Podgląd zdarzen i uprawnienia

[kepa416]

Witam, mój problem to :
1. Podczas próby zapisania ustawień w okienku "msconfig" wyskakuje :

2.Wpisy z Podglądu zdarzeń

Kod: Zaznacz wszystko

Menedżer połączeń usługi MS DTC nie może zarejestrować protokołów TCP/IP lub UDP/IP do użytku z RPC.  Upewnij się, że poprawnie skonfigurowano RPC.  Szczegóły dotyczące błędu:d:\xpsp\com\com1x\dtc\dtc\cm\src\iomgrsrv.cpp:1911, Pid: 3100
No Callstack,
CmdLine: "C:\WINDOWS\system32\mmc.exe" "C:\WINDOWS\system32\Com\comexp.msc"


Kod: Zaznacz wszystko

Komunikat: RPC raised an exception with a return code RPC_S_INVALIDA_ARG..


Kod: Zaznacz wszystko

Nie można otworzyć usługi przekierowania. Dane wydajności przekierowania nie zostaną zwrócone. Zwrócony kod stanu to dane DWORD 0.

Kod: Zaznacz wszystko

Nie można otworzyć usługi Server. Dane wydajności usługi Server nie zostaną zwrócone. Zwrócony kod stanu to dane DWORD 0.

Problem z usunięciem NOD'a

Kod: Zaznacz wszystko

Produkt: ESET NOD32 Antivirus -- Instalator napotkał na niespodziewany błąd podczas instalacji tego składnika. To może oznaczać problem z tym składnikiem. Kod błędu to 2753. Argumenty: eplgOutlook.dll, ,

[MUTOPOMPKA]

Masz najprawdododobniej jakiegoś syfka, który stara Ci utrudnić życie. Musisz sprawdzić pod kątem syfów system (logi z combo i HJ).

[kepa416]

HJ napewno czysty bo jest stale nadzorowany przeze mnie.xd

Kod: Zaznacz wszystko

ComboFix 09-03-29.04 - kepa416 2009-03-30 21:37:56.4 - NTFSx86
Uruchomiony z: f:\moje\Programy\system\bezpiecz\ComboFix.exe
.

(((((((((((((((((((((((((   Pliki utworzone od 2009-02-28 do 2009-03-30  )))))))))))))))))))))))))))))))
.

2009-03-30 20:35 . 2009-03-30 20:36   <DIR>   d--------   c:\documents and settings\kepa416\Dane aplikacji\Thinstall
2009-03-30 17:21 . 2009-03-30 17:21   294   --a------   c:\windows\ODBC.INI
2009-03-30 16:53 . 2009-03-30 21:36   3,831   --a------   c:\windows\system32\oodbs.lor
2009-03-27 07:50 . 2009-03-29 20:31   <DIR>   d--------   c:\documents and settings\kepa416\Dane aplikacji\Xfire
2009-03-21 00:26 . 2009-03-21 00:26   41,808   --a------   c:\windows\system32\xfcodec.dll
2009-03-19 23:19 . 2009-03-19 23:19   <DIR>   d--------   c:\program files\Common Files\Wise Installation Wizard
2009-03-19 16:38 . 2009-03-19 16:39   <DIR>   d--------   c:\program files\ATI Technologies
2009-03-19 16:38 . 2009-02-25 16:15   593,920   ---------   c:\windows\system32\ati2sgag.exe
2009-03-19 16:37 . 2009-03-19 16:37   <DIR>   d--------   C:\ATI
2009-03-18 18:55 . 2009-03-18 18:55   <DIR>   d--------   c:\program files\Alwil Software
2009-03-18 17:51 . 2006-01-10 10:50   24,576   -ra------   c:\windows\system32\AsIO.dll
2009-03-18 17:43 . 2009-03-18 17:43   <DIR>   d--------   c:\program files\xp-AntiSpy
2009-03-13 22:27 . 2009-03-29 23:12   189,072   --a------   c:\windows\system32\PnkBstrB.xtr
2009-03-13 22:02 . 2009-03-29 22:24   138,920   --a------   c:\windows\system32\drivers\PnkBstrK.sys
2009-03-13 22:01 . 2009-03-29 23:12   189,072   --a------   c:\windows\system32\PnkBstrB.exe
2009-03-13 22:01 . 2009-03-17 16:56   75,064   --a------   c:\windows\system32\PnkBstrA.exe
2009-03-02 18:26 . 2008-04-14 22:51   82,432   ---h---t-   c:\windows\system32\2fecb23b.dll
2009-03-02 18:26 . 2008-04-14 22:51   82,432   ---h---t-   c:\windows\system32\10e61be.dll
2009-03-02 18:25 . 2008-04-14 22:51   82,432   ---h---t-   c:\windows\system32\dd6a210.dll
2009-03-02 18:25 . 2008-04-14 22:51   82,432   ---h---t-   c:\windows\system32\acad380.dll
2009-02-28 04:10 . 2009-03-30 21:38   <DIR>   d--h-----   c:\documents and settings\Administrator\Ustawienia lokalne
2009-02-28 04:10 . 2008-12-29 18:01   <DIR>   d--------   c:\documents and settings\Administrator\Ulubione
2009-02-28 04:10 . 2008-12-29 17:13   <DIR>   d--h-----   c:\documents and settings\Administrator\Szablony
2009-02-28 04:10 . 2009-03-04 19:42   <DIR>   d--------   c:\documents and settings\Administrator\Pulpit
2009-02-28 04:10 . 2008-12-29 18:01   <DIR>   d--------   c:\documents and settings\Administrator\Moje dokumenty
2009-02-28 04:10 . 2008-12-29 18:01   <DIR>   dr-------   c:\documents and settings\Administrator\Menu Start
2009-02-28 04:10 . 2009-03-30 16:47   <DIR>   dr-h-----   c:\documents and settings\Administrator\Dane aplikacji
2009-02-28 04:10 . 2009-02-28 04:10   <DIR>   d--------   c:\documents and settings\Administrator
2009-02-27 15:46 . 2008-10-16 15:06   268,648   --a------   c:\windows\system32\mucltui.dll
2009-02-27 15:46 . 2008-10-16 15:06   27,496   --a------   c:\windows\system32\mucltui.dll.mui
2009-02-27 08:07 . 2009-03-18 17:43   361,600   --a--c---   c:\windows\system32\dllcache\tcpip.sys
2009-02-26 09:50 . 2009-02-26 09:50   <DIR>   d--------   c:\documents and settings\kepa416\Dane aplikacji\id Software
2009-02-26 00:58 . 2009-02-26 00:58   3,565,568   --a------   c:\windows\system32\drivers\ati2mtag.sys
2009-02-26 00:58 . 2009-02-26 00:58   3,565,568   --a--c---   c:\windows\system32\dllcache\ati2mtag.sys
2009-02-25 23:42 . 2009-02-25 23:42   442,368   --a------   c:\windows\system32\ATIDEMGX.dll
2009-02-25 23:41 . 2009-02-25 23:41   325,120   --a--c---   c:\windows\system32\dllcache\ati2dvag.dll
2009-02-25 23:41 . 2009-02-25 23:41   325,120   --a------   c:\windows\system32\ati2dvag.dll
2009-02-25 23:30 . 2009-02-25 23:30   11,841,536   --a------   c:\windows\system32\atioglxx.dll
2009-02-25 23:30 . 2009-02-25 23:30   204,800   --a------   c:\windows\system32\atipdlxx.dll
2009-02-25 23:29 . 2009-02-25 23:29   155,648   --a------   c:\windows\system32\Oemdspif.dll
2009-02-25 23:29 . 2009-02-25 23:29   155,648   --a------   c:\windows\system32\ati2evxx.dll
2009-02-25 23:29 . 2009-02-25 23:29   43,520   --a------   c:\windows\system32\ati2edxx.dll
2009-02-25 23:29 . 2009-02-25 23:29   26,112   --a------   c:\windows\system32\Ati2mdxx.exe
2009-02-25 23:27 . 2009-02-25 23:27   602,112   --a------   c:\windows\system32\ati2evxx.exe
2009-02-25 23:26 . 2009-02-25 23:26   53,248   --a------   c:\windows\system32\ATIDDC.DLL
2009-02-25 23:16 . 2009-02-25 23:16   3,817,984   --a--c---   c:\windows\system32\dllcache\ati3duag.dll
2009-02-25 23:16 . 2009-02-25 23:16   3,817,984   --a------   c:\windows\system32\ati3duag.dll
2009-02-25 23:09 . 2009-02-25 23:09   307,200   --a------   c:\windows\system32\atiiiexx.dll
2009-02-25 22:59 . 2009-02-25 22:59   2,670,080   --a--c---   c:\windows\system32\dllcache\ativvaxx.dll
2009-02-25 22:59 . 2009-02-25 22:59   2,670,080   --a------   c:\windows\system32\ativvaxx.dll
2009-02-25 22:59 . 2009-02-25 22:59   1,352,960   --a------   c:\windows\system32\oodag.exe
2009-02-25 22:59 . 2009-02-25 22:59   1,316,096   --a------   c:\windows\system32\ooscrsav.scr
2009-02-25 22:59 . 2009-02-25 22:59   730,368   --a------   c:\windows\system32\oodsvct.exe
2009-02-25 22:58 . 2009-02-25 22:58   3,107,788   --a------   c:\windows\system32\ativva5x.dat
2009-02-25 22:58 . 2009-02-25 22:58   2,553,088   --a------   c:\windows\system32\oodtray.exe
2009-02-25 22:58 . 2009-02-25 22:58   887,724   --a------   c:\windows\system32\ativva6x.dat
2009-02-25 22:58 . 2009-03-30 21:36   151,824   --a------   c:\windows\system32\ativvaxx.cap
2009-02-25 22:57 . 2009-02-25 22:57   194,816   --a------   c:\windows\system32\oodbs.exe
2009-02-25 22:53 . 2009-02-25 22:53   951,552   --a------   c:\windows\system32\oodtrrs.dll
2009-02-25 22:53 . 2009-02-25 22:53   541,952   --a------   c:\windows\system32\oodssrs.dll
2009-02-25 22:53 . 2009-02-25 22:53   9,984   --a------   c:\windows\system32\oodbsrs.dll
2009-02-25 22:53 . 2009-02-25 22:53   8,448   --a------   c:\windows\system32\OODAGRS.DLL
2009-02-25 22:52 . 2009-02-25 22:52   15,616   --a------   c:\windows\system32\OODAGMG.DLL
2009-02-25 22:44 . 2009-02-25 22:44   49,664   --a------   c:\windows\system32\amdpcom32.dll
2009-02-25 22:40 . 2009-02-25 22:40   475,136   --a------   c:\windows\system32\atikvmag.dll
2009-02-25 22:38 . 2009-02-25 22:38   126,976   --a------   c:\windows\system32\atiadlxx.dll
2009-02-25 22:38 . 2009-02-25 22:38   17,408   --a------   c:\windows\system32\atitvo32.dll
2009-02-25 22:37 . 2009-02-25 22:37   53,248   --a------   c:\windows\system32\drivers\ati2erec.dll
2009-02-25 22:35 . 2009-02-25 22:35   290,816   --a------   c:\windows\system32\atiok3x2.dll
2009-02-25 22:32 . 2009-02-25 22:32   626,688   --a--c---   c:\windows\system32\dllcache\ati2cqag.dll
2009-02-25 22:32 . 2009-02-25 22:32   626,688   --a------   c:\windows\system32\ati2cqag.dll
2009-02-25 22:32 . 2009-02-25 22:32   45,056   --a------   c:\windows\system32\aticalrt.dll
2009-02-25 22:32 . 2009-02-25 22:32   45,056   --a------   c:\windows\system32\aticalcl.dll
2009-02-25 22:30 . 2009-02-25 22:30   3,227,648   --a------   c:\windows\system32\aticaldd.dll
2009-02-23 21:03 . 2009-02-23 21:03   15,104   --a------   c:\windows\system32\ootmapi.dll
2009-02-22 01:08 . 2009-02-22 01:08   32   --a------   c:\documents and settings\All Users\Dane aplikacji\ezsid.dat
2009-02-19 09:34 . 2009-02-27 15:10   25,992   --a------   c:\windows\system32\pgdfgsvc.exe
2009-02-15 22:52 . 2009-02-15 22:52   <DIR>   d--------   c:\program files\Common Files\HP
2009-02-15 22:51 . 2009-02-15 22:52   <DIR>   d--------   c:\program files\Hewlett-Packard
2009-02-15 22:48 . 2009-02-15 22:52   <DIR>   d--------   c:\program files\HP
2009-02-15 22:47 . 2009-02-15 22:56   120,250   --a------   c:\windows\hpoins11.dat
2009-02-15 22:39 . 2009-02-15 22:39   <DIR>   d--------   c:\documents and settings\kepa416\Dane aplikacji\HP
2009-02-15 22:39 . 2009-02-15 22:39   221   --a------   c:\windows\NCLogConfig.ini
2009-02-06 15:23 . 2009-02-06 15:23   106,208   ---------   c:\windows\system32\drivers\ehdrv.sys
2009-02-02 22:06 . 2009-02-28 04:10   <DIR>   d--------   c:\windows\ERUNT
2009-02-01 15:55 . 2009-02-01 15:55   <DIR>   d--------   c:\documents and settings\kepa416\Dane aplikacji\HEXelon

.
((((((((((((((((((((((((((((((((((((((((   Sekcja Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-30 19:26   ---------   d-----w   c:\program files\Mozilla Thunderbird
2009-03-30 14:30   ---------   d-----w   c:\documents and settings\kepa416\Dane aplikacji\uTorrent
2009-03-29 10:27   ---------   d--h--w   c:\program files\InstallShield Installation Information
2009-03-20 16:54   ---------   d-----w   c:\documents and settings\kepa416\Dane aplikacji\gtk-2.0
2009-03-19 14:40   ---------   d-----w   c:\documents and settings\All Users\Dane aplikacji\ATI
2009-03-19 06:02   ---------   d-----w   c:\program files\Common Files\Adobe
2009-03-18 15:43   361,600   ----a-w   c:\windows\system32\drivers\tcpip.sys
2009-03-17 14:36   22,328   ----a-w   c:\documents and settings\kepa416\Dane aplikacji\PnkBstrK.sys
2009-03-13 23:08   ---------   d-----w   c:\documents and settings\kepa416\Dane aplikacji\teamspeak2
2009-02-27 14:36   ---------   d-----w   c:\documents and settings\All Users\Dane aplikacji\Microsoft Help
2009-02-26 07:48   ---------   d-----w   c:\documents and settings\All Users\Dane aplikacji\id Software
2009-02-17 17:34   ---------   d-----w   c:\documents and settings\kepa416\Dane aplikacji\BESTplayer
2009-02-16 18:52   ---------   d-----w   c:\documents and settings\kepa416\Dane aplikacji\Ventrilo
2009-02-15 20:32   ---------   d-----w   c:\documents and settings\All Users\Dane aplikacji\HP
2009-02-01 11:45   ---------   d-----w   c:\program files\Common Files\InstallShield
2009-02-01 11:45   ---------   d-----w   c:\documents and settings\kepa416\Dane aplikacji\InstallShield
2009-02-01 11:45   ---------   d-----w   c:\documents and settings\All Users\Dane aplikacji\InstallShield
2009-01-24 23:42   107,888   ----a-w   c:\windows\system32\CmdLineExt.dll
2009-01-17 02:30   219,648   ----a-w   c:\windows\system32\uxtheme.dll
2008-12-29 22:59   315,392   ----a-w   c:\windows\HideWin.exe
2008-12-29 15:37   410,984   ----a-w   c:\windows\system32\deploytk.dll
.

------- Sigcheck -------

2009-03-18 17:43  361600  eec9730f9cc03819111d90e6caa2dcc9   c:\windows\system32\dllcache\tcpip.sys
2009-03-18 17:43  361600  eec9730f9cc03819111d90e6caa2dcc9   c:\windows\system32\drivers\tcpip.sys
.
(((((((((((((((((((((((((((((((((((((   Wpisy startowe rejestru   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AQQ"="d:\progra~1\WapSter\WAPSTE~1\AQQ.exe" [2009-03-27 5089280]
"AutoConnect"="d:\program files\AutoConnect\AutoConnect.exe" [2004-08-28 295424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DeathAdder"="c:\program files\Razer\DeathAdder\razerhid.exe" [2008-09-05 159744]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
"AdslTaskBar"="stmctrl.dll" [2006-09-25 c:\windows\system32\stmctrl.dll]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SynchronousMachineGroupPolicy"= 1 (0x1)
"SynchronousUserGroupPolicy"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoStrCmpLogical"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMBalloonTip"= 0 (0x0)
"MemCheckBoxInRunDlg"= 0 (0x0)
"NoResolveTrack"= 0 (0x0)
"NoWelcomeScreen"= 0 (0x0)
"NoRecentDocsNetHood"= 0 (0x0)
"ForceClassicControlPanel"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.divxa32"= msaud32_divx.acm
"VIDC.XFR1"= xfcodec.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute   REG_MULTI_SZ      autocheck autochk *\[u]0[/u]OODBS

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"d:\\Program Files\\Xfire\\Xfire.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-03-18 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-03-18 20560]
R3 AtiHdmiService;ATI Function Driver for HDMI Service;c:\windows\system32\drivers\AtiHdmi.sys [2008-12-29 93696]
R3 DAdderFltr;DeathAdder Mouse;c:\windows\system32\drivers\dadder.sys [2008-12-29 22784]
R3 Stmatm;ATM/ADSL miniport;c:\windows\system32\drivers\stmatm.sys [2009-01-16 57600]
R3 TaurusUsb;ADSL Modem USB Service;c:\windows\system32\drivers\torususb.sys [2009-01-16 685693]
S3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:\windows\system32\drivers\l151x86.sys [2008-12-29 39424]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"
.
.
------- Skan uzupełniający -------
.
uStart Page = about:blank
TCP: {25C4F181-B943-45D3-9F21-9B52A91F1DD7} = 208.67.222.222 208.67.220.220
FF - ProfilePath - c:\documents and settings\kepa416\Dane aplikacji\Mozilla\Firefox\Profiles\21tsvm33.default\
FF - plugin: c:\documents and settings\All Users\Dane aplikacji\id Software\QuakeLive\npquakezero.dll
.

**************************************************************************

catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-30 21:38:33
Windows 5.1.2600 Dodatek Service Pack 3 NTFS

skanowanie ukrytych procesów ... 

skanowanie ukrytych wpisów autostartu ...

skanowanie ukrytych plików ... 

skanowanie pomyślnie ukończone
ukryte pliki: 0

**************************************************************************
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG11.00.00.01WORKSTATION"="C0B103DA1191D092CFC9C5CF48AA2CD520401EC54E45521F38983433696D7450138CD3B0DB4DBFEB94AD9D6E64AE4BBE0F4F3A8EC8D31F5C5B3FAA3BF5964360FDD9A0222FDEE28CDF5F672B4B6B02AE14A4618F84DE3C5AAB0F9039D6FEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC7933A6A0AC4980AC7933A9C6AECB7A5D1407C038D530D6EB345293796FFA1F732C39B3DC5A6B02F004739F0D1CA45D139B728FC841B6026F8686D7CC693EA35336487B177F414958CD7C933AC7949D79DC7E7E3CB151903FD7BEEB0C075E3D776FD5A9855C81A506AB1BCEFEE20A48B7E0DAAA72F88771B36C900BA7168E6FF0C4B756FE848E8B42E127663FE7BBD871E08242771400CD6A103724F4BB873474390C4B43DFD3E07A443FA1BEA2E144EC2633ACBAD56348A2A331D82BEB83775ADFB209F12A3A7DC23E43FCAAB33B711591EF030F63E2F3401CC1806773421CA063CE4412F135B1CFCE59A91010093B79157D922C372F594B016F25AA6F08F5E78048618B9C393E7B076A8C6182116F4D37675D2D1F7FF3EEED868457D41D4E7409CDFE2DE0BDDA438D23BE74A41D5266167B19923B0FB3FB1515123769CB62B0E14CEA27CB40AE4A9C750A84697A1C3F5F4B2F3E041D7CE5B86F74F747E4E2A7037AA90E3CC15BD48295713093FBF5F8552CBB79416A274432AC06275DBAF50CFB4FF1DDE4C56F4EA27DA8F8BE75FE54503A12EC113F7FD36DA6D43B6FA6B1B06C86AF73505573C4F169194655424A393C53B72BE4E5C5736A7CA48B928326100B21818ED7FDDFE77BDBDC61193EDFB19798E3A404AB2C29BE14EAD5343054462063BC552CCEA38FDB18C67A9ECC396EF4F007338665DC1A9111D13910122E158854E751505EA0B547295BA1CE52C7417D07C011DA68F3141F6138BA3B8E20E036403FEF9D43ACF683DB524EE5396B9FEA47685D438F7F8538B1B1411B9305B1AFB930833E1C9196EAC0185CF4EFFDA60D64859C5539058441F7051CEB8EAF360B12603F34080E7A6A2DCC8761E549944755D6B4FA497DC53169A9793A75E3BEF862A73FD02CD32A07B9C674E3928C4C8FD4CC727024D1A89501516E6BBD5A3F39070F7E3C3188D654C40DA709EE7A54F3DE8E8449B6E42B107F5D7334E4C051209F58DFF3C4C650FD6EDB0D31783AD711B7F3FDEA6E8971D0E5E365A0E9B8329811F5A8C5169B0D429C25F21131E6269BE38CD60F3E88C3A3FC30830FCF56431F83908057DA0B2773788B0AB19E8F315AAE176A439D1D0D64CFC072319FA307456282779E4A095C76ED6AEAEF4BB79128A68BF8E806775E02AD48BB10639B282FDEDBFDE8A2808E47AF4B0FFC43D500769C932437753BEA01A8AB4A842C3174986B606854244F437332F0D45D"
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------

- - - - - - - > 'winlogon.exe'(548)
c:\windows\system32\Ati2evxx.dll
.
Czas ukończenia: 2009-03-30 21:39:16
ComboFix-quarantined-files.txt  2009-03-30 19:39:14

Przed: 13,775,020,032 bajtów wolnych
Po: 13,820,928,000 bajtów wolnych

WindowsXP-KB310994-SP2-Home-BootDisk-PLK.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

200   --- E O F ---   2009-02-27 14:04:12


[marcin19]

HJ napewno czysty bo jest stale nadzorowany przeze mnie.xd

Daj dla pewności

[kepa416]

Kod: Zaznacz wszystko

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:16:59, on 2009-04-01
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Razer\DeathAdder\razerhid.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
D:\PROGRA~1\WapSter\WAPSTE~1\AQQ.exe
D:\Program Files\AutoConnect\AutoConnect.exe
C:\Program Files\Razer\DeathAdder\razerofa.exe
D:\Program Files\Winamp\winamp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
F:\MOJE\Programy\system\bezpiecz\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [DeathAdder] C:\Program Files\Razer\DeathAdder\razerhid.exe
O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [AQQ] D:\PROGRA~1\WapSter\WAPSTE~1\AQQ.exe
O4 - HKCU\..\Run: [AutoConnect] D:\Program Files\AutoConnect\AutoConnect.exe
O4 - HKCU\..\Run: [RemoveIT Pro v7Ent] C:\Program Files\InCode Solutions\RemoveIT Pro v7 Enterprise\removeit.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{25C4F181-B943-45D3-9F21-9B52A91F1DD7}: NameServer = 208.67.222.222 208.67.220.220
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Microsoft Office Groove Audit Service - Unknown owner - C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

--
End of file - 3964 bytes