prosze o sprawdzenie loga

[maciek_s]

Mam tu kilka trojanów jakieś dialery... Trzeba sie pozbyć. Oto log z hijackthis:

Zrobiłem też skan avg'as'em ale szlag trafil raport

Logfile of HijackThis v1.97.7
Scan saved at 13:41:36, on 2006-11-01
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
D:\Programs\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe
C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\{E8079A5F-0A5C-1045-1103-041021030030}\Update.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Programs\Skype\Phone\Skype.exe
C:\PROGRA~1\COMMON~1\ASEMBL~1\taskmgr.exe
C:\Program Files\Pogoda\pogoda.exe
D:\Programs\GetRight\getright.exe
D:\Programs\GetRight\getright.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Total Commander\TOTALCMD.EXE
E:\Install\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://forum.programosy.pl/-vp237772.html#237772
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: (no name) - {D59E0D92-BE56-E2DA-2D05-CA89180A33C9} - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - D:\Programs\GetRight\xx2gr.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Programs\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: AlxTB BHO - {F1FABE79-25FC-46de-8C5A-2C6DB9D64333} - C:\WINDOWS\system32\AlxTB1.dll (file missing)
O3 - Toolbar: Alexa - {3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B} - C:\WINDOWS\system32\SHDOCVW.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ABIT uGuru] C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
O4 - HKLM\..\Run: [WheelMouse] C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [CTDrive] rundll32.exe C:\WINDOWS\system32\drvmap.dll,startup
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\msconfig.exe /auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "D:\Programs\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [Rcws] "C:\PROGRA~1\COMMON~1\ASEMBL~1\taskmgr.exe" -vt yazb
O4 - HKCU\..\Run: [tray] C:\Program Files\Pogoda\pogoda.exe /tray
O4 - Startup: Skrót do slsk.lnk = D:\Programs\SoulSeek\slsk.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: GetRight - Tray Icon.lnk = D:\Programs\GetRight\getright.exe
O8 - Extra context menu item: Alexa Web Search - http://client.alexa.com/holiday/script/actions/search.htm
O8 - Extra context menu item: Download with GetRight - D:\Programs\GetRight\GRdownload.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Get Alexa Data - http://client.alexa.com/holiday/script/actions/sitedata.htm
O8 - Extra context menu item: Mail to a Friend... - http://client.alexa.com/holiday/script/actions/mailto.htm
O8 - Extra context menu item: Open with GetRight Browser - D:\Programs\GetRight\GRbrowse.htm
O8 - Extra context menu item: See Related Links - http://client.alexa.com/holiday/script/actions/related.htm
O8 - Extra context menu item: Write a Review... - http://client.alexa.com/holiday/script/actions/review.htm
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Badanie (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc3.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1143752025531
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://active.macromedia.com/flash2/cabs/swflash.cab

[/quote]

[Aqui]

Logfile of HijackThis v1.97.7

To jest stara wersja hijackthis
Daj loga z najnowszej wersji-opis tutaj
http://www.forum.programosy.pl/hijackthis-amp-silent-runners-gtobsuga-i-umieszczanie-vt9452.html

[maciek_s]

Logfile of HijackThis v1.99.1
Scan saved at 14:31:17, on 2006-11-01
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
D:\Programs\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe
C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\{E8079A5F-0A5C-1045-1103-041021030030}\Update.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Programs\Skype\Phone\Skype.exe
C:\PROGRA~1\COMMON~1\ASEMBL~1\taskmgr.exe
C:\Program Files\Pogoda\pogoda.exe
D:\Programs\GetRight\getright.exe
D:\Programs\GetRight\getright.exe
C:\Program Files\Total Commander\TOTALCMD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\DOCUME~1\MICHA~1\USTAWI~1\Temp\_tc\HIJACK~1.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://forum.programosy.pl/-vp237772.html#237772
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: (no name) - {D59E0D92-BE56-E2DA-2D05-CA89180A33C9} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - D:\Programs\GetRight\xx2gr.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Programs\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: AlxTB BHO - {F1FABE79-25FC-46de-8C5A-2C6DB9D64333} - C:\WINDOWS\system32\AlxTB1.dll (file missing)
O3 - Toolbar: Alexa - {3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B} - C:\WINDOWS\system32\SHDOCVW.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ABIT uGuru] C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
O4 - HKLM\..\Run: [WheelMouse] C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [CTDrive] rundll32.exe C:\WINDOWS\system32\drvmap.dll,startup
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\msconfig.exe /auto
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "D:\Programs\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [Rcws] "C:\PROGRA~1\COMMON~1\ASEMBL~1\taskmgr.exe" -vt yazb
O4 - HKCU\..\Run: [tray] C:\Program Files\Pogoda\pogoda.exe /tray
O4 - Startup: Skrót do slsk.lnk = D:\Programs\SoulSeek\slsk.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: GetRight - Tray Icon.lnk = D:\Programs\GetRight\getright.exe
O8 - Extra context menu item: Alexa Web Search - http://client.alexa.com/holiday/script/actions/search.htm
O8 - Extra context menu item: Download with GetRight - D:\Programs\GetRight\GRdownload.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Get Alexa Data - http://client.alexa.com/holiday/script/actions/sitedata.htm
O8 - Extra context menu item: Mail to a Friend... - http://client.alexa.com/holiday/script/actions/mailto.htm
O8 - Extra context menu item: Open with GetRight Browser - D:\Programs\GetRight\GRbrowse.htm
O8 - Extra context menu item: See Related Links - http://client.alexa.com/holiday/script/actions/related.htm
O8 - Extra context menu item: Write a Review... - http://client.alexa.com/holiday/script/actions/review.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1143752025531
O20 - Winlogon Notify: winmxw32 - C:\WINDOWS\SYSTEM32\winmxw32.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Centrum zabezpieczeń (wscsvc) - Unknown owner - C:\WINDOWS\C:\WINDOWS\System32\svchost.exe (file missing)

[ Dodano: Dzisiaj o 14:44 ]
po drugim scanie z avg-as znowu nie zachowuje się raport wiec nic nie jestem w stanie z tego wrzucić . pierwszy scan wykzał 35 000 zainfekowanych plików w tym ze 4 trojany, dialer i pomniejsze....

[Red]

Proszę zastosować do usuwania:

AVG Anti-Spyware 7.5

http://www.wiruskill.pl/forum/viewtopic.php?t=19

usuwasz wszystko co znajdzie

Dodatkowo zastosujesz:

SmitfraudFix

http://www.wiruskill.pl/forum/viewtopic.php?t=58

uruchomisz go z opcji 2

Po usuwaniu dajesz nowy log z hijacka oraz log z silent runners:

http://www.wiruskill.pl/forum/viewtopic.php?t=80


otwierasz link>>zapisujesz jako na pulpicie>>klikasz dwa razy >>masz wybor i wybierasz no>>i czekasz troszke az wygeneruje sie cały log do konca
wrzucasz na forum..

[maciek_s]

oto logi:

z silent runners

"Silent Runners.vbs", revision 49, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\
"{E8079A5F-0A5C-1045-1103-041021030030}" = ""C:\Program Files\Common Files\{E8079A5F-0A5C-1045-1103-041021030030}\Update.exe" mc-110-12-0000272" [null data]

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"CTFMON.EXE" = "C:\WINDOWS\system32\ctfmon.exe" [MS]
"Skype" = ""D:\Programs\Skype\Phone\Skype.exe" /nosplash /minimized" ["Skype Technologies S.A."]
"Gadu-Gadu" = ""C:\Program Files\Gadu-Gadu\gg.exe" /tray" ["Gadu-Gadu Sp. z o.o."]
"Rcws" = ""C:\PROGRA~1\COMMON~1\ASEMBL~1\taskmgr.exe" -vt yazb" [null data]
"tray" = "C:\Program Files\Pogoda\pogoda.exe /tray" ["Pogoda Inc."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup" [MS]
"NvMediaCenter" = "RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit" [MS]
"SoundMan" = "SOUNDMAN.EXE" ["Realtek Semiconductor Corp."]
"ABIT uGuru" = "C:\Program Files\ABIT\ABIT uGuru\uGuru.exe" ["ABIT Computer Corporation"]
"WheelMouse" = "C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe" ["A4Tech Co.,Ltd."]
"MSConfig" = "C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\msconfig.exe /auto" [MS]
"!AVG Anti-Spyware" = ""C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized" ["Anti-Malware Development a.s."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided)
-> {HKLM...CLSID} = "AcroIEHlprObj Class"
\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"]
{31FF080D-12A3-439A-A2EF-4BA95A3148E8}\(Default) = (no title provided)
-> {HKLM...CLSID} = "bho2gr Class"
\InProcServer32\(Default) = "D:\Programs\GetRight\xx2gr.dll" ["Headlight Software, Inc."]
{53707962-6F74-2D53-2644-206D7942484F}\(Default) = (no title provided)
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = "D:\Programs\Spybot - Search & Destroy\SDHelper.dll" ["Safer Networking Limited"]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided)
-> {HKLM...CLSID} = "SSVHelper Class"
\InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll" ["Sun Microsystems, Inc."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania"
-> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania"
\InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu"
-> {HKLM...CLSID} = "HyperTerminal Icon Ext"
\InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."]

z hijackthis

Logfile of HijackThis v1.99.1
Scan saved at 15:02:28, on 2006-11-01
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
D:\Programs\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe
C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\{E8079A5F-0A5C-1045-1103-041021030030}\Update.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Programs\Skype\Phone\Skype.exe
C:\PROGRA~1\COMMON~1\ASEMBL~1\taskmgr.exe
C:\Program Files\Pogoda\pogoda.exe
D:\Programs\GetRight\getright.exe
D:\Programs\GetRight\getright.exe
C:\Program Files\Total Commander\TOTALCMD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
C:\WINDOWS\explorer.exe
C:\WINDOWS\NOTEPAD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\DOCUME~1\MICHA~1\USTAWI~1\Temp\_tc\HIJACK~1.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: (no name) - {D59E0D92-BE56-E2DA-2D05-CA89180A33C9} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - D:\Programs\GetRight\xx2gr.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Programs\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: AlxTB BHO - {F1FABE79-25FC-46de-8C5A-2C6DB9D64333} - (no file)
O3 - Toolbar: Alexa - {3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B} - C:\WINDOWS\system32\SHDOCVW.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ABIT uGuru] C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
O4 - HKLM\..\Run: [WheelMouse] C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\msconfig.exe /auto
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "D:\Programs\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [Rcws] "C:\PROGRA~1\COMMON~1\ASEMBL~1\taskmgr.exe" -vt yazb
O4 - HKCU\..\Run: [tray] C:\Program Files\Pogoda\pogoda.exe /tray
O4 - Startup: Skrót do slsk.lnk = D:\Programs\SoulSeek\slsk.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: GetRight - Tray Icon.lnk = D:\Programs\GetRight\getright.exe
O8 - Extra context menu item: Alexa Web Search - http://client.alexa.com/holiday/script/actions/search.htm
O8 - Extra context menu item: Download with GetRight - D:\Programs\GetRight\GRdownload.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Get Alexa Data - http://client.alexa.com/holiday/script/actions/sitedata.htm
O8 - Extra context menu item: Mail to a Friend... - http://client.alexa.com/holiday/script/actions/mailto.htm
O8 - Extra context menu item: Open with GetRight Browser - D:\Programs\GetRight\GRbrowse.htm
O8 - Extra context menu item: See Related Links - http://client.alexa.com/holiday/script/actions/related.htm
O8 - Extra context menu item: Write a Review... - http://client.alexa.com/holiday/script/actions/review.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1143752025531
O20 - Winlogon Notify: winmxw32 - C:\WINDOWS\SYSTEM32\winmxw32.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Centrum zabezpieczeń (wscsvc) - Unknown owner - C:\WINDOWS\C:\WINDOWS\System32\svchost.exe (file missing)

[Red]

Log z silent runners został urwany,musi sie zakonczyc


+++++++

poza tym napisz czy zastosowałes narzedzia o ktorych ci napisałem?

[maciek_s]

log z avg-as

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 15:14:49 2006-11-01

+ Scan result:



HKLM\SOFTWARE\Classes\AlxTB.BHO.1 -> Adware.Alexa : Cleaned.
HKLM\SOFTWARE\Classes\PopMenu.Menu.1 -> Adware.Alexa : Cleaned.
HKLM\SOFTWARE\Classes\Popup.HTMLEvent -> Adware.Alexa : Cleaned.
HKLM\SOFTWARE\Classes\Popup.HTMLEvent.1 -> Adware.Alexa : Cleaned.
HKLM\SOFTWARE\Classes\Popup.HTMLEvent\CLSID -> Adware.Alexa : Cleaned.
HKLM\SOFTWARE\Classes\Popup.HTMLEvent\CurVer -> Adware.Alexa : Cleaned.
HKLM\SOFTWARE\Classes\Popup.PopupKiller.1 -> Adware.Alexa : Cleaned.
HKU\S-1-5-21-299502267-362288127-682003330-1003\Software\Microsoft\Internet Explorer\MenuExt\Alexa Web Search -> Adware.Alexa : Cleaned.
HKU\S-1-5-21-299502267-362288127-682003330-1003\Software\Microsoft\Internet Explorer\MenuExt\Get Alexa Data -> Adware.Alexa : Cleaned.
HKU\S-1-5-21-299502267-362288127-682003330-1003\Software\Microsoft\Internet Explorer\MenuExt\Mail to a Friend... -> Adware.Alexa : Cleaned.
HKU\S-1-5-21-299502267-362288127-682003330-1003\Software\Microsoft\Internet Explorer\MenuExt\See Related Links -> Adware.Alexa : Cleaned.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Cleaned.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F1FABE79-25FC-46de-8C5A-2C6DB9D64333} -> Adware.Generic : Cleaned.
HKU\S-1-5-21-299502267-362288127-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C95FE080-8F5D-11D2-A20B-00AA003C157A} -> Adware.Generic : Cleaned.
HKU\S-1-5-21-299502267-362288127-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F1FABE79-25FC-46DE-8C5A-2C6DB9D64333} -> Adware.Generic : Cleaned.
[444] C:\Program Files\Common Files\{E8079A5F-0A5C-1045-1103-041021030030}\Update.exe -> Adware.Softomate : Cleaned.
C:\WINDOWS\system32\__delete_on_reboot__d_r_v_m_a_p_._d_l_l_ -> Not-A-Virus.Hoax.Win32.Renos.fw : Cleaned.
:mozilla.854:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.167:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.168:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.169:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.170:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.171:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.172:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.173:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.174:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.175:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.176:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.177:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.178:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.179:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.180:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.181:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.182:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.183:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.184:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.185:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.186:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.187:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.189:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.190:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.191:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.192:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.193:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.194:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.195:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.196:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.197:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.198:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.199:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.200:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.201:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.202:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.203:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.204:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.205:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.462:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.470:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.507:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.532:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.660:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.918:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Michał\Cookies\michał@2o7[2].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Michał\Cookies\michał@paypal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.105:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.106:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.107:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.108:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.132:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.66:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.67:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.68:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\Michał\Cookies\michał@adbrite[1].txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.770:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.771:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.121:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adocean : Cleaned.
:mozilla.122:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adocean : Cleaned.
:mozilla.430:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adocean : Cleaned.
:mozilla.431:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adocean : Cleaned.
:mozilla.441:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adocean : Cleaned.
:mozilla.442:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adocean : Cleaned.
:mozilla.443:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adocean : Cleaned.
:mozilla.444:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adocean : Cleaned.
:mozilla.456:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adocean : Cleaned.
:mozilla.457:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adocean : Cleaned.
C:\Documents and Settings\Michał\Cookies\michał@ad.adocean[1].txt -> TrackingCookie.Adocean : Cleaned.
C:\Documents and Settings\Michał\Cookies\michał@gde.adocean[2].txt -> TrackingCookie.Adocean : Cleaned.
C:\Documents and Settings\Michał\Cookies\michał@idg.adocean[2].txt -> TrackingCookie.Adocean : Cleaned.
C:\Documents and Settings\Michał\Cookies\michał@my.adocean[2].txt -> TrackingCookie.Adocean : Cleaned.
:mozilla.634:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.640:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.641:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.642:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.643:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.459:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.460:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.397:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.398:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.399:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.400:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.401:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.402:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.188:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.391:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.761:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.762:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
C:\Documents and Settings\Michał\Cookies\michał@www.burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.480:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.481:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.482:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.483:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.708:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned.
C:\Documents and Settings\Michał\Cookies\michał@cz6.clickzs[2].txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.210:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Com : Cleaned.
C:\Documents and Settings\Michał\Cookies\michał@com[1].txt -> TrackingCookie.Com : Cleaned.
:mozilla.598:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
:mozilla.206:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.330:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Enhance : Cleaned.
:mozilla.331:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Enhance : Cleaned.
:mozilla.332:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Enhance : Cleaned.
:mozilla.674:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.760:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.384:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.104:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.60:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.61:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.62:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.265:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Findwhat : Cleaned.
C:\Documents and Settings\Michał\Cookies\michał@findwhat[1].txt -> TrackingCookie.Findwhat : Cleaned.
:mozilla.333:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Goclick : Cleaned.
:mozilla.334:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Goclick : Cleaned.
:mozilla.534:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.535:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.568:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.569:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.570:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.571:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.576:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.577:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.578:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.579:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.581:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.582:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.583:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.599:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.677:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.678:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.679:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.680:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.681:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.803:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.804:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.832:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.870:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.871:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.919:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.921:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.922:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.349:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Hotlog : Cleaned.
:mozilla.567:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Itrack : Cleaned.
:mozilla.447:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Ivwbox : Cleaned.
:mozilla.140:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.141:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.142:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.144:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.589:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned.
:mozilla.231:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.232:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.343:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.344:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.345:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.584:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.386:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.387:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.388:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.389:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.207:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.208:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.209:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.644:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.645:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.
C:\Documents and Settings\Michał\Cookies\michał@revenue[1].txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.830:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.831:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.392:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.393:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.394:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.395:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.145:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned.
:mozilla.150:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned.
:mozilla.944:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.cenzura-spam : Cleaned.
:mozilla.607:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.608:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.609:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.359:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Spylog : Cleaned.
:mozilla.100:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.101:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.102:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.103:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.71:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.72:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.73:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.74:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.75:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.76:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.77:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.78:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.79:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.80:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.81:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.82:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.83:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.84:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.85:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.86:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.87:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.88:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.89:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.90:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.91:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.92:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.93:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.94:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.95:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.96:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.97:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.98:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.99:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.763:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.764:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\Michał\Cookies\michał@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.306:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.307:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.308:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.309:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
C:\Documents and Settings\Michał\Cookies\michał@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.778:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.779:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.780:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.781:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.782:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.783:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.69:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.502:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.503:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.337:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.350:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.
:mozilla.157:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.158:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\Michał\Cookies\michał@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.635:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.636:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.637:C:\Documents and Settings\Michał\Dane aplikacji\Mozilla\Firefox\Profiles\uirh9w8k.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
C:\WINDOWS\system32\winmxw32.dll -> Trojan.Agent.aae : Cleaned.
C:\WINDOWS\system32\cool.exe -> Trojan.Dialer.qs : Cleaned.


::Report end

po tym log z silent runners

"Silent Runners.vbs", revision 49, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\
"{E8079A5F-0A5C-1045-1103-041021030030}" = ""C:\Program Files\Common Files\{E8079A5F-0A5C-1045-1103-041021030030}\Update.exe" mc-110-12-0000272" [file not found]

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"CTFMON.EXE" = "C:\WINDOWS\system32\ctfmon.exe" [MS]
"Skype" = ""D:\Programs\Skype\Phone\Skype.exe" /nosplash /minimized" ["Skype Technologies S.A."]
"Gadu-Gadu" = ""C:\Program Files\Gadu-Gadu\gg.exe" /tray" ["Gadu-Gadu Sp. z o.o."]
"Rcws" = ""C:\PROGRA~1\COMMON~1\ASEMBL~1\taskmgr.exe" -vt yazb" [null data]
"tray" = "C:\Program Files\Pogoda\pogoda.exe /tray" ["Pogoda Inc."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup" [MS]
"NvMediaCenter" = "RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit" [MS]
"SoundMan" = "SOUNDMAN.EXE" ["Realtek Semiconductor Corp."]
"ABIT uGuru" = "C:\Program Files\ABIT\ABIT uGuru\uGuru.exe" ["ABIT Computer Corporation"]
"WheelMouse" = "C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe" ["A4Tech Co.,Ltd."]
"MSConfig" = "C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\msconfig.exe /auto" [MS]
"!AVG Anti-Spyware" = ""C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized" ["Anti-Malware Development a.s."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided)
-> {HKLM...CLSID} = "AcroIEHlprObj Class"
\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"]
{31FF080D-12A3-439A-A2EF-4BA95A3148E8}\(Default) = (no title provided)
-> {HKLM...CLSID} = "bho2gr Class"
\InProcServer32\(Default) = "D:\Programs\GetRight\xx2gr.dll" ["Headlight Software, Inc."]
{53707962-6F74-2D53-2644-206D7942484F}\(Default) = (no title provided)
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = "D:\Programs\Spybot - Search & Destroy\SDHelper.dll" ["Safer Networking Limited"]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided)
-> {HKLM...CLSID} = "SSVHelper Class"
\InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll" ["Sun Microsystems, Inc."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania"
-> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania"
\InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu"
-> {HKLM...CLSID} = "HyperTerminal Icon Ext"
\InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."]
"{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class"
-> {HKLM...CLSID} = "DesktopContext Class"
\InProcServer32\(Default) = "C:\WINDOWS\system32\nvcpl.dll" ["NVIDIA Corporation"]
"{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper"
-> {HKLM...CLSID} = "NVIDIA CPL Extension"
\InProcServer32\(Default) = "C:\WINDOWS\system32\nvcpl.dll" ["NVIDIA Corporation"]
"{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer"
-> {HKLM...CLSID} = "Desktop Explorer"
\InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]
"{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu"
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]
"{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu"
-> {HKLM...CLSID} = "nView Desktop Context Menu"
\InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]
"{00020D75-0000-0000-C000-000000000046}" = "Microsoft Office Outlook Desktop Icon Handler"
-> {HKLM...CLSID} = "Microsoft Office Outlook"
\InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\OFFICE11\MLSHEXT.DLL" [MS]
"{0006F045-0000-0000-C000-000000000046}" = "Microsoft Office Outlook Custom Icon Handler"
-> {HKLM...CLSID} = "Rozszerzenie ikon plików programu Outlook"
\InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\OFFICE11\OLKFSTUB.DLL" [MS]
"{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler"
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\Program Files\Microsoft Office\OFFICE11\msohev.dll" [MS]
"{B327765E-D724-4347-8B16-78AE18552FC3}" = "NeroDigitalIconHandler"
-> {HKLM...CLSID} = "NeroDigitalIconHandler Class"
\InProcServer32\(Default) = "C:\Program Files\Common Files\Ahead\lib\NeroDigitalExt.dll" ["Nero AG"]
"{7F1CF152-04F8-453A-B34C-E609530A9DC8}" = "NeroDigitalPropSheetHandler"
-> {HKLM...CLSID} = "NeroDigitalPropSheetHandler Class"
\InProcServer32\(Default) = "C:\Program Files\Common Files\Ahead\lib\NeroDigitalExt.dll" ["Nero AG"]
"{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}" = "Shell Extensions for RealOne Player"
-> {HKLM...CLSID} = "RealOne Player Context Menu Class"
\InProcServer32\(Default) = "D:\Programs\RealOne Player\rpplugins\ierpplug.dll" ["RealNetworks"]
"{BB7DF450-F119-11CD-8465-00AA00425D90}" = "Microsoft Access Custom Icon Handler"
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\Program Files\Microsoft Office\Office\soa800.dll" [MS]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\
<<!>> "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}" = "AVG Anti-Spyware 7.5"
-> {HKLM...CLSID} = "CShellExecuteHookImpl Object"
\InProcServer32\(Default) = "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll" ["Anti-Malware Development a.s."]

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\
<<!>> winmxw32\DLLName = "winmxw32.dll" [file not found]

HKLM\Software\Classes\PROTOCOLS\Filter\
<<!>> text/xml\CLSID = "{807553E5-5146-11D5-A672-00B0D022E945}"
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL" [MS]

HKLM\Software\Classes\Folder\shellex\ColumnHandlers\
{7D4D6379-F301-4311-BEBA-E26EB0561882}\(Default) = "NeroDigitalExt.NeroDigitalColumnHandler"
-> {HKLM...CLSID} = "NeroDigitalColumnHandler Class"
\InProcServer32\(Default) = "C:\Program Files\Common Files\Ahead\lib\NeroDigitalExt.dll" ["Nero AG"]
{F9DB5320-233E-11D1-9F84-707F02C10627}\(Default) = "PDF Column Info"
-> {HKLM...CLSID} = "PDF Shell Extension"
\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll" ["Adobe Systems, Inc."]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
AVG Anti-Spyware\(Default) = "{8934FCEF-F5B8-468f-951F-78A921CD3920}"
-> {HKLM...CLSID} = "CContextScan Object"
\InProcServer32\(Default) = "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll" ["Anti-Malware Development a.s."]
PowerArchiver\(Default) = "{d03d3e68-0c44-3d45-b15f-bcfd8a8b4c7e}"
-> {HKLM...CLSID} = "PowerArchiver Shell Extensions"
\InProcServer32\(Default) = "D:\Programs\PowerArchiver\PASHLEXT.DLL" ["ConeXware, Inc."]

HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
AVG Anti-Spyware\(Default) = "{8934FCEF-F5B8-468f-951F-78A921CD3920}"
-> {HKLM...CLSID} = "CContextScan Object"
\InProcServer32\(Default) = "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll" ["Anti-Malware Development a.s."]

HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\
PowerArchiver\(Default) = "{d03d3e68-0c44-3d45-b15f-bcfd8a8b4c7e}"
-> {HKLM...CLSID} = "PowerArchiver Shell Extensions"
\InProcServer32\(Default) = "D:\Programs\PowerArchiver\PASHLEXT.DLL" ["ConeXware, Inc."]


Group Policies {GPedit.msc branch and setting}:
-----------------------------------------------

Note: detected settings may not have any effect.

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\

"DisableRegistryTools" = (REG_DWORD) hex:0x00000000
{User Configuration|Administrative Templates|System|
Prevent access to registry editing tools}

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\

"shutdownwithoutlogon" = (REG_DWORD) hex:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
Shutdown: Allow system to be shut down without having to log on}

"undockwithoutlogon" = (REG_DWORD) hex:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
Devices: Allow undock without having to log on}


Active Desktop and Wallpaper:
-----------------------------

Active Desktop may be disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

Displayed if Active Desktop enabled and wallpaper not set by Group Policy:
HKCU\Software\Microsoft\Internet Explorer\Desktop\General\
"Wallpaper" = "C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp"


Startup items in "Michał" & "All Users" startup folders:
--------------------------------------------------------

C:\Documents and Settings\Michał\Menu Start\Programy\Autostart
"Skrót do slsk" -> shortcut to: "D:\Programs\SoulSeek\slsk.exe" [empty string]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
"Adobe Reader Speed Launch" -> shortcut to: "C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe" ["Adobe Systems Incorporated"]
"GetRight - Tray Icon" -> shortcut to: "D:\Programs\GetRight\getright.exe" ["Headlight Software, Inc."]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 17
%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05


Toolbars, Explorer Bars, Extensions:
------------------------------------

Toolbars

HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\
"{4D5C8C2A-D075-11D0-B416-00C04FB90376}"
-> {HKLM...CLSID} = "Pasek poleceń Microsoft"
\InProcServer32\(Default) = "C:\WINDOWS\system32\browseui.dll" [MS]

HKLM\Software\Microsoft\Internet Explorer\Toolbar\
"{3CEFF6CD-6F08-4E4D-BCCD-FF7415288C3B}" = (no title provided)
-> {HKLM...CLSID} = "Alexa"
\InProcServer32\(Default) = "C:\WINDOWS\system32\SHDOCVW.DLL" [MS]

Explorer Bars

HKLM\Software\Microsoft\Internet Explorer\Explorer Bars\

HKLM\Software\Classes\CLSID\{FF059E31-CC5A-4E2E-BF3B-96E929D65503}\(Default) = "&Badanie"
Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar]
InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL" [MS]

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\
"MenuText" = "Sun Java Console"
"CLSIDExtension" = "{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}"
-> {HKCU...CLSID} = "Java Plug-in"
\InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll" ["Sun Microsystems, Inc."]
-> {HKLM...CLSID} = "Java Plug-in 1.5.0_06"
\InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll" ["Sun Microsystems, Inc."]

{92780B25-18CC-41C8-B9BE-3C9C571A8263}\
"ButtonText" = "Badanie"


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

AVG Anti-Spyware Guard, AVG Anti-Spyware Guard, "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe" ["Anti-Malware Development a.s."]
BlueSoleil Hid Service, BlueSoleil Hid Service, "C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe" [null data]
Machine Debug Manager, MDM, ""C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"" [MS]
NVIDIA Display Driver Service, NVSvc, "C:\WINDOWS\system32\nvsvc32.exe" ["NVIDIA Corporation"]
Windows User Mode Driver Framework, UMWdf, "C:\WINDOWS\system32\wdfmgr.exe" [MS]


Print Monitors:
---------------

HKLM\System\CurrentControlSet\Control\Print\Monitors\
HP Standard TCP/IP Port\Driver = "HpTcpMon.dll" ["Hewlett Packard"]
HPLJ1020LM\Driver = "ZLhp1020.DLL" ["Zenographics, Inc."]
hpzlnt12\Driver = "hpzlnt12.dll" ["HP"]
Microsoft Document Imaging Writer Monitor\Driver = "mdimon.dll" [MS]


----------
<<!>>: Suspicious data at a malware launch point.

+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
launch it from a command prompt or a shortcut with the -all parameter.
+ The search for DESKTOP.INI DLL launch points on all local fixed drives
took 127 seconds.
---------- (total run time: 163 seconds)

i na koniec hijack:

Logfile of HijackThis v1.99.1
Scan saved at 15:19:02, on 2006-11-01
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
D:\Programs\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe
C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Programs\Skype\Phone\Skype.exe
C:\PROGRA~1\COMMON~1\ASEMBL~1\taskmgr.exe
C:\Program Files\Pogoda\pogoda.exe
D:\Programs\GetRight\getright.exe
D:\Programs\GetRight\getright.exe
C:\Program Files\Total Commander\TOTALCMD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\explorer.exe
C:\DOCUME~1\MICHA~1\USTAWI~1\Temp\_tc\HIJACK~1.EXE
C:\WINDOWS\system32\NOTEPAD.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: (no name) - {D59E0D92-BE56-E2DA-2D05-CA89180A33C9} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - D:\Programs\GetRight\xx2gr.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Programs\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: Alexa - {3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B} - C:\WINDOWS\system32\SHDOCVW.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ABIT uGuru] C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
O4 - HKLM\..\Run: [WheelMouse] C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\msconfig.exe /auto
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "D:\Programs\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [Rcws] "C:\PROGRA~1\COMMON~1\ASEMBL~1\taskmgr.exe" -vt yazb
O4 - HKCU\..\Run: [tray] C:\Program Files\Pogoda\pogoda.exe /tray
O4 - Startup: Skrót do slsk.lnk = D:\Programs\SoulSeek\slsk.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: GetRight - Tray Icon.lnk = D:\Programs\GetRight\getright.exe
O8 - Extra context menu item: Download with GetRight - D:\Programs\GetRight\GRdownload.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Browser - D:\Programs\GetRight\GRbrowse.htm
O8 - Extra context menu item: Write a Review... - http://client.alexa.com/holiday/script/actions/review.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1143752025531
O20 - Winlogon Notify: winmxw32 - winmxw32.dll (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Centrum zabezpieczeń (wscsvc) - Unknown owner - C:\WINDOWS\C:\WINDOWS\System32\svchost.exe (file missing)

[Red]

usuwasz z wylaczonym przywracaniem systemu w xp i w trybie awaryjnym f8

C:\PROGRA~1\COMMON~1\ASEMBL~1\taskmgr.exe
O4 - HKCU\..\Run: [Rcws] "C:\PROGRA~1\COMMON~1\ASEMBL~1\taskmgr.exe" -vt yazb
O20 - Winlogon Notify: winmxw32 - winmxw32.dll (file missing)
O23 - Service: Centrum zabezpieczeń (wscsvc) - Unknown owner - C:\WINDOWS\C:\WINDOWS\System32\svchost.exe (file missing)

To co ci pogrubiłem usuwasz recznie,wpisy powyzsze zaznacz w hijacku i nacisnij >>>fix

Sam swiadomie instalowałes>>>alexa???

do megauplaud

[Red]

BrzozA zakładaj swoj własny temat!!!!!!!!!

Tu jest temat maćka i nikt sie nie zajmie twoim logiem..........

[maciek_s]

alexa świadomie...

all done..

loga???

teraz po restarcie wyskoczylo mi łaczenie z cool web....

[ Dodano: Dzisiaj o 15:48 ]
dorzucam loga z hijack'a

Logfile of HijackThis v1.99.1
Scan saved at 15:47:36, on 2006-11-01
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Pogoda\pogoda.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
D:\Programs\GetRight\getright.exe
D:\Programs\GetRight\getright.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Total Commander\TOTALCMD.EXE
C:\DOCUME~1\MICHA~1\USTAWI~1\Temp\_tc\HIJACK~1.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: (no name) - {D59E0D92-BE56-E2DA-2D05-CA89180A33C9} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - D:\Programs\GetRight\xx2gr.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Programs\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: Alexa - {3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B} - C:\WINDOWS\system32\SHDOCVW.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ABIT uGuru] C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
O4 - HKLM\..\Run: [WheelMouse] C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "D:\Programs\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [tray] C:\Program Files\Pogoda\pogoda.exe /tray
O4 - Startup: Skrót do slsk.lnk = D:\Programs\SoulSeek\slsk.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: GetRight - Tray Icon.lnk = D:\Programs\GetRight\getright.exe
O8 - Extra context menu item: Download with GetRight - D:\Programs\GetRight\GRdownload.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Browser - D:\Programs\GetRight\GRbrowse.htm
O8 - Extra context menu item: Write a Review... - http://client.alexa.com/holiday/script/actions/review.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1143752025531
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Centrum zabezpieczeń (wscsvc) - Unknown owner - C:\WINDOWS\C:\WINDOWS\System32\svchost.exe (file missing)

[Red]

dalej siedzi:

O23 - Service: Centrum zabezpieczeń (wscsvc) - Unknown owner - C:\WINDOWS\C:\WINDOWS\System32\svchost.exe (file missing)

prosze wykonaj:

Start >>> Uruchom >>> cmd i wklep zestaw komend:


sc delete wscsvc


łaczenie z cool web....

Proszę sciagnij i uruchom:

http://www.intermute.com/spysubtract/cwshredder_download.html

Zastosuj!!!

[maciek_s]

centrum zabezpieczeń wywalone (hijack potwierdził)

scan shredderem nic nie wykrył

[Red]

To jeszcze log poproszę z hijacka,najnowszy.

[maciek_s]

najnowszy scan z hijacka:

Logfile of HijackThis v1.99.1
Scan saved at 16:10:15, on 2006-11-01
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Pogoda\pogoda.exe
D:\Programs\GetRight\getright.exe
D:\Programs\GetRight\getright.exe
C:\Program Files\Total Commander\TOTALCMD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
E:\Install\CWShredder\cwshredder.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\DOCUME~1\MICHA~1\USTAWI~1\Temp\_tc\HIJACK~1.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: (no name) - {D59E0D92-BE56-E2DA-2D05-CA89180A33C9} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - D:\Programs\GetRight\xx2gr.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Programs\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: Alexa - {3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B} - C:\WINDOWS\system32\SHDOCVW.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ABIT uGuru] C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
O4 - HKLM\..\Run: [WheelMouse] C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "D:\Programs\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [tray] C:\Program Files\Pogoda\pogoda.exe /tray
O4 - Startup: Skrót do slsk.lnk = D:\Programs\SoulSeek\slsk.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: GetRight - Tray Icon.lnk = D:\Programs\GetRight\getright.exe
O8 - Extra context menu item: Download with GetRight - D:\Programs\GetRight\GRdownload.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Browser - D:\Programs\GetRight\GRbrowse.htm
O8 - Extra context menu item: Write a Review... - http://client.alexa.com/holiday/script/actions/review.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1143752025531
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

[Red]

Zupełnie czysto.

[maciek_s]

ok
Dzięki

[Red]

ok,bardzo proszę.