skan ewido i prosze o sprawdzenie loga

**Posty:** 6403 · przez **Robert** 21 Lis 2006, 18:22

mam problem otóż mam 2 folderu (puste) których nie moge usunąc
screen:

a jak klikne shfit +delete lub delete lub usun albo coś to mi się wyswietla :

umiesciłam to w dziale bezpieczeństwo bo uznałem że ten temat sie nadaje tu bardziej niz do windowsow jak sie myle to go przeniescie

**Posty:** 935 · przez **Aqui** 21 Lis 2006, 18:24

W awaryjnym probowales??

**Posty:** 6403 · przez **Robert** 21 Lis 2006, 18:25

Aqui napisał(a):awaryjnym probowales??

zaraz sprubuje ale chyba kiedyś tam prubowałem

wyskakuje ten sam komunikat i słychać jedno krótkie piknięcie

**Posty:** 7838 · przez **Lukesh** 21 Lis 2006, 18:40

a KillBox'em probowales :wink:

?

**Posty:** 935 · przez **Aqui** 21 Lis 2006, 18:40

Daj nam jego lokalizacje,bedziemy probowali usuwac za pomoca wiersza polecen :wink:

**Posty:** 6403 · przez **Robert** 21 Lis 2006, 18:46

Lukesh napisał(a):a KillBox'em probowales

jeszcze nie bo wlasnie nie wiedzialem jak sie ten program do konca nazywa

Lokalizacja jest

D:\
nowy to nazwa dysku

**Posty:** 935 · przez **Aqui** 21 Lis 2006, 18:47

Podaj pelna lokalizacje
killbox==>
http://www.bleepingcomputer.com/files/killbox.php

**Posty:** 6403 · przez **Robert** 21 Lis 2006, 18:49

Lukesh napisał(a):a KillBox'em probowales

nawet go nie rusza

**Posty:** 935 · przez **Aqui** 21 Lis 2006, 18:50

Podaj pelna lokalizacje

**Posty:** 6403 · przez **Robert** 21 Lis 2006, 18:50

Aqui napisał(a):Podaj pelna lokalizacje

D:\carbonito
i
D:\crazy frog game

**Posty:** 18165 · przez **wojtas** 21 Lis 2006, 18:52

sciagnij kilboxa zaznacz opcje delete on reboot oczywiscie w awaryjnym wklej

D:\carbonito

dajesz X reset i potem tak samo z ta sciezka

D:\crazy frog game

**Posty:** 7838 · przez **Lukesh** 21 Lis 2006, 18:53

Tak w ogole, to probowales juz w tym trybie awaryjnym? Po co kombinowac, skoro tak powinno sie to udac :roll:

?

**Posty:** 935 · przez **Aqui** 21 Lis 2006, 18:54

Jesli to nie pomoze to w awaryjnym
Start==>uruchom==>cmd i wklep

RD /S /Q "D:\carbonito"

Enter
i znowu to samo start==>uruchom==>cmd i wklep

RD /S /Q "D:\crazy frog game"

Enter
Napisal ze probowal==>Lukesh

**Posty:** 7838 · przez **Lukesh** 21 Lis 2006, 19:00

Aqui --> Chodzilo mi o to, co napisal wojtas19162 :wink:

**Posty:** 6403 · przez **Robert** 21 Lis 2006, 19:02

wojtas19162 napisał(a):sciagnij kilboxa zaznacz opcje delete on reboot oczywiscie w awaryjnym wklej

wywala :

i nie usuwa

**Posty:** 935 · przez **Aqui** 21 Lis 2006, 19:03

O ja sorry :wink:

Myslalem ze chodzilo Ci o zwykly tryb awaryjny :wink:

reset kompa i zobaczysz ze usuniete

**Posty:** 6403 · przez **Robert** 21 Lis 2006, 19:08

Aqui napisał(a):reset kompa i zobaczysz ze usuniete

no wlasnie zresetowalem go i nie jeste usuniete

**Posty:** 935 · przez **Aqui** 21 Lis 2006, 19:09

Sprobuj mojej metody

**Posty:** 6403 · przez **Robert** 21 Lis 2006, 20:25

new problem od jakiegoś czasu zaczęły mi się zamulać strony internetowe itp.
troche windows tez ale nie widze znacznej roznicy przeskanowalem ewido dla ciekawosci a tu prosze :

i moje pytanie czy usunąc wszystko??
zaraz wygeneruje rozwiez logi z HJ

[ Dodano: Dzisiaj o 19:13 ]

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 19:06:43, on 2006-11-21 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe C:\PROGRA~1\NEOSTR~1\CnxMon.exe C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\ALCWZRD.EXE C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe C:\WINDOWS\system32\RunDLL32.exe C:\Program Files\D-Tools\daemon.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\MESSEN~1\msmsgs.exe C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe C:\PROGRA~1\NEOSTR~1\NeostradaTP.exe C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\PROGRA~1\NEOSTR~1\ComComp.exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\PROGRA~1\NEOSTR~1\Watch.exe C:\Documents and Settings\Robert\Moje dokumenty\ewido_micro.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\DOCUME~1\Robert\USTAWI~1\Temp\Rar$EX00.140\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TP R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL O1 - Hosts: 87.106.3.182 reports.uni3.xwars.pl O1 - Hosts: 212.227.76.23 forum.x-wars.pl O1 - Hosts: 212.227.76.23 forum.xwars.pl O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {0ECD69DB-CA02-490C-BAFE-36321E027EE4} - C:\WINDOWS\system32\glmf3232.dll (file missing) O2 - BHO: Mario Forever Toolbar Helper - {8036D4D7-AAD3-4793-AB49-329E437155A8} - C:\Program Files\Mario Forever Toolbar\v2.0.0.3\Mario_Forever_Toolbar.dll O3 - Toolbar: Mario Forever Toolbar - {463DF6D5-BEC1-4d67-B217-59DB692DFC53} - C:\Program Files\Mario Forever Toolbar\v2.0.0.3\Mario_Forever_Toolbar.dll O4 - HKLM\..\Run: [Skrót do strony właściwości High Definition Audio] HDAudPropShortcut.exe O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [Anti-Blaxx Manager] C:\Program Files\Anti-Blaxx 1.18\Anti-Blaxx.exe O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot O4 - HKCU\..\Run: [MSMSGS] "C:\PROGRA~1\MESSEN~1\msmsgs.exe" /background O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [Mouse Meter] C:\Program Files\Mouse Meter\MouseMeter.exe O4 - HKCU\..\Run: [Gadu-Gadu] "E:\Gadu-Gadu\gadu gadu\gg.exe" /tray O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{25CF5C91-D172-4144-911F-02E326B90D72}: NameServer = 194.204.152.34 217.98.63.164 O17 - HKLM\System\CS1\Services\Tcpip\..\{25CF5C91-D172-4144-911F-02E326B90D72}: NameServer = 194.204.152.34 217.98.63.164 O18 - Protocol: bw+0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw+0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: bwg0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwg0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: offline-8876480 - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

a oto log jak już pisałem zamula net ewido wykryl trojany a komp troche zwolnil dopiero ze 4dni temu

**Posty:** 1134 · przez **MISTEJK** 21 Lis 2006, 20:40

Wyłącz przywracanie systemu i wejdź w tryb awaryjny.
Najpierw usuwasz wpisy w Hijackthis, następnie pogrubione pliki ręcznie z dysku:

O1 - Hosts: 87.106.3.182 reports.uni3.xwars.pl
O1 - Hosts: 212.227.76.23 forum.x-wars.pl
O1 - Hosts: 212.227.76.23 forum.xwars.pl
O2 - BHO: (no name) - {0ECD69DB-CA02-490C-BAFE-36321E027EE4} - C:\WINDOWS\system32\glmf3232.dll (file missing)
O18 - Protocol: bwv0s - {B8779A68-56A6-4154-9402-5DBC01B5A7C8} - C:\Program Files\Logitech\Desktop Messenger

i jak będą na dysku to ciachnij również:

C:\WINDOWS\system32\install.ini
C:\WINDOWS\system32\usernamre.exe

Użyj WWDC :

http://www.firewallleaktester.com/wwdc.htm

Zmień opcje z disable na enable. Zresetuj komputer.

Foto przedtawia prawidłowe ustawienie portów :

http://www.firewallleaktester.com/images_site/wwdc.jpg

C:\Program Files\Logitech\Desktop Messenger

to kosmetyka

nowe logi pokaż następnie... :mrgreen:

Autor postu otrzymał pochwałę

skan ewido i prosze o sprawdzenie loga

skan ewido i prosze o sprawdzenie loga

Kto jest na forum