prosze o sprawdzenie loga

**Posty:** 15 · przez **voiteck** 22 Mar 2006, 00:39

Ostatnio moj komp zaczal dziwnie pracowac. Prosze o sprawdzenie loga

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 22:24:04, on 2006-03-21 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: H:\WINDOWS\System32\smss.exe H:\WINDOWS\system32\winlogon.exe H:\WINDOWS\system32\services.exe H:\WINDOWS\system32\lsass.exe H:\WINDOWS\system32\svchost.exe H:\WINDOWS\System32\svchost.exe H:\WINDOWS\system32\spoolsv.exe H:\Program Files\Alwil Software\Avast4\aswUpdSv.exe H:\Program Files\Alwil Software\Avast4\ashServ.exe H:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe c:\usr\MYSQL\bin\mysqld.exe H:\WINDOWS\Explorer.EXE H:\WINDOWS\system32\wscntfy.exe H:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe H:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis2a.exe H:\Program Files\Common Files\Real\Update_OB\realsched.exe H:\Program Files\Java\jre1.5.0_06\bin\jusched.exe H:\Program Files\Skype\Phone\Skype.exe H:\WINDOWS\system32\devldr32.exe H:\WINDOWS\System32\svchost.exe H:\Program Files\Alwil Software\Avast4\ashMaiSv.exe H:\Program Files\Alwil Software\Avast4\ashWebSv.exe H:\Program Files\WinRAR\WinRAR.exe H:\DOCUME~1\OLA&WO~1\USTAWI~1\Temp\Rar$EX00.046\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - H:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - H:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - H:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - H:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O4 - HKLM\..\Run: [avast!] H:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE H:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [anvshell] anvshell.exe O4 - HKLM\..\Run: [LiveNote] livenote.exe O4 - HKLM\..\Run: [pdfFactory Pro Dispatcher v2] "H:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis2a.exe" /source=HKLM O4 - HKLM\..\Run: [PDF Converter Registry Controller] "H:\PdfConverter\RegistryController.exe" O4 - HKLM\..\Run: [eDonkey2000] "H:\Program Files\eDonkey2000\edonkey2000.exe" -t O4 - HKLM\..\Run: [TkBellExe] "H:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [SunJavaUpdateSched] H:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKCU\..\Run: [Skype] "H:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O8 - Extra context menu item: &Download with &DAP - H:\PROGRA~1\DAP\dapextie.htm O8 - Extra context menu item: Convert link target to Adobe PDF - res://H:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert link target to existing PDF - res://H:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert selected links to Adobe PDF - res://H:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert selected links to existing PDF - res://H:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Convert selection to Adobe PDF - res://H:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert selection to existing PDF - res://H:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert to Adobe PDF - res://H:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert to existing PDF - res://H:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Download &all with DAP - H:\PROGRA~1\DAP\dapextie2.htm O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://H:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Open PDF in Word - res://H:\PdfConverter\IEShellExt.dll /100 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - H:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - H:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - H:\PROGRA~1\DAP\DAP.EXE O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab O16 - DPF: {92ECE6FA-AC2E-4042-BFAE-0C8608E52A43} (SignActivX Control) - https://www.bph.pl/pi/components/SignActivX.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O23 - Service: Adobe LM Service - Adobe Systems - H:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - H:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - H:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - H:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - H:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - H:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - H:\Program Files\iPod\bin\iPodService.exe O23 - Service: MATLAB Server (matlabserver) - Unknown owner - H:\Matlab_6_5\webserver\bin\win32\matlabserver.exe O23 - Service: MySql - Unknown owner - c:\usr/MYSQL/bin/mysqld.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)

Dzieki z gory

**Posty:** 8694 · przez **Red** 22 Mar 2006, 00:41

W logu jest zupełnie czysto

**Posty:** 15 · przez **voiteck** 22 Mar 2006, 00:46

Ufff to fajnie, ale to chyba jeszcze nie swiadczy ze nie mam wirusow? Czasami maszyna mi zwalnia jakby wszystko zamiera, uzycie procesora skacze na 100%, nie wiem co jest grane a jak nie wiem co jest grane to pewnie wirusy ;-)

Dodatkow nie moge przeskanowac Panda online. Juz wylaczyel mavasta zeby mi sie ActivrX mogl zainstalowac i nic, dalej jakis problem jakby z polaczeniem internetowym choc to jest ok

Ale i tak dzieki za sprawdzenie

**Posty:** 8694 · przez **Red** 22 Mar 2006, 00:49

prosze sciagnac:
http://www.ewido.net/en/download/
przeskanuj i wklej wynik na forum

dodatkowo daj jeszcze jeden log:

otwierasz link>> http://www.silentrunners.org/Silent%20Runners.vbs >>zapisujesz jako na pulpicie>>klikasz dwa razy >>masz wybor i wybierasz no>>i czekasz troszke az wygeneruje sie cały log do konca
wrzucasz na forum

**Posty:** 15 · przez **voiteck** 22 Mar 2006, 01:00

To jest log z silentrunners:

Kod: Zaznacz wszystko: "Silent Runners.vbs", revision 44, http://www.silentrunners.org/ Operating System: Windows XP SP2 Output limited to non-default values, except where indicated by "{++}" Startup items buried in registry: --------------------------------- HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++} "Skype" = ""H:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized" ["Skype Technologies S.A."] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++} "avast!" = "H:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [null data] "NvMediaCenter" = "RUNDLL32.EXE H:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit" [MS] "anvshell" = "anvshell.exe" ["AsusTeK Computer Inc."] "LiveNote" = "livenote.exe" [null data] "pdfFactory Pro Dispatcher v2" = ""H:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis2a.exe" /source=HKLM" ["FinePrint Software, LLC"] "(Default)" = (empty string) "PDF Converter Registry Controller" = ""H:\PdfConverter\RegistryController.exe"" ["ScanSoft, Inc."] "eDonkey2000" = ""H:\Program Files\eDonkey2000\edonkey2000.exe" -t" [null data] "TkBellExe" = ""H:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot" ["RealNetworks, Inc."] "SunJavaUpdateSched" = "H:\Program Files\Java\jre1.5.0_06\bin\jusched.exe" ["Sun Microsystems, Inc."] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided) -> {HKLM...CLSID} = "AcroIEHlprObj Class" \InProcServer32\(Default) = "H:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided) -> {HKLM...CLSID} = "SSVHelper Class" \InProcServer32\(Default) = "H:\Program Files\Java\jre1.5.0_06\bin\ssv.dll" ["Sun Microsystems, Inc."] {AE7CD045-E861-484f-8273-0445EE161910}\(Default) = (no title provided) -> {HKLM...CLSID} = "AcroIEToolbarHelper Class" \InProcServer32\(Default) = "H:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll" ["Adobe Systems Incorporated"] HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ "{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania" -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania" \InProcServer32\(Default) = "deskpan.dll" [file not found] "{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu" -> {HKLM...CLSID} = "HyperTerminal Icon Ext" \InProcServer32\(Default) = "H:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."] "{472083B0-C522-11CF-8763-00608CC02F24}" = "avast" -> {HKLM...CLSID} = "avast" \InProcServer32\(Default) = "H:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"] "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "H:\Program Files\WinRAR\rarext.dll" [null data] "{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class" -> {HKLM...CLSID} = "DesktopContext Class" \InProcServer32\(Default) = "H:\WINDOWS\system32\NVCPL.DLL" ["NVIDIA Corporation"] "{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer" -> {HKLM...CLSID} = "Desktop Explorer" \InProcServer32\(Default) = "H:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "H:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu" -> {HKLM...CLSID} = "nView Desktop Context Menu" \InProcServer32\(Default) = "H:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}" = "Shell Extensions for RealOne Player" -> {HKLM...CLSID} = "RealOne Player Context Menu Class" \InProcServer32\(Default) = "H:\Program Files\Real\RealPlayer\rpshell.dll" ["RealNetworks, Inc."] "{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "H:\Program Files\Microsoft Office\Office10\msohev.dll" [MS] "{640167b4-59b0-47a6-b335-a6b3c0695aea}" = "Portable Media Devices" -> {HKLM...CLSID} = "Portable Media Devices" \InProcServer32\(Default) = "H:\WINDOWS\system32\Audiodev.dll" [MS] "{cc86590a-b60a-48e6-996b-41d25ed39a1e}" = "Portable Media Devices Menu" -> {HKLM...CLSID} = "Portable Media Devices Menu" \InProcServer32\(Default) = "H:\WINDOWS\system32\Audiodev.dll" [MS] "{ED65AB21-B24F-11d3-BA80-00C0CA16AA37}" = "Mobile" -> {HKLM...CLSID} = "Mobile" \InProcServer32\(Default) = "H:\Program Files\Siemens AG\Data Exchange Software\DESShellExt.dll" ["Siemens AG"] "{ED65AB22-B24F-11d3-BA80-00C0CA16AA37}" = "Mobile ContextMenuHandler" -> {HKLM...CLSID} = "Mobile ContextMenuHandler" \InProcServer32\(Default) = "H:\Program Files\Siemens AG\Data Exchange Software\DESShellExt.dll" ["Siemens AG"] "{ED65AB23-B24F-11d3-BA80-00C0CA16AA37}" = "Mobile PropertySheetHandler" -> {HKLM...CLSID} = "Mobile PropertySheetHandler" \InProcServer32\(Default) = "H:\Program Files\Siemens AG\Data Exchange Software\DESShellExt.dll" ["Siemens AG"] "{D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802}" = "Adobe.Acrobat.ContextMenu" -> {HKLM...CLSID} = "Acrobat Elements Context Menu" \InProcServer32\(Default) = "H:\Program Files\Adobe\Acrobat 7.0\Acrobat Elements\ContextMenu.dll" ["Adobe Systems Inc."] "{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF}" = "iTunes" -> {HKLM...CLSID} = "iTunes" \InProcServer32\(Default) = "H:\Program Files\iTunes\iTunesMiniPlayer.dll" ["Apple Computer, Inc."] "{71F3F4F2-CF91-478a-B0DA-54847FF1BC3A}" = "ScanSoft PDF Converter Shell Extension" -> {HKLM...CLSID} = "ScanSoft PDF Converter Shell Extension" \InProcServer32\(Default) = "H:\PdfConverter\ShellExt.dll" ["ScanSoft, Inc."] HKLM\System\CurrentControlSet\Control\Session Manager\ INFECTION WARNING! "BootExecute" = "autocheck autochk * sprestrt" [file not found], [MS], [file not found], [file not found] HKLM\Software\Classes\Folder\shellex\ColumnHandlers\ {F9DB5320-233E-11D1-9F84-707F02C10627}\(Default) = "PDF Column Info" -> {HKLM...CLSID} = "PDF Shell Extension" \InProcServer32\(Default) = "H:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll" ["Adobe Systems, Inc."] HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ Adobe.Acrobat.ContextMenu\(Default) = "{D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802}" -> {HKLM...CLSID} = "Acrobat Elements Context Menu" \InProcServer32\(Default) = "H:\Program Files\Adobe\Acrobat 7.0\Acrobat Elements\ContextMenu.dll" ["Adobe Systems Inc."] avast\(Default) = "{472083B0-C522-11CF-8763-00608CC02F24}" -> {HKLM...CLSID} = "avast" \InProcServer32\(Default) = "H:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "H:\Program Files\WinRAR\rarext.dll" [null data] HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\ WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "H:\Program Files\WinRAR\rarext.dll" [null data] HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\ avast\(Default) = "{472083B0-C522-11CF-8763-00608CC02F24}" -> {HKLM...CLSID} = "avast" \InProcServer32\(Default) = "H:\Program Files\Alwil Software\Avast4\ashShell.dll" ["ALWIL Software"] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "H:\Program Files\WinRAR\rarext.dll" [null data] Active Desktop and Wallpaper: ----------------------------- Active Desktop is disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState HKCU\Control Panel\Desktop\ "Wallpaper" = "H:\Documents and Settings\Ola&Wojtas\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp"

Ewido jeszcze skanuje wiec wyniki wkleje za jakis czas.

**Posty:** 8694 · przez **Red** 22 Mar 2006, 01:06

ten log jest urwany ,prosze poczekac do konca skanowania ..

**Posty:** 15 · przez **voiteck** 22 Mar 2006, 01:07

NIe zauwazylem ze silentrunners jeszcze generuje loga i poprzednio wkleilem tylko jego czesc. Doklejam reszte:

Kod: Zaznacz wszystko: Active Desktop and Wallpaper: ----------------------------- Active Desktop is disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState HKCU\Control Panel\Desktop\ "Wallpaper" = "H:\Documents and Settings\Ola&Wojtas\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp" Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] 000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS] 000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] Transport Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: %SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 13 %SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05 Toolbars, Explorer Bars, Extensions: ------------------------------------ Toolbars HKCU\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\ "{47833539-D0C5-4125-9FA8-0819E2EAAC93}" -> {HKLM...CLSID} = "Adobe PDF" \InProcServer32\(Default) = "H:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll" ["Adobe Systems Incorporated"] HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ "{47833539-D0C5-4125-9FA8-0819E2EAAC93}" -> {HKLM...CLSID} = "Adobe PDF" \InProcServer32\(Default) = "H:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll" ["Adobe Systems Incorporated"] HKLM\Software\Microsoft\Internet Explorer\Toolbar\ "{47833539-D0C5-4125-9FA8-0819E2EAAC93}" = (no title provided) -> {HKLM...CLSID} = "Adobe PDF" \InProcServer32\(Default) = "H:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll" ["Adobe Systems Incorporated"] Explorer Bars HKLM\Software\Microsoft\Internet Explorer\Explorer Bars\ {182EC0BE-5110-49C8-A062-BEB1D02A220B}\(Default) = (no title provided) -> {HKLM...CLSID} = "Adobe PDF" \InProcServer32\(Default) = "H:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll" ["Adobe Systems Incorporated"] Extensions (Tools menu items, main toolbar menu buttons) HKLM\Software\Microsoft\Internet Explorer\Extensions\ {08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ "MenuText" = "Sun Java Console" "CLSIDExtension" = "{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}" -> {HKCU...CLSID} = "Java Plug-in" \InProcServer32\(Default) = "H:\Program Files\Java\jre1.5.0_06\bin\ssv.dll" ["Sun Microsystems, Inc."] -> {HKLM...CLSID} = "Java Plug-in 1.5.0_06" \InProcServer32\(Default) = "H:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll" ["Sun Microsystems, Inc."] {36ECAF82-3300-8F84-092E-AFF36D6C7040}\ "ButtonText" = "Run WinHTTrack" "MenuText" = "Launch WinHTTrack" "CLSIDExtension" = "{86529161-034E-4F8A-88D2-3C625E612E04}" -> {HKLM...CLSID} = "WinHTTrackLauncher Class" \InProcServer32\(Default) = "H:\Program Files\WinHTTrack\WinHTTrackIEBar.dll" [null data] {669695BC-A811-4A9D-8CDF-BA8C795F261C}\ "ButtonText" = "Run DAP" "Exec" = "H:\PROGRA~1\DAP\DAP.EXE" ["Speedbit Ltd."] {85D1F590-48F4-11D9-9669-0800200C9A66}\ "MenuText" = "Uninstall BitDefender Online Scanner v8" "Exec" = "%windir%\bdoscandel.exe" [null data] {FB5F1910-F110-11D2-BB9E-00C04F795683}\ "ButtonText" = "Messenger" "MenuText" = "Windows Messenger" "Exec" = "H:\Program Files\Messenger\msmsgs.exe" [MS] Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ avast! Antivirus, avast! Antivirus, ""H:\Program Files\Alwil Software\Avast4\ashServ.exe"" [null data] avast! iAVS4 Control Service, aswUpdSv, ""H:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"" [null data] avast! Mail Scanner, avast! Mail Scanner, ""H:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service" ["ALWIL Software"] avast! Web Scanner, avast! Web Scanner, ""H:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service" ["ALWIL Software"] ewido security suite control, ewido security suite control, "H:\Program Files\ewido anti-malware\ewidoctrl.exe" ["ewido networks"] ewido security suite guard, ewido security suite guard, "H:\Program Files\ewido anti-malware\ewidoguard.exe" ["ewido networks"] HTTP SSL, HTTPFilter, "H:\WINDOWS\System32\svchost.exe -k HTTPFilter" {"H:\WINDOWS\System32\w3ssl.dll" [MS]} Machine Debug Manager, MDM, ""H:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe"" [MS] MySql, MySql, "c:\usr/MYSQL/bin/mysqld.exe" [null data] Print Monitors: --------------- HKLM\System\CurrentControlSet\Control\Print\Monitors\ Adobe PDF Port\Driver = "H:\WINDOWS\system32\AdobePDF.dll" ["Adobe Systems Incorporated."] FPP2:\Driver = "fppmon2.dll" ["FinePrint Software, LLC"] PDFCreator\Driver = "pdfcmnnt.dll" [null data] ---------- + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + The search for DESKTOP.INI DLL launch points on all local fixed drives took 441 seconds. + The search for all Registry CLSIDs containing dormant Explorer Bars took 90 seconds. ---------- (total run time: 617 seconds)

**Posty:** 8694 · przez **Red** 22 Mar 2006, 01:10

i jeszcze ewido

**Posty:** 15 · przez **voiteck** 22 Mar 2006, 01:15

tak tak, ale ewido jeszcze jakies 15 min - tak na oko. Dzieki za cierpliwosc i pomoc.

**Posty:** 8694 · przez **Red** 22 Mar 2006, 01:16

nie pisz ile ,tylko daj log z ewido.

**Posty:** 15 · przez **voiteck** 22 Mar 2006, 02:00

Scan z ewido:

Kod: Zaznacz wszystko: --------------------------------------------------------- ewido anti-malware - Scan report --------------------------------------------------------- + Created on: 23:47:28, 2006-03-21 + Report-Checksum: 1C740523 + Scan result: HKLM\SOFTWARE\Classes\WUSN.1 -> Adware.SaveNow : Cleaned with backup :mozilla.88:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.89:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.90:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.91:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.92:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.93:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.94:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.95:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.96:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.97:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.98:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.99:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.100:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.101:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.102:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.103:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.104:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.105:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.106:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.107:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.108:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.109:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.110:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.111:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.112:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.113:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.114:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.115:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.116:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.117:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.118:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.119:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.120:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.121:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.122:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.123:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.124:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.125:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.126:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.127:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.128:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.129:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.130:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.131:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.132:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.133:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.134:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.135:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.136:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.137:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.162:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Adocean : Cleaned with backup :mozilla.163:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Adocean : Cleaned with backup :mozilla.165:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup :mozilla.166:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup :mozilla.167:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup :mozilla.168:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup :mozilla.219:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Adocean : Cleaned with backup :mozilla.220:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Adocean : Cleaned with backup :mozilla.238:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.239:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.244:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Adocean : Cleaned with backup :mozilla.245:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Adocean : Cleaned with backup :mozilla.266:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.267:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.268:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.273:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.287:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Adocean : Cleaned with backup :mozilla.288:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Adocean : Cleaned with backup :mozilla.302:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup :mozilla.303:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup :mozilla.321:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Inet-cash : Cleaned with backup :mozilla.322:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Inet-cash : Cleaned with backup :mozilla.323:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Inet-cash : Cleaned with backup :mozilla.324:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Inet-cash : Cleaned with backup :mozilla.363:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup :mozilla.381:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup :mozilla.382:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup :mozilla.416:H:\Documents and Settings\Intruz\Dane aplikacji\Mozilla\Firefox\Profiles\wqcg98mz.default\cookies.txt -> TrackingCookie.Spylog : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@ad.adocean[2].txt -> TrackingCookie.Adocean : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@advertising[1].txt -> TrackingCookie.Advertising : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@eeadnet.adocean[2].txt -> TrackingCookie.Adocean : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@ehg-reebok.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@gde.adocean[2].txt -> TrackingCookie.Adocean : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@idg.adocean[1].txt -> TrackingCookie.Adocean : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@metacafe.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@my.adocean[2].txt -> TrackingCookie.Adocean : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@servedby.advertising[2].txt -> TrackingCookie.Advertising : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Cookies\ola&wojtas@zedo[2].txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.13:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup :mozilla.14:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup :mozilla.21:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.Adocean : Cleaned with backup :mozilla.22:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.Adocean : Cleaned with backup :mozilla.46:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.Adocean : Cleaned with backup :mozilla.47:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.Adocean : Cleaned with backup :mozilla.68:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.69:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.70:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.71:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.72:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.73:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.74:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.75:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.76:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.77:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned with backup :mozilla.102:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.Adocean : Cleaned with backup :mozilla.103:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.Adocean : Cleaned with backup :mozilla.104:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.105:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.106:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.107:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.108:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.127:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.128:H:\Documents and Settings\Ola&Wojtas\Dane aplikacji\Mozilla\Firefox\Profiles\ondtn84t.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup H:\Documents and Settings\Ola&Wojtas\Ustawienia lokalne\Temporary Internet Files\Content.IE5\4T2F0LQN\ysb_prompt[1].htm -> Downloader.IstBar.j : Cleaned with backup H:\Program Files\Save -> Adware.SaveNow : Cleaned with backup H:\Program Files\Save\SaveUninst.exe -> Adware.SaveNow : Cleaned with backup H:\Program Files\Tlen.pl\plugins\DozaKultury.tpl -> Adware.Doza : Cleaned with backup H:\WINDOWS\NDNuninstall6_38.exe -> Adware.NewDotNet : Cleaned with backup H:\WINDOWS\NDNuninstall6_98.exe -> Adware.NewDotNet : Cleaned with backup ::Report End

**Posty:** 8694 · przez **Red** 22 Mar 2006, 02:03

Wszystko ładnie wyczyszczone przez ewido.Pozostaje ci jeszcze wykonanie małego kosmetycznego zabiegu:

Start >>> Uruchom >>> wpisz regedit i przejdz do klucza HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager Tam kliknij podwójnie na wartość BootExecute i z okienka usun wszystko z wyjątkiem autocheck autochk *.

Nic wielkiego dalej nie zobaczyłem w logach ....

**Posty:** 15 · przez **voiteck** 22 Mar 2006, 02:11

Dzieki

prosze o sprawdzenie loga

Prosze o sprawdzenie loga

Kto jest na forum