Proszę o sprawdzenie log'a, trojanDownloader.Wigon.bs
witam.zamuliło mi kompa prosze o sprawdzenie logów
jak i gdzie sprawdzić ładowanie alternatora + pytanie o akku
moze ktos sprawdzic mi log?prosze
Dysk Twardy: nowy czy "z odzysku"_jak sprawdzić?
Proszę o sprawdzenie Loag z HiJack
Prosze o sprawdzenie. Kompletnie sie na tym niz znam :)
Proszę o sprawdzenie logów z HijackThis
sprawdzie moje logi plx
Bardzo prosze o sprawdzenie Logu :(
chomiki
proszę o sprawdzenie logaod wczoraj system się zawiesza w ciągu godziny resetowałam komputer chyba z 8 razy
przedwczoraj jeszcze było wszystko w porządku
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:52:52, on 2009-12-25
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20661)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Tlen.pl\tlen.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\PROGRA~1\INCRED~1\bin\ImApp.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.incredimail.co...don=IncrediMail
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
R3 - URLSearchHook: (no name) - *{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Default Registration.lnk = E:\sacred rings1\The Sacred Rings\DRC1.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{5F3B52AA-E510-4C2F-A6CD-5396053F893E}: NameServer = 213.241.79.37 83.238.255.76
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Usługa Google Update (gupdate1c9b2c96266e240) (gupdate1c9b2c96266e240) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
--
End of file - 6894 bytes
Aby poprawić bezpieczeństwo i stabilność, zainstaluj SP3 i IE8.
Co masz w E:\sacred rings1? Jeśli nigdy nie instalowałaś nic takiego, usuń ten folder oraz wpis:
O4 - Startup: Default Registration.lnk = E:\sacred rings1\The Sacred Rings\DRC1.exe
Log jest czysty. Czy coś ostatnio instalowałaś? Sprawdź, czy są jakieś informacje o błędach w Dzienniku Zdarzeń (Panel Sterowania Narzędzia Administracyjne). Przyczyną może być pamięć RAM, procesor, a nawet karta graficzna.
może jeszcze log z combofixa
proszę o diagnozę lekarską
na sp2 chodził mi bardzo dobrze do wczoraj, mam słabiutki komputerk i nie wiem czy mogę zainstalować sp3, czy on da radę uciągnąć to wszystko
1 giga ram
procesor 950
karta graf. ge force 2 ti
ComboFix 09-12-24.02 - kachna 2009-12-25 15:56:36.6.1 - x86 NETWORK
Microsoft Windows XP Professional 5.1.2600.2.1250.48.1045.18.1023.711 [GMT 1:00]
Uruchomiony z: c:\documents and settings\kachna\Pulpit\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe
.
((((((((((((((((((((((((( Pliki utworzone od 2009-11-25 do 2009-12-25 )))))))))))))))))))))))))))))))
.
2009-12-24 11:37 . 2009-12-24 11:37 4844296 ----a-w- c:\documents and settings\All Users\Dane aplikacji\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2009-12-23 11:30 . 2009-12-23 11:30 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Friends Games
2009-12-20 19:31 . 2009-12-20 19:31 -------- d-----w- c:\documents and settings\kachna\Dane aplikacji\JoyBits
2009-12-20 14:19 . 2009-12-20 14:19 -------- d-----w- c:\documents and settings\kachna\Dane aplikacji\PlayFirst
2009-12-20 14:19 . 2009-12-20 14:19 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\PlayFirst
2009-12-18 17:39 . 2009-12-18 17:39 -------- d-----w- c:\documents and settings\kachna\Dane aplikacji\ERS G-Studio
2009-12-17 18:39 . 2009-12-17 18:39 -------- d-----w- c:\documents and settings\kachna\Dane aplikacji\HdO Adventure
2009-12-14 20:41 . 2009-12-14 20:41 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Curious Sense
2009-12-14 11:43 . 2009-12-14 11:43 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\MumboJumbo
2009-12-12 10:18 . 2009-12-12 10:16 2065688 ----a-w- c:\documents and settings\All Users\Dane aplikacji\avg8\update\backup\avgcorex.dll
2009-12-12 10:18 . 2009-12-03 09:41 3514648 ----a-w- c:\documents and settings\All Users\Dane aplikacji\avg8\update\backup\avgui.exe
2009-12-12 10:18 . 2009-12-03 09:41 2029336 ----a-w- c:\documents and settings\All Users\Dane aplikacji\avg8\update\backup\avgtray.exe
2009-12-10 19:47 . 2009-12-10 19:47 -------- d-----w- c:\documents and settings\kachna\Dane aplikacji\ChaYoWo Games
2009-12-02 13:35 . 2009-12-02 13:35 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2009-12-02 13:35 . 2009-12-19 11:34 -------- d-----w- c:\documents and settings\kachna\Dane aplikacji\skypePM
2009-12-02 13:32 . 2009-12-25 11:24 -------- d-----w- c:\documents and settings\kachna\Dane aplikacji\Skype
2009-12-02 13:29 . 2009-12-02 13:29 -------- d-----w- c:\program files\Common Files\Skype
2009-12-02 13:29 . 2009-12-02 13:31 -------- d-----r- c:\program files\Skype
2009-12-02 13:29 . 2009-12-02 13:29 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Skype
2009-12-01 20:42 . 2009-12-01 20:42 -------- d-----w- c:\documents and settings\kachna\Dane aplikacji\Curious Sense
2009-11-29 18:32 . 2009-12-17 16:27 -------- d-----w- c:\documents and settings\kachna\Dane aplikacji\Namco
2009-11-29 18:32 . 2009-12-17 16:27 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Namco
2009-11-28 21:36 . 2009-11-28 21:36 -------- d-----w- c:\documents and settings\kachna\Dane aplikacji\Malwarebytes
2009-11-28 21:36 . 2009-12-03 15:14 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-11-28 21:35 . 2009-11-28 21:35 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Malwarebytes
2009-11-28 21:35 . 2009-12-03 15:13 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-11-28 21:35 . 2009-12-24 23:01 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-11-27 20:49 . 2009-11-27 20:49 -------- d-----w- c:\program files\Trend Micro
2009-11-27 17:52 . 2009-11-27 17:52 -------- d-----w- c:\documents and settings\kachna\Dane aplikacji\Gamers Digital
2009-11-27 17:52 . 2009-11-27 17:52 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Gamers Digital
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-24 13:52 . 2008-11-24 20:21 -------- d---a-w- c:\documents and settings\All Users\Dane aplikacji\TEMP
2009-12-24 12:48 . 2009-04-01 12:54 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Google Updater
2009-12-24 09:43 . 2009-11-04 10:35 -------- d-----w- c:\program files\JDownloader
2009-12-23 18:25 . 2009-10-14 16:33 -------- d-----w- c:\documents and settings\kachna\Dane aplikacji\MysteryStudio
2009-12-19 14:50 . 2009-03-11 15:38 -------- d-----w- c:\program files\LG PC Suite II
2009-12-19 10:12 . 2008-11-24 18:37 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-16 10:54 . 2008-11-25 11:51 -------- d-----w- c:\documents and settings\kachna\Dane aplikacji\Tlen.pl
2009-12-03 17:05 . 2009-11-12 16:25 -------- d-----w- c:\documents and settings\kachna\Dane aplikacji\Big Fish Games
2009-11-30 14:47 . 2008-11-24 19:23 20816 ----a-w- c:\documents and settings\kachna\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
2009-11-28 12:10 . 2008-12-15 18:13 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2009-11-24 13:12 . 2008-11-25 11:13 -------- d-----w- c:\program files\ALLPlayer
2009-11-21 21:22 . 2009-11-21 20:57 -------- d-----w- c:\documents and settings\kachna\Dane aplikacji\Hidato
2009-11-21 18:28 . 2009-11-21 18:28 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Intenium
2009-11-21 13:35 . 2009-11-21 13:35 -------- d-----w- c:\program files\OXXOGames
2009-11-18 11:55 . 2009-11-18 11:55 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\EscapeTheMuseum2
2009-11-12 16:25 . 2009-11-12 16:23 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\BigFishGamesCache
2009-11-12 16:23 . 2009-11-12 16:23 -------- d-----w- c:\program files\bfgclient
2009-11-07 18:10 . 2008-12-22 12:31 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\blg
2009-11-06 20:23 . 2009-11-06 20:23 -------- d-----w- c:\documents and settings\kachna\Dane aplikacji\Leadertech
2009-10-29 15:51 . 2009-04-18 16:54 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\AlawarWrapper
2009-10-25 09:56 . 2001-10-26 16:15 74230 ----a-w- c:\windows\system32\perfc015.dat
2009-10-25 09:56 . 2001-10-26 16:15 448004 ----a-w- c:\windows\system32\perfh015.dat
.
------- Sigcheck -------
[-] 2007-10-16 . 89878732D5EB0C845AD2356081142F2A . 1548288 . . [5.1.2600.2180] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll" [2009-09-02 1107200]
[HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
2009-09-02 09:58 1107200 ----a-w- c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll" [2009-09-02 1107200]
[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG8\Toolbar\IEToolbar.dll" [2009-09-02 1107200]
[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IncrediMail"="c:\program files\IncrediMail\bin\IncMail.exe" [2007-04-04 208946]
"Komunikator"="c:\program files\Tlen.pl\tlen.exe" [2009-01-08 5853672]
"Gadu-Gadu"="c:\program files\Gadu-Gadu\gg.exe" [2008-03-20 2127296]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-12-04 68856]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2009-04-23 691656]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-10-09 25623336]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-12-12 2043160]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360]
c:\documents and settings\All Users\Menu Start\Programy\Autostart\
DSLMON.lnk - c:\program files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2009-7-28 1205840]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-08-18 08:33 11952 ----a-w- c:\windows\system32\avgrsstx.dll
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\IncrediMail\\bin\\ImApp.exe"=
"c:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
"c:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
"c:\\Program Files\\Tlen.pl\\tlen.exe"=
"c:\\Program Files\\BearShare Applications\\BearShare\\BearShare.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Opera\\Opera.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\WINDOWS\\system32\\java.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"10542:TCP"= 10542:TCP:BitComet 10542 TCP
"10542:UDP"= 10542:UDP:BitComet 10542 UDP
"15155:TCP"= 15155:TCP:BitComet 15155 TCP
"15155:UDP"= 15155:UDP:BitComet 15155 UDP
"8461:TCP"= 8461:TCP:GoD High Port
"8462:TCP"= 8462:TCP:GoD Low Port
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-02-17 108552]
R3 e4usbaw;USB ADSL2 WAN Adapter;c:\windows\system32\drivers\e4usbaw.sys [2009-07-28 104344]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [2008-12-15 721904]
S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-02-17 335240]
S2 athsgt;athsgt;c:\windows\system32\drivers\athsgt.sys [2009-02-12 164992]
S2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [2009-08-18 908056]
S2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-07-03 297752]
S2 E4LOADER;General Purpose USB Driver (e4ldr.sys);c:\windows\system32\drivers\e4ldr.sys [2009-07-28 69656]
S2 gupdate1c9b2c96266e240;Usługa Google Update (gupdate1c9b2c96266e240);c:\program files\Google\Update\GoogleUpdate.exe [2009-04-01 133104]
S2 limsgt;limsgt;c:\windows\system32\drivers\limsgt.sys [2009-02-12 12544]
--- Inne Usługi/Sterowniki w Pamięci ---
*NewlyCreated* - E4LOADER
.
------- Skan uzupełniający -------
.
uInternet Connection Wizard,ShellNext = hxxp://www.incredimail.co...don=IncrediMail
TCP: {5F3B52AA-E510-4C2F-A6CD-5396053F893E} = 213.241.79.37 83.238.255.76
FF - ProfilePath - c:\documents and settings\kachna\Dane aplikacji\Mozilla\Firefox\Profiles\oimm9jg3.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - hxxp://www.google.pl/
FF - prefs.js: keyword.URL - hxxp://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg&type=yahoo_avg_hs2-tb-web_us&p=
FF - component: c:\documents and settings\kachna\Dane aplikacji\Mozilla\Firefox\Profiles\oimm9jg3.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampTBPlayer.dll
FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll
FF - component: c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils2.dll
FF - component: c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils3.dll
FF - component: c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll
FF - component: c:\program files\AVG\AVG8\Toolbar\Firefox\avg@igeared\components\xpavgtbapi.dll
FF - component: c:\program files\DAEMON Tools Toolbar\FirefoxDTT\components\DTToolbarFF.dll
FF - plugin: c:\program files\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nppl3260.dll
FF - plugin: c:\program files\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-25 16:03
Windows 5.1.2600 Dodatek Service Pack 2 NTFS
skanowanie ukrytych procesów ...
skanowanie ukrytych wpisów autostartu ...
skanowanie ukrytych plików ...
skanowanie pomyślnie ukończone
ukryte pliki: 0
**************************************************************************
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------
[HKEY_USERS\S-1-5-21-1606980848-1935655697-1708537768-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:fe,02,2f,c8,79,aa,90,71,7c,55,f3,5d,48,a4,b8,22,87,c2,58,2b,71,72,f8,
9c,11,bd,2f,7d,d4,0c,70,f1,2a,9f,df,a4,36,0c,96,c8,6d,07,be,26,d0,73,43,4a,\
"??"=hex:58,77,d3,04,54,ad,f5,95,f7,00,8b,67,0d,5a,e8,49
.
Czas ukończenia: 2009-12-25 16:07:27
ComboFix-quarantined-files.txt 2009-12-25 15:07
Przed: 14 140 854 272 bajtów wolnych
Po: 14 136 922 112 bajtów wolnych
- - End Of File - - 87C9133BE505C5B0835231D6D7D47ADA
W logach nic nie ma.
Pobierz OTC uruchom i kliknij CleanUp
Przeczyść dysk oraz rejestr CCleaner
Wykonaj pełne skanowanie Malwarebytes' Anti-Malware - jeśli coś znajdzie usuń i daj raport
