Spyware? Pomocy Problem!

217.97.157.* napisał:

zlapalem jakies gowno (spyware) i zmienilo mi tapete (niemozna jej zmienic teraz) i zablokowalo prawy przycisk myszki... strone startowa tez mi zmienilo ale z tym sobie poradzilem wiecie jak to mozna naprawic ? uzywalem juz z 4 programow do usuwania spyware adware cos wykrywali usuwalem ale niepomoglo.. Prosze o Pomoc.

Dzieki
Pozdrawiam.

83.27.170.* napisał:

Pewnie przez porno stronki to zalapales, ale nie wnikam!Co do usuniecia tych robaczkow to nie bede sie rozpisywal po prostu wklejam linka:
http://www.wiruszone.net/forum/viewtopic.php?t=1169

217.97.157.* napisał:

nie przez porono stronki chyba to bylo to - www.Screensavers24.com
(a link do tego jest na radiu ftb)

217.97.157.* napisał:

Logfile of Browser Hijack Recover(BHR) v1.01
http://www.browser-hijack.com/
Log created on 2005-03-20 12:45:30
Microsoft Windows 2000 Professional Service Pack 4 (Build 2195)
Internet Explorer v6.0.2800.1106 Update Versions: ;SP1;

[Process Manager] - [Process]
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\AVPersonal\AVGUARD.EXE
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINNT\System32\svchost.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\AVPersonal\AVGNT.EXE
C:\WINNT\system32\internat.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\SpeedFan\speedfan.exe
C:\WINNT\system32\taskmgr.exe
C:\Program Files\Browser Hijack Recover\bhr.exe

[Process Manager] - [NT Services]
Service Name: Sterownik Microsoft ACPI - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\ACPI.sys
Service Name: Środowisko obsługi sieci AFD - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\drivers\afd.sys
Service Name: AFS2k - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path:
Service Name: AntiVir Service - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\Program Files\AVPersonal\AVGUARD.EXE
Service Name: Standardowy kontroler dysku twardego IDE/ESDI - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\atapi.sys
Service Name: avgntdw - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\Program Files\AVPersonal\AVGNTDW.SYS
Service Name: AntiVir Update - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\Program Files\AVPersonal\AVWUPSRV.EXE
Service Name: Beep - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path:
Service Name: Przeglądarka komputera - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\services.exe
Service Name: Cdr4_2K - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path:
Service Name: Cdralw2k - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path:
Service Name: Sterownik stacji CD-ROM - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\cdrom.sys
Service Name: CpuIdle Pro System Driver - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path:
Service Name: d347bus - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\DRIVERS\d347bus.sys
Service Name: d347prt - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\Drivers\d347prt.sys
Service Name: Klient DHCP - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\services.exe
Service Name: Sterownik dysku - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\disk.sys
Service Name: Diskperf - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path:
Service Name: Sterownik Menedżera dysków logicznych - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\drivers\dmio.sys
Service Name: dmload - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\drivers\dmload.sys
Service Name: Menedżer dysków logicznych - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\services.exe
Service Name: Klient DNS - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\services.exe
Service Name: Dziennik zdarzeń - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\services.exe
Service Name: System zdarzeń COM+ - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\svchost.exe -k netsvcs
Service Name: Fips - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path:
Service Name: Sterownik Menedżera woluminów - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\ftdisk.sys
Service Name: Firewall Driver - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\drivers\fwdrv.sys
Service Name: giveio - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\giveio.sys
Service Name: Sterownik Microsoft klasy HID - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\hidusb.sys
Service Name: Sterownik portu klawiatury i8042 i myszy PS/2 - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\i8042prt.sys
Service Name: Sterownik IPSEC - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\ipsec.sys
Service Name: Sterownik PnP magistrali ISA/EISA - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\isapnp.sys
Service Name: Sterownik Keyboard Class - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\kbdclass.sys
Service Name: Kerio Personal Firewall 4 - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
Service Name: KSecDD - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path:
Service Name: Serwer - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\services.exe
Service Name: Stacja robocza - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\services.exe
Service Name: Usługa pomocy TCP/IP NetBIOS - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\services.exe
Service Name: Messenger - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\services.exe
Service Name: mnmdd - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path:
Service Name: Sterownik klasy myszy - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\mouclass.sys
Service Name: MountMgr - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path:
Service Name: MRXSMB - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\mrxsmb.sys
Service Name: Msfs - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path:
Service Name: Mup - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path:
Service Name: Sterownik systemu NDIS - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path:
Service Name: Interfejs NetBIOS - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\netbios.sys
Service Name: NetBios przez TCP/IP - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\netbt.sys
Service Name: Połączenia sieciowe - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\svchost.exe -k netsvcs
Service Name: Npfs - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path:
Service Name: Magazyn wymienny - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\svchost.exe -k netsvcs
Service Name: Null - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path:
Service Name: Sterownik portu równoległego - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\parport.sys
Service Name: PartMgr - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path:
Service Name: ParVdm - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path:
Service Name: PCI Bus Driver - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\pci.sys
Service Name: PCIIde - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\pciide.sys
Service Name: Plug and Play - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\services.exe
Service Name: Agent zasad IPSEC - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\lsass.exe
Service Name: Magazyn chroniony - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\services.exe
Service Name: PxHelp20 - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\DRIVERS\PxHelp20.sys
Service Name: Sterownik automatycznego połączenia dostępu zdalnego - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\rasacd.sys
Service Name: Menedżer połączeń usługi Dostęp zdalny - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\svchost.exe -k netsvcs
Service Name: Rdbss - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\rdbss.sys
Service Name: Usługa rejestru zdalnego - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\regsvc.exe
Service Name: Zdalne wywoływanie procedur (RPC) - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\svchost -k rpcss
Service Name: Menedżer kont zabezpieczeń - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\lsass.exe
Service Name: Harmonogram zadań - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\MSTask.exe
Service Name: Usługa RunAs - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\services.exe
Service Name: Zawiadomienie o zdarzeniu systemowym - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\svchost.exe -k netsvcs
Service Name: Sterownik portu szeregowego - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\serial.sys
Service Name: Bufor wydruku - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\spoolsv.exe
Service Name: Telefonia - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\svchost.exe -k netsvcs
Service Name: Sterownik protokołu TCP/IP - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\DRIVERS\tcpip.sys
Service Name: Klient śledzenia łączy rozproszonych - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\services.exe
Service Name: VgaSave - Start Type: SERVICE_SYSTEM_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\drivers\vga.sys
Service Name: Filtr magistrali AGP VIA - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\viaagp.sys
Service Name: VIA AGP Filter - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\viaagp1.sys
Service Name: viaide - Start Type: SERVICE_BOOT_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\DRIVERS\viaide.sys
Service Name: Instrumentacja zarządzania Windows - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\System32\WBEM\WinMgmt.exe
Service Name: Rozszerzenia sterownika Instrumentacji zarządzania - Start Type: SERVICE_DEMAND_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\Services.exe
Service Name: Aktualizacje automatyczne - Start Type: SERVICE_AUTO_START - Service Status: SERVICE_RUNNING - Binary path: C:\WINNT\system32\svchost.exe -k wugroup

[IE Options]
[IE Options] - [Normal]
R0 - HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl
R0 - HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.com
R0 - HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main,Window Title = By Kris

[IE Options] - [IE Menu]
O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoBrowserSaveAs = 0
O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoFileNew = 0
O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoBrowserClose = 0
O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoFileOpen = 0
O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoTheaterMode = 0
O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoViewSource = 0
O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoBandCustomize = 0
O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoToolbarCustomize = 0
O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoFavorites = 0
O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoAddingChannels = 0
O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoBrowserOptions = 0
O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoBrowserContextMenu = 0
O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoOpeninNewWnd = 0
O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoSplash = 0
O6 - HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions, NoJITSetup = 0

[IE Options] - [Internet Options]
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, GeneralTab = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, HomePage = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Cache = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, History = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Colors = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, links = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Fonts = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Languages = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Accessibility = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, SecurityTab = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, ContentTab = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Ratings = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Certificates = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, FormSuggest = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, FormSuggest Passwords = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Profiles = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, ConnectionsTab = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, DialupAutodetect = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, EnableAutoProxyResultCache = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Connection Settings = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Connwiz Admin Lock = 0
O6 - HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel, Proxy = 0

[IE Options] - [IE Search Hooks]

[IE Add-Ons] - [Toolbars]

[IE Add-Ons] - [Explorer Bars]
O9 - Extra "View" Explorer Bars: Pasek multimediów - {32683183-48a0-441b-a342-7c2a440a9478} - C:\WINNT\system32\browseui.dll

[IE Add-Ons] - [Context Menu]
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

[IE Add-Ons] - [BHOs]
O2 - BHO: (No Name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

[IE Add-Ons] - [Tools Menu]
O9 - Extra "Tool" Menu Item: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll

[IE Add-Ons] - [Tools Button]
O9 - Extra "Tool" Menu Item: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll
O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra Button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm

[System Options]
O7 - HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies, DisableRegistryTools = 1

[StartUp]
04 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run internat.exe = internat.exe
04 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Gadu-Gadu = C:\Program Files\Gadu-Gadu\Powergg.exe" /tray
04 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Skype = C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run NvCplDaemon = RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run WinampAgent = C:\Program Files\Winamp\winampa.exe
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run SunJavaUpdateSched = C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run DAEMON Tools-1033 = C:\Program Files\D-Tools\daemon.exe" -lang 1033
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run AVGCtrl = C:\Program Files\AVPersonal\AVGNT.EXE" /min
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run HP Software Update = C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
04 - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run DeviceDiscovery = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe

62.179.78.* napisał:

jaki syf.. ja pierdziele..... wejdz sobie na http://www.hijackthis.de/ i zrob porzadek z tym

212.186.144.* napisał:

Logfile of HijackThis v1.99.1
Scan saved at 13:57:33, on 2005-03-20
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\sstray.exe
C:\WINDOWS\TBPanel.exe
C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
C:\Program Files\DU Meter\DUMeter.exe
C:\Program Files\Common Files\G DATA\AVKMail\AVKPOP.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Program Files\Tlen.pl\tlen.exe
C:\Program Files\Netropa\Multimedia Keyboard\TrayMon.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Netropa\Onscreen Display\OSD.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\Program Files\AntiVirenKit\AVKService.exe
C:\Program Files\AntiVirenKit\AVKWCtl.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\DOCUME~1\Jeditte\USTAWI~1\Temp\Rar$EX00.641\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [Gainward] C:\WINDOWS\TBPanel.exe /A
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [MULTIMEDIA KEYBOARD] C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe
O4 - HKLM\..\Run: [AVK Mail Checker] "C:\Program Files\Common Files\G DATA\AVKMail\AVKPOP.EXE"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - C:\PROGRA~1\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\PROGRA~1\FlashGet\jc_link.htm
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1111059869864
O23 - Service: AVK Service (AVKService) - Unknown owner - C:\Program Files\AntiVirenKit\AVKService.exe
O23 - Service: Strażnik AVK (AVKWCtl) - Unknown owner - C:\Program Files\AntiVirenKit\AVKWCtl.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe


i te same objawy co u kolegi zakladajacego temat.... i tez na 100% nie przez xxx stronki ... i ogolnei to ni wala nie moge wpasc co to jest

ja ze zmieniona tapeta sobie poradzielm ale nadal nei da rady zmienic jej ;p

213.76.227.* napisał:

Jeditte
Log jest czysty, a wiec masz problem tylko z menu prawego klawisza? Jezli tak to zrob sobie plik prawy.txt wklej do niego to:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoViewContextMenu"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop]
"NoChangingWallPaper"=dword:00000000

Zapisz, zmien rozszerzenie i kliknij na niego dwa razy i ok.
Menu powinno sie pojawic, oraz zmiana tapety


W XP i W2k te wszystkie opcje sa w :
Start->Uruchom->gpedit.msc

I tam szablony administracyjne.

212.186.144.* napisał:

Hyhy thx bede pameital na przyszlość nie wiem czy dziala bo i tak miałem czystego windowsa to go reinstalnołem
Ale i tak thx za pomoc ;p

a tak btw tego wszystkiego jakiego firewalla polecacie wlacznie z linkiem do sciagniecia;p
do tej pory z nich nie korzystalem i bylo all ok, tera siora zaczela latac po necie i trza sie zaczac zabezpieczac inaczej niz regcleaner i lista autostartu ;p

194.150.100.* napisał:

polecam program avast antivirus.
tez mialem pelno spyware lecz gdy zainstalowalem i uruchomilem ten program mam czysto jak u Pana Boga za piecem

Spyware... jak usunąć??
hacker ? trojan ? spyware ?
Wielki Problem-spyware
Problem Z... Spyware
Danger: Spyware
Danger: Spyware
Search Cc - Wir/spyware W Ie
Dziwne Mulenie Kompa(i To Nie Przez Spyware)
Mam Spyware <_<
Spyware....:(
Zawaliło Mi Kompa Spamem/spyware Pomocy!

00 01 02 03 04 05 06 07 08 09 10 11 12 13