Bardzo prosze o sprawdzenie LOGa z HijackThis

przez **savefastest** » 24 Gru 2007, 12:47

Problem jest następujący:

Gram w Gre Call of duty 4 i od nie dawna mam problem z tą grą gdyż podczas ładowania zacina się.

Kod: Zaznacz wszystko: http://callofduty4.pl/forum/viewtopic.php?t=705

Przeskanowałem tym hijackthis i mam problem z logiem bo nie wiem co można usunąć a co nie.
Oto mój log :

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:06:22, on 2007-12-24 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16574) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe C:\WINDOWS\system32\Rundll32.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\CTsvcCDA.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Xfire\xfire.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PnkBstrA.exe C:\Program Files\Spyware Doctor\sdhelp.exe C:\WINDOWS\system32\wdfmgr.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\system32\PnkBstrB.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\WINDOWS\Explorer.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\WINDOWS\system32\wbem\wmiprvse.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\Spyware Doctor\tools\iesdsg.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.1121.2472\swg.dll O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\Spyware Doctor\tools\iesdpb.dll O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe" O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe" O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll" O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\xfire.exe O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\Spyware Doctor\tools\iesdpb.dll O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1197322628781 O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u3-windows-i586-jc.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Harmonogram automatycznej usługi LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe -- End of file - 10548 bytes

przez **savefastest** » 24 Gru 2007, 13:03

Gram oczywiście w tą gre w trybie MULTIPLAYER

a oto jeszcze Log z combofix'a:

ComboFix 07-12-21.4 - savefastest 2007-12-24 11:59:59.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.527 [GMT 1:00]
Running from: D:\ścięgane\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\savefastest\~tmp1174.exe

.
((((((((((((((((((((((((( Files Created from 2007-11-24 to 2007-12-24 )))))))))))))))))))))))))))))))
.

2007-12-24 11:05 . 2007-12-24 11:05 <DIR> d-------- C:\Program Files\Trend Micro
2007-12-24 11:00 . 2005-09-23 08:29 626,688 --a------ C:\WINDOWS\system32\msvcr80.dll
2007-12-23 23:07 . 2005-09-28 11:10 466,944 --a------ C:\WINDOWS\system32\CapabilityTable.exe
2007-12-23 23:07 . 2006-01-23 04:48 176,128 --------- C:\WINDOWS\system32\nvuide.exe
2007-12-23 23:07 . 2006-01-23 04:48 35,840 -ra------ C:\WINDOWS\system32\NVCOI.DLL
2007-12-23 23:07 . 2005-12-08 04:06 1,570 --------- C:\WINDOWS\system32\nvide.nvu
2007-12-23 23:05 . 2007-12-23 23:05 19,591 --a------ C:\WINDOWS\Ascd_tmp.ini
2007-12-23 23:00 . 2007-12-23 23:00 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2007-12-23 23:00 . 2007-12-23 23:00 1,409 --a------ C:\WINDOWS\QTFont.for
2007-12-23 22:51 . 2007-12-23 22:51 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\nView_Profiles
2007-12-23 22:49 . 2007-12-23 23:03 <DIR> d-------- C:\WINDOWS\nview
2007-12-23 22:49 . 2007-12-05 02:53 356,352 --a------ C:\WINDOWS\system32\NVUNINST.EXE
2007-12-23 22:49 . 2007-12-05 01:41 356,352 --a------ C:\WINDOWS\system32\nvudisp.exe
2007-12-23 22:49 . 2007-12-24 12:02 88,132 --a------ C:\WINDOWS\system32\nvapps.xml
2007-12-23 22:49 . 2006-08-11 14:42 16,960 --a------ C:\WINDOWS\system32\nvdisp.nvu
2007-12-23 22:48 . 2007-12-23 22:48 <DIR> d-------- C:\NVIDIA
2007-12-23 22:48 . 2007-12-23 22:48 664 --a------ C:\WINDOWS\system32\d3d9caps.dat
2007-12-23 22:48 . 2007-12-23 22:48 552 --a------ C:\WINDOWS\system32\d3d8caps.dat
2007-12-23 21:24 . 2007-12-23 21:24 <DIR> d-------- C:\Program Files\Real Alternative
2007-12-21 23:28 . 2007-12-21 23:28 <DIR> d-------- C:\Program Files\City Interactive
2007-12-21 17:09 . 2007-12-21 17:09 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\RTL Winter Sports 2008
2007-12-21 13:04 . 2007-12-21 13:04 278,728 --a------ C:\WINDOWS\system32\drivers\atksgt.sys
2007-12-21 13:04 . 2007-12-21 13:04 25,416 --a------ C:\WINDOWS\system32\drivers\lirsgt.sys
2007-12-21 13:03 . 2007-12-21 13:04 <DIR> d-------- C:\Program Files\RTL Winter Sports 2008
2007-12-21 12:48 . 2007-12-23 21:33 69 --a------ C:\WINDOWS\NeroDigital.ini
2007-12-21 12:23 . 2007-12-21 12:23 <DIR> d-------- C:\Documents and Settings\savefastest\Dane aplikacji\Nero
2007-12-21 12:22 . 2007-12-21 12:22 <DIR> d-------- C:\Program Files\Nero
2007-12-21 12:22 . 2007-12-21 12:22 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Nero
2007-12-21 12:22 . 2006-03-17 11:45 1,757,184 --a------ C:\WINDOWS\system32\imagX7.dll
2007-12-21 12:22 . 2006-03-17 11:45 802,816 --a------ C:\WINDOWS\system32\imagXRA7.dll
2007-12-21 12:22 . 2006-03-17 11:45 497,296 --a------ C:\WINDOWS\system32\imagXpr7.dll
2007-12-21 12:22 . 2006-03-17 14:49 368,640 --a------ C:\WINDOWS\system32\TwnLib4.dll
2007-12-21 12:22 . 2006-03-17 11:45 258,048 --a------ C:\WINDOWS\system32\imagXR7.dll
2007-12-21 12:21 . 2007-12-21 12:22 <DIR> d-------- C:\Program Files\Common Files\Nero
2007-12-21 11:52 . 2007-12-21 11:57 <DIR> d-------- C:\Program Files\GTA VC - NFS Undeground
2007-12-18 21:24 . 2007-12-18 21:24 <DIR> d-------- C:\Program Files\Arjaloc
2007-12-16 23:51 . 2007-12-24 09:09 <DIR> d-------- C:\Program Files\Torrent Master
2007-12-16 23:16 . 2007-12-22 17:21 <DIR> d-------- C:\Program Files\BitComet
2007-12-16 23:16 . 2007-12-16 23:16 <DIR> d-------- C:\Downloads
2007-12-16 23:16 . 2007-12-16 23:16 2,560 --a------ C:\WINDOWS\system32\bitcometres.dll
2007-12-16 22:25 . 2007-12-16 22:25 <DIR> d-------- C:\WINDOWS\Sun
2007-12-16 22:25 . 2007-09-24 23:31 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2007-12-16 22:24 . 2007-12-16 22:25 <DIR> d-------- C:\Program Files\Java
2007-12-16 22:24 . 2007-12-16 22:24 <DIR> d-------- C:\Program Files\Common Files\Java
2007-12-14 21:37 . 2007-12-14 21:37 <DIR> d-------- C:\Program Files\DivX
2007-12-11 23:34 . 2007-12-11 23:34 1,044,480 --a------ C:\WINDOWS\system32\libdivx.dll
2007-12-11 23:34 . 2007-12-11 23:34 200,704 --a------ C:\WINDOWS\system32\ssldivx.dll
2007-12-11 20:14 . 2007-12-11 20:14 <DIR> d-------- C:\Program Files\MSXML 4.0
2007-12-10 22:40 . 2007-12-12 18:10 <DIR> d--h----- C:\WINDOWS\$hf_mig$
2007-12-10 22:38 . 2007-07-30 19:19 43,352 --a------ C:\WINDOWS\system32\wups2.dll
2007-12-10 22:38 . 2007-07-30 19:19 38,232 --a------ C:\WINDOWS\system32\wucltui.dll.mui
2007-12-10 22:37 . 2007-07-30 19:20 30,040 --a------ C:\WINDOWS\system32\wuaucpl.cpl.mui
2007-12-10 22:37 . 2007-07-30 19:20 30,040 --a------ C:\WINDOWS\system32\wuapi.dll.mui
2007-12-10 22:37 . 2007-07-30 19:18 21,336 --a------ C:\WINDOWS\system32\wuaueng.dll.mui
2007-12-09 23:09 . 2007-12-09 23:09 <DIR> d-------- C:\Program Files\Google
2007-12-04 20:31 . 2007-12-22 17:21 <DIR> d-------- C:\Program Files\Xfire
2007-12-04 20:31 . 2007-12-11 19:10 <DIR> d-------- C:\Documents and Settings\savefastest\Dane aplikacji\Xfire
2007-12-03 20:44 . 2007-12-03 20:45 <DIR> d-------- C:\Program Files\Winamp
2007-12-03 20:44 . 2007-12-20 21:46 <DIR> d-------- C:\Documents and Settings\savefastest\Dane aplikacji\Winamp
2007-12-03 20:42 . 2007-03-08 00:51 129,784 --------- C:\WINDOWS\system32\pxafs.dll
2007-12-03 20:42 . 2007-03-08 00:51 9,464 --------- C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-12-03 20:42 . 2007-03-08 00:51 9,336 --------- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-12-02 19:11 . 2007-12-02 19:17 23 --a------ C:\WINDOWS\MixBKS.INI

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-24 10:57 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Symantec
2007-12-23 22:35 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys
2007-12-23 21:07 --------- d-----w C:\Documents and Settings\savefastest\Dane aplikacji\Skype
2007-12-23 18:39 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2007-12-22 16:22 --------- d-----w C:\Program Files\Odkurzacz
2007-12-21 22:00 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-10 22:03 --------- d-----w C:\Program Files\DAEMON Tools
2007-12-02 19:33 22,328 ----a-w C:\Documents and Settings\savefastest\Dane aplikacji\PnkBstrK.sys
2007-11-28 18:58 --------- d-----w C:\Program Files\QuickTime
2007-11-22 16:18 --------- d-----w C:\Program Files\Norton Internet Security
2007-11-19 21:49 805 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.INF
2007-11-19 21:49 123,952 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2007-11-19 21:49 10,740 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.CAT
2007-11-19 21:49 --------- d-----w C:\Program Files\Symantec
2007-11-19 19:26 --------- d-----w C:\Documents and Settings\LocalService\Dane aplikacji\Xfire
2007-11-19 17:48 --------- d-----w C:\Documents and Settings\savefastest\Dane aplikacji\Creative
2007-11-19 17:48 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Creative
2007-11-19 17:44 --------- d-----w C:\Program Files\Creative
2007-11-19 17:43 --------- d--h--w C:\Program Files\Creative Installation Information
2007-11-19 17:42 --------- d-----w C:\Program Files\Common Files\Creative
2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
2007-11-08 14:12 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Acronis
2007-11-08 14:10 392,320 ----a-w C:\WINDOWS\system32\drivers\timntr.sys
2007-11-08 14:10 32,768 ----a-w C:\WINDOWS\system32\drivers\tifsfilt.sys
2007-11-08 14:10 114,048 ----a-w C:\WINDOWS\system32\drivers\snapman.sys
2007-11-08 14:10 --------- d-----w C:\Program Files\Common Files\Acronis
2007-11-08 14:10 --------- d-----w C:\Program Files\Acronis
2007-11-08 13:58 --------- d-----w C:\Program Files\RegCleaner
2007-11-08 12:57 --------- d-----w C:\Program Files\Spyware Doctor
2007-11-08 12:56 --------- d-----w C:\Documents and Settings\savefastest\Dane aplikacji\PC Tools
2007-11-08 11:28 --------- d-----w C:\Documents and Settings\savefastest\Dane aplikacji\Leadertech
2007-11-08 09:36 --------- d-----w C:\Program Files\SubEdit-Player
2007-11-08 09:21 639,224 ----a-w C:\WINDOWS\system32\drivers\sptd.sys
2007-11-08 08:16 --------- d-----w C:\Documents and Settings\savefastest\Dane aplikacji\Gadu-Gadu
2007-11-07 14:32 --------- d-----w C:\Program Files\Skype
2007-11-07 14:31 94,636 ----a-w C:\WINDOWS\dropcpyr.dll
2007-11-07 14:31 73,728 ----a-w C:\WINDOWS\copyfstq.exe
2007-11-07 14:31 --------- d-----w C:\Program Files\Gadu-Gadu
2007-11-07 14:31 --------- d-----w C:\Program Files\Common Files\Skype
2007-11-07 14:31 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Skype
2007-11-07 13:58 --------- d-----w C:\Documents and Settings\savefastest\Dane aplikacji\Apple Computer
2007-11-07 13:43 --------- d-----w C:\Documents and Settings\savefastest\Dane aplikacji\AdobeUM
2007-11-07 13:40 --------- d-----w C:\Program Files\Common Files\Adobe
2007-11-07 13:34 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer
2007-11-07 13:31 --------- d-----w C:\Documents and Settings\savefastest\Dane aplikacji\Teleca
2007-11-06 21:13 --------- d-----w C:\Documents and Settings\savefastest\Dane aplikacji\Sony Ericsson
2007-11-06 21:11 --------- d-----w C:\Program Files\Sony Ericsson
2007-11-06 21:11 --------- d-----w C:\Program Files\Common Files\Teleca Shared
2007-11-06 21:11 --------- d-----w C:\Program Files\Common Files\Sony Ericsson Shared
2007-11-06 21:11 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Teleca
2007-11-06 21:11 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Sony Ericsson
2007-11-06 21:10 --------- d-----w C:\Program Files\Common Files\InstallShield
2007-11-04 22:52 --------- d-----w C:\Program Files\Analog Devices
2007-11-04 22:20 --------- d-----w C:\Program Files\microsoft frontpage
2007-11-04 22:18 --------- d-----w C:\Program Files\Usługi online
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 23:44]
"Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-07-09 08:39]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-12-12 09:56]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2006-09-03 00:04]
"osCheck"="C:\Program Files\Norton Internet Security\osCheck.exe" [2006-09-05 18:22]
"TrueImageMonitor.exe"="C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe" [2007-02-16 18:45]
"AcronisTimounterMonitor"="C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe" [2007-02-16 18:57]
"Acronis Scheduler2 Service"="C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe" [2007-02-16 18:49]
"CTSysVol"="C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe" [2005-10-31 10:51]
"P17Helper"="Rundll32 P17.dll" []
"UpdReg"="C:\WINDOWS\UpdReg.EXE" [2000-05-11 01:00]
"Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 11:22]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" []
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-11-07 14:34]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
"NvCplDaemon"="RUNDLL32.exe" [2004-08-03 23:44 C:\WINDOWS\system32\rundll32.exe]
"nwiz"="nwiz.exe" [2006-08-11 14:43 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="RUNDLL32.exe" [2004-08-03 23:44 C:\WINDOWS\system32\rundll32.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 23:44]
"Spyware Doctor"="" []

C:\Documents and Settings\savefastest\Menu Start\Programy\Autostart\
Xfire.lnk - C:\Program Files\Xfire\xfire.exe [2007-12-05 03:25:52]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SynchronousMachineGroupPolicy"= 0 (0x0)
"SynchronousUserGroupPolicy"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoStrCmpLogical"= 1 (0x1)
"NoResolveSearch"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMBalloonTip"= 0 (0x0)
"NoRecentDocsHistory"= 1 (0x1)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 relog_ap

R0 snapman;Acronis Snapshots Manager;C:\WINDOWS\system32\DRIVERS\snapman.sys [2007-11-08 15:10]
R0 timounter;Acronis True Image Backup Archive Explorer;C:\WINDOWS\system32\DRIVERS\timntr.sys [2007-11-08 15:10]
R2 tifsfilter;Acronis True Image FS Filter;C:\WINDOWS\system32\DRIVERS\tifsfilt.sys [2007-11-08 15:10]
R3 AEAudioService;AEAudio Service;C:\WINDOWS\system32\drivers\AEAudio.sys [2005-03-04 13:53]
R3 P17;Sound Blaster Audigy;C:\WINDOWS\system32\drivers\P17.sys [2005-07-07 09:14]
S3 sea1bus;Sony Ericsson Device 0A1 driver (WDM);C:\WINDOWS\system32\DRIVERS\sea1bus.sys [2007-02-08 12:55]
S3 sea1mdfl;Sony Ericsson Device 0A1 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\sea1mdfl.sys [2007-02-08 12:55]
S3 sea1mdm;Sony Ericsson Device 0A1 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\sea1mdm.sys [2007-02-08 12:55]
S3 sea1mgmt;Sony Ericsson Device 0A1 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\sea1mgmt.sys [2007-02-08 12:56]
S3 sea1nd5;Sony Ericsson Device 0A1 USB Ethernet Emulation SEMCA1 (NDIS);C:\WINDOWS\system32\DRIVERS\sea1nd5.sys [2007-02-08 12:56]
S3 sea1obex;Sony Ericsson Device 0A1 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\sea1obex.sys [2007-02-08 12:56]
S3 sea1unic;Sony Ericsson Device 0A1 USB Ethernet Emulation SEMCA1 (WDM);C:\WINDOWS\system32\DRIVERS\sea1unic.sys [2007-02-08 12:56]

*Newly Created Service* - COMHOST
.
Contents of the 'Scheduled Tasks' folder
"2007-11-04 22:42:17 C:\WINDOWS\Tasks\Norton Internet Security - Uruchom pełne skanowanie systemu - savefastest.job"
.
**************************************************************************

catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-24 12:02:54
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-12-24 12:03:31 - machine was rebooted
.
2007-12-12 17:35:27 --- E O F ---

przez **savefastest** » 25 Gru 2007, 13:38

gra zaczeła normalnie działać po przeskanowaniu COMBOFIXem, wydaje mi się że te aplikacja jest super,fajnie gdyby ktoś przejrzał jeszcze te logi ale nie jest to aż tak pilne jak być może w innych przypadkach na forum, jeżeli ten temat nie zostanie zamkniety to bedę tu zaglądał czy ktoś mi nie odpowiedział.

Pozdrawiam

przez **VampirLord** » 25 Gru 2007, 14:24

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.1121.2472\swg.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

FIX W HIJACKU

przez **savefastest** » 25 Gru 2007, 16:56

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

To rozumiem mam usunąć ręcznie, próbowałem ale nie moe tego usunąć

Bardzo prosze o sprawdzenie LOGa z HijackThis

Bardzo prosze o sprawdzenie LOGa z HijackThis

Kto jest na forum