26.06.2007, 19:25
skanowałem avast''em i avira. wkryły mi konia trojanskiego.pliki poddałem kwarantannie. Pierwszy raz mam wirusa na kompie. nie wiem co dalej z tym robic
[code:1] Logfile of HijackThis v1.99.1
Scan saved at 19:07:43, on 2007-06-26
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C
rogram FilesAlwil SoftwareAvast4aswUpdSv.exe
Crogram FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSsystem32spoolsv.exe
Crogram FilesAntiVir PersonalEdition Classicavguard.exe
Crogram FilesAntiVir PersonalEdition Classicsched.exe
Crogram FilesCommon FilesMicrosoft SharedVS7Debugmdm.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSExplorer.EXE
Crogram FilesATI TechnologiesATI.ACEcli.exe
Crogram FilesVIAudioiSBADeckADeck.exe
Crogram FilesQuickTimeqttask.exe
C:WINDOWSSOUNDMAN.EXE
Crogram FilesWinFastWFTVFMWFWIZ.exe
Crogram FilesJavajre1.5.0_11binjusched.exe
Crogram FilesD-Toolsdaemon.exe
Crogram FilesAntiVir PersonalEdition Classicavgnt.exe
CROGRA~1ALWILS~1Avast4ashDisp.exe
Crogram FilesMessengermsmsgs.exe
C:WINDOWSsystem32ctfmon.exe
Crogram FilesGoogleGoogleToolbarNotifier1.2.1128.5462GoogleToolbarNotifier.exe
Crogram FilesEdgeCAMCamedgecls.exe
Crogram FilesATI TechnologiesATI.ACEcli.exe
Crogram FilesATI TechnologiesATI.ACEcli.exe
Crogram FilesJavajre1.5.0_11binjucheck.exe
Crogram FilesAlwil SoftwareAvast4ashMaiSv.exe
Crogram FilesAlwil SoftwareAvast4ashWebSv.exe
Crogram FilesAlwil SoftwareAvast4ashSimpl.exe
Crogram FilesWinFastWFTVFMWFTV.EXE
Crogram FilesInternet Exploreriexplore.exe
Crogram FilesAntiVir PersonalEdition Classicavcenter.exe
C:totalcmdTOTALCMD.EXE
c:FilmyKasowanie wirusaHijackThis.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ĺącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - Crogram FilesAdobeAcrobat 5.0 CEReaderActiveXAcroIEHelper.ocx
O2 - BHO: (no name) - {73364D99-1240-4dff-B12A-67E448373148} - C:WINDOWSsystem32ipv6mons.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - Crogram FilesJavajre1.5.0_11binssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar3.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar3.dll
O4 - HKLM..Run: [ATICCC]"Crogram FilesATI TechnologiesATI.ACEcli.exe" runtime -Delay
O4 - HKLM..Run: [NeroFilterCheck]C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [AudioDeck]Crogram FilesVIAudioiSBADeckADeck.exe 1
O4 - HKLM..Run: [QuickTime Task]"Crogram FilesQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [SoundMan]SOUNDMAN.EXE
O4 - HKLM..Run: [WinFast Schedule]Crogram FilesWinFastWFTVFMWFWIZ.exe
O4 - HKLM..Run: [SunJavaUpdateSched]"Crogram FilesJavajre1.5.0_11binjusched.exe"
O4 - HKLM..Run: [Ulead Quick-Drop]"Crogram FilesUlead SystemsUlead DVD MovieFactory 4.0 SuiteUlead Quick-Drop 1.0Quick-Drop.exe" WINDOWCALL
O4 - HKLM..Run: [DAEMON Tools-1033]"Crogram FilesD-Toolsdaemon.exe"-lang 1033
O4 - HKLM..Run: [avgnt]"Crogram FilesAntiVir PersonalEdition Classicavgnt.exe" /min
O4 - HKLM..Run: [avast!]CROGRA~1ALWILS~1Avast4ashDisp.exe
O4 - HKCU..Run: [MSMSGS]"Crogram FilesMessengermsmsgs.exe" /background
O4 - HKCU..Run: [NBJ]"Crogram FilesAheadNero BackItUpNBJ.exe"
O4 - HKCU..Run: [ctfmon.exe]C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [swg]Crogram FilesGoogleGoogleToolbarNotifier1.2.1128.5462GoogleToolbarNotifier.exe
O4 - Startup: Ubisoft register.lnk = Crogram FilesUbisoftRegisterschedule.exe
O4 - Global Startup: EdgeCLS11.50.lnk = Crogram FilesEdgeCAMCamedgecls.exe
O4 - Global Startup: Microsoft Office.lnk = Crogram FilesMicrosoft OfficeOffice10OSA.EXE
O4 - Global Startup: Przyspieszenie uruchomienia programu AutoCAD.lnk = Crogram FilesCommon FilesAutodesk Sharedacstart16.exe
O8 - Extra context menu item: E&ksport do programu Microsoft Excel -rogram FilesJavajre1.5.0_11binssv.dll
O9 - Extra ''Tools'' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Crogram FilesJavajre1.5.0_11binssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - Crogram FilesMessengermsmsgs.exe
O9 - Extra ''Tools'' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - Crogram FilesMessengermsmsgs.exe
O18 - Protocol: pcl - {182D0C85-206F-4103-B4FA-DCC1FB0A0A44} - Crogram FilesAutodeskInventor Professional 9binHSPCLPRO10.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - Crogram FilesAntiVir PersonalEdition Classicsched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - Crogram FilesAntiVir PersonalEdition Classicavguard.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - Crogram FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:WINDOWSsystem32Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:WINDOWSsystem32ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - Crogram FilesCommon FilesAutodesk SharedServiceAdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - Crogram FilesAlwil SoftwareAvast4ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - Crogram FilesAlwil SoftwareAvast4ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - Crogram FilesAlwil SoftwareAvast4ashWebSv.exe" /service (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - Crogram FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - Crogram FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe[/code:1]
[code:1] Logfile of HijackThis v1.99.1
Scan saved at 19:07:43, on 2007-06-26
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C
rogram FilesAlwil SoftwareAvast4aswUpdSv.exeC
rogram FilesAlwil SoftwareAvast4ashServ.exeC:WINDOWSsystem32spoolsv.exe
C
rogram FilesAntiVir PersonalEdition Classicavguard.exeC
rogram FilesAntiVir PersonalEdition Classicsched.exeC
rogram FilesCommon FilesMicrosoft SharedVS7Debugmdm.exeC:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSExplorer.EXE
C
rogram FilesATI TechnologiesATI.ACEcli.exeC
rogram FilesVIAudioiSBADeckADeck.exeC
rogram FilesQuickTimeqttask.exeC:WINDOWSSOUNDMAN.EXE
C
rogram FilesWinFastWFTVFMWFWIZ.exeC
rogram FilesJavajre1.5.0_11binjusched.exeC
rogram FilesD-Toolsdaemon.exeC
rogram FilesAntiVir PersonalEdition Classicavgnt.exeC
ROGRA~1ALWILS~1Avast4ashDisp.exeC
rogram FilesMessengermsmsgs.exeC:WINDOWSsystem32ctfmon.exe
C
rogram FilesGoogleGoogleToolbarNotifier1.2.1128.5462GoogleToolbarNotifier.exeC
rogram FilesEdgeCAMCamedgecls.exeC
rogram FilesATI TechnologiesATI.ACEcli.exeC
rogram FilesATI TechnologiesATI.ACEcli.exeC
rogram FilesJavajre1.5.0_11binjucheck.exeC
rogram FilesAlwil SoftwareAvast4ashMaiSv.exeC
rogram FilesAlwil SoftwareAvast4ashWebSv.exeC
rogram FilesAlwil SoftwareAvast4ashSimpl.exeC
rogram FilesWinFastWFTVFMWFTV.EXEC
rogram FilesInternet Exploreriexplore.exeC
rogram FilesAntiVir PersonalEdition Classicavcenter.exeC:totalcmdTOTALCMD.EXE
c:FilmyKasowanie wirusaHijackThis.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ĺącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C
rogram FilesAdobeAcrobat 5.0 CEReaderActiveXAcroIEHelper.ocxO2 - BHO: (no name) - {73364D99-1240-4dff-B12A-67E448373148} - C:WINDOWSsystem32ipv6mons.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C
rogram FilesJavajre1.5.0_11binssv.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar3.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar3.dll
O4 - HKLM..Run: [ATICCC]"C
rogram FilesATI TechnologiesATI.ACEcli.exe" runtime -DelayO4 - HKLM..Run: [NeroFilterCheck]C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [AudioDeck]C
rogram FilesVIAudioiSBADeckADeck.exe 1O4 - HKLM..Run: [QuickTime Task]"C
rogram FilesQuickTimeqttask.exe" -atboottimeO4 - HKLM..Run: [SoundMan]SOUNDMAN.EXE
O4 - HKLM..Run: [WinFast Schedule]C
rogram FilesWinFastWFTVFMWFWIZ.exeO4 - HKLM..Run: [SunJavaUpdateSched]"C
rogram FilesJavajre1.5.0_11binjusched.exe"O4 - HKLM..Run: [Ulead Quick-Drop]"C
rogram FilesUlead SystemsUlead DVD MovieFactory 4.0 SuiteUlead Quick-Drop 1.0Quick-Drop.exe" WINDOWCALLO4 - HKLM..Run: [DAEMON Tools-1033]"C
rogram FilesD-Toolsdaemon.exe"-lang 1033O4 - HKLM..Run: [avgnt]"C
rogram FilesAntiVir PersonalEdition Classicavgnt.exe" /minO4 - HKLM..Run: [avast!]C
ROGRA~1ALWILS~1Avast4ashDisp.exeO4 - HKCU..Run: [MSMSGS]"C
rogram FilesMessengermsmsgs.exe" /backgroundO4 - HKCU..Run: [NBJ]"C
rogram FilesAheadNero BackItUpNBJ.exe"O4 - HKCU..Run: [ctfmon.exe]C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [swg]C
rogram FilesGoogleGoogleToolbarNotifier1.2.1128.5462GoogleToolbarNotifier.exeO4 - Startup: Ubisoft register.lnk = C
rogram FilesUbisoftRegisterschedule.exeO4 - Global Startup: EdgeCLS11.50.lnk = C
rogram FilesEdgeCAMCamedgecls.exeO4 - Global Startup: Microsoft Office.lnk = C
rogram FilesMicrosoft OfficeOffice10OSA.EXEO4 - Global Startup: Przyspieszenie uruchomienia programu AutoCAD.lnk = C
rogram FilesCommon FilesAutodesk Sharedacstart16.exeO8 - Extra context menu item: E&ksport do programu Microsoft Excel -
[Aby zobaczyć linki, zarejestruj się tutaj]
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Crogram FilesJavajre1.5.0_11binssv.dllO9 - Extra ''Tools'' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C
rogram FilesJavajre1.5.0_11binssv.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C
rogram FilesMessengermsmsgs.exeO9 - Extra ''Tools'' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C
rogram FilesMessengermsmsgs.exeO18 - Protocol: pcl - {182D0C85-206F-4103-B4FA-DCC1FB0A0A44} - C
rogram FilesAutodeskInventor Professional 9binHSPCLPRO10.dllO23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C
rogram FilesAntiVir PersonalEdition Classicsched.exeO23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C
rogram FilesAntiVir PersonalEdition Classicavguard.exeO23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C
rogram FilesAlwil SoftwareAvast4aswUpdSv.exeO23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:WINDOWSsystem32Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:WINDOWSsystem32ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C
rogram FilesCommon FilesAutodesk SharedServiceAdskScSrv.exeO23 - Service: avast! Antivirus - ALWIL Software - C
rogram FilesAlwil SoftwareAvast4ashServ.exeO23 - Service: avast! Mail Scanner - Unknown owner - C
rogram FilesAlwil SoftwareAvast4ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C
rogram FilesAlwil SoftwareAvast4ashWebSv.exe" /service (file missing)O23 - Service: Google Updater Service (gusvc) - Google - C
rogram FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C
rogram FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe[/code:1]