKLM...CLSID} = "nView Desktop Context Menu" \InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"] HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ avast\(Default) = "{472083B0-C522-11CF-8763-00608CC02F24}" -> {HKLM...CLSID} = "avast" \InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] WinZip\(Default) = "{E0D79300-84BE-11CE-9641-444553540000}" -> {HKLM...CLSID} = "WinZip" \InProcServer32\(Default) = "C:\PROGRA~1\WinZip\wzshlext.dll" [null data] HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\ jetAudio\(Default) = "{8D1636FD-CA49-4B4E-90E4-0A20E03A15E8}" -> {HKLM...CLSID} = "JetFlExt Class" \InProcServer32\(Default) = "C:\Program Files\JetAudio\JetFlExt.dll" ["JetAudio, Inc."] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] WinZip\(Default) = "{E0D79300-84BE-11CE-9641-444553540000}" -> {HKLM...CLSID} = "WinZip" \InProcServer32\(Default) = "C:\PROGRA~1\WinZip\wzshlext.dll" [null data] HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\ avast\(Default) = "{472083B0-C522-11CF-8763-00608CC02F24}" -> {HKLM...CLSID} = "avast" \InProcServer32\(Default) = "C:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"] jetAudio\(Default) = "{8D1636FD-CA49-4B4E-90E4-0A20E03A15E8}" -> {HKLM...CLSID} = "JetFlExt Class" \InProcServer32\(Default) = "C:\Program Files\JetAudio\JetFlExt.dll" ["JetAudio, Inc."] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] WinZip\(Default) = "{E0D79300-84BE-11CE-9641-444553540000}" -> {HKLM...CLSID} = "WinZip" \InProcServer32\(Default) = "C:\PROGRA~1\WinZip\wzshlext.dll" [null data] Group Policies {GPedit.msc branch and setting}: ----------------------------------------------- Note: detected settings may not have any effect. HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\ "shutdownwithoutlogon" = (REG_DWORD) hex:0x00000001 {Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| Shutdown: Allow system to be shut down without having to log on} "undockwithoutlogon" = (REG_DWORD) hex:0x00000001 {Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| Devices: Allow undock without having to log on} Active Desktop and Wallpaper: ----------------------------- Active Desktop may be disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState Displayed if Active Desktop enabled and wallpaper not set by Group Policy: HKCU\Software\Microsoft\Internet Explorer\Desktop\General\ "Wallpaper" = "C:\WINDOWS\BricoPack Wallpaper.bmp" Displayed if Active Desktop disabled and wallpaper not set by Group Policy: HKCU\Control Panel\Desktop\ "Wallpaper" = "C:\Documents and Settings\Dawid\Dane aplikacji\Mozilla\Firefox\Tapeta pulpitu.bmp" Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] 000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS] 000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] Transport Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: %SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 12 %SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05 Toolbars, Explorer Bars, Extensions: ------------------------------------ Toolbars HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ "{2318C2B1-4965-11D4-9B18-009027A5CD4F}" -> {HKLM...CLSID} = "&Google" \InProcServer32\(Default) = "c:\program files\google\googletoolbar2.dll" [file not found] Extensions (Tools menu items, main toolbar menu buttons) HKLM\Software\Microsoft\Internet Explorer\Extensions\ {08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ "MenuText" = "Sun Java Console" "CLSIDExtension" = "{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}" -> {HKCU...CLSID} = "Java Plug-in 1.5.0_10" \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll" ["Sun Microsystems, Inc."] -> {HKLM...CLSID} = "Java Plug-in 1.5.0_10" \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_10\bin\npjpi150_10.dll" ["Sun Microsystems, Inc."] Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ avast! Antivirus, avast! Antivirus, ""C:\Program Files\Alwil Software\Avast4\ashServ.exe"" [null data] avast! iAVS4 Control Service, aswUpdSv, ""C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"" [null data] avast! Mail Scanner, avast! Mail Scanner, ""C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service" ["ALWIL Software"] avast! Web Scanner, avast! Web Scanner, ""C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service" ["ALWIL Software"] NVIDIA Display Driver Service, NVSvc, "C:\WINDOWS\System32\nvsvc32.exe" ["NVIDIA Corporation"] StarWind iSCSI Service, StarWindService, "C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindService.exe" ["Rocket Division Software"] Windows User Mode Driver Framework, UMWdf, "C:\WINDOWS\System32\wdfmgr.exe" [MS] ---------- + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + To search all directories of local fixed drives for DESKTOP.INI DLL launch points, use the -supp parameter or answer "No" at the first message box and "Yes" at the second message box. ---------- (total run time: 704 seconds, including 4 seconds for message boxes)

**Posty:** 18165 · przez **wojtas** 12 Kwi 2007, 21:37

daj loga z comboscana

http://forum.programosy.pl/dodatkowe-narzedzia-do-usuwania-i-ochrony-vt42021.html

**Posty:** 31 · przez **modeCom** 12 Kwi 2007, 22:32

heh co mam skasowac??

Kod: Zaznacz wszystko: ComboScan v20070306.20 run by Dawid on 2007-04-12 at 22:19:35 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- System Restore is disabled; attempting to re-enable...success. -- Last 1 Restore Point(s) -- 1: 2007-04-12 20:19:38 UTC - RP1 - Punkt kontrolny systemu Performed disk cleanup. -- HijackThis (run as Dawid.exe) ----------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 22:19:50, on 2007-04-12 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Documents and Settings\Dawid\Pulpit\Glass2k.exe C:\Program Files\uTorrent\utorrent.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe c:\progra~1\intern~1\iexplore.exe C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Konnekt\konnekt.exe C:\Program Files\Opera\Opera.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\Dawid\Pulpit\comboscan.exe C:\DOCUME~1\Dawid\MOJEDO~1\LOGIKO~1\Dawid.exe R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.windowsxlive.net R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 88.156.96.8:8080 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O3 - Toolbar: (no name) - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - (no file) O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [Glass2k] C:\Documents and Settings\Dawid\Pulpit\Glass2k.exe O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [µTorrent] "C:\Program Files\uTorrent\utorrent.exe" O4 - HKCU\..\Run: [Modeblue] C:\DOCUME~1\Dawid\DANEAP~1\ONEVC~1\seek heck.exe O8 - Extra context menu item: Pobierz z &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: MSSQL$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: SQLAgent$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE (file missing) -- HijackThis Fixed Entries (C:\DOCUME~1\Dawid\MOJEDO~1\LOGIKO~1\backups\) ----- backup-20070117-142101-849 O23 - Service: Windows Messenger - Unknown owner - C:\WINDOWS\msnmsgr.exe (file missing) backup-20070119-194658-231 O4 - HKLM\..\Run: [mhaklarg] C:\kjrjnroq.bat backup-20070412-205437-903 O4 - HKCU\..\Run: [Modeblue] C:\DOCUME~1\Dawid\DANEAP~1\ONEVC~1\seek heck.exe backup-20070412-205437-986 O3 - Toolbar: (no name) - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - (no file) -- File Associations ----------------------------------------------------------- .bat - batfile - "%1" %* .chm - chm.file - "C:\WINDOWS\hh.exe" %1 .cmd - cmdfile - "%1" %* .com - comfile - "%1" %* .exe - exefile - "%1" %* .hlp - hlpfile - %SystemRoot%\System32\winhlp32.exe %1 .inf - inffile - %SystemRoot%\System32\NOTEPAD.EXE %1 .ini - inifile - %SystemRoot%\System32\NOTEPAD.EXE %1 .js - JSFile - %SystemRoot%\System32\WScript.exe "%1" %* .lnk - lnkfile - {00021401-0000-0000-C000-000000000046} .pif - piffile - "%1" %* .reg - regfile - regedit.exe "%1" .scr - scrfile - "%1" /S .txt - txtfile - %SystemRoot%\system32\NOTEPAD.EXE %1 .vbs - VBSFile - %SystemRoot%\System32\WScript.exe "%1" %* -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- 1R Aavmker4 (avast! Asynchronous Virus Monitor) - C:\WINDOWS\system32\drivers\aavmker4.sys 2R aswMon2 (avast! Standard Shield Support) - C:\WINDOWS\system32\drivers\aswmon2.sys 3R aswRdr - C:\WINDOWS\system32\drivers\aswRdr.sys 1R aswTdi (avast! Network Shield Support) - C:\WINDOWS\system32\drivers\aswTdi.sys 0S bjobunop - C:\WINDOWS\System32\drivers\vnnavakd.sys (not found) 3S C-Dilla - C:\WINDOWS\System32\drivers\CDANT.SYS (not found) 3R FETNDIS (Sterownik NT karty VIA PCI 10/100Mb Fast Ethernet) - C:\WINDOWS\system32\drivers\fetnd5.sys 3S hamachi (Hamachi Network Interface) - C:\WINDOWS\system32\drivers\hamachi.sys 3S HidUsb (Sterownik Microsoft klasy HID) - C:\WINDOWS\system32\drivers\hidusb.sys 3S IrCOMM2k (Puerto Virtual COM de Infrarojos) - C:\WINDOWS\System32\DRIVERS\ircomm2k.sys (not found) 2R irda (Protokół IrDA) - C:\WINDOWS\system32\drivers\irda.sys 3R KS-959 (Kingsun KS-959 USB Infrared Adapter) - C:\WINDOWS\system32\drivers\KS-959.sys 0S mdgkqnrr - C:\WINDOWS\System32\drivers\wfqiphwq.sys (not found) 3S MSIRCOMM (Microsoft IR Communications Driver) - C:\WINDOWS\system32\drivers\MSIRCOMM.sys 3R nv - C:\WINDOWS\system32\drivers\nv4_mini.sys 0R PxHelp20 - C:\WINDOWS\system32\drivers\PxHelp20.sys 3R Rasirda (WAN Miniport (IrDA)) - C:\WINDOWS\system32\drivers\rasirda.sys 0R sptd - C:\WINDOWS\system32\drivers\sptd.sys 3S StMp3Rec (Player Recovery Device Control Driver) - C:\WINDOWS\system32\drivers\StMp3Rec.sys 3S USBSTOR (Sterownik magazynu masowego USB) - C:\WINDOWS\system32\drivers\USBSTOR.SYS 0R viaagp (Filtr magistrali AGP VIA) - C:\WINDOWS\system32\drivers\VIAAGP.SYS 3R VIAudio (Vinyl AC'97 Audio Controller (WDM)) - C:\WINDOWS\system32\drivers\vinyl97.sys -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- 3S Adobe LM Service - "C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe" 3S aspnet_state (ASP.NET State Service) - C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe 2R aswUpdSv (avast! iAVS4 Control Service) - "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe" 2R avast! Antivirus - "C:\Program Files\Alwil Software\Avast4\ashServ.exe" 3R avast! Mail Scanner - "C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service 3R avast! Web Scanner - "C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service 2R Irmon (Monitor podczerwieni) - C:\WINDOWS\System32\svchost.exe -k netsvcs 3S MSSQL$SONY_MEDIAMGR - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe -sSONY_MEDIAMGR 3S MSSQLServerADHelper - C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe 2R NVSvc (NVIDIA Display Driver Service) - C:\WINDOWS\System32\nvsvc32.exe 3S SCardDrv (Pomocnik karty inteligentnej) - C:\WINDOWS\System32\SCardSvr.exe 3S SQLAgent$SONY_MEDIAMGR - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE -i SONY_MEDIAMGR 2R UMWdf (Windows User Mode Driver Framework) - C:\WINDOWS\System32\wdfmgr.exe 2R uploadmgr (Menedżer przekazywania) - C:\WINDOWS\System32\svchost.exe -k netsvcs 4S Windows Messenger - "C:\WINDOWS\msnmsgr.exe" -- Scheduled Tasks ------------------------------------------------------------- 2007-03-18 11:11:27 256 --ah----- C:\WINDOWS\Tasks\A8FD629C91E31900.job<A8FD62~1.JOB> -- Files created between 2007-03-12 and 2007-04-12 ----------------------------- 2007-04-12 21:48:30 1712128 -ra------ C:\WINDOWS\System32\gdiplus.dll 2007-04-12 21:48:30 0 d-------- C:\Program Files\Qualcomm 2007-04-10 15:46:23 0 d-------- C:\Program Files\GetRight 2007-04-10 14:25:21 0 d-------- C:\Program Files\NetConeal<NETCON~1> 2007-04-10 14:09:57 0 d-------- C:\Program Files\Hide Real IP<HIDERE~1> 2007-04-10 06:59:52 0 d-------- C:\Program Files\Dziobas Rar Player<DZIOBA~1> 2007-03-27 15:00:55 0 d-------- C:\Program Files\PhotoZoom Pro 2<PHOTOZ~1> 2007-03-27 14:54:47 0 d-------- C:\Program Files\uTorrent 2007-03-26 18:45:09 151552 --a------ C:\WINDOWS\System32\pxwma.dll 2007-03-18 11:10:40 0 d-------- C:\Program Files\ONE VC<ONEVC~1> 2007-03-18 11:09:06 0 d-------- C:\Program Files\BitDownload<BITDOW~1> 2007-03-12 22:13:05 0 d-------- C:\Program Files\Konnekt -- Find3M Report --------------------------------------------------------------- 2007-04-12 22:19:59 0 d-------- C:\Documents and Settings\Dawid\Dane aplikacji\uTorrent 2007-04-12 22:12:00 0 d-------- C:\Documents and Settings\Dawid\Dane aplikacji\Skype 2007-04-12 21:48:29 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1> 2007-04-12 18:30:41 0 d-------- C:\Program Files\BitComet 2007-04-10 14:26:53 0 d-------- C:\Documents and Settings\Dawid\Dane aplikacji\FreeCap 2007-04-04 16:46:37 0 d-------- C:\Documents and Settings\Dawid\Dane aplikacji\Adobe 2007-03-26 22:29:32 453808 --a------ C:\WINDOWS\System32\perfh015.dat 2007-03-26 22:29:32 74762 --a------ C:\WINDOWS\System32\perfc015.dat 2007-03-26 22:29:15 0 d-------- C:\Program Files\Google 2007-03-26 19:02:00 0 d-------- C:\Documents and Settings\Dawid\Dane aplikacji\muvee Technologies<MUVEET~1> 2007-03-26 18:47:55 50 --a------ C:\AUTOEXEC.BAT 2007-03-26 18:45:53 0 d-------- C:\Program Files\Common Files\muvee Technologies<MUVEET~1> 2007-03-26 18:44:20 0 d-------- C:\Program Files\muvee Technologies<MUVEET~1> 2007-03-18 11:11:27 0 d-------- C:\Documents and Settings\Dawid\Dane aplikacji\ONE VC<ONEVC~1> 2007-03-18 11:10:31 0 d-------- C:\Documents and Settings\Dawid\Dane aplikacji\BitDownload<BITDOW~1> 2007-03-12 22:40:42 0 d-------- C:\Documents and Settings\Dawid\Dane aplikacji\COWON 2007-03-12 00:28:13 0 d-------- C:\Program Files\Opera 2007-03-11 22:44:32 0 d-------- C:\Program Files\DaemonTools_WhenUSave_Installer<DAEMON~2> 2007-03-11 22:44:05 0 d-------- C:\Program Files\DAEMON Tools<DAEMON~1> 2007-03-11 22:19:35 0 d-------- C:\Program Files\SHOUTcast<SHOUTC~1> 2007-03-09 00:01:43 0 d-------- C:\Program Files\Winamp 2007-03-04 22:53:56 0 d-------- C:\Program Files\Total Video Converter<TOTALV~1> 2007-03-04 22:40:10 0 d-------- C:\Program Files\Common Files\SWF Studio<SWFSTU~1> 2007-03-04 22:40:02 0 d-------- C:\Program Files\Riva 2007-03-04 19:07:29 0 d-------- C:\Program Files\YouTube Video Downloader<YOUTUB~1> 2007-02-28 23:40:13 0 d-------- C:\Documents and Settings\Dawid\Dane aplikacji\SopCast 2007-02-28 23:32:47 0 d-------- C:\Program Files\SopCast 2007-02-23 19:41:05 0 d-------- C:\Program Files\Death Strike Global War on Terror<DEATHS~1> 2007-02-23 19:37:24 0 d---s---- C:\Documents and Settings\Dawid\Dane aplikacji\Microsoft<MICROS~1> 2007-02-23 19:34:30 0 d-------- C:\Program Files\Send File<SENDFI~1> 2007-02-23 19:18:14 0 d-------- C:\Documents and Settings\Dawid\Dane aplikacji\Folder Guard<FOLDER~1> 2007-02-23 00:07:13 0 d-------- C:\Documents and Settings\Dawid\Dane aplikacji\Real 2007-02-22 21:04:48 0 d-------- C:\Program Files\Stardock 2007-02-21 23:37:09 0 d-------- C:\Program Files\MIKSOFT 2007-02-18 21:12:43 0 d-------- C:\Program Files\AVI DivX MPEG to DVD Converter & Burner Pro<AVIDIV~1> 2007-02-15 11:29:49 0 d-------- C:\Documents and Settings\Dawid\Dane aplikacji\WNR 2007-02-13 01:09:32 0 d-------- C:\Program Files\ivo 2007-02-12 19:51:38 0 d-------- C:\Program Files\Vista Sidebar<VISTAS~1> 2007-02-12 19:49:42 0 d-------- C:\Documents and Settings\Dawid\Dane aplikacji\Styler 2007-02-12 19:46:47 0 d-------- C:\Program Files\VisualTooltip<VISUAL~1> 2007-02-12 19:46:47 0 d-------- C:\Program Files\Blaero Start Orb<BLAERO~1> 2007-02-12 19:46:46 0 d-------- C:\Documents and Settings\Dawid\Dane aplikacji\Stardock 2007-02-12 19:12:10 0 d-------- C:\Documents and Settings\Dawid\Dane aplikacji\Opera 2007-02-12 18:56:17 0 d-------- C:\Program Files\LClock 2007-02-12 17:32:57 0 d-------- C:\Documents and Settings\Dawid\Dane aplikacji\NetMedia Providers<NETMED~1> 2007-02-12 17:32:53 0 d-------- C:\Documents and Settings\Dawid\Dane aplikacji\Sony 2007-02-12 17:00:45 56 -r-hs---- C:\WINDOWS\System32\6E617C5480.sys<6E617C~1.SYS> 2007-02-12 13:55:56 0 d-------- C:\Program Files\Skype 2007-02-12 13:55:56 0 d-------- C:\Program Files\Common Files\Skype 2007-02-12 09:33:22 0 d-------- C:\Program Files\Vstplugins<VSTPLU~1> 2007-02-12 09:33:00 0 d-------- C:\Documents and Settings\Dawid\Dane aplikacji\Publish Providers<PUBLIS~1> 2007-02-12 09:28:33 0 d-------- C:\Program Files\Microsoft SQL Server<MI6841~1> 2007-02-11 16:36:37 1732 --a------ C:\WINDOWS\System32\sdbackup.reg 2007-02-07 16:13:12 208384 --a------ C:\WINDOWS\ADS.exe 2007-01-29 17:37:25 664 --a------ C:\WINDOWS\System32\d3d9caps.dat 2007-01-25 17:08:07 355486 --a------ C:\WINDOWS\System32\prfh0415.dat 2007-01-25 17:08:06 49492 --a------ C:\WINDOWS\System32\prfc0415.dat 2007-01-19 20:37:19 16896 --a------ C:\WINDOWS\System32\tftp.exe 2007-01-19 20:37:18 42496 --a------ C:\WINDOWS\System32\ftp.exe 2007-01-16 17:57:51 73728 --a------ C:\WINDOWS\System32\wzv.exe 2007-01-16 00:15:20 5 --ahs---- C:\WINDOWS\System32\dacfaa9_s.dll<DACFAA~1.DLL> 2007-01-15 19:32:07 689280 --a------ C:\WINDOWS\System32\aswBoot.exe 2007-01-15 19:23:20 90112 --a------ C:\WINDOWS\System32\AVASTSS.scr -- Registry Dump --------------------------------------------------------------- [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "Skype"="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized" "µTorrent"="\"C:\\Program Files\\uTorrent\\utorrent.exe\"" "Modeblue"="C:\\DOCUME~1\\Dawid\\DANEAP~1\\ONEVC~1\\seek heck.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe" "nwiz"="nwiz.exe /install" "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvCpl.dll,NvStartup" "Glass2k"="C:\\Documents and Settings\\Dawid\\Pulpit\\Glass2k.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI] "NoChange"="1" "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Start^Programy^Autostart^Adobe Gamma Loader.lnk] "path"="C:\\Documents and Settings\\All Users.WINDOWS\\Menu Start\\Programy\\Autostart\\Adobe Gamma Loader.lnk" "backup"="C:\\WINDOWS\\pss\\Adobe Gamma Loader.lnkCommon Startup" "location"="Common Startup" "command"="C:\\PROGRA~1\\COMMON~1\\Adobe\\CALIBR~1\\ADOBEG~1.EXE " "item"="Adobe Gamma Loader" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Start^Programy^Autostart^GetRight - Tray Icon.lnk] "path"="C:\\Documents and Settings\\All Users.WINDOWS\\Menu Start\\Programy\\Autostart\\GetRight - Tray Icon.lnk" "backup"="C:\\WINDOWS\\pss\\GetRight - Tray Icon.lnkCommon Startup" "location"="Common Startup" "command"="C:\\PROGRA~1\\GetRight\\getright.exe " "item"="GetRight - Tray Icon" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Start^Programy^Autostart^GoBack.lnk] "path"="C:\\Documents and Settings\\All Users.WINDOWS\\Menu Start\\Programy\\Autostart\\GoBack.lnk" "backup"="C:\\WINDOWS\\pss\\GoBack.lnkCommon Startup" "location"="Common Startup" "command"="C:\\PROGRA~1\\Roxio\\GoBack\\GBTray.exe " "item"="GoBack" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Start^Programy^Autostart^Microsoft Office.lnk] "path"="C:\\Documents and Settings\\All Users.WINDOWS\\Menu Start\\Programy\\Autostart\\Microsoft Office.lnk" "backup"="C:\\WINDOWS\\pss\\Microsoft Office.lnkCommon Startup" "location"="Common Startup" "command"="C:\\PROGRA~1\\MICROS~2\\Office\\OSA9.EXE -b -l" "item"="Microsoft Office" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Dawid^Menu Start^Programy^Autostart^Morpheus.lnk] "path"="C:\\Documents and Settings\\Dawid\\Menu Start\\Programy\\Autostart\\Morpheus.lnk" "backup"="C:\\WINDOWS\\pss\\Morpheus.lnkStartup" "location"="Startup" "command"="C:\\PROGRA~1\\Morpheus\\Morpheus.exe -min" "item"="Morpheus" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ADS] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="ADS" "hkey"="HKCU" "command"="C:\\Windows\\ADS.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Anti-Blaxx Manager] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Anti-Blaxx" "hkey"="HKLM" "command"="C:\\Program Files\\Anti-Blaxx\\Anti-Blaxx.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ares] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Ares" "hkey"="HKCU" "command"="\"C:\\Program Files\\Ares\\Ares.exe\" -h" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AudioDeck] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="ADeck" "hkey"="HKLM" "command"="C:\\Program Files\\VIAudioi\\SBADeck\\ADeck.exe 1" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="bittorrent" "hkey"="HKCU" "command"="\"C:\\Program Files\\BitTorrent\\bittorrent.exe\" --force_start_minimized" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Blaero Start Orb] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Blaero Start Orb" "hkey"="HKLM" "command"="C:\\Program Files\\Blaero Start Orb\\Blaero Start Orb.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="daemon" "hkey"="HKLM" "command"="\"C:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DentAudioAntiMail] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="joy kind" "hkey"="HKLM" "command"="C:\\Documents and Settings\\All Users.WINDOWS\\Dane aplikacji\\ToolDriveDentAudio\\joy kind.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Free Download Manager] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="fdm" "hkey"="HKCU" "command"="C:\\Program Files\\Free Download Manager\\fdm.exe -autorun" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoDClient] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="GoDClient" "hkey"="HKCU" "command"="\"C:\\Program Files\\GoDClient\\GoDClient.exe\" /tray" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Konnekt] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="konnekt" "hkey"="HKCU" "command"="\"C:\\Program Files\\Konnekt\\konnekt.exe\" /autostart" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LClock] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="LClock" "hkey"="HKLM" "command"="C:\\Program Files\\LClock\\LClock.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LiveUpdate Core Engine] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="LUCOMS" "hkey"="HKCU" "command"="LUCOMS.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Modeblue] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="seek heck" "hkey"="HKCU" "command"="C:\\DOCUME~1\\Dawid\\DANEAP~1\\ONEVC~1\\seek heck.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="msmsgs" "hkey"="HKCU" "command"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="NeroCheck" "hkey"="HKLM" "command"="C:\\WINDOWS\\system32\\NeroCheck.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="NvCpl" "hkey"="HKLM" "command"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvCpl.dll,NvStartup" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="NvMcTray" "hkey"="HKLM" "command"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvMcTray.dll,NvTaskbarInit" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="nwiz" "hkey"="HKLM" "command"="nwiz.exe /install" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Styler] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Styler" "hkey"="HKLM" "command"="C:\\Program Files\\Styler\\Styler.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="GoogleToolbarNotifier" "hkey"="HKCU" "command"="C:\\Program Files\\Google\\GoogleToolbarNotifier\\1.2.908.8472\\GoogleToolbarNotifier.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirusBurster] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="virusburster" "hkey"="HKLM" "command"="C:\\Program Files\\VirusBurster\\virusburster.exe /h" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Vista Sidebar] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="sidebar" "hkey"="HKLM" "command"="C:\\Program Files\\Vista Sidebar\\sidebar.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VisualTooltip] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="VisualToolTip" "hkey"="HKLM" "command"="C:\\Program Files\\VisualTooltip\\VisualToolTip.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="winampa" "hkey"="HKLM" "command"="C:\\Program Files\\Winamp\\winampa.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "appinit_dlls"="wbsys.dll" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{EDB0E980-90BD-11D4-8599-0008C7D3B6F8}"="Eudora's Shell Extension" [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE" [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0] Source REG_SZ http://www.stk.net.pl/phpBB2/templates/subSilver/images/logo_phpBB.gif HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ DnsCache\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 termsvcs REG_MULTI_SZ TermService\0\0 -- Hosts ----------------------------------------------------------------------- 127.0.0.1 abcsearch.com 127.0.0.1 admin.abcsearch.com 127.0.0.1 www3.abcsearch.com #[Browseraid] 127.0.0.1 www.abcsearch.com 127.0.0.1 abc517.net #[Trojan.Mitglieder.H] 127.0.0.1 acestats.com 127.0.0.1 www.acestats.com 127.0.0.1 actualnames.com #[Parasite.ActualNames] 127.0.0.1 www.actualnames.com 127.0.0.1 ad-up.com 4693 more entries in hosts file. -- End of ComboScan: finished at 2007-04-12 at 22:20:15 ------------------------

Kod: Zaznacz wszystko: ComboScan v20070306.20 run by Dawid on 2007-04-12 at 22:19:35 Supplementary logfile - please post this as an attachment with your post. -------------------------------------------------------------------------------- -- System Information ---------------------------------------------------------- Microsoft Windows XP Professional (build 2600) Architecture: X86; Language: Polish CPU 0: Intel(R) Celeron(R) CPU 3.06GHz Percentage of Memory in Use: 59% Physical Memory (total/avail): 511.48 MiB / 208.94 MiB Pagefile Memory (total/avail): 866.2 MiB / 552.44 MiB Virtual Memory (total/avail): 2047.88 MiB / 1985.75 MiB A: is Removable (Unformatted) C: is Fixed (NTFS) - 18.07 GiB total, 7.58 GiB free. D: is Fixed (NTFS) - 29.31 GiB total, 6.75 GiB free. E: is Fixed (NTFS) - 29.31 GiB total, 25.79 GiB free. F: is CDROM (CDFS) G: is CDROM (No Media) -- Security Center ------------------------------------------------------------- AUOptions is disabled. AUState says computer has updates disabled. Windows Internal Firewall is enabled. -- Environment Variables ------------------------------------------------------- ALLUSERSPROFILE=C:\Documents and Settings\All Users.WINDOWS APPDATA=C:\Documents and Settings\Dawid\Dane aplikacji CommonProgramFiles=C:\Program Files\Common Files COMPUTERNAME=DAWID-3SOLRN8HX ComSpec=C:\WINDOWS\system32\cmd.exe HOMEDRIVE=C: HOMEPATH=\Documents and Settings\Dawid LOGONSERVER=\\DAWID-3SOLRN8HX NUMBER_OF_PROCESSORS=1 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Microsoft SQL Server\80\Tools\Binn\;;C:\PROGRA~1\COMMON~1\MUVEET~1\030625 PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH PROCESSOR_ARCHITECTURE=x86 PROCESSOR_IDENTIFIER=x86 Family 15 Model 4 Stepping 1, GenuineIntel PROCESSOR_LEVEL=15 PROCESSOR_REVISION=0401 ProgramFiles=C:\Program Files PROMPT=$P$G SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\DOCUME~1\Dawid\USTAWI~1\Temp TMP=C:\DOCUME~1\Dawid\USTAWI~1\Temp USERDOMAIN=DAWID-3SOLRN8HX USERNAME=Dawid USERPROFILE=C:\Documents and Settings\Dawid windir=C:\WINDOWS -- User Profiles --------------------------------------------------------------- Dawid [I](admin)[/I] -- Add/Remove Programs --------------------------------------------------------- --> C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL --> MsiExec.exe /X{E9F81423-211E-46B6-9AE0-38568BC5CF6F} --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf 18 WoS Across America --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{BF9BA346-27AA-4EE0-8333-FEA5400D2AA0} Adobe Flash Player 9 ActiveX --> C:\WINDOWS\System32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete Adobe Photoshop CS --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}\setup.exe" -l0x9 Adobe Reader 7.0.9 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70900000002} Adobe Shockwave Player --> C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log ALLPlayer V2.4 --> "C:\Program Files\MarBit\ALLPlayer\unins000.exe" ANNO 1503 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EBBB1DEF-8878-4CB8-BC0D-1196B30E7527}\Setup.exe" Anti-Blaxx 1.16 --> "C:\Program Files\Anti-Blaxx\unins000.exe" µTorrent --> "C:\Program Files\uTorrent\uninstall.exe" avast! Antivirus --> rundll32 C:\PROGRA~1\ALWILS~1\Avast4\Setup\setiface.dll,RunSetup BenVista PhotoZoom Pro 2.2 --> C:\Program Files\PhotoZoom Pro 2\Uninstall.exe CCleaner (remove only) --> "C:\Program Files\CCleaner\uninst.exe" CiD Help --> C:\DOCUME~1\Dawid\DANEAP~1\ONEVC~1\seek heck.exe -uninstall Crack - The Godfather --> D:\Program Files\Electronic Arts\The Godfather The Game\Uninst.exe /pid:{D31A3F3B-114F-4926-87A0-1AA5321D1BC7} /asd DivX --> C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC DivX Player --> C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER Dziobas Rar Player 0.007PL --> "C:\Program Files\Dziobas Rar Player\unins000.exe" Earth 2160 --> D:\PROGRA~1\REALIT~1\EARTH2~1\Uninstall_Earth2160.exe /U D:\PROGRA~1\REALIT~1\EARTH2~1\install.log Eudora --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F330B6FB-C1E3-468A-821C-3D891DEFCE12}\setup.exe" -l0x9 FIFA 07 --> D:\Program Files\EA SPORTS\FIFA 07\EAUninstall.exe FIFA 07 Pełne Spolszczenie, 1.0 --> "d:\Program Files\Ea Sports\Fifa 07\unins000.exe" GTA San Andreas --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}\SETUP.EXE" -l0x9 -removeonly Harry Potter and the Goblet of Fire™ --> D:\Program Files\Electronic Arts\Harry Potter and the Goblet of Fire\EAUninstall.exe HijackThis 1.99.1 --> C:\Documents and Settings\Dawid\Moje dokumenty\Logi komputerowe\HijackThis.exe /uninstall J2SE Runtime Environment 5.0 Update 10 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100} K-Lite Codec Pack 2.82 Full --> "C:\Program Files\K-Lite Codec Pack\unins000.exe" Konnekt --> C:\Program Files\Konnekt\Uninst.exe Microsoft Office 2000 Premium --> MsiExec.exe /I{00000409-78E1-11D2-B60F-006097C998E7} Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR) --> MsiExec.exe /X{E09B48B5-E141-427A-AB0C-D3605127224A} muvee autoProducer 3.5 magicMoments_CE - Leadtek --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D05B3985-3B58-418A-BB37-B43F04A56FA1}\Setup.exe" -l0x9 muvee autoProducer 5.0 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{30161931-E14F-42B5-BFC0-1AB5ADE4459B}\Setup.exe" -l0x9 Need for Speed™ Carbon --> D:\Program Files\Electronic Arts\Need for Speed Carbon\EAUninstall.exe Nero Suite --> C:\Program Files\Common Files\Ahead\Uninstall\setup.exe /uninstall NVIDIA Drivers --> C:\WINDOWS\System32\nvudisp.exe UninstallGUI Nvidia Omega Drivers Setup Files --> C:\WINDOWS\iun6002.exe "C:\Program Files\Nvidia Omega Drivers\v1.6693\Omega.ini" Opera 9.10 --> MsiExec.exe /X{750B9AD1-4C63-4143-94C5-6FB304199BAD} Real Alternative 1.51 --> "C:\Program Files\Real Alternative\unins000.exe" SHOUTcast Source DSP 1.8.2 (remove only) --> C:\Program Files\Winamp\uninst-dsp.exe Skype 3.0 --> "C:\Program Files\Skype\Phone\unins000.exe" Skype Plugin Manager --> MsiExec.exe /I{3D5E5C0A-5B36-4F98-99A7-287F7DBDCE03} Sony Ericsson File Manager --> MsiExec.exe /X{6D6F494C-1E36-415F-9D90-82CF0560AC84} Sony Media Manager 2.0 --> MsiExec.exe /X{C589B6DE-F7BF-4E22-8524-53E115EF6AB4} Sony Vegas 6.0 --> MsiExec.exe /X{5FCE0BF9-A1AA-4FA3-A28C-F62431CD52C4} SopCore 1.1.1 --> C:\Program Files\SopCast\uninst.exe Sp5 --> MsiExec.exe /I{560F47F7-EB23-44B1-AAFC-667F1CD8FE5C} Sp5Intl --> MsiExec.exe /I{FD4B33E1-24AE-4535-AA7B-162B30FB57CD} Sp5TTInt --> MsiExec.exe /I{E415C943-37E5-473F-8BAE-043C56734124} SpCommon --> MsiExec.exe /I{6C3959C6-943E-44B3-BAAD-570B04B134E5} SpPhones --> MsiExec.exe /I{4DFF1415-4C29-44A8-BFD4-2BCE249C4991} The Godfather™ The Game --> D:\Program Files\Electronic Arts\The Godfather The Game\EAUninstall.exe Total Video Converter 3.01 --> "C:\Program Files\Total Video Converter\unins000.exe" Unlocker 1.8.5 --> C:\Program Files\Unlocker\uninst.exe VIA Platform Device Manager --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{20D4A895-748C-4D88-871C-FDB1695B0169} VIA Vinyl Audio Codecs Driver Setup Program --> RunDll32.exe UnAudioNT.dll,UninstallAudio C:\WINDOWS\IsUninst.exe -y-f"C:\PROGRA~1\VIAudioi\SBASetup\Uninst.isu" Video ActiveX Object 2.07 --> C:\Program Files\Video ActiveX Object\uninst.exe Vista Transformation Pack 6.0 --> C:\WINDOWS\System32\vimc.exe Winamp (remove only) --> "C:\Program Files\Winamp\UninstWA.exe" WinRAR archiver --> C:\Program Files\WinRAR\uninstall.exe XP Vista Pack --> MsiExec.exe /I{60A523CC-DD44-4EEA-AD5F-0F57B2D17D22} XviD MPEG-4 Video Codec --> "C:\Program Files\XviD\unins000.exe" YouTube Video Downloader V1.1.1 --> "C:\Program Files\YouTube Video Downloader\unins000.exe" -- End of ComboScan: finished at 2007-04-12 at 22:20:15 ------------------------

**Posty:** 18165 · przez **wojtas** 12 Kwi 2007, 22:42

skasuj wpis:

O3 - Toolbar: (no name) - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - (no file)

Pobierz i uruchom narzędzie : The Avenger
http://swandog46.geekstogo.com/avenger.zip
Zaznacz opcję Input script manually i kliknij na Lupkę z prawej strony. W okienku, które się otworzy wklejasz:

Drivers to unload:

bjobunop
mdgkqnrr

Folders to delete:

C:\DOCUME~1\Dawid\DANEAP~1\ONEVC~1

otwierasz notatnik i wklejasz:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"Modeblue"=-

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ADS]

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Modeblue]

w notatniku u góry>>>plik zapisz jako>>>Zmien rozszerzenie z TXT na Wszystkie pliki *.* >>> Zapisz pod nazwą FIX.REG

Klikasz dwa razy na powstały plik fix i dodajesz go do rejestru....

wejdź na dysk na którym masz windows zainstalowany, tam w katalog WINDOWS -> system 32 -> drivers -> etc
i tam za pomocą notatnika otwórz plik hosts

Jeśli są jakieś wpisy pod

# 102.54.94.97 rhino.acme.com # serwer źródłowy
# 38.25.63.10 x.acme.com # komputer kliencki x

127.0.0.1 localhost

to usun tylko zostaw te pokazane przeze mnie wyzej

Klikasz Done, a następnie zielone światełko i zgadzasz się na restart klikając OK.

Kasujesz ręcznie z dysku plik: C:\Avenger\backup.zip i wklejasz na forum raport: C:\avenger.txt + combo

niechciane reklamy cid

niechciane reklamy cid

Kto jest na forum