prosze o sprawdzenie

**Posty:** 71 · przez **Random** 02 Lip 2007, 20:24

Kod: Zaznacz wszystko: Logfile of HijackThis v1.97.2 Scan saved at 19:49:49, on 2007-07-02 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe D:\Tune Up\WinStylerThemeSvc.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\netdde.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe D:\Ashampoo\Ashampoo AntiVirus\AshAVSrv.exe C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\locator.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\system32\wdfmgr.exe C:\WINDOWS\System32\dmadmin.exe C:\WINDOWS\system32\RunDLL32.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\WINDOWS\system32\ctfmon.exe D:\Tune Up\MemOptimizer.exe C:\Program Files\Gadu-Gadu\gg.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\cidaemon.exe C:\Documents and Settings\Administrator\Pulpit\Q3E Minimizer.exe C:\Program Files\Gadu-Gadu\gg.exe C:\WINDOWS\system32\PnkBstrB.exe C:\Program Files\DC++\DCPlusPlus.exe D:\Tune Up\Integrator.exe C:\Documents and Settings\Administrator\Pulpit\hijack\HijackThis.exe D:\Tune Up\Undelete.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.idg.pl R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost; 127.0.0.1 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://www.idg.pl/ R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file) O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\PROGRA~1\FlashGet\jccatch.dll O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: MEGAUPLOADTOOLBAR - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O4 - HKLM\..\Run: [PD0620 STISvc] RunDLL32.exe P0620Pin.dll,RunDLL32EP 513 O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [TuneUp MemOptimizer] "D:\Tune Up\MemOptimizer.exe" autostart O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Ściągnij przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: Ściągnij wszystko przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_all.htm O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM) O9 - Extra button: FlashGet (HKLM) O9 - Extra 'Tools' menuitem: &FlashGet (HKLM) O14 - IERESET.INF: START_PAGE_URL=http://www.idg.pl O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} (Shockwave ActiveX Control) - http://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1125656166078 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://ebanking.nationalirishbank.ie/html/activex/e-Safekey/NIB/e-Safekey.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{CFC4AD97-49B3-4D7E-9022-DCABEAE90C1D}: NameServer = 192.168.11.1

wydaje mi sie ze locator.exe to wirus ale pewnosci nie mam

**Posty:** 18165 · przez **wojtas** 02 Lip 2007, 20:52

log jest uciety

a jakies problemy z kompem?

przez **jeff** 02 Lip 2007, 21:09

Random napisał(a):Logfile of HijackThis v1.97.2

stara wersja

masz linka do nowszej

http://www.merijn.org/files/hijackthis.zip

**Posty:** 71 · przez **Random** 02 Lip 2007, 23:07

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 22:37:54, on 2007-07-02 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe D:\Tune Up\WinStylerThemeSvc.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\netdde.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe D:\Ashampoo\Ashampoo AntiVirus\AshAVSrv.exe C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\locator.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\system32\wdfmgr.exe C:\WINDOWS\System32\dmadmin.exe C:\WINDOWS\system32\RunDLL32.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\WINDOWS\system32\ctfmon.exe D:\Tune Up\MemOptimizer.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\cidaemon.exe C:\Documents and Settings\Administrator\Pulpit\Q3E Minimizer.exe C:\WINDOWS\system32\PnkBstrB.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Winamp\winamp.exe C:\Documents and Settings\Administrator\Pulpit\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.idg.pl R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.idg.pl/ R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost; 127.0.0.1 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file) O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\PROGRA~1\FlashGet\jccatch.dll O2 - BHO: MEGAUPLOADTOOLBAR - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: MEGAUPLOADTOOLBAR - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O4 - HKLM\..\Run: [PD0620 STISvc] RunDLL32.exe P0620Pin.dll,RunDLL32EP 513 O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [TuneUp MemOptimizer] "D:\Tune Up\MemOptimizer.exe" autostart O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\RunOnce: [FFTI] C:\WINDOWS\system32\Profiles\e2wx0y95.DomyĹ›lny uĹĽytkownik\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\ffti.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /DestPath="Profiles/e2wx0y95.DomyĹ›lny uĹĽytkownik\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}" O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Ściągnij przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: Ściągnij wszystko przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_all.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe O14 - IERESET.INF: START_PAGE_URL=http://www.idg.pl O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1125656166078 O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://ebanking.nationalirishbank.ie/html/activex/e-Safekey/NIB/e-Safekey.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{CFC4AD97-49B3-4D7E-9022-DCABEAE90C1D}: NameServer = 192.168.11.1 O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing) O23 - Service: Apache2 - Unknown owner - C:\Apache2\bin\Apache.exe" -k runservice (file missing) O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: avGuard Service (avGuard) - Unknown owner - D:\Ashampoo\Ashampoo AntiVirus\AshAVSrv.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: MySql - Unknown owner - C:/apache/mysql/bin/mysqld-nt.exe (file missing) O23 - Service: PHPGeekUtil - Unknown owner - c:\apache\APACHE.EXE" --ntservice (file missing) O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - D:\Tune Up\WinStylerThemeSvc.exe

**Posty:** 18165 · przez **wojtas** 03 Lip 2007, 09:00

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing)

skasuj

i daj loga z:

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

**Posty:** 71 · przez **Random** 03 Lip 2007, 09:31

Kod: Zaznacz wszystko: "Administrator" - 2007-07-03 8:47:00 - ComboFix 07-07-03.3 - Dodatek Service Pack 2 ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) C:\WINDOWS\hosts ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) -------\LEGACY_NM -------\LEGACY_NPF -------\nm ((((((((((((((((((((((((( Files Created from 2007-06-03 to 2007-07-03 ))))))))))))))))))))))))))))))) 2007-07-03 08:46 49,152 --a------ C:\WINDOWS\nircmd.exe 2007-06-30 12:45 <DIR> d-------- C:\Program Files\sXe Injected 2007-06-26 15:54 <DIR> d-------- C:\DOCUME~1\ADMINI~1\DANEAP~1\Tibia 2007-06-08 15:37 <DIR> d-------- C:\Program Files\GameBoost 2007-06-06 08:41 974,848 --a------ C:\WINDOWS\system32\mfc70.dll 2007-06-06 08:41 90,112 --a------ C:\WINDOWS\system32\agsaami.dll 2007-06-06 08:41 610,304 --a------ C:\WINDOWS\system32\agsaamg.dll 2007-06-06 08:41 53,760 --a------ C:\WINDOWS\system\ppacklib.dll 2007-06-06 08:41 487,424 --a------ C:\WINDOWS\system32\msvcp70.dll 2007-06-06 08:41 44 --a------ C:\WINDOWS\system32\winitn.dll 2007-06-06 08:41 372,736 --a------ C:\WINDOWS\system32\agsaamc.dll 2007-06-06 08:41 2,535,424 --a------ C:\WINDOWS\system32\agsaamj.dll 2007-06-06 08:41 1 --a------ C:\WINDOWS\klzdlt.dll 2007-06-06 08:41 <DIR> d-------- C:\Program Files\ALO Power Audio Converter 2007-06-06 08:31 <DIR> d-------- C:\Program Files\Common Files\Download Manager 2007-06-06 08:30 4,026,888 --a------ C:\DOCUME~1\ADMINI~1\n_poweraudio.exe 2007-06-05 21:31 59,904 --a------ C:\WINDOWS\system32\Mscc2fr.dll 2007-06-05 21:31 32,768 --a------ C:\WINDOWS\system32\CMDLGFR.DLL 2007-06-05 21:31 21,504 --a------ C:\WINDOWS\system32\TABCTFR.DLL 2007-06-05 21:31 15,360 --a------ C:\WINDOWS\system32\inetfr.DLL 2007-06-05 21:31 141,312 --a------ C:\WINDOWS\system32\MSCMCFR.DLL 2007-06-05 21:31 119,568 --a------ C:\WINDOWS\system32\VB6FR.DLL 2007-06-05 21:31 101,888 --a------ C:\WINDOWS\system32\VB6STKIT.DLL (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-07-02 20:57:03 22,584 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys 2007-07-02 20:56:57 99,904 ----a-w C:\WINDOWS\system32\PnkBstrB.exe 2007-07-02 18:05:05 -------- d-----w C:\Program Files\DC++ 2007-07-01 16:31:20 -------- d-----w C:\Program Files\Winamp 2007-06-28 16:57:52 -------- d-----w C:\Program Files\MegauploadToolbar 2007-06-28 09:39:14 -------- d-----w C:\Program Files\Tibia 2007-06-28 09:25:23 -------- d-----w C:\DOCUME~1\ADMINI~1\DANEAP~1\Skype 2007-06-23 16:56:41 -------- d--h--w C:\Program Files\InstallShield Installation Information 2007-06-12 15:08:05 -------- d-----w C:\Program Files\Image-Line 2007-06-08 14:37:34 85,612 ----a-w C:\WINDOWS\system32\perfc015.dat 2007-06-08 14:37:34 473,036 ----a-w C:\WINDOWS\system32\perfh015.dat 2007-06-02 09:29:08 -------- d-----w C:\Program Files\Coding Workshop Polyphonic Wizard 2007-05-20 11:35:03 -------- d-----w C:\Program Files\directx 2007-05-18 16:07:52 -------- d-----w C:\DOCUME~1\ADMINI~1\DANEAP~1\teamspeak2 2007-05-18 16:06:39 -------- d-----w C:\Program Files\Hide IP Platinum 2007-05-18 16:06:38 -------- d-----w C:\Program Files\FlashGet 2007-05-13 18:00:29 -------- d-----w C:\Program Files\Opera 2007-05-11 17:43:49 -------- d-----w C:\Program Files\Gadu-Gadu 2007-05-09 15:15:22 -------- d-----w C:\Program Files\America's Army 2007-05-07 17:56:57 63,040 ----a-w C:\WINDOWS\system32\PnkBstrA.exe ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] 2006-06-07 11:09 399352 --a------ C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] 2004-12-14 11:56 63136 -ra------ C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}] 2006-05-16 15:19 81920 --a------ C:\PROGRA~1\FlashGet\jccatch.dll [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}] 2006-10-31 08:55 1803720 --a------ C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] 2005-11-10 14:22 184423 --a------ C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] 2006-08-31 20:33 322368 --a------ C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "PD0620 STISvc"="P0620Pin.dll" [2005-05-10 19:03 C:\WINDOWS\system32\P0620Pin.dll] "TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2005-09-17 22:23] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 14:00] "TuneUp MemOptimizer"="D:\Tune Up\MemOptimizer.exe" [2004-11-09 22:11] "Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-01-30 16:58] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runonce] "FFTI"=C:\WINDOWS\system32\Profiles\e2wx0y95.Domyślny użytkownik\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\ffti.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /DestPath="Profiles/e2wx0y95.Domyślny użytkownik\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "LinkResolveIgnoreLinkInfo"=0 (0x0) "NoResolveSearch"=1 (0x1) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "ClearRecentDocsOnExit"=1 (0x1) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "EdHTML"=C:\Program Files\Binboy\EdHTMLv5.0\EdHTML.exe /min "NBJ"="C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "MSConfig"=C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto "TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot "avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe "NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe "SunJavaUpdateSched"=C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe "nwiz"=nwiz.exe /install *Newly Created Service* - ASHAVMON Contents of the 'Scheduled Tasks' folder 2006-07-28 15:39:28 C:\WINDOWS\tasks\1-Click Maintenance.job ************************************************************************** catchme 0.3.914 W2K/XP/Vista - rootkit detector by Gmer, http://www.gmer.net Rootkit scan 2007-07-03 08:53:48 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** Completion time: 2007-07-03 8:55:49 - machine was rebooted C:\ComboFix-quarantined-files.txt ... 2007-07-03 08:55 --- E O F ---

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

chciałbym wiedzieć co oznacza ten wpis

**Posty:** 18165 · przez **wojtas** 03 Lip 2007, 10:20

Random napisał(a):co oznacza ten wpis

jest to blad windowsa (zapis bledu win DEBUG ) mozna skasowac nic groznego

**Posty:** 71 · przez **Random** 03 Lip 2007, 14:39

tzn wiem ze to jest blad systemu, przeczytałem zamiast systemroot to systemboot :roll:

dzieki

prosze o sprawdzenie

prosze o sprawdzenie

Kto jest na forum