[Rozwiązany]mam chyba wirusa

[lukasz_13_94]

mam chyba wirusa

o to login z HijackThis

Logfile of HijackThis v1.99.1

Scan saved at 19:36:00, on 2007-08-15

Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:WINDOWSSystem32smss.exe

C:WINDOWSsystem32winlogon.exe

C:WINDOWSsystem32services.exe

C:WINDOWSsystem32lsass.exe

C:WINDOWSsystem32svchost.exe

C:WINDOWSSystem32svchost.exe

C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe

C:Program FilesAlwil SoftwareAvast4ashServ.exe

C:WINDOWSExplorer.EXE

C:WINDOWSsystem32spoolsv.exe

C:WINDOWSSystem32FTRTSVC.exe

C:Program FilesCommon FilesLightScribeLSSrvc.exe

C:WINDOWSsystem32nvsvc32.exe

C:WINDOWSsystem32RUNDLL32.EXE

C:Program FilesAnalog DevicesCoresmax4pnp.exe

C:Program FilesAnalog DevicesSoundMAXSmax4.exe

C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe

C:Program FilesAlwil SoftwareAvast4ashWebSv.exe

C:PROGRA~1ALWILS~1Avast4ashDisp.exe

C:WINDOWSsystem32ctfmon.exe

C:Program FilesCommon FilesAheadLibNMBgMonitor.exe

C:PROGRA~1NEOSTR~1TaskBarIcon.exe

C:Program FilesAresAres.exe

C:Program FilesCommon FilesAheadLibNMIndexStoreSvr.exe

C:WINDOWSSystem32ALERTM~1ALERTM~1.EXE

C:Program Filesneostrada tpneostradatp.exe

C:Program Filesneostrada tpComComp.exe

C:Program Filesneostrada tpWatch.exe

C:WINDOWSsystem32wuauclt.exe

C:Program FilesGadu-Gadugg.exe

C:Program FilesInternet Exploreriexplore.exe

C:Documents and SettingsŁukaszPulpitHijackThis.exe

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.pl/

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = neostrada tp

R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza

R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:PROGRA~1NEOSTR~1SEARCH~1.DLL

O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup

O4 - HKLM..Run: [nwiz] nwiz.exe /install

O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit

O4 - HKLM..Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe

O4 - HKLM..Run: [soundMAXPnP] C:Program FilesAnalog DevicesCoresmax4pnp.exe

O4 - HKLM..Run: [soundMAX] "C:Program FilesAnalog DevicesSoundMAXSmax4.exe" /tray

O4 - HKLM..Run: [JMB36X Configure] C:WINDOWSsystem32JMRaidTool.exe boot

O4 - HKLM..Run: [WOOWATCH] C:PROGRA~1NEOSTR~1Watch.exe

O4 - HKLM..Run: [WOOTASKBARICON] C:PROGRA~1NEOSTR~1GestMaj.exe TaskBarIcon.exe

O4 - HKLM..Run: [NeroFilterCheck] C:Program FilesCommon FilesAheadLibNeroCheck.exe

O4 - HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe

O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe

O4 - HKCU..Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:Program FilesCommon FilesAheadLibNMBgMonitor.exe"

O4 - HKCU..Run: [Gadu-Gadu] "C:Program FilesGadu-Gadugg.exe" /tray

O4 - HKCU..Run: [ares] "C:Program FilesAresAres.exe" -h

O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.4.0_03) -

O16 - DPF: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA} (Java Runtime Environment 1.4.0_03) -

O17 - HKLMSystemCCSServicesTcpip..{153D945D-5534-42FD-BCEF-B03B496AB415}: NameServer = 194.204.159.1 217.98.63.164

O17 - HKLMSystemCS1ServicesTcpip..{153D945D-5534-42FD-BCEF-B03B496AB415}: NameServer = 194.204.159.1 217.98.63.164

O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:Program FilesAreschatServer.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - C:Program FilesAlwil SoftwareAvast4ashWebSv.exe" /service (file missing)

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:Program FilesCommon FilesSymantec SharedccSvcHst.exe" /h ccCommon (file missing)

O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:WINDOWSSystem32FTRTSVC.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:Program FilesCommon FilesLightScribeLSSrvc.exe

O23 - Service: NBService - Nero AG - C:Program FilesNeroNero 7Nero BackItUpNBService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32nvsvc32.exe

[Yugo]

sprawdziłem logi są czyste ale przeskanuj to jakims dobrym skanerem: C:WINDOWSSystem32ALERTM~1ALERTM~1.EXE

Bo nie jestem pewnien ale wyłymacz bardziej o tym wirusie

[lukasz_13_94]

a czy to aby na pewno jest wirus??

a i jaki jest dobry Antyvirus??

avast nie wykrywa żadnego wirusa...

[GoBi]

Log jest czysty

[lukasz_13_94]

co lepsze Kasperski czy avast??

//zapraszam do zapoznania się z tymi tematami

:arrow: http://www.forumpc.pl/viewtopic.php?t=16438

:arrow: http://www.forumpc.pl/viewtopic.php?t=5952

//temat zamykam

//naekana

[meus]

ja preferuje avasta