Moje Artiki

Witam mam dziwny problem

by postmaster on lut.25, 2010, under Bez kategorii

Witam mam dziwny problem kompa mam dopieor po formacie antywirus wszystko zainstalowane i nagle wyskakuje mi komunikat ze zablokowano atak sieciowy kill bill i to nie raz tylko dzisiaj z 10 razy;/ ewidentnie ktos mi sie próbuje włamac do komputera

Jego adres to

10.22.0.89 zablokowałem ten komputer

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 18:45:35, on 2008-08-28

Platform: Windows Vista (WinNT 6.00.1904)

MSIE: Internet Explorer v7.00 (7.00.6000.16711)

Boot mode: Normal

Running processes:

C:Windowssystem32Dwm.exe

C:Windowssystem32taskeng.exe

C:WindowsExplorer.EXE

C:Program FilesWindows DefenderMSASCui.exe

C:Program FilesKaspersky LabKaspersky Internet Security 2009avp.exe

C:Windowsehomeehtray.exe

C:Windowsehomeehmsas.exe

C:Program FilesWindows Media Playerwmpnscfg.exe

C:Windowssystem32wuauclt.exe

C:Windowssystem32conime.exe

C:Program FilesRuntime SoftwareGetDataBack for NTFSgdbnt.exe

C:UsersMurarzDownloadsWoW and TBC -enGB-Installer-downloader.exeWoW-enGB-Installer-downloader.exe

C:Program FilesOperaOpera.exe

C:Program FilesTrend MicroHijackThisHijackThis.exe

R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 – HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 – HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =

R0 – HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =

R0 – HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =

O1 – Hosts: ::1 localhost

O2 – BHO: IEVkbdBHO – {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} – C:Program FilesKaspersky LabKaspersky Internet Security 2009ievkbd.dll

O4 – HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide

O4 – HKLM..Run: [AVP] “C:Program FilesKaspersky LabKaspersky Internet Security 2009avp.exe”

O4 – HKLM..Run: [MSConfig] “C:Windowssystem32msconfig.exe” /auto

O4 – HKCU..Run: [Sidebar] C:Program FilesWindows Sidebarsidebar.exe /autoRun

O4 – HKCU..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter

O4 – HKCU..Run: [ehTray.exe] C:WindowsehomeehTray.exe

O4 – HKUSS-1-5-19..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User ‘USŁUGA LOKALNA’)

O4 – HKUSS-1-5-19..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘USŁUGA LOKALNA’)

O4 – HKUSS-1-5-20..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User ‘USŁUGA SIECIOWA’)

O8 – Extra context menu item: Dodaj do listy blokowanych banerów – C:Program FilesKaspersky LabKaspersky Internet Security 2009ie_banner_deny.htm

O9 – Extra button: Statystyki ochrony WWW – {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} – C:Program FilesKaspersky LabKaspersky Internet Security 2009SCIEPlgn.dll

O13 – Gopher Prefix:

O20 – AppInit_DLLs: C:PROGRA~1KASPER~1KASPER~1mzvkbd.dll,C:PROGRA~1KASPER~1KASPER~1adialhk.dll,C:PROGRA~1KASPER~1KASPER~1kloehk.dll

O23 – Service: Ati External Event Utility – ATI Technologies Inc. – C:Windowssystem32Ati2evxx.exe

O23 – Service: Kaspersky Internet Security (AVP) – Kaspersky Lab – C:Program FilesKaspersky LabKaspersky Internet Security 2009avp.exe

End of file – 3524 bytes

prosze o linka do najnowszej wersji Combofixa

:

Comments are closed.

Looking for something?

Use the form below to search the site:

Still not finding what you're looking for? Drop a comment on a post or contact us so we can take care of it!

Visit our friends!

A few highly recommended friends...

    Archives

    All entries, chronologically...