KWARANTANA I CO DALEJ???

[maskodka]

Anty wir wykryl nie dalo sie usunac podlem kwatanie I CO DALEJ???

[Aby zobaczyć linki, zarejestruj się tutaj]

[Zafi]

wyslij plik do analizy a potem skasuj

[Bieniol]

Wrzuć zestaw logów -

[Aby zobaczyć linki, zarejestruj się tutaj]

[maskodka]

Kod:

Logfile of HijackThis v1.99.1
Scan saved at 19:19:17, on 2006-12-19
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesAntiVir PersonalEdition Classicsched.exe
C:Program FilesAntiVir PersonalEdition Classicavguard.exe
C:Program FilesApache GroupApacheApache.exe
C:WINDOWSsystem32lvhidsvc.exe
C:Program FilesNorton SystemWorksNorton UtilitiesNPROTECT.EXE
C:PROGRA~1NORTON~1SPEEDD~1nopdb.exe
C:Program FilesApache GroupApacheApache.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSExplorer.EXE
C:Program FilesAntiVir PersonalEdition Classicavgnt.exe
C:WINDOWSsystem32spooldriversw32x863hpztsb04.exe
C:PROGRA~1PESTPA~1PPControl.exe
C:PROGRA~1PESTPA~1PPMemCheck.exe
C:PROGRA~1PESTPA~1CookiePatrol.exe
C:Program FilesCommon FilesRealUpdate_OBrealsched.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesProgram sieciowy dla SAGEM Wi-Fi 11g USB adapterWLANUTL.exe
D:WojtektelefonBUUUUUCell Phone ManagerIdleMng.exe
D:WojtektelefonBUUUUUCell Phone ManagerMobSvr.exe
D:WojtektelefonBUUUUUCell Phone ManagerPimCap.exe
D:WojtekGGGadu-Gadugg.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FileswincmdWINCMD32.EXE
D:Wojtekfashijackthis.com

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.gazeta.pl/
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 6.0 CEAcrobatActiveXAcroIEHelper.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:Program FilesAdobeAcrobat 6.0 CEAcrobatAcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:Program FilesAdobeAcrobat 6.0 CEAcrobatAcroIEFavClient.dll
O4 - HKLM..Run: [avgnt] "C:Program FilesAntiVir PersonalEdition Classicavgnt.exe" /min
O4 - HKLM..Run: [HPDJ Taskbar Utility] C:WINDOWSsystem32spooldriversw32x863hpztsb04.exe
O4 - HKLM..Run: [PestPatrol Control Center] C:PROGRA~1PESTPA~1PPControl.exe
O4 - HKLM..Run: [PPMemCheck] C:PROGRA~1PESTPA~1PPMemCheck.exe
O4 - HKLM..Run: [CookiePatrol] C:PROGRA~1PESTPA~1CookiePatrol.exe
O4 - HKLM..Run: [TkBellExe] "C:Program FilesCommon FilesRealUpdate_OBrealsched.exe"-osboot
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 - Global Startup: Program sieciowy dla SAGEM Wi-Fi 11g USB adapter.lnk = ?
O8 - Extra context menu item: &ICQ Toolbar Search - res://D:WojtekinstalkiICQICQToolbartoolbaru.dll/SEARCH.HTML
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra ''Tools'' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O12 - Plugin for .pdf: C:Program FilesInternet ExplorerPLUGINSnppdf32.dll
O16 - DPF: {5A09E43F-A0A7-4ABF-AF80-11367CF1DC8F} (MainControl Class) - http://mks.com.pl/skaner/SkanerOnline.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1158693921632
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1165780329653
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:Program FilesAntiVir PersonalEdition Classicsched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:Program FilesAntiVir PersonalEdition Classicavguard.exe
O23 - Service: Apache - Unknown owner - C:Program FilesApache GroupApacheApache.exe" --ntservice (file missing)
O23 - Service: Remote HID Service (LvHidSvc) - Animation Technologies Inc. - C:WINDOWSsystem32lvhidsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:Program FilesNorton SystemWorksNorton UtilitiesNPROTECT.EXE
O23 - Service: Speed Disk service - Symantec Corporation - C:PROGRA~1NORTON~1SPEEDD~1nopdb.exe

[Joan]

D:WojtektelefonBUUUUUCell Phone ManagerIdleMng.exe
D:WojtektelefonBUUUUUCell Phone ManagerMobSvr.exe
D:WojtektelefonBUUUUUCell Phone ManagerPimCap.exe

To jest jakiś Twój progs? Jeśli tak, to log czysty - usuń zawartość kwarantanny

[JarekMk]

D:Wojtek telefon BUUUUU Cell PhoneManager PimCap.exe

[phancy]

D:WojtektelefonBUUUUUCell Phone ManagerIdleMng.exe
D:WojtektelefonBUUUUUCell Phone ManagerMobSvr.exe
D:WojtektelefonBUUUUUCell Phone ManagerPimCap.exe

Nie tykać.