27.11.2008, 10:51
Witam ostatnio zauważyłem że w moim logu pojawiły się dziwne wpisy których nie miałem wcześniej
Cytat: Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:40:59, on 2008-11-24
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\System32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRAMY\CfosSpeed\spd.exe
C:\PROGRAMY\NOD 32 AV\ekrn.exe
C:\PROGRAMY\Q Q CACHE\OOCCSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ATK0100\HControl.exe
C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe
C:\Program Files\ZTE Corporation\ZXDSL852\CnslTb.exe
C:\PROGRAMY\CfosSpeed\cFosSpeed.exe
C:\PROGRAMY\AD MUNCHER\AdMunch.exe
C:\PROGRAMY\NOD 32 AV\egui.exe
C:\PROGRAMY\AutoConnect\AutoConnect.exe
C:\PROGRAMY\MINIMEM\minimem1.2.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRAMY\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =[Aby zobaczyć linki, zarejestruj się tutaj]
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =[Aby zobaczyć linki, zarejestruj się tutaj]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\PROGRAMY\JAVA\bin\ssv.dll
O4 - HKLM\..\Run: [HControl]"C:\WINDOWS\ATK0100\HControl.exe"
O4 - HKLM\..\Run: [Power_Gear]"C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe" 1
O4 - HKLM\..\Run: [Cn
O4 - HKLM\..\Run: [cFosSpeed]"C:\PROGRAMY\CfosSpeed\cFosSpeed.exe"
O4 - HKLM\..\Run: [Ad Muncher]"C:\PROGRAMY\AD MUNCHER\AdMunch.exe" /bt
O4 - HKLM\..\Run: [egui]"C:\PROGRAMY\NOD 32 AV\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [AutoConnect]"C:\PROGRAMY\AutoConnect\AutoConnect.exe"
O4 - HKCU\..\Run: [Minimem]C:\PROGRAMY\MINIMEM\minimem1.2.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRAMY\JAVA\bin\npjpi150_15.dll
O9 - Extra ''Tools'' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRAMY\JAVA\bin\npjpi150_15.dll
O9 - Extra button: Statystyki ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra ''Tools'' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{96859E1B-FC9D-4002-91C9-0CC9F47FD79E}: NameServer = 194.204.159.1 217.98.63.164
O23 - Service: cFosSpeed System Service (cFosSpeedS) - cFos Software GmbH - C:\PROGRAMY\CfosSpeed\spd.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\PROGRAMY\NOD 32 AV\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\PROGRAMY\NOD 32 AV\ekrn.exe
O23 - Service: O&O CleverCache Pro (OOCleverCache) - O&O Software GmbH - C:\PROGRAMY\Q Q CACHE\OOCCSVC.exe
--
End of file - 3688 bytes
dokładnie chodzi mi o te wpisy
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
kasować czy zostawić?
