[/b] Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:19:34, on 2008-03-08 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16609) Boot mode: Normal Running processes: C:Windowssystem32Dwm.exe C:WindowsExplorer.EXE C:Windowssystem32taskeng.exe C:Program FilesWindows DefenderMSASCui.exe C:WindowsRtHDVCpl.exe C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe C:WindowsSystem32rundll32.exe C:Program FilesDAEMON Toolsdaemon.exe C:Program Files<a href="http://www.download.net.pl/1/Winamp/">Winamp</a>winampa.exe C:Program FilesZuneZuneLauncher.exe C:Program FilesCommon FilesRealUpdate_OBrealsched.exe C:Windowsehomeehtray.exe C:WindowsSystem32rundll32.exe C:Windowsehomeehmsas.exe C:WindowsSystem32rundll32.exe C:WindowsSystem32rundll32.exe C:Program FilesDigital Line DetectDLG.exe C:Windowssystem32wbemunsecapp.exe C:Program FilesGadu-Gadugg.exe C:WindowsSystem32mobsync.exe C:Windowssystem32rundll32.exe C:Windowssystem32rundll32.exe C:Windowssystem32rundll32.exe C:Program FilesMozilla Firefoxfirefox.exe C:UsersGumbagianiDesktophijackthis.com R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = [url="http://go.microsoft.com/fwlink/?LinkId=54896"]http://go.microsoft.com/fwlink/?LinkId=54896[/url] R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = [url="http://www.onet.pl/"]http://www.onet.pl/[/url] R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = [url="http://go.microsoft.com/fwlink/?LinkId=54896"]http://go.microsoft.com/fwlink/?LinkId=54896[/url] R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = [url="http://go.microsoft.com/fwlink/?LinkId=54896"]http://go.microsoft.com/fwlink/?LinkId=54896[/url] R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = [url="http://go.microsoft.com/fwlink/?LinkId=69157"]http://go.microsoft.com/fwlink/?LinkId=69157[/url] R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Internet Explorer provided by Dell R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:Program FilesYahoo!CompanionInstallscpnyt.dll O1 - Hosts: ::1 localhost O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:Program FilesYahoo!CompanionInstallscpnyt.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 5.0 CEReaderActiveXAcroIEHelper.ocx O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll O2 - BHO: FGCatchUrl - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:Program FilesFlashGetjccatch.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:Program FilesRealRealPlayerrpbrowserrecordplugin.dll O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:Program FilesMyGlobalSearchbar1.binMGSBAR.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:Program FilesJavajre1.6.0binssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar1.dll O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:Program FilesBAEBAE.dll O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:Program FilesFlashGetgetflash.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar1.dll O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:Program FilesMyGlobalSearchbar1.binMGSBAR.DLL O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:Program FilesYahoo!CompanionInstallscpnyt.dll O4 - HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide O4 - HKLM..Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM..Run: [NvSvc] RUNDLL32.EXE C:Windowssystem32nvsvc.dll,nvsvcStart O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:Windowssystem32NvCpl.dll,NvStartup O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:Windowssystem32NvMcTray.dll,NvTaskbarInit O4 - HKLM..Run: [ISUSScheduler] "C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe" -start O4 - HKLM..Run: [ECenter] c:dellE-CenterEULALauncher.exe O4 - HKLM..Run: [Resume copy] copyfstq.exe /startup O4 - HKLM..Run: [PCTAVApp] "C:Program FilesPC Tools AntiVirusPCTAV.exe" /MONITORSCAN O4 - HKLM..Run: [CircleVirtualCD] C:Program FilesCircleVirtualCDHvcdUI.exe O4 - HKLM..Run: [DAEMON Tools] "C:Program FilesDAEMON Toolsdaemon.exe" -lang 1033 O4 - HKLM..Run: [ISUSPM Startup] C:PROGRA~1COMMON~1INSTAL~1UPDATE~1ISUSPM.exe -startup O4 - HKLM..Run: [<a href="http://www.download.net.pl/1/Winamp/">Winamp</a>Agent] "C:Program Files<a href="http://www.download.net.pl/1/Winamp/">Winamp</a>winampa.exe" O4 - HKLM..Run: [Zune Launcher] "c:Program FilesZuneZuneLauncher.exe" O4 - HKLM..Run: [TkBellExe] "C:Program FilesCommon FilesRealUpdate_OBrealsched.exe" -osboot O4 - HKCU..Run: [ehTray.exe] C:WindowsehomeehTray.exe O4 - HKCU..Run: [MSServer] rundll32.exe C:UsersGUMBAG~1AppDataLocalTempcbabx.dll,#1 O4 - HKCU..Run: [cmds] rundll32.exe C:UsersGUMBAG~1AppDataLocalTempwvurq.dll,c O4 - HKCU..Run: [Uniblue RegistryBooster 2] c:program filesuniblueregistrybooster 2StartRegistryBooster.exe O4 - HKCU..Run: [cc3a8e1f] rundll32.exe "C:UsersGUMBAG~1AppDataLocalTemplyediutr.dll",b O4 - HKCU..Run: [MS Juan] rundll32 "C:UsersGUMBAG~1AppDataLocalTempbecbtsuq.dll",run O4 - HKCU..Run: [BMcf09bd83] Rundll32.exe "C:UsersGUMBAG~1AppDataLocalTempstcapjlr.dll",s O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe O4 - Global Startup: Digital Line Detect.lnk = C:Program FilesDigital Line DetectDLG.exe O4 - Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOfficeOSA9.EXE O8 - Extra context menu item: &Download All with FlashGet - C:Program FilesFlashGetjc_all.htm O8 - Extra context menu item: &Download with FlashGet - C:Program FilesFlashGetjc_link.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:Program FilesJavajre1.6.0binnpjpi160.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:Program FilesJavajre1.6.0binnpjpi160.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:Program FilesFlashGetFlashGet.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:Program FilesFlashGetFlashGet.exe O13 - Gopher Prefix: O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:Program FilesYahoo!Commonyinsthelper.dll O17 - HKLMSystemCCSServicesTcpip..{E1BB4817-4928-4305-A97B-22374A5A1070}: NameServer = 80.48.254.129,194.204.159.1 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:Program FilesAreschatServer.exe O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:Program FilesCommon FilesSymantec SharedccSvcHst.exe (file missing) O23 - Service: DSBrokerService - Unknown owner - C:Program FilesDellSupportbrkrsvc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe O23 - Service: NMIndexingService - Unknown owner - C:Program FilesCommon FilesAheadLibNMIndexingService.exe (file missing) O23 - Service: PC Tools AntiVirus Engine (PCTAVSvc) - PC Tools Research Pty Ltd - C:Program FilesPC Tools AntiVirusPCTAVSvc.exe O23 - Service: RoxMediaDB9 - Sonic Solutions - C:Program FilesCommon FilesRoxio Shared9.0SharedCOMRoxMediaDB9.exe O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:Program FilesCommon FilesRoxio Shared9.0SharedCOMRoxWatch9.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:Program FilesCommon FilesSureThing Sharedstllssvr.exe O23 - Service: XAudioService - Conexant Systems, Inc. - C:Windowssystem32DRIVERSxaudio.exe[b]
problem
Rozpoczęty przez
gumba
, 08 03 2008 23:24
2 odpowiedzi w tym temacie
#1
Napisano 08 03 2008 - 23:24
Problemy katalogi nie chca sie wlanczac
#2
Napisano 08 03 2008 - 23:42
Chyba włączać...
Ale czemu mają się "włączać"?! Nie istnieje takie pojęcie!
Ale czemu mają się "włączać"?! Nie istnieje takie pojęcie!
#3
Napisano 08 03 2008 - 23:44
Odpal hjt wybierz opcję do a system scan only.Zrobi Ci się log i zaznacz kwadraty obok poniższych wpisów i daj fix.
O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:Program FilesMyGlobalSearchbar1.binMGSBAR.DLL
O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:Program FilesMyGlobalSearchbar1.binMGSBAR.DLL
Po wykonaniu tego daj loga z combofixa.Jak zrobić masz opisane Tu
O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:Program FilesMyGlobalSearchbar1.binMGSBAR.DLL
O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:Program FilesMyGlobalSearchbar1.binMGSBAR.DLL
Po wykonaniu tego daj loga z combofixa.Jak zrobić masz opisane Tu
Użytkownicy przeglądający ten temat: 1
0 użytkowników, 1 gości, 0 anonimowych