R a p i d s h a r e chory problem - logi

**Posty:** 570 · przez **anded** 21 Wrz 2008, 09:46

Witam. Od pewne3go czasu nie działa mi r a p i d s h a r e, pokazuje się komunikat Nie odnaleziono adresu, nie ważne czy wchodzę na stronę główną, czy od razy na jakiś link. Teraz mam pytanie jak sprawdzić czy to jest moja wina, wina mojego komputera czy czegoś. Internet mam radiowy i chciałbym się że tak powiem upewnić czy to jest wina administratora zanim mu... no wiecie :baseball:

Dodano 21.09.2008 09:18:33:
najdziwniejsze jest to że jak r a p i d s h a r e napisze be spacji to nie moge wysłąć tego popsta, tak samo nie mogę go wyszukać w wyszukiwarce, nie tylko forumowej, ale też w google i nie moge wejść w tematu zawierające to słowo. i tak jest na ie i na firefoxie, nawet jak na gg wysle to słowo to nie dochodzi do odbiorcy. Chodzi oczywiście o słowo r.a.p.i.d.s.h.a.r.e <bez kropek>

I BARDZO PROSZE NIE UŻYWAĆ TEGO SŁOWA BEZ SPACJI W TYM TEMACIE BO WTEDY GO NIE OTWORZE

**Posty:** 984 · przez **zwoli** 21 Wrz 2008, 10:27

anded napisał(a):najdziwniejsze jest to że jak r a p i d s h a r e napisze be spacji to nie moge wysłąć tego popsta, tak samo nie mogę go wyszukać w wyszukiwarce, nie tylko forumowej, ale też w google i nie moge wejść w tematu zawierające to słowo. i tak jest na ie i na firefoxie, nawet jak na gg wysle to słowo to nie dochodzi do odbiorcy. Chodzi oczywiście o słowo r.a.p.i.d.s.h.a.r.e <bez kropek>

Ja gdy miałem lan to dużo osób ściągało z r a p i d a i gdy chciałem ściągać coś to musiałem czekać 60min a po jakimś czasie administrator wyłączył r a p i d a dla lana i nie dało się w ogóle nić ściągać

Dodano 21.09.2008 10:29:54:
Możesz a nawet musisz pogadać z adminem i zapytać się czy on to wyłączył czy jest to twoja wina a jak wyłączył no to już to sobie załatw /// ja to rozwiązałem zmianą neta bo i tak z tamtym netem była totalna kicha

**Posty:** 3475 · przez **Dementor** 23 Wrz 2008, 10:05

anded,
daj logi hjackthis
hijackthis-silent-runners-obsluga-i-umieszczanie-vt9452.html
i combofix
jak-generujemy-logi-z-combofixa-oraz-dssa-vt95026.html

**Posty:** 570 · przez **anded** 23 Wrz 2008, 10:05

U kumpla z tej samej sieci wszystko działa ok z tym serwerem.

Kutwa sam nie wiem co się dzieje

jakąś blokada mam na wysyłanie i odbieranie tego słowa r a p i d s h a r e na kompie.
I proszę się nie śmiać to już mnie to zaczyna ostro wk.... :evil:

Nic tylko

. Blokada nie jest założona po gadałem właśnie z administratorem sieci. Jakiś syf na kompie pewnie

Nikt nie ma jakichś pomysłów :?:

Dodaje logi do sprawdzenia:

combo fix

Kod: Zaznacz wszystko: ComboFix 08-09-20.05 - Micha 2008-09-23 9:53:55.3 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1250.1.1045.18.296 [GMT 2:00] Uruchomiony z: C:\Documents and Settings\Micha\Pulpit\ComboFix.exe * Utworzono nowy punkt przywracania [color=red][b]UWAGA - TEN KOMPUTER NIE MA ZAINSTALOWANEJ KONSOLI ODZYSKIWANIA !![/b][/color] . ((((((((((((((((((((((((( Pliki utworzone od 2008-08-23 do 2008-09-23 ))))))))))))))))))))))))))))))) . 2008-09-23 09:41 . 2008-09-23 09:41 <DIR> d-------- C:\!FixIEDef 2008-09-22 09:54 . <DIR> C:\Documents and Settings\Michał\DoctorWeb 2008-09-21 22:12 . 2008-09-21 22:12 <DIR> d-------- C:\Program Files\DAEMON Tools Lite 2008-09-21 22:05 . <DIR> C:\Documents and Settings\Michał\Dane aplikacji\DAEMON Tools 2008-09-21 22:05 . 2008-09-21 22:05 717,296 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2008-09-16 20:07 . 2008-09-16 20:07 <DIR> d-------- C:\temp\dicom_receive 2008-09-16 20:07 . 2008-09-16 20:07 <DIR> d-------- C:\temp 2008-09-16 20:07 . <DIR> C:\Documents and Settings\Michał\Exhibeon 2008-09-16 17:55 . 2008-09-16 17:55 <DIR> d-------- C:\Program Files\MP3 Remix 2008-09-15 17:35 . 2008-09-15 17:35 <DIR> d-------- C:\Program Files\Creative 2008-09-15 17:35 . 2008-09-15 20:23 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Creative 2008-09-15 17:35 . 2000-05-22 16:58 647,872 --------- C:\WINDOWS\system32\Mscomct2.ocx 2008-09-15 17:35 . 2006-10-06 14:17 53,248 --------- C:\WINDOWS\Ctregrun.exe 2008-09-15 17:35 . 1999-12-13 09:01 44,032 --------- C:\WINDOWS\system32\CTSVCCDA.EXE 2008-09-15 17:35 . 1999-11-18 09:00 25,088 --------- C:\WINDOWS\system32\CTSVCCTL.EXE 2008-09-12 22:42 . 2008-06-23 18:42 6,066,176 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll 2008-09-12 22:42 . 2007-04-17 11:32 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat 2008-09-12 22:42 . 2007-03-08 07:11 1,036,288 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui 2008-09-12 22:42 . 2008-06-23 18:42 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll 2008-09-12 22:42 . 2008-06-23 18:42 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll 2008-09-12 22:42 . 2008-06-23 18:42 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll 2008-09-12 22:42 . 2008-06-23 18:42 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll 2008-09-12 22:42 . 2008-06-23 18:42 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2008-09-12 22:42 . 2008-06-23 11:20 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe 2008-09-10 12:10 . 2008-04-14 00:15 26,368 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys 2008-09-07 23:08 . 2008-09-08 08:15 <DIR> d-------- C:\Program Files\foobar2000 2008-09-07 18:08 . 2008-09-07 18:08 <DIR> d-------- C:\Program Files\MSXML 4.0 2008-09-07 18:08 . 2008-09-07 18:08 <DIR> d-------- C:\Program Files\GameSpy Arcade 2008-09-07 16:05 . 2008-09-07 16:05 <DIR> d-------- C:\Program Files\Free Download Manager 2008-09-07 16:05 . <DIR> C:\Documents and Settings\Michał\Dane aplikacji\Free Download Manager 2008-09-07 16:05 . 2008-09-07 16:05 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\FreeDownloadManager.ORG 2008-09-07 15:39 . 2008-09-07 15:39 <DIR> d-------- C:\Program Files\Lavalys 2008-09-07 13:50 . 2008-09-07 13:50 <DIR> d-------- C:\Documents and Settings\Michał 2008-09-07 13:50 . <DIR> C:\Documents and Settings\Micha-\Ustawienia lokalne 2008-09-07 13:50 . <DIR> C:\Documents and Settings\Micha-\Ustawienia lokalne 2008-09-07 13:36 . 2008-09-07 13:36 4,594 --a------ C:\Documents and Settings\Michacatchme.zip 2008-09-07 11:22 . 2008-09-07 11:22 <DIR> d-------- C:\Program Files\Linearteam 2008-09-06 14:39 . <DIR> C:\Documents and Settings\Michał\Dane aplikacji\Thinstall 2008-09-05 14:47 . 2008-09-05 14:47 <DIR> d-------- C:\Program Files\Avira 2008-09-05 14:47 . 2008-09-05 14:47 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Avira 2008-09-05 14:42 . 2008-09-05 14:46 <DIR> d-------- C:\Program Files\RegCleaner 2008-09-04 15:47 . <DIR> C:\Documents and Settings\Michał\Dane aplikacji\Thunderbird 2008-09-04 15:44 . 2008-09-23 09:38 <DIR> d-------- C:\Program Files\Mozilla Thunderbird 2008-09-03 22:49 . <DIR> C:\Documents and Settings\Michał\Dane aplikacji\WinRAR 2008-09-03 18:56 . <DIR> C:\Documents and Settings\Michał\dwhelper 2008-09-03 16:30 . 2008-09-03 16:30 <DIR> d-------- C:\Program Files\IrfanView 2008-09-03 15:09 . <DIR> C:\Documents and Settings\Michał\Dane aplikacji\OpenOffice.org2 2008-09-02 22:45 . 2008-09-02 22:45 <DIR> d-------- C:\WINDOWS\Sun 2008-09-02 22:38 . <DIR> C:\Documents and Settings\Michał\Dane aplikacji\Gadu-Gadu 2008-09-02 21:54 . <DIR> C:\Documents and Settings\Michał\Dane aplikacji\Media Player Classic 2008-09-02 21:54 . 2008-09-22 13:01 69 --a------ C:\WINDOWS\NeroDigital.ini 2008-09-02 21:10 . 2008-09-02 21:10 <DIR> d-------- C:\profiles 2008-09-02 20:25 . 2008-09-02 20:25 <DIR> d-------- C:\Program Files\VirtualDJ 2008-09-02 20:11 . 2008-04-14 22:51 221,184 --a------ C:\WINDOWS\system32\wmpns.dll 2008-09-02 20:10 . 2008-09-02 20:10 <DIR> d-------- C:\Program Files\Windows Media Connect 2 2008-09-02 20:09 . 2008-09-02 20:10 <DIR> d-------- C:\Program Files\OpenOffice.org 2.4 2008-09-02 20:04 . 2008-09-02 20:04 <DIR> d-------- C:\WINDOWS\system32\LogFiles 2008-09-02 20:04 . 2008-09-02 20:06 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF 2008-09-02 18:48 . 2008-09-02 18:49 <DIR> d-------- C:\Program Files\Common Files\Adobe 2008-09-02 18:46 . 2008-09-20 19:54 <DIR> d-------- C:\Program Files\a-squared Free 2008-09-02 18:28 . 2008-09-02 18:28 <DIR> d-------- C:\Program Files\Sunbelt Software 2008-09-02 18:28 . 2008-07-16 09:57 269,736 -ra------ C:\WINDOWS\system32\drivers\SbFw.sys 2008-09-02 18:28 . 2007-03-12 23:34 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll 2008-09-02 18:28 . 2007-03-12 23:34 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll 2008-09-02 18:28 . 2007-03-12 23:34 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll 2008-09-02 18:28 . 2008-06-21 04:54 65,576 --a------ C:\WINDOWS\system32\drivers\SbFwIm.sys 2008-09-02 18:15 . 2008-06-14 19:36 273,024 --------- C:\WINDOWS\system32\drivers\bthport.sys 2008-09-02 18:15 . 2008-06-14 19:36 273,024 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys 2008-09-02 18:10 . 2008-09-13 15:40 <DIR> d--h----- C:\WINDOWS\$hf_mig$ 2008-09-02 18:10 . 2006-09-25 17:58 23,856 --a------ C:\WINDOWS\system32\spupdsvc.exe 2008-09-02 18:03 . 2008-09-02 18:03 <DIR> d-------- C:\Program Files\Gadu-Gadu 2008-09-02 18:03 . 2008-09-02 18:03 <DIR> d-------- C:\NVIDIA 2008-09-02 18:03 . <DIR> C:\Documents and Settings\Michał\Gadu-Gadu 2008-09-02 18:02 . 2008-09-02 21:05 <DIR> d-------- C:\Program Files\SubEdit-Player 2008-09-02 18:01 . 2008-09-02 18:01 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\nView_Profiles 2008-09-02 16:50 . 2004-07-12 16:50 5,222,400 --a------ C:\WINDOWS\system32\nvoglnt.dll 2008-09-02 16:50 . 2004-07-12 16:50 4,112,384 --a------ C:\WINDOWS\system32\nvcpl.dll 2008-09-02 16:50 . 2004-07-12 16:50 241,664 --a------ C:\WINDOWS\system32\nvnt4cpl.dll 2008-09-02 16:50 . 2004-07-12 16:50 114,755 --a------ C:\WINDOWS\system32\nvsvc32.exe 2008-09-02 16:50 . 2004-07-12 16:50 81,920 --a------ C:\WINDOWS\system32\nvwddi.dll 2008-09-02 16:50 . 2004-07-12 16:50 81,920 --a------ C:\WINDOWS\system32\nvmctray.dll 2008-09-02 16:50 . 2004-07-12 16:50 32,256 --a------ C:\WINDOWS\system32\nvcodins.dll 2008-09-02 16:50 . 2004-07-12 16:50 32,256 --a------ C:\WINDOWS\system32\nvcod.dll . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-09-22 20:43 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-09-16 15:55 --------- d-----w C:\Program Files\Winamp 2008-09-06 13:09 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\Adobe 2008-09-05 12:43 81,984 ----a-w C:\WINDOWS\system32\bdod.bin 2008-09-05 12:43 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\BitDefender 2008-09-04 13:47 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\Mozilla 2008-09-02 18:45 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\Winamp 2008-09-02 17:37 --------- d-----w C:\Program Files\Reference Assemblies 2008-09-02 17:37 --------- d-----w C:\Program Files\MSBuild 2008-09-02 17:37 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\Macromedia 2008-09-02 17:31 --------- d-----w C:\Program Files\Common Files\Ahead 2008-09-02 17:29 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\Ahead 2008-09-02 17:27 --------- d-----w C:\Program Files\Nero 2008-09-02 17:27 --------- d-----w C:\Program Files\MoorHunt 2008-09-02 17:16 --------- d-s---w C:\Documents and Settings\Michał\Dane aplikacji\Microsoft 2008-09-02 17:13 --------- d-----w C:\Program Files\Java 2008-09-02 17:13 --------- d-----w C:\Program Files\Common Files\Java 2008-09-02 17:12 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\Sun 2008-09-02 17:10 --------- d-----w C:\Program Files\OO Software 2008-09-02 15:59 --------- d-----w C:\Program Files\NetMeter 2008-09-02 15:52 --------- d-----w C:\Program Files\K-Lite Codec Pack 2008-09-02 15:52 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\Real 2008-09-02 15:49 --------- d-----w C:\Program Files\Zone Labs 2008-09-02 15:48 --------- d-----w C:\Program Files\Common Files\Softwin 2008-09-02 15:46 --------- d-----w C:\Program Files\NVIDIA Corporation 2008-09-02 15:46 --------- d-----w C:\Program Files\Common Files\NVIDIA Shared 2008-09-02 15:46 --------- d-----w C:\Program Files\Common Files\InstallShield 2008-09-02 15:27 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\Identities 2008-09-02 15:22 --------- d-----w C:\Program Files\microsoft frontpage 2008-09-02 15:20 --------- d-----w C:\Program Files\Usługi online 2008-07-31 08:41 68,616 ----a-w C:\WINDOWS\system32\XAPOFX1_1.dll 2008-07-31 08:41 238,088 ----a-w C:\WINDOWS\system32\xactengine3_2.dll 2008-07-31 08:40 509,448 ----a-w C:\WINDOWS\system32\XAudio2_2.dll 2008-07-25 08:34 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll 2008-07-25 08:34 683,520 ----a-w C:\WINDOWS\system32\divx.dll 2008-07-23 16:50 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll 2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll 2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe 2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll 2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll 2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll 2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll 2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll 2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll 2008-07-16 18:51 2,041,363 ----a-w C:\WINDOWS\system32\x264vfw.dll 2008-07-12 06:18 467,984 ----a-w C:\WINDOWS\system32\d3dx10_39.dll 2008-07-12 06:18 3,851,784 ----a-w C:\WINDOWS\system32\D3DX9_39.dll 2008-07-12 06:18 1,493,528 ----a-w C:\WINDOWS\system32\D3DCompiler_39.dll 2008-07-07 20:29 253,952 ----a-w C:\WINDOWS\system32\es.dll 2008-06-24 16:46 74,240 ----a-w C:\WINDOWS\system32\mscms.dll 2008-06-24 16:12 295,936 ------w C:\WINDOWS\system32\wmpeffects.dll 2008-06-23 16:42 826,368 ----a-w C:\WINDOWS\system32\wininet.dll . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "C:\Program Files\NetMeter\NetMeter.exe"="C:\Program Files\NetMeter\NetMeter.exe" [2007-08-11 331264] "CTZDetec.exe"="C:\Program Files\Creative\Creative Media Lite\CTZDetec.exe" [2007-12-18 401408] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360] "DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-07-24 490952] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NVMixerTray"="C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" [2004-12-20 131072] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-07-12 4112384] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2004-07-12 81920] "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497] "nwiz"="nwiz.exe" [2004-07-12 C:\WINDOWS\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.X264"= x264vfw.dll "VIDC.YV12"= yv12vfw.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= R1 SbFw;SbFw;C:\WINDOWS\system32\drivers\SbFw.sys [2008-07-16 269736] R1 sbhips;Sunbelt HIPS Driver;C:\WINDOWS\system32\drivers\sbhips.sys [2008-06-21 66600] R2 SbPF.Launcher;SbPF.Launcher;C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [2008-07-30 95528] R2 SPF4;Sunbelt Personal Firewall 4;C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [2008-07-30 1361192] R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;C:\WINDOWS\system32\DRIVERS\sbfwim.sys [2008-06-21 65576] . . ------- Skan uzupełniający ------- . O8 -: &Download All by FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm O8 -: &Download by FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm O8 -: Pobierz plik wideo we Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm O8 -: Pobierz w Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm O8 -: Pobierz wszystkie pliki w Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm O8 -: Pobierz zaznaczone w Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm O17 -: HKLM\CCS\Interface\{13A28F0C-131A-43D8-B7E9-FC72A5EC8E9C}: NameServer = 194.204.159.1,194.204.152.34 . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-09-23 09:59:18 Windows 5.1.2600 Dodatek Service Pack 3 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... HKCU\Software\Microsoft\Windows\CurrentVersion\Run CTZDetec.exe = C:\Program Files\Creative\Creative Media Lite\CTZDetec.exe????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . Czas ukończenia: 2008-09-23 10:01:39 ComboFix-quarantined-files.txt 2008-09-23 08:01:31 ComboFix2.txt 2008-09-07 13:26:06 Przed: 4˙701˙171˙712 bajt˘w wolnych Po: 4,838,629,376 bajt˘w wolnych 208 --- E O F --- 2008-09-13 13:40:31

HJ

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 09:44:57, on 2008-09-23 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\a-squared Free\a2service.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\WINDOWS\system32\CTsvcCDA.exe C:\Program Files\Creative\Shared Files\CTDevSrv.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\oodag.exe C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\NetMeter\NetMeter.exe C:\Program Files\Creative\Creative Media Lite\CTZDetec.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\DAEMON Tools Lite\daemon.exe C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe C:\Program Files\MoorHunt\MoorHunt.exe C:\Program Files\Gadu-Gadu\gg.exe C:\PROGRA~1\FREEDO~1\fdm.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Michał\Pulpit\HiJackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: flashget2 urlcatch - {1F364306-AA45-47B5-9F9D-39A8B94E7EF1} - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\bhoCATCH.dll (file missing) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [C:\Program Files\NetMeter\NetMeter.exe] C:\Program Files\NetMeter\NetMeter.exe O4 - HKCU\..\Run: [CTZDetec.exe] C:\Program Files\Creative\Creative Media Lite\CTZDetec.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: &Download All by FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm O8 - Extra context menu item: &Download by FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm O8 - Extra context menu item: Pobierz plik wideo we Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm O8 - Extra context menu item: Pobierz w Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm O8 - Extra context menu item: Pobierz wszystkie pliki w Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm O8 - Extra context menu item: Pobierz zaznaczone w Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{13A28F0C-131A-43D8-B7E9-FC72A5EC8E9C}: NameServer = 194.204.159.1,194.204.152.34 O17 - HKLM\System\CS1\Services\Tcpip\..\{13A28F0C-131A-43D8-B7E9-FC72A5EC8E9C}: NameServer = 194.204.159.1,194.204.152.34 O17 - HKLM\System\CS2\Services\Tcpip\..\{13A28F0C-131A-43D8-B7E9-FC72A5EC8E9C}: NameServer = 194.204.159.1,194.204.152.34 O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe O23 - Service: CT Device Query service (CTDevice_Srv) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTDevSrv.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe -- End of file - 6652 bytes

FixIEDef

Kod: Zaznacz wszystko: ******************************************************************************** * * * FixIEDef Log * * Version 1.6.10.6162 * * * ******************************************************************************** Created at 09:41:46 on Tuesday, September 23, 2008 Time Zone : Logged On User : Michał Operating System : Microsoft Windows XP Professional Dodatek Service Pack 3 OS Version : 5.1.2600 System Langauge : Polish Keyboard Layout : Polish Processor : X86 AMD Athlon(tm) XP 2000+ System Drive : C:\ Windows Directory : C:\WINDOWS System Directory : C:\WINDOWS\system32 System Drive Type : Fixed System Drive Status : READY System Drive Label : System System Drive Size : 10 GB System Drive Free : 4.47 GB Total Physical Memory: 511 MB Free Physical Memory : 250 MB Total Page File : 511 MB Free Page File : 854 MB Total Virtual Memory : 2048 MB Free Virtual Memory : 1972 MB Boot State : Normal boot -------------------------------------------------------------------------------- !!! Files that have been deleted !!! C:\WINDOWS\system32\OODBS.lor -------------------------------------------------------------------------------- !!! Directories that have been removed !!! No malicious directories to be removed -------------------------------------------------------------------------------- !!! Registry entries that have been removed !!! No malicious Registry entries found ================================================================================ All Done :) ShadowPuterDude Safe Surfing!!!

**Posty:** 8001 · przez **Okocza** 23 Wrz 2008, 18:07

Wykonaj to co jest podane w tym temacie

Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu C:\SDFix wrzuc zawartość pliku Report.txt + log z combofixa oraz daj loga z hijacka

**Posty:** 570 · przez **anded** 24 Wrz 2008, 10:23

okocza napisał(a):Wykonaj to co jest podane w tym temacie

wykonane

okocza napisał(a):Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

wykonane

okocza napisał(a):Potem wejdz do folderu C:\SDFix wrzuc zawartość pliku Report.txt + log z combofixa oraz daj loga z hijacka

oto i logi

Kod: Zaznacz wszystko: ComboFix 08-09-22.06 - Micha 2008-09-24 10:13:37.4 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1250.1.1045.18.263 [GMT 2:00] Uruchomiony z: C:\Documents and Settings\Micha\Pulpit\ComboFix.exe * Utworzono nowy punkt przywracania [color=red][b]UWAGA - TEN KOMPUTER NIE MA ZAINSTALOWANEJ KONSOLI ODZYSKIWANIA !![/b][/color] . ((((((((((((((((((((((((( Pliki utworzone od 2008-08-24 do 2008-09-24 ))))))))))))))))))))))))))))))) . 2008-09-24 09:54 . 2008-09-24 09:54 <DIR> d-------- C:\WINDOWS\ERUNT 2008-09-24 09:52 . 2008-09-24 10:03 <DIR> d-------- C:\SDFix 2008-09-23 10:09 . 2008-09-24 10:01 8,939 --a------ C:\WINDOWS\system32\oodbs.lor 2008-09-23 09:41 . 2008-09-23 09:41 <DIR> d-------- C:\!FixIEDef 2008-09-22 09:54 . <DIR> C:\Documents and Settings\Michał\DoctorWeb 2008-09-21 22:12 . 2008-09-21 22:12 <DIR> d-------- C:\Program Files\DAEMON Tools Lite 2008-09-21 22:05 . <DIR> C:\Documents and Settings\Michał\Dane aplikacji\DAEMON Tools 2008-09-21 22:05 . 2008-09-21 22:05 717,296 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2008-09-16 20:07 . <DIR> C:\Documents and Settings\Michał\Exhibeon 2008-09-16 17:55 . 2008-09-16 17:55 <DIR> d-------- C:\Program Files\MP3 Remix 2008-09-15 17:35 . 2008-09-15 17:35 <DIR> d-------- C:\Program Files\Creative 2008-09-15 17:35 . 2008-09-15 20:23 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Creative 2008-09-15 17:35 . 2000-05-22 16:58 647,872 --------- C:\WINDOWS\system32\Mscomct2.ocx 2008-09-15 17:35 . 2006-10-06 14:17 53,248 --------- C:\WINDOWS\Ctregrun.exe 2008-09-15 17:35 . 1999-12-13 09:01 44,032 --------- C:\WINDOWS\system32\CTSVCCDA.EXE 2008-09-15 17:35 . 1999-11-18 09:00 25,088 --------- C:\WINDOWS\system32\CTSVCCTL.EXE 2008-09-12 22:42 . 2008-06-23 18:42 6,066,176 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll 2008-09-12 22:42 . 2007-04-17 11:32 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat 2008-09-12 22:42 . 2007-03-08 07:11 1,036,288 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui 2008-09-12 22:42 . 2008-06-23 18:42 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll 2008-09-12 22:42 . 2008-06-23 18:42 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll 2008-09-12 22:42 . 2008-06-23 18:42 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll 2008-09-12 22:42 . 2008-06-23 18:42 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll 2008-09-12 22:42 . 2008-06-23 18:42 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2008-09-12 22:42 . 2008-06-23 11:20 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe 2008-09-10 12:10 . 2008-04-14 00:15 26,368 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys 2008-09-07 23:08 . 2008-09-08 08:15 <DIR> d-------- C:\Program Files\foobar2000 2008-09-07 18:08 . 2008-09-07 18:08 <DIR> d-------- C:\Program Files\MSXML 4.0 2008-09-07 18:08 . 2008-09-07 18:08 <DIR> d-------- C:\Program Files\GameSpy Arcade 2008-09-07 16:05 . 2008-09-07 16:05 <DIR> d-------- C:\Program Files\Free Download Manager 2008-09-07 16:05 . <DIR> C:\Documents and Settings\Michał\Dane aplikacji\Free Download Manager 2008-09-07 16:05 . 2008-09-07 16:05 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\FreeDownloadManager.ORG 2008-09-07 15:39 . 2008-09-07 15:39 <DIR> d-------- C:\Program Files\Lavalys 2008-09-07 13:50 . 2008-09-07 13:50 <DIR> d-------- C:\Documents and Settings\Michał 2008-09-07 13:50 . <DIR> C:\Documents and Settings\Micha-\Ustawienia lokalne 2008-09-07 13:50 . <DIR> C:\Documents and Settings\Micha-\Ustawienia lokalne 2008-09-07 13:36 . 2008-09-07 13:36 4,594 --a------ C:\Documents and Settings\Michacatchme.zip 2008-09-07 11:22 . 2008-09-07 11:22 <DIR> d-------- C:\Program Files\Linearteam 2008-09-06 14:39 . <DIR> C:\Documents and Settings\Michał\Dane aplikacji\Thinstall 2008-09-05 14:47 . 2008-09-05 14:47 <DIR> d-------- C:\Program Files\Avira 2008-09-05 14:47 . 2008-09-05 14:47 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Avira 2008-09-05 14:42 . 2008-09-05 14:46 <DIR> d-------- C:\Program Files\RegCleaner 2008-09-04 15:47 . <DIR> C:\Documents and Settings\Michał\Dane aplikacji\Thunderbird 2008-09-04 15:44 . 2008-09-23 22:28 <DIR> d-------- C:\Program Files\Mozilla Thunderbird 2008-09-03 22:49 . <DIR> C:\Documents and Settings\Michał\Dane aplikacji\WinRAR 2008-09-03 18:56 . <DIR> C:\Documents and Settings\Michał\dwhelper 2008-09-03 16:30 . 2008-09-03 16:30 <DIR> d-------- C:\Program Files\IrfanView 2008-09-03 15:09 . <DIR> C:\Documents and Settings\Michał\Dane aplikacji\OpenOffice.org2 2008-09-02 22:45 . 2008-09-02 22:45 <DIR> d-------- C:\WINDOWS\Sun 2008-09-02 22:38 . <DIR> C:\Documents and Settings\Michał\Dane aplikacji\Gadu-Gadu 2008-09-02 21:54 . <DIR> C:\Documents and Settings\Michał\Dane aplikacji\Media Player Classic 2008-09-02 21:54 . 2008-09-23 22:41 69 --a------ C:\WINDOWS\NeroDigital.ini 2008-09-02 21:10 . 2008-09-02 21:10 <DIR> d-------- C:\profiles 2008-09-02 20:25 . 2008-09-02 20:25 <DIR> d-------- C:\Program Files\VirtualDJ 2008-09-02 20:11 . 2008-04-14 22:51 221,184 --a------ C:\WINDOWS\system32\wmpns.dll 2008-09-02 20:10 . 2008-09-02 20:10 <DIR> d-------- C:\Program Files\Windows Media Connect 2 2008-09-02 20:09 . 2008-09-02 20:10 <DIR> d-------- C:\Program Files\OpenOffice.org 2.4 2008-09-02 20:04 . 2008-09-02 20:04 <DIR> d-------- C:\WINDOWS\system32\LogFiles 2008-09-02 20:04 . 2008-09-02 20:06 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF 2008-09-02 18:48 . 2008-09-02 18:49 <DIR> d-------- C:\Program Files\Common Files\Adobe 2008-09-02 18:46 . 2008-09-20 19:54 <DIR> d-------- C:\Program Files\a-squared Free 2008-09-02 18:28 . 2008-09-02 18:28 <DIR> d-------- C:\Program Files\Sunbelt Software 2008-09-02 18:28 . 2008-07-16 09:57 269,736 -ra------ C:\WINDOWS\system32\drivers\SbFw.sys 2008-09-02 18:28 . 2007-03-12 23:34 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll 2008-09-02 18:28 . 2007-03-12 23:34 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll 2008-09-02 18:28 . 2007-03-12 23:34 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll 2008-09-02 18:28 . 2008-06-21 04:54 65,576 --a------ C:\WINDOWS\system32\drivers\SbFwIm.sys 2008-09-02 18:15 . 2008-06-14 19:36 273,024 --------- C:\WINDOWS\system32\drivers\bthport.sys 2008-09-02 18:15 . 2008-06-14 19:36 273,024 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys 2008-09-02 18:10 . 2008-09-13 15:40 <DIR> d--h----- C:\WINDOWS\$hf_mig$ 2008-09-02 18:10 . 2006-09-25 17:58 23,856 --a------ C:\WINDOWS\system32\spupdsvc.exe 2008-09-02 18:03 . 2008-09-02 18:03 <DIR> d-------- C:\Program Files\Gadu-Gadu 2008-09-02 18:03 . 2008-09-02 18:03 <DIR> d-------- C:\NVIDIA 2008-09-02 18:03 . <DIR> C:\Documents and Settings\Michał\Gadu-Gadu 2008-09-02 18:02 . 2008-09-02 21:05 <DIR> d-------- C:\Program Files\SubEdit-Player 2008-09-02 18:01 . 2008-09-02 18:01 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\nView_Profiles 2008-09-02 16:50 . 2004-07-12 16:50 5,222,400 --a------ C:\WINDOWS\system32\nvoglnt.dll 2008-09-02 16:50 . 2004-07-12 16:50 4,112,384 --a------ C:\WINDOWS\system32\nvcpl.dll 2008-09-02 16:50 . 2004-07-12 16:50 241,664 --a------ C:\WINDOWS\system32\nvnt4cpl.dll 2008-09-02 16:50 . 2004-07-12 16:50 114,755 --a------ C:\WINDOWS\system32\nvsvc32.exe 2008-09-02 16:50 . 2004-07-12 16:50 81,920 --a------ C:\WINDOWS\system32\nvwddi.dll 2008-09-02 16:50 . 2004-07-12 16:50 81,920 --a------ C:\WINDOWS\system32\nvmctray.dll 2008-09-02 16:50 . 2004-07-12 16:50 32,256 --a------ C:\WINDOWS\system32\nvcodins.dll 2008-09-02 16:50 . 2004-07-12 16:50 32,256 --a------ C:\WINDOWS\system32\nvcod.dll . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-09-22 20:43 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-09-16 15:55 --------- d-----w C:\Program Files\Winamp 2008-09-06 13:09 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\Adobe 2008-09-05 12:43 81,984 ----a-w C:\WINDOWS\system32\bdod.bin 2008-09-05 12:43 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\BitDefender 2008-09-04 13:47 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\Mozilla 2008-09-02 18:45 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\Winamp 2008-09-02 17:37 --------- d-----w C:\Program Files\Reference Assemblies 2008-09-02 17:37 --------- d-----w C:\Program Files\MSBuild 2008-09-02 17:37 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\Macromedia 2008-09-02 17:31 --------- d-----w C:\Program Files\Common Files\Ahead 2008-09-02 17:29 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\Ahead 2008-09-02 17:27 --------- d-----w C:\Program Files\Nero 2008-09-02 17:27 --------- d-----w C:\Program Files\MoorHunt 2008-09-02 17:16 --------- d-s---w C:\Documents and Settings\Michał\Dane aplikacji\Microsoft 2008-09-02 17:13 --------- d-----w C:\Program Files\Java 2008-09-02 17:13 --------- d-----w C:\Program Files\Common Files\Java 2008-09-02 17:12 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\Sun 2008-09-02 17:10 --------- d-----w C:\Program Files\OO Software 2008-09-02 15:59 --------- d-----w C:\Program Files\NetMeter 2008-09-02 15:52 --------- d-----w C:\Program Files\K-Lite Codec Pack 2008-09-02 15:52 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\Real 2008-09-02 15:49 --------- d-----w C:\Program Files\Zone Labs 2008-09-02 15:48 --------- d-----w C:\Program Files\Common Files\Softwin 2008-09-02 15:46 --------- d-----w C:\Program Files\NVIDIA Corporation 2008-09-02 15:46 --------- d-----w C:\Program Files\Common Files\NVIDIA Shared 2008-09-02 15:46 --------- d-----w C:\Program Files\Common Files\InstallShield 2008-09-02 15:27 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\Identities 2008-09-02 15:22 --------- d-----w C:\Program Files\microsoft frontpage 2008-09-02 15:20 --------- d-----w C:\Program Files\Usługi online 2008-07-31 08:41 68,616 ----a-w C:\WINDOWS\system32\XAPOFX1_1.dll 2008-07-31 08:41 238,088 ----a-w C:\WINDOWS\system32\xactengine3_2.dll 2008-07-31 08:40 509,448 ----a-w C:\WINDOWS\system32\XAudio2_2.dll 2008-07-25 08:34 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll 2008-07-25 08:34 683,520 ----a-w C:\WINDOWS\system32\divx.dll 2008-07-23 16:50 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll 2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll 2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe 2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll 2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll 2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll 2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll 2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll 2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll 2008-07-16 18:51 2,041,363 ----a-w C:\WINDOWS\system32\x264vfw.dll 2008-07-12 06:18 467,984 ----a-w C:\WINDOWS\system32\d3dx10_39.dll 2008-07-12 06:18 3,851,784 ----a-w C:\WINDOWS\system32\D3DX9_39.dll 2008-07-12 06:18 1,493,528 ----a-w C:\WINDOWS\system32\D3DCompiler_39.dll 2008-07-07 20:29 253,952 ----a-w C:\WINDOWS\system32\es.dll 2008-06-24 16:46 74,240 ----a-w C:\WINDOWS\system32\mscms.dll 2008-06-24 16:12 295,936 ------w C:\WINDOWS\system32\wmpeffects.dll . ((((((((((((((((((((((((((((( snapshot@2008-09-23_10.00.10.50 ))))))))))))))))))))))))))))))))))))))))) . + 2008-08-07 14:27:04 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX\ERDNT.EXE + 2008-09-24 07:54:34 3,874,816 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\[u]0[/u]0000001\NTUSER.DAT + 2008-09-24 07:54:34 167,936 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\[u]0[/u]0000002\UsrClass.dat + 2008-08-07 14:27:04 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\ERDNT.EXE + 2008-09-24 07:54:33 3,874,816 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\[u]0[/u]0000001\NTUSER.DAT + 2008-09-24 07:54:33 167,936 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\[u]0[/u]0000002\UsrClass.dat . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "C:\Program Files\NetMeter\NetMeter.exe"="C:\Program Files\NetMeter\NetMeter.exe" [2007-08-11 331264] "CTZDetec.exe"="C:\Program Files\Creative\Creative Media Lite\CTZDetec.exe" [2007-12-18 401408] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360] "DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-07-24 490952] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NVMixerTray"="C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" [2004-12-20 131072] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-07-12 4112384] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2004-07-12 81920] "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497] "nwiz"="nwiz.exe" [2004-07-12 C:\WINDOWS\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.X264"= x264vfw.dll "VIDC.YV12"= yv12vfw.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= R1 SbFw;SbFw;C:\WINDOWS\system32\drivers\SbFw.sys [2008-07-16 269736] R1 sbhips;Sunbelt HIPS Driver;C:\WINDOWS\system32\drivers\sbhips.sys [2008-06-21 66600] R2 SbPF.Launcher;SbPF.Launcher;C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [2008-07-30 95528] R2 SPF4;Sunbelt Personal Firewall 4;C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [2008-07-30 1361192] R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;C:\WINDOWS\system32\DRIVERS\sbfwim.sys [2008-06-21 65576] . . ------- Skan uzupełniający ------- . O8 -: &Download All by FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm O8 -: &Download by FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm O8 -: Pobierz plik wideo we Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm O8 -: Pobierz w Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm O8 -: Pobierz wszystkie pliki w Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm O8 -: Pobierz zaznaczone w Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm O17 -: HKLM\CCS\Interface\{13A28F0C-131A-43D8-B7E9-FC72A5EC8E9C}: NameServer = 194.204.159.1,194.204.152.34 . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-09-24 10:18:17 Windows 5.1.2600 Dodatek Service Pack 3 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... HKCU\Software\Microsoft\Windows\CurrentVersion\Run CTZDetec.exe = C:\Program Files\Creative\Creative Media Lite\CTZDetec.exe????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . Czas ukończenia: 2008-09-24 10:20:42 ComboFix-quarantined-files.txt 2008-09-24 08:20:35 ComboFix2.txt 2008-09-23 08:01:42 ComboFix3.txt 2008-09-07 13:26:06 Przed: 4˙364˙439˙552 bajt˘w wolnych Po: 4,355,620,864 bajt˘w wolnych 218 --- E O F --- 2008-09-13 13:40:31

Kod: Zaznacz wszystko: [b]SDFix: Version 1.228 [/b] Run by Micha on 2008-09-24 at 09:56 Microsoft Windows XP [Wersja 5.1.2600] Running From: C:\SDFix [b]Checking Services [/b]: Restoring Default Security Values Restoring Default Hosts File Rebooting [b]Checking Files [/b]: No Trojan Files Found Removing Temp Files [b]ADS Check [/b]: [b]Final Check [/b]: catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-09-24 10:02:34 Windows 5.1.2600 Dodatek Service Pack 3 NTFS scanning hidden processes ... IPC error: 2 Nie można odnaleźć określonego pliku. scanning hidden services & system hive ... [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg] "s1"=dword:2df9c43f "s2"=dword:110480d0 "h0"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools Lite\" "h0"=dword:00000000 "khjeh"=hex:4d,a7,f0,3c,b9,ed,97,fb,d3,fc,9a,91,81,0d,40,32,d9,b4,8b,43,b4,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,99,bb,bb,f0,77,40,be,81,b1,e4,fa,73,e7,1a,d3,e3,af,.. "khjeh"=hex:1f,e3,c3,78,5d,2c,c4,de,e1,9f,4f,63,cd,c4,01,63,09,ee,68,71,c8,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:cd,00,a0,df,30,6e,e2,25,1a,72,95,28,5d,23,18,8d,e2,0e,05,32,35,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools Lite\" "h0"=dword:00000000 "khjeh"=hex:4d,a7,f0,3c,b9,ed,97,fb,d3,fc,9a,91,81,0d,40,32,d9,b4,8b,43,b4,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,99,bb,bb,f0,77,40,be,81,b1,e4,fa,73,e7,1a,d3,e3,af,.. "khjeh"=hex:1f,e3,c3,78,5d,2c,c4,de,e1,9f,4f,63,cd,c4,01,63,09,ee,68,71,c8,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:cd,00,a0,df,30,6e,e2,25,1a,72,95,28,5d,23,18,8d,e2,0e,05,32,35,.. scanning hidden registry entries ... [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System] "OODEFRAG10.00.00.01WORKSTATION"="CAC4CD11198AECEC5D50A6515750A215DF377D335C0A34D5B136FD8EAB935A98C861264A69F90CA5464D361238D36F442615B55BB36C642679A877B8EAB79321AC6D417D799F9FBC67ADF4B7239A5490F05DD16C0C12EDF1B2243F33F91E72693A423216248D9507D942FEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC79338EDD5E5BE2F6E6679DB7CE019D40AA5CC038D530D6EB34520E780907CF7485B22D0F2D9345594F7AA37B4F6F6FFBE526A75C4ED8960A9C160227D1C0353119C6EE8D1C54DA6E6B0609B2ED5A24233B72C72E77D54189FACB12615D030D6DBA93581DC69C32B7FD7D45130776634CA7AE7C9CC7641FB7F34F664FD2738929046D12E15F7551C2F72923DC75D124B095364EA565B63A9A0C31694C428AE55CB33909B37BBA419470E23107F9CDE104187B8EFBD6521C316C974DE69B915D6FAC706F21951D1124A31ABFBBB5A09A66DF014F070993D5EBE2B984E3B4AAAFC07222B8E88C21D1DA70D2E557B2D351F246DFE7604D29F9AEDD66C83947C8A322AFF01F7FA2211819D724FDEAD9C50C34464473D6571621D4F4FE9415EFB201DA33929F0EFDC77FB18339A6BC7CA7D5A9016D516DBEB066A95E78A9D3B00593A3ED517B71A997A3EABB51C0C5CC7FBD49BAB1A4D902A2E96EF95C8B8B6E302D2BF68C373913E4A7807140F3B4E2A65679D87754077FECCFD8C6C602027477A19386351DAA0D583122B6EB2A6B3ACAB5966A3C8B14FB603E11696A1AB3EC714AF17CD13ABE4F6D677042D010FCB1EEF5711C8FB951A02562B4AB0C2350EA8C8251D8FB5E2172F6FB056E7D98B40DE7B74D459692C8F9346A54FA05B13B6506ACAF4364A033F4199DE9BB16F98F73DE9BE15A088BB1775F0B75E6431D0BB2722D7E84CAD708BA4C839ECBD1AF40EF53C95CF932E07C6E467C112547828C92BAEBA3890823E889DDE515E57A752AF2956C5C6373914B966178158E2542BE2618D47A660462D20AED833575704F69CECB3174794161748C7B3FE01F0800D4F09D5ACF50BDBB764D719DD888A702C8BB704C2F45A25682D1B295C9F82DA2375EAC70E5A0C698B7C431F95153A6194CD450F206F1363DB448FA4398E1E45980BBFD10F1D547A4AE46C9E25FAA88E2A71A8DE16B4FA923FC3A19120CBF141180391D342011F7D1290B2D253B8A7C6FC4ED9DD44152C25C8054295353A136013A6DE8DF8C982855A6B41F911013471642984B916191D9011C251ADA94B8561FE6D017164BD739A8DB43B77FFB05BD72F044B3DB96C9DA6ADDA3AE7E68D7962770412EE0DED92208311E644892494DDF5502C801A05A46B707A57D1BDB7AAC1B77000A4BC4526C75C310E7495B68F2832B44D0CD35C8AFCE0F69EF10EF3B60BECEB25BE56A" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher] "TracesProcessed"=dword:00000060 "TracesSuccessful"=dword:00000058 scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 [b]Remaining Services [/b]: Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" [b]Remaining Files [/b]: File Backups: - C:\SDFix\backups\backups.zip [b]Files with Hidden Attributes [/b]: Tue 2 Sep 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp" [b]Finished![/b]

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:23:00, on 2008-09-24 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\a-squared Free\a2service.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\WINDOWS\system32\CTsvcCDA.exe C:\Program Files\Creative\Shared Files\CTDevSrv.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\oodag.exe C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\NetMeter\NetMeter.exe C:\Program Files\Creative\Creative Media Lite\CTZDetec.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\DAEMON Tools Lite\daemon.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\CF28212.exe C:\WINDOWS\explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Michał\Pulpit\HiJackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: flashget2 urlcatch - {1F364306-AA45-47B5-9F9D-39A8B94E7EF1} - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\bhoCATCH.dll (file missing) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [C:\Program Files\NetMeter\NetMeter.exe] C:\Program Files\NetMeter\NetMeter.exe O4 - HKCU\..\Run: [CTZDetec.exe] C:\Program Files\Creative\Creative Media Lite\CTZDetec.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: &Download All by FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm O8 - Extra context menu item: &Download by FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm O8 - Extra context menu item: Pobierz plik wideo we Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm O8 - Extra context menu item: Pobierz w Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm O8 - Extra context menu item: Pobierz wszystkie pliki w Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm O8 - Extra context menu item: Pobierz zaznaczone w Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{13A28F0C-131A-43D8-B7E9-FC72A5EC8E9C}: NameServer = 194.204.159.1,194.204.152.34 O17 - HKLM\System\CS1\Services\Tcpip\..\{13A28F0C-131A-43D8-B7E9-FC72A5EC8E9C}: NameServer = 194.204.159.1,194.204.152.34 O17 - HKLM\System\CS2\Services\Tcpip\..\{13A28F0C-131A-43D8-B7E9-FC72A5EC8E9C}: NameServer = 194.204.159.1,194.204.152.34 O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe O23 - Service: CT Device Query service (CTDevice_Srv) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTDevSrv.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe -- End of file - 6613 bytes

Prosze o sprawdzenie

**Posty:** 8001 · przez **Okocza** 25 Wrz 2008, 08:36

anded,

1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp

(ewentualnie tym programem przejdź komputer)
2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
5. Przeskanuj komputer pod względem Trojanów tym programem
6. Wstaw na forum screen z zakładki uruchamianie (start – uruchom – msconfig – uruchamianie) może uda się cos wyrzucic stamtąd.

**Posty:** 570 · przez **anded** 25 Wrz 2008, 09:31

Wszystko wykonane.
a tu jest screen

a problem nadal istnieje

**Posty:** 10264 · przez **Mike** 25 Wrz 2008, 10:18

masz zainstalowane:

AntiVir
Personal Firewall 4

wyłącz oba (systemowy firewall też jeżeli masz włączony) i dodatkowo je zamknij (zabij ich procesy), następnie sprawdź, czy problem nadal występuje

**Posty:** 570 · przez **anded** 25 Wrz 2008, 11:00

Mike013, nic nie pomogło

Już sie w tym gubie.