Hacked

[Daduch]

Miałem hacka i chcę się spytać czy mam w kompie jakiegos keya.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:33:54, on 2009-06-29
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
I:\WINDOWS\System32\smss*****
I:\WINDOWS\system32\winlogon*****
I:\WINDOWS\system32\services*****
I:\WINDOWS\system32\lsass*****
I:\WINDOWS\system32\svchost*****
I:\WINDOWS\System32\svchost*****
I:\WINDOWS\system32\spoolsv*****
I:\WINDOWS\Explorer*****
I:\WINDOWS\RTHDCPL*****
I:\Program Files\Java\jre1.6.0_07\bin\jusched*****
I:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield*****
I:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp*****
I:\Program Files\Microsoft Office\Office12\GrooveMonitor*****
I:\Program Files\HP\HP Software Update\HPWuSchd2*****
I:\WINDOWS\system32\RUNDLL32*****
I:\WINDOWS\system32\ctfmon*****
I:\Program Files\HP\Digital Imaging\bin\hpqtra08*****
K:\xampp\apache\bin\apache*****
I:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp*****
I:\Program Files\Common Files\LightScribe\LSSrvc*****
K:\xampp\mysql\bin\mysqld-nt*****
I:\WINDOWS\system32\nvsvc32*****
K:\MOH\UnrealEngine3\MOHAGame\pb\PnkBstrA*****
I:\Program Files\Spyware Terminator\sp_rsser*****
I:\WINDOWS\system32\svchost*****
I:\Program Files\HP\Digital Imaging\bin\hpqSTE08*****
K:\xampp\apache\bin\apache*****
I:\WINDOWS\System32\svchost*****
I:\Program Files\Opera\opera*****
K:\Gry\HijackThis*****

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispat...=%s&tbid=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_cu...spx?TbId=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askR...5&gct=&gc=1&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_cu...spx?TbId=60327
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://toolbar.ask.com/toolbarv/askR...gct=&gc=1&q=%s
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - I:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - I:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_1.d ll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - I:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - I:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - I:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - I:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - I:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - I:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Expressivo - {85F685C3-20D9-4943-95E4-EB4224056C3F} - J:\PROGRAMY\IVONA\Expressivo\IH_iexplore.dll
O2 - BHO: IEPluginBHO - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - I:\Documents and Settings\pc\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - I:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_1.d ll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - I:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Expressivo - {85F685C3-20D9-4943-95E4-EB4224056C3F} - J:\PROGRAMY\IVONA\Expressivo\IH_iexplore.dll
O3 - Toolbar: Pasek &Crawler - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - I:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL*****
O4 - HKLM\..\Run: [Alcmtr] ALCMTR*****
O4 - HKLM\..\Run: [JMB36X IDE Setup] I:\WINDOWS\RaidTool\xInsIDE*****
O4 - HKLM\..\Run: [36X Raid Configurer] I:\WINDOWS\system32\xRaidSetup***** boot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32***** I:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz***** /install
O4 - HKLM\..\Run: [NeroFilterCheck] I:\Program Files\Common Files\Ahead\Lib\NeroCheck*****
O4 - HKLM\..\Run: [SunJavaUpdateSched] "I:\Program Files\Java\jre1.6.0_07\bin\jusched*****"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "J:\PROGRAMY\Abode\Reader\Reader_sl*****"
O4 - HKLM\..\Run: [SpywareTerminator] "I:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield***** "
O4 - HKLM\..\Run: [QuickTime Task] "J:\PROGRAMY\ODTWARZACZE\qttask*****" -atboottime
O4 - HKLM\..\Run: [AVP] "I:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp*****"
O4 - HKLM\..\Run: [GrooveMonitor] "I:\Program Files\Microsoft Office\Office12\GrooveMonitor*****"
O4 - HKLM\..\Run: [HP Software Update] I:\Program Files\HP\HP Software Update\HPWuSchd2*****
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32***** I:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon*****] I:\WINDOWS\system32\ctfmon*****
O4 - HKUS\S-1-5-19\..\Run: [CTFMON*****] I:\WINDOWS\system32\CTFMON***** (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON*****] I:\WINDOWS\system32\CTFMON***** (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON*****] I:\WINDOWS\system32\CTFMON***** (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON*****] I:\WINDOWS\system32\CTFMON***** (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = I:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader*****
O4 - Global Startup: HP Digital Imaging Monitor.lnk = I:\Program Files\HP\Digital Imaging\bin\hpqtra08*****
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://I:\WINDOWS\system32\GPhotos*****/200
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://I:\PROGRA~1\MICROS~3\Office12\EXCEL*****/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - I:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - I:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Statystyki ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - I:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - I:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - I:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - I:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - I:\WINDOWS\Network Diagnostic\xpnetdiag*****
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - I:\WINDOWS\Network Diagnostic\xpnetdiag*****
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs*****
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs*****
O12 - Plugin for .spop: I:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.nvidia.com/content/Driver...sysreqlab3.cab
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - I:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - I:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - I:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O20 - AppInit_DLLs: I:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,I:\PROGRA ~1\KASPER~1\KASPER~1\mzvkbd3.dll
O23 - Service: Apache2.2 - Apache Software Foundation - K:\xampp\apache\bin\apache*****
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - I:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp*****
O23 - Service: GEST Service for program management. (GEST Service) - Unknown owner - I:\Program Files\GIGABYTE\GEST\GSvr***** (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - I:\Program Files\Google\Common\Google Updater\GoogleUpdaterService*****
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - I:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT*****
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - I:\Program Files\Common Files\LightScribe\LSSrvc*****
O23 - Service: mysql - Unknown owner - K:\xampp\mysql\bin\mysqld-nt*****
O23 - Service: NBService - Nero AG - I:\Program Files\Nero\Nero 7\Nero BackItUp\NBService*****
O23 - Service: NMIndexingService - Nero AG - I:\Program Files\Common Files\Ahead\Lib\NMIndexingService*****
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - I:\WINDOWS\system32\nvsvc32*****
O23 - Service: Pml Driver HPZ12 - HP - I:\WINDOWS\system32\HPZipm12*****
O23 - Service: PunkBuster (PnkBstrA) - Unknown owner - K:\MOH\UnrealEngine3\MOHAGame\pb\PnkBstrA*****
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - I:\Program Files\Spyware Terminator\sp_rsser*****
O24 - Desktop Component 0: (no name) - http://jkh.pl/templates/estime_grass...headerkuva.jpg
O24 - Desktop Component 1: (no name) - http://www.pilkarze.com.pl/rozrab/wo...rm/TN_ww15.jpg

--
End of file - 10784 bytes

[BialyOleander]

4 keye 8 koników trojańskich i milion pinćset robaczków.

[Gholit]

Tak. Się. Nie. Wkleja. Na. Forum. Logów. Z. Hijackthis.

wklej.org
i podaj link, bo tak cenzura forum kasuje ważne informacje. Ew. wklej loga na odpowiednią stronę na hijackthis.

[ruszka]

Jezuuu... kolejny temat o keyach. NIE ODPISUJCIE TAKIM MATOŁOM ! niech sprawdzi loga na hijackthis.de a nie

[Jagred]

w logach nic nie masz.