proszę o sprawdzenie loga

**Posty:** 2 · przez **mufa1972** 23 Paź 2007, 23:19

Witam.
Podczas pracy na komputerze pojawia się komunikat o błędzie aplikacji explorer.exe, wolna praca komputera.

Proszę o sprawdzenie loga.

Kod: Zaznacz wszystko: .plLogfile of HijackThis v1.99.1 Scan saved at 23:03:03, on 2007-10-23 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Messenger\msmsgs.exe C:\DOCUME~1\Siesiek\USTAWI~1\Temp\Katalog tymczasowy 1 dla hijackthis_199.zip\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe" O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{9C4D1BD0-5E60-44B7-A9F8-30BCCC0EAF64}: NameServer = 194.204.159.1 217.98.63.164 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: Antiwpa - C:\WINDOWS\SYSTEM32\antiwpa.dll O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing) O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing) O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing) O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing) O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing) O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

**Posty:** 237 · przez **Kuba1** 23 Paź 2007, 23:22

W logu ok.

Dołącz log z ComboFix

**Posty:** 2 · przez **mufa1972** 23 Paź 2007, 23:44

Kod: Zaznacz wszystko: "Siesiek" - 2007-10-23 23:38:28 - ComboFix 07-06-27.7 - Dodatek Service Pack 2 NTFS ((((((((((((((((((((((((( Files Created from 2007-09-23 to 2007-10-23 ))))))))))))))))))))))))))))))) 2007-10-23 23:25 49,152 --a------ C:\WINDOWS\nircmd.exe 2007-10-23 22:24 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys 2007-10-23 22:23 6,400 --a------ C:\WINDOWS\system32\drivers\enum1394.sys 2007-10-23 22:23 58,624 --a------ C:\WINDOWS\system32\drivers\redbook.sys 2007-10-23 22:22 77,312 --a------ C:\WINDOWS\system32\usbui.dll 2007-10-23 22:21 9,936 --a------ C:\WINDOWS\system\LZEXPAND.DLL 2007-10-23 22:21 9,168 --a------ C:\WINDOWS\system\VER.DLL 2007-10-23 22:21 85,532 --a------ C:\WINDOWS\system32\dgsetup.dll 2007-10-23 22:21 83,456 --a------ C:\WINDOWS\system\OLECLI.DLL 2007-10-23 22:21 8,704 --a------ C:\WINDOWS\system32\batt.dll 2007-10-23 22:21 8,192 -ra------ C:\WINDOWS\system32\kbdhept.dll 2007-10-23 22:21 75,776 --a------ C:\WINDOWS\system32\storprop.dll 2007-10-23 22:21 70,144 --a------ C:\WINDOWS\NOTEPAD.EXE 2007-10-23 22:21 70,096 --a------ C:\WINDOWS\system\AVICAP.DLL 2007-10-23 22:21 7,168 --a------ C:\WINDOWS\system32\kbdcz.dll 2007-10-23 22:21 69,552 --a------ C:\WINDOWS\system\MMSYSTEM.DLL 2007-10-23 22:21 6,656 -ra------ C:\WINDOWS\system32\kbdhela3.dll 2007-10-23 22:21 6,656 --a------ C:\WINDOWS\system32\kbdycl.dll 2007-10-23 22:21 6,656 --a------ C:\WINDOWS\system32\kbdsl1.dll 2007-10-23 22:21 6,656 --a------ C:\WINDOWS\system32\kbdsl.dll 2007-10-23 22:21 6,656 --a------ C:\WINDOWS\system32\kbdhu.dll 2007-10-23 22:21 6,656 --a------ C:\WINDOWS\system32\kbdcz2.dll 2007-10-23 22:21 6,656 --a------ C:\WINDOWS\system32\kbdcz1.dll 2007-10-23 22:21 6,656 --a------ C:\WINDOWS\system32\kbdcr.dll 2007-10-23 22:21 6,656 --a------ C:\WINDOWS\system32\KBDAL.DLL 2007-10-23 22:21 6,144 -ra------ C:\WINDOWS\system32\kbdtuq.dll 2007-10-23 22:21 6,144 -ra------ C:\WINDOWS\system32\kbdtuf.dll 2007-10-23 22:21 6,144 -ra------ C:\WINDOWS\system32\kbdlv1.dll 2007-10-23 22:21 6,144 -ra------ C:\WINDOWS\system32\kbdlv.dll 2007-10-23 22:21 6,144 -ra------ C:\WINDOWS\system32\kbdhela2.dll 2007-10-23 22:21 6,144 -ra------ C:\WINDOWS\system32\kbdgkl.dll 2007-10-23 22:21 6,144 -ra------ C:\WINDOWS\system32\kbdest.dll 2007-10-23 22:21 5,632 -ra------ C:\WINDOWS\system32\kbdmon.dll 2007-10-23 22:21 5,632 -ra------ C:\WINDOWS\system32\kbdlt1.dll 2007-10-23 22:21 5,632 -ra------ C:\WINDOWS\system32\kbdlt.dll 2007-10-23 22:21 5,632 -ra------ C:\WINDOWS\system32\kbdkyr.dll 2007-10-23 22:21 5,632 -ra------ C:\WINDOWS\system32\kbdhe319.dll 2007-10-23 22:21 5,632 -ra------ C:\WINDOWS\system32\kbdhe220.dll 2007-10-23 22:21 5,632 -ra------ C:\WINDOWS\system32\kbdhe.dll 2007-10-23 22:21 5,632 -ra------ C:\WINDOWS\system32\kbdazel.dll 2007-10-23 22:21 5,632 --a------ C:\WINDOWS\system32\kbdro.dll 2007-10-23 22:21 5,632 --a------ C:\WINDOWS\system32\kbdhu1.dll 2007-10-23 22:21 5,120 --a------ C:\WINDOWS\system\SHELL.DLL 2007-10-23 22:21 33,376 --a------ C:\WINDOWS\system\COMMDLG.DLL 2007-10-23 22:21 24,661 --a------ C:\WINDOWS\system32\spxcoins.dll 2007-10-23 22:21 24,064 --a------ C:\WINDOWS\system\OLESVR.DLL 2007-10-23 22:21 19,200 --a------ C:\WINDOWS\system\TAPI.DLL 2007-10-23 22:21 176,157 --a------ C:\WINDOWS\system32\dgrpsetu.dll 2007-10-23 22:21 15,360 --a------ C:\WINDOWS\TASKMAN.EXE 2007-10-23 22:21 13,312 --a------ C:\WINDOWS\system32\irclass.dll 2007-10-23 22:21 127,008 --a------ C:\WINDOWS\system\MSVIDEO.DLL 2007-10-23 22:21 11,264 --a------ C:\WINDOWS\system32\drivers\irenum.sys 2007-10-23 22:21 109,488 --a------ C:\WINDOWS\system\AVIFILE.DLL 2007-10-23 22:21 103,424 --a------ C:\WINDOWS\system32\EqnClass.Dll 2007-10-23 22:21 <DIR> dr-h----- C:\DOCUME~1\DEFAUL~1\Ustawienia lokalne 2007-10-23 22:21 <DIR> dr------- C:\DOCUME~1\DEFAUL~1\Menu Start 2007-10-23 22:21 <DIR> dr------- C:\DOCUME~1\ALLUSE~1\Dokumenty 2007-10-23 22:21 <DIR> d--hs---- C:\WINDOWS\Installer 2007-10-23 22:21 <DIR> d--h----- C:\DOCUME~1\DEFAUL~1\Szablony 2007-10-23 22:21 <DIR> d--h----- C:\DOCUME~1\ALLUSE~1\Szablony 2007-10-23 22:21 <DIR> d-------- C:\Program Files\Common Files\SpeechEngines 2007-10-23 22:21 <DIR> d-------- C:\Program Files\Common Files\ODBC 2007-10-23 22:21 <DIR> d-------- C:\Program Files 2007-10-23 22:21 <DIR> d-------- C:\DOCUME~1\DEFAUL~1\Ulubione 2007-10-23 22:21 <DIR> d-------- C:\DOCUME~1\DEFAUL~1\Pulpit 2007-10-23 22:21 <DIR> d-------- C:\DOCUME~1\DEFAUL~1\Moje dokumenty 2007-10-23 22:21 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Ulubione 2007-10-23 22:21 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Pulpit 2007-10-23 22:21 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Menu Start 2007-10-23 22:19 <DIR> dr-h----- C:\DOCUME~1\DEFAUL~1\Dane aplikacji 2007-10-23 22:19 <DIR> d--hs---- C:\System Volume Information 2007-10-23 22:19 <DIR> d--h----- C:\DOCUME~1\ALLUSE~1\Dane aplikacji 2007-10-23 22:19 <DIR> d-------- C:\WINDOWS\system32\CatRoot2 2007-10-23 22:19 <DIR> d-------- C:\WINDOWS\system32\CatRoot 2007-10-23 22:19 <DIR> d-------- C:\Documents and Settings 2007-10-23 22:12 <DIR> dr-hsc--- C:\WINDOWS\system32\dllcache 2007-10-23 22:12 <DIR> dr--s---- C:\WINDOWS\Fonts 2007-10-23 22:12 <DIR> dr------- C:\WINDOWS\Web 2007-10-23 22:12 <DIR> d--h----- C:\WINDOWS\inf 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\WinSxS 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\twain_32 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\system32\wins 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\system32\wbem 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\system32\usmt 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\system32\spool 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\system32\ShellExt 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\system32\Setup 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\system32\ras 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\system32\oobe 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\system32\npp 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\system32\mui 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\system32\inetsrv 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\system32\IME 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\system32\icsxml 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\system32\ias 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\system32\export 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\system32\drivers\etc 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\system32\drivers\disdn 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\system32\drivers 2007-10-23 22:12 <DIR> d-------- C:\WINDOWS\system32\dhcp (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-10-23 18:55:58 49,712 ----a-w C:\WINDOWS\system32\perfc015.dat 2007-10-23 18:55:58 355,830 ----a-w C:\WINDOWS\system32\perfh015.dat 2007-10-23 18:31:25 -------- d-----w C:\Program Files\Usługi online 2007-09-18 12:43:36 43,696 ----a-w C:\WINDOWS\system32\drivers\srtspx.sys 2007-09-18 12:43:36 317,616 ----a-w C:\WINDOWS\system32\drivers\srtspl.sys 2007-09-18 12:43:36 278,576 ----a-w C:\WINDOWS\system32\drivers\srtsp.sys 2007-07-30 17:19:20 92,504 ----a-w C:\WINDOWS\system32\cdm.dll 2007-07-30 17:19:12 43,352 ----a-w C:\WINDOWS\system32\wups2.dll ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {1E8A6170-7264-4D0F-BEAE-D42A53123C75}=C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll [2006-09-06 07:18] {22BF413B-C6D2-4d91-82A9-A0F997BA588C}=C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2007-09-13 13:37] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDCPL"="RTHDCPL.EXE" [2005-05-04 11:28 C:\WINDOWS\RTHDCPL.EXE] "Alcmtr"="ALCMTR.EXE" [2005-05-03 12:43 C:\WINDOWS\ALCMTR.EXE] "ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2006-09-03 09:04] "osCheck"="C:\Program Files\Norton Internet Security\osCheck.exe" [2006-09-06 03:22] "Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 18:30] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 14:00] "Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-09-13 13:37] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-08-04 00:55] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Antiwpa] antiwpa.dll *Newly Created Service* - COMHOST Contents of the 'Scheduled Tasks' folder 2007-10-23 19:10:28 C:\WINDOWS\tasks\Norton Internet Security - Run Full System Scan - Siesiek.job ************************************************************************** catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net Rootkit scan 2007-10-23 23:39:19 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** Completion time: 2007-10-23 23:39:41 --- E O F ---

**Posty:** 237 · przez **Kuba1** 24 Paź 2007, 12:18

Również ok.

proszę o sprawdzenie loga

proszę o sprawdzenie loga

Kto jest na forum