Skocz do zawartości


Zdjęcie

problem


  • Zaloguj się, aby dodać odpowiedź
2 odpowiedzi w tym temacie

#1 gumba

gumba

    Nowy

  • 1 postów

Napisano 08 03 2008 - 23:24

Problemy katalogi nie chca sie wlanczac



[/b]

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 22:19:34, on 2008-03-08

Platform: Windows Vista  (WinNT 6.00.1904)

MSIE: Internet Explorer v7.00 (7.00.6000.16609)

Boot mode: Normal



Running processes:

C:Windowssystem32Dwm.exe

C:WindowsExplorer.EXE

C:Windowssystem32taskeng.exe

C:Program FilesWindows DefenderMSASCui.exe

C:WindowsRtHDVCpl.exe

C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe

C:WindowsSystem32rundll32.exe

C:Program FilesDAEMON Toolsdaemon.exe

C:Program Files<a href="http://www.download.net.pl/1/Winamp/">Winamp</a>winampa.exe

C:Program FilesZuneZuneLauncher.exe

C:Program FilesCommon FilesRealUpdate_OBrealsched.exe

C:Windowsehomeehtray.exe

C:WindowsSystem32rundll32.exe

C:Windowsehomeehmsas.exe

C:WindowsSystem32rundll32.exe

C:WindowsSystem32rundll32.exe

C:Program FilesDigital Line DetectDLG.exe

C:Windowssystem32wbemunsecapp.exe

C:Program FilesGadu-Gadugg.exe

C:WindowsSystem32mobsync.exe

C:Windowssystem32rundll32.exe

C:Windowssystem32rundll32.exe

C:Windowssystem32rundll32.exe

C:Program FilesMozilla Firefoxfirefox.exe

C:UsersGumbagianiDesktophijackthis.com



R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = [url="http://go.microsoft.com/fwlink/?LinkId=54896"]http://go.microsoft.com/fwlink/?LinkId=54896[/url]

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = [url="http://www.onet.pl/"]http://www.onet.pl/[/url]

R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = [url="http://go.microsoft.com/fwlink/?LinkId=54896"]http://go.microsoft.com/fwlink/?LinkId=54896[/url]

R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = [url="http://go.microsoft.com/fwlink/?LinkId=54896"]http://go.microsoft.com/fwlink/?LinkId=54896[/url]

R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = [url="http://go.microsoft.com/fwlink/?LinkId=69157"]http://go.microsoft.com/fwlink/?LinkId=69157[/url]

R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = 

R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = 

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Internet Explorer provided by Dell

R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = 

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:Program FilesYahoo!CompanionInstallscpnyt.dll

O1 - Hosts: ::1 localhost

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:Program FilesYahoo!CompanionInstallscpnyt.dll

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 5.0 CEReaderActiveXAcroIEHelper.ocx

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll

O2 - BHO: FGCatchUrl - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:Program FilesFlashGetjccatch.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:Program FilesRealRealPlayerrpbrowserrecordplugin.dll

O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:Program FilesMyGlobalSearchbar1.binMGSBAR.DLL

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:Program FilesJavajre1.6.0binssv.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar1.dll

O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:Program FilesBAEBAE.dll

O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:Program FilesFlashGetgetflash.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar1.dll

O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:Program FilesMyGlobalSearchbar1.binMGSBAR.DLL

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:Program FilesYahoo!CompanionInstallscpnyt.dll

O4 - HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide

O4 - HKLM..Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM..Run: [NvSvc] RUNDLL32.EXE C:Windowssystem32nvsvc.dll,nvsvcStart

O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:Windowssystem32NvCpl.dll,NvStartup

O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:Windowssystem32NvMcTray.dll,NvTaskbarInit

O4 - HKLM..Run: [ISUSScheduler] "C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe" -start

O4 - HKLM..Run: [ECenter] c:dellE-CenterEULALauncher.exe

O4 - HKLM..Run: [Resume copy] copyfstq.exe /startup

O4 - HKLM..Run: [PCTAVApp] "C:Program FilesPC Tools AntiVirusPCTAV.exe" /MONITORSCAN

O4 - HKLM..Run: [CircleVirtualCD] C:Program FilesCircleVirtualCDHvcdUI.exe

O4 - HKLM..Run: [DAEMON Tools] "C:Program FilesDAEMON Toolsdaemon.exe" -lang 1033

O4 - HKLM..Run: [ISUSPM Startup] C:PROGRA~1COMMON~1INSTAL~1UPDATE~1ISUSPM.exe -startup

O4 - HKLM..Run: [<a href="http://www.download.net.pl/1/Winamp/">Winamp</a>Agent] "C:Program Files<a href="http://www.download.net.pl/1/Winamp/">Winamp</a>winampa.exe"

O4 - HKLM..Run: [Zune Launcher] "c:Program FilesZuneZuneLauncher.exe"

O4 - HKLM..Run: [TkBellExe] "C:Program FilesCommon FilesRealUpdate_OBrealsched.exe"  -osboot

O4 - HKCU..Run: [ehTray.exe] C:WindowsehomeehTray.exe

O4 - HKCU..Run: [MSServer] rundll32.exe C:UsersGUMBAG~1AppDataLocalTempcbabx.dll,#1

O4 - HKCU..Run: [cmds] rundll32.exe C:UsersGUMBAG~1AppDataLocalTempwvurq.dll,c

O4 - HKCU..Run: [Uniblue RegistryBooster 2] c:program filesuniblueregistrybooster 2StartRegistryBooster.exe

O4 - HKCU..Run: [cc3a8e1f] rundll32.exe "C:UsersGUMBAG~1AppDataLocalTemplyediutr.dll",b

O4 - HKCU..Run: [MS Juan] rundll32 "C:UsersGUMBAG~1AppDataLocalTempbecbtsuq.dll",run

O4 - HKCU..Run: [BMcf09bd83] Rundll32.exe "C:UsersGUMBAG~1AppDataLocalTempstcapjlr.dll",s

O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe

O4 - Global Startup: Digital Line Detect.lnk = C:Program FilesDigital Line DetectDLG.exe

O4 - Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOfficeOSA9.EXE

O8 - Extra context menu item: &Download All with FlashGet - C:Program FilesFlashGetjc_all.htm

O8 - Extra context menu item: &Download with FlashGet - C:Program FilesFlashGetjc_link.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:Program FilesJavajre1.6.0binnpjpi160.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:Program FilesJavajre1.6.0binnpjpi160.dll

O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll

O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:Program FilesFlashGetFlashGet.exe

O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:Program FilesFlashGetFlashGet.exe

O13 - Gopher Prefix: 

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:Program FilesYahoo!Commonyinsthelper.dll

O17 - HKLMSystemCCSServicesTcpip..{E1BB4817-4928-4305-A97B-22374A5A1070}: NameServer = 80.48.254.129,194.204.159.1

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL

O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:Program FilesAreschatServer.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:Program FilesCommon FilesSymantec SharedccSvcHst.exe (file missing)

O23 - Service: DSBrokerService - Unknown owner - C:Program FilesDellSupportbrkrsvc.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe

O23 - Service: NMIndexingService - Unknown owner - C:Program FilesCommon FilesAheadLibNMIndexingService.exe (file missing)

O23 - Service: PC Tools AntiVirus Engine (PCTAVSvc) - PC Tools Research Pty Ltd - C:Program FilesPC Tools AntiVirusPCTAVSvc.exe

O23 - Service: RoxMediaDB9 - Sonic Solutions - C:Program FilesCommon FilesRoxio Shared9.0SharedCOMRoxMediaDB9.exe

O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:Program FilesCommon FilesRoxio Shared9.0SharedCOMRoxWatch9.exe

O23 - Service: stllssvr - MicroVision Development, Inc. - C:Program FilesCommon FilesSureThing Sharedstllssvr.exe

O23 - Service: XAudioService - Conexant Systems, Inc. - C:Windowssystem32DRIVERSxaudio.exe[b]


  • 0

#2 Jotgie

Jotgie

    Zorientowany

  • 905 postów

Napisano 08 03 2008 - 23:42

Chyba włączać...

Ale czemu mają się "włączać"?! Nie istnieje takie pojęcie!

  • 0

#3 wncvirus

wncvirus

    Leń !

  • 851 postów

Napisano 08 03 2008 - 23:44

Odpal hjt wybierz opcję do a system scan only.Zrobi Ci się log i zaznacz kwadraty obok poniższych wpisów i daj fix.

O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:Program FilesMyGlobalSearchbar1.binMGSBAR.DLL

O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:Program FilesMyGlobalSearchbar1.binMGSBAR.DLL


Po wykonaniu tego daj loga z combofixa.Jak zrobić masz opisane Tu

  • 0




Użytkownicy przeglądający ten temat: 1

0 użytkowników, 1 gości, 0 anonimowych