#Proszę o sprawdzenie LOGA#

[wojtek.ziomek2]

Założyłem temat Witam. Proszę o sprawdzenie loga.

Logfile of HijackThis v1.99.1

Scan saved at 12:54:48, on 2007-07-28

Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:

D:WINDOWSSystem32smss.exe

D:WINDOWSsystem32winlogon.exe

D:WINDOWSsystem32services.exe

D:WINDOWSsystem32lsass.exe

D:WINDOWSsystem32svchost.exe

D:WINDOWSSystem32svchost.exe

D:Program FilesAlwil SoftwareAvast4aswUpdSv.exe

D:Program FilesAlwil SoftwareAvast4ashServ.exe

D:WINDOWSExplorer.EXE

D:Program FilesWinampwinampa.exe

D:Program FilesCyberLinkPowerDVDPDVDServ.exe

D:PROGRA~1ALWILS~1Avast4ashDisp.exe

D:WINDOWSSystem32lssas.exe

D:Program FilesGadu-Gadugg.exe

D:WINDOWSsystem32spoolsv.exe

D:WINDOWSsystem32cisvc.exe

D:WINDOWSSystem32FTRTSVC.exe

D:Program Filesneostrada tpneostradatp.exe

D:Program FilesCommon FilesMicrosoft SharedVS7Debugmdm.exe

D:WINDOWSsystem32dllcacheivchost.exe

D:Program FilesCyberLinkShared FilesRichVideo.exe

D:WINDOWSSystem32svchost.exe

D:Program Filesneostrada tpComComp.exe

D:PROGRA~1NEOSTR~1Toaster.exe

D:PROGRA~1NEOSTR~1Inactivity.exe

D:PROGRA~1NEOSTR~1PollingModule.exe

D:WINDOWSSystem32ALERTM~1ALERTM~1.EXE

D:Program Filesneostrada tpWatch.exe

D:Program FilesAlwil SoftwareAvast4ashWebSv.exe

D:Program FilesAlwil SoftwareAvast4ashMaiSv.exe

D:Program FilesMozilla Firefoxfirefox.exe

D:WINDOWSsystem32cidaemon.exe

D:Documents and SettingsAgnieszkaPulpitWojtekHijackThis.exe

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.pl/

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title =

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

O4 - HKLM..Run: [spywareTerminator] "D:Program FilesSpyware TerminatorSpywareTerminatorShield.exe"

O4 - HKLM..Run: [WinampAgent] D:Program FilesWinampwinampa.exe

O4 - HKLM..Run: [RemoteControl] "D:Program FilesCyberLinkPowerDVDPDVDServ.exe"

O4 - HKLM..Run: [LanguageShortcut] "D:Program FilesCyberLinkPowerDVDLanguageLanguage.exe"

O4 - HKLM..Run: [avast!] D:PROGRA~1ALWILS~1Avast4ashDisp.exe

O4 - HKLM..Run: [tguard] D:Program FilesBeniamintguard.exe

O4 - HKLM..Run: [Local Security Authority Service] D:WINDOWSSystem32lssas.exe

O4 - HKCU..Run: [WITaj!] D:Documents and SettingsAgnieszkaPulpitWITaj!2004Wit2000.exe

O4 - HKCU..Run: [swg] D:Program FilesGoogleGoogleToolbarNotifier1.0.720.3640GoogleToolbarNotifier.exe

O4 - HKCU..Run: [EarthDesk] "D:Program FilesXericDesignEarthDeskEarthDesk.exe" /silentstart

O4 - HKCU..Run: [Gadu-Gadu] "D:Program FilesGadu-Gadugg.exe" /tray

O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe

O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} - http://www.mks.com.pl/skaner/SkanerOnline.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwa...ash/swflash.cab

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:Program FilesAlwil SoftwareAvast4aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - D:Program FilesAlwil SoftwareAvast4ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - D:Program FilesAlwil SoftwareAvast4ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - D:Program FilesAlwil SoftwareAvast4ashWebSv.exe" /service (file missing)

O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - D:WINDOWSSystem32FTRTSVC.exe

O23 - Service: ipfw_helper (ipfw) - Unknown owner - D:Program FilesMCS StudiosMCS Firewall 6systemipfw.exe

O23 - Service: ms hexidecimal defx (mshexdefx) - Unknown owner - D:WINDOWSsystem32dllcacheivchost.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - D:Program FilesCyberLinkShared FilesRichVideo.exe

[CatchMe]

Syf:

D:WINDOWSSystem32lssas.exe

D:WINDOWSsystem32dllcacheivchost.exe

O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

O4 - HKLM..Run: [Local Security Authority Service] D:WINDOWSSystem32lssas.exe

O23 - Service: ms hexidecimal defx (mshexdefx) - Unknown owner - D:WINDOWSsystem32dllcacheivchost.exe

Zablokuj porty programami WWDC i Seconfig XP

Użyj: http://stopwirusom.pl/index.php?option=com...47&Itemid=4 i ComboFix

- Wklej 2 raporty z tych narzędzi + log z ComboFix.