Proszę o spr. loga (internet "muli", komp się zawiesza)

**Posty:** 1 · przez **sickboy** 07 Gru 2008, 20:20

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 18:36:25, on 2008-12-07 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\GigaByte\VGA Utility Manager\G-VGA.exe C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\Brother\ControlCenter3\brccMCtl.exe D:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe C:\Program Files\Java\jre6\bin\jusched.exe D:\Program Files\COMODO\COMODO Internet Security\cfp.exe C:\WINDOWS\system32\ctfmon.exe D:\Program Files\Adobe\Acrobat 7.0\Acrobat\Acrobat_sl.exe C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe D:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe D:\Program Files\Raxco\PerfectDisk2008\PD91Agent.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe D:\Program Files\Mozilla Firefox\firefox.exe D:\Program Files\Trend Micro\HijackThis\HijackThis.exe D:\Program Files\eMule\emule.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: flashget2 urlcatch - {1F364306-AA45-47B5-9F9D-39A8B94E7EF1} - D:\Program Files\FlashGet Network\FlashGet universal\ComDlls\bhoCATCH.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [VGAUtil] C:\Program Files\GigaByte\VGA Utility Manager\G-VGA.exe O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl06a\BrStDvPt.exe O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "D:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" O4 - HKLM\..\Run: [openvpn-gui] D:\Program Files\OpenVPN\bin\openvpn-gui.exe O4 - HKLM\..\Run: [OSSelectorReinstall] C:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [COMODO Internet Security] "D:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ? O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: &Download All by FlashGet - D:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm O8 - Extra context menu item: &Download by FlashGet - D:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm O8 - Extra context menu item: Convert link target to Adobe PDF - res://D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert link target to existing PDF - res://D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert selected links to Adobe PDF - res://D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert selected links to existing PDF - res://D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Convert selection to Adobe PDF - res://D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert selection to existing PDF - res://D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert to Adobe PDF - res://D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert to existing PDF - res://D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://D:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - D:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: OpenVPN Service (OpenVPNService) - Unknown owner - D:\Program Files\OpenVPN\bin\openvpnserv.exe O23 - Service: PD91Agent - Raxco Software, Inc. - D:\Program Files\Raxco\PerfectDisk2008\PD91Agent.exe O23 - Service: PD91Engine - Raxco Software, Inc. - D:\Program Files\Raxco\PerfectDisk2008\PD91Engine.exe -- End of file - 7764 bytes

Proszę o sprawdzenie powyższego loga. Problem polega jest następujący: internet przeraźliwie "muli" (mimo 1-megowego łącza). Według wszelkich stronek pokazujących rzeczywistą prędkośc łącza wszystko jest w porządku, niestety otwarcie byle stronki trwa po kilkadziesiąt sekund co doprowadza mnie do szału :3:

. Używam Mozilli oraz zestawu antywira i firewalla Comodo Internet Security.
Do tego dochodzi jeszcze przykra dolegliwośc, mojego kompa, ktora polega na tym, ze ni z gruchy ni z pietruchy, dostaje on zwisa, na ktorego pomaga wyłącznie reset :papryczka:

.
Barzdo proszę o wskazówki:)
Pozdrawiam!

Dorzucam do kompletu log z combofixa

Kod: Zaznacz wszystko: ComboFix 08-12-06.06 - matka 2008-12-08 11:04:50.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.903 [GMT 1:00] Uruchomiony z: c:\documents and settings\matka\Pulpit\ComboFix.exe * Utworzono nowy punkt przywracania . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\matka\Dane aplikacji\BITS c:\documents and settings\matka\Dane aplikacji\BITS\BITS.ini c:\documents and settings\matka\Dane aplikacji\BITS\DHTTable.dat c:\documents and settings\matka\Dane aplikacji\BITS\ProxyList.ini c:\documents and settings\matka\Dane aplikacji\BITS\UPnP.ini . ((((((((((((((((((((((((((((((((((((((( Sterowniki/Usługi ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_ISODRIVE -------\Service_ISODrive ((((((((((((((((((((((((( Pliki utworzone od 2008-11-08 do 2008-12-08 ))))))))))))))))))))))))))))))) . 2008-12-08 10:57 . 2008-12-08 10:59 <DIR> d-------- C:\32788R22FWJFW 2008-12-08 10:56 . 2008-12-08 10:57 <DIR> d-------- C:\32788R22FWJFW.5.tmp 2008-12-08 10:56 . 2008-12-08 10:56 <DIR> d-------- C:\32788R22FWJFW.4.tmp 2008-12-07 19:25 . 2008-12-07 19:31 <DIR> d-------- C:\32788R22FWJFW.3.tmp 2008-12-07 19:23 . 2008-12-07 19:25 <DIR> d-------- C:\32788R22FWJFW.2.tmp 2008-12-07 19:20 . 2008-12-07 19:23 <DIR> d-------- C:\32788R22FWJFW.1.tmp 2008-12-07 19:18 . 2008-12-07 19:20 <DIR> d-------- C:\32788R22FWJFW.0.tmp 2008-12-05 09:14 . 2008-12-08 11:09 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\_comodo_ 2008-12-02 21:26 . 2008-12-02 22:08 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\comodo 2008-12-02 21:26 . 2008-12-04 14:12 147,192 --a------ c:\windows\system32\guard32.dll 2008-12-02 21:26 . 2008-12-04 14:11 101,776 --a------ c:\windows\system32\drivers\cmdguard.sys 2008-12-02 21:26 . 2008-12-02 21:31 31,504 --a------ c:\windows\system32\drivers\cmdhlp.sys 2008-12-02 21:23 . 2008-12-03 23:04 69 --a------ c:\windows\NeroDigital.ini 2008-12-02 20:22 . 2008-12-02 20:22 <DIR> d-------- C:\ERDNT 2008-12-02 17:12 . 2008-12-02 17:12 410,976 --a------ c:\windows\system32\deploytk.dll 2008-11-13 12:27 . 2008-11-13 12:27 <DIR> d-------- C:\Programmi 2008-11-12 19:54 . 2008-11-14 18:31 <DIR> d-------- c:\program files\Common Files\Wise Installation Wizard 2008-11-12 14:08 . 2008-11-12 14:08 <DIR> d-------- c:\program files\Golden Software 2008-11-11 18:07 . 2004-07-09 08:43 364,544 --------- c:\windows\system32\TwnLib4.dll 2008-11-11 18:07 . 2005-09-01 11:03 127,488 --------- c:\windows\system32\drivers\imagesrv.sys 2008-11-11 18:07 . 2000-06-26 10:45 106,496 --a------ c:\windows\system32\TwnLib20.dll 2008-11-11 18:07 . 2005-09-01 11:03 5,888 --------- c:\windows\system32\drivers\imagedrv.sys 2008-11-11 18:06 . 2008-11-11 18:06 <DIR> d-------- c:\program files\Common Files\Ahead 2008-11-11 18:06 . 2004-07-26 16:16 1,568,768 --------- c:\windows\system32\ImagX7.dll 2008-11-11 18:06 . 2004-07-26 16:16 476,320 --------- c:\windows\system32\ImagXpr7.dll 2008-11-11 18:06 . 2004-07-26 16:16 471,040 --------- c:\windows\system32\ImagXRA7.dll 2008-11-11 18:06 . 2004-07-26 16:16 262,144 --------- c:\windows\system32\ImagXR7.dll 2008-11-11 18:06 . 2006-01-12 15:40 155,648 --a------ c:\windows\system32\NeroCheck.exe . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-12-08 10:13 23,524 ----a-w c:\windows\system32\drivers\GVTDrv.sys 2008-12-05 21:18 --------- d-----w c:\documents and settings\matka\Dane aplikacji\foobar2000 2008-12-02 20:27 81,984 ----a-w c:\windows\system32\bdod.bin 2008-12-02 19:10 --------- d-----w c:\program files\Java 2008-11-14 14:35 --------- d-----w c:\documents and settings\matka\Dane aplikacji\dvdcss 2008-11-12 19:21 --------- d-----w c:\documents and settings\matka\Dane aplikacji\AdobeUM 2008-11-12 18:28 --------- d-----w c:\program files\Common Files\Adobe 2008-11-10 15:25 --------- d--h--w c:\program files\InstallShield Installation Information 2008-11-07 12:12 --------- d-----w c:\documents and settings\matka\Dane aplikacji\vlc 2008-11-06 06:56 67,688 ----a-w c:\windows\system32\drivers\bcftdi.sys 2008-11-06 06:55 23,656 ----a-w c:\windows\system32\drivers\bcfilter.sys 2008-11-06 06:54 23,016 ----a-w c:\windows\system32\drivers\bc_tdi_f.sys 2008-11-06 06:54 18,664 ----a-w c:\windows\system32\drivers\bc_ngn.sys 2008-11-06 06:53 26,984 ----a-w c:\windows\system32\drivers\bc_ip_f.sys 2008-11-06 06:53 18,280 ----a-w c:\windows\system32\drivers\bc_prt_f.sys 2008-11-06 06:53 14,440 ----a-w c:\windows\system32\drivers\bc_pat_f.sys 2008-11-06 06:52 14,568 ----a-w c:\windows\system32\drivers\bc_hash_f.sys 2008-11-05 12:39 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\Raxco 2008-11-05 12:37 99,776 ----a-w c:\windows\system32\drivers\snapman.sys 2008-11-05 12:37 --------- d-----w c:\program files\Common Files\Acronis 2008-11-05 11:18 --------- d-----w c:\documents and settings\matka\Dane aplikacji\ScanSoft 2008-11-04 22:46 --------- d-----w c:\documents and settings\matka\Dane aplikacji\DeskSoft 2008-11-04 22:42 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\DeskSoft 2008-11-04 11:02 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\SecTaskMan 2008-10-31 11:21 --------- d-----w c:\program files\SystemRequirementsLab 2008-10-24 20:21 --------- d-----w c:\program files\Common Files\Softwin 2008-10-10 18:35 11,973 ----a-w c:\windows\system32\drivers\secdrv.sys 2008-09-11 04:51 266,240 ----a-w c:\windows\BCUnInstall.exe 2008-09-07 15:57 21,112 ----a-w c:\documents and settings\matka\Dane aplikacji\GDIPFONTCACHEV1.DAT . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-03 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-08-25 339968] "VGAUtil"="c:\program files\GigaByte\VGA Utility Manager\G-VGA.exe" [2004-09-17 552960] "SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 155648] "PaperPort PTD"="c:\program files\ScanSoft\PaperPort\pptd40nt.exe" [2005-03-17 57393] "IndexSearch"="c:\program files\ScanSoft\PaperPort\IndexSearch.exe" [2005-03-17 40960] "BrMfcWnd"="c:\program files\Brother\Brmfcmon\BrMfcWnd.exe" [2006-03-28 622592] "SetDefPrt"="c:\program files\Brother\Brmfl06a\BrStDvPt.exe" [2005-01-26 49152] "ControlCenter3"="c:\program files\Brother\ControlCenter3\brctrcen.exe" [2006-04-10 61440] "ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 45056] "Acrobat Assistant 7.0"="d:\program files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" [2008-04-23 483328] "openvpn-gui"="d:\program files\OpenVPN\bin\openvpn-gui.exe" [2005-04-21 98816] "OSSelectorReinstall"="c:\program files\Common Files\Acronis\Acronis Disk Director\oss_reinstall.exe" [2006-04-12 1261475] "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2006-01-12 155648] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-02 136600] "COMODO Internet Security"="d:\program files\COMODO\COMODO Internet Security\cfp.exe" [2008-12-04 1797880] "SoundMan"="SOUNDMAN.EXE" [2005-07-26 c:\windows\SOUNDMAN.EXE] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2004-08-03 15360] c:\documents and settings\All Users\Menu Start\Programy\Autostart\ Adobe Acrobat Speed Launcher.lnk - c:\windows\Installer\{AC76BA86-1033-F400-7760-000000000002}\SC_Acrobat.exe [2008-09-07 25214] Microsoft Office.lnk - d:\program files\Microsoft Office\Office10\OSA.EXE [2001-02-13 83360] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"= c:\windows\system32\guard32.dll [HKEY_LOCAL_MACHINE\software\microsoft\security center] "UpdatesDisableNotify"=dword:00000001 "AntiVirusOverride"=dword:00000001 "FirewallOverride"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "d:\\Program Files\\eMule\\emule.exe"= "d:\\Program Files\\FlashGet Network\\FlashGet universal\\FlashGet.exe"= "c:\\Program Files\\GigaByte\\VGA Utility Manager\\G-vga.exe"= "d:\\Program Files\\Gadu-Gadu\\gg.exe"= R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2008-12-02 101776] R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2008-12-02 31504] R2 PD91Agent;PD91Agent;"d:\program files\Raxco\PerfectDisk2008\PD91Agent.exe" [2008-04-16 689416] R3 GVTDrv;GVTDrv;c:\windows\system32\drivers\GVTDrv.sys [2008-09-04 23524] S3 ASUSHWIO;ASUSHWIO;\??\c:\windows\system32\drivers\ASUSHWIO.sys [] S3 PD91Engine;PD91Engine;"d:\program files\Raxco\PerfectDisk2008\PD91Engine.exe" [2008-04-16 894216] S3 tap0801;TAP-Win32 Adapter V8;c:\windows\system32\DRIVERS\tap0801.sys [2004-06-24 23552] [COLOR=RED]NETSVCS REQUIRES REPAIRS - current entries shown[/COLOR] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs . . ------- Skan uzupełniający ------- . uInternet Connection Wizard,ShellNext = iexplore IE: &Download All by FlashGet - d:\program files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm IE: &Download by FlashGet - d:\program files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm IE: Convert link target to Adobe PDF - d:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert link target to existing PDF - d:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert selected links to Adobe PDF - d:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert selected links to existing PDF - d:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Convert selection to Adobe PDF - d:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert selection to existing PDF - d:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert to Adobe PDF - d:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert to existing PDF - d:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: E&ksport do programu Microsoft Excel - d:\progra~1\MICROS~1\Office10\EXCEL.EXE/3000 FireFox -: Profile - c:\documents and settings\matka\Dane aplikacji\Mozilla\Firefox\Profiles\m4m3s2nv.default\ FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.pl/ FF -: plugin - c:\program files\Java\jre6\bin\new_plugin\npdeploytk.dll FF -: plugin - c:\program files\Java\jre6\bin\new_plugin\npjp2.dll FF -: plugin - d:\program files\Adobe\Acrobat 7.0\Acrobat\browser\nppdf32.dll FF -: plugin - d:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll FF -: plugin - d:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll FF -: plugin - d:\program files\Mozilla Firefox\plugins\npdeploytk.dll FF -: plugin - d:\program files\Mozilla Firefox\plugins\npnul32.dll FF -: plugin - d:\program files\Mozilla Firefox\plugins\nppdf32.dll FF -: plugin - d:\program files\Mozilla Firefox\plugins\nppl3260.dll FF -: plugin - d:\program files\Mozilla Firefox\plugins\nprpjplug.dll FF -: plugin - d:\program files\VideoLAN\VLC\npvlc.dll . . ------- Skojarzenia plików ------- . inifile=d:\program files\Boxer Text Editor\b.exe "%1" txtfile=d:\program files\Boxer Text Editor\b.exe "%1" . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-08 11:13:55 Windows 5.1.2600 Dodatek Service Pack 2 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- - - - - - - - > 'winlogon.exe'(568) c:\windows\system32\Ati2evxx.dll - - - - - - - > 'explorer.exe'(888) c:\windows\system32\msi.dll . ------------------------ Pozostałe uruchomione procesy ------------------------ . c:\windows\system32\ati2evxx.exe d:\program files\COMODO\COMODO Internet Security\cmdagent.exe c:\windows\system32\ati2evxx.exe c:\program files\Java\jre6\bin\jqs.exe c:\program files\Common Files\Microsoft Shared\VS7Debug\mdm.exe c:\program files\Brother\ControlCenter3\BrccMCtl.exe c:\program files\Brother\Brmfcmon\BrMfcMon.exe d:\program files\Adobe\Acrobat 7.0\Acrobat\Acrobat_sl.exe c:\windows\system32\wuauclt.exe.wusetup.186062.bakxsia10B65} . ************************************************************************** . Czas ukończenia: 2008-12-08 11:16:34 - komputer został uruchomiony ponownie ComboFix-quarantined-files.txt 2008-12-08 10:16:26 Przed: 10 148 876 288 bajtów wolnych Po: 10,871,136,256 bajtów wolnych WindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn 210 --- E O F --- 2008-09-08 07:50:30

Edit: log z combofixa

sickboy

**Posty:** 18165 · przez **wojtas** 08 Gru 2008, 00:21

prosze log dac w tagi code

**Posty:** 300 · przez **sgsman** 08 Gru 2008, 15:54

Widzę log dodany, bym proponował dorzucić jeszcze log z combofixa.