prosze o sprawdzenie loga

**Posty:** 203 · przez **matiz** 09 Mar 2008, 02:15

Kod: Zaznacz wszystko: 2008-03-09 01:04:24 1205021064 Mateusz 3776 Sign of "Win32:Fujack-K [Wrm]" has been found in "C:\Program Files\Creative\News\Default\Default\PDEmarquee.htm" file. 2008-03-09 01:04:55 1205021095 Mateusz 3776 Sign of "Win32:Fujack-K [Wrm]" has been found in "C:\Program Files\Neostrada TP\Audience\bodybar.htm" file. 2008-03-09 01:05:11 1205021111 Mateusz 3776 Sign of "Win32:Fujack-K [Wrm]" has been found in "C:\Program Files\Neostrada TP\Audience\bodybar6.htm" file. 2008-03-09 01:05:32 1205021132 Mateusz 3776 Sign of "Win32:Fujack-K [Wrm]" has been found in "C:\Program Files\Neostrada TP\Audience\bodybarframe.htm" file. 2008-03-09 01:05:43 1205021143 Mateusz 3776 Sign of "Win32:Fujack-K [Wrm]" has been found in "C:\Program Files\Neostrada TP\Audience\bodybarframebis.htm" file. 2008-03-09 01:05:53 1205021153 Mateusz 3776 Sign of "Win32:Fujack-K [Wrm]" has been found in "C:\Program Files\Neostrada TP\Audience\index_pc_nc.html" file. 2008-03-09 01:06:03 1205021163 Mateusz 3776 Sign of "Win32:Fujack-K [Wrm]" has been found in "C:\Program Files\Neostrada TP\MsgBienvenue.html" file.

**Posty:** 3854 · przez **Dzi@dek** 09 Mar 2008, 02:18

Dzi@dek napisał(a):OK.
Kod: Zaznacz wszystko
C:\WINDOWS\ZSSnp211.exe

Przeskanuj ten plik na
http://www.virustotal.com/pl/
i wrzuć raport.

Prosiłem o ten raport.

Daj jeszcze log z Combofix

**Posty:** 203 · przez **matiz** 09 Mar 2008, 02:35

Kod: Zaznacz wszystko: Plik ZSSnp211.EXE otrzymany 2008.02.04 22:56:28 (CET) Obecny status: zakończono Wynik: 0/32 (0.00%)

O to chodziło?

combofix : http://www.wklej.org/id/17419dfb5e

[ Dodano: Dzisiaj o 1:47 ]
Czy to co usunąłem te pliki - wg avast wirusy to rzeczywiście były jakies wirusy czy przydatne pliki, które avast potraktował jako wirusy?

**Posty:** 3854 · przez **Dzi@dek** 09 Mar 2008, 02:50

matiz napisał(a):Plik ZSSnp211.EXE otrzymany 2008.02.04 22:56:28 (CET)
Obecny status: zakończono
Wynik: 0/32 (0.00%)

O to chodziło?

Nie do końca poczekałeś na wynik scanu.

Widzę, że nie masz juz "kazza" a plik pozostał:

wklej do notatnika:

File::
C:\Documents and Settings\Mateusz\klextlock.dat

Plik

Zapisz jako... :arrow:

CFScript - najlepiej jeśli zapiszesz w
takiej lokalizacji, by ikona CFScript.txt znalazła się obok ikony ComboFix.exe
Przeciągnij i upuść plik CFScript.txt na plik :arrow:

ComboFix.exe

Potwierdz

zresetuje sie komputer.

Jeśli pojawi się pytanie "1 or 2" - to wpisz 1 i naciśnij ENTER. Rozpocznie się proces usuwania.

Daj nowe logi z Combofix oraz z HJ

Log z combo podaj na forum a nie na wklej.org

Autor postu otrzymał pochwałę

**Posty:** 203 · przez **matiz** 09 Mar 2008, 03:12

Kod: Zaznacz wszystko: ComboFix 08-03-07.1 - Mateusz 2008-03-09 1:58:01.21 - [color=red][b]FAT32[/b][/color]x86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.221 [GMT 1:00] Running from: C:\Programy\ComboFix.exe Command switches used :: C:\Programy\CFScript.txt * Created a new restore point [color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color] FILE :: C:\Documents and Settings\Mateusz\klextlock.dat . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\Mateusz\klextlock.dat C:\Program Files\Usugi online\Desktop_.ini C:\Programy\R˘ľne programy\backups\Desktop_.ini C:\Programy\R˘ľne programy\Desktop_.ini C:\R˘ľnoci\Desktop_.ini C:\Zdj©cia cioci\Desktop_.ini . ((((((((((((((((((((((((( Files Created from 2008-02-09 to 2008-03-09 ))))))))))))))))))))))))))))))) . 2008-03-08 01:50 . 2008-03-08 01:50 <DIR> d-------- C:\Program Files\Alwil Software 2008-03-08 01:50 . 2007-12-04 14:04 837,496 --a------ C:\WINDOWS\system32\aswBoot.exe 2008-03-08 01:50 . 2004-01-09 10:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx 2008-03-08 01:50 . 2007-12-04 13:54 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr 2008-03-08 01:50 . 2007-12-04 15:55 94,544 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys 2008-03-08 01:50 . 2007-12-04 15:56 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys 2008-03-08 01:50 . 2007-12-04 15:51 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys 2008-03-08 01:50 . 2007-12-04 15:49 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys 2008-03-08 01:50 . 2007-12-04 15:53 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys 2008-03-07 23:17 . 2008-03-07 23:17 <DIR> d-------- C:\Program Files\PC Inspector File Recovery 2008-03-07 23:17 . 2002-02-18 18:40 6,200 --a------ C:\WINDOWS\system32\INT13EXT.VXD 2008-03-07 00:39 . 2008-03-07 00:39 <DIR> d-------- C:\Documents and Settings\Mateusz\Dane aplikacji\Skype 2008-03-07 00:38 . 2008-03-07 00:38 <DIR> d-------- C:\Program Files\Skype 2008-03-07 00:38 . 2008-03-07 00:38 <DIR> d-------- C:\Program Files\Common Files\Skype 2008-02-23 01:34 . 2008-02-23 01:34 <DIR> d-------- C:\Opisy 2008-02-23 01:31 . 2008-02-23 01:31 <DIR> d-------- C:\Różności 2008-02-21 19:02 . 2008-02-21 19:02 54,156 --ah----- C:\WINDOWS\QTFont.qfn 2008-02-21 19:02 . 2008-02-21 19:02 1,409 --a------ C:\WINDOWS\QTFont.for 2008-02-21 16:47 . 2008-02-21 16:47 <DIR> d-------- C:\Program Files\Common Files\xing shared 2008-02-16 18:11 . 2008-02-16 18:11 <DIR> d-------- C:\Zdjęcia cioci 2008-02-10 22:19 . 2006-03-20 17:33 73,728 --a------ C:\WINDOWS\system32\ISUSPM.cpl . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-02-21 15:46 499,712 ----a-w C:\WINDOWS\system32\msvcp71.dll 2008-01-29 19:11 --------- d-----w C:\DOCUME~1\ALLUSE~1\DANEAP~1\InstallShield 2008-01-28 19:12 --------- d-----w C:\Program Files\Everest Poker 2008-01-22 13:32 --------- d-----w C:\Program Files\PopCap Games 2007-12-27 21:19 32 ----a-w C:\DOCUME~1\ALLUSE~1\DANEAP~1\ezsid.dat 2006-10-13 21:50 74 ----a-w C:\Documents and Settings\Mateusz\FIX.REG . ------- Sigcheck ------- b4e29943b4b04bd5e7381546848e6669 C:\WINDOWS\system32\drivers\tcpip.sys ----a-w 359,808 2006-04-20 12:51:50 C:\WINDOWS\system32\drivers\tcpip.sys ----a-w 359,808 2006-04-20 12:51:50 C:\WINDOWS\system32\dllcache\tcpip.sys ------w 359,040 2004-08-03 20:14:42 C:\WINDOWS\$NtUninstallKB893066$\tcpip.sys ------w 359,808 2005-05-25 20:04:02 C:\WINDOWS\$NtUninstallKB913446$\tcpip.sys ------w 359,936 2005-05-25 20:07:12 C:\WINDOWS\$hf_mig$\KB893066\SP2QFE\tcpip.sys ------w 360,448 2006-01-13 17:07:08 C:\WINDOWS\$hf_mig$\KB913446\SP2QFE\tcpip.sys ------w 360,576 2006-04-20 13:18:36 C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys ------w 359,808 2006-01-13 02:28:14 C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys . ((((((((((((((((((((((((((((( snapshot_2008-03-07_20.57.31,53 ))))))))))))))))))))))))))))))))))))))))) . - 2008-03-07 18:45:30 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat + 2008-03-07 22:26:28 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat - 2008-03-07 18:45:30 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\index.dat + 2008-03-07 22:26:28 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Historia\History.IE5\index.dat - 2008-03-07 18:49:50 52,900 ----a-w C:\WINDOWS\system32\perfc009.dat + 2008-03-08 22:36:34 52,900 ----a-w C:\WINDOWS\system32\perfc009.dat - 2008-03-07 18:49:50 67,298 ----a-w C:\WINDOWS\system32\perfc015.dat + 2008-03-08 22:36:34 67,298 ----a-w C:\WINDOWS\system32\perfc015.dat - 2008-03-07 18:49:50 380,486 ----a-w C:\WINDOWS\system32\perfh009.dat + 2008-03-08 22:36:34 380,486 ----a-w C:\WINDOWS\system32\perfh009.dat - 2008-03-07 18:49:50 436,322 ----a-w C:\WINDOWS\system32\perfh015.dat + 2008-03-08 22:36:34 436,322 ----a-w C:\WINDOWS\system32\perfh015.dat + 2008-03-08 22:32:08 16,384 ----a-w C:\WINDOWS\TEMP\Perflib_Perfdata_404.dat + 2008-03-08 11:28:24 16,384 ----a-w C:\WINDOWS\TEMP\Perflib_Perfdata_408.dat + 2008-03-08 01:00:54 16,384 ----a-w C:\WINDOWS\TEMP\Perflib_Perfdata_40c.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [ ] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Disc Detector"="C:\Program Files\Creative\ShareDLL\CtNotify.exe" [1999-08-30 01:55 189952] "SunJavaUpdateSched"="D:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-04-27 09:41 282624] "nwiz"="nwiz.exe" [2004-07-15 11:42 843776 C:\WINDOWS\system32\nwiz.exe] "NewsUpd"="C:\Program Files\Creative\News\NewsUpd.exe" [2000-08-04 02:50 44032] "ZSSnp211"="C:\WINDOWS\ZSSnp211.exe" [2006-07-14 16:24 49152] "Domino"="C:\WINDOWS\Domino.exe" [2006-07-04 14:16 49152] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-07-15 11:42 4112384] "NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-09-20 09:51 1836328] "WooCnxMon"="C:\PROGRA~1\NEOSTR~1\CnxMon.exe" [2003-10-16 19:07 24576] "SpeedTouch USB Diagnostics"="C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" [2004-01-26 11:38 866816] "WOOWATCH"="C:\PROGRA~1\NEOSTR~1\Watch.exe" [2003-10-16 19:07 20480] "WOOTASKBARICON"="C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe" [2003-10-16 19:07 53248] "TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2008-02-21 16:46 185896] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 22:44 15360] C:\DOCUME~1\ALLUSE~1\MENUST~1\Programy\AUTOST~1\ Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-17 20:05:56 65588] Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 04:44:06 29696] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools] --a------ 2006-11-12 11:48 157592 C:\Program Files\DAEMON Tools\daemon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DeviceDiscovery] --a------ 2002-12-02 20:56 40960 C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] -ra------ 2002-12-17 11:40 49152 C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Komunikator] C:\Program Files\Tlen.pl\tlen.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Konnekt] --a------ 2005-05-24 22:41 503808 C:\Program Files\Konnekt\konnekt.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut] --a------ 2006-05-18 11:29 49152 C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] --a------ 2007-03-01 15:57 153136 C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl] --------- 2005-12-07 22:57 30208 C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] --a------ 2007-04-25 17:44 35328 D:\Program Files\Winamp\winampa.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "C:\\Program Files\\BearShare\\BearShare.exe"= "C:\\Program Files\\Gadu-Gadu\\gg.exe"= "C:\\Program Files\\eMule\\emule.exe"= "C:\\Program Files\\SopCast\\adv\\SopAdver.exe"= "C:\\Program Files\\SopCast\\SopCast.exe"= "C:\\Program Files\\Skype\\Phone\\Skype.exe"= R0 AFPAnsi;G-DATA Ukrywacz Ansi;C:\WINDOWS\system32\Drivers\AFPAnsi.sys [2002-10-09 13:53] R0 FO_PAnt;FotoOffice VirtualDisc Driver;C:\WINDOWS\system32\Drivers\FO_PAnt.sys [2003-07-17 12:56] R3 ZSMC211;USB PC Camera (ZS211);C:\WINDOWS\system32\Drivers\ZS211.sys [2006-07-25 11:47] S3 ATE_PROCMON;ATE_PROCMON;C:\Program Files\Anti Trojan Elite\ATEPMon.sys [] S3 HookCentre;HookCentre;C:\WINDOWS\system32\drivers\HookCentre.sys [2005-04-26 15:32] S3 ZDCndis5;ZDCndis5 Protocol Driver;C:\WINDOWS\system32\ZDCndis5.SYS [] . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-03-09 02:00:32 Windows 5.1.2600 Dodatek Service Pack 2 FAT NTAPI scanning hidden processes ... scanning hidden autostart entries ... HKLM\Software\Microsoft\Windows\CurrentVersion\Run Disc Detector = C:\Program Files\Creative\ShareDLL\CtNotify.exe?X???????????????? C?????Disc Detector?B???A???????A?? ????B???@?$?@?? C?????U?@?????????@?B???A???????A?? ????B???@?????P???$?@?? ?????????w??????????@?G?????????????????B?????? ????????????????????????????B scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2008-03-09 2:11:01 ComboFix-quarantined-files.txt 2008-03-09 01:11:00 ComboFix5.txt 2008-03-07 19:59:42 ComboFix4.txt 2008-03-08 00:36:14 ComboFix3.txt 2008-03-08 13:39:00 ComboFix2.txt 2008-03-09 00:35:02

[ Dodano: Dzisiaj o 2:14 ]

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 02:14:13, on 2008-03-09 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\CTSvcCDA.exe C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\CyberLink\Shared files\RichVideo.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Creative\ShareDLL\CtNotify.exe D:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\Creative\ShareDLL\MediaDet.Exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Creative\News\NewsUpd.EXE C:\WINDOWS\ZSSnp211.exe C:\WINDOWS\Domino.exe C:\PROGRA~1\NEOSTR~1\CnxMon.exe C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Neostrada TP\NeostradaTP.exe C:\Program Files\Neostrada TP\ComComp.exe C:\Program Files\Neostrada TP\Watch.exe C:\Program Files\Opera\Opera.exe C:\WINDOWS\explorer.exe C:\Programy\Różne programy\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NewsUpd] C:\Program Files\Creative\News\NewsUpd.EXE /q O4 - HKLM\..\Run: [ZSSnp211] C:\WINDOWS\ZSSnp211.exe O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O15 - Trusted Zone: http://mks.com.pl O15 - Trusted Zone: http://www.mks.com.pl O16 - DPF: {5A09E43F-A0A7-4ABF-AF80-11367CF1DC8F} (MainControl Class) - http://mks.com.pl/skaner/SkanerOnline.cab O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) - http://skaner.mks.com.pl/SkanerOnline.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{CA05CC3A-0DDC-4789-A17A-C371BFC13DF8}: NameServer = 194.204.159.1 217.98.63.164 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTSvcCDA.exe O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

**Posty:** 18165 · przez **wojtas** 09 Mar 2008, 12:06

czysto

przeinstauj neostrade

**Posty:** 203 · przez **matiz** 09 Mar 2008, 14:54

Ok, dzięki wielkie!

Tzn na razie mam ignorować komunikaty avasta przy skanowaniu dysków jeśli chodzi o te wirusy związane z neostradą ?

**Posty:** 3854 · przez **Dzi@dek** 09 Mar 2008, 15:08

matiz napisał(a):jeśli chodzi o te wirusy związane z neostradą

Nie ignorować. Jeśli chodzi o pliki od neo - zobaczyć jakie.

prosze o sprawdzenie loga

Kto jest na forum