prosze o sprawdzenie loga

przez **Best122** » 27 Gru 2006, 12:21

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSSYSTEM32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSExplorer.EXE
C:Program FilesMozilla Firefoxfirefox.exe
C:Program FilesGadu-Gadugg.exe
C:Program FilesWinRARWinRAR.exe
C:DOCUME~1ADMINI~1USTAWI~1TempRar$EX00.656HijackThis.exe

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://google.pl/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.idg.pl
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,HomeOldSP = about:blank
R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://google.cm/
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 6.0 CEReaderActiveXAcroIEHelper.dll
O2 - BHO: (no name) - {0B5F7FDF-0717-45BF-B49D-695F3168C7FE} - C:WINDOWSsystem32admparsex.dll
O2 - BHO: (no name) - {25C7CE21-E543-46A9-B4B3-01B845B28A6D} - C:WINDOWSsystem32admparsex.dll
O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:PROGRA~1FLASHGETjccatch.dll
O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:Program FilesMyGlobalSearchar1.binMGSBAR.DLL
O2 - BHO: (no name) - {6B754AA2-0CE7-4822-9865-E33AFD03E407} - C:WINDOWSsystem32fontextg.dll
O2 - BHO: (no name) - {6F7A3CAD-54E2-1E9E-8E9B-93EA895FABE3} - C:WINDOWSSystem32hiyhinc.dll (file missing)
O2 - BHO: (no name) - {7E791FD2-D210-2A91-F218-563811C95758} - C:WINDOWSSystem32gqduwcfs.dll (file missing)
O2 - BHO: (no name) - {9F414FFA-2AB1-1594-1756-1E68E08D313A} - C:WINDOWSSystem32dusrpjor.dll (file missing)
O2 - BHO: (no name) - {A4F94C0C-54A7-4DB1-9AF3-B22E63D00404} - C:WINDOWSsystem32fontextd.dll (file missing)
O2 - BHO: (no name) - {A4F94C0C-54A7-4DB1-9AF3-B22E63D00405} - C:WINDOWSfontexte.dll (file missing)
O2 - BHO: gFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:PROGRA~1FLASHGETgetflash.dll
O2 - BHO: XBTP02634 - {F97DA966-F09D-4cab-BF29-75A0026986EA} - C:PROGRA~1BEARSH~2BEARSH~2MediaBar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:Program FilesYahoo!CompanionInstallscpnyt.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx
O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:Program FilesMyWaymyBar2.binMYBAR.DLL (file missing)
O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:Program FilesMyGlobalSearchar1.binMGSBAR.DLL
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:PROGRA~1FLASHGETfgiebar.dll
O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:Program FilesBearShare applicationsBearShare MediaBarMediaBar.dll
O4 - HKLM..Run: [WinVNC] "C:Program FilesTightVNCWinVNC.exe" -servicehelper
O4 - HKLM..Run: [ControlPanel] C:WINDOWSSystem32 wink64.exe internat.dll,LoadKeyboardProfile
O4 - HKLM..Run: [RealTray] C:Program FilesRealRealPlayerRealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM..Run: [WildTangent CDA] RUNDLL32.exe "C:Program FilesWildTangentAppsCDAcdaEngine0400.dll",cdaEngineMain
O4 - HKLM..Run: [bupttdeu] C:WINDOWSSystem32upttdeu.exe
O4 - HKLM..Run: [DesktopProf] c:windowspulpit.exe ukrt
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [zyhunun] C:WINDOWSzyhunun.exe
O4 - HKLM..Run: [tezkneht] C:WINDOWSSystem32 ezkneht.exe
O4 - HKLM..Run: [rE2W36l] wsnsta.exe
O4 - HKLM..Run: [Shell API32] svcnet.exe
O4 - HKLM..Run: [hdloker] C:WINDOWSSystem32sxlntr.exe
O4 - HKLM..Run: [xp_system] C:WINDOWSinet20004winlogon.exe
O4 - HKLM..Run: [SunJavaUpdateSched] C:Program FilesJavajre1.5.0_06injusched.exe
O4 - HKLM..Run: [BearShare] "C:Program FilesBearShareBearShare.exe" /pause
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [winlog] winlog.exe
O4 - HKLM..Run: [defender] c:\dfndrff_e17.exe
O4 - HKLM..Run: [ant4b463] RUNDLL32.EXE w2d8cacd.dll,n 0034b4600000000a2d8cacd
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSSystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 - HKLM..Run: [WinampAgent] C:Program FilesWinampwinampa.exe
O4 - HKLM..Run: [Sony Ericsson PC Suite] "C:Program FilesSony EricssonMobile2Application LauncherApplication Launcher.exe" /startoptions
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..RunServices: [winlog] winlog.exe
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32CTFMON.EXE
O4 - HKCU..Run: [Gadu-Gadu] "C:Program FilesGadu-Gadugg.exe" /tray
O4 - Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOffice10OSA.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_06in
pjpi150_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_06in
pjpi150_06.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:WINDOWSweb elated.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:WINDOWSweb elated.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:WINDOWSSystem32Shdocvw.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:PROGRA~1FLASHGETflashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:PROGRA~1FLASHGETflashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengerMSMSGS.EXE (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengerMSMSGS.EXE (file missing)
O14 - IERESET.INF: START_PAGE_URL=http://www.idg.pl
O15 - Trusted Zone: *.blazefind.com (HKLM)
O15 - Trusted Zone: *.clickspring.net (HKLM)
O15 - Trusted Zone: *.crazywinnings.com (HKLM)
O15 - Trusted Zone: *.flingstone.com (HKLM)
O15 - Trusted Zone: *.mt-download.com (HKLM)
O15 - Trusted Zone: *.my-internet.info (HKLM)
O15 - Trusted Zone: *.searchbarcash.com (HKLM)
O15 - Trusted Zone: *.searchmiracle.com (HKLM)
O15 - Trusted Zone: *.skoobidoo.com (HKLM)
O15 - Trusted Zone: *.slotch.com (HKLM)
O15 - Trusted Zone: *.slotchbar.com (HKLM)
O15 - Trusted Zone: *.topconverting.com (HKLM)
O15 - Trusted Zone: *.windupdates.com (HKLM)
O15 - Trusted Zone: *.xxxtoolbar.com (HKLM)
O15 - Trusted Zone: *.ysbweb.com (HKLM)
O15 - Trusted IP range: 67.19.185.246 (HKLM)
O15 - ProtocolDefaults: 'http' protocol is in Trusted Zone, should be Internet Zone (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O17 - HKLMSystemCCSServicesTcpip..{3B248EE4-E6C4-4F5C-9CCD-32000CD6537D}: NameServer = 194.204.159.1,194.204.152.34
O18 - Filter: text/plain - {43871FC6-828E-40BF-B125-1B9269AD75B1} - blank
O20 - AppInit_DLLs: PAVWAIT.DLL
O20 - Winlogon Notify: MediaContentIndex - C:WINDOWSsystem32lTngwrbk.dll (file missing)
O20 - Winlogon Notify: ThemeManager - C:WINDOWSsystem32ktp6l77s1.dll (file missing)
O20 - Winlogon Notify: winmkv32 - C:WINDOWSSYSTEM32winmkv32.dll
O23 - Service: Adobe LM Service - Unknown owner - C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:Program FilesAVPersonalAVWUPSRV.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: iPodService - Unknown owner - C:Program FilesiPodiniPodService.exe (file missing)
O23 - Service: hngvimlibtvx (jgqckryy6) - Unknown owner - C:WINDOWSSystem32keobgwip6.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSSystem32
vsvc32.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Unknown owner - C:Program FilesCommon FilesPanda SoftwarePavShldpavprsrv.exe (file missing)
O23 - Service: Power Manager (PowerManager) - Unknown owner - C:WINDOWSsvchost.exe (file missing)
O23 - Service: SX Service (SXServ) - Unknown owner - C:WINDOWSsystem32sxserv101.exe
O23 - Service: VNC Server (winvnc) - Unknown owner - C:Program FilesTightVNCWinVNC.exe" -service (file missing)

przez **pp3088** » 27 Gru 2006, 13:17

Witaj. Tak totalna masakra. Poprosze o nr. gg bo tak to za dużo czasu zajmie, a przez gg uwiniemy się szybciej.

przez **niunka** » 27 Gru 2006, 13:46

I to jeszcze dziala :shock:

@pp3088 przyjemnej zabawy :wink:

przez **pp3088** » 27 Gru 2006, 13:57

niunka napisał(a):I to jeszcze dziala

Ciekawe na jak długo :wink:

@pp3088 przyjemnej zabawy :wink:

[/quote]

Dziękuje

. OJ zabawa będzie przednia ^^

przez **Best122** » 27 Gru 2006, 16:32

Napisałem ci na pw mój numer gg

Logfile of HijackThis v1.99.1
Scan saved at 17:25:19, on 2006-12-27
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSSYSTEM32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesAVPersonalAVWUPSRV.EXE
C:Program FilesCommon FilesMicrosoft SharedVS7Debugmdm.exe
C:WINDOWSSystem32
vsvc32.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32sxserv101.exe
C:Program FilesJavajre1.5.0_06injusched.exe
C:WINDOWSSystem32RUNDLL32.EXE
C:WINDOWSSystem32RUNDLL32.EXE
C:Program FilesWinampwinampa.exe
C:WINDOWSSystem32ctfmon.exe
C:Program FilesGadu-Gadugg.exe
C:Program FilesYourWare SolutionsFreeRAM XP ProFreeRAM XP Pro.exe
C:Program Files?raclem?iexec.exe
C:WINDOWSSystem32dwwin.exe
C:WINDOWSexplorer.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:WINDOWSSystem32cool.exe
C:Program FilesBearShareBearShare.exe
C:Program FilesWinRARWinRAR.exe
C:DOCUME~1KACPER~1.KACUSTAWI~1TempRar$EX00.734HijackThis.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://search.bearshare.com/sidebar.html?src=ssb
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://search.bearshare.com/sidebar.html?src=ssb
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://google.bearshare.com/pl/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.idg.pl
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,HomeOldSP = about:blank
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza
R3 - URLSearchHook: (no name) - {BFF3540E-E7CD-BF6F-BB4F-986C221909EE} - C:WINDOWSSystem32sjalgi.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 6.0 CEReaderActiveXAcroIEHelper.dll
O2 - BHO: (no name) - {0B5F7FDF-0717-45BF-B49D-695F3168C7FE} - C:WINDOWSsystem32admparsex.dll
O2 - BHO: (no name) - {25C7CE21-E543-46A9-B4B3-01B845B28A6D} - C:WINDOWSsystem32admparsex.dll
O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:PROGRA~1FLASHGETjccatch.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:Program FilesSpybot - Search & DestroySDHelper.dll
O2 - BHO: (no name) - {6B754AA2-0CE7-4822-9865-E33AFD03E407} - C:WINDOWSsystem32fontextg.dll
O2 - BHO: (no name) - {6F7A3CAD-54E2-1E9E-8E9B-93EA895FABE3} - C:WINDOWSSystem32hiyhinc.dll (file missing)
O2 - BHO: (no name) - {7E791FD2-D210-2A91-F218-563811C95758} - C:WINDOWSSystem32gqduwcfs.dll (file missing)
O2 - BHO: (no name) - {9F414FFA-2AB1-1594-1756-1E68E08D313A} - C:WINDOWSSystem32dusrpjor.dll (file missing)
O2 - BHO: (no name) - {BFF3540E-E7CD-BF6F-BB4F-986C221909EE} - C:WINDOWSSystem32sjalgi.dll
O2 - BHO: gFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:PROGRA~1FLASHGETgetflash.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:Program FilesYahoo!CompanionInstallscpnyt.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx
O3 - Toolbar: (no name) - {37B85A29-692B-4205-9CAD-2626E4993404} - (no file)
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:PROGRA~1FLASHGETfgiebar.dll
O4 - HKLM..Run: [RealTray] C:Program FilesRealRealPlayerRealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM..Run: [bupttdeu] C:WINDOWSSystem32upttdeu.exe
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [tezkneht] C:WINDOWSSystem32 ezkneht.exe
O4 - HKLM..Run: [rE2W36l] wsnsta.exe
O4 - HKLM..Run: [Shell API32] svcnet.exe
O4 - HKLM..Run: [SunJavaUpdateSched] C:Program FilesJavajre1.5.0_06injusched.exe
O4 - HKLM..Run: [BearShare] "C:Program FilesBearShareBearShare.exe" /pause
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [winlog] winlog.exe
O4 - HKLM..Run: [ant4b463] RUNDLL32.EXE w2d8cacd.dll,n 0034b4600000000a2d8cacd
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSSystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 - HKLM..Run: [WinampAgent] C:Program FilesWinampwinampa.exe
O4 - HKLM..Run: [Sony Ericsson PC Suite] "C:Program FilesSony EricssonMobile2Application LauncherApplication Launcher.exe" /startoptions
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [a-squared] "C:Program Filesa-squared Anti-Malwarea2guard.exe"
O4 - HKLM..Run: [CTDrive] rundll32.exe C:WINDOWSSystem32drvxum.dll,startup
O4 - HKLM..RunServices: [winlog] winlog.exe
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32ctfmon.exe
O4 - HKCU..Run: [Gadu-Gadu] "C:Program FilesGadu-Gadugg.exe" /tray
O4 - HKCU..Run: [FreeRAM XP] "C:Program FilesYourWare SolutionsFreeRAM XP ProFreeRAM XP Pro.exe" -win
O4 - HKCU..Run: [Rtac] "C:DOCUME~1KACPER~1.KACMOJEDO~1CROSOF~1.NETalg.exe" -vt yazb
O4 - HKCU..Run: [Wab] C:Program Files?raclem?iexec.exe
O4 - Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOffice10OSA.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe
O8 - Extra context menu item: Download All by FlashGet - C:Program FilesFlashGetjc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:Program FilesFlashGetjc_link.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_06in
pjpi150_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_06in
pjpi150_06.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:WINDOWSweb elated.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:WINDOWSweb elated.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:WINDOWSSystem32Shdocvw.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:PROGRA~1FLASHGETflashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:PROGRA~1FLASHGETflashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengerMSMSGS.EXE (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengerMSMSGS.EXE (file missing)
O14 - IERESET.INF: START_PAGE_URL=http://www.idg.pl
O15 - Trusted Zone: *.crazywinnings.com (HKLM)
O15 - Trusted Zone: *.topconverting.com (HKLM)
O15 - Trusted Zone: *.ysbweb.com (HKLM)
O15 - Trusted IP range: 67.19.185.246 (HKLM)
O15 - ProtocolDefaults: 'http' protocol is in Trusted Zone, should be Internet Zone (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O17 - HKLMSystemCCSServicesTcpip..{3B248EE4-E6C4-4F5C-9CCD-32000CD6537D}: NameServer = 194.204.159.1,194.204.152.34
O18 - Filter: text/plain - {43871FC6-828E-40BF-B125-1B9269AD75B1} - blank
O20 - AppInit_DLLs: PAVWAIT.DLL
O20 - Winlogon Notify: MediaContentIndex - C:WINDOWSsystem32lTngwrbk.dll (file missing)
O20 - Winlogon Notify: ThemeManager - C:WINDOWSsystem32ktp6l77s1.dll (file missing)
O20 - Winlogon Notify: winmkv32 - C:WINDOWSSYSTEM32winmkv32.dll
O23 - Service: Adobe LM Service - Unknown owner - C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:Program FilesAVPersonalAVWUPSRV.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: iPodService - Unknown owner - C:Program FilesiPodiniPodService.exe (file missing)
O23 - Service: hngvimlibtvx (jgqckryy6) - Unknown owner - C:WINDOWSSystem32keobgwip6.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSSystem32
vsvc32.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Unknown owner - C:Program FilesCommon FilesPanda SoftwarePavShldpavprsrv.exe (file missing)
O23 - Service: Power Manager (PowerManager) - Unknown owner - C:WINDOWSsvchost.exe (file missing)
O23 - Service: SX Service (SXServ) - Unknown owner - C:WINDOWSsystem32sxserv101.exe

Po skanie

przez **Arexe** » 29 Gru 2006, 11:19

jeszcze masz dużo syfu....
np.

O4 - HKLM..Run: [Shell API32] svcnet.exe

podobno robak TIBICK.C
Zeskanuj sobie kompa mks'em i innymi antywirusami i anty-spyware

PS Czym ty skanowałes?? Pandą??
pp3088 się tym zajmie :wink:

prosze o sprawdzenie loga

prosze o sprawdzenie loga

Kto jest na forum