proszę o sprawdzenie loga

**Posty:** 20 · przez **rondzio** 15 Cze 2006, 18:26

Na komputerze przestała działać przegladarka Internet Explorer (innej przegladarki nie instalowałem)
Po wpisaniu adresu wyskakuje komunikat. Nie można otworzyć strony wyszukania.
Sama neostrada działa, przy pingowaniu np. onet.pl wszystko jest poprawnie...

oto log z programu

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 16:22:23, on 2006-06-15 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\skeys.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\ULI5289\ALi5289.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\WINDOWS\system32\hphmon06.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\PROGRA~1\NEOSTR~1\CnxMon.exe C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe C:\PROGRA~1\NEOSTR~1\taskbaricon.exe C:\Program Files\Gadu-Gadu\Gadu-Gadu\gg.exe C:\WINDOWS\system32\rsvp.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\WINDOWS\system32\HPZipm12.exe C:\Program Files\Alwil Software\Avast4\ashSimpl.exe C:\Program Files\hIJACKTHIS\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TP R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: (no name) - <default> - (no file) F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,,SKEYS /I O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O4 - HKLM\..\Run: [ALi5289] C:\Program Files\ULI5289\ALi5289.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe O4 - HKLM\..\Run: [HPHUPD06] C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\taskbaricon.exe O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\Gadu-Gadu\gg.exe" /tray O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\digital imaging\bin\hpqtra08.exe O4 - Global Startup: HP Image Zone - szybkie uruchamianie.lnk = C:\Program Files\HP\digital imaging\bin\hpqthb08.exe O4 - Global Startup: Trust 730S LCD PowerC@M ZOOM Monitor.lnk = ? O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O18 - Filter: text/html - {03974811-C15F-462c-B6B0-2D2336AA57D0} - C:\WINDOWS\system32\hlwin.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

przez **Tom@szek** 15 Cze 2006, 18:50

Proszę przeskanować system http://www.spywarefri.dk/downloads1/ewido-setup.exe
usunąć wszystko i podać ponownie log-a z ewido oraz hijackthis.

**Posty:** 20 · przez **rondzio** 15 Cze 2006, 21:59

System przeskanowałem ewido.
oto log po zakończonym skanowaniu

Kod: Zaznacz wszystko: --------------------------------------------------------- ewido security suite - Scan report --------------------------------------------------------- + Created on: 19:38:16, 2006-06-15 + Report-Checksum: 312E5967 + Scan result: HKLM\SOFTWARE\Classes\CLSID\{014DA6C5-189F-421a-88CD-07CFE51CFF10} -> Spyware.BargainBuddy : Cleaned with backup HKLM\SOFTWARE\Classes\CLSID\{014DA6C5-189F-421a-88CD-07CFE51CFF10}\TypeLib\\ -> Spyware.BargainBuddy : Cleaned with backup HKLM\SOFTWARE\Classes\CLSID\{014DA6C7-189F-421a-88CD-07CFE51CFF10} -> Spyware.BargainBuddy : Cleaned with backup HKLM\SOFTWARE\Classes\CLSID\{014DA6C7-189F-421a-88CD-07CFE51CFF10}\TypeLib\\ -> Spyware.BargainBuddy : Cleaned with backup HKLM\SOFTWARE\Classes\CLSID\{014DA6C9-189F-421a-88CD-07CFE51CFF10} -> Spyware.MySearch : Cleaned with backup HKLM\SOFTWARE\Classes\CLSID\{014DA6C9-189F-421a-88CD-07CFE51CFF10}\TypeLib\\ -> Spyware.BargainBuddy : Cleaned with backup HKLM\SOFTWARE\Classes\CLSID\{014DA6CB-189F-421a-88CD-07CFE51CFF10} -> Spyware.BargainBuddy : Cleaned with backup HKLM\SOFTWARE\Classes\CLSID\{014DA6CB-189F-421a-88CD-07CFE51CFF10}\TypeLib\\ -> Spyware.BargainBuddy : Cleaned with backup HKLM\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA} -> Spyware.MyWebSearch : Cleaned with backup HKLM\SOFTWARE\Classes\Interface\{014DA6C4-189F-421A-88CD-07CFE51CFF10}\TypeLib\\ -> Spyware.BargainBuddy : Cleaned with backup HKLM\SOFTWARE\Classes\Interface\{014DA6C6-189F-421A-88CD-07CFE51CFF10}\TypeLib\\ -> Spyware.BargainBuddy : Cleaned with backup HKLM\SOFTWARE\Classes\Interface\{014DA6CA-189F-421A-88CD-07CFE51CFF10}\TypeLib\\ -> Spyware.BargainBuddy : Cleaned with backup HKLM\SOFTWARE\Classes\Interface\{014DA6CC-189F-421A-88CD-07CFE51CFF10}\TypeLib\\ -> Spyware.BargainBuddy : Cleaned with backup HKLM\SOFTWARE\Classes\LinkMaker.LinkMakerFilter -> Spyware.LinkMaker : Cleaned with backup HKLM\SOFTWARE\Classes\LinkMaker.LinkMakerFilter\CLSID -> Spyware.LinkMaker : Cleaned with backup HKLM\SOFTWARE\Classes\LinkMaker.LinkMakerFilter.1 -> Spyware.LinkMaker : Cleaned with backup HKLM\SOFTWARE\Classes\LinkMaker.LinkTracker -> Spyware.LinkMaker : Cleaned with backup HKLM\SOFTWARE\Classes\LinkMaker.LinkTracker\CLSID -> Spyware.LinkMaker : Cleaned with backup HKLM\SOFTWARE\Classes\LinkMaker.LinkTracker.1 -> Spyware.LinkMaker : Cleaned with backup HKLM\SOFTWARE\Classes\MySearchToolBar.NetscapeShutdown\CLSID\\ -> Spyware.BargainBuddy : Cleaned with backup HKLM\SOFTWARE\Classes\MySearchToolBar.NetscapeShutdown.1\CLSID\\ -> Spyware.BargainBuddy : Cleaned with backup HKLM\SOFTWARE\Classes\MySearchToolBar.NetscapeStartup\CLSID\\ -> Spyware.BargainBuddy : Cleaned with backup HKLM\SOFTWARE\Classes\MySearchToolBar.NetscapeStartup.1\CLSID\\ -> Spyware.BargainBuddy : Cleaned with backup HKLM\SOFTWARE\Classes\MySearchToolBar.SettingsPlugin\CLSID\\ -> Spyware.BargainBuddy : Cleaned with backup HKLM\SOFTWARE\Classes\MySearchToolBar.SettingsPlugin.1\CLSID\\ -> Spyware.BargainBuddy : Cleaned with backup HKLM\SOFTWARE\Classes\TypeLib\{014DA6C0-189F-421A-88CD-07CFE51CFF10} -> Spyware.BargainBuddy : Cleaned with backup HKLM\SOFTWARE\FocusInteractive\Outlook\\MyWebSearch.OutlookAddin -> Spyware.MyWebSearch : Cleaned with backup HKU\S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{014DA6C9-189F-421A-88CD-07CFE51CFF10} -> Spyware.MySearch : Cleaned with backup HKU\S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{04079851-5845-4DEA-848C-3ECD647AA554} -> Spyware.MySearchBar : Cleaned with backup HKU\S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{04079851-5845-4DEA-848C-3ECD647AA554} -> Spyware.MySearchBar : Cleaned with backup :mozilla.66:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup :mozilla.93:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Weborama : Cleaned with backup :mozilla.107:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup :mozilla.108:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup :mozilla.109:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup :mozilla.110:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup :mozilla.111:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup :mozilla.112:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup :mozilla.113:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup :mozilla.114:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup :mozilla.115:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup :mozilla.116:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup :mozilla.117:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup :mozilla.124:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup :mozilla.125:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup :mozilla.126:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup :mozilla.127:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup :mozilla.128:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup :mozilla.133:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.cenzura-spam : Cleaned with backup :mozilla.134:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.cenzura-spam : Cleaned with backup :mozilla.135:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.cenzura-spam : Cleaned with backup :mozilla.137:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup :mozilla.138:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Spylog : Cleaned with backup :mozilla.146:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup :mozilla.147:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup :mozilla.148:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup :mozilla.149:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup :mozilla.150:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup :mozilla.151:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup :mozilla.157:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Paycounter : Cleaned with backup :mozilla.229:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Popularix : Cleaned with backup :mozilla.238:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup :mozilla.239:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup :mozilla.244:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup :mozilla.247:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup :mozilla.256:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup :mozilla.294:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Masterstats : Cleaned with backup :mozilla.319:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup :mozilla.320:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup :mozilla.332:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Hotlog : Cleaned with backup :mozilla.337:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Findwhat : Cleaned with backup :mozilla.339:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Ivwbox : Cleaned with backup :mozilla.352:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Bluestreak : Cleaned with backup :mozilla.354:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup :mozilla.355:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup :mozilla.359:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup :mozilla.360:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup :mozilla.363:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup :mozilla.372:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup :mozilla.374:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup :mozilla.387:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup :mozilla.391:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup :mozilla.392:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup :mozilla.393:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup :mozilla.394:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Bluestreak : Cleaned with backup :mozilla.409:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup :mozilla.410:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup :mozilla.411:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup :mozilla.414:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Centrport : Cleaned with backup :mozilla.417:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup :mozilla.433:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup :mozilla.434:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup :mozilla.436:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup :mozilla.437:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup :mozilla.438:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup :mozilla.452:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup :mozilla.453:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup :mozilla.454:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.cenzura-spam : Cleaned with backup :mozilla.455:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.cenzura-spam : Cleaned with backup :mozilla.458:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.466:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adtech : Cleaned with backup :mozilla.467:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adtech : Cleaned with backup :mozilla.484:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.486:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.490:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.491:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.492:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup :mozilla.493:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup :mozilla.495:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup :mozilla.496:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup :mozilla.500:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup :mozilla.527:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.528:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.529:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup :mozilla.536:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.537:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.538:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.542:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup :mozilla.543:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.247realmedia : Cleaned with backup :mozilla.551:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup :mozilla.552:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup :mozilla.553:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup :mozilla.554:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.558:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.559:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.560:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.561:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.562:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.563:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup :mozilla.567:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup :mozilla.568:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup :mozilla.569:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.570:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.571:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.572:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.575:C:\Documents and Settings\oem\Dane aplikacji\Mozilla\Firefox\Profiles\rpveshfz.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc8\bar\1.bin\NPMYSRCH.DLL -> Spyware.MyWay : Cleaned with backup C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc8\bar\1.bin\S42NS.EXE -> Spyware.MyWay : Cleaned with backup C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\F3CJPEG.DLL -> Spyware.FunWeb : Cleaned with backup C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\F3HISTSW.DLL -> Spyware.MyWebSearch : Cleaned with backup C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\F3PSSAVR.SCR -> Spyware.MyWebSearch : Cleaned with backup C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\F3RESTUB.DLL -> Spyware.MyWebSearch : Cleaned with backup C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\F3SCHMON.EXE -> Spyware.MyWebSearch : Cleaned with backup C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\F3SCRCTR.DLL -> Spyware.MyWebSearch : Cleaned with backup C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\F3WPHOOK.DLL -> Spyware.Wesbar : Cleaned with backup C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\M3OUTLCN.DLL -> Spyware.MyWebSearch : Cleaned with backup C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\M3PLUGIN.DLL -> Spyware.MyWebSearch : Cleaned with backup C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\MWSOEMON.EXE -> Spyware.Wesbar : Cleaned with backup C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\MWSOESTB.DLL -> Spyware.MyWebSearch : Cleaned with backup C:\RECYCLER\S-1-5-21-448539723-1993962763-839522115-1004\Dc9\bar\1.bin\NPMYWEBS.DLL -> Spyware.MyWebSearch : Cleaned with backup C:\WINDOWS\NDNuninstall6_38.exe -> Spyware.NewDotNet : Cleaned with backup C:\WINDOWS\system32\f3PSSavr.scr -> Spyware.MyWebSearch : Cleaned with backup C:\WINDOWS\system32\MRT.exe -> Heuristic.Win32.AVKiller : Cleaned with backup ::Report End

Chyba niepotrzebnie go wrzuciłem, bo to wsumie jest już wszystko usunięte.

Po przeskanowaniu jeszcze raz nic nie zostało znalezione (brak raportu)

Oto log z hijackthis po wykonanym skanowaniu w ewido.

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 19:43:09, on 2006-06-15 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\skeys.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\ULI5289\ALi5289.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\WINDOWS\system32\hphmon06.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe C:\PROGRA~1\NEOSTR~1\taskbaricon.exe C:\Program Files\Gadu-Gadu\Gadu-Gadu\gg.exe C:\WINDOWS\system32\rsvp.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\ewido\security suite\ewidoctrl.exe C:\WINDOWS\system32\HPZipm12.exe C:\Program Files\ewido\security suite\SecuritySuite.exe C:\Program Files\ewido\security suite\ewidoguard.exe C:\Program Files\hIJACKTHIS\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TP R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,,SKEYS /I O4 - HKLM\..\Run: [ALi5289] C:\Program Files\ULI5289\ALi5289.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe O4 - HKLM\..\Run: [HPHUPD06] C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\taskbaricon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\Gadu-Gadu\gg.exe" /tray O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\digital imaging\bin\hpqtra08.exe O4 - Global Startup: HP Image Zone - szybkie uruchamianie.lnk = C:\Program Files\HP\digital imaging\bin\hpqthb08.exe O4 - Global Startup: Trust 730S LCD PowerC@M ZOOM Monitor.lnk = ? O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll (file missing) O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

Niestety jak przeglądarka nie działała tak nie działa. Zainstalowałem nawet operę ale to samo się dzieje.
Tak jak pisałem wcześniej ping i tracert na zewnątrz działają, czyli z połączeniem neo wszystko dobrze. Odinstalowałem nawet program antywirusowy lecz nic nie pomogo. Z tego co jeszcze zauważyłem nie ma dostępu do zapory wina XP z SP2. Przeszłości komputera nie znam więc nie wiem jak długo już zapora jest niedostępna...

Pozdrawiam i z góry dzięki za pomoc.

przez **$HiJackThis$** 16 Cze 2006, 11:34

Ściągnij EasyCleaner:
http://www.idg.pl/ftp/download/pc_6053/EClea2_0.exe
Kliknij w REJESTR, potem ZNAJDŹ i gdy skonczy, znajdź wpis z końcówką StashInfo i wykasuj go. Zresetuj komputer i spróbuj wejść np. na www.google.pl

**Posty:** 20 · przez **rondzio** 16 Cze 2006, 21:45

Niestety nie znalazło żadnego wpisu z tego typu wyrażeniem.

Wklejam jeszcze log po zakończonej pracy programem EasyCleaner:

Kod: Zaznacz wszystko: HKEY_CURRENT_USER Software\Microsoft\Windows\ShellNoRoam\MUICache 2006-06-16 17:40:25 C:\DOCUME~1\oem\USTAWI~1\Temp\_av_sfx.tm~a02788\avast.setup avast! antivirus Update HKEY_USERS S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\Windows\ShellNoRoam\MUICache 2006-06-16 17:40:25 C:\DOCUME~1\oem\USTAWI~1\Temp\_av_sfx.tm~a02788\avast.setup avast! antivirus Update HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{F5346614-B7C4-4E94-826A-E2363155233D} 2006-06-16 17:15:02 InstallSource C:\DOCUME~1\oem\USTAWI~1\Temp\bye2.tmp\Disk1\ HKEY_CURRENT_USER Software\Macromedia\FlashPlayerUpdate 2005-11-26 21:08:31 Path C:\DOCUME~1\oem\USTAWI~1\Temp\FlashPlayerUpdate.exe HKEY_USERS S-1-5-21-448539723-1993962763-839522115-1004\Software\Macromedia\FlashPlayerUpdate 2005-11-26 21:08:31 Path C:\DOCUME~1\oem\USTAWI~1\Temp\FlashPlayerUpdate.exe HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\F5511245330BBD94B933F8082F334D5D\SourceList\Net 2006-04-08 14:05:42 1 C:\DOCUME~1\oem\USTAWI~1\Temp\GdiplusUpgrade\ HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F5511245330BBD94B933F8082F334D5D\InstallProperties 2006-04-08 14:05:42 InstallSource C:\DOCUME~1\oem\USTAWI~1\Temp\GdiplusUpgrade\ HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{5421155F-B033-49DB-9B33-8F80F233D4D5} 2006-04-08 14:05:42 InstallSource C:\DOCUME~1\oem\USTAWI~1\Temp\GdiplusUpgrade\ HKEY_LOCAL_MACHINE Software\Classes\CLSID\{56336BCA-3D8A-11d6-A00B-0050DA18DE71}\InprocServer32 2005-10-02 19:26:34 C:\DOCUME~1\oem\USTAWI~1\Temp\InfoWindow.dll HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{7AF322C5-AB43-11D4-A00B-0050DA18DE71}\1.0\0\win32 2005-10-02 19:26:34 C:\DOCUME~1\oem\USTAWI~1\Temp\InfoWindow.dll HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\AA75334BD6A349D45BE6344CD4905E84\SourceList\Net 2005-09-06 20:27:09 1 C:\DOCUME~1\oem\USTAWI~1\Temp\IXP000.TMP\ HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\DDE7F2BCF1D91C3409CFF425AE1E271A\SourceList\Net 2005-09-06 15:21:03 1 C:\DOCUME~1\oem\USTAWI~1\Temp\IXP000.TMP\ HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\AA75334BD6A349D45BE6344CD4905E84\InstallProperties 2005-09-06 20:27:09 InstallSource C:\DOCUME~1\oem\USTAWI~1\Temp\IXP000.TMP\ HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DDE7F2BCF1D91C3409CFF425AE1E271A\InstallProperties 2005-09-06 15:21:03 InstallSource C:\DOCUME~1\oem\USTAWI~1\Temp\IXP000.TMP\ HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{B43357AA-3A6D-4D94-B56E-43C44D09E548} 2005-09-06 20:27:09 InstallSource C:\DOCUME~1\oem\USTAWI~1\Temp\IXP000.TMP\ HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} 2005-09-06 15:21:03 InstallSource C:\DOCUME~1\oem\USTAWI~1\Temp\IXP000.TMP\ HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\3552BC46901C2314AA15F124B115F51D\SourceList\Net 2005-09-06 18:09:27 1 C:\DOCUME~1\oem\USTAWI~1\Temp\Langpacks\PLK\ HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3552BC46901C2314AA15F124B115F51D\InstallProperties 2005-09-06 18:09:27 InstallSource C:\DOCUME~1\oem\USTAWI~1\Temp\Langpacks\PLK\ HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{64CB2553-C109-4132-AA51-1F421B515FD1} 2005-09-06 18:09:27 InstallSource C:\DOCUME~1\oem\USTAWI~1\Temp\Langpacks\PLK\ HKEY_LOCAL_MACHINE Software\Hewlett-Packard\Install\{C2B755A8-8D78-4694-BF12-4AC0ADCD4CE2} 2005-09-06 18:11:24 Filename C:\DOCUME~1\oem\USTAWI~1\Temp\Langpacks\PLK\langpack.msi HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 2005-11-25 18:13:58 0 C:\DOCUME~1\oem\USTAWI~1\Temp\setb0.tmp HKEY_USERS S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 2005-11-25 18:13:58 0 C:\DOCUME~1\oem\USTAWI~1\Temp\setb0.tmp HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 2005-11-25 18:13:58 1 C:\DOCUME~1\oem\USTAWI~1\Temp\setb1.tmp HKEY_USERS S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 2005-11-25 18:13:58 1 C:\DOCUME~1\oem\USTAWI~1\Temp\setb1.tmp HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 2005-11-25 18:13:58 2 C:\DOCUME~1\oem\USTAWI~1\Temp\setb2.tmp HKEY_USERS S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 2005-11-25 18:13:58 2 C:\DOCUME~1\oem\USTAWI~1\Temp\setb2.tmp HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 2005-11-25 18:13:58 3 C:\DOCUME~1\oem\USTAWI~1\Temp\setb3.tmp HKEY_USERS S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 2005-11-25 18:13:58 3 C:\DOCUME~1\oem\USTAWI~1\Temp\setb3.tmp HKEY_LOCAL_MACHINE Software\FocusInteractive\Email-IM\0 2005-09-29 19:09:49 Path C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe HKEY_LOCAL_MACHINE Software\Microsoft\Shared Tools\MSConfig\startupreg\MyWebSearch Email Plugin 2006-04-22 20:03:07 command C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe HKEY_CURRENT_USER Software\Microsoft\Internet Explorer\Toolbar 2006-06-10 20:41:32 SmBrandBitmap C:\PROGRA~1\NEOSTR~1\neo-ikonka_16.bmp HKEY_USERS S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\Internet Explorer\Toolbar 2006-06-10 20:41:32 SmBrandBitmap C:\PROGRA~1\NEOSTR~1\neo-ikonka_16.bmp HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Active Setup Temp Folders 2005-09-06 15:02:14 Folder C:\WINDOWS\msdownld.tmp|?:\msdownld.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Setup 2006-06-01 14:01:36 ServicePackCachePath c:\windows\ServicePackFiles\ServicePackCache HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\EventCache\WU 2005-09-27 17:15:23 CurrentCacheFile C:\WINDOWS\SoftwareDistribution\EventCache\{283DD8D8-B43D-4266-810C-370ECF8C8E49}.bin HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\EventCache\Sus 2005-09-27 17:15:08 CurrentCacheFile C:\WINDOWS\SoftwareDistribution\EventCache\{49664F20-D563-4AB2-8A39-0106E0711353}.bin HKEY_CURRENT_USER Software\Microsoft\Internet Explorer\Main 2006-06-16 13:17:14 Local Page C:\WINDOWS\system32\blank.htm HKEY_USERS S-1-5-21-448539723-1993962763-839522115-1004\Software\Microsoft\Internet Explorer\Main 2006-06-16 13:17:14 Local Page C:\WINDOWS\system32\blank.htm HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\App Paths\cmmgr32.exe 2005-09-06 14:53:00 C:\WINDOWS\system32\cmmgr32.exe HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\MPlayer2\Groups\Video\DVR-MS 2006-05-29 19:02:58 RequiredFile C:\WINDOWS\system32\enable.dvd HKEY_LOCAL_MACHINE Software\Classes\CLSID\{03974811-C15F-462c-B6B0-2D2336AA57D0}\InprocServer32 2005-11-04 14:28:04 C:\WINDOWS\system32\hlwin.dll HKEY_LOCAL_MACHINE Software\Classes\CLSID\{85A77577-A8CA-41b7-AA1E-DDAD4C0B12B1}\InprocServer32 2005-11-04 14:28:04 C:\WINDOWS\system32\hlwin.dll HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{D3437C5B-EAB8-4CDA-8B36-583110A57A4F}\1.0\0\win32 2005-11-04 14:28:04 C:\WINDOWS\system32\hlwin.dll HKEY_LOCAL_MACHINE Software\Classes\Software\Microsoft\Multimedia\Components\Informational\Codec_mp4sax\Definition\File0 2006-02-20 19:36:35 C:\WINDOWS\system32\mp4ds32.ax HKEY_LOCAL_MACHINE Software\Classes\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\InprocServer32 2005-09-06 15:02:14 C:\WINDOWS\system32\plugin.ocx HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{06DD38D0-D187-11CF-A80D-00C04FD74AD8}\1.0\0\win32 2005-09-06 15:02:14 C:\WINDOWS\system32\plugin.ocx HKEY_LOCAL_MACHINE Software\Classes\CLSID\{CC2C83A6-9BE4-11D0-98E7-00C04FC2CAF5}\InprocServer32 2005-09-06 15:02:20 SystemDB C:\WINDOWS\system32\system.mdw HKEY_LOCAL_MACHINE Software\Microsoft\Windows Media Device Manager 2006-06-01 14:01:34 Log.Filename C:\WINDOWS\system32\Wmdm.log HKEY_LOCAL_MACHINE Software\Classes\CLSID\{AAA288BA-9A4C-45B0-95D7-94D524869DB5}\InprocServer32 2006-05-29 19:03:30 C:\WINDOWS\system32\WPDShServiceObj.dll HKEY_LOCAL_MACHINE Software\Classes\CLSID\{77F7F122-20B0-4117-A2FB-059D1FC88256}\InprocServer32 2006-06-01 14:01:35 C:\WINDOWS\system32\wpdsp.dll HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{B9B6535E-7706-490C-84A5-F40E125AD4B5}\1.0\0\win32 2005-11-25 18:14:07 C:\WINDOWS\system32\wpdsp.dll HKEY_USERS .DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MUICache 2006-06-07 10:39:14 C:\Team17\Worms2\frontend.exe Worms 2 Frontend HKEY_USERS S-1-5-18\Software\Microsoft\Windows\ShellNoRoam\MUICache 2006-06-07 10:39:14 C:\Team17\Worms2\frontend.exe Worms 2 Frontend HKEY_CURRENT_USER Software\Netscape\Netscape Navigator\User Trusted External Applications 2006-05-29 19:03:15 C:\PROGRA~1\GAMESP~1\GSAPak.exe Yes HKEY_USERS S-1-5-21-448539723-1993962763-839522115-1004\Software\Netscape\Netscape Navigator\User Trusted External Applications 2006-05-29 19:03:15 C:\PROGRA~1\GAMESP~1\GSAPak.exe Yes

Jeszcze jeden log, tym razem z programu Silent Runners:

Kod: Zaznacz wszystko: "Silent Runners.vbs", revision 45, http://www.silentrunners.org/ Operating System: Windows XP SP2 Output limited to non-default values, except where indicated by "{++}" Startup items buried in registry: --------------------------------- HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++} "Gadu-Gadu" = ""C:\Program Files\Gadu-Gadu\Gadu-Gadu\gg.exe" /tray" ["Gadu-Gadu Sp. z oo"] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++} "ALi5289" = "C:\Program Files\ULI5289\ALi5289.exe" [empty string] "SoundMan" = "SOUNDMAN.EXE" ["Realtek Semiconductor Corp."] "ATIPTA" = "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" ["ATI Technologies, Inc."] "ATICCC" = ""C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime" [null data] "HPDJ Taskbar Utility" = "C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe" ["HP"] "HPHUPD06" = "C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe" ["Hewlett-Packard"] "HP Component Manager" = ""C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"" ["Hewlett-Packard Company"] "HPHmon06" = "C:\WINDOWS\system32\hphmon06.exe" ["Hewlett-Packard"] "SunJavaUpdateSched" = "C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe" ["Sun Microsystems, Inc."] "HP Software Update" = "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" ["Hewlett-Packard Co."] "WooCnxMon" = "C:\PROGRA~1\NEOSTR~1\CnxMon.exe" [empty string] "SpeedTouch USB Diagnostics" = ""C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon" ["THOMSON Telecom Belgium"] "WOOWATCH" = "C:\PROGRA~1\NEOSTR~1\Watch.exe" ["France Télécom R&D"] "WOOTASKBARICON" = "C:\PROGRA~1\NEOSTR~1\taskbaricon.exe" ["France Télécom R&D"] HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ "{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania" -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania" \InProcServer32\(Default) = "deskpan.dll" [file not found] "{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu" -> {HKLM...CLSID} = "HyperTerminal Icon Ext" \InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."] "{5E2121EE-0300-11D4-8D3B-444553540000}" = "Catalyst Context Menu extension" -> {HKLM...CLSID} = "SimpleShlExt Class" \InProcServer32\(Default) = "C:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll" [empty string] "{21569614-B795-46b1-85F4-E737A8DC09AD}" = "Shell Search Band" -> {HKLM...CLSID} = "Shell Search Band" \InProcServer32\(Default) = "C:\WINDOWS\system32\browseui.dll" [MS] "{640167b4-59b0-47a6-b335-a6b3c0695aea}" = "Portable Media Devices" -> {HKLM...CLSID} = "Portable Media Devices" \InProcServer32\(Default) = "C:\WINDOWS\system32\Audiodev.dll" [MS] "{35786D3C-B075-49b9-88DD-029876E11C01}" = "Portable Devices" -> {HKLM...CLSID} = "Portable Devices" \InProcServer32\(Default) = "C:\WINDOWS\system32\wpdshext.dll" [MS] "{D6791A63-E7E2-4fee-BF52-5DED8E86E9B8}" = "Portable Devices Menu" -> {HKLM...CLSID} = "Portable Devices Menu" \InProcServer32\(Default) = "C:\WINDOWS\system32\wpdshext.dll" [MS] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\ INFECTION WARNING! "{54D9498B-CF93-414F-8984-8CE7FDE0D391}" = "ewido shell guard" -> {HKLM...CLSID} = "CShellExecuteHookImpl Object" \InProcServer32\(Default) = "C:\Program Files\ewido\security suite\shellhook.dll" ["TODO: <Firmenname>"] HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ "WPDShServiceObj" = "{AAA288BA-9A4C-45B0-95D7-94D524869DB5}" -> {HKLM...CLSID} = "WPDShServiceObj Class" \InProcServer32\(Default) = "C:\WINDOWS\system32\WPDShServiceObj.dll" [file not found] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\ INFECTION WARNING! "Userinit" = "C:\WINDOWS\system32\userinit.exe,,SKEYS /I" [MS], [MS], [file not found] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ INFECTION WARNING! AtiExtEvent\DLLName = "Ati2evxx.dll" ["ATI Technologies Inc."] INFECTION WARNING! WgaLogon\DLLName = "WgaLogon.dll" [MS] HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ ewido\(Default) = "{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}" -> {HKLM...CLSID} = "Ctest Object" \InProcServer32\(Default) = "C:\Program Files\ewido\security suite\context.dll" ["ewido networks"] HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\ ewido\(Default) = "{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}" -> {HKLM...CLSID} = "Ctest Object" \InProcServer32\(Default) = "C:\Program Files\ewido\security suite\context.dll" ["ewido networks"] Active Desktop and Wallpaper: ----------------------------- Active Desktop is disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState HKCU\Control Panel\Desktop\ "Wallpaper" = "C:\Documents and Settings\oem\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp" Enabled Screen Saver: --------------------- HKCU\Control Panel\Desktop\ "SCRNSAVE.EXE" = "C:\WINDOWS\system32\ssstars.scr" [MS] Startup items in "oem" & "All Users" startup folders: ----------------------------------------------------- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart "ATI CATALYST System Tray" -> shortcut to: "C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe SystemTray" [null data] "HP Digital Imaging Monitor" -> shortcut to: "C:\Program Files\HP\digital imaging\bin\hpqtra08.exe" ["Hewlett-Packard Co."] "HP Image Zone - szybkie uruchamianie" -> shortcut to: "C:\Program Files\HP\digital imaging\bin\hpqthb08.exe -s" [null data] "Trust 730S LCD PowerC@M ZOOM Monitor" -> shortcut to: "C:\Documents and Settings\oem\Pulpit\ICON.EXE" [file not found] Enabled Scheduled Tasks: ------------------------ "HP Usg Daily" -> launches: "C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\pexpress\hphped05.exe" [empty string] Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] 000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS] 000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] Transport Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: %SystemRoot%\system32\mswsock.dll [MS], 01 - 02, 05 - 14 %SystemRoot%\system32\rsvpsp.dll [MS], 03 - 04 Toolbars, Explorer Bars, Extensions: ------------------------------------ Explorer Bars HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\ {21569614-B795-46B1-85F4-E737A8DC09AD}\(Default) = (no title provided) -> {HKLM...CLSID} = "Shell Search Band" \InProcServer32\(Default) = "C:\WINDOWS\system32\browseui.dll" [MS] Dormant Explorer Bars in "View, Explorer Bar" menu HKLM\Software\Classes\CLSID\{01002DB2-8170-4D9B-A8B1-DDC9DD114E03}\(Default) = "Volet Wanadoo" Implemented Categories\{00021494-0000-0000-C000-000000000046}\ [horizontal bar] InProcServer32\(Default) = "C:\PROGRA~1\NEOSTR~1\audience\audience.dll" [empty string] HKLM\Software\Classes\CLSID\{014DA6CE-189F-421A-88CD-07CFE51CFF10}\(Default) = "My Search Bar Quick View" Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar] InProcServer32\(Default) = "C:\WINDOWS\system32\shdocvw.dll" [MS] HKLM\Software\Classes\CLSID\{1E0DE227-5CE4-4EA3-AB0C-8B03E1AA76BC}\(Default) = "My Web Search Quick View" Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar] InProcServer32\(Default) = "C:\WINDOWS\system32\shdocvw.dll" [MS] HKLM\Software\Classes\CLSID\{3BAF4A27-C764-4E1A-A6F4-62F7A7E5E51C}\(Default) = "ToolBand Class" Implemented Categories\{00021494-0000-0000-C000-000000000046}\ [horizontal bar] InProcServer32\(Default) = "C:\PROGRA~1\NEOSTR~1\audience\audience.dll" [empty string] HKLM\Software\Classes\CLSID\{5BF498C0-931E-4A4F-B33F-456D07137EAA}\(Default) = "Volet Wanadoo" Implemented Categories\{00021494-0000-0000-C000-000000000046}\ [horizontal bar] InProcServer32\(Default) = "C:\PROGRA~1\NEOSTR~1\audience\audience.dll" [empty string] Extensions (Tools menu items, main toolbar menu buttons) HKLM\Software\Microsoft\Internet Explorer\Extensions\ {08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ "MenuText" = "Sun Java Console" "CLSIDExtension" = "{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}" -> {HKLM...CLSID} = "Java Plug-in 1.5.0_04" \InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll" ["Sun Microsystems, Inc."] Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ Ati HotKey Poller, Ati HotKey Poller, "C:\WINDOWS\system32\Ati2evxx.exe" ["ATI Technologies Inc."] ewido security suite control, ewido security suite control, "C:\Program Files\ewido\security suite\ewidoctrl.exe" ["ewido networks"] Pml Driver HPZ12, Pml Driver HPZ12, "C:\WINDOWS\system32\HPZipm12.exe" ["HP"] SerialKeys, SerialKeys, "C:\WINDOWS\system32\skeys.exe" [MS] Print Monitors: --------------- HKLM\System\CurrentControlSet\Control\Print\Monitors\ hpzlnt11\Driver = "hpzlnt11.dll" ["HP"] ---------- + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + The search for DESKTOP.INI DLL launch points on all local fixed drives took 45 seconds. + The search for all Registry CLSIDs containing dormant Explorer Bars took 9 seconds. ---------- (total run time: 72 seconds)

Może tutaj coś będzie widać.

Coś zaczynam przeczuwać, że jedynym sposobem poradzenia sobie z tym problemem będzie przeinstalowanie systemu (na które niestety nie mam czasu) więc dlatego zamieściłem mój problem na forum. Komputer nie jest mój więc chciałbym to w jak najprostszy i najszybszy spodób naprawić.

proszę o sprawdzenie loga

proszę o sprawdzenie loga

Kto jest na forum