prośba o sprawdzenie logów

[RyBsOn]

Witam od kilku dni dzieje sie cos dziwnego z moim komputerem mianowicie niektore programy nie chca sie wlaczyc wiec jesli ktos moze prosze o sprawdzenie logow

Kod: Zaznacz wszystko

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:27:55, on 2007-10-26
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\Sygate\SPF\Smc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx (file missing)
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\Smc.exe -startgui
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\Smc.exe

--
End of file - 2971 bytes


[wojtas]

czy tak poprosyu nie chca sie wlaczyc? czy jakis blad?

daj loga z combofixa

[RyBsOn]

Wyskakuj blad a oto logi z combofixa

Kod: Zaznacz wszystko

ComboFix 07-10-26.4 - RyBsOn 2007-10-26 16:14:00.1 - NTFSx86
Running from: C:\Documents and Settings\RyBsOn\Pulpit\ComboFix.exe
* Created a new restore point
.

(((((((((((((((((((((((((   Files Created from 2007-09-26 to 2007-10-26  )))))))))))))))))))))))))))))))
.

2007-10-26 16:13   57,856   --a------   C:\WINDOWS\NirCmd.exe
2007-10-26 15:43   <DIR>   d--------   C:\Program Files\C-Media 3D Audio
2007-10-26 15:42   5,824   --a------   C:\WINDOWS\system32\drivers\ASUSHWIO.SYS
2007-10-26 08:13   <DIR>   d--------   C:\Documents and Settings\TaTa\Dane aplikacji\Talkback
2007-10-26 08:12   <DIR>   d--h-----   C:\Documents and Settings\TaTa\Ustawienia lokalne
2007-10-26 08:12   <DIR>   dr-------   C:\Documents and Settings\TaTa\Ulubione
2007-10-26 08:12   <DIR>   d--h-----   C:\Documents and Settings\TaTa\Szablony
2007-10-26 08:12   <DIR>   d--------   C:\Documents and Settings\TaTa\Pulpit
2007-10-26 08:12   <DIR>   dr-------   C:\Documents and Settings\TaTa\Moje dokumenty
2007-10-26 08:12   <DIR>   dr-------   C:\Documents and Settings\TaTa\Menu Start
2007-10-26 08:12   <DIR>   dr-h-----   C:\Documents and Settings\TaTa\Dane aplikacji
2007-10-25 22:26   <DIR>   d--------   C:\Program Files\Sygate
2007-10-25 22:26   84,112   --a------   C:\WINDOWS\system32\drivers\Teefer.sys
2007-10-25 22:26   81,920   --a------   C:\WINDOWS\system32\setaid.dll
2007-10-25 22:26   77,824   --a------   C:\WINDOWS\system32\SSSensor.dll
2007-10-25 22:26   46,352   --a------   C:\WINDOWS\system32\fwsvpn.dll
2007-10-25 22:26   13,824   --a------   C:\WINDOWS\system32\drivers\wpsdrvnt.sys
2007-10-25 22:26   8,023   --a------   C:\WINDOWS\system32\drivers\wg3n.sys
2007-10-25 21:44   <DIR>   d--------   C:\Program Files\Lavasoft
2007-10-25 21:44   <DIR>   d--------   C:\Documents and Settings\RyBsOn\Dane aplikacji\Lavasoft
2007-10-25 21:20   <DIR>   d--------   C:\Program Files\Trend Micro
2007-10-25 21:20   <DIR>   d--------   C:\Program Files\Java
2007-10-25 21:12   671   --a------   C:\WINDOWS\mozver.dat
2007-10-25 18:25   <DIR>   d--------   C:\Documents and Settings\RyBsOn\Dane aplikacji\Gadu-Gadu

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-10-25 20:26   ---------   d--h--w   C:\Program Files\InstallShield Installation Information
2007-10-25 15:17   ---------   d-----w   C:\Program Files\Alwil Software
2007-10-25 15:01   ---------   d-----w   C:\Program Files\ATI Technologies
2007-10-25 14:51   ---------   d-----w   C:\Program Files\Common Files\InstallShield
2007-10-25 14:19   ---------   d-----w   C:\Program Files\Gadu-Gadu
2007-10-25 14:13   ---------   d-----w   C:\Documents and Settings\RyBsOn\Dane aplikacji\Talkback
2007-10-25 14:11   ---------   d-----w   C:\Program Files\NGOATIOD173
2007-10-25 14:05   ---------   d-----w   C:\Program Files\microsoft frontpage
2007-10-25 14:04   ---------   d-----w   C:\Program Files\Usługi online
2007-09-06 10:09   801,144   ----a-w   C:\WINDOWS\system32\aswBoot.exe
2007-09-06 10:05   94,416   ----a-w   C:\WINDOWS\system32\drivers\aswmon2.sys
2007-09-06 10:05   92,848   ----a-w   C:\WINDOWS\system32\drivers\aswmon.sys
2007-09-06 10:03   23,152   ----a-w   C:\WINDOWS\system32\drivers\aswRdr.sys
2007-09-06 10:02   42,912   ----a-w   C:\WINDOWS\system32\drivers\aswTdi.sys
2007-09-06 10:00   95,608   ----a-w   C:\WINDOWS\system32\AvastSS.scr
2007-09-06 10:00   26,624   ----a-w   C:\WINDOWS\system32\drivers\aavmker4.sys
2001-11-23 04:08   712,704   ----a-w   C:\WINDOWS\inf\OTHER\AUDIO3D.DLL
.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-11-22 21:05]
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 16:41]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-09-06 12:06]
"SmcService"="C:\PROGRA~1\Sygate\SPF\Smc.exe" [2002-01-16 11:43]
"Cmaudio"="cmicnfg.cpl" []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\ctfmon.exe" [2001-10-26 19:29]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2001-08-02 07:14]
"Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-07-09 09:39]

R2 SVKP;SVKP;\??\C:\WINDOWS\System32\SVKP.sys

*Newly Created Service* - CATCHME
.
**************************************************************************

catchme 0.3.1232 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-26 16:16:47
Windows 5.1.2600  NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-10-26 16:17:20
.
   --- E O F ---


[wojtas]

Wyskakuj blad

a jaki mozesz dac wiecej szczegolow bo w logu nic nie widac

[RyBsOn]

Dokladnie takie cosik :

Kod: Zaznacz wszystko

Error while unpacking program, code LP5. Please report to author.

[wojtas]

jakie to programy? czy przeinstalowanie ich nie pomaga ? bo nie wiem gdzie szukac przyczyny...

[RyBsOn]

Jest to gra Helbreath, program p2m moorhunt oraz panel sterowania ATI,a przeinstalowanie nie pomaga.

[wojtas]

looknij tu:

http://forum.helbreath.org/index.php?topic=10731.msg60221