Markuss

Szukalem na forum i dokladnie przeczytalem owy temat :] Nic to nie dalo i szczepionka nie pomogla.. Dzieki za pomoc...zaraz wywale owe wpisy i zobaczymy co sie bedzie dzialo... A z ta glowa to ...hehe

:mur: :mur: :mur: :mur: Witam Mam pewien problem.. Zlapalem wirusa o nazwie(bardzo popularnego :) ) rdriv.sys. Wykryl go NOD32 jednak nie moge go wywalic. Oto log do sprawdzenia z Hi Jack'a. Prosze o pomoc Oto log.. Logfile of HijackThis v1.99.1Scan saved at 20:32:53, on 2005-09-19Platform: Windows XP (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 (6.00.2600.0000)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\SYSTEM32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Eset\nod32krn.exeC:\Program Files\Kerio\Personal Firewall\persfw.exeC:\WINDOWS\SYSTEM32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\SOUNDMAN.EXEC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exeC:\Program Files\Eset\nod32kui.exeC:\PROGRA~1\NEOSTR~1\CnxMon.exeC:\PROGRA~1\NEOSTR~1\TaskbarIcon.exeC:\Program Files\D-Tools\daemon.exeC:\WINDOWS\System32\ctfmon.exeC:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exeC:\PROGRA~1\MOZILL~1\FIREFOX.EXEC:\WINDOWS\System32\taskmgr.exeC:\PROGRA~1\NEOSTR~1\NeostradaTP.exeC:\PROGRA~1\NEOSTR~1\ComComp.exeC:\PROGRA~1\NEOSTR~1\Watch.exeC:\Documents and Settings\Markus\Pulpit\hijackthis\HijackThis.exeR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htmR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TPR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = ŁączaR3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLLF2 - REG:system.ini: Shell=explorer.exe O2 - BHO: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\PROGRA~1\TEXTware\QUICKF~1\PlugIns\IEHelp.dllO4 - HKLM\..\Run: [SystemTray] SysTray.ExeO4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [CallControl 4.5] C:\Program Files\FaxTalk Communicator\FTCtrl32.exe /autoloadO4 - HKLM\..\Run: [Microsoft Help System] mshelp32.exeO4 - HKLM\..\Run: [Norton Update] cUpdate.exeO4 - HKLM\..\Run: [AWMON] "C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe"O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICEO4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exeO4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exeO4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exeO4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033O4 - HKLM\..\Run: [AdwareAlert] C:\Program Files\AdwareAlert\AdwareAlert.Exe -bootO4 - HKLM\..\RunServices: [Microsoft Help System] mshelp32.exeO4 - HKLM\..\RunServices: [Norton Update] cUpdate.exeO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exeO4 - HKCU\..\Run: [System Startup] kimochi.exeO4 - HKCU\..\Run: [Window Monitor] winmon32.exeO4 - HKCU\..\Run: [Windows secure] setver32.exeO4 - HKCU\..\Run: [MSN Messanger] msnmsng.exeO4 - HKCU\..\Run: [Microsoft Help System] mshelp32.exeO4 - HKCU\..\RunServices: [Windows Monitor] winmon.exeO4 - HKCU\..\RunServices: [Window Monitor] winmon32.exeO4 - HKCU\..\RunServices: [MSN Messanger] msnmsng.exeO4 - HKCU\..\RunServices: [Microsoft Help System] mshelp32.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEO4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exeO17 - HKLM\System\CCS\Services\Tcpip\..\{D9D9AF7A-8B3C-4FE8-9514-C39E8AEAFF6A}: NameServer = 194.204.159.1 217.98.63.164O18 - Protocol: textwareilluminatorbase - {CE5CD329-1650-414A-8DB0-4CBF72FAED87} - C:\WINDOWS\System32\textwareilluminatorbaseProtocol.dllO23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\SYSTEM32\ati2sgag.exeO23 - Service: NOD32 Kernel Service (NOD32krn) - Unknown owner - C:\Program Files\Eset\nod32krn.exeO23 - Service: Kerio Personal Firewall (PersFw) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall\persfw.exeO23 - Service: RadClock - Unknown owner - C:\WINDOWS\system32\RadClock.exeO23 - Service: sdktemp - Unknown owner - C:\WINDOWS\microsoft.exeO23 - Service: Video Sync Manager (vsync) - Unknown owner - C:\WINDOWS\System32\videosync.exe (file missing)O23 - Service: Windows HWinfo Loader - Unknown owner - C:\WINDOWS\iexplre.exe (file missing)O23 - Service: Windows secure (Windows Safety) - Unknown owner - C:\WINDOWS\System32\setver32.exe" -netsvcs (file missing) Pozdrawiam Mareczek(Placek)