LOG DO SPRAWDZENIA

[Marco7]

Logfile of HijackThis v1.99.1Scan saved at 23:16:04, on 2007-07-26Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:WINDOWSSystem32smss.exeC:WINDOWSSystem32winlogon.exeC:WINDOWSsystem32services.exeC:WINDOWSsystem32lsass.exeC:WINDOWSsystem32svchost.exeC:WINDOWSSystem32svchost.exeC:WINDOWSExplorer.EXEC:WINDOWSsystem32spoolsv.exeC:Program FilesVIARAIDraid_tool.exeC:Program FilesEsetnod32kui.exeC:Program FilesHPDigital Imagingbinhpqtra08.exeC:Program FilesEsetnod32krn.exeC:Program FilesHPDigital ImagingbinhpqSTE08.exeC:Program FilesMozilla Firefoxfirefox.exeC:Program FilesGadu-Gadugg.exeC:Program FilesWinampwinamp.exeC:Documents and SettingsMariuszPulpitprogramy czyszcząceHijackThis.exeR0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = ŁączaO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:PROGRA~1SPYBOT~1SDHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.5.0_11binssv.dllO4 - HKLM..Run: [RaidTool] C:Program FilesVIARAIDraid_tool.exeO4 - HKLM..Run: [nod32kui] "C:Program FilesEsetnod32kui.exe" /WAITSERVICEO4 - Global Startup: HP Digital Imaging Monitor.lnk = C:Program FilesHPDigital Imagingbinhpqtra08.exeO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_11binssv.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_11binssv.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exeO15 - Trusted Zone: *.0.0.0.0O15 - Trusted Zone: http://mks.com.plO15 - Trusted Zone: http://www.mks.com.plO16 - DPF: {5A09E43F-A0A7-4ABF-AF80-11367CF1DC8F} - http://mks.com.pl/skaner/SkanerOnline.cabO16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cabO18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLLO23 - Service: NOD32 Kernel Service (NOD32krn) - Eset  - C:Program FilesEsetnod32krn.exeO23 - Service: Pml Driver HPZ12 - HP - C:WINDOWSsystem32HPZipm12.exe

[CatchMe]

Ustawiałeś to do zaufanych w IE?

O15 - Trusted Zone: *.0.0.0.0

[Marco7]

Ustawiałeś to do zaufanych w IE?

O15 - Trusted Zone: *.0.0.0.0

tak , jak dobrze pamietam to musiałem to dodac to do zaufanych żeby działał mi skaner on-line mks

[CatchMe]

Log ok. Wklej ComboFix.

[Marco7]

ComboFix 07-07-30.2 - "Mariusz" 2007-08-02 18:24:54.2 [GMT 2:00] - NTFS Microsoft Windows XP Professional  5.1.2600.2.1250.1.1045.18.Prawda(((((((((((((((((((((((((   Files Created from 2007-07-02 to 2007-08-02  )))))))))))))))))))))))))))))))2007-08-01 11:56	<DIR>	d--------	C:WINDOWSsystem32LogFiles2007-08-01 00:14	<DIR>	d--------	C:Program FilesNAPI-PROJEKT2007-07-31 15:13	<DIR>	d--------	C:Program FilesBanner Maker Pro 62007-07-30 18:54	53,248	--a------	C:WINDOWSSIUnInst.exe2007-07-28 22:40	<DIR>	d--------	C:Program Filesxp-AntiSpy2007-07-28 21:54	<DIR>	d--------	C:Program FilesOdkurzacz2007-07-28 21:33	94,416	--a------	C:WINDOWSsystem32driversaswmon2.sys2007-07-28 21:33	92,848	--a------	C:WINDOWSsystem32driversaswmon.sys2007-07-28 21:33	42,912	--a------	C:WINDOWSsystem32driversaswTdi.sys2007-07-28 21:33	26,624	--a------	C:WINDOWSsystem32driversaavmker4.sys2007-07-28 21:33	<DIR>	d--------	C:Program FilesAlwil Software2007-07-26 16:33	49,492	--a------	C:WINDOWSsystem32prfc0415.dat2007-07-26 16:33	355,486	--a------	C:WINDOWSsystem32prfh0415.dat2007-07-23 20:27	6,815,744	--a------	C:DOCUME~1Mariuszntuser.dat2007-07-23 20:27	1,310,720	--a------	C:DOCUME~1LOCALS~1ntuser.dat2007-07-23 12:37	<DIR>	d--------	C:Program Filesjv16 PowerTools2007-07-23 11:52	51,200	--a------	C:WINDOWSnircmd.exe2007-07-23 00:40	<DIR>	d--------	C:Program FilesAusLogics Registry Defrag2007-07-22 14:31	95,608	--a--c---	C:WINDOWSsystem32AVASTSS.scr2007-07-22 14:31	783,224	--a------	C:WINDOWSsystem32aswBoot.exe2007-07-22 14:31	23,152	--a------	C:WINDOWSsystem32driversaswRdr.sys2007-07-21 11:18	4,608	--a------	C:WINDOWSsystem32W95Inf32.DLL2007-07-21 11:18	2,272	--a------	C:WINDOWSsystem32W95Inf16.DLL2007-07-20 21:45	<DIR>	d--------	C:Program FilesRegCleaner2007-07-17 17:19	<DIR>	d--------	C:Program FilesSkanerOnline2007-07-17 09:29	<DIR>	d--------	C:WINDOWSpss2007-07-16 17:58	<DIR>	d--------	C:WINDOWS$regcmp$((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))2007-08-02 12:27	---------	d--------	C:Program FilesHLSW2007-08-01 17:37	---------	d--h-----	C:Program FilesInstallShield Installation Information2007-08-01 12:00	49492	--a------	C:WINDOWSsystem32perfc015.dat2007-08-01 12:00	355486	--a------	C:WINDOWSsystem32perfh015.dat2007-07-20 17:17	---------	d--------	C:Program FilesSierra On-Line2007-07-16 18:09	---------	d--------	C:Program FilesCheating-Death2007-07-09 13:07	---------	d--------	C:Program FilesGadu-Gadu2007-07-07 12:09	---------	d--------	C:Program FilesCommon FilesInstallShield2007-06-07 21:36	1386496	--a------	C:WINDOWSsystem32msvbvm60.dll2007-06-04 20:20	---------	d--------	C:DOCUME~1MariuszDANEAP~1Image Zone Express(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))*Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]"avast!"="C:PROGRA~1ALWILS~1Avast4ashDisp.exe" [2007-07-28 00:03][HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionpoliciesexplorer]"NoInstrumentation"=0 (0x0)[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Menu Start^Programy^Autostart^HP Digital Imaging Monitor.lnk]backup=C:WINDOWSpssHP Digital Imaging Monitor.lnkCommon Startup[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupregRaidTool]C:Program FilesVIARAIDraid_tool.exe[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionrundisabled]"SoundMan"=SOUNDMAN.EXE"HP Software Update"=C:Program FilesHPHP Software UpdateHPWuSchd2.exeR0 gagp30kx;Filtr rodzajowy AGPv3.0 firmy Microsoft dla platform procesora K8;C:WINDOWSsystem32DRIVERSgagp30kx.sysR0 viamraid;viamraid;C:WINDOWSsystem32DRIVERSviamraid.sysR3 viagfx;viagfx;C:WINDOWSsystem32DRIVERSvtmini.sysS3 FETNDIS;Sterownik NT karty VIA PCI 10/100Mb Fast Ethernet;C:WINDOWSsystem32DRIVERSfetnd5.sysS3 SerialKeys;SerialKeys;C:WINDOWSsystem32skeys.exeS3 sermouse;Sterownik myszy szeregowej;C:WINDOWSsystem32DRIVERSsermouse.sys**************************************************************************catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.netRootkit scan 2007-08-02 18:25:24Windows 5.1.2600 Dodatek Service Pack 2 NTFSscanning hidden processes ...

[CatchMe]

Czysto

[wiesia]

proszę os sprawdzenie logów hijackthis

Ja proszę o poprawną pisownie i nie podpinanie się pod tematy innych użytkowników. Załóż własny temat. // CatchMe