w netstat mam przynajmniej (minimum i to zaraz po właczeniu) 7 połaczen z myspace.com (dokładnie tak pisze w netstat) na roznych portach. Rowniez w kerio jest tego sporo zarówno TCP jak i UDP (w netstat tylko TCP). Mam podejrzenia ze troszke moze to zapychac łacze
.
Wczesniej nie miałem tego w netstat (sprawdzane z 2 miesiace temu nie było) a teraz jest - sprawdzilem kompa antyvirem, hijackiem, CWShredderem, ad-aware - nic nie znalazło. Ale te połaczenia sa i nie mam pojecia co to jest i skad sie wzieło
Załączam równiez log i prosze o pomoc
- Kod: Zaznacz wszystko
Logfile of HijackThis v1.99.1
Scan saved at 15:40:45, on 2006-11-12
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\System32\Ati2evxx.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
G:\WinXP\Programy\Avast4\aswUpdSv.exe
G:\WinXP\Programy\Avast4\ashServ.exe
E:\WINDOWS\System32\drivers\CDAC11BA.EXE
E:\WINDOWS\System32\CTsvcCDA.exe
D:\Win XP\Programy\Kerio\Personal Firewall 4\kpf4ss.exe
E:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
E:\WINDOWS\System32\MsPMSPSv.exe
D:\Win XP\Programy\PerfectDisk\PDSched.exe
D:\Win XP\Programy\Kerio\Personal Firewall 4\kpf4gui.exe
G:\WinXP\Programy\Avast4\ashWebSv.exe
G:\WinXP\Programy\Avast4\ashMaiSv.exe
E:\WINDOWS\system32\Ati2evxx.exe
D:\Win XP\Programy\Kerio\Personal Firewall 4\kpf4gui.exe
E:\WINDOWS\Explorer.EXE
E:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
E:\windows\hffext\hffsrv.exe
G:\WinXP\Programy\Avast4\ashDisp.exe
D:\Win XP\Programy\MemTurbo\memturbo.exe
E:\Program Files\PLANET WL-8314\WLANMON.exe
D:\Win XP\Programy\ATITool\ATITool.exe
G:\WinXP\Programy\Konnekt\konnekt.exe
G:\WinXP\Programy\Mozilla Firefox\firefox.exe
D:\Win XP\Programy\Mozilla Thunderbird\thunderbird.exe
E:\WINDOWS\System32\cmd.exe
F:\Go!zilla Downloads\różne\CWShredder\hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:6711
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O1 - Hosts: 212.77.100.101
O1 - Hosts: 212.77.100.101 http://rapidshare.de*
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Win XP\Programy\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RepliGoIEHelperCtl Class - {91DE4477-9CDC-4806-9BCB-28A963988E94} - G:\WinXP\Programy\RepliGo\RepliGoIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - E:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &RepliGo - {81F4066B-F330-4872-8094-3E9FBCCEC8C1} - G:\WinXP\Programy\RepliGo\RepliGoIEBar.dll
O4 - HKLM\..\Run: [WheelMouse] E:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [hffsrv] e:\windows\hffext\hffsrv.exe
O4 - HKLM\..\Run: [avast!] G:\WinXP\Programy\Avast4\ashDisp.exe
O4 - Startup: ATITool.lnk = D:\Win XP\Programy\ATITool\ATITool.exe
O4 - Global Startup: MemTurbo.lnk = D:\Win XP\Programy\MemTurbo\memturbo.exe
O4 - Global Startup: WL-8314 Configuration Utility.lnk = ?
O8 - Extra context menu item: Download with GetRight - D:\Win XP\Programy\GetRight 6.0\GRdownload.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://D:\WINXP~1\Programy\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open PDF in Word - res://G:\WinXP\Programy\PDF Converter\IEShellExt.dll /100
O8 - Extra context menu item: Open with GetRight Browser - D:\Win XP\Programy\GetRight 6.0\GRbrowse.htm
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\WINXP~1\Programy\MICROS~1\OFFICE11\REFIEBAR.DLL
O17 - HKLM\System\CCS\Services\Tcpip\..\{9A3D13DF-824D-48F5-BA6D-12CB8C252ABE}: NameServer = 192.168.9.1
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - G:\WinXP\Programy\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - E:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - G:\WinXP\Programy\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - G:\WinXP\Programy\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - G:\WinXP\Programy\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: C-DillaCdaC11BA - Macrovision - E:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - E:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - E:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - E:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - D:\Win XP\Programy\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: PDEngine - Raxco Software, Inc. - D:\Win XP\Programy\PerfectDisk\PDEngine.exe
O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - D:\Win XP\Programy\PerfectDisk\PDSched.exe
O23 - Service: RadClock - Unknown owner - E:\WINDOWS\system32\RadClock.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - E:\Program Files\CyberLink\Shared Files\RichVideo.exe (file missing)
