system alert

[Rostek58]

Na pasku zadań pojawia się żółty trójkącik odsyłający mnie na jakąś stronę. Jak to usunąć?

Loga z hijjacka

Kod: Zaznacz wszystko

Logfile of Browser Hijack Recover(BHR) v2.2
http://www.browser-hijack.com/
Log created on 2007-11-15 18:51:13
Microsoft Windows XP Professional Dodatek Service Pack. 1 (Build 2600)
Internet Explorer v6.0.2800.1106  Update Versions: ;SP1;

[Process Manager] - [Process]
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\csrss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
D:\Program Files\Alwil Software\Avast4\ashServ.exe
D:\WINDOWS\System32\RUNDLL32.EXE
D:\WINDOWS\SOUNDMAN.EXE
D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
D:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
C:\Hp\HP Software Update\HPWuSchd2.exe
D:\Program Files\Winamp\winampa.exe
D:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
D:\WINDOWS\System32\ctfmon.exe
D:\WINDOWS\system32\spoolsv.exe
C:\Gadu-Gadu\gg.exe
C:\HP\Digital Imaging\bin\hpqtra08.exe
C:\Last.fm\LastFMHelper.exe
D:\WINDOWS\System32\alg.exe
D:\WINDOWS\System32\eedadgtw.exe
D:\WINDOWS\System32\nvsvc32.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\System32\wdfmgr.exe
D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Hp\Digital Imaging\bin\hpqSTE08.exe
D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Hp\Digital Imaging\Product Assistant\bin\hprblog.exe
D:\WINDOWS\explorer.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\Program Files\Browser Hijack Recover\bhr.exe

[IE Options] - [Normal]
R0 - HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
R0 - HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R0 - HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main,Window Title =

[IE Options] - [IE Menu]

[IE Options] - [Internet Options]

[IE Options] - [IE Search Hooks]
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - D:\WINDOWS\System32\shdocvw.dll

[IE Add-Ons] - [Toolbars]
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Security Toolbar - {11A69AE4-FBED-4832-A2BF-45AF82825583} - D:\WINDOWS\System32\iyvysglk.dll

[IE Add-Ons] - [Explorer Bars]
O9 - Extra "View" Explorer Bars: Pasek multimediów - {32683183-48a0-441b-a342-7c2a440a9478} - D:\WINDOWS\System32\browseui.dll
[IE Add-Ons] - [Context Menu]
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\BitComet\BitComet.exe/AddAllLink.htm

[IE Add-Ons] - [BHOs]
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\BitComet\tools\BitCometBHO_1.1.9.24.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (No Name) - {7906F52E-0C45-4DCF-9F53-3FCED8EB7B7A} - D:\WINDOWS\System32\yayxx.dll
O2 - BHO: {349df649-23bc-2dfa-90a4-eff08489f7d8} - {8d7f9848-0ffe-4a09-afd2-cb32946fd943} - D:\WINDOWS\System32\doxfvxvl.dll
O2 - BHO: (No Name) - {A95B2816-1D7E-4561-A202-68C0DE02353A} - D:\WINDOWS\System32\iyvysglk.dll
O2 - BHO: (No Name) - {BBB05D9E-0297-404D-A6BF-D8F2876B84A6} - D:\WINDOWS\System32\ssqnkli.dll

[IE Add-Ons] - [Tools Menu]
O9 - Extra "Tool" Menu Item: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\WINDOWS\System32\msjava.dll
O9 - Extra "Tool" Menu Item: Po&każ łącza pokrewne - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - D:\WINDOWS\web\related.htm

[IE Add-Ons] - [Tools Button]
O9 - Extra "Tool" Menu Item: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\WINDOWS\System32\msjava.dll
O9 - Extra Button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\BitComet\tools\BitCometBHO_1.1.9.24.dll
O9 - Extra Button: Pokrewne - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - D:\WINDOWS\web\related.htm

[System Options]

[StartUp]
04 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run CTFMON.EXE = D:\WINDOWS\System32\ctfmon.exe
04 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Gadu-Gadu = C:\Gadu-Gadu\gg.exe" /tray
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run NvCplDaemon = RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run nwiz = nwiz.exe /install
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run NvMediaCenter = RUNDLL32.EXE D:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run SoundMan = SOUNDMAN.EXE
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run avast! = D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run RemoteControl = D:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run NeroFilterCheck = D:\WINDOWS\system32\NeroCheck.exe
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run HP Software Update = C:\Hp\HP Software Update\HPWuSchd2.exe
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run WinampAgent = D:\Program Files\Winamp\winampa.exe
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run SunJavaUpdateSched = D:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run 84905436 = rundll32.exe "D:\WINDOWS\System32\rggjcidv.dll",b
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Salestart = D:\Program Files\Common Files\BestsellerAntivirus\bm.exe" dm=http://bestsellerantivirus.com; ad=http://bestsellerantivirus.com
O4 - D:\Documents and Settings\Rafał\Menu Start\Programy\Autostart\Adobe Gamma.lnk = D:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE
O4 - D:\Documents and Settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk = C:\HP\DIGITA~1\bin\hpqtra08.exe
O4 - D:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Last.fm Helper.lnk = C:\Last.fm\LASTFM~1.EXE
O4 - D:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk = C:\MICROS~1\Office\OSA9.EXE


Mógłbym prosić o wyjaśnienie co zrobić krok po kroku bo jestem z tego po prestu ciemny.
Z góry dziękuję

[wojtas]

Wykonaj to co jest podane w tym temacie

zastosuj:

smitfraudfix z opcji 2

oraz te skanery po kilka razy

VundoFix

VirtumundoBeGone

FixVundo


Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu SDFix wrzuc zawartość pliku Report.txt + log z combofixa oraz z hijacka ( tylko calego i nie ,,rozszarpanego" jak ten wyzej