Wlamanie gg - poszukiwanie trojanow itp.

**Posty:** 321 · przez **Dhogar** 23 Wrz 2008, 21:25

Jak w temacie.

Log combofix

Kod: Zaznacz wszystko: ComboFix 08-09-22.04 - Pasiak 2008-09-23 21:12:49.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.621 [GMT 2:00] Uruchomiony z: C:\Documents and Settings\Pasiak\Pulpit\ComboFix.exe * Utworzono nowy punkt przywracania [color=red][b]UWAGA - TEN KOMPUTER NIE MA ZAINSTALOWANEJ KONSOLI ODZYSKIWANIA !![/b][/color] . ((((((((((((((((((((((((( Pliki utworzone od 2008-08-23 do 2008-09-23 ))))))))))))))))))))))))))))))) . 2008-09-20 21:09 . 2008-03-05 15:56 1,420,824 --a------ C:\WINDOWS\system32\D3DCompiler_37.dll 2008-09-20 21:09 . 2008-03-05 16:03 479,752 --a------ C:\WINDOWS\system32\XAudio2_0.dll 2008-09-20 21:09 . 2008-02-05 23:07 462,864 --a------ C:\WINDOWS\system32\d3dx10_37.dll 2008-09-20 21:09 . 2007-10-22 03:39 267,272 --a------ C:\WINDOWS\system32\xactengine2_10.dll 2008-09-20 21:09 . 2008-03-05 16:03 238,088 --a------ C:\WINDOWS\system32\xactengine3_0.dll 2008-09-20 21:09 . 2008-03-05 16:00 25,608 --a------ C:\WINDOWS\system32\X3DAudio1_3.dll 2008-09-20 18:05 . 2008-09-20 18:05 116 --a------ C:\WINDOWS\NeroDigital.ini 2008-09-20 14:42 . 2008-09-20 14:42 <DIR> d-------- C:\Documents and Settings\Pasiak\Dane aplikacji\Canon 2008-09-19 03:00 . 2008-09-19 03:00 <DIR> d-------- C:\Program Files\MSXML 4.0 2008-09-18 19:24 . 2008-09-18 19:24 <DIR> d-------- C:\Program Files\Common Files\Adobe 2008-09-18 19:23 . 2008-09-18 19:23 <DIR> d-------- C:\WINDOWS\Cache 2008-09-17 20:40 . 2004-08-04 00:44 221,184 --a------ C:\WINDOWS\system32\wmpns.dll 2008-09-17 19:21 . 2008-09-17 19:21 <DIR> d-------- C:\Program Files\Common Files\Nero 2008-09-17 19:19 . 2008-09-17 19:19 <DIR> d-------- C:\Program Files\Common Files\Ahead 2008-09-17 19:19 . 2008-09-17 19:19 <DIR> d-------- C:\Program Files\Ahead 2008-09-17 19:19 . 2004-07-26 17:16 1,568,768 --------- C:\WINDOWS\system32\ImagX7.dll 2008-09-17 19:19 . 2004-07-26 17:16 476,320 --------- C:\WINDOWS\system32\ImagXpr7.dll 2008-09-17 19:19 . 2004-07-26 17:16 471,040 --------- C:\WINDOWS\system32\ImagXRA7.dll 2008-09-17 19:19 . 2004-07-26 17:16 262,144 --------- C:\WINDOWS\system32\ImagXR7.dll 2008-09-17 19:19 . 2001-07-09 11:50 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe 2008-09-17 19:19 . 2000-06-26 11:45 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll 2008-09-17 18:53 . 2004-08-03 22:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys 2008-09-17 18:53 . 2004-08-03 22:58 15,104 --a--c--- C:\WINDOWS\system32\dllcache\usbscan.sys 2008-09-17 18:52 . 2008-09-17 18:52 <DIR> d-------- C:\Program Files\ScanSoft 2008-09-17 18:52 . 2008-09-17 18:52 <DIR> d-------- C:\Program Files\Common Files\ScanSoft Shared 2008-09-17 18:52 . 2008-09-17 18:52 <DIR> d-------- C:\Documents and Settings\Pasiak\Dane aplikacji\ScanSoft 2008-09-17 18:52 . 2008-09-17 18:52 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\ScanSoft 2008-09-17 18:52 . 2008-09-17 18:52 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\InstallShield 2008-09-17 18:52 . 2008-09-17 18:52 412 --a------ C:\WINDOWS\MAXLINK.INI 2008-09-17 18:50 . 2008-09-17 18:50 <DIR> d--h----- C:\Documents and Settings\All Users\Dane aplikacji\CanonBJ 2008-09-17 18:49 . 2008-09-17 18:49 <DIR> d--h----- C:\WINDOWS\system32\CanonIJ Uninstaller Information 2008-09-17 18:49 . 2008-09-17 18:49 <DIR> d--h----- C:\Program Files\CanonBJ 2008-09-17 18:49 . 2006-11-10 04:00 1,314,816 --a------ C:\WINDOWS\system32\CNCC140.DLL 2008-09-17 18:49 . 2006-12-25 22:00 198,656 --a------ C:\WINDOWS\system32\CNMLM8R.DLL 2008-09-17 18:49 . 2006-05-26 03:54 135,168 --a------ C:\WINDOWS\system32\CNCL140.DLL 2008-09-17 18:49 . 2006-06-29 07:29 106,496 --a------ C:\WINDOWS\system32\cnco140.dll 2008-09-17 18:49 . 2006-11-10 03:59 57,344 --a------ C:\WINDOWS\system32\CNCI140.DLL 2008-09-17 18:48 . 2008-09-17 18:55 <DIR> d-------- C:\Program Files\Canon 2008-09-13 10:33 . 2008-09-13 10:33 <DIR> d-------- C:\Program Files\foobar2000 2008-09-13 10:33 . 2008-09-23 17:15 <DIR> d-------- C:\Documents and Settings\Pasiak\Dane aplikacji\foobar2000 2008-09-12 22:55 . 2008-09-12 22:55 <DIR> d-------- C:\Program Files\NAPI-PROJEKT 2008-09-12 22:55 . 2008-09-12 22:55 <DIR> d-------- C:\Program Files\ALLPlayer 2008-09-12 17:06 . 2008-09-12 17:40 <DIR> d-------- C:\Documents and Settings\Pasiak\Dane aplikacji\ImgBurn 2008-09-12 16:12 . 2008-09-12 16:12 <DIR> d-------- C:\Program Files\ImgBurn 2008-09-12 06:31 . 2008-06-14 20:01 273,024 --------- C:\WINDOWS\system32\drivers\bthport.sys 2008-09-12 06:31 . 2008-06-14 20:01 273,024 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys 2008-09-12 00:30 . 2008-09-12 06:51 <DIR> d--h----- C:\WINDOWS\$hf_mig$ 2008-09-12 00:14 . 2008-09-12 06:43 <DIR> d-------- C:\Documents and Settings\Pasiak\Dane aplikacji\DMCache 2008-09-11 23:36 . 2008-09-11 23:36 2,560 --a------ C:\WINDOWS\_MSRSTRT.EXE 2008-09-11 21:03 . 2008-09-11 21:03 <DIR> d-------- C:\Documents and Settings\Pasiak\Dane aplikacji\Symantec 2008-09-11 20:52 . 2008-09-11 20:52 1,169 --a------ C:\WINDOWS\mozver.dat 2008-09-11 20:50 . 2008-09-11 20:50 <DIR> d-------- C:\Program Files\Sun 2008-09-11 20:50 . 2008-09-11 20:50 <DIR> d-------- C:\Program Files\Java 2008-09-11 20:50 . 2008-06-10 02:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl 2008-09-11 20:48 . 2008-09-11 20:48 <DIR> d-------- C:\Program Files\Common Files\Java 2008-09-11 20:35 . 2008-09-13 11:55 <DIR> d-------- C:\Program Files\FlashGet 2008-09-11 20:35 . 2008-09-12 06:47 <DIR> d-------- C:\Downloads 2008-09-11 20:22 . 2008-09-12 22:52 <DIR> d-------- C:\Program Files\SubEdit-Player 2008-09-11 19:42 . 2008-09-11 19:42 <DIR> d-------- C:\Documents and Settings\Pasiak\Dane aplikacji\Gadu-Gadu 2008-09-11 19:14 . 2004-08-03 23:08 26,496 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys 2008-09-11 10:06 . 2008-09-11 10:07 <DIR> d-------- C:\FIFA 09 Demo 2008-09-11 08:27 . 2008-09-11 08:27 <DIR> d-------- C:\Program Files\Gadu-Gadu 2008-09-11 08:27 . 2008-09-23 14:52 <DIR> d-------- C:\Documents and Settings\Pasiak\Gadu-Gadu 2008-09-11 08:17 . 2008-09-11 08:17 10,344 --a------ C:\WINDOWS\system32\drivers\symlcbrd.sys 2008-09-11 08:16 . 2008-09-11 23:10 <DIR> d-------- C:\Program Files\Norton Internet Security 2008-09-11 08:16 . 2008-09-11 08:16 0 --a------ C:\WINDOWS\nsreg.dat 2008-09-11 08:15 . 2008-09-11 22:54 <DIR> d-------- C:\Program Files\Symantec 2008-09-11 08:15 . 2008-09-23 21:14 <DIR> d-------- C:\Program Files\Common Files\Symantec Shared 2008-09-11 08:15 . 2008-09-11 21:02 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Symantec 2008-09-11 08:15 . 2005-09-17 01:20 108,168 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.SYS 2008-09-11 08:15 . 2005-09-17 01:20 87,768 --a------ C:\WINDOWS\system32\S32EVNT1.DLL 2008-09-11 08:11 . 2008-09-11 08:11 <DIR> d-------- C:\Program Files\SAGEM 2008-09-11 08:11 . 2005-11-04 16:55 126,976 --a------ C:\WINDOWS\system32\coclassfast.dll . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-09-17 16:52 --------- d-----w C:\Program Files\Common Files\InstallShield 2008-09-11 06:11 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-09-09 18:42 --------- d-----w C:\Documents and Settings\Pasiak\Dane aplikacji\SPORE 2008-09-09 18:36 --------- d-----w C:\Program Files\DAEMON Tools Lite 2008-09-09 18:33 --------- d-----w C:\Program Files\Realtek 2008-09-09 18:32 717,296 ----a-w C:\WINDOWS\system32\drivers\sptd.sys 2008-09-09 18:32 --------- d-----w C:\Documents and Settings\Pasiak\Dane aplikacji\DAEMON Tools 2008-09-09 18:26 --------- d-----w C:\Program Files\microsoft frontpage 2008-09-09 18:25 --------- d-----w C:\Program Files\Usługi online 2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll 2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe 2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll 2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll 2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll 2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll 2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll 2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll 2008-07-07 20:33 253,952 ----a-w C:\WINDOWS\system32\es.dll 2008-06-24 16:24 74,240 ----a-w C:\WINDOWS\system32\mscms.dll 2008-06-23 15:41 662,016 ----a-w C:\WINDOWS\system32\wininet.dll . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 15360] "DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-04-01 486856] "Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2008-03-20 2127296] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-08-04 1667584] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2008-05-16 13529088] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2008-05-16 86016] "ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2005-09-17 52848] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784] "SSBkgdUpdate"="C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-10-25 210472] "OpwareSE4"="C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-02-04 79400] "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 155648] "nwiz"="nwiz.exe" [2008-05-16 C:\WINDOWS\system32\nwiz.exe] "RTHDCPL"="RTHDCPL.EXE" [2006-08-23 C:\WINDOWS\RTHDCPL.exe] "SkyTel"="SkyTel.EXE" [2006-05-16 C:\WINDOWS\SkyTel.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 15360] [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs 6to4 AppMgmt AudioSrv Browser CryptSvc DMServer DHCP ERSvc FastUserSwitchingCompatibility HidServ LanmanServer LanmanWorkstation Messenger Nla NWCWorkstation Schedule Seclogon SRService Themes TrkWks W32Time Wmi WmdmPmSp winmgmt wscsvc xmlprov BITS wuauserv ShellHWDetection helpsvc [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7eb87533-7fc8-11dd-8b23-00194b533c27}] \Shell\AutoRun\command - J:\setupSNK.exe *Newly Created Service* - COMHOST *Newly Created Service* - PROCEXP90 . Zawartość folderu 'Zaplanowane zadania' . . ------- Skan uzupełniający ------- . FireFox -: Profile - C:\Documents and Settings\Pasiak\Dane aplikacji\Mozilla\Firefox\Profiles\i7ny4rzc.default\ . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-09-23 21:14:41 Windows 5.1.2600 Dodatek Service Pack 2 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . Czas ukończenia: 2008-09-23 21:15:20 ComboFix-quarantined-files.txt 2008-09-23 19:15:15 Przed: 12˙001˙869˙824 bajt˘w wolnych Po: 12,089,774,080 bajt˘w wolnych 192 --- E O F --- 2008-09-19 01:00:21

HIjack

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:24:30, on 2008-09-23 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Common Files\Symantec Shared\ccProxy.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\DAEMON Tools Lite\daemon.exe C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE C:\WINDOWS\system32\NOTEPAD.EXE C:\Program Files\Common Files\Symantec Shared\NMAIN.EXE C:\PROGRA~1\NORTON~1\NORTON~1\navw32.exe C:\Program Files\Gadu-Gadu\gg.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\notepad.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/default R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- End of file - 7730 bytes

Z gory dzieki za pomoc

**Posty:** 18165 · przez **wojtas** 23 Wrz 2008, 22:09

Czysto, wykonaj:

1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp

2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
5.Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

i tym:

FixIEDef.