Logfile of HijackThis v1.99.1
Scan saved at 16:22:06, on 2006-12-12
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32LEXBCES.EXE
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSsystem32LEXPPS.EXE
C:Program FilesEset
od32krn.exe
C:WINDOWSsystem32
vsvc32.exe
C:PROGRA~1NEOSTR~1CnxMon.exe
C:PROGRA~1NEOSTR~1TaskbarIcon.exe
C:Program FilesDAEMON Toolsdaemon.exe
D:Program FilesWinampwinampa.exe
C:Program FilesEset
od32kui.exe
C:Program FilesCommon FilesRealUpdate_OB
ealsched.exe
D:Program FilesGadu-Gadugg.exe
C:Program FilesSkypePhoneSkype.exe
C:Program FilesSAGEMSAGEM F@st 800-840dslmon.exe
C:PROGRA~1NEOSTR~1NeostradaTP.exe
C:PROGRA~1NEOSTR~1ComComp.exe
C:PROGRA~1NEOSTR~1Watch.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Program FilesCommon FilesRealUpdate_OBRealOneMessageCenter.exe
C:Documents and SettingsxxxPulpitHijackThis.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page =
http://google.bearshare.com/pl/
R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Neostrada TP
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:PROGRA~1NEOSTR~1SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:Program FilesBitComet oolsBitCometBHO.dll
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:Program FilesNeed2Findar1.binND2FNBAR.DLL (file missing)
O2 - BHO: BitComet Toolbar Helper - {6A373B7E-496E-424f-A9BE-486A5E9AB018} - C:Program FilesBitComet Toolbarv2.0.0.5BitComet_Toolbar.dll (file missing)
O3 - Toolbar: BitComet Toolbar - {2E608F70-C430-4bc5-96F6-608E02EBA5B2} - C:Program FilesBitComet Toolbarv2.0.0.5BitComet_Toolbar.dll (file missing)
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [AWMON] "C:PROGRA~1LavasoftAD-AWA~1Ad-Watch.exe"
O4 - HKLM..Run: [WooCnxMon] C:PROGRA~1NEOSTR~1CnxMon.exe
O4 - HKLM..Run: [WOOWATCH] C:PROGRA~1NEOSTR~1Watch.exe
O4 - HKLM..Run: [WOOTASKBARICON] C:PROGRA~1NEOSTR~1TaskbarIcon.exe
O4 - HKLM..Run: [DAEMON Tools] "C:Program FilesDAEMON Toolsdaemon.exe" -lang 1033
O4 - HKLM..Run: [Anti-Blaxx Manager] C:Program FilesAnti-BlaxxAnti-Blaxx.exe
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [WinampAgent] D:Program FilesWinampwinampa.exe
O4 - HKLM..Run: [Windows Update Notifier] "C:WINDOWSsystem32winalert.exe"
O4 - HKLM..Run: [nod32kui] "C:Program FilesEset
od32kui.exe" /WAITSERVICE
O4 - HKLM..Run: [TkBellExe] "C:Program FilesCommon FilesRealUpdate_OB
ealsched.exe" -osboot
O4 - HKCU..Run: [tbon] C:Program FilesTBONBin bon.exe /r
O4 - HKCU..Run: [Komunikator] d:Program FilesTlen.pl len.exe
O4 - HKCU..Run: [Gadu-Gadu] "D:Program FilesGadu-Gadugg.exe" /tray
O4 - HKCU..Run: [Skype] "C:Program FilesSkypePhoneSkype.exe" /nosplash /minimized
O4 - Global Startup: DSLMON.lnk = C:Program FilesSAGEMSAGEM F@st 800-840dslmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOfficeOSA9.EXE
O8 - Extra context menu item: &Search -
http://kn.bar.need2find.com/KN/menusearch.html?p=KN
O8 - Extra context menu item: Download all links using BitComet -
res://C:Program FilesBitCometBitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet -
res://C:Program FilesBitCometBitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet -
res://C:Program FilesBitCometBitComet.exe/AddLink.htm
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O17 - HKLMSystemCCSServicesTcpip..{524F92AC-DC5D-4EEB-970B-28EF850E5F58}: NameServer = 194.204.159.1,194.204.152.34
O17 - HKLMSystemCCSServicesTcpip..{93339B9A-6F5C-459C-AEB9-AE01948433D4}: NameServer = 194.204.152.34 217.98.63.164
O18 - Filter: text/html - (no CLSID) - (no file)
O20 - Winlogon Notify: rpcc - C:WINDOWSsystem32
pcc.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Unknown owner - C:Program FilesKerioPersonal Firewall 4kpf4ss.exe (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:WINDOWSsystem32LEXBCES.EXE
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:Program FilesEset
od32krn.exe
O23 - Service: NVIDIA Display Driver Service (Omega 1.5303) (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32
vsvc32.exe
Po skanowaniu Nod'em na okrągło znajduje to:
Ustawiłem wszystko wdług strony co ktos juz tutaj podawał, gdzie pokazane jest jak ustawić dobrze Nod'a 32. Czytałem równiez pomoc ze strony nod32.pl... Jednak mi po wykryciu wirusa wyskakuje taki komunikat: "Błąd podczas czyszczenia"
