złe wyświetlaie dysku

**Posty:** 120 · przez **jadupl** 05 Kwi 2008, 08:38

Witam mam problem, kiedy klikam prawym na moj dysk D lub E pojawia mi sie takie coś:

A gdy klikam dwa razy lewym takie coś:

Tutaj pojawia sie moje pytanie czy to jest wina wirusa czy jakis systemowy błąd?
I prosiłbym o sposob na usuniecie tego

**Posty:** 3874 · przez **Wojtasgls** 05 Kwi 2008, 09:17

Wychodzi na to ze syf sie wbil na twoj dysk. Poczytaj troche w dziale bezpieczenstwo i wstaw logi.

**Posty:** 120 · przez **jadupl** 05 Kwi 2008, 11:03

Logi wstawić tutaj czy zrobić nowy temat w dziale bezpieczenstwo?

**Posty:** 8001 · przez **Okocza** 05 Kwi 2008, 11:04

tutaj. wklej go. Hijack, combofix

**Posty:** 120 · przez **jadupl** 05 Kwi 2008, 11:20

Hijack:

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:12:35, on 2008-04-05 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\Analog Devices\SoundMAX\SMTray.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\System32\FTRTSVC.exe C:\PROGRA~1\NEOSTR~1\TaskBarIcon.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Winamp\winampa.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\Program Files\AutoConnect\AutoConnect.exe C:\Program Files\DAEMON Tools Lite\daemon.exe C:\Program Files\Winamp Remote\bin\OrbTray.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\wuauclt.exe C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\Program Files\Winamp\winamp.exe C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\Rodzina\Pulpit\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = neostrada tp R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\GestMaj.exe TaskBarIcon.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [dickngv] C:\Program Files\Common Files\Microsoft Shared\aibuhpk.exe O4 - HKLM\..\Run: [okcybda] C:\Program Files\Common Files\System\foqodpx.exe O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{F45F1E60-DD6C-4CA1-B799-D365C9D5F956}: NameServer = 194.204.159.1 217.98.63.164 O23 - Service: Urządzenie mobilne Apple (Apple Mobile Device) - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe O23 - Service: Usługa iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe -- End of file - 5490 bytes

ComboFix:

Kod: Zaznacz wszystko: ComboFix 08-04-04.1 - Rodzina 2008-04-05 11:16:21.1 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.2.1250.1.1045.18.523 [GMT 2:00] Running from: C:\Documents and Settings\Rodzina\Pulpit\ComboFix.exe * Created a new restore point [color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color] . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\system32\msssc.dll D:\Autorun.inf E:\Autorun.inf . ((((((((((((((((((((((((( Files Created from 2008-03-05 to 2008-04-05 ))))))))))))))))))))))))))))))) . 2008-04-05 11:05 . 2008-04-05 11:05 98,304 --a------ C:\WINDOWS\system32\CmdLineExt.dll 2008-04-05 10:55 . 2008-04-05 10:55 <DIR> d-------- C:\WINDOWS\LastGood 2008-04-05 09:53 . 2005-02-25 05:36 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe 2008-04-05 08:49 . 2008-04-05 08:49 <DIR> d-------- C:\Program Files\Winamp Remote 2008-04-05 08:49 . 2008-04-05 08:49 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\OrbNetworks 2008-04-05 08:44 . 2008-04-05 09:11 <DIR> d-------- C:\Program Files\Winamp 2008-04-05 08:44 . 2008-04-05 10:25 <DIR> d-------- C:\Documents and Settings\Rodzina\Dane aplikacji\Winamp 2008-04-04 23:28 . 2008-04-04 23:30 <DIR> d-------- C:\Program Files\uTorrent 2008-04-04 23:28 . 2008-04-05 08:26 <DIR> d-------- C:\Documents and Settings\Rodzina\Dane aplikacji\uTorrent 2008-04-04 22:20 . 2008-04-04 22:20 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\nView_Profiles 2008-04-04 20:37 . 2008-04-04 20:37 <DIR> d-------- C:\Documents and Settings\Rodzina\Dane aplikacji\Grisoft 2008-04-04 20:37 . 2008-04-04 20:37 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Grisoft 2008-04-04 20:37 . 2007-05-30 14:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2008-04-04 20:22 . 2008-04-04 20:29 <DIR> d-------- C:\Program Files\DAEMON Tools Lite 2008-04-04 20:20 . 2008-04-04 20:20 <DIR> d-------- C:\Documents and Settings\Rodzina\Dane aplikacji\DAEMON Tools 2008-04-04 20:20 . 2008-04-04 20:20 717,296 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2008-04-04 20:19 . 2008-03-29 19:23 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr 2008-04-04 20:19 . 2008-03-29 19:35 94,544 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys 2008-04-04 20:19 . 2008-01-17 17:34 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys 2008-04-04 20:19 . 2008-03-29 19:31 75,856 --a------ C:\WINDOWS\system32\drivers\aswSP.sys 2008-04-04 20:19 . 2008-03-29 19:27 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys 2008-04-04 20:19 . 2008-03-29 19:26 26,944 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys 2008-04-04 20:19 . 2008-03-29 19:29 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys 2008-04-04 20:19 . 2008-03-29 19:35 20,560 --a------ C:\WINDOWS\system32\drivers\aswFsBlk.sys 2008-04-04 20:18 . 2008-04-04 20:18 <DIR> d-------- C:\Program Files\Alwil Software 2008-04-04 20:18 . 2008-03-29 19:45 1,146,232 --a------ C:\WINDOWS\system32\aswBoot.exe 2008-04-04 20:18 . 2003-03-18 21:20 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll 2008-04-04 20:18 . 2003-03-18 20:14 499,712 --a------ C:\WINDOWS\system32\MSVCP71.dll 2008-04-04 20:18 . 2004-01-09 10:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx 2008-04-04 20:18 . 2003-02-21 04:42 348,160 --a------ C:\WINDOWS\system32\MSVCR71.dll 2008-04-04 20:05 . 2008-04-05 10:35 <DIR> d-------- C:\Program Files\AutoConnect 2008-04-04 20:03 . 2008-04-04 20:03 <DIR> d-------- C:\Program Files\iTunes 2008-04-04 20:03 . 2008-04-04 20:03 <DIR> d-------- C:\Program Files\iPod 2008-04-04 20:03 . 2008-04-04 20:03 <DIR> d-------- C:\Program Files\Bonjour 2008-04-04 20:03 . 2008-04-04 20:03 <DIR> d-------- C:\Documents and Settings\Rodzina\Dane aplikacji\Apple Computer 2008-04-04 20:03 . 2008-04-05 10:36 54,156 --ah----- C:\WINDOWS\QTFont.qfn 2008-04-04 20:03 . 2008-04-04 20:03 1,409 --a------ C:\WINDOWS\QTFont.for 2008-04-04 20:02 . 2008-04-04 20:02 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE 2008-04-04 20:02 . 2008-04-04 20:03 <DIR> d-------- C:\Program Files\QuickTime 2008-04-04 20:02 . 2008-04-04 20:02 <DIR> d-------- C:\Program Files\Common Files\Apple 2008-04-04 20:02 . 2008-04-04 20:02 <DIR> d-------- C:\Program Files\Apple Software Update 2008-04-04 20:02 . 2008-04-04 20:03 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer 2008-04-04 20:02 . 2008-04-04 20:02 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Apple 2008-04-04 20:02 . 2008-02-18 11:16 30,464 --a------ C:\WINDOWS\system32\drivers\usbaapl.sys 2008-04-04 16:58 . 2006-03-02 14:00 1,352,704 --a--c--- C:\WINDOWS\system32\dllcache\cimwin32.dll 2008-04-04 15:09 . 2007-12-05 01:41 2,519,040 --a------ C:\WINDOWS\system32\nvwssr.dll 2008-04-04 15:08 . 2007-12-05 01:41 6,901,760 --a------ C:\WINDOWS\system32\nvoglnt.dll 2008-04-04 15:07 . 2007-12-05 01:41 8,523,776 --a------ C:\WINDOWS\system32\nvcpl.dll 2008-03-28 23:37 . 2008-03-28 23:37 90,112 --a------ C:\WINDOWS\system32\QuickTimeVR.qtx 2008-03-28 23:37 . 2008-03-28 23:37 57,344 --a------ C:\WINDOWS\system32\QuickTime.qts . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-04-05 08:43 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-04-05 08:35 --------- d-----w C:\Program Files\neostrada tp 2008-04-04 17:57 169 --sh--w C:\Program Files\okcybda.inf 2008-04-04 15:32 --------- d-----w C:\Program Files\Gadu-Gadu 2008-04-04 15:32 --------- d-----w C:\Documents and Settings\Rodzina\Dane aplikacji\Gadu-Gadu 2008-04-04 15:21 33 ----a-w C:\WINDOWS\system32\drivers\adidsl.cfg 2008-04-04 15:21 --------- d-----w C:\Program Files\SAGEM 2008-04-04 15:20 --------- d-----w C:\Program Files\Java 2008-04-04 15:17 --------- d-----w C:\Program Files\Common Files\InstallShield 2008-04-04 15:11 --------- d-----w C:\Program Files\Analog Devices 2008-04-04 15:04 --------- d-----w C:\Program Files\microsoft frontpage 2008-04-04 15:02 --------- d-----w C:\Program Files\Usługi online 2008-01-29 10:02 107,368 ----a-w C:\WINDOWS\system32\GEARAspi.dll . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 14:00 15360] "Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2008-03-20 12:04 2127296] "AutoConnect"="C:\Program Files\AutoConnect\AutoConnect.exe" [2004-08-28 20:27 295424] "DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-04-01 11:39 486856] "Orb"="C:\Program Files\Winamp Remote\bin\OrbTray.exe" [2008-03-25 04:59 507904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Smapp"="C:\Program Files\Analog Devices\SoundMAX\SMTray.exe" [2003-05-05 08:57 143360] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-12-05 01:41 8523776] "nwiz"="nwiz.exe" [2007-12-05 01:41 1626112 C:\WINDOWS\system32\nwiz.exe] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-12-05 01:41 81920] "WOOWATCH"="C:\PROGRA~1\NEOSTR~1\Watch.exe" [2004-08-23 14:49 20480] "WOOTASKBARICON"="C:\PROGRA~1\NEOSTR~1\GestMaj.exe" [2004-10-14 16:55 32768] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048] "dickngv"="C:\Program Files\Common Files\Microsoft Shared\aibuhpk.exe" [ ] "okcybda"="C:\Program Files\Common Files\System\foqodpx.exe" [ ] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312] "WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2008-04-01 20:49 36352] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 14:00 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "MIDI1"= SYNCOR11.DLL [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "D:\\Gry\\Em4\\Em4.exe"= R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 19:31] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 19:35] R3 e4usbaw;USB ADSL2 WAN Adapter;C:\WINDOWS\system32\DRIVERS\e4usbaw.sys [2006-09-19 11:03] S2 IKANLOADER2;General Purpose USB Driver (e4ldr.sys);C:\WINDOWS\system32\Drivers\e4ldr.sys [2006-09-15 11:07] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1bdfadcf-025b-11dd-a226-4d6564696130}] \Shell\AutoRun\command - H:\dickngv.exe \Shell\explore\Command - H:\dickngv.exe \Shell\open\Command - H:\dickngv.exe *Newly Created Service* - UDFS *Newly Created Service* - UMWDF . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-04-05 11:18:49 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2008-04-05 11:19:31 ComboFix-quarantined-files.txt 2008-04-05 09:19:27 Pre-Run: 43,652,804,608 bajtów wolnych Post-Run: 43,638,255,616 bajtów wolnych . 2008-04-05 07:56:28 --- E O F ---

**Posty:** 8001 · przez **Okocza** 05 Kwi 2008, 11:23

jadupl napisał(a):O4 - HKLM\..\Run: [dickngv] C:\Program Files\Common Files\Microsoft Shared\aibuhpk.exe
O4 - HKLM\..\Run: [okcybda] C:\Program Files\Common Files\System\foqodpx.exe

pogrubione ręcznie z dysku. a wpisy w hijacku

**Posty:** 120 · przez **jadupl** 05 Kwi 2008, 11:55

Zrestartowałem kompa bo mi aktualizacje Windows sciągnął i te pliki zniknęły. I juz po Problemie.

Dzieki

Mozna zamknąć

**Posty:** 8001 · przez **Okocza** 05 Kwi 2008, 11:57

proszę. od tego tu jesteśmy.

złe wyświetlaie dysku

Złe wyświetlaie dysku

Kto jest na forum