proszę o sprawdzenie- vundo (?)

**Posty:** 112 · przez **Fever** 15 Wrz 2007, 17:13

co chwila komunikaty w lewym dolnym rogu, nowe ikonki na pulpicie- Error Cleaner, Spyware&Malware Protection, Privacy Protector i ogolna zmula kompa...

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 17:03:47, on 2007-09-15 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Unable to get Internet Explorer version! Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\RTHDCPL.EXE C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe D:\Programy\Java\jre1.5.0_11\bin\jusched.exe D:\Programy\Power DVD\PDVDServ.exe D:\Programy\Gadu-Gadu\gg.exe C:\Program Files\Last.fm\LastFMHelper.exe C:\WINDOWS\system32\spoolsv.exe D:\Programy\Sunbelt Software\Personal Firewall 4\kpf4ss.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Cyberlink\Shared Files\RichVideo.exe D:\Programy\Sunbelt Software\Personal Firewall 4\kpf4gui.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe D:\Programy\Sunbelt Software\Personal Firewall 4\kpf4gui.exe D:\Zabezpieczenia\hijackthis_199\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2 R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.co.uk/0SEENWW/SAOS01?FORM=TOOLBR R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Programy\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\Programy\BitComet\tools\BitCometBHO.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Programy\Java\jre1.5.0_11\bin\ssv.dll O2 - BHO: MSVPS System - {ACD85107-9CF9-4C9E-B0B7-39940A0017C0} - C:\WINDOWS\nsduo.dll O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Programy\Java\jre1.5.0_11\bin\jusched.exe" O4 - HKLM\..\Run: [RemoteControl] "D:\Programy\Power DVD\PDVDServ.exe" O4 - HKCU\..\Run: [Gadu-Gadu] "D:\Programy\Gadu-Gadu\gg.exe" /tray O4 - Global Startup: Last.fm Helper.lnk = C:\Program Files\Last.fm\LastFMHelper.exe O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx O8 - Extra context menu item: Download all links using BitComet - res://D:\Programy\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: Download all videos using BitComet - res://D:\Programy\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: Download link using &BitComet - res://D:\Programy\BitComet\BitComet.exe/AddLink.htm O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Programy\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Programy\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O17 - HKLM\System\CCS\Services\Tcpip\..\{E7E7A927-DDD4-4904-8C61-7B2D0A7636C2}: NameServer = 217.30.129.149,217.30.137.200 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: WBSrv - D:\PROGRAMY\WINDOW~1\wbsrv.dll O21 - SSODL: msmhost - {C29204A8-DF64-4944-AB7D-737A9516116C} - C:\WINDOWS\msmhost.dll O21 - SSODL: msmdev - {E263D4F4-D9E6-4F42-A5F2-4D9E3796DBAF} - C:\WINDOWS\msmdev.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing) O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - D:\Programy\Sunbelt Software\Personal Firewall 4\kpf4ss.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared Files\RichVideo.exe

co jeszcze? Combo, SR?

**Posty:** 18165 · przez **wojtas** 15 Wrz 2007, 20:39

Użyj WWDC :
http://www.firewallleaktester.com/wwdc.htm
Zmień opcje z disable na enable. Uruchom ponownie komputer.
Tak powinny wyglądać porty (NetBIOS może być żółty) :
http://www.firewallleaktester.com/images_site/wwdc.jpg

zastosuj:

smitfraudfix z opcji 2:

http://siri.urz.free.fr/Fix/SmitfraudFix.exe

oraz te skanery po kilka razy

VundoFix
http://www.atribune.org/ccount/click.php?id=4

VirtumundoBeGone
http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

FixVundo
http://securityresponse.symantec.com/avcenter/FixVundo.exe

potem nowy log z hijacka oraz combofixa

**Posty:** 112 · przez **Fever** 15 Wrz 2007, 22:57

niestety postanowilem pobawic sie w to sam (Hijack, Smitfraudfix, Combofix, Avenger) i wprawdzie wira juz chyba nie mam, ale nie mam tez dostepu do internetu (GG dziala, natomiast zadna przegladarka nie) co moze byc powodem?

zalaczam HJ i Combo

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 22:48:33, on 2007-09-15 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Unable to get Internet Explorer version! Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\RTHDCPL.EXE C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe D:\Programy\Java\jre1.5.0_11\bin\jusched.exe D:\Programy\Power DVD\PDVDServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Last.fm\LastFMHelper.exe D:\Programy\Sunbelt Software\Personal Firewall 4\kpf4ss.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Cyberlink\Shared Files\RichVideo.exe D:\Programy\Sunbelt Software\Personal Firewall 4\kpf4gui.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\DAEMON Tools\daemon.exe D:\Programy\Gadu-Gadu\gg.exe D:\Zabezpieczenia\hijackthis_199\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/ R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.co.uk/0SEENWW/SAOS01?FORM=TOOLBR R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Programy\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\Programy\BitComet\tools\BitCometBHO.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Programy\Java\jre1.5.0_11\bin\ssv.dll O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Programy\Java\jre1.5.0_11\bin\jusched.exe" O4 - HKLM\..\Run: [RemoteControl] "D:\Programy\Power DVD\PDVDServ.exe" O4 - HKCU\..\Run: [Gadu-Gadu] "D:\Programy\Gadu-Gadu\gg.exe" /tray O4 - Global Startup: Last.fm Helper.lnk = C:\Program Files\Last.fm\LastFMHelper.exe O8 - Extra context menu item: Download all links using BitComet - res/D:\Programy\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: Download all videos using BitComet - res/D:\Programy\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: Download link using &BitComet - res/D:\Programy\BitComet\BitComet.exe/AddLink.htm O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res/C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Programy\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Programy\Java\jre1.5.0_11\bin\ssv.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing) O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - D:\Programy\Sunbelt Software\Personal Firewall 4\kpf4ss.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared Files\RichVideo.exe

Kod: Zaznacz wszystko: "user" - 2007-09-15 22:48:57 Dodatek Service Pack 2 ComboFix 07-05.17.6.V - Running from: "D:\Zabezpieczenia\" ((((((((((((((((((((((((((((((( Files Created from 2007-08-09 to 2007-09-15 )))))))))))))))))))))))))))))))))) 2007-09-15 17:33 1,968 --a------ C:\WINDOWS\system32\tmp.reg 2007-09-15 17:31 53,248 --a------ C:\WINDOWS\system32\Process.exe 2007-09-15 17:31 51,200 --a------ C:\WINDOWS\system32\dumphive.exe 2007-09-15 17:31 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe 2007-09-15 17:31 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe 2007-09-14 20:46 139,264 --a------ C:\WINDOWS\system32\fsgscom.dll 2007-09-14 15:42 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\Last.fm 2007-09-11 16:04 <DIR> d-------- C:\Program Files\Last.fm 2007-09-09 02:18 <DIR> d-------- C:\DOCUME~1\user\DANEAP~1\MegauploadToolbar 2007-09-08 23:47 <DIR> d-------- C:\DOCUME~1\user\.pingus 2007-08-30 00:47 42,672 --a------ C:\WINDOWS\system32\wbsys.dll 2007-08-30 00:47 26,288 --a------ C:\WINDOWS\system32\wbload.dll (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-09-15 18:13:00 -------- d-----w C:\Program Files\eMule 2007-09-15 16:03:53 -------- d-----w C:\DOCUME~1\user\DANEAP~1\LimeWire 2007-09-12 18:11:25 -------- d-----w C:\DOCUME~1\user\DANEAP~1\Skype 2007-09-09 22:25:27 -------- d-----w C:\Program Files\Torrent Master 2007-09-09 01:27:46 43,520 ----a-w C:\WINDOWS\system32\CmdLineExt03.dll 2007-09-08 21:30:27 -------- d-----w C:\Program Files\Hide IP Platinum 2007-09-06 10:09:49 801,144 ----a-w C:\WINDOWS\system32\aswBoot.exe 2007-09-06 10:05:25 92,848 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys 2007-09-06 10:05:10 94,416 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys 2007-09-06 10:03:02 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys 2007-09-06 10:02:20 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys 2007-09-06 10:00:53 26,624 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys 2007-09-06 10:00:07 95,608 ----a-w C:\WINDOWS\system32\AVASTSS.scr 2007-08-31 06:55:23 50,748 ----a-w C:\WINDOWS\system32\perfc015.dat 2007-08-31 06:55:23 358,702 ----a-w C:\WINDOWS\system32\perfh015.dat 2007-08-04 20:06:21 -------- d-----w C:\DOCUME~1\user\DANEAP~1\Real 2007-08-01 21:21:11 -------- d-----w C:\Program Files\Odkurzacz 2007-07-31 21:52:05 -------- d--h--w C:\Program Files\InstallShield Installation Information 2007-07-30 17:19:42 1,712,984 ----a-w C:\WINDOWS\system32\wuaueng.dll 2007-07-30 17:19:36 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll 2007-07-30 17:19:32 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll 2007-07-30 17:19:28 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll 2007-07-30 17:19:20 92,504 ----a-w C:\WINDOWS\system32\cdm.dll 2007-07-30 17:19:16 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe 2007-07-30 17:19:12 43,352 ----a-w C:\WINDOWS\system32\wups2.dll 2007-07-30 17:19:10 271,224 ----a-w C:\WINDOWS\system32\mucltui.dll 2007-07-30 17:19:04 207,736 ----a-w C:\WINDOWS\system32\muweb.dll 2007-07-30 17:18:40 33,624 ----a-w C:\WINDOWS\system32\wups.dll 2007-07-27 11:17:02 -------- d-----w C:\Program Files\Common Files\EasyInfo 2007-07-26 11:42:38 -------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2 2007-07-25 18:38:17 -------- d-----w C:\Program Files\Damian Pasternak 2007-07-24 20:45:35 -------- d-----w C:\DOCUME~1\user\DANEAP~1\K-Meleon 2007-07-19 06:30:39 1,700,352 ----a-w C:\WINDOWS\system32\gdiplus.dll 2007-07-18 01:40:30 -------- d-----w C:\Program Files\Common Files\Adobe Systems Shared 2007-07-15 19:05:23 -------- d-----w C:\DOCUME~1\user\DANEAP~1\Winamp 2007-07-15 18:55:56 -------- d-----w C:\Program Files\Winamp 2007-07-15 12:29:30 -------- d-----w C:\Program Files\microsoft frontpage 2007-07-10 18:18:54 -------- d-----w C:\DOCUME~1\user\DANEAP~1\CyberLink 2007-07-10 18:17:42 -------- d-----w C:\Program Files\Cyberlink 2007-07-09 23:14:27 -------- d-----w C:\DOCUME~1\user\DANEAP~1\River Past G5 2007-06-26 06:10:36 1,104,896 ----a-w C:\WINDOWS\system32\msxml3.dll 2007-06-21 05:01:00 545 ----a-w C:\WINDOWS\UC.PIF 2007-06-21 05:01:00 545 ----a-w C:\WINDOWS\RAR.PIF 2007-06-21 05:01:00 545 ----a-w C:\WINDOWS\PKZIP.PIF 2007-06-21 05:01:00 545 ----a-w C:\WINDOWS\PKUNZIP.PIF 2007-06-21 05:01:00 545 ----a-w C:\WINDOWS\NOCLOSE.PIF 2007-06-21 05:01:00 545 ----a-w C:\WINDOWS\LHA.PIF 2007-06-21 05:01:00 545 ----a-w C:\WINDOWS\ARJ.PIF 2007-06-19 13:32:56 282,112 ----a-w C:\WINDOWS\system32\gdi32.dll 2007-06-13 13:23:49 1,034,752 ----a-w C:\WINDOWS\explorer.exe (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=D:\Programy\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll [2003-11-04 00:17] {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}=D:\Programy\BitComet\tools\BitCometBHO.dll [2006-12-27 17:00] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=D:\Programy\Java\jre1.5.0_11\bin\ssv.dll [2006-12-15 03:23] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="RUNDLL32.exe" [2004-08-04 00:44 C:\WINDOWS\system32\rundll32.exe] "nwiz"="nwiz.exe" [2006-01-24 19:15 C:\WINDOWS\system32\nwiz.exe] "NvMediaCenter"="RUNDLL32.exe" [2004-08-04 00:44 C:\WINDOWS\system32\rundll32.exe] "RTHDCPL"="RTHDCPL.EXE" [] "SkyTel"="SkyTel.EXE" [] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-09-06 12:06] "SunJavaUpdateSched"="D:\Programy\Java\jre1.5.0_11\bin\jusched.exe" [2006-12-15 03:23] "RemoteControl"="D:\Programy\Power DVD\PDVDServ.exe" [2007-01-08 22:26] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Gadu-Gadu"="D:\Programy\Gadu-Gadu\gg.exe" [2007-05-10 16:36] [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0] Source REG_SZ http://images.google.pl/images?q=tbn:Y8D3x7cO7QTNDM:http://stronki00.republika.pl/images/drzewo.jpg [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "appinit_dlls"=wbsys.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Authentication Packages msv1_0 Security Packages kerberos msv1_0 schannel wdigest Notification Packages scecli [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut] piond 22:55:47 "D:\Programy\Power DVD\Language\Language.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odkurzacz-MCD] "C:\Program Files\Odkurzacz\odk_mcd.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] "D:\Programy\QuickTime\qttask.exe" -atboottime [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Tweak UI] "RUNDLL32.EXE" TWEAKUI.CPL,TweakMeUp [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HTTPFilter HTTPFilter LocalService Alerter WebClient LmHosts RemoteRegistry upnphost SSDPSRV NetworkService DnsCache DcomLaunch DcomLaunch TermService rpcss RpcSs imgsvc StiSvc termsvcs TermService HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost *netsvcs* ******************************************************************** catchme 0.3.660 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net Rootkit scan 2007-09-15 22:51:00 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ******************************************************************** Completion time: 2007-09-15 22:52:15 C:\ComboFix-quarantined-files.txt ... 2007-09-15 22:52 C:\ComboFix2.txt ... 2007-09-15 18:00 --- E O F ---

przepraszam za jakość logów ale były wysyłane przez gg

**Posty:** 18165 · przez **wojtas** 15 Wrz 2007, 23:05

ten plik przeskanuj:

C:\WINDOWS\system32\fsgscom.dll

tu i daj raporty:

http://virusscan.jotti.org/
http://www.virustotal.com/

**Posty:** 112 · przez **Fever** 15 Wrz 2007, 23:11

Niestety raporty te, jak i obecne posty pisze za kolege, (fevera) który ma aktywne tylko gg, ale nie ma dostępu do neta ("nie można połączyć z serwerem)...więc nie ma nawet jak tego wrzucić

**Posty:** 18165 · przez **wojtas** 16 Wrz 2007, 10:45

ale co sie dzieje ze strony nie dzialaja? jakis blad czy co? co wykonales ? bo nie wiem co mogles wykonac ze strony sie nie wczytuja

poczytaj:

http://www.atupartner.pl/index.php?option=com_content&task=view&id=49&Itemid=71

Autor postu otrzymał pochwałę

**Posty:** 112 · przez **Fever** 16 Wrz 2007, 11:51

Bawilem sie troche Hijackiem i Combofixem, w Smitfraudfixie w awaryjnym przeczyscilem rejestr, po resecie juz nie dzialaly przegladarki

**Posty:** 671 · przez **oklahoma** 16 Wrz 2007, 12:01

Fever napisał(a):O17 - HKLM\System\CCS\Services\Tcpip\..\{E7E7A927-DDD4-4904-8C61-7B2D0A7636C2}: NameServer = 217.30.129.149,217.30.137.200

Wykasowałeś sobie DNS-Y dlatego nie masz neta :wink:

Autor postu otrzymał pochwałę

**Posty:** 112 · przez **Fever** 16 Wrz 2007, 12:06

oklahoma napisał(a):
Fever napisał(a):O17 - HKLM\System\CCS\Services\Tcpip\..\{E7E7A927-DDD4-4904-8C61-7B2D0A7636C2}: NameServer = 217.30.129.149,217.30.137.200

Wykasowałeś sobie DNS-Y dlatego nie masz neta

wpadlem na to doslownie sekunde przed Toba

dzieki panowie za zainteresowanie, close

proszę o sprawdzenie- vundo (?)

Proszę o sprawdzenie- Vundo (?)

Kto jest na forum