Elektroda.pl
Elektroda.pl
X
Proszę, dodaj wyjątek www.elektroda.pl do Adblock.
Dzięki temu, że oglądasz reklamy, wspierasz portal i użytkowników.

Bardzo proszę o sprawdzenie. Jak najszybciej!!! I pomoc !!

snyk 10 Paź 2005 18:49 1111 2
  • #1 10 Paź 2005 18:49
    snyk
    Poziom 9  

    Logfile of HijackThis v1.99.1
    Scan saved at 20:06:17, on 2005-10-09
    Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\SYSTEM32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\SYSTEM32\Ati2evxx.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Creative\SBAudigy LS\Surround Mixer\CTSysVol.exe
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\Winamp\winampa.exe
    C:\Program Files\Media Gateway\MediaGateway.exe
    C:\Program Files\Gadu-Gadu\gg.exe
    C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
    C:\Program Files\HotKey\HotKey.exe
    C:\Program Files\InterVideo\Common\bin\WinCinemaMgr.exe
    C:\Program Files\OpenOffice.org1.1.4\program\soffice.exe
    C:\WINDOWS\System32\CTsvcCDA.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
    C:\WINDOWS\System32\tcpsvcs.exe
    C:\WINDOWS\System32\snmp.exe
    C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Winamp\winamp.exe
    C:\WINDOWS\System32\dllhost.exe
    C:\Program Files\FlashGet\flashget.exe
    C:\Documents and Settings\Grzegorz\Pulpit\Programy\Nowy folder\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
    R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
    F2 - REG:system.ini: Shell=explorer.exe "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe"
    O1 - Hosts: 127.0.0.4 n-glx.s-redirect.com
    O1 - Hosts: 127.0.0.4 x.full-tgp.net
    O1 - Hosts: 127.0.0.4 counter.sexmaniack.com
    O1 - Hosts: 127.0.0.4 autoescrowpay.com
    O1 - Hosts: 127.0.0.4 www.autoescrowpay.com
    O1 - Hosts: 127.0.0.4 www.awmdabest.com
    O1 - Hosts: 127.0.0.4 www.sexfiles.nu
    O1 - Hosts: 127.0.0.4 awmdabest.com
    O1 - Hosts: 127.0.0.4 sexfiles.nu
    O1 - Hosts: 127.0.0.4 allforadult.com




    O1 - Hosts: 127.0.0.4 www.allforadult.com
    O1 - Hosts: 127.0.0.4 www.iframe.biz
    O1 - Hosts: 127.0.0.4 iframe.biz
    O1 - Hosts: 127.0.0.4 www.newiframe.biz
    O1 - Hosts: 127.0.0.4 newiframe.biz
    O1 - Hosts: 127.0.0.4 www.vesbiz.biz
    O1 - Hosts: 127.0.0.4 vesbiz.biz
    O1 - Hosts: 127.0.0.4 www.pizdato.biz
    O1 - Hosts: 127.0.0.4 pizdato.biz
    O1 - Hosts: 127.0.0.4 www.aaasexypics.com
    O1 - Hosts: 127.0.0.4 aaasexypics.com
    O1 - Hosts: 127.0.0.4 www.virgin-tgp.net
    O1 - Hosts: 127.0.0.4 virgin-tgp.net
    O1 - Hosts: 127.0.0.4 www.awmcash.biz
    O1 - Hosts: 127.0.0.4 awmcash.biz
    O1 - Hosts: 127.0.0.4 buldog-stats.com
    O1 - Hosts: 127.0.0.4 www.buldog-stats.com
    O1 - Hosts: 127.0.0.4 fregat.drocherway.com
    O1 - Hosts: 127.0.0.4 slutmania.biz
    O1 - Hosts: 127.0.0.4 www.slutmania.biz
    O1 - Hosts: 127.0.0.4 toolbarpartner.com
    O1 - Hosts: 127.0.0.4 www.toolbarpartner.com
    O1 - Hosts: 127.0.0.4 www.megapornix.com
    O1 - Hosts: 127.0.0.4 megapornix.com
    O1 - Hosts: 127.0.0.4 www.sp2fucked.biz
    O1 - Hosts: 127.0.0.4 sp2fucked.biz
    O1 - Hosts: 127.0.0.4 greg-tut.com
    O1 - Hosts: 127.0.0.4 www.greg-tut.com
    O1 - Hosts: 127.0.0.4 nylonsexy.com
    O1 - Hosts: 127.0.0.4 www.nylonsexy.com
    O1 - Hosts: 127.0.0.4 vparivalka.com
    O1 - Hosts: 127.0.0.4 www.vparivalka.com
    O1 - Hosts: 127.0.0.4 iframeprofit.com
    O1 - Hosts: 127.0.0.4 www.iframeprofit.com
    O1 - Hosts: 127.0.0.4 topsearch10.com
    O1 - Hosts: 127.0.0.4 www.topsearch10.com
    O1 - Hosts: 127.0.0.4 statscash.biz
    O1 - Hosts: 127.0.0.4 www.statscash.biz
    O1 - Hosts: 127.0.0.4 vxiframe.biz
    O1 - Hosts: 127.0.0.4 www.vxiframe.biz
    O1 - Hosts: 127.0.0.4 crazy-toolbar.com
    O1 - Hosts: 127.0.0.4 www.crazy-toolbar.com
    O1 - Hosts: 127.0.0.4 topcash.biz
    O1 - Hosts: 127.0.0.4 www.topcash.biz
    O1 - Hosts: 127.0.0.4 loadcash.biz
    O1 - Hosts: 127.0.0.4 www.loadcash.biz
    O1 - Hosts: 127.0.0.4 txiframe.biz
    O1 - Hosts: 127.0.0.4 www.txiframe.biz
    O1 - Hosts: 127.0.0.4 procounter.biz
    O1 - Hosts: 127.0.0.4 www.procounter.biz
    O1 - Hosts: 127.0.0.4 advadmin.biz
    O1 - Hosts: 127.0.0.4 www.advadmin.biz
    O1 - Hosts: 127.0.0.4 trafficbest.net
    O1 - Hosts: 127.0.0.4 www.trafficbest.net
    O1 - Hosts: 127.0.0.4 besthvac.com
    O1 - Hosts: 127.0.0.4 www.besthvac.com
    O1 - Hosts: 127.0.0.4 traff4.com
    O1 - Hosts: 127.0.0.4 www.traff4.com
    O1 - Hosts: 127.0.0.4 ambush-script.com
    O1 - Hosts: 127.0.0.4 www.ambush-script.com
    O1 - Hosts: 127.0.0.4 beehappyy.biz
    O1 - Hosts: 127.0.0.4 www.beehappyy.biz
    O1 - Hosts: 127.0.0.4 tracktraff.cc
    O1 - Hosts: 127.0.0.4 www.tracktraff.cc
    O1 - Hosts: 127.0.0.4 allcount.net
    O1 - Hosts: 127.0.0.4 www.allcount.net
    O1 - Hosts: 127.0.0.4 onedayoffer.biz
    O1 - Hosts: 127.0.0.4 www.onedayoffer.biz
    O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll (file missing)
    O2 - BHO: Peer2Mail Toolbar Helper - {4FB971C4-99FB-480d-BA3F-55B8263010FB} - C:\Program Files\Peer2Mail Toolbar\v2.0.0.0\Peer2Mail_Toolbar.dll (file missing)
    O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Peer2Mail Toolbar - {43F2A7F9-06F6-48a5-B0DC-8530BF29CE66} - C:\Program Files\Peer2Mail Toolbar\v2.0.0.0\Peer2Mail_Toolbar.dll (file missing)
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy LS\Surround Mixer\CTSysVol.exe /r
    O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [Media Gateway] C:\Program Files\Media Gateway\MediaGateway.exe
    O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
    O4 - HKLM\..\Run: [PayTime] C:\WINDOWS\System32\paytime.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
    O4 - HKCU\..\Run: [PayTime] C:\WINDOWS\System32\paytime.exe
    O4 - HKCU\..\Run: [Shell] "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe"
    O4 - Startup: OpenOffice.org 1.1.2.lnk = C:\Program Files\OpenOffice.org1.1.2\program\jvmsetup.exe
    O4 - Startup: OpenOffice.org 1.1.4.lnk = C:\Program Files\OpenOffice.org1.1.4\program\quickstart.exe
    O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
    O4 - Global Startup: HotKey Driver.lnk = C:\Program Files\HotKey\HotKey.exe
    O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\bin\WinCinemaMgr.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
    O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
    O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
    O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
    O8 - Extra context menu item: Ściągnij przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_link.htm
    O8 - Extra context menu item: Ściągnij wszystko przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_all.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
    O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
    O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
    O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/180solutions/ie/Bridge-c139.cab
    O16 - DPF: {99410CDE-6F16-42ce-9D49-3807F78F0287} (ClientInstaller Class) - http://www.180searchassistant.com/180saax.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{DCDD1434-26B1-46E2-89DA-8A24B23BDF1E}: NameServer = 194.204.159.1,192.168.4.1
    O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
    O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\SYSTEM32\GEARSEC.EXE
    O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
    O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
    O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
    O23 - Service: Power Manager (PowerManager) - Unknown owner - C:\WINDOWS\svchost.exe
    O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    O23 - Service: WPEServ - Unknown owner - C:\Program Files\Common Files\WPE\wpeserv.exe

    Code:
    Cytat:
    Code:
    [list=][/list]


    Dodano po 24 [minuty]:

    co usunąc by naprawic błąd??

    0 2
  • Pomocny post
    #2 10 Paź 2005 18:59
    hicat
    Poziom 30  

    System do aktualizacji, lub sam Internet Explorer do usunięcia:
    R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
    F2 - REG:system.ini: Shell=explorer.exe "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe"
    O1 - Hosts: 127.0.0.4 n-glx.s-redirect.com
    O1 - Hosts: 127.0.0.4 x.full-tgp.net
    O1 - Hosts: 127.0.0.4 counter.sexmaniack.com
    O1 - Hosts: 127.0.0.4 autoescrowpay.com
    O1 - Hosts: 127.0.0.4 www.autoescrowpay.com
    O1 - Hosts: 127.0.0.4 www.awmdabest.com
    O1 - Hosts: 127.0.0.4 www.sexfiles.nu
    O1 - Hosts: 127.0.0.4 awmdabest.com
    O1 - Hosts: 127.0.0.4 sexfiles.nu
    O1 - Hosts: 127.0.0.4 allforadult.com
    O1 - Hosts: 127.0.0.4 www.allforadult.com
    O1 - Hosts: 127.0.0.4 www.iframe.biz
    O1 - Hosts: 127.0.0.4 iframe.biz
    O1 - Hosts: 127.0.0.4 www.newiframe.biz
    O1 - Hosts: 127.0.0.4 newiframe.biz
    O1 - Hosts: 127.0.0.4 www.vesbiz.biz
    O1 - Hosts: 127.0.0.4 vesbiz.biz
    O1 - Hosts: 127.0.0.4 www.pizdato.biz
    O1 - Hosts: 127.0.0.4 pizdato.biz
    O1 - Hosts: 127.0.0.4 www.aaasexypics.com
    O1 - Hosts: 127.0.0.4 aaasexypics.com
    01 - Hosts: 127.0.0.4 www.virgin-tgp.net
    O1 - Hosts: 127.0.0.4 virgin-tgp.net
    O1 - Hosts: 127.0.0.4 www.awmcash.biz
    O1 - Hosts: 127.0.0.4 awmcash.biz
    O1 - Hosts: 127.0.0.4 buldog-stats.com
    O1 - Hosts: 127.0.0.4 www.buldog-stats.com
    O1 - Hosts: 127.0.0.4 fregat.drocherway.com
    O1 - Hosts: 127.0.0.4 www.slutmania.biz
    O1 - Hosts: 127.0.0.4 toolbarpartner.com
    O1 - Hosts: 127.0.0.4 www.toolbarpartner.com
    O1 - Hosts: 127.0.0.4 www.megapornix.com
    O1 - Hosts: 127.0.0.4 www.(chcę bana).biz
    O1 - Hosts: 127.0.0.4 (chcę bana).biz
    O1 - Hosts: 127.0.0.4 greg-tut.com!
    O1 - Hosts: 127.0.0.4 www.greg-tut.com
    O1 - Hosts: 127.0.0.4 nylonsexy.com
    O1 - Hosts: 127.0.0.4 www.nylonsexy.com
    O1 - Hosts: 127.0.0.4 vparivalka.com
    O1 - Hosts: 127.0.0.4 www.vparivalka.com
    O1 - Hosts: 127.0.0.4 iframeprofit.com
    O1 - Hosts: 127.0.0.4 www.iframeprofit.com
    O1 - Hosts: 127.0.0.4 www.topsearch10.com
    O1 - Hosts: 127.0.0.4 statscash.biz
    O1 - Hosts: 127.0.0.4 www.statscash.biz
    O1 - Hosts: 127.0.0.4 vxiframe.biz
    O1 - Hosts: 127.0.0.4 www.vxiframe.biz
    O1 - Hosts: 127.0.0.4 crazy-toolbar.com
    O1 - Hosts: 127.0.0.4 www.crazy-toolbar.com
    O1 - Hosts: 127.0.0.4 topcash.biz
    O1 - Hosts: 127.0.0.4 www.topcash.biz
    O1 - Hosts: 127.0.0.4 loadcash.biz
    O1 - Hosts: 127.0.0.4 www.loadcash.biz
    O1 - Hosts: 127.0.0.4 www.txiframe.biz
    O1 - Hosts: 127.0.0.4 www.procounter.biz
    O1 - Hosts: 127.0.0.4 advadmin.biz
    O1 - Hosts: 127.0.0.4 trafficbest.net
    O1 - Hosts: 127.0.0.4 www.trafficbest.net
    O1 - Hosts: 127.0.0.4 besthvac.com
    O1 - Hosts: 127.0.0.4 www.besthvac.com
    O1 - Hosts: 127.0.0.4 traff4.com
    O1 - Hosts: 127.0.0.4 www.traff4.com
    O1 - Hosts: 127.0.0.4 ambush-script.com
    O1 - Hosts: 127.0.0.4 www.ambush-script.com
    O1 - Hosts: 127.0.0.4 www.beehappyy.biz
    O1 - Hosts: 127.0.0.4 tracktraff.cc
    O1 - Hosts: 127.0.0.4 www.tracktraff.cc
    O1 - Hosts: 127.0.0.4 allcount.net
    O1 - Hosts: 127.0.0.4 www.allcount.net
    O1 - Hosts: 127.0.0.4 onedayoffer.biz
    O1 - Hosts: 127.0.0.4 www.onedayoffer.biz
    O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll
    O2 - BHO: Peer2Mail Toolbar Helper - {4FB971C4-99FB-480d-BA3F-55B8263010FB} - C:\Program Files\Peer2Mail Toolbar\v2.0.0.0\Peer2Mail_Toolbar.dll (file missing)
    O3 - Toolbar: Peer2Mail Toolbar - {43F2A7F9-06F6-48a5-B0DC-8530BF29CE66} - C:\Program Files\Peer2Mail Toolbar\v2.0.0.0\Peer2Mail_Toolbar.dll (file missing)
    O4 - HKCU\..\Run: [PayTime] C:\WINDOWS\System32\paytime.exe
    O4 - HKCU\..\Run: [Shell] "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe"
    O16 - DPF: {99410CDE-6F16-42ce-9D49-3807F78F0287} (ClientInstaller Class) - http://www.180searchassistant.com/180saax.cab
    O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/180solutions/ie/Bridge-c139.cab
    O23 - Service: WPEServ - Unknown owner - C:\Program Files\Common Files\WPE\wpeserv.exe

    Poczekaj jeszcze na analizę kolegi Kolobosa i na przyszłość radze odwiedzać mniej stron pornograficznych.
    Aha i przeskanuj system Microsoft AntiSpyware

    0
  • Pomocny post
    #3 10 Paź 2005 18:59
    md
    Poziom 39  

    Nie dużo, tylko to :) :

    C:\Program Files\Media Gateway\MediaGateway.exe
    R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
    F2 - REG:system.ini: Shell=explorer.exe "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe"
    O1 - Hosts: 127.0.0.4 n-glx.s-redirect.com
    O1 - Hosts: 127.0.0.4 x.full-tgp.net
    O1 - Hosts: 127.0.0.4 counter.sexmaniack.com
    O1 - Hosts: 127.0.0.4 autoescrowpay.com
    O1 - Hosts: 127.0.0.4 www.autoescrowpay.com
    O1 - Hosts: 127.0.0.4 www.awmdabest.com
    O1 - Hosts: 127.0.0.4 www.sexfiles.nu
    O1 - Hosts: 127.0.0.4 awmdabest.com
    O1 - Hosts: 127.0.0.4 sexfiles.nu
    O1 - Hosts: 127.0.0.4 allforadult.com
    O1 - Hosts: 127.0.0.4 www.allforadult.com
    O1 - Hosts: 127.0.0.4 www.iframe.biz
    O1 - Hosts: 127.0.0.4 iframe.biz
    O1 - Hosts: 127.0.0.4 www.newiframe.biz
    O1 - Hosts: 127.0.0.4 newiframe.biz
    O1 - Hosts: 127.0.0.4 www.vesbiz.biz
    O1 - Hosts: 127.0.0.4 vesbiz.biz
    O1 - Hosts: 127.0.0.4 www.pizdato.biz
    O1 - Hosts: 127.0.0.4 pizdato.biz
    O1 - Hosts: 127.0.0.4 www.aaasexypics.com
    O1 - Hosts: 127.0.0.4 aaasexypics.com
    O1 - Hosts: 127.0.0.4 www.virgin-tgp.net
    O1 - Hosts: 127.0.0.4 virgin-tgp.net
    O1 - Hosts: 127.0.0.4 www.awmcash.biz
    O1 - Hosts: 127.0.0.4 awmcash.biz
    O1 - Hosts: 127.0.0.4 buldog-stats.com
    O1 - Hosts: 127.0.0.4 www.buldog-stats.com
    O1 - Hosts: 127.0.0.4 fregat.drocherway.com
    O1 - Hosts: 127.0.0.4 slutmania.biz
    O1 - Hosts: 127.0.0.4 www.slutmania.biz
    O1 - Hosts: 127.0.0.4 toolbarpartner.com
    O1 - Hosts: 127.0.0.4 www.toolbarpartner.com
    O1 - Hosts: 127.0.0.4 www.megapornix.com
    O1 - Hosts: 127.0.0.4 megapornix.com
    O1 - Hosts: 127.0.0.4 www.(chcę bana).biz
    O1 - Hosts: 127.0.0.4 (chcę bana).biz
    O1 - Hosts: 127.0.0.4 greg-tut.com
    O1 - Hosts: 127.0.0.4 www.greg-tut.com
    O1 - Hosts: 127.0.0.4 nylonsexy.com
    O1 - Hosts: 127.0.0.4 www.nylonsexy.com
    O1 - Hosts: 127.0.0.4 vparivalka.com
    O1 - Hosts: 127.0.0.4 www.vparivalka.com
    O1 - Hosts: 127.0.0.4 iframeprofit.com
    O1 - Hosts: 127.0.0.4 www.iframeprofit.com
    O1 - Hosts: 127.0.0.4 topsearch10.com
    O1 - Hosts: 127.0.0.4 www.topsearch10.com
    O1 - Hosts: 127.0.0.4 statscash.biz
    O1 - Hosts: 127.0.0.4 www.statscash.biz
    O1 - Hosts: 127.0.0.4 vxiframe.biz
    O1 - Hosts: 127.0.0.4 www.vxiframe.biz
    O1 - Hosts: 127.0.0.4 crazy-toolbar.com
    O1 - Hosts: 127.0.0.4 www.crazy-toolbar.com
    O1 - Hosts: 127.0.0.4 topcash.biz
    O1 - Hosts: 127.0.0.4 www.topcash.biz
    O1 - Hosts: 127.0.0.4 loadcash.biz
    O1 - Hosts: 127.0.0.4 www.loadcash.biz
    O1 - Hosts: 127.0.0.4 txiframe.biz
    O1 - Hosts: 127.0.0.4 www.txiframe.biz
    O1 - Hosts: 127.0.0.4 procounter.biz
    O1 - Hosts: 127.0.0.4 www.procounter.biz
    O1 - Hosts: 127.0.0.4 advadmin.biz
    O1 - Hosts: 127.0.0.4 www.advadmin.biz
    O1 - Hosts: 127.0.0.4 trafficbest.net
    O1 - Hosts: 127.0.0.4 www.trafficbest.net
    O1 - Hosts: 127.0.0.4 besthvac.com
    O1 - Hosts: 127.0.0.4 www.besthvac.com
    O1 - Hosts: 127.0.0.4 traff4.com
    O1 - Hosts: 127.0.0.4 www.traff4.com
    O1 - Hosts: 127.0.0.4 ambush-script.com
    O1 - Hosts: 127.0.0.4 www.ambush-script.com
    O1 - Hosts: 127.0.0.4 beehappyy.biz
    O1 - Hosts: 127.0.0.4 www.beehappyy.biz
    O1 - Hosts: 127.0.0.4 tracktraff.cc
    O1 - Hosts: 127.0.0.4 www.tracktraff.cc
    O1 - Hosts: 127.0.0.4 allcount.net
    O1 - Hosts: 127.0.0.4 www.allcount.net
    O1 - Hosts: 127.0.0.4 onedayoffer.biz
    O1 - Hosts: 127.0.0.4 www.onedayoffer.biz
    O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll (file missing)
    O2 - BHO: Peer2Mail Toolbar Helper - {4FB971C4-99FB-480d-BA3F-55B8263010FB} - C:\Program Files\Peer2Mail Toolbar\v2.0.0.0\Peer2Mail_Toolbar.dll (file missing)
    O3 - Toolbar: Peer2Mail Toolbar - {43F2A7F9-06F6-48a5-B0DC-8530BF29CE66} - C:\Program Files\Peer2Mail Toolbar\v2.0.0.0\Peer2Mail_Toolbar.dll (file missing)
    O4 - HKLM\..\Run: [Media Gateway] C:\Program Files\Media Gateway\MediaGateway.exe
    O4 - HKLM\..\Run: [PayTime] C:\WINDOWS\System32\paytime.exe
    O4 - HKCU\..\Run: [PayTime] C:\WINDOWS\System32\paytime.exe
    O4 - HKCU\..\Run: [Shell] "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe"
    O4 - Startup: OpenOffice.org 1.1.2.lnk = C:\Program Files\OpenOffice.org1.1.2\program\jvmsetup.exe
    O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/180solutions/ie/Bridge-c139.cab
    O16 - DPF: {99410CDE-6F16-42ce-9D49-3807F78F0287} (ClientInstaller Class) - http://www.180searchassistant.com/180saax.cab
    O23 - Service: WPEServ - Unknown owner - C:\Program Files\Common Files\WPE\wpeserv.exe

    0