prosze o sprawdzenie loga

[DuZI]

od piatku mam problemy z netem...
strony mi sie otwieraja z 3 min albo w ogole... (nawet google)

dodam ze download chodzi prawidlowo prawie na najwyzszym poziome. czego nie moge powiedziec o uploadzie.
nie moge wyslac nawet 30kb...

zrobiłem formata i to samo
zainst. kasperskiego i wykryl jakies virusy

autorun.vbs
c://autorun.inf

Kod: Zaznacz wszystko

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:42:14, on 2007-10-03
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\WINDOWS\system32\RaConfig.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Ja\Pulpit\hijackthis.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
F2 - REG:system.ini: UserInit=userinit.exe,autorun.bat
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTRegRun] C:\WINDOWS\CTRegRun.EXE
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: RaConfig.lnk = C:\WINDOWS\system32\RaConfig.exe
O9 - Extra button: Ochrona WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{C2101C68-36E9-4AC0-9841-CB22E95732D5}: NameServer = 10.0.14.2
O23 - Service: Kaspersky Anti-Virus Home Edition 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE

--
End of file - 3411 bytes

[wojtas]

F2 - REG:system.ini: UserInit=userinit.exe,autorun.bat

skasuj ten wpis oraz daj loga z combofixa

[Red]

zainst. kasperskiego i wykryl jakies virusy

Wklej scren z tego co wykrył.

[DuZI]

Wklej scren z tego co wykrył.

nawet screena nie moge wkleic np na fotosika bo nie idzie

Kod: Zaznacz wszystko

ComboFix 07-10-03.7 - Ja 2007-10-03 16:34:35.1 - [color=red][b]FAT32[/b][/color]x86
Microsoft Windows XP Professional  5.1.2600.2.1250.1.1045.18.284 [GMT 2:00]
Running from: C:\Documents and Settings\Ja\Pulpit\ComboFix.exe
* Created a new restore point
.

(((((((((((((((((((((((((   Files Created from 2007-09-03 to 2007-10-03  )))))))))))))))))))))))))))))))
.

2007-10-03 16:32   51,200   --a------   C:\WINDOWS\NirCmd.exe
2007-10-03 16:17   <DIR>   d---s----   C:\Documents and Settings\Ja\UserData
2007-10-03 15:39   545   --a------   C:\WINDOWS\UC.PIF
2007-10-03 15:39   545   --a------   C:\WINDOWS\RAR.PIF
2007-10-03 15:39   545   --a------   C:\WINDOWS\PKZIP.PIF
2007-10-03 15:39   545   --a------   C:\WINDOWS\PKUNZIP.PIF
2007-10-03 15:39   545   --a------   C:\WINDOWS\NOCLOSE.PIF
2007-10-03 15:39   545   --a------   C:\WINDOWS\LHA.PIF
2007-10-03 15:39   545   --a------   C:\WINDOWS\ARJ.PIF
2007-10-03 15:39   <DIR>   d--------   C:\totalcmd
2007-10-03 15:01   <DIR>   dr-h-----   C:\MSOCache
2007-10-03 14:23   <DIR>   d--------   C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy
2007-10-03 14:22   712   --a------   C:\WINDOWS\unins000.dat
2007-10-02 19:06   <DIR>   d--------   C:\Documents and Settings\Ja\Dane aplikacji\Creative
2007-10-02 18:53   <DIR>   d--------   C:\Program Files\Winamp
2007-10-02 18:52   69,920   --ahs----   C:\WINDOWS\system32\drivers\fidbox.dat
2007-10-02 18:52   5,152   --ahs----   C:\WINDOWS\system32\drivers\fidbox2.dat
2007-10-02 18:52   <DIR>   d--------   C:\Program Files\Kaspersky Lab
2007-10-02 18:52   <DIR>   d--------   C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab
2007-10-02 18:43   <DIR>   d--------   C:\Documents and Settings\Ja\Dane aplikacji\Gadu-Gadu
2007-10-02 18:40   <DIR>   d--hs----   C:\Recycled
2007-10-02 18:40   <DIR>   d--------   C:\Program Files\Gadu-Gadu
2007-10-02 18:40   <DIR>   d--------   C:\Documents and Settings\Ja\Gadu-Gadu

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-10-03 14:21   6584   --ahs----   C:\WINDOWS\system32\drivers\fidbox2.idx
2007-10-03 14:21   1820   --ahs----   C:\WINDOWS\system32\drivers\fidbox.idx
2007-10-02 16:49   ---------   d--------   C:\Program Files\RALINK
2007-10-02 16:37   ---------   d--------   C:\Program Files\Creative
2007-10-02 16:36   ---------   d--h-----   C:\Program Files\InstallShield Installation Information
2007-10-02 16:36   ---------   d--------   C:\Program Files\Common Files\InstallShield
2007-10-02 16:15   ---------   d--------   C:\Program Files\microsoft frontpage
2007-07-30 19:19   92504   --a------   C:\WINDOWS\system32\dllcache\cdm.dll
2007-07-30 19:19   92504   --a------   C:\WINDOWS\system32\cdm.dll
2007-07-30 19:19   549720   --a------   C:\WINDOWS\system32\wuapi.dll
2007-07-30 19:19   549720   --a------   C:\WINDOWS\system32\dllcache\wuapi.dll
2007-07-30 19:19   53080   --a------   C:\WINDOWS\system32\wuauclt.exe
2007-07-30 19:19   53080   --a------   C:\WINDOWS\system32\dllcache\wuauclt.exe
2007-07-30 19:19   43352   --a------   C:\WINDOWS\system32\wups2.dll
2007-07-30 19:19   325976   --a------   C:\WINDOWS\system32\wucltui.dll
2007-07-30 19:19   325976   --a------   C:\WINDOWS\system32\dllcache\wucltui.dll
2007-07-30 19:19   203096   --a------   C:\WINDOWS\system32\wuweb.dll
2007-07-30 19:19   203096   --a------   C:\WINDOWS\system32\dllcache\wuweb.dll
2007-07-30 19:19   1712984   --a------   C:\WINDOWS\system32\wuaueng.dll
2007-07-30 19:19   1712984   --a------   C:\WINDOWS\system32\dllcache\wuaueng.dll
2007-07-30 19:18   33624   --a------   C:\WINDOWS\system32\wups.dll
2007-07-30 19:18   33624   --a------   C:\WINDOWS\system32\dllcache\wups.dll
   ---------      C:\Program Files\Usługi online
2006-07-30 18:20:12   959   --sha-r   C:\WINDOWS\system32\autorun.bin
.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTSysVol"="C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe" [2005-02-15 16:10]
"P17Helper"="P17.dll" [2005-05-03 13:38 C:\WINDOWS\system32\P17.dll]
"UpdReg"="C:\WINDOWS\UpdReg.EXE" [2000-05-11 01:00]
"CTRegRun"="C:\WINDOWS\CTRegRun.EXE" [1999-10-11 03:00]
"kav"="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" [2006-03-24 19:09]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-05-15 00:22]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:44]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-08-04 00:44]
"Creative Detector"="C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" [2004-12-02 18:23]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
RaConfig.lnk - C:\WINDOWS\system32\RaConfig.exe [2007-10-02 16:49:24]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
RaConfig.lnk - C:\WINDOWS\system32\RaConfig.exe [2007-10-02 16:49:24]

R3 P17;Sound Blaster Audigy;C:\WINDOWS\system32\drivers\P17.sys
R3 RT2400;RT2400 Wireless Driver;C:\WINDOWS\system32\DRIVERS\RT2400.sys

*Newly Created Service* - CATCHME
*Newly Created Service* - OSE
.
**************************************************************************

catchme 0.3.1169 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-03 16:38:22
Windows 5.1.2600 Dodatek Service Pack 2 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-10-03 16:41:05
.
   --- E O F ---

[Red]

w logu nic nie ma,czysto