proszę o sprawdzenie log-a coś zamula kompa??

**Posty:** 59 · przez **folken** 12 Cze 2007, 09:09

juz nie wiem co sie dzieje z tym kompem w końcu sie zasyfił chyba, bo muli aż mi słabo a kiedys tak ładnie śmigał, teraz każda rzecz otwiera sie ze sporym opóznieniem prosze o sprawdzenie loga

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 08:45:28, on 2007-06-12 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16441) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe E:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\F-Secure\Common\FSM32.EXE E:\Program Files\D-Link\Air USB Utility\AirCFG.exe C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe E:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe C:\WINDOWS\system32\ctfmon.exe E:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\ServiceWrapper-7681197.exe C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE C:\Program Files\F-Secure\Common\FSMA32.EXE C:\Program Files\F-Secure\Anti-Virus\fssm32.exe C:\WINDOWS\system32\PSIService.exe C:\Program Files\F-Secure\Common\FSMB32.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\F-Secure\Common\FCH32.EXE C:\WINDOWS\ehome\mcrdsvc.exe C:\Program Files\F-Secure\Common\FAMEH32.EXE C:\Program Files\F-Secure\Anti-Virus\fsqh.exe C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe C:\Program Files\F-Secure\Anti-Virus\fsrw.exe C:\WINDOWS\system32\dllhost.exe C:\Program Files\F-Secure\Common\FNRB32.EXE C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe C:\Program Files\F-Secure\Common\FIH32.EXE C:\Program Files\F-Secure\Anti-Virus\fsav32.exe C:\PROGRA~1\F-Secure\Anti-Spyware\fsaw.exe C:\Program Files\F-Secure\FSGUI\fsguidll.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\Explorer.EXE E:\stary komp\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://moya.toya.net.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 F0 - system.ini: Shell=Explorer.exe c:\windows\system32\system32 O1 - Hosts: 127.255.255.255 serial.alcohol-soft.com O1 - Hosts: 127.255.255.255 www.alcohol-soft.com O1 - Hosts: 127.255.255.255 images.alcohol-soft.com O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - E:\Program Files\BitComet\tools\BitCometBHO_1.1.3.28.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - E:\PROGRA~1\FlashGet\jccatch.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - E:\PROGRA~1\FlashGet\fgiebar.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW O4 - HKLM\..\Run: [D-Link Air USB Utility] E:\Program Files\D-Link\Air USB Utility\AirCFG.exe O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [PCSuiteTrayApplication] E:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [PcSync] E:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm O8 - Extra context menu item: Download All by FlashGet - E:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: Download all links using BitComet - res://E:\Program Files\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: Download all videos using BitComet - res://E:\Program Files\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: Download link using &BitComet - res://E:\Program Files\BitComet\BitComet.exe/AddLink.htm O8 - Extra context menu item: Download using FlashGet - E:\Program Files\FlashGet\jc_link.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\PROGRA~1\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\PROGRA~1\FlashGet\flashget.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O10 - Unknown file in Winsock LSP: c:\program files\f-secure\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure\fsps\program\fslsp.dll O11 - Options group: [INTERNATIONAL] International* O16 - DPF: {81E688E8-36A4-4FEF-B70B-8B0A1C5C1308} (WebLauncherX Control) - http://www.abra-meble.pl/cadprojekt/launcher.cab O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} - http://217.113.232.11/activex/AxisCamControl.cab O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab O18 - Protocol: wpmsg - {2E0AC5A0-3597-11D6-B3ED-0001021DC1C3} - C:\Program Files\Spik\url_wpmsg.dll O20 - Winlogon Notify: MCPClient - C:\PROGRA~1\COMMON~1\Stardock\mcpstub.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\ServiceWrapper-7681197.exe O23 - Service: Boingo Wireless Engine - Unknown owner - C:\Program Files\Boingo\Boingo Wireless Software\WENGINE2\BWEngine.exe O23 - Service: Boingo WMonitor - Boingo Wireless, Inc. - C:\Program Files\Boingo\Boingo Wireless Software\WENGINE2\WMonitor.exe O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing) O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - E:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe

**Posty:** 18165 · przez **wojtas** 12 Cze 2007, 16:23

skasuj:

F0 - system.ini: Shell=Explorer.exe c:\windows\system32\system32

daj loga:

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

**Posty:** 59 · przez **folken** 12 Cze 2007, 23:32

Kod: Zaznacz wszystko: ComboFix 07-06-13 - E:\stary komp\ComboFix.exe "ntt" - 2007-06-12 23:04:34 - Service Pack 2 NTFS [i] ADS removed - system32: deleted 12 bytes in 1 streams. [/i] ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) C:\WINDOWS\install.exe C:\WINDOWS\system32\drivers\npf.sys C:\WINDOWS\system32\installer.exe C:\WINDOWS\system32\packet.dll C:\WINDOWS\system32\pthreadVC.dll C:\WINDOWS\system32\wanpacket.dll C:\WINDOWS\system32\wpcap.dll ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) -------\LEGACY_NM -------\LEGACY_NPF -------\nm -------\NPF ((((((((((((((((((((((((( Files Created from 2007-05-12 to 2007-06-12 ))))))))))))))))))))))))))))))) 2007-06-12 23:03 49,152 --a------ C:\WINDOWS\nircmd.exe 2007-06-03 23:43 <DIR> d-------- C:\Program Files\WinPcap 2007-06-01 20:43 <DIR> d-------- C:\DOCUME~1\ntt\APPLIC~1\Nokia Multimedia Player 2007-06-01 11:13 <DIR> d-------- C:\DOCUME~1\ntt\Phone Browser 2007-06-01 11:13 <DIR> d-------- C:\DOCUME~1\ntt\APPLIC~1\DataLayer 2007-06-01 11:12 <DIR> d-------- C:\DOCUME~1\ntt\APPLIC~1\Nokia 2007-06-01 11:08 <DIR> d-------- C:\Program Files\DIFX 2007-06-01 11:07 8,704 --a------ C:\WINDOWS\system32\drivers\nmwcdc.sys 2007-06-01 11:07 50,688 --a------ C:\WINDOWS\system32\nmwcdcls.dll 2007-06-01 11:07 4,608 --a------ C:\WINDOWS\system32\nmwcdlog.dll 2007-06-01 11:07 30,720 --a------ C:\WINDOWS\system32\nmwcdcocls.dll 2007-06-01 11:07 13,312 --a------ C:\WINDOWS\system32\drivers\nmwcdcm.sys 2007-06-01 11:07 13,312 --a------ C:\WINDOWS\system32\drivers\nmwcdcj.sys 2007-06-01 11:07 127,488 --a------ C:\WINDOWS\system32\drivers\nmwcd.sys 2007-06-01 11:07 <DIR> d-------- C:\Program Files\Nokia 2007-06-01 11:07 <DIR> d-------- C:\Program Files\Common Files\Nokia 2007-06-01 11:07 <DIR> d-------- C:\DOCUME~1\ntt\APPLIC~1\PC Suite 2007-06-01 11:07 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite 2007-06-01 11:06 <DIR> d-------- C:\Program Files\Common Files\PCSuite 2007-06-01 11:05 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations 2007-06-01 00:23 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE 2007-06-01 00:23 <DIR> d-------- C:\Program Files\CACE Technologies 2007-05-31 23:57 <DIR> d-------- C:\Program Files\Cain 2007-05-24 20:47 <DIR> d-------- C:\Program Files\Boingo 2007-05-24 20:47 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\WENGINE2 2007-05-24 11:45 <DIR> d-------- C:\DOCUME~1\ntt\APPLIC~1\Ethereal 2007-05-23 23:45 23,600 --a------ C:\WINDOWS\system32\drivers\TVICHW32.SYS 2007-05-23 09:26 57,407 --a------ C:\WINDOWS\system32\ANICtl.dll 2007-05-23 09:26 208,896 --a------ C:\WINDOWS\system32\wlanapi.dll 2007-05-23 09:26 192,512 --a------ C:\WINDOWS\system32\aIPH.dll 2007-05-23 09:26 118,784 --a------ C:\WINDOWS\system32\WlanApp.dll 2007-05-23 09:25 557,056 --a------ C:\WINDOWS\system32\ANIWZCS2.dll 2007-05-23 09:25 49,152 --a------ C:\WINDOWS\system32\AQCKGen.dll 2007-05-23 09:25 36,864 --a------ C:\WINDOWS\system32\ANIOApi.dll 2007-05-23 09:25 28,205 --a------ C:\WINDOWS\system32\ANIO.sys 2007-05-23 09:25 11,904 --a------ C:\WINDOWS\system32\anio4.sys 2007-05-23 09:25 1,163,337 --a------ C:\WINDOWS\system32\odSupp_M.dll 2007-05-23 09:25 <DIR> d-------- C:\Program Files\ANI 2007-05-22 21:16 283,648 --a------ C:\WINDOWS\uninst.exe 2007-05-21 23:13 <DIR> d-------- C:\DOCUME~1\ntt\APPLIC~1\BinarySense 2007-05-21 13:34 <DIR> d-------- C:\DOCUME~1\ntt\APPLIC~1\Talkback 2007-05-19 11:31 <DIR> d-------- C:\DOCUME~1\ntt\APPLIC~1\Hamachi 2007-05-19 11:30 26,056 --a------ C:\WINDOWS\system32\drivers\hamachi.sys (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-06-12 12:48:30 -------- d-----w C:\DOCUME~1\ntt\APPLIC~1\Azureus 2007-06-09 07:30:43 -------- d-----w C:\DOCUME~1\ntt\APPLIC~1\Corel 2007-06-09 07:30:26 88 --sh--r C:\WINDOWS\system32\E9D358A023.sys 2007-06-09 07:30:26 2,828 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys 2007-05-30 20:26:18 -------- d-----w C:\DOCUME~1\ntt\APPLIC~1\Vso 2007-05-23 21:45:06 4,601 -c--a-w C:\WINDOWS\mozver.dat 2007-05-23 07:26:21 -------- d--h--w C:\Program Files\InstallShield Installation Information 2007-05-11 07:57:00 -------- d-----w C:\Program Files\MSXML 4.0 2007-05-10 12:56:51 -------- d-----w C:\Program Files\Common Files\Corel 2007-04-29 10:07:39 -------- d-----w C:\DOCUME~1\ntt\APPLIC~1\Google 2007-04-29 10:06:31 -------- d-----w C:\Program Files\Google 2007-04-18 16:12:23 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll 2007-04-13 21:12:38 2,560 -c--a-w C:\WINDOWS\system32\BitCometRes.dll 2007-03-28 18:13:04 118,842 ------r C:\WINDOWS\bwUnin-6.3.2.116-7681197L.exe 2007-03-17 13:43:01 292,864 ----a-w C:\WINDOWS\system32\winsrv.dll ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2005-09-24 06:12] {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}=E:\Program Files\BitComet\tools\BitCometBHO_1.1.3.28.dll [2007-03-29 16:31] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll [2005-11-10 13:22] {A5366673-E8CA-11D3-9CD9-0090271D075B}=E:\PROGRA~1\FlashGet\jccatch.dll [2002-01-16 20:12] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "F-Secure Manager"="C:\Program Files\F-Secure\Common\FSM32.exe" [2005-10-26 03:51] "F-Secure TNB"="C:\Program Files\F-Secure\TNB\TNBUtil.exe" [2004-05-27 10:57] "D-Link Air USB Utility"="E:\Program Files\D-Link\Air USB Utility\AirCFG.exe" [2004-05-25 18:09] "ANIWZCS2Service"="C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2004-04-14 11:54] "PCSuiteTrayApplication"="E:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2006-06-15 12:36] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 14:00] "PcSync"="E:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2006-06-27 16:21] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles "InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme "RunStartupScriptSync"=0 (0x0) "SynchronousMachineGroupPolicy"=0 (0x0) "SynchronousUserGroupPolicy"=0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "MemCheckBoxInRunDlg"=0 (0x0) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoLowDiskSpaceChecks"=1 (0x1) "MemCheckBoxInRunDlg"=0 (0x0) "NoResolveSearch"=1 (0x1) "NoResolveTrack"=1 (0x1) "NoRecentDocsNetHood"=0 (0x0) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] "{F5DF91F9-15E9-416B-A7C3-7519B11ECBFC}"="C:\PROGRA~1\COMMON~1\stardock\MCPCore.dll" [2005-05-10 14:31] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\MCPClient] C:\PROGRA~1\COMMON~1\Stardock\mcpstub.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "nwiz"=nwiz.exe /install HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - netsvcs UxTuneUp ************************************************************************** catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net Rootkit scan 2007-06-12 23:08:09 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** Completion time: 2007-06-12 23:09:44 - machine was rebooted C:\ComboFix-quarantined-files.txt ... 2007-06-12 23:09 --- E O F ---

**Posty:** 18165 · przez **wojtas** 13 Cze 2007, 14:51

C:\WINDOWS\bwUnin-6.3.2.116-7681197L.exe

ten plik ^^ przeskanuj tutaj;

http://virusscan.jotti.org/
http://www.virustotal.com/

i daj raporty

**Posty:** 59 · przez **folken** 13 Cze 2007, 23:41

scan ze strony http://virusscan.jotti.org/

Kod: Zaznacz wszystko: Scanner results Scan taken on 13 Jun 2007 21:08:37 (GMT) A-Squared Found nothing AntiVir Found nothing ArcaVir Found nothing Avast Found nothing AVG Antivirus Found nothing BitDefender Found nothing ClamAV Found nothing Dr.Web Found nothing F-Prot Antivirus Found nothing F-Secure Anti-Virus Found nothing Fortinet Found nothing Kaspersky Anti-Virus Found nothing NOD32 Found nothing Norman Virus Control Found nothing Panda Antivirus Found nothing Rising Antivirus Found nothing VirusBuster Found nothing VBA32 Found nothing

scan ze strony http://www.virustotal.com/

Kod: Zaznacz wszystko: Complete scanning result of "bwUnin-6.3.2.116-7681197L.exe", received in VirusTotal at 06.13.2007, 23:10:06 (CET). Antivirus Version Update Result AhnLab-V3 2007.6.12.2 06.13.2007 no virus found AntiVir 7.4.0.32 06.13.2007 no virus found Authentium 4.93.8 06.13.2007 no virus found Avast 4.7.997.0 06.13.2007 no virus found AVG 7.5.0.467 06.13.2007 no virus found BitDefender 7.2 06.13.2007 no virus found CAT-QuickHeal 9.00 06.13.2007 no virus found ClamAV devel-20070416 06.13.2007 no virus found DrWeb 4.33 06.13.2007 no virus found eSafe 7.0.15.0 06.13.2007 no virus found eTrust-Vet 30.7.3715 06.13.2007 no virus found Ewido 4.0 06.13.2007 no virus found FileAdvisor 1 06.13.2007 No threat detected Fortinet 2.85.0.0 06.13.2007 no virus found F-Prot 4.3.2.48 06.13.2007 no virus found F-Secure 6.70.13030.0 06.13.2007 no virus found Ikarus T3.1.1.8 06.13.2007 no virus found Kaspersky 4.0.2.24 06.13.2007 no virus found McAfee 5052 06.13.2007 no virus found Microsoft 1.2503 06.13.2007 no virus found NOD32v2 2328 06.13.2007 no virus found Norman 5.80.02 06.13.2007 no virus found Panda 9.0.0.4 06.13.2007 no virus found Prevx1 V2 06.13.2007 no virus found Sophos 4.18.0 06.12.2007 no virus found Sunbelt 2.2.907.0 06.09.2007 no virus found Symantec 10 06.13.2007 no virus found TheHacker 6.1.6.132 06.11.2007 no virus found VBA32 3.12.0.1 06.13.2007 no virus found VirusBuster 4.3.23:9 06.13.2007 no virus found Webwasher-Gateway 6.0.1 06.13.2007 no virus found Aditional Information File size: 118842 bytes MD5: 2ac7235893ecded1a87434dd552869c0 SHA1: 39ca10a9553576b4beea9599ae5d909faf0a90d3 Bit9 info: http://fileadvisor.bit9.com/services/extinfo.aspx?md5=2ac7235893ecded1a87434dd552869c0

**Posty:** 18165 · przez **wojtas** 14 Cze 2007, 13:18

czyli czysto juz masz

**Posty:** 59 · przez **folken** 14 Cze 2007, 20:23

ok dzięki! komp przyspieszył zaraz po wykasowaniu tego pierwszego wpisu co mówiłeś ale po restarcie znowu to samo no trudno dzięki

**Posty:** 4 · przez **Dale** 14 Cze 2007, 21:33

Witam. Żeby nie tworzyć nowego tematu w tej samej sprawie dam logi tutaj.
Niby system działa normalnie, ale explorer żre więcej niż zawsze pamięci, odpalenie już 2 programów ostro zamula kompa. A w Nero DVD nagrywa się 40minut na 8x. Wcześniej tak nie było. A to logi:

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 21:11:05, on 2007-06-14 Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\HPZipm12.exe C:\WINDOWS\System32\PnkBstrA.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZONELABS\vsmon.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe C:\Program Files\Analog Devices\SoundMAX\SMTray.exe C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\WINDOWS\System32\ctfmon.exe C:\Program Files\Gadu-Gadu\gg.exe C:\PROGRA~1\INCRED~1\bin\IMAPP.EXE C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Documents and Settings\macias\Pulpit\hijackthis_199\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\System32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\System32\PnkBstrB.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZONELABS\vsmon.exe

Wg. mnie nic tu nie ma, ale może ktoś coś dojrzy.

**Posty:** 18165 · przez **wojtas** 14 Cze 2007, 22:29

folken

zrob defragmentacje moze oraz:

sciagnij gmera:

http://gmer.net/gmer.zip

i daj logi z opcji

1. Zakładka Rootkit >>> zaznaczone wszystko oprócz Pokazuj wszystko >>> kliknij Szukaj >>> czekaj cierpliwie aż skończy >>> Kopiuj >>> wklej do posta
2. Zakładka Rootkit >>> zaznaczone tylko Usługi i Pokazuj wszystko >>> kliknij Szukaj >>> czekaj cierpliwie aż skończy >>> Kopiuj >>> wklej do posta

Dale

zaloz swoj Topic

**Posty:** 59 · przez **folken** 15 Cze 2007, 23:00

nie mogę zrobić loga tym programem pod koniec zawiesza mi kompa i tylko reset pomaga

**Posty:** 18165 · przez **wojtas** 16 Cze 2007, 12:33

to daj jeszcze loga z:

http://www.techsupportforum.com/sectools/Deckard/dss.exe

**Posty:** 59 · przez **folken** 16 Cze 2007, 17:48

Kod: Zaznacz wszystko: Deckard's System Scanner v20070611.50 Run by ntt on 2007-06-16 at 17:23:00 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- System Restore is disabled; attempting to re-enable...success. -- Last 5 Restore Point(s) -- 6: 2006-04-03 22:01:10 UTC - RP6 - Configured PartitionMagic 5: 2006-04-03 21:24:39 UTC - RP5 - Installed Alcohol 120% 4: 2006-04-03 21:00:04 UTC - RP4 - Installed TuneUp Utilities 2006 3: 2006-04-03 20:35:46 UTC - RP3 - Installed PartitionMagic 2: 2006-04-03 09:20:25 UTC - RP2 - Zainstalowane sterowniki drukarek: Canon S100 -- First Restore Point -- 1: 2006-04-03 09:07:57 UTC - RP1 - Punkt kontrolny systemu Backed up registry hives. Performed disk cleanup. -- HijackThis (run as ntt.exe) ------------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 17:24:30, on 2007-06-16 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16473) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe E:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\F-Secure\Common\FSM32.EXE E:\Program Files\D-Link\Air USB Utility\AirCFG.exe C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe E:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe C:\WINDOWS\system32\ctfmon.exe E:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\ServiceWrapper-7681197.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE C:\Program Files\F-Secure\Anti-Virus\fssm32.exe C:\Program Files\F-Secure\Common\FSMA32.EXE C:\Program Files\F-Secure\Common\FSMB32.EXE C:\WINDOWS\system32\PSIService.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe C:\Program Files\F-Secure\Common\FCH32.EXE C:\WINDOWS\ehome\mcrdsvc.exe C:\Program Files\F-Secure\Common\FAMEH32.EXE C:\Program Files\F-Secure\Anti-Virus\fsqh.exe C:\Program Files\F-Secure\Anti-Virus\fsrw.exe C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe C:\WINDOWS\system32\dllhost.exe C:\Program Files\F-Secure\Common\FNRB32.EXE C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe C:\Program Files\F-Secure\Common\FIH32.EXE C:\WINDOWS\System32\alg.exe C:\Program Files\F-Secure\Anti-Virus\fsav32.exe C:\PROGRA~1\F-Secure\Anti-Spyware\fsaw.exe C:\Program Files\F-Secure\FSGUI\fsguidll.exe E:\Program Files\Azureus\Azureus.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\ntt\Desktop\dss.exe C:\WINDOWS\system32\wbem\wmiprvse.exe E:\stary komp\ntt.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://moya.toya.net.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - E:\Program Files\BitComet\tools\BitCometBHO_1.1.3.28.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - E:\PROGRA~1\FlashGet\jccatch.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - E:\PROGRA~1\FlashGet\fgiebar.dll O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW O4 - HKLM\..\Run: [D-Link Air USB Utility] E:\Program Files\D-Link\Air USB Utility\AirCFG.exe O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe O4 - HKLM\..\Run: [PCSuiteTrayApplication] E:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [PcSync] E:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm O8 - Extra context menu item: Download All by FlashGet - E:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: Download all links using BitComet - res://E:\Program Files\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: Download all videos using BitComet - res://E:\Program Files\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: Download link using &BitComet - res://E:\Program Files\BitComet\BitComet.exe/AddLink.htm O8 - Extra context menu item: Download using FlashGet - E:\Program Files\FlashGet\jc_link.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\PROGRA~1\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\PROGRA~1\FlashGet\flashget.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O10 - Unknown file in Winsock LSP: c:\program files\f-secure\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure\fsps\program\fslsp.dll O10 - Unknown file in Winsock LSP: c:\program files\f-secure\fsps\program\fslsp.dll O11 - Options group: [INTERNATIONAL] International* O16 - DPF: {81E688E8-36A4-4FEF-B70B-8B0A1C5C1308} (WebLauncherX Control) - http://www.abra-meble.pl/cadprojekt/launcher.cab O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} - http://217.113.232.11/activex/AxisCamControl.cab O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab O18 - Protocol: wpmsg - {2E0AC5A0-3597-11D6-B3ED-0001021DC1C3} - C:\Program Files\Spik\url_wpmsg.dll O20 - Winlogon Notify: MCPClient - C:\PROGRA~1\COMMON~1\Stardock\mcpstub.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\ServiceWrapper-7681197.exe O23 - Service: Boingo Wireless Engine - Unknown owner - C:\Program Files\Boingo\Boingo Wireless Software\WENGINE2\BWEngine.exe O23 - Service: Boingo WMonitor - Boingo Wireless, Inc. - C:\Program Files\Boingo\Boingo Wireless Software\WENGINE2\WMonitor.exe O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing) O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - E:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe -- HijackThis Fixed Entries (E:\stary komp\backups\) --------------------------- backup-20070110-224313-507 O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) backup-20070612-230055-732 F0 - system.ini: Shell=Explorer.exe c:\windows\system32\system32 -- File Associations ----------------------------------------------------------- All associations okay. -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- R0 BTHidMgr (Bluetooth HID Manager Service) - c:\windows\system32\drivers\bthidmgr.sys <Not Verified; IVT Corporation; BlueSoleil(c)> R0 FSFW (F-Secure Firewall Driver) - c:\windows\system32\drivers\fsdfw.sys <Not Verified; F-Secure Corporation; F-Secure Anti-Virus Internet Shield> R1 NPPTNT2 - c:\windows\system32\npptnt2.sys <Not Verified; INCA Internet Co., Ltd.; nProtect NPSC Kernel Mode Driver for NT> R2 ANIO (ANIO Service) - c:\windows\system32\anio.sys <Not Verified; Alpha Networks Inc.; ANIO (NT5) Driver> R2 F-Secure Filter (F-Secure File System Filter) - c:\program files\f-secure\anti-virus\win2k\fsfilter.sys R2 F-Secure Gatekeeper - c:\program files\f-secure\anti-virus\win2k\fsgk.sys R2 F-Secure Recognizer (F-Secure File System Recognizer) - c:\program files\f-secure\anti-virus\win2k\fsrec.sys R3 pcouffin (VSO Software pcouffin) - c:\windows\system32\drivers\pcouffin.sys <Not Verified; VSO Software; Patin couffin engine> R3 pfc (Padus ASPI Shell) - c:\windows\system32\drivers\pfc.sys <Not Verified; Padus, Inc.; Padus(R) ASPI Shell> R3 vaxscsi - c:\windows\system32\drivers\vaxscsi.sys S3 AvFlt (Antivirus Filter Driver) - c:\windows\system32\drivers\av5flt.sys (file missing) S3 BlueletAudio (Bluetooth Audio Service) - c:\windows\system32\drivers\blueletaudio.sys <Not Verified; IVT Corporation; Windows (R) 2000 DDK driver> S3 BT (Bluetooth PAN Network Adapter) - c:\windows\system32\drivers\btnetdrv.sys <Not Verified; IVT Corporation; BlueSoleil> S3 Btcsrusb (Bluetooth USB For Bluetooth Service) - c:\windows\system32\drivers\btcusb.sys <Not Verified; IVT Corporation; Bluetooth USB Device Driver> S3 BTHidEnum (Bluetooth HID Enumerator) - c:\windows\system32\drivers\vbtenum.sys S3 BTNetFilter (Bluetooth Network Filter) - c:\windows\system32\drivers\btnetfilter.sys S3 NSNDIS5 (NSNDIS5 NDIS Protocol Driver) - c:\windows\system32\nsndis5.sys <Not Verified; Printing Communications Assoc., Inc. (PCAUSA); NetStumbler> S3 PCASp50 (PCASp50 NDIS Protocol Driver) - c:\windows\system32\drivers\pcasp50.sys <Not Verified; Printing Communications Assoc., Inc. (PCAUSA); PCAUSA Rawether for Windows> S3 RivaTuner - e:\program files\rivatuner\rivatuner.sys (file missing) S3 sfcure01 (StarForce Cure Driver (version 1.x)) - c:\windows\system32\drivers\sfcure01.sys (file missing) S3 Siemens_Sx1Swup (Siemens_Sx1Swup.SvcDesc%) - c:\windows\system32\drivers\siemens_sx1swup.sys <Not Verified; PSI; Innovator> S3 TVICHW32 - c:\windows\system32\drivers\tvichw32.sys <Not Verified; EnTech Taiwan; TVicHW32 Generic Device Driver for Windows 95/98/ME/NT/2000/2003/XP/XP64> S3 VComm (Virtual Serial port driver) - c:\windows\system32\drivers\vcomm.sys <Not Verified; IVT Corporation; BlueSoleil> S3 VcommMgr (Bluetooth VComm Manager Service) - c:\windows\system32\drivers\vcommmgr.sys <Not Verified; IVT Corporation; BlueSoleil> -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- R2 BackWeb Plug-in - 7681197 (F-Secure Automatic Update) - c:\progra~1\f-secure\backweb\7681197\program\servicewrapper-7681197.exe <Not Verified; F-Secure Automatic Update; RunnerEXE Application> R2 fsbwsys - "c:\program files\f-secure\backweb\7681197\program\fsbwsys.exe" <Not Verified; F-Secure Corp.; F-Secure BackWeb> R2 F-Secure Gatekeeper Handler Starter (FSGKHS) - "c:\program files\f-secure\anti-virus\fsgk32st.exe" <Not Verified; F-Secure Corp.; F-Secure Corp. Startup service> R2 FSMA (F-Secure Management Agent) - "c:\program files\f-secure\common\fsma32.exe" <Not Verified; F-Secure Corporation; F-Secure Management Agent> R2 ProtexisLicensing - c:\windows\system32\psiservice.exe <Not Verified; ; PSIService> R2 TUWinStylerThemeSvc (TuneUp WinStyler Theme Service) - "e:\program files\tuneup utilities 2006\winstylerthemesvc.exe" <Not Verified; TuneUp Software GmbH; TuneUp Utilities> R3 FSDFWD (F-Secure Anti-Virus Firewall Daemon) - "c:\program files\f-secure\fwes\program\fsdfwd.exe" <Not Verified; F-Secure Corporation; F-Secure Anti-Virus Internet Shield> R3 F-Secure Network Request Broker - "c:\program files\f-secure\common\fnrb32.exe" <Not Verified; F-Secure Corporation; F-Secure Management Agent> R3 ServiceLayer - "c:\program files\common files\pcsuite\services\servicelayer.exe" <Not Verified; Nokia.; PC Connectivity Solution> S3 rpcapd (Remote Packet Capture Protocol v.0 (experimental)) - "c:\program files\winpcap\rpcapd.exe" -d -f "c:\program files\winpcap\rpcapd.ini" <Not Verified; CACE Technologies; Remote Packet Capture Daemon> -- Files created between 2007-05-16 and 2007-06-16 ----------------------------- 2007-06-14 19:16:26 0 d-------- C:\Downloads 2007-06-03 23:43:51 0 d-------- C:\Program Files\WinPcap 2007-06-01 20:43:15 0 d-------- C:\Documents and Settings\ntt\Application Data\Nokia Multimedia Player 2007-06-01 11:13:39 0 d-------- C:\Documents and Settings\ntt\Application Data\DataLayer 2007-06-01 11:13:36 0 d-------- C:\Documents and Settings\ntt\Phone Browser 2007-06-01 11:12:59 0 d-------- C:\Documents and Settings\ntt\Application Data\Nokia 2007-06-01 11:08:34 0 d-------- C:\Program Files\DIFX 2007-06-01 11:07:50 0 d-------- C:\Program Files\Common Files\Nokia 2007-06-01 11:07:06 0 d-------- C:\Program Files\Nokia 2007-06-01 11:07:02 0 d-------- C:\Documents and Settings\ntt\Application Data\PC Suite 2007-06-01 11:07:00 0 d-------- C:\Documents and Settings\All Users\Application Data\PC Suite 2007-06-01 11:06:46 0 d-------- C:\Program Files\Common Files\PCSuite 2007-06-01 11:05:59 0 d-------- C:\Documents and Settings\All Users\Application Data\Downloaded Installations 2007-06-01 00:23:24 0 d------c- C:\WINDOWS\system32\DRVSTORE 2007-06-01 00:23:24 0 d-------- C:\Program Files\CACE Technologies 2007-05-31 23:57:51 0 d-------- C:\Program Files\Cain 2007-05-24 20:47:25 0 d-------- C:\Program Files\Boingo 2007-05-24 20:47:25 0 d-------- C:\Documents and Settings\All Users\Application Data\WENGINE2 2007-05-24 11:45:17 0 d-------- C:\Documents and Settings\ntt\Application Data\Ethereal 2007-05-23 23:45:09 23600 --a------ C:\WINDOWS\system32\drivers\TVICHW32.SYS <Not Verified; EnTech Taiwan; TVicHW32 Generic Device Driver for Windows 95/98/ME/NT/2000/2003/XP/XP64> 2007-05-23 09:33:57 3284 --a------ C:\WINDOWS\system32\ANIWZCS{FF1560BA-9332-46BC-974F-42BAEEC07EAC} 2007-05-23 09:26:00 118784 --a------ C:\WINDOWS\system32\WlanApp.dll <Not Verified; Alpha Networks Inc.; WlanApp Dynamic Link Library> 2007-05-23 09:26:00 208896 --a------ C:\WINDOWS\system32\wlanapi.dll <Not Verified; Alpha Networks Inc.; WLANAPI Dynamic Link Library> 2007-05-23 09:26:00 57407 --a------ C:\WINDOWS\system32\ANICtl.dll <Not Verified; Alpha Networks Inc.; DevCtrl Dynamic Link Library> 2007-05-23 09:26:00 192512 --a------ C:\WINDOWS\system32\aIPH.dll <Not Verified; Alpha Networks Inc.; IPH Dynamic Link Library> 2007-05-23 09:25:59 1163337 --a------ C:\WINDOWS\system32\odSupp_M.dll <Not Verified; Funk Software, Inc.; Odyssey Supplicant Toolkit> 2007-05-23 09:25:59 49152 --a------ C:\WINDOWS\system32\AQCKGen.dll <Not Verified; Alpha Networks Inc.; AQuickKey Generator> 2007-05-23 09:25:59 557056 --a------ C:\WINDOWS\system32\ANIWZCS2.dll <Not Verified; Alpha Networks Inc.; ANIWZCS Dynamic Link Library> 2007-05-23 09:25:50 36864 --a------ C:\WINDOWS\system32\ANIOApi.dll <Not Verified; Alpha Networks Inc.; ANIO Helper DLL API library> 2007-05-23 09:25:50 11904 --a------ C:\WINDOWS\system32\anio4.sys <Not Verified; ANI; ANIO (NDIS4) Driver> 2007-05-23 09:25:50 28205 --a------ C:\WINDOWS\system32\ANIO.sys <Not Verified; Alpha Networks Inc.; ANIO (NT5) Driver> 2007-05-23 09:25:50 0 d-------- C:\Program Files\ANI 2007-05-22 21:16:21 283648 --a------ C:\WINDOWS\uninst.exe <Not Verified; Stirling Technologies, Inc.; InstallShield Deinstaller> 2007-05-21 23:13:53 0 d-------- C:\Documents and Settings\ntt\Application Data\BinarySense 2007-05-21 13:34:08 0 d-------- C:\Documents and Settings\ntt\Application Data\Talkback 2007-05-19 11:31:12 0 d-------- C:\Documents and Settings\ntt\Application Data\Hamachi -- Find3M Report --------------------------------------------------------------- 2007-06-16 17:25:33 0 d-------- C:\Documents and Settings\ntt\Application Data\Azureus 2007-06-14 16:08:22 2828 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys 2007-06-14 16:08:21 88 -r-hs---- C:\WINDOWS\system32\E9D358A023.sys 2007-06-09 09:30:43 0 d-------- C:\Documents and Settings\ntt\Application Data\Corel 2007-05-30 22:26:18 0 d-------- C:\Documents and Settings\ntt\Application Data\Vso 2007-05-23 23:45:06 4601 --a----c- C:\WINDOWS\mozver.dat 2007-05-23 09:26:21 0 d--h----- C:\Program Files\InstallShield Installation Information 2007-05-11 09:57:00 0 d-------- C:\Program Files\MSXML 4.0 2007-05-10 14:56:51 0 d-------- C:\Program Files\Common Files\Corel 2007-04-29 12:07:39 0 d-------- C:\Documents and Settings\ntt\Application Data\Google 2007-04-29 12:06:31 0 d-------- C:\Program Files\Google 2007-04-13 23:12:38 2560 --a----c- C:\WINDOWS\system32\BitCometRes.dll <Not Verified; BitComet; BitComet BCTP Helper> -- Registry Dump --------------------------------------------------------------- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} E:\Program Files\BitComet\tools\BitCometBHO_1.1.3.28.dll {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll {A5366673-E8CA-11D3-9CD9-0090271D075B} E:\PROGRA~1\FlashGet\jccatch.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "F-Secure Manager"="\"C:\\Program Files\\F-Secure\\Common\\FSM32.EXE\" /splash" "F-Secure TNB"="\"C:\\Program Files\\F-Secure\\TNB\\TNBUtil.exe\" /CHECKALL /WAITFORSW" "D-Link Air USB Utility"="E:\\Program Files\\D-Link\\Air USB Utility\\AirCFG.exe" "ANIWZCS2Service"="C:\\Program Files\\ANI\\ANIWZCS2 Service\\WZCSLDR2.exe" "PCSuiteTrayApplication"="E:\\Program Files\\Nokia\\Nokia PC Suite 6\\LaunchApplication.exe -startup" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe" "PcSync"="E:\\Program Files\\Nokia\\Nokia PC Suite 6\\PcSync2.exe /NoDialog" [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "InstallVisualStyle"=hex(2):43,3a,5c,57,49,4e,44,4f,57,53,5c,52,65,73,6f,75,72,\ 63,65,73,5c,54,68,65,6d,65,73,5c,52,6f,79,61,6c,65,5c,52,6f,79,61,6c,65,2e,\ 6d,73,73,74,79,6c,65,73,00 "InstallTheme"=hex(2):43,3a,5c,57,49,4e,44,4f,57,53,5c,52,65,73,6f,75,72,63,65,\ 73,5c,54,68,65,6d,65,73,5c,52,6f,79,61,6c,65,2e,74,68,65,6d,65,00 "RunStartupScriptSync"=dword:00000000 "SynchronousMachineGroupPolicy"=dword:00000000 "SynchronousUserGroupPolicy"=dword:00000000 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoCDBurning"=dword:00000001 "MemCheckBoxInRunDlg"=dword:00000000 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\Run] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoCDBurning"=dword:00000001 "NoLowDiskSpaceChecks"=dword:00000001 "MemCheckBoxInRunDlg"=dword:00000000 "NoResolveSearch"=dword:00000001 "NoResolveTrack"=dword:00000001 "NoRecentDocsNetHood"=dword:00000000 [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\run] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload] "0aMCPClient"="{F5DF91F9-15E9-416B-A7C3-7519B11ECBFC}" HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\MCPClient HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa Authentication Packages REG_MULTI_SZ msv1_0\0\0 Security Packages REG_MULTI_SZ kerberos\0msv1_0\0schannel\0wdigest\0\0 Notification Packages REG_MULTI_SZ scecli\0\0 [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "nwiz"="nwiz.exe /install" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="ctfmon" "hkey"="HKCU" "command"="C:\\WINDOWS\\system32\\ctfmon.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] HTTPFilter REG_MULTI_SZ HTTPFilter\0\0 LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ DnsCache\0\0 DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 termsvcs REG_MULTI_SZ TermService\0\0 WudfServiceGroup REG_MULTI_SZ WUDFSvc\0\0 hklm\software\Microsoft\Windows NT\CurrentVersion\Svchost *netsvcs* UxTuneUp -- End of Deckard's System Scanner: finished at 2007-06-16 at 17:26:32 ---------

[ Dodano: Dzisiaj o 16:49 ]

Kod: Zaznacz wszystko: Deckard's System Scanner v20070611.50 Extra logfile - please post this as an attachment with your post. -------------------------------------------------------------------------------- -- System Information ---------------------------------------------------------- Microsoft Windows XP Professional (build 2600) SP 2.0 Architecture: X86; Language: English CPU 0: AMD Sempron(tm) Processor 3000+ Percentage of Memory in Use: 82% Physical Memory (total/avail): 447.48 MiB / 79.99 MiB Pagefile Memory (total/avail): 817.04 MiB / 350.48 MiB Virtual Memory (total/avail): 2047.88 MiB / 1958.38 MiB A: is Removable (No Media) C: is Fixed (NTFS) - 20.19 GiB total, 14.04 GiB free. D: is CDROM (No Media) E: is Fixed (NTFS) - 128.86 GiB total, 30.32 GiB free. F: is CDROM (No Media) G: is CDROM (No Media) -- Security Center ------------------------------------------------------------- AUOptions is set to notify before install. Windows Internal Firewall is disabled. FirstRunDisabled is set. AntiVirusDisableNotify is set. UpdatesDisableNotify is set. FW: F-Secure Anti-Virus Client Security 6.01 v6.01 (F-Secure Corporation) [COLOR=RED]Disabled[/COLOR] AV: F-Secure Anti-Virus Client Security 6.01 v6.01 (F-Secure Corporation) [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\\Program Files\\F-Secure\\BackWeb\\7681197\\program\\F-Secure Automatic Update.exe"="C:\\Program Files\\F-Secure\\BackWeb\\7681197\\program\\F-Secure Automatic Update.exe:*:Enabled:F-Secure Automatic Update" -- Environment Variables ------------------------------------------------------- ALLUSERSPROFILE=C:\Documents and Settings\All Users APPDATA=C:\Documents and Settings\ntt\Application Data CLIENTNAME=Console CommonProgramFiles=C:\Program Files\Common Files COMPUTERNAME=NTT-714A2FBE4AE ComSpec=C:\WINDOWS\system32\cmd.exe FP_NO_HOST_CHECK=NO HOMEDRIVE=C: HOMEPATH=\Documents and Settings\ntt LOGONSERVER=\\NTT-714A2FBE4AE NUMBER_OF_PROCESSORS=1 OS=Windows_NT Path=C:\Program Files\Mozilla Firefox\;C:\WINDOWS\SYSTEM32;C:\WINDOWS;C:\WINDOWS\SYSTEM32\WBEM PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH PROCESSOR_ARCHITECTURE=x86 PROCESSOR_IDENTIFIER=x86 Family 15 Model 47 Stepping 2, AuthenticAMD PROCESSOR_LEVEL=15 PROCESSOR_REVISION=2f02 ProgramFiles=C:\Program Files PROMPT=$P$G SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\DOCUME~1\ntt\LOCALS~1\Temp TMP=C:\DOCUME~1\ntt\LOCALS~1\Temp USERDOMAIN=NTT-714A2FBE4AE USERNAME=ntt USERPROFILE=C:\Documents and Settings\ntt windir=C:\WINDOWS -- User Profiles --------------------------------------------------------------- ntt [I](admin)[/I] Administrator [I](new local, admin)[/I] -- Add/Remove Programs --------------------------------------------------------- --> "C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware Scanner" --> "C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Spyware" --> "C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus Client Security Installer" --> "C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure DAAS" --> "C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Diagnostics" --> "C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure FWES" --> "C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure GUI" --> "C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Help" --> "C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Management Agent" --> "C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Policy Manager Support" --> "C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure TNB" --> C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL --> C:\WINDOWS\BWUnin-6.3.2.116-7681197L.exe -AppId 7681197 --> C:\WINDOWS\UNNeroVision.exe /UNINSTALL --> C:\WINDOWS\UNNMP.exe /UNINSTALL --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf 7-Zip 4.42 --> "e:\Program Files\7-Zip\Uninstall.exe" Ace Password Sniffer v1.3 --> C:\PROGRA~1\Ace Password Sniffer\UNWISE.EXE C:\PROGRA~1\Ace Password Sniffer\INSTALL.LOG Adobe Flash Player 9 ActiveX --> C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete Adobe Reader 7.0.5 - Polish --> MsiExec.exe /I{AC76BA86-7AD7-1045-7B44-A70500000002} Air USB Utility --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{2CA94ED4-F38D-44B4-A79D-E5835E276EFC} ANIO Service --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\Intel 32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7B5CE976-C7A9-4E38-A7F3-6C8EF025DD8E}\Setup.exe" ANIWZCS2 Service --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\Intel 32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4C590030-7469-453E-8589-D15DA9D03F52}\Setup.exe" Aqua Fish --> "C:\Program Files\Play\Aqua Fish\unins000.exe" ArcaOnline - ArcaBit Online Scanner --> C:\WINDOWS\system32\ArcaOnlineUninstall.exe Athlon 64 Processor Driver --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe" -l0x9 Azureus --> E:\Program Files\Azureus\Uninstall.exe BearFlix --> E:\PROGRA~1\BearFlix\UNWISE.EXE E:\PROGRA~1\BearFlix\INSTALL.LOG BearShare --> E:\PROGRA~1\BearShare\UNWISE.EXE E:\PROGRA~1\BearShare\INSTALL.LOG BitComet 0.86 --> E:\Program Files\BitComet\uninst.exe Boingo Wireless Software --> MsiExec.exe /X{8FF5CA8F-8B04-40C9-8A50-7BE71DBD05EF} Canon S100 --> C:\WINDOWS\system32\CNMS100.EXE -@C:\WINDOWS\IsUninst.exe -f"C:\BJPrinter\CNMWINDOWS\Canon S100 Installer\Inst\DeIsL1.isu" -pCanon S100-c"C:\BJPrinter\CNMWINDOWS\Canon S100 Installer\Inst\bjinst.dll Cassini Emulator --> "C:\WINDOWS\Cassini Emulator\uninstall.exe" "/U:E:\Emulatory\Cassini\Uninstall\uninstall.xml" CD/DVD-ROM Generator 2.00 --> C:\WINDOWS\IsUninst.exe -f"E:\Program Files\CD_DVD-ROM Generator 2.00\Uninst.isu" CDex extraction audio --> "e:\Program Files\CDex_150\uninstall.exe" concept/design onlineTV 3 --> "E:\Program Files\concept design\onlineTV 3\unins000.exe" ConvertXtoDVD 2.1.3.160 --> "E:\Program Files\vso\ConvertXtoDVD\unins000.exe" Corel Paint Shop Pro Photo XI --> MsiExec.exe /X{93A1B09E-BAFA-4628-A5B6-921CB026955A} Dance eJay 7 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A18BB607-BC5A-474E-88FD-C215B91A0F97}\setup.exe" -l0x9 -removeonly DesktopX Professional --> E:\PROGRA~1\Stardock\Object Desktop\DesktopX\UNWISE.EXE E:\PROGRA~1\Stardock\Object Desktop\DesktopX\INSTALL.LOG DiscJuggler --> MsiExec.exe /I{C3C538E5-524C-4253-AA74-0EEEF34990EA} Dolphin 1.3 beta --> E:\Emulatory\Dolphin\uninst.exe EAX(tm) Unified (SHELL) --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Creative Labs\EAX(tm) Unified (SHELL)\Uninst.isu" eMule --> "E:\Program Files\eMule\Uninstall.exe" F-Secure Anti-Virus Client Security - Automatic Update Agent --> "C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Backweb" F-Secure Anti-Virus Client Security — Ochrona przed wirusami i szpiegami --> "C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Anti-Virus" F-Secure Anti-Virus Client Security — Osłona internetowa --> "C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Internet Shield" F-Secure Anti-Virus Client Security — Skanowanie poczty e-mail --> "C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure E-mail Scanning" F-Secure Anti-Virus Client Security — Skanowanie ruchu w sieci Web --> "C:\Program Files\F-Secure\fsuninst.exe" /UninstRegKey:"F-Secure Protocol Scanner" FlashGet(JetCar) --> E:\PROGRA~1\FlashGet\UNWISE.EXE E:\PROGRA~1\FlashGet\INSTALL.LOG Gadu-Gadu 7.0 --> E:\Program Files\Gadu-Gadu\Setup.exe GoD 1.88 --> "E:\Program Files\GoD\unins000.exe" Google Earth --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}\setup.exe" -l0x9 -removeonly Hamachi 1.0.2.1 --> E:\Program Files\Hamachi\uninstall.exe HDDlife --> MsiExec.exe /I{2EDC23E5-29FB-49D0-BF6D-F2D55EA25496} High Definition Audio Driver Package - KB888111 --> "C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe" HijackThis 1.99.1 --> E:\stary komp\HijackThis.exe /uninstall Hotfix for Windows Media Format 11 SDK (KB929399) --> "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe" IsoBuster 1.7 --> "E:\Program Files\Smart Projects\IsoBuster\Uninst\unins000.exe" J2SE Runtime Environment 5.0 Update 6 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060} K-Lite Codec Pack 2.82 Full --> "E:\Program Files\K-Lite Codec Pack\unins000.exe" Kajko i Kokosz - Szkoła latania v. 1.027 --> "C:\Program Files\Mirage Interactive\Kajko i Kokosz - Szkoła latania\unins000.exe" Localization Pack for Microsoft Windows XP Media Center Edition --> MsiExec.exe /I{D9ECBC61-0D76-4EDD-8D46-BB2BB0A02108} Magic ISO Maker v5.3 (build 0221) --> E:\PROGRA~1\MagicISO\UNWISE.EXE E:\PROGRA~1\MagicISO\INSTALL.LOG Microsoft Compression Client Pack 1.0 for Windows XP --> "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe" Microsoft Office 2000 Dysk 2 --> MsiExec.exe /I{00040415-78E1-11D2-B60F-006097C998E7} Microsoft Office 2000 Premium --> MsiExec.exe /I{00000415-78E1-11D2-B60F-006097C998E7} Microsoft User-Mode Driver Framework Feature Pack 1.0 --> "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe" Mozilla Firefox (1.5.0.12) --> C:\Program Files\Mozilla Firefox\uninstall\uninstall.exe /ua "1.5.0.12 (pl)" Nero Suite --> C:\Program Files\Common Files\Nero\Uninstall\Setupx.exe /uninstall ExtraUninstallID="" Network Stumbler 0.4.0 (remove only) --> "E:\Program Files\Network Stumbler\uninst.exe" Nokia Connectivity Cable Driver --> MsiExec.exe /X{9BD3BC83-C14A-4C54-A5FB-F43D93D5E4EF} Nokia PC Connectivity Solution --> MsiExec.exe /I{0D80391C-0A72-43BB-9BC2-143F63CC111D} Nokia PC Suite --> MsiExec.exe /I{E1B34BF3-6333-47DC-AD85-D89A95829478} NVIDIA Drivers --> C:\WINDOWS\system32\nvudisp.exe UninstallGUI Opera 9.01 --> MsiExec.exe /X{0049F6AE-4FE2-4C43-A039-60FCE98A1986} Pcsx2 0.9.1 Watermoose --> "E:\Program Files\Pcsx2\unins000.exe" PITy 2006 dla Windows kompilacja:1.0.1.11 --> "e:\Program Files\PITy\PITY2006NG\unins000.exe" PL-2303 USB-to-Serial --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\Intel 32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{50974B3A-B8D5-4C7B-9D23-ED0EC9517B45}\Setup.exe" -l0x9 Realtek High Definition Audio Driver --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x9 -removeonly Skaner on-line mks_vir --> C:\WINDOWS\system32\SkanerOnlineUninstall.exe SmartMovie Converter --> "E:\Program Files\Lonely Cat Games\SmartMovie Converter\IIUninst.exe" E:\Program Files\Lonely Cat Games\SmartMovie Converter\install.log Spik --> C:\Program Files\Spik\SpikRemove.exe Total Commander (Remove or Repair) --> E:\Program Files\totalcmd\tcuninst.exe TuneUp Utilities 2006 --> MsiExec.exe /I{868D7896-99D4-4513-BC62-2B3AD3E24926} TuneUp Utilities 2007 --> MsiExec.exe /I{C8BB4912-12D9-42AE-B571-E580D8CD1B5B} Update Rollup 2 for Windows XP Media Center Edition 2005 --> C:\WINDOWS\$NtUninstallKB900325$\spuninst\spuninst.exe WapSter AQQ --> E:\Program Files\Wapster\AQQ\uninstall.exe Winamp (remove only) --> "E:\Program Files\Winamp\UninstWA.exe" Windows Driver Package - Nokia Modem (07/24/2006 6.81.0.23) --> C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_8BEAEC6636531F9CD10CFDA4ECE6AA29199B8974\nokbtmdm.inf Windows Media Format 11 runtime --> "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe" Windows XP Media Center Edition 2005 KB925766 --> "C:\WINDOWS\$NtUninstallKB925766$\spuninst\spuninst.exe" WinPcap 3.1 --> "C:\Program Files\WinPcap\Uninstall.exe" "C:\Program Files\WinPcap\install.log" WinRAR archiver --> E:\Program Files\WinRAR\uninstall.exe -- End of Deckard's System Scanner: finished at 2007-06-16 at 17:26:32 ---------

**Posty:** 18165 · przez **wojtas** 16 Cze 2007, 20:12

log zupelnie czysty

proszę o sprawdzenie log-a coś zamula kompa??

proszę o sprawdzenie log-a coś zamula kompa??

Kto jest na forum