prosze o sprawdzenie loga

**Posty:** 321 · przez **Dhogar** 26 Cze 2007, 14:59

Komputer jest zamulony( instalowal winde 30 min temu), norton inter security sie nie odpala, gdy wlanczam okno rozmowy w GG wsyakkuje okienko zebym pobral banrt. Log:

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 14:33:50, on 2007-06-26 Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\System32\RUNDLL32.EXE C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\WINDOWS\System32\ctfmon.exe C:\Program Files\Common Files\Symantec Shared\ccProxy.exe C:\Program Files\DAEMON Tools\daemon.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Gadu-Gadu\gg.exe C:\WINDOWS\System32\inetsrv\inetinfo.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\snmp.exe C:\WINDOWS\System32\mqsvc.exe C:\WINDOWS\System32\mqtgsvc.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\System32\wuauclt.exe C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe C:\Documents and Settings\Administrator\Pulpit\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://rejestracja.neostrada.pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [IS CfgWiz] C:\Program Files\Norton Internet Security\cfgwiz.exe /GUID {F073BDC9-0D67-4ff0-879E-27241C843828} /MODE CfgWiz /CMDLINE "REBOOT" O4 - HKLM\..\Run: [SSC_UserPrompt] "C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

**Posty:** 18165 · przez **wojtas** 26 Cze 2007, 15:05

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

skasuj wpisy + pogrubione

potem daj loga z:

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

**Posty:** 321 · przez **Dhogar** 26 Cze 2007, 15:12

Kod: Zaznacz wszystko: "Administrator" - 2007-06-26 14:46:47 - ComboFix 07-06-26.8 - Dodatek Service Pack. 1 NTFS ((((((((((((((((((((((((( Files Created from 2007-05-26 to 2007-06-26 ))))))))))))))))))))))))))))))) 2007-06-26 14:46 49,152 --a------ C:\WINDOWS\nircmd.exe 2007-06-26 14:39 <DIR> d-------- C:\Program Files\EA SPORTS 2007-06-26 14:37 <DIR> d-------- C:\WINDOWS\RegisteredPackages 2007-06-26 14:36 98,816 --a------ C:\WINDOWS\system32\dmstyle.dll 2007-06-26 14:36 974,848 --a------ C:\WINDOWS\system32\dxdiag.exe 2007-06-26 14:36 83,968 --a------ C:\WINDOWS\system32\drivers\nabtsfec.sys 2007-06-26 14:36 80,896 --a------ C:\WINDOWS\system32\dpvsetup.exe 2007-06-26 14:36 8,192 --a------ C:\WINDOWS\system32\d3d8thk.dll 2007-06-26 14:36 797,184 --a------ C:\WINDOWS\system32\d3dim700.dll 2007-06-26 14:36 79,360 --a------ C:\WINDOWS\system32\dpwsockx.dll 2007-06-26 14:36 77,824 --a------ C:\WINDOWS\system32\dpmodemx.dll 2007-06-26 14:36 76,800 --a------ C:\WINDOWS\system32\dmscript.dll 2007-06-26 14:36 733,184 --a------ C:\WINDOWS\system32\qedwipes.dll 2007-06-26 14:36 723,968 --a------ C:\WINDOWS\system32\dpnet.dll 2007-06-26 14:36 7,424 --a------ C:\WINDOWS\system32\drivers\mskssrv.sys 2007-06-26 14:36 68,096 --a------ C:\WINDOWS\system32\dpnhupnp.dll 2007-06-26 14:36 64,512 --a------ C:\WINDOWS\system32\amstream.dll 2007-06-26 14:36 602,624 --a------ C:\WINDOWS\system32\dx7vb.dll 2007-06-26 14:36 58,368 --a------ C:\WINDOWS\system32\dmcompos.dll 2007-06-26 14:36 52,096 --a------ C:\WINDOWS\system32\drivers\msdv.sys 2007-06-26 14:36 5,504 --a------ C:\WINDOWS\system32\drivers\mstee.sys 2007-06-26 14:36 5,248 --a------ C:\WINDOWS\system32\drivers\mspclock.sys 2007-06-26 14:36 491,520 --a------ C:\WINDOWS\system32\dsdmoprp.dll 2007-06-26 14:36 48,512 --a------ C:\WINDOWS\system32\drivers\stream.sys 2007-06-26 14:36 470,528 --a------ C:\WINDOWS\system32\qdvd.dll 2007-06-26 14:36 47,104 --a------ C:\WINDOWS\system32\wstdecod.dll 2007-06-26 14:36 46,592 --a------ C:\WINDOWS\system32\dxdllreg.exe 2007-06-26 14:36 4,608 --a------ C:\WINDOWS\system32\drivers\mspqm.sys 2007-06-26 14:36 4,096 --a------ C:\WINDOWS\system32\ksuser.dll 2007-06-26 14:36 4,096 --a------ C:\WINDOWS\system32\drivers\swenum.sys 2007-06-26 14:36 381,952 --a------ C:\WINDOWS\system32\dsound.dll 2007-06-26 14:36 381,952 --a------ C:\WINDOWS\system32\dpvoice.dll 2007-06-26 14:36 354,816 --a------ C:\WINDOWS\system32\psisdecd.dll 2007-06-26 14:36 34,304 --a------ C:\WINDOWS\system32\mciqtz32.dll 2007-06-26 14:36 33,280 --a------ C:\WINDOWS\system32\dmloader.dll 2007-06-26 14:36 324,096 --a------ C:\WINDOWS\system32\mswebdvd.dll 2007-06-26 14:36 32,768 --a------ C:\WINDOWS\system32\dpnhpast.dll 2007-06-26 14:36 316,928 --a------ C:\WINDOWS\system32\qdv.dll 2007-06-26 14:36 3,072 --a------ C:\WINDOWS\system32\dpnlobby.dll 2007-06-26 14:36 3,072 --a------ C:\WINDOWS\system32\dpnaddr.dll 2007-06-26 14:36 292,864 --a------ C:\WINDOWS\system32\ddraw.dll 2007-06-26 14:36 28,160 --a------ C:\WINDOWS\system32\dplaysvr.exe 2007-06-26 14:36 27,136 --a------ C:\WINDOWS\system32\dmband.dll 2007-06-26 14:36 257,024 --a------ C:\WINDOWS\system32\qcap.dll 2007-06-26 14:36 24,064 --a------ C:\WINDOWS\system32\ddrawex.dll 2007-06-26 14:36 230,400 --a------ C:\WINDOWS\system32\dplayx.dll 2007-06-26 14:36 19,968 --a------ C:\WINDOWS\system32\dpvacm.dll 2007-06-26 14:36 186,880 --a------ C:\WINDOWS\system32\dsdmo.dll 2007-06-26 14:36 181,248 --a------ C:\WINDOWS\system32\dmime.dll 2007-06-26 14:36 18,944 --a------ C:\WINDOWS\system32\encapi.dll 2007-06-26 14:36 18,688 --a------ C:\WINDOWS\system32\drivers\wstcodec.sys 2007-06-26 14:36 18,432 --a------ C:\WINDOWS\system32\dswave.dll 2007-06-26 14:36 173,056 --a------ C:\WINDOWS\system32\qasf.dll 2007-06-26 14:36 16,896 --a------ C:\WINDOWS\system32\msyuv.dll 2007-06-26 14:36 16,896 --a------ C:\WINDOWS\system32\dpnsvr.exe 2007-06-26 14:36 16,384 --a------ C:\WINDOWS\system32\drivers\ccdecode.sys 2007-06-26 14:36 15,104 --a------ C:\WINDOWS\system32\drivers\mpe.sys 2007-06-26 14:36 14,976 --a------ C:\WINDOWS\system32\drivers\streamip.sys 2007-06-26 14:36 132,608 --a------ C:\WINDOWS\system32\devenum.dll 2007-06-26 14:36 130,304 --a------ C:\WINDOWS\system32\drivers\ks.sys 2007-06-26 14:36 13,312 --a------ C:\WINDOWS\system32\msdmo.dll 2007-06-26 14:36 122,880 --a------ C:\WINDOWS\system32\dmusic.dll 2007-06-26 14:36 112,128 --a------ C:\WINDOWS\system32\dpvvox.dll 2007-06-26 14:36 11,392 --a------ C:\WINDOWS\system32\drivers\bdasup.sys 2007-06-26 14:36 100,864 --a------ C:\WINDOWS\system32\dmsynth.dll 2007-06-26 14:36 10,880 --a------ C:\WINDOWS\system32\drivers\slip.sys 2007-06-26 14:36 10,496 --a------ C:\WINDOWS\system32\drivers\dxapi.sys 2007-06-26 14:36 10,112 --a------ C:\WINDOWS\system32\drivers\ndisip.sys 2007-06-26 14:36 1,962,496 --a------ C:\WINDOWS\system32\quartz.dll 2007-06-26 14:36 1,798,144 --a------ C:\WINDOWS\system32\qedit.dll 2007-06-26 14:36 1,769,472 --a------ C:\WINDOWS\system32\dxdiagn.dll 2007-06-26 14:36 1,703,936 --a------ C:\WINDOWS\system32\d3d9.dll 2007-06-26 14:36 1,294,336 --a------ C:\WINDOWS\system32\dsound3d.dll 2007-06-26 14:36 1,230,336 --a------ C:\WINDOWS\system32\msvidctl.dll 2007-06-26 14:36 1,201,152 --a------ C:\WINDOWS\system32\d3d8.dll 2007-06-26 14:36 1,189,888 --a------ C:\WINDOWS\system32\dx8vb.dll 2007-06-26 14:24 <DIR> d-------- C:\DOCUME~1\ADMINI~1\DANEAP~1\Symantec 2007-06-26 14:19 10,344 --a------ C:\WINDOWS\system32\drivers\symlcbrd.sys 2007-06-26 14:19 <DIR> d-------- C:\Program Files\Norton Internet Security 2007-06-26 14:18 87,768 --a------ C:\WINDOWS\system32\S32EVNT1.DLL 2007-06-26 14:18 108,168 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.SYS 2007-06-26 14:18 <DIR> dr-hsc--- C:\WINDOWS\system32\dllcache 2007-06-26 14:18 <DIR> dr--s---- C:\WINDOWS\Fonts 2007-06-26 14:18 <DIR> dr------- C:\WINDOWS\Web 2007-06-26 14:18 <DIR> d-------- C:\WINDOWS\WinSxS 2007-06-26 14:18 <DIR> d-------- C:\WINDOWS\twain_32 2007-06-26 14:18 <DIR> d-------- C:\WINDOWS\system32\wins 2007-06-26 14:18 <DIR> d-------- C:\WINDOWS\system32\wbem 2007-06-26 14:18 <DIR> d-------- C:\WINDOWS\system32\usmt 2007-06-26 14:18 <DIR> d-------- C:\WINDOWS\system32\spool 2007-06-26 14:18 <DIR> d-------- C:\WINDOWS\system32\ShellExt 2007-06-26 14:18 <DIR> d-------- C:\WINDOWS\system32\Setup 2007-06-26 14:18 <DIR> d-------- C:\WINDOWS\system32\ras 2007-06-26 14:18 <DIR> d-------- C:\WINDOWS\system32\oobe 2007-06-26 14:18 <DIR> d-------- C:\WINDOWS\system32\npp 2007-06-26 14:18 <DIR> d-------- C:\WINDOWS\system32\mui 2007-06-26 14:18 <DIR> d-------- C:\WINDOWS\system32\inetsrv 2007-06-26 14:18 <DIR> d-------- C:\WINDOWS\system32\IME 2007-06-26 14:18 <DIR> d-------- C:\WINDOWS\system32\icsxml 2007-06-26 14:18 <DIR> d-------- C:\WINDOWS\system32\ias (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-06-26 12:12:34 70,336 ----a-w C:\WINDOWS\system32\perfc015.dat 2007-06-26 12:12:34 403,380 ----a-w C:\WINDOWS\system32\perfh015.dat 2007-06-26 10:35:09 -------- d-----w C:\Program Files\Usługi online ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {9ECB9560-04F9-4bbc-943D-298DDF1699E1}=C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll [2005-10-22 19:29] {A8F38D8D-E480-4D52-B7A2-731BB6995FDD}=C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll [2005-10-07 01:25] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "nwiz"="nwiz.exe" [2006-10-22 12:22 C:\WINDOWS\system32\nwiz.exe] "RTHDCPL"="RTHDCPL.EXE" [2006-08-23 14:08 C:\WINDOWS\RTHDCPL.exe] "SkyTel"="SkyTel.EXE" [2006-05-16 12:04 C:\WINDOWS\SkyTel.exe] "MsmqIntCert"="regsvr32 /s mqrt.dll" [] "ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2005-09-17 01:27] "IS CfgWiz"="C:\Program Files\Norton Internet Security\cfgwiz.exe" [2005-09-29 23:33] "SSC_UserPrompt"="C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe" [2004-11-02 17:59] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\System32\ctfmon.exe" [2002-09-20 18:05] "Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-05-10 16:36] "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2007-04-04 00:29] *Newly Created Service* - COMHOST Contents of the 'Scheduled Tasks' folder 2007-06-26 12:21:39 C:\WINDOWS\tasks\Symantec NetDetect.job ((((((((((((((((((((((((( Files Created from 2007-05-26 to 2007-06-26 ))))))))))))))))))))))))))))))) 2007-06-26 12:35 <DIR> d-------- C:\Program Files\Usˆugi online (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-06-26 12:12:34 70,336 ----a-w C:\WINDOWS\system32\perfc015.dat 2007-06-26 12:12:34 403,380 ----a-w C:\WINDOWS\system32\perfh015.dat 2007-06-26 10:35:09 -------- d-----w C:\Program Files\Usługi online ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {9ECB9560-04F9-4bbc-943D-298DDF1699E1}=C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll [2005-10-22 19:29] {A8F38D8D-E480-4D52-B7A2-731BB6995FDD}=C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll [2005-10-07 01:25] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "nwiz"="nwiz.exe" [2006-10-22 12:22 C:\WINDOWS\system32\nwiz.exe] "RTHDCPL"="RTHDCPL.EXE" [2006-08-23 14:08 C:\WINDOWS\RTHDCPL.exe] "SkyTel"="SkyTel.EXE" [2006-05-16 12:04 C:\WINDOWS\SkyTel.exe] "MsmqIntCert"="regsvr32 /s mqrt.dll" [] "ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2005-09-17 01:27] "IS CfgWiz"="C:\Program Files\Norton Internet Security\cfgwiz.exe" [2005-09-29 23:33] "SSC_UserPrompt"="C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe" [2004-11-02 17:59] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\System32\ctfmon.exe" [2002-09-20 18:05] "Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-05-10 16:36] "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2007-04-04 00:29] *Newly Created Service* - COMHOST Contents of the 'Scheduled Tasks' folder 2007-06-26 12:21:39 C:\WINDOWS\tasks\Symantec NetDetect.job ************************************************************************** catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net Rootkit scan 2007-06-26 14:48:33 Windows 5.1.2600 Dodatek Service Pack. 1 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... ************************************************************************** Completion time: 2007-06-26 14:48:48 --- E O F ---

**Posty:** 18165 · przez **wojtas** 26 Cze 2007, 15:17

jest zupełnie czysto

**Posty:** 321 · przez **Dhogar** 26 Cze 2007, 17:07

a co mam zrobic gdy wyskakuje cos takiego:
http://www.fotosik.pl/showFullSize.php?id=3c0c65643c92c893

przez **jeff** 26 Cze 2007, 21:12

Agęcik napisał(a):Witam miałem taki sam problem zrobiłem wszystko jak w temacie usunołem pliki oto log:

zaloz wlasny temat

**Posty:** 18165 · przez **wojtas** 26 Cze 2007, 22:08

Dhogar

Użyj WWDC :
http://www.firewallleaktester.com/wwdc.htm
Zmień opcje z disable na enable. Uruchom ponownie komputer.
Tak powinny wyglądać porty (NetBIOS może być żółty) :
http://www.firewallleaktester.com/images_site/wwdc.jpg

sprobuj to pobrac

**Posty:** 321 · przez **Dhogar** 28 Cze 2007, 03:40

Prosze o ponowne sprawdzenie loga dzisjaj postawilem system i znowu nazbieralo mi sie syfu, norton wogole nie odpowiada.

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 03:14:39, on 2007-06-28 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Common Files\Symantec Shared\ccProxy.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE C:\Documents and Settings\Pasiak\Dane aplikacji\SopCast\adv\SopAdver.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\Pasiak\Pulpit\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://rejestracja.neostrada.pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

**Posty:** 18165 · przez **wojtas** 28 Cze 2007, 11:44

tylko ten wpis i pogruiobny"

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

czy po formacie przeinstalowywales nortona?

**Posty:** 321 · przez **Dhogar** 28 Cze 2007, 11:54

przeinstalowalem, ale wczoraj ogladalem copa america przez sopcast i ciagle wyskakiwalo ze norton blokuje ataki.

**Posty:** 18165 · przez **wojtas** 28 Cze 2007, 12:30

bo w tym programie jest wiele syfu i dlatego blokuje

**Posty:** 321 · przez **Dhogar** 28 Cze 2007, 12:37

chyba czegos nie zdolal zablokowac

wczoraj mialem 60 dni subscription a dzisjaj mam 0 i anwet nie moge sprawdzic kompa.

**Posty:** 18165 · przez **wojtas** 28 Cze 2007, 12:39

sciagnij gmera:

http://gmer.net/gmer.zip

1. Zakładka Rootkit >>> zaznaczone wszystko oprócz Pokazuj wszystko >>> kliknij Szukaj >>> czekaj cierpliwie aż skończy >>> Kopiuj >>> wklej do posta
2. Zakładka Rootkit >>> zaznaczone tylko Usługi i Pokazuj wszystko >>> kliknij Szukaj >>> czekaj cierpliwie aż skończy >>> Kopiuj >>> wklej do posta

daj 2 logi z gmera oraz combofixa wrzuc wszysytkie na rapidshre.com

**Posty:** 321 · przez **Dhogar** 28 Cze 2007, 12:59

http://rapidshare.com/files/39822779/logi.rar.html

Jest tylko 1 log z gmera poniewaz jak zanznaczylem uslugi nic nie znalazl.

**Posty:** 18165 · przez **wojtas** 28 Cze 2007, 13:40

sprobuj jeszcze raz to wykonac:

Zakładka Rootkit >>> zaznaczone tylko Usługi i Pokazuj wszystko >>> kliknij Szukaj >>> czekaj cierpliwie aż skończy >>> Kopiuj >>> wklej do posta

**Posty:** 321 · przez **Dhogar** 28 Cze 2007, 13:50

Kod: Zaznacz wszystko: GMER 1.0.13.12540 - http://www.gmer.net Rootkit scan 2007-06-28 13:26:39 Windows 5.1.2600 Dodatek Service Pack 2 ---- Services - GMER 1.0.13 ---- Service [DISABLED] Abiosdsk Service [DISABLED] abp480n5 Service C:\WINDOWS\system32\DRIVERS\ACPI.sys [BOOT] ACPI Service [DISABLED] ACPIEC Service [DISABLED] adpu160m Service C:\WINDOWS\system32\drivers\aec.sys [MANUAL] aec Service C:\WINDOWS\System32\drivers\afd.sys [SYSTEM] AFD Service [DISABLED] Aha154x Service [DISABLED] aic78u2 Service [DISABLED] aic78xx Service C:\WINDOWS\system32\svchost.exe [DISABLED] Alerter Service C:\WINDOWS\System32\alg.exe [MANUAL] ALG Service [DISABLED] AliIde Service [DISABLED] amsint Service C:\WINDOWS\system32\svchost.exe [MANUAL] AppMgmt Service [DISABLED] asc Service [DISABLED] asc3350p Service [DISABLED] asc3550 Service C:\WINDOWS\system32\drivers\Asushwio.sys [MANUAL] Asushwio Service C:\WINDOWS\system32\DRIVERS\asyncmac.sys [MANUAL] AsyncMac Service C:\WINDOWS\system32\DRIVERS\atapi.sys [BOOT] atapi Service C:\WINDOWS\system32\DRIVERS\atl01_xp.sys [MANUAL] AtcL001 Service [DISABLED] Atdisk Service C:\WINDOWS\system32\DRIVERS\atmarpc.sys [MANUAL] Atmarpc Service C:\WINDOWS\System32\svchost.exe [AUTO] AudioSrv Service C:\WINDOWS\system32\DRIVERS\audstub.sys [MANUAL] audstub Service BattC Service [SYSTEM] Beep Service C:\WINDOWS\system32\svchost.exe [MANUAL] BITS Service C:\WINDOWS\system32\svchost.exe [AUTO] Browser Service [DISABLED] cbidf2k Service C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe [AUTO] ccEvtMgr Service C:\Program Files\Norton Internet Security\ccPwdSvc.exe [MANUAL] ccISPwdSvc Service C:\Program Files\Common Files\Symantec Shared\ccProxy.exe [AUTO] ccProxy Service C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe [AUTO] ccSetMgr Service [DISABLED] cd20xrnt Service [SYSTEM] Cdaudio Service [DISABLED] Cdfs Service C:\WINDOWS\system32\DRIVERS\cdrom.sys [SYSTEM] Cdrom Service [SYSTEM] Changer Service C:\WINDOWS\system32\cisvc.exe [MANUAL] CiSvc Service C:\WINDOWS\system32\clipsrv.exe [DISABLED] ClipSrv Service [DISABLED] CmdIde Service C:\Program Files\Norton Internet Security\comHost.exe [MANUAL] comHost Service C:\WINDOWS\system32\dllhost.exe [MANUAL] COMSysApp Service ContentFilter Service ContentIndex Service [DISABLED] Cpqarray Service C:\WINDOWS\system32\svchost.exe [AUTO] CryptSvc Service [DISABLED] dac2w2k Service [DISABLED] dac960nt Service C:\WINDOWS\system32\svchost.exe [AUTO] DcomLaunch Service C:\WINDOWS\system32\svchost.exe [AUTO] Dhcp Service C:\WINDOWS\system32\DRIVERS\disk.sys [BOOT] Disk Service C:\WINDOWS\System32\dmadmin.exe [MANUAL] dmadmin Service C:\WINDOWS\System32\drivers\dmboot.sys [DISABLED] dmboot Service C:\WINDOWS\System32\drivers\dmio.sys [BOOT] dmio Service C:\WINDOWS\System32\drivers\dmload.sys [BOOT] dmload Service C:\WINDOWS\System32\svchost.exe [AUTO] dmserver Service C:\WINDOWS\system32\drivers\DMusic.sys [MANUAL] DMusic Service C:\WINDOWS\system32\svchost.exe [AUTO] Dnscache Service [DISABLED] dpti2o Service C:\WINDOWS\system32\drivers\drmkaud.sys [MANUAL] drmkaud Service C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [MANUAL] EraserUtilRebootDrv Service C:\WINDOWS\System32\svchost.exe [AUTO] ERSvc Service C:\WINDOWS\system32\services.exe [AUTO] Eventlog Service C:\WINDOWS\system32\svchost.exe [MANUAL] EventSystem Service [DISABLED] Fastfat Service C:\WINDOWS\System32\svchost.exe [MANUAL] FastUserSwitchingCompatibility Service C:\WINDOWS\system32\DRIVERS\fdc.sys [MANUAL] Fdc Service [SYSTEM] Fips Service C:\WINDOWS\system32\DRIVERS\flpydisk.sys [MANUAL] Flpydisk Service C:\WINDOWS\system32\DRIVERS\fltMgr.sys [BOOT] FltMgr Service [SYSTEM] Fs_Rec Service C:\WINDOWS\system32\DRIVERS\ftdisk.sys [BOOT] Ftdisk Service C:\WINDOWS\System32\DRIVERS\gmer.sys [MANUAL] gmer Service C:\WINDOWS\system32\DRIVERS\msgpc.sys [MANUAL] Gpc Service C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [MANUAL] HDAudBus Service C:\WINDOWS\System32\svchost.exe [AUTO] helpsvc Service C:\WINDOWS\System32\svchost.exe [DISABLED] HidServ Service C:\WINDOWS\system32\DRIVERS\hidusb.sys [MANUAL] hidusb Service [DISABLED] hpn Service C:\WINDOWS\System32\Drivers\HTTP.sys [MANUAL] HTTP Service C:\WINDOWS\System32\svchost.exe [MANUAL] HTTPFilter Service [SYSTEM] i2omgmt Service [DISABLED] i2omp Service C:\WINDOWS\system32\DRIVERS\i8042prt.sys [SYSTEM] i8042prt Service C:\WINDOWS\system32\DRIVERS\imapi.sys [SYSTEM] Imapi Service C:\WINDOWS\system32\imapi.exe [MANUAL] ImapiService Service inetaccs Service [DISABLED] ini910u Service Inport Service C:\WINDOWS\system32\drivers\RtkHDAud.sys [MANUAL] IntcAzAudAddService Service [DISABLED] IntelIde Service C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys [MANUAL] Ip6Fw Service C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys [MANUAL] IpFilterDriver Service C:\WINDOWS\system32\DRIVERS\ipinip.sys [MANUAL] IpInIp Service C:\WINDOWS\system32\DRIVERS\ipnat.sys [MANUAL] IpNat Service C:\WINDOWS\system32\DRIVERS\ipsec.sys [SYSTEM] IPSec Service C:\WINDOWS\system32\DRIVERS\irenum.sys [MANUAL] IRENUM Service ISAPISearch Service C:\WINDOWS\system32\DRIVERS\isapnp.sys [BOOT] isapnp Service C:\WINDOWS\system32\DRIVERS\kbdclass.sys [SYSTEM] Kbdclass Service C:\WINDOWS\system32\drivers\kmixer.sys [MANUAL] kmixer Service [BOOT] KSecDD Service C:\WINDOWS\system32\svchost.exe [AUTO] lanmanserver Service C:\WINDOWS\system32\svchost.exe [AUTO] lanmanworkstation Service [SYSTEM] lbrtfdc Service ldap Service LicenseService Service C:\WINDOWS\system32\svchost.exe [AUTO] LmHosts Service C:\WINDOWS\system32\svchost.exe [DISABLED] Messenger Service [SYSTEM] mnmdd Service C:\WINDOWS\system32\mnmsrvc.exe [MANUAL] mnmsrvc Service [MANUAL] Modem Service C:\WINDOWS\system32\DRIVERS\mouclass.sys [SYSTEM] Mouclass Service C:\WINDOWS\system32\DRIVERS\mouhid.sys [MANUAL] mouhid Service [BOOT] MountMgr Service [DISABLED] mraid35x Service C:\WINDOWS\system32\DRIVERS\mrxdav.sys [MANUAL] MRxDAV Service C:\WINDOWS\system32\DRIVERS\mrxsmb.sys [SYSTEM] MRxSmb Service C:\WINDOWS\system32\msdtc.exe [MANUAL] MSDTC Service [SYSTEM] Msfs Service C:\WINDOWS\system32\msiexec.exe [MANUAL] MSIServer Service C:\WINDOWS\system32\drivers\MSKSSRV.sys [MANUAL] MSKSSRV Service C:\WINDOWS\system32\drivers\MSPCLOCK.sys [MANUAL] MSPCLOCK Service C:\WINDOWS\system32\drivers\MSPQM.sys [MANUAL] MSPQM Service C:\WINDOWS\system32\DRIVERS\mssmbios.sys [MANUAL] mssmbios Service C:\WINDOWS\system32\DRIVERS\ASACPI.sys [MANUAL] MTsensor Service [BOOT] Mup Service C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe [AUTO] navapsvc Service C:\Program Files\Common Files\Symantec Shared\VirusDefs\20050912.024\NAVENG.SYS [MANUAL] NAVENG Service C:\Program Files\Common Files\Symantec Shared\VirusDefs\20050912.024\NAVEX15.SYS [MANUAL] NAVEX15 Service [BOOT] NDIS Service C:\WINDOWS\system32\DRIVERS\ndistapi.sys [MANUAL] NdisTapi Service C:\WINDOWS\system32\DRIVERS\ndisuio.sys [MANUAL] Ndisuio Service C:\WINDOWS\system32\DRIVERS\ndiswan.sys [MANUAL] NdisWan Service [MANUAL] NDProxy Service C:\WINDOWS\system32\DRIVERS\netbios.sys [SYSTEM] NetBIOS Service C:\WINDOWS\system32\DRIVERS\netbt.sys [SYSTEM] NetBT Service C:\WINDOWS\system32\netdde.exe [DISABLED] NetDDE Service C:\WINDOWS\system32\netdde.exe [DISABLED] NetDDEdsdm Service C:\WINDOWS\system32\lsass.exe [MANUAL] Netlogon Service C:\WINDOWS\System32\svchost.exe [MANUAL] Netman Service C:\WINDOWS\system32\svchost.exe [MANUAL] Nla Service [SYSTEM] Npfs Service C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE [MANUAL] NSCService Service [DISABLED] Ntfs Service C:\WINDOWS\system32\lsass.exe [MANUAL] NtLmSsp Service C:\WINDOWS\system32\svchost.exe [MANUAL] NtmsSvc Service [SYSTEM] Null Service C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [MANUAL] nv Service C:\WINDOWS\system32\nvsvc32.exe [AUTO] NVSvc Service C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys [MANUAL] NwlnkFlt Service C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys [MANUAL] NwlnkFwd Service C:\WINDOWS\system32\DRIVERS\parport.sys [MANUAL] Parport Service [BOOT] PartMgr Service [AUTO] ParVdm Service C:\WINDOWS\system32\DRIVERS\pci.sys [BOOT] PCI Service [SYSTEM] PCIDump Service C:\WINDOWS\system32\DRIVERS\pciide.sys [BOOT] PCIIde Service [DISABLED] Pcmcia Service [MANUAL] PDCOMP Service [MANUAL] PDFRAME Service [MANUAL] PDRELI Service [MANUAL] PDRFRAME Service [DISABLED] perc2 Service [DISABLED] perc2hib Service PerfDisk Service PerfNet Service PerfOS Service PerfProc Service C:\WINDOWS\system32\services.exe [AUTO] PlugPlay Service C:\WINDOWS\system32\lsass.exe [AUTO] PolicyAgent Service C:\WINDOWS\system32\DRIVERS\raspptp.sys [MANUAL] PptpMiniport Service C:\WINDOWS\system32\DRIVERS\processr.sys [SYSTEM] Processor Service C:\WINDOWS\system32\lsass.exe [AUTO] ProtectedStorage Service C:\WINDOWS\system32\DRIVERS\psched.sys [MANUAL] PSched Service C:\WINDOWS\system32\DRIVERS\ptilink.sys [MANUAL] Ptilink Service [DISABLED] ql1080 Service [DISABLED] Ql10wnt Service [DISABLED] ql12160 Service [DISABLED] ql1240 Service [DISABLED] ql1280 Service C:\WINDOWS\system32\DRIVERS\rasacd.sys [SYSTEM] RasAcd Service C:\WINDOWS\system32\svchost.exe [MANUAL] RasAuto Service C:\WINDOWS\system32\DRIVERS\rasl2tp.sys [MANUAL] Rasl2tp Service C:\WINDOWS\system32\svchost.exe [MANUAL] RasMan Service C:\WINDOWS\system32\DRIVERS\raspppoe.sys [MANUAL] RasPppoe Service C:\WINDOWS\system32\DRIVERS\raspti.sys [MANUAL] Raspti Service C:\WINDOWS\system32\DRIVERS\rdbss.sys [SYSTEM] Rdbss Service C:\WINDOWS\System32\DRIVERS\RDPCDD.sys [SYSTEM] RDPCDD Service RDPDD Service C:\WINDOWS\system32\DRIVERS\rdpdr.sys [MANUAL] rdpdr Service RDPNP Service [MANUAL] RDPWD Service C:\WINDOWS\system32\sessmgr.exe [MANUAL] RDSessMgr Service C:\WINDOWS\system32\DRIVERS\redbook.sys [SYSTEM] redbook Service C:\WINDOWS\system32\svchost.exe [DISABLED] RemoteAccess Service C:\WINDOWS\system32\svchost.exe [AUTO] RemoteRegistry Service C:\WINDOWS\system32\locator.exe [MANUAL] RpcLocator Service C:\WINDOWS\system32\svchost.exe [AUTO] RpcSs Service C:\WINDOWS\system32\rsvp.exe [MANUAL] RSVP Service C:\WINDOWS\system32\lsass.exe [AUTO] SamSs Service C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVRT.SYS [MANUAL] SAVRT Service C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVRTPEL.SYS [SYSTEM] SAVRTPEL Service C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe [MANUAL] SAVScan Service C:\WINDOWS\System32\SCardSvr.exe [MANUAL] SCardSvr Service C:\WINDOWS\System32\svchost.exe [AUTO] Schedule Service C:\WINDOWS\system32\DRIVERS\secdrv.sys [MANUAL] Secdrv Service C:\WINDOWS\System32\svchost.exe [AUTO] seclogon Service C:\WINDOWS\system32\svchost.exe [AUTO] SENS Service C:\WINDOWS\system32\DRIVERS\serenum.sys [MANUAL] serenum Service C:\WINDOWS\system32\DRIVERS\serial.sys [SYSTEM] Serial Service [SYSTEM] Sfloppy Service C:\WINDOWS\System32\svchost.exe [AUTO] SharedAccess Service C:\WINDOWS\System32\svchost.exe [AUTO] ShellHWDetection Service [DISABLED] Simbad Service C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe [AUTO] SNDSrvc Service [DISABLED] Sparrow Service C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys [SYSTEM] SPBBCDrv Service C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe [AUTO] SPBBCSvc Service C:\WINDOWS\system32\drivers\splitter.sys [MANUAL] splitter Service C:\WINDOWS\system32\spoolsv.exe [AUTO] Spooler Service C:\WINDOWS\System32\Drivers\sptd.sys [BOOT] sptd Service C:\WINDOWS\system32\DRIVERS\sr.sys [BOOT] sr Service C:\WINDOWS\system32\svchost.exe [AUTO] srservice Service C:\WINDOWS\system32\DRIVERS\srv.sys [MANUAL] Srv Service C:\WINDOWS\system32\svchost.exe [MANUAL] SSDPSRV Service C:\WINDOWS\system32\svchost.exe [MANUAL] stisvc Service C:\WINDOWS\system32\DRIVERS\swenum.sys [MANUAL] swenum Service C:\WINDOWS\system32\drivers\swmidi.sys [MANUAL] swmidi Service C:\WINDOWS\system32\dllhost.exe [MANUAL] SwPrv Service C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe [AUTO] Symantec Core LC Service [DISABLED] symc810 Service [DISABLED] symc8xx Service C:\WINDOWS\System32\Drivers\SYMDNS.SYS [MANUAL] SYMDNS Service C:\Program Files\Symantec\SYMEVENT.SYS [MANUAL] SymEvent Service C:\WINDOWS\System32\Drivers\SYMFW.SYS [MANUAL] SYMFW Service C:\WINDOWS\System32\Drivers\SYMIDS.SYS [MANUAL] SYMIDS Service C:\Program Files\Common Files\Symantec Shared\SymcData\idsdefs\20070612.005\SymIDSCo.sys [MANUAL] SYMIDSCO Service C:\WINDOWS\system32\drivers\symlcbrd.sys [AUTO] symlcbrd Service C:\WINDOWS\System32\Drivers\SYMNDIS.SYS [MANUAL] SYMNDIS Service C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [MANUAL] SYMREDRV Service C:\WINDOWS\System32\Drivers\SYMTDI.SYS [SYSTEM] SYMTDI Service [DISABLED] sym_hi Service [DISABLED] sym_u3 Service C:\WINDOWS\system32\drivers\sysaudio.sys [MANUAL] sysaudio Service C:\WINDOWS\system32\smlogsvc.exe [MANUAL] SysmonLog Service C:\WINDOWS\System32\svchost.exe [MANUAL] TapiSrv Service C:\WINDOWS\system32\DRIVERS\tcpip.sys [SYSTEM] Tcpip Service [MANUAL] TDPIPE Service [MANUAL] TDTCP Service C:\WINDOWS\system32\DRIVERS\termdd.sys [SYSTEM] TermDD Service C:\WINDOWS\System32\svchost.exe [MANUAL] TermService Service C:\WINDOWS\System32\svchost.exe [AUTO] Themes Service C:\WINDOWS\system32\tlntsvr.exe [DISABLED] TlntSvr Service [DISABLED] TosIde Service C:\WINDOWS\system32\svchost.exe [AUTO] TrkWks Service TSDDD Service [DISABLED] Udfs Service [DISABLED] ultra Service C:\WINDOWS\system32\DRIVERS\update.sys [MANUAL] Update Service C:\WINDOWS\system32\svchost.exe [MANUAL] upnphost Service C:\WINDOWS\System32\ups.exe [MANUAL] UPS Service C:\WINDOWS\system32\DRIVERS\usbehci.sys [MANUAL] usbehci Service C:\WINDOWS\system32\DRIVERS\usbhub.sys [MANUAL] usbhub Service C:\WINDOWS\system32\DRIVERS\usbuhci.sys [MANUAL] usbuhci Service C:\WINDOWS\System32\drivers\vga.sys [SYSTEM] VgaSave Service C:\WINDOWS\system32\DRIVERS\viaide.sys [BOOT] ViaIde Service [BOOT] VolSnap Service C:\WINDOWS\System32\vssvc.exe [MANUAL] VSS Service C:\WINDOWS\System32\svchost.exe [AUTO] W32Time Service W3SVC Service C:\WINDOWS\system32\DRIVERS\wanarp.sys [MANUAL] Wanarp Service [MANUAL] WDICA Service C:\WINDOWS\system32\drivers\wdmaud.sys [MANUAL] wdmaud Service C:\WINDOWS\system32\svchost.exe [AUTO] WebClient Service C:\WINDOWS\system32\svchost.exe [AUTO] winmgmt Service [MANUAL] Winsock Service WinSock2 Service WinTrust Service C:\WINDOWS\System32\svchost.exe [MANUAL] WmdmPmSN Service C:\WINDOWS\System32\svchost.exe [MANUAL] Wmi Service WmiApRpl Service C:\WINDOWS\system32\wbem\wmiapsrv.exe [MANUAL] WmiApSrv Service [SYSTEM] WS2IFSL Service C:\WINDOWS\System32\svchost.exe [DISABLED] wscsvc Service C:\WINDOWS\system32\svchost.exe [AUTO] wuauserv Service C:\WINDOWS\System32\svchost.exe [AUTO] WZCSVC Service C:\WINDOWS\System32\svchost.exe [MANUAL] xmlprov Service {18C0AB2E-84A3-4503-9FA3-5A1F37564655} Service [MANUAL] auqqk1i0 ---- EOF - GMER 1.0.13 ----

**Posty:** 18165 · przez **wojtas** 28 Cze 2007, 20:45

jest czysto

prosze o sprawdzenie loga

prosze o sprawdzenie loga

Kto jest na forum