FAQ | Points | Add... | Recent posts | Search | Register | Log in


wpisy z hijacka
Search:  
Post new topic  Reply to topic      Main Page -> Forum Index -> Computer Service -> Computer Software -> wpisy z hijacka
Author
Message
Martek
Poziom 13
Poziom 13


Joined: 28 Feb 2004
Posts: 124
Location: Chełm
Post#1 Post from the author of the topic 02 Nov 2004 18:36   

wpisy z hijacka
Czy może się ktoś odnieść do poniższych wpisów.
Dzięki
Logfile of HijackThis v1.98.2
Scan saved at 17:24:33, on 2004-11-02
Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVPersonal\AVGUARD.EXE
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\AVPersonal\AVGNT.EXE
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Wanadoo\EspaceWanadoo.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\Program Files\Wanadoo\Watch.exe
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\WinAce\WinAce.exe
C:\DOCUME~1\Julka\USTAWI~1\Temp\~AceTemp\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ycomp_wave/defaults/sb/*http://www.yahoo.com/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ycomp_wave/defaults/sp/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.foxkids.pl/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ycomp_wave/defaults/su/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O4 - HKLM\..\Run: [AVGCtrl] "C:\Program Files\AVPersonal\AVGNT.EXE" /min
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
Back to top
   
Google

Google Adsense
Post# Post from the author of the topic 02 Nov 2004 18:36   



Back to top
   
Kolobos
Poziom 26
Poziom 26


Joined: 13 Jun 2003
Posts: 27310
Location: Warszawa
Post#2 02 Nov 2004 19:01   

wpisy z hijacka
Wszystko wyglada chyba ok, osbiscie wywalilbym ta zbedna aplikacje dolaczona do neostrady, ktora jest w ogole nie potrzebna i ustawil wszystko bez niej :-)
Back to top
   
Google

Google Adsense
Post# 02 Nov 2004 19:01   



Back to top
   
jannaszek
Poziom 24
Poziom 24


Joined: 01 Jun 2003
Posts: 5818
Location: kraków
Post#3 02 Nov 2004 21:24   

wpisy z hijacka
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ycomp_wave/defaults/sb/*http://www.y
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ycomp_wave/defaults/sp/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.foxkids.pl/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ycomp_wave/defaults/su/*http://www.yahoo.c
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.oc
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
to bym wywalił w ciemno
Back to top
   
Post new topic  Reply to topic      Main Page -> Forum Index -> Computer Service -> Computer Software -> wpisy z hijacka
Page 1 of 1
Similar topics
Podejrzewam wirusa-proszę o sprawdzenie loga z hijacka (7)
Prosze o sprawdzenie logow z HiJacka i ComboFix-a (3)
Prośba o rzut okiem na log z hijacka (7)
Log z Hijacka mojej Kolezanki (3)
sprawdzenie logu z hijacka. Prosze. (4)
Log z Hijacka (10)
log z hijacka:(( (22)
wpisy z hijacka (2)
Komputer się zawiesza, proszę o sprawdzenie logu z Hijacka (4)
Trojan (logi hijacka) - jak usunąć? - proszę o rady (23)

Page generation time: 0.091 seconds


FAQ || Administrator || Moderators || Widgets and banners || Contact
elektroda.pl topic RSS feed