Skocz do zawartości
rozz_

Spyware? Pomocy Problem!

Przez rozz_, w Microsoft Windows

Rekomendowane odpowiedzi

rozz_ Newbie

rozz_

Opublikowano
Opublikowano

zlapalem jakies gowno (spyware) i zmienilo mi tapete (niemozna jej zmienic teraz) i zablokowalo prawy przycisk myszki... strone startowa tez mi zmienilo ale z tym sobie poradzilem wiecie jak to mozna naprawic ? uzywalem juz z 4 programow do usuwania spyware adware cos wykrywali usuwalem ale niepomoglo.. Prosze o Pomoc.

 

Dzieki

Pozdrawiam.

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi
Udostępnij na innych stronach
rozz_ Newbie

rozz_

Opublikowano
Opublikowano

Logfile of Browser Hijack Recover(BHR) v1.01

http://www.browser-hijack.com/

Log created on 2005-03-20 12:45:30

Microsoft Windows 2000 Professional Service Pack 4 (Build 2195)

Internet Explorer v6.0.2800.1106 Update Versions: ;SP1;

 

[Process Manager] - [Process]

C:\WINNT\System32\smss.exe

C:\WINNT\system32\csrss.exe

C:\WINNT\system32\winlogon.exe

C:\WINNT\system32\services.exe

C:\WINNT\system32\lsass.exe

C:\WINNT\system32\svchost.exe

C:\WINNT\system32\spoolsv.exe

C:\Program Files\AVPersonal\AVGUARD.EXE

C:\Program Files\AVPersonal\AVWUPSRV.EXE

C:\WINNT\System32\svchost.exe

C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe

C:\WINNT\system32\regsvc.exe

C:\WINNT\system32\MSTask.exe

C:\WINNT\System32\WBEM\WinMgmt.exe

C:\WINNT\system32\svchost.exe

C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe

C:\WINNT\Explorer.EXE

C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe

C:\Program Files\Winamp\winampa.exe

C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe

C:\Program Files\D-Tools\daemon.exe

C:\Program Files\AVPersonal\AVGNT.EXE

C:\WINNT\system32\internat.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Gadu-Gadu\gg.exe

C:\Program Files\SpeedFan\speedfan.exe

C:\WINNT\system32\taskmgr.exe

C:\Program Files\Browser Hijack Recover\bhr.exe

 

[Process Manager] - [NT Services]

Service Name: Sterownik Microsoft ACPI - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\ACPI.sys

Service Name: Środowisko obsługi sieci AFD - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\drivers\afd.sys

Service Name: AFS2k - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path:

Service Name: AntiVir Service - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\Program Files\AVPersonal\AVGUARD.EXE

Service Name: Standardowy kontroler dysku twardego IDE/ESDI - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\atapi.sys

Service Name: avgntdw - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\Program Files\AVPersonal\AVGNTDW.SYS

Service Name: AntiVir Update - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\Program Files\AVPersonal\AVWUPSRV.EXE

Service Name: Beep - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path:

Service Name: Przeglądarka komputera - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\services.exe

Service Name: Cdr4_2K - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path:

Service Name: Cdralw2k - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path:

Service Name: Sterownik stacji CD-ROM - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\cdrom.sys

Service Name: CpuIdle Pro System Driver - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path:

Service Name: d347bus - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\DRIVERS\d347bus.sys

Service Name: d347prt - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\Drivers\d347prt.sys

Service Name: Klient DHCP - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\services.exe

Service Name: Sterownik dysku - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\disk.sys

Service Name: Diskperf - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path:

Service Name: Sterownik Menedżera dysków logicznych - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\drivers\dmio.sys

Service Name: dmload - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\drivers\dmload.sys

Service Name: Menedżer dysków logicznych - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\services.exe

Service Name: Klient DNS - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\services.exe

Service Name: Dziennik zdarzeń - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\services.exe

Service Name: System zdarzeń COM+ - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\svchost.exe -k netsvcs

Service Name: Fips - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path:

Service Name: Sterownik Menedżera woluminów - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\ftdisk.sys

Service Name: Firewall Driver - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\drivers\fwdrv.sys

Service Name: giveio - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\giveio.sys

Service Name: Sterownik Microsoft klasy HID - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\hidusb.sys

Service Name: Sterownik portu klawiatury i8042 i myszy PS/2 - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\i8042prt.sys

Service Name: Sterownik IPSEC - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\ipsec.sys

Service Name: Sterownik PnP magistrali ISA/EISA - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\isapnp.sys

Service Name: Sterownik Keyboard Class - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\kbdclass.sys

Service Name: Kerio Personal Firewall 4 - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe

Service Name: KSecDD - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path:

Service Name: Serwer - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\services.exe

Service Name: Stacja robocza - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\services.exe

Service Name: Usługa pomocy TCP/IP NetBIOS - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\services.exe

Service Name: Messenger - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\services.exe

Service Name: mnmdd - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path:

Service Name: Sterownik klasy myszy - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\mouclass.sys

Service Name: MountMgr - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path:

Service Name: MRXSMB - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\mrxsmb.sys

Service Name: Msfs - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path:

Service Name: Mup - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path:

Service Name: Sterownik systemu NDIS - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path:

Service Name: Interfejs NetBIOS - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\netbios.sys

Service Name: NetBios przez TCP/IP - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\netbt.sys

Service Name: Połączenia sieciowe - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\svchost.exe -k netsvcs

Service Name: Npfs - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path:

Service Name: Magazyn wymienny - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\svchost.exe -k netsvcs

Service Name: Null - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path:

Service Name: Sterownik portu równoległego - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\parport.sys

Service Name: PartMgr - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path:

Service Name: ParVdm - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path:

Service Name: PCI Bus Driver - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\pci.sys

Service Name: PCIIde - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\pciide.sys

Service Name: Plug and Play - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\services.exe

Service Name: Agent zasad IPSEC - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\lsass.exe

Service Name: Magazyn chroniony - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\services.exe

Service Name: PxHelp20 - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\DRIVERS\PxHelp20.sys

Service Name: Sterownik automatycznego połączenia dostępu zdalnego - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\rasacd.sys

Service Name: Menedżer połączeń usługi Dostęp zdalny - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\svchost.exe -k netsvcs

Service Name: Rdbss - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\rdbss.sys

Service Name: Usługa rejestru zdalnego - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\regsvc.exe

Service Name: Zdalne wywoływanie procedur (RPC) - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\svchost -k rpcss

Service Name: Menedżer kont zabezpieczeń - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\lsass.exe

Service Name: Harmonogram zadań - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\MSTask.exe

Service Name: Usługa RunAs - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\services.exe

Service Name: Zawiadomienie o zdarzeniu systemowym - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\svchost.exe -k netsvcs

Service Name: Sterownik portu szeregowego - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\serial.sys

Service Name: Bufor wydruku - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\spoolsv.exe

Service Name: Telefonia - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\svchost.exe -k netsvcs

Service Name: Sterownik protokołu TCP/IP - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\tcpip.sys

Service Name: Klient śledzenia łączy rozproszonych - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\services.exe

Service Name: VgaSave - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\drivers\vga.sys

Service Name: Filtr magistrali AGP VIA - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\viaagp.sys

Service Name: VIA AGP Filter - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\viaagp1.sys

Service Name: viaide - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\viaide.sys

Service Name: Instrumentacja zarządzania Windows - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\WBEM\WinMgmt.exe

Service Name: Rozszerzenia sterownika Instrumentacji zarządzania - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\Services.exe

Service Name: Aktualizacje automatyczne - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\svchost.exe -k wugroup

 

[iE Options]

[iE Options] - [Normal]

R0 - HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl

R0 - HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.com

R0 - HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main,Window Title = By Kris

 

[iE Options] - [iE Menu]

O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoBrowserSaveAs = 0

O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoFileNew = 0

O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoBrowserClose = 0

O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoFileOpen = 0

O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoTheaterMode = 0

O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoViewSource = 0

O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoBandCustomize = 0

O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoToolbarCustomize = 0

O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoFavorites = 0

O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoAddingChannels = 0

O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoBrowserOptions = 0

O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoBrowserContextMenu = 0

O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoOpeninNewWnd = 0

O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoSplash = 0

O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoJITSetup = 0

 

[iE Options] - [internet Options]

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, GeneralTab = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, HomePage = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Cache = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, History = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Colors = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, links = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Fonts = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Languages = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Accessibility = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, SecurityTab = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, ContentTab = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Ratings = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Certificates = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, FormSuggest = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, FormSuggest Passwords = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Profiles = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, ConnectionsTab = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, DialupAutodetect = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, EnableAutoProxyResultCache = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Connection Settings = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Connwiz Admin Lock = 0

O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Proxy = 0

 

[iE Options] - [iE Search Hooks]

 

[iE Add-Ons] - [Toolbars]

 

[iE Add-Ons] - [Explorer Bars]

O9 - Extra "View" Explorer Bars: Pasek multimediów - {32683183-48a0-441b-a342-7c2a440a9478} - C:\WINNT\system32\browseui.dll

 

[iE Add-Ons] - [Context Menu]

O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

 

[iE Add-Ons] - [bHOs]

O2 - BHO: (No Name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

 

[iE Add-Ons] - [Tools Menu]

O9 - Extra "Tool" Menu Item: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll

 

[iE Add-Ons] - [Tools Button]

O9 - Extra "Tool" Menu Item: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll

O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra Button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm

 

[system Options]

O7 - HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies, DisableRegistryTools = 1

 

[startUp]

04 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run internat.exe = internat.exe

04 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Gadu-Gadu = C:\Program Files\Gadu-Gadu\Powergg.exe" /tray

04 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Skype = C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run NvCplDaemon = RUNDLL32.EXE NvQTwk,NvCplDaemon initialize

04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run WinampAgent = C:\Program Files\Winamp\winampa.exe

04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run SunJavaUpdateSched = C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe

04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run DAEMON Tools-1033 = C:\Program Files\D-Tools\daemon.exe" -lang 1033

04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run AVGCtrl = C:\Program Files\AVPersonal\AVGNT.EXE" /min

04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run HP Software Update = C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe

04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run DeviceDiscovery = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi
Udostępnij na innych stronach
Jeditte Newbie

Jeditte

Opublikowano
Opublikowano (edytowane)

Logfile of HijackThis v1.99.1

Scan saved at 13:57:33, on 2005-03-20

Platform: Windows XP (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 (6.00.2600.0000)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\logonui.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\System32\sstray.exe

C:\WINDOWS\TBPanel.exe

C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe

C:\Program Files\DU Meter\DUMeter.exe

C:\Program Files\Common Files\G DATA\AVKMail\AVKPOP.EXE

C:\WINDOWS\System32\ctfmon.exe

C:\WINDOWS\System32\RUNDLL32.EXE

C:\Program Files\Tlen.pl\tlen.exe

C:\Program Files\Netropa\Multimedia Keyboard\TrayMon.exe

C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Program Files\Netropa\Onscreen Display\OSD.exe

C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE

C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe

C:\Program Files\AntiVirenKit\AVKService.exe

C:\Program Files\AntiVirenKit\AVKWCtl.exe

C:\WINDOWS\System32\nvsvc32.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\DOCUME~1\Jeditte\USTAWI~1\Temp\Rar$EX00.641\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/

O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r

O4 - HKLM\..\Run: [Gainward] C:\WINDOWS\TBPanel.exe /A

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [MULTIMEDIA KEYBOARD] C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe

O4 - HKLM\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe

O4 - HKLM\..\Run: [AVK Mail Checker] "C:\Program Files\Common Files\G DATA\AVKMail\AVKPOP.EXE"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe

O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit

O4 - HKCU\..\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe

O4 - Global Startup: BTTray.lnk = ?

O8 - Extra context menu item: Download All by FlashGet - C:\PROGRA~1\FlashGet\jc_all.htm

O8 - Extra context menu item: Download using FlashGet - C:\PROGRA~1\FlashGet\jc_link.htm

O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe

O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1111059869864

O23 - Service: AVK Service (AVKService) - Unknown owner - C:\Program Files\AntiVirenKit\AVKService.exe

O23 - Service: Strażnik AVK (AVKWCtl) - Unknown owner - C:\Program Files\AntiVirenKit\AVKWCtl.exe

O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

 

 

i te same objawy co u kolegi zakladajacego temat.... i tez na 100% nie przez xxx stronki ... i ogolnei to ni wala nie moge wpasc co to jest

 

ja ze zmieniona tapeta sobie poradzielm ale nadal nei da rady zmienic jej ;p

Edytowane przez Jeditte

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi
Udostępnij na innych stronach
Kolobos Newbie

Kolobos

Opublikowano
Opublikowano (edytowane)

:arrow: Jeditte

Log jest czysty, a wiec masz problem tylko z menu prawego klawisza? Jezli tak to zrob sobie plik prawy.txt wklej do niego to:

 

Windows Registry Editor Version 5.00

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

"NoViewContextMenu"=dword:00000000

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop]

"NoChangingWallPaper"=dword:00000000

 

Zapisz, zmien rozszerzenie i kliknij na niego dwa razy i ok.

Menu powinno sie pojawic, oraz zmiana tapety :-)

 

 

W XP i W2k te wszystkie opcje sa w :

Start->Uruchom->gpedit.msc

 

I tam szablony administracyjne.

Edytowane przez Kolobos

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi
Udostępnij na innych stronach
Jeditte Newbie

Jeditte

Opublikowano
Opublikowano (edytowane)

Hyhy thx bede pameital na przyszlość :) nie wiem czy dziala bo i tak miałem czystego windowsa to go reinstalnołem ;)

Ale i tak thx za pomoc ;p

 

a tak btw tego wszystkiego jakiego firewalla polecacie wlacznie z linkiem do sciagniecia;p

do tej pory z nich nie korzystalem i bylo all ok, tera siora zaczela latac po necie i trza sie zaczac zabezpieczac inaczej :P niz regcleaner i lista autostartu ;p

Edytowane przez Jeditte

Udostępnij tę odpowiedź

Odnośnik do odpowiedzi
Udostępnij na innych stronach

Dołącz do dyskusji

Możesz dodać zawartość już teraz a zarejestrować się później. Jeśli posiadasz już konto, zaloguj się aby dodać zawartość za jego pomocą.

Gość
Dodaj odpowiedź do tematu...

×   Wklejono zawartość z formatowaniem.   Przywróć formatowanie

  Dozwolonych jest tylko 75 emoji.

×   Odnośnik został automatycznie osadzony.   Przywróć wyświetlanie jako odnośnik

×   Przywrócono poprzednią zawartość.   Wyczyść edytor

×   Nie możesz bezpośrednio wkleić grafiki. Dodaj lub załącz grafiki z adresu URL.

Ładowanie
×
Tematy
×
×
  • Dodaj nową pozycję...