Prosze o sprawdzenie loga.

**Posty:** 2 · przez **Komars** 01 Mar 2009, 20:23

Witam! Bardzo prosze aby ktos sprawdzil mi loga ,ponieważ strasznie zle chodzi mi neostrada od jakiegos czasu. Nie moge nic pobierac ,nawet filmiki podczas ogladania sie tną a wczesniej tak nie było.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:18:49, on 2009-03-01
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\NEOSTR~1\TaskBarIcon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\neostrada tp\neostradatp.exe
C:\Program Files\neostrada tp\ComComp.exe
C:\PROGRA~1\NEOSTR~1\Toaster.exe
C:\PROGRA~1\NEOSTR~1\Inactivity.exe
C:\PROGRA~1\NEOSTR~1\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\neostrada tp\Watch.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{381A867B-30A6-49F3-A9B7-1D8F60A53689}: NameServer = 194.204.159.1 217.98.63.164
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 4638 bytes

**Posty:** 8001 · przez **Okocza** 01 Mar 2009, 20:36

Komars, przeczytaj:

przeczytaj-zanim-wstawisz-logi-na-forum-vt93842.html

**Posty:** 2 · przez **Komars** 01 Mar 2009, 21:00

ale co za róznica czy to jest tak czy inaczej napisane ? :wink:

Jedynie chce aby ktoś powiedział mi czy wszystko mam z kompem dobrze.

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:18:49, on 2009-03-01 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\FTRTSVC.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\SOUNDMAN.EXE C:\PROGRA~1\NEOSTR~1\TaskBarIcon.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Winamp\winampa.exe C:\Program Files\PowerISO\PWRISOVM.EXE C:\Program Files\Java\jre6\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\neostrada tp\neostradatp.exe C:\Program Files\neostrada tp\ComComp.exe C:\PROGRA~1\NEOSTR~1\Toaster.exe C:\PROGRA~1\NEOSTR~1\Inactivity.exe C:\PROGRA~1\NEOSTR~1\PollingModule.exe C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE C:\Program Files\neostrada tp\Watch.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\GestMaj.exe TaskBarIcon.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{381A867B-30A6-49F3-A9B7-1D8F60A53689}: NameServer = 194.204.159.1 217.98.63.164 O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe -- End of file - 4638 bytes

Kod: Zaznacz wszystko: ComboFix 09-02-28.01 - Komar 2009-03-01 20:07:42.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1250.1.1045.18.1279.958 [GMT 1:00] Uruchomiony z: c:\documents and settings\Komar\Pulpit\ComboFix.exe . ((((((((((((((((((((((((( Pliki utworzone od 2009-02-01 do 2009-03-01 ))))))))))))))))))))))))))))))) . 2009-03-01 19:18 . 2009-03-01 19:18 <DIR> d-------- c:\program files\Trend Micro 2009-03-01 18:07 . 2009-03-01 18:07 <DIR> d-------- c:\windows\Sun 2009-03-01 18:03 . 2009-03-01 18:03 410,984 --a------ c:\windows\system32\deploytk.dll 2009-03-01 18:03 . 2009-03-01 18:03 73,728 --a------ c:\windows\system32\javacpl.cpl 2009-03-01 17:54 . 2009-03-01 17:55 <DIR> d-------- c:\documents and settings\Komar\.jpi_cache 2009-03-01 17:54 . 2009-03-01 17:54 <DIR> d-------- c:\documents and settings\Komar\.java 2009-02-28 13:43 . 2009-02-28 13:43 <DIR> d-------- c:\windows\system32\mekanlar 2009-02-28 13:43 . 2009-02-28 13:43 356,701 --a------ c:\windows\system32\360x180° Mekan.scr 2009-02-28 13:42 . 2009-02-28 13:42 4,096 --a------ c:\windows\d3dx.dat 2009-02-19 19:57 . 2009-02-19 19:58 <DIR> d-------- c:\program files\Common Files\Adobe 2009-02-17 17:41 . 2009-02-17 17:41 <DIR> d---s---- c:\documents and settings\Komar\UserData 2009-02-04 22:15 . 2009-02-04 22:15 <DIR> d-------- c:\program files\Real Alternative 2009-02-04 11:24 . 2009-02-04 19:10 <DIR> d-------- c:\program files\AllMyMovies 2009-02-04 11:07 . 2009-02-04 11:07 <DIR> d-------- c:\documents and settings\Komar\Dane aplikacji\Obsidium 2009-02-04 08:15 . 2009-03-01 10:27 69 --a------ c:\windows\NeroDigital.ini 2009-02-03 23:04 . 2009-03-01 11:57 6,414 --a------ c:\windows\bestplayer.bbt 2009-02-03 23:04 . 2009-03-01 11:57 2,652 --a------ c:\windows\bestplayer.ini 2009-02-03 23:04 . 2009-03-01 11:57 161 --a------ c:\windows\bestplayer.bpp 2009-02-03 19:15 . 2009-02-03 19:15 <DIR> d-------- c:\windows\ekAzek Download 2009-02-03 19:15 . 2009-03-01 10:37 <DIR> d-------- c:\program files\ekAzek Download 2009-02-03 19:01 . 2009-02-03 19:01 4,444 --a------ c:\windows\system32\pid.PNF . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-03-01 17:58 --------- d-----w c:\program files\neostrada tp 2009-03-01 17:03 --------- d-----w c:\program files\Java 2009-02-16 15:07 --------- d-----w c:\documents and settings\Komar\Dane aplikacji\Winamp 2009-02-09 09:17 --------- d-----w c:\program files\Gadu-Gadu 2009-02-03 22:11 --------- d-----w c:\program files\NAPI-PROJEKT 2009-02-03 17:56 --------- d-----w c:\program files\PowerISO 2009-02-03 17:56 --------- d-----w c:\documents and settings\Komar\Dane aplikacji\GRETECH 2009-02-03 17:55 --------- d-----w c:\program files\GRETECH 2009-02-03 17:55 --------- d-----w c:\program files\ffdshow 2009-02-03 17:50 --------- d-----w c:\program files\Winamp 2009-02-03 17:43 --------- d-----w c:\program files\NimoCodec Pack 2009-02-03 17:43 --------- d-----w c:\program files\DivX 2009-02-03 17:38 --------- d-----w c:\documents and settings\Komar\Dane aplikacji\Gadu-Gadu 2009-02-03 17:37 --------- d-----w c:\program files\Codec 2009-02-03 17:36 --------- d-----w c:\program files\Common Files\Nero 2009-02-03 17:36 --------- d-----w c:\documents and settings\Komar\Dane aplikacji\BESTplayer 2009-02-03 17:35 --------- d-----w c:\program files\Common Files\Ahead 2009-02-03 17:35 --------- d-----w c:\program files\Ahead 2009-02-03 17:32 --------- d-----w c:\program files\Realtek AC97 2009-02-03 17:31 --------- d--h--w c:\program files\InstallShield Installation Information 2009-02-03 17:30 --------- d-----w c:\program files\Common Files\InstallShield 2009-02-03 17:16 --------- d-----w c:\program files\ZTE ZXDSL 852 2009-02-03 17:07 --------- d-----w c:\program files\microsoft frontpage 2009-02-03 17:06 --------- d-----w c:\program files\Usługi online . ((((((((((((((((((((((((((((( SnapShot@2009-03-01_18.22.04,25 ))))))))))))))))))))))))))))))))))))))))) . + 2009-03-01 17:26:10 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_598.dat . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-15 15360] "Gadu-Gadu"="c:\program files\Gadu-Gadu\gg.exe" [2008-03-20 2127296] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "WOOWATCH"="c:\progra~1\NEOSTR~1\Watch.exe" [2004-08-23 20480] "WOOTASKBARICON"="c:\progra~1\NEOSTR~1\GestMaj.exe" [2004-10-14 32768] "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-04-19 7700480] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-04-19 86016] "WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-09-12 36352] "PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2008-11-02 167936] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-01 148888] "AdslTaskBar"="stmctrl.dll" [2006-06-02 c:\windows\system32\stmctrl.dll] "SoundMan"="SOUNDMAN.EXE" [2005-11-11 c:\windows\soundman.exe] "nwiz"="nwiz.exe" [2007-04-19 c:\windows\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-15 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.divxa32"= msaud32_divx.acm "msacm.l3codec"= L3codecp.acm [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= R3 Stmatm;ATM/ADSL miniport;c:\windows\system32\drivers\stmatm.sys [2009-02-03 60255] R3 TaurusUsb;ADSL Modem USB Service;c:\windows\system32\drivers\torususb.sys [2009-02-03 684265] . . ------- Skan uzupełniający ------- . uStart Page = hxxp://www.wp.pl/ IE: { - c:\program files\Messenger\msmsgs.exe TCP: {381A867B-30A6-49F3-A9B7-1D8F60A53689} = 194.204.159.1 217.98.63.164 DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} - hxxp://downloads.ewido.net/ewidoOnlineScan.cab . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-03-01 20:08:35 Windows 5.1.2600 Dodatek Service Pack 3 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . Czas ukończenia: 2009-03-01 20:09:18 ComboFix-quarantined-files.txt 2009-03-01 19:09:16 ComboFix2.txt 2009-03-01 17:22:34 Przed: 24 652 263 424 bajtów wolnych Po: 24,653,983,744 bajtów wolnych 115

Mam nadzieje ze teraz jest dobrze

**Posty:** 8001 · przez **Okocza** 01 Mar 2009, 21:02

Komars, a ja chcę żebyś poprawił to. inaczej nikt Ci nie pomoże.