isass.exe + log!

**Posty:** 10 · przez **krls** 10 Paź 2007, 22:30

Szukałem:)
Problem jest taki,że ten cholernik strasznie mnie nerwuje. Ostatnio mi sie zakradł i zauwazyłem,ze spowalnia mi grę,bardzo. (DOD:S)!
Więc bez namysłu zrobiłem format! Poskutkowało. Gra chodzi dobrze. Przez 3 dni było wszystko ELEGANCKO.Do dzisiaj.

! znów mnie nawiedził Issass.exe! co robić?!
Zainstalowalem XP ServicePack 2, nie pomogło.

Tu daje log z hajdżaka.

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:20:27, on 2007-10-10 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\Administrator\Pulpit\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://gg.hit.gemius.pl/hitredir/id=nLrgksy3Ix5qna R2OTcXgfTZHSDpPPt9ifMnp0SSxNv.W7/stparam=sdqgbxrlka/url=www.actimel.pl/wyzwanie R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O4 - Global Startup: Kalendarz XP.lnk = C:\Program Files\Kalendarz XP\Kalendarz.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{6BC7EBB0-62AC-422E-B7FB-A8A415BD1092}: NameServer = 213.241.79.37 83.238.255.76 O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 3009 bytes

**Posty:** 3620 · przez **MaTi** 10 Paź 2007, 22:58

krls proszę następnym razem pamiętać o tym żeby logi wpisywać w Tagach Code tak jak to zedytowałem powyżej i nie pogrubiaj czcionki niepotrzebnie, również zedytowałem, ale nastepnym razem pamietaj o tym.
Tutajmasz również instrukcje jak wrzucać logi m.in że musi być cały log objęty Tagiem Code
I ostatnia sprawa zly dział dlatego przenosze do Bezpieczeństwo.

**Posty:** 3854 · przez **Dzi@dek** 10 Paź 2007, 23:38

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://gg.hit.gemius.pl/hitredir/id=nLrgksy3Ix5qna R2OTcXgfTZHSDpPPt9ifMnp0SSxNv.W7/stparam=sdqgbxrlka/url=www.actimel.pl/wyzwanie

1.Usuwasz w hijackthis.
2. Instalujesz antywira + firewalla
3.Stosujesz temat:
http://www.forum.programosy.pl/dodatkowe-narzedzia-do-usuwania-i-ochrony-vp316158.html?highlight=#316158 w/g opisu. Netbios może zostać na żółto.

Wracasz z logiem.

**Posty:** 10 · przez **krls** 11 Paź 2007, 14:45

1.Usunołem
2. Zainstalowalem antivira lecz firewalla nie, bo niewiem który!
3.Zainstalowałem Anti Spyware a teraz wracam z logiem.

Kod: Zaznacz wszystko: Deckard's System Scanner v20070905.67 Run by Administrator on 2007-10-11 14:38:24 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- Successfully created a Deckard's System Scanner Restore Point. -- Last 5 Restore Point(s) -- 7: 2007-10-11 12:38:35 UTC - RP7 - Deckard's System Scanner Restore Point 6: 2007-10-11 12:21:16 UTC - RP6 - Software Distribution Service 3.0 5: 2007-10-11 04:56:15 UTC - RP5 - Software Distribution Service 3.0 4: 2007-10-10 19:56:06 UTC - RP4 - Zainstalowano Windows XP Service Pack 2. 3: 2007-10-09 19:34:09 UTC - RP3 - Installed Java(TM) 6 Update 3 -- First Restore Point -- 1: 2007-10-07 19:46:32 UTC - RP1 - Punkt kontrolny systemu Backed up registry hives. Performed disk cleanup. -- HijackThis (run as Administrator.exe) --------------------------------------- Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:39:12, on 2007-10-11 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\keystone.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe D:\Instalki\dss.exe C:\DOCUME~1\ADMINI~1\Pulpit\Administrator.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O4 - Global Startup: Kalendarz XP.lnk = C:\Program Files\Kalendarz XP\Kalendarz.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{6BC7EBB0-62AC-422E-B7FB-A8A415BD1092}: NameServer = 213.241.79.37 83.238.255.76 O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe -- End of file - 3139 bytes -- File Associations ----------------------------------------------------------- [COLOR=red].cpl - cplfile - shell\cplopen\command - rundll32.exe shell32.dll,Control_RunDLL "%1",%*[/COLOR] [COLOR=red].cpl - cplfile - shell\runas\command - rundll32.exe shell32.dll,Control_RunDLLAsUser "%1",%*[/COLOR] -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- All drivers whitelisted. -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- All services whitelisted. -- Device Manager: Disabled ---------------------------------------------------- Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318} Description: Kontroler RAID Device ID: PCI\VEN_1106&DEV_3149&SUBSYS_31491849&REV_80\3&61AAA01&0&78 Manufacturer: Name: Kontroler RAID PNP Device ID: PCI\VEN_1106&DEV_3149&SUBSYS_31491849&REV_80\3&61AAA01&0&78 Service: -- Files created between 2007-09-11 and 2007-10-11 ----------------------------- 2007-10-11 06:56:21 0 d-------- C:\WINDOWS\system32\PreInstall 2007-10-11 06:56:19 0 d--h----- C:\WINDOWS\$hf_mig$ 2007-10-10 22:05:43 0 d-------- C:\WINDOWS\system32\SoftwareDistribution 2007-10-10 22:03:43 0 d-------- C:\WINDOWS\Prefetch 2007-10-10 21:56:42 0 d-------- C:\WINDOWS\ServicePackFiles 2007-10-10 17:12:12 0 d-------- C:\Program Files\Kalendarz XP 2007-10-09 21:56:07 0 d-------- C:\Program Files\Real Alternative 2007-10-09 21:56:07 0 d-------- C:\Program Files\Media Player Classic 2007-10-09 21:36:37 0 d-------- C:\WINDOWS\Sun 2007-10-09 21:35:44 0 d-------- C:\Program Files\Java 2007-10-09 21:34:13 0 d-------- C:\Program Files\Common Files\Java 2007-10-09 21:29:02 0 d-------- C:\Program Files\Gadu-Gadu 2007-10-08 14:47:06 0 d-------- C:\Program Files\Winamp 2007-10-08 08:55:57 1277 --a------ C:\WINDOWS\mozver.dat 2007-10-08 00:50:48 0 d-------- C:\Program Files\SubEdit-Player 2007-10-08 00:50:13 163840 --a------ C:\WINDOWS\system32\unrar.dll 2007-10-08 00:50:11 217088 --a------ C:\WINDOWS\system32\yv12vfw.dll <Not Verified; www.helixcommunity.org; Helix YV12 YUV Codec> 2007-10-08 00:50:11 180224 --a------ C:\WINDOWS\system32\xvidvfw.dll 2007-10-08 00:50:11 765952 --a------ C:\WINDOWS\system32\xvidcore.dll 2007-10-08 00:50:10 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll 2007-10-08 00:50:10 73728 --a------ C:\WINDOWS\system32\dpl100.dll <Not Verified; DivX, Inc.; DivX, Inc. dpl100> 2007-10-08 00:50:10 740442 --a------ C:\WINDOWS\system32\divx.dll <Not Verified; DivX, Inc.; DivX®> 2007-10-08 00:50:09 7680 --a------ C:\WINDOWS\system32\ff_vfw.dll 2007-10-08 00:50:07 0 d-------- C:\Program Files\K-Lite Codec Pack 2007-10-07 23:29:29 0 d--hs---- C:\WINDOWS\Installer 2007-10-07 23:29:29 0 d-------- C:\Program Files\Common Files\ODBC 2007-10-07 23:29:17 0 d-------- C:\Program Files\Common Files\SpeechEngines 2007-10-07 23:29:15 0 dr------- C:\Program Files 2007-10-07 23:29:15 0 d-------- C:\Program Files\Common Files 2007-10-07 23:27:35 0 d-------- C:\WINDOWS\system32\CatRoot2 2007-10-07 23:27:35 0 d-------- C:\WINDOWS\system32\CatRoot 2007-10-07 23:26:19 0 d-------- C:\Documents and Settings 2007-10-07 23:26:18 0 d--hs---- C:\System Volume Information 2007-10-07 23:14:13 0 d-------- C:\WINDOWS 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\WinSxS 2007-10-07 23:14:13 0 dr------- C:\WINDOWS\Web 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\twain_32 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\wins 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\wbem 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\usmt 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\spool 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\ShellExt 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\Setup 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\ras 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\oobe 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\npp 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\mui 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\inetsrv 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\IME 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\icsxml 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\ias 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\export 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\drivers 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\drivers\etc 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\drivers\disdn 2007-10-07 23:14:13 0 dr-hs--c- C:\WINDOWS\system32\dllcache 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\dhcp 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\config 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\3com_dmi 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\3076 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\2052 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\1054 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\1045 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\1042 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\1041 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\1037 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\1033 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\1031 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\1028 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system32\1025 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\system 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\security 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\Resources 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\repair 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\Provisioning 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\PeerNet 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\pchealth 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\mui 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\msapps 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\msagent 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\Media 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\java 2007-10-07 23:14:13 0 d--h----- C:\WINDOWS\inf 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\ime 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\Help 2007-10-07 23:14:13 0 dr--s---- C:\WINDOWS\Fonts 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\ehome 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\Driver Cache 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\Debug 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\Cursors 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\Connection Wizard 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\Config 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\AppPatch 2007-10-07 23:14:13 0 d-------- C:\WINDOWS\addins 2007-10-07 21:58:29 0 d-------- C:\WINDOWS\nview 2007-10-07 21:58:26 0 d-------- C:\WINDOWS\system32\ReinstallBackups 2007-10-07 21:57:07 0 d-------- C:\NVIDIA 2007-10-07 21:54:00 266240 --a------ C:\WINDOWS\CMIUninstall.exe <Not Verified; ; GeneralUninstall Application> 2007-10-07 21:54:00 225280 --a------ C:\WINDOWS\CmiRmRedundDir.exe <Not Verified; ; CmiRmRedundDir Application> 2007-10-07 21:54:00 28672 --a------ C:\WINDOWS\CMIRmDriver.dll 2007-10-07 21:54:00 0 d-------- C:\Program Files\C-Media 3D Audio 2007-10-07 21:53:51 0 d-------- C:\Program Files\Common Files\InstallShield 2007-10-07 21:53:40 5824 --a------ C:\WINDOWS\system32\drivers\ASUSHWIO.SYS 2007-10-07 21:48:40 0 --a------ C:\WINDOWS\nsreg.dat 2007-10-07 21:47:30 127456 --a------ C:\WINDOWS\system32\IPDETECT.EXE <Not Verified; ; IPDETECT> 2007-10-07 21:47:29 212992 --a------ C:\WINDOWS\system32\unaddrv.exe <Not Verified; Analog Devices.; UnADdrv> 2007-10-07 21:47:29 152126 --a------ C:\WINDOWS\system32\drivers\L1E9P2.BIN 2007-10-07 21:47:29 200704 --a------ C:\WINDOWS\system32\coclassfast.dll 2007-10-07 21:47:29 46892 --a------ C:\WINDOWS\system32\ADADIX16.DLL 2007-10-07 21:47:29 24576 --a------ C:\WINDOWS\enddisk32.exe 2007-10-07 21:47:29 176128 --a------ C:\WINDOWS\autoclk.exe <Not Verified; ; autoclk Application> 2007-10-07 21:47:28 152146 --a------ C:\WINDOWS\system32\drivers\L1E4P2.BIN 2007-10-07 21:47:28 152145 --a------ C:\WINDOWS\system32\drivers\L1E4P1.BIN 2007-10-07 21:47:28 152145 --a------ C:\WINDOWS\system32\drivers\L1E4P0.BIN 2007-10-07 21:47:28 152308 --a------ C:\WINDOWS\system32\drivers\L1E4I2.BIN 2007-10-07 21:47:28 152306 --a------ C:\WINDOWS\system32\drivers\L1E4I1.BIN 2007-10-07 21:47:28 152306 --a------ C:\WINDOWS\system32\drivers\L1E4I0.BIN 2007-10-07 21:47:27 152126 --a------ C:\WINDOWS\system32\drivers\L1E9P1.BIN 2007-10-07 21:47:27 152126 --a------ C:\WINDOWS\system32\drivers\L1E9P0.BIN 2007-10-07 21:47:27 152126 --a------ C:\WINDOWS\system32\drivers\L1E9I2.BIN 2007-10-07 21:47:27 152126 --a------ C:\WINDOWS\system32\drivers\L1E9I1.BIN 2007-10-07 21:47:27 152126 --a------ C:\WINDOWS\system32\drivers\L1E9I0.BIN 2007-10-07 21:47:27 0 d--h----- C:\Program Files\InstallShield Installation Information 2007-10-07 21:47:22 0 d-------- C:\Program Files\SAGEM 2007-10-07 21:45:49 0 d-------- C:\WINDOWS\SoftwareDistribution 2007-10-07 21:45:47 0 d---s---- C:\WINDOWS\system32\Microsoft 2007-10-07 21:43:38 0 d-------- C:\WINDOWS\system32\xircom 2007-10-07 21:43:38 0 d-------- C:\Program Files\microsoft frontpage 2007-10-07 21:43:12 0 -rahs---- C:\MSDOS.SYS 2007-10-07 21:43:12 0 -rahs---- C:\IO.SYS 2007-10-07 21:43:12 0 --a------ C:\CONFIG.SYS 2007-10-07 21:43:12 0 --a------ C:\AUTOEXEC.BAT 2007-10-07 21:41:45 0 dr------- C:\WINDOWS\Offline Web Pages 2007-10-07 21:41:45 0 d---s---- C:\WINDOWS\Downloaded Program Files 2007-10-07 21:41:32 0 d--h----- C:\Program Files\WindowsUpdate 2007-10-07 21:41:28 0 d-------- C:\Program Files\Usługi online 2007-10-07 21:40:58 0 d-------- C:\WINDOWS\system32\DirectX 2007-10-07 21:39:15 0 d---s---- C:\WINDOWS\Tasks 2007-10-07 21:39:12 0 d-------- C:\Program Files\Common Files\MSSoap 2007-10-07 21:38:54 0 d-------- C:\WINDOWS\srchasst 2007-10-07 21:38:51 0 d-------- C:\WINDOWS\system32\Macromed 2007-10-07 21:38:20 0 d-------- C:\Program Files\Movie Maker 2007-10-07 21:37:51 0 d-------- C:\WINDOWS\system32\Restore 2007-10-07 21:36:31 21856 --a------ C:\WINDOWS\system32\emptyregdb.dat 2007-10-07 21:36:14 0 d-------- C:\WINDOWS\Registration 2007-10-07 21:35:59 0 d-------- C:\Program Files\Messenger 2007-10-07 21:35:49 0 d-------- C:\Program Files\MSN Gaming Zone 2007-10-07 21:34:19 0 d-------- C:\Program Files\Windows NT 2007-10-07 21:34:11 0 d-------- C:\WINDOWS\system32\MsDtc 2007-10-07 21:34:06 0 d-------- C:\WINDOWS\system32\Com -- Find3M Report --------------------------------------------------------------- 2007-10-11 14:36:04 0 d-------- C:\Documents and Settings\Administrator\Dane aplikacji\Grisoft 2007-10-09 21:36:37 0 d-------- C:\Documents and Settings\Administrator\Dane aplikacji\Sun 2007-10-08 08:56:03 0 d-------- C:\Documents and Settings\Administrator\Dane aplikacji\Macromedia 2007-10-07 23:27:59 62 --ahs---- C:\Documents and Settings\Administrator\Dane aplikacji\desktop.ini 2007-10-07 21:56:11 0 d-------- C:\Documents and Settings\Administrator\Dane aplikacji\Gadu-Gadu 2007-10-07 21:48:37 0 d-------- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla 2007-10-07 21:47:34 355486 --a------ C:\WINDOWS\system32\perfh015.dat 2007-10-07 21:47:34 49492 --a------ C:\WINDOWS\system32\perfc015.dat 2007-10-07 21:47:19 0 d-------- C:\Documents and Settings\Administrator\Dane aplikacji\InstallShield 2007-10-07 21:46:14 0 d-------- C:\Documents and Settings\Administrator\Dane aplikacji\Identities -- Registry Dump --------------------------------------------------------------- *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Cmaudio"="cmicnfg.cpl" [] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-10-13 22:39] "nwiz"="nwiz.exe" [2004-10-13 22:39 C:\WINDOWS\system32\nwiz.exe] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2004-10-13 22:39] "WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2003-12-13 02:50] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ DSLMON.lnk - C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2007-10-07 21:47:30] Kalendarz XP.lnk - C:\Program Files\Kalendarz XP\Kalendarz.exe [2007-10-10 17:12:12] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "DisableRegistryTools"=0 (0x0) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds] @="Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}] @="Volume shadow copy" *Newly Created Service* - AVG_ANTI-SPYWARE_DRIVER *Newly Created Service* - AVG_ANTI-SPYWARE_GUARD -- End of Deckard's System Scanner: finished at 2007-10-11 14:42:16 ------------

**Posty:** 18165 · przez **wojtas** 11 Paź 2007, 18:59

krls napisał(a):lecz firewalla nie, bo niewiem który!

np.kerio personal

http://www.programosy.pl/program,kerio-personal-firewall.html

daj loga z combofixa

isass.exe + log!

isass.exe + log!

Kto jest na forum