wklejto.pl

Dodane przez: jaro-44 (2009-02-08 11:47) -> text
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
15.
16.
17.
18.
19.
20.
21.
22.
23.
24.
25.
26.
27.
28.
29.
30.
31.
32.
33.
34.
35.
36.
37.
38.
39.
40.
41.
42.
43.
44.
45.
46.
47.
48.
49.
50.
51.
52.
53.
54.
55.
56.
57.
58.
59.
60.
61.
62.
63.
64.
65.
66.
67.
68.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:56:52, on 2009-02-08
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
 
Running processes:
C:\\WINDOWS\\System32\\smss.exe
C:\\WINDOWS\\system32\\winlogon.exe
C:\\WINDOWS\\system32\\services.exe
C:\\WINDOWS\\system32\\lsass.exe
C:\\WINDOWS\\system32\\Ati2evxx.exe
C:\\WINDOWS\\system32\\svchost.exe
C:\\WINDOWS\\System32\\svchost.exe
C:\\WINDOWS\\system32\\Ati2evxx.exe
C:\\WINDOWS\\system32\\spoolsv.exe
C:\\WINDOWS\\Explorer.EXE
C:\\Program Files\\Analog Devices\\SoundMAX\\SMAgent.exe
C:\\Program Files\\Analog Devices\\SoundMAX\\SMax4PNP.exe
C:\\Program Files\\Hewlett-Packard\\OrderReminder\\OrderReminder.exe
C:\\WINDOWS\\system32\\ctfmon.exe
C:\\Program Files\\Gadu-Gadu\\gg.exe
C:\\Program Files\\SUPERAntiSpyware\\SUPERAntiSpyware.exe
C:\\Program Files\\Spybot - Search & Destroy\\TeaTimer.exe
C:\\Program Files\\PLAY ONLINE\\PLAY ONLINE.exe
C:\\Program Files\\Opera\\opera.exe
C:\\DOCUME~1\\aa\\USTAWI~1\\Temp\\winreoam.exe
C:\\DOCUME~1\\aa\\USTAWI~1\\Temp\\oucp.exe
C:\\DOCUME~1\\aa\\USTAWI~1\\Temp\\winnwphrt.exe
C:\\Program Files\\internet explorer\\iexplore.exe
C:\\Program Files\\Trend Micro\\HijackThis\\HijackThis.exe
 
R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\\Program Files\\Adobe\\Acrobat 6.0 CE\\Reader\\ActiveX\\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\\Program Files\\Spybot - Search & Destroy\\SDHelper.dll
O4 - HKLM\\..\\Run: [ATIPTA] C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe
O4 - HKLM\\..\\Run: [SoundMAXPnP] C:\\Program Files\\Analog Devices\\SoundMAX\\SMax4PNP.exe
O4 - HKLM\\..\\Run: [OrderReminder] C:\\Program Files\\Hewlett-Packard\\OrderReminder\\OrderReminder.exe
O4 - HKCU\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\ctfmon.exe
O4 - HKCU\\..\\Run: [Gadu-Gadu] \"C:\\Program Files\\Gadu-Gadu\\gg.exe\" /tray
O4 - HKCU\\..\\Run: [SUPERAntiSpyware] C:\\Program Files\\SUPERAntiSpyware\\SUPERAntiSpyware.exe
O4 - HKCU\\..\\Run: [SpybotSD TeaTimer] C:\\Program Files\\Spybot - Search & Destroy\\TeaTimer.exe
O4 - HKUS\\S-1-5-18\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE (User \'SYSTEM\')
O4 - HKUS\\.DEFAULT\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE (User \'Default user\')
O7 - HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System, DisableRegedit=1
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\\WINDOWS\\system32\\GPhotos.scr/200
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\\Program Files\\Spybot - Search & Destroy\\SDHelper.dll
O9 - Extra \'Tools\' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\\Program Files\\Spybot - Search & Destroy\\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Program Files\\Messenger\\msmsgs.exe
O9 - Extra \'Tools\' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Program Files\\Messenger\\msmsgs.exe
O17 - HKLM\\System\\CCS\\Services\\Tcpip\\..\\{3DBE7E9E-BE13-4EE1-B9E6-A88D62EE2E26}: NameServer = 10.0.0.1
O17 - HKLM\\System\\CCS\\Services\\Tcpip\\..\\{C465466B-6E3E-4D18-8DE1-A13A14D98BDF}: NameServer = 10.0.0.1,194.204.159.1
O17 - HKLM\\System\\CCS\\Services\\Tcpip\\..\\{F7342DD0-FB97-41CA-B3A1-C793996F8726}: NameServer = 89.108.195.20 89.108.195.21
O17 - HKLM\\System\\CS1\\Services\\Tcpip\\..\\{3DBE7E9E-BE13-4EE1-B9E6-A88D62EE2E26}: NameServer = 10.0.0.1
O17 - HKLM\\System\\CS2\\Services\\Tcpip\\..\\{3DBE7E9E-BE13-4EE1-B9E6-A88D62EE2E26}: NameServer = 10.0.0.1
O17 - HKLM\\System\\CS3\\Services\\Tcpip\\..\\{3DBE7E9E-BE13-4EE1-B9E6-A88D62EE2E26}: NameServer = 10.0.0.1
O20 - Winlogon Notify: !SASWinLogon - C:\\Program Files\\SUPERAntiSpyware\\SASWINLO.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\\WINDOWS\\system32\\Ati2evxx.exe
O23 - Service: Crypkey License - Unknown owner - crypserv.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\\Program Files\\Google\\Common\\Google Updater\\GoogleUpdaterService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\\Program Files\\Analog Devices\\SoundMAX\\SMAgent.exe
 
--
End of file - 4663 bytes
 
Wygenerowano w 0.033s, przy pomocy GeSHi 1.0.8
'
Podziel się na Facebook Podziel się na BLIP Podziel się na Twitter Podziel się na Buzz Podziel się na Flaker Dodaj zakładkę Google Podziel się na Delicious Wykop to!

Nowy Komentarz:

Komentarze:

Brak Komentarzy!