Duzy ping w grach, zamulenie kompa, LOG

TheMrFoka · 16 Wrzesień 2008 16:17

Witam,

mam strasznie duży ping w grach i coś zamula mi komputer,

proszę o sprawdzenie loga.

z góry dzięki

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 18:11:47, on 2008-09-16 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\oodag.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\System32\PAStiSvc.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\LXSUPMON.EXE C:\Program Files\Drive Space Indicator\DrvSpace.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe C:\Program Files\Utilities\VisualTaskTips\VisualTaskTips.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\Program Files\Common Files\Teleca Shared\Generic.exe C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe C:\WINDOWS\system32\PnkBstrB.exe C:\Program Files\Mozilla Firefox\firefox.exe c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\Documents and Settings\Michał\Ustawienia lokalne\Apps\2.0\R9V8ABQY.2LC\4RD7HR5Q.VTW\aalo…tion_eb787c7e256950f2_0000.0005_703197888d1b9a52\AALogReader.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.nero.com/link.php?zone=ROTW& … 6&gen_id=8 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll F3 - REG:win.ini: run= O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file) O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM…\Run: [LXSUPMON] C:\WINDOWS\system32\LXSUPMON.EXE RUN O4 - HKLM…\Run: [DriveSpace] C:\Program Files\Drive Space Indicator\DrvSpace.exe O4 - HKLM…\Run: [CmPCIaudio] RunDll32 CMICNFG3.CPL,CMICtrlWnd O4 - HKLM…\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM…\Run: [ZoneAlarm Client] “C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe” O4 - HKLM…\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM…\Run: [sony Ericsson PC Suite] “C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe” /startoptions O4 - HKLM…\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE O4 - HKLM…\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu O4 - HKCU…\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe O4 - HKCU…\Run: [VisualTaskTips] C:\Program Files\Utilities\VisualTaskTips\VisualTaskTips.exe O4 - HKCU…\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU…\Run: [EdHTML] C:\Program Files\Binboy\EdHTMLv5.0\EdHTML.exe /none O4 - HKCU…\Run: [KeePass Password Safe] “C:\Program Files\KeePass Password Safe\KeePass.exe” O4 - HKUS\S-1-5-20…\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User ‘USŁUGA SIECIOWA’) O4 - HKUS\S-1-5-20…\Run: [VisualTaskTips] C:\Program Files\Utilities\VisualTaskTips\VisualTaskTips.exe (User ‘USŁUGA SIECIOWA’) O4 - HKUS\S-1-5-20…\Run: [skype] “C:\Program Files\Skype\Phone\Skype.exe” /nosplash /minimized (User ‘USŁUGA SIECIOWA’) O4 - HKUS\S-1-5-20…\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe (User ‘USŁUGA SIECIOWA’) O4 - HKUS\S-1-5-20…\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User ‘USŁUGA SIECIOWA’) O4 - HKUS\S-1-5-18…\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User ‘SYSTEM’) O4 - HKUS\S-1-5-18…\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User ‘SYSTEM’) O4 - HKUS.DEFAULT…\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User ‘Default user’) O4 - HKUS.DEFAULT…\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User ‘Default user’) O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra ‘Tools’ menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resourc … oscan8.cab O17 - HKLM\System\CCS\Services\Tcpip…{4E54E53E-F7A3-4AD1-AED9-592578668201}: NameServer = 194.204.159.1 217.98.63.164 O20 - AppInit_DLLs: SF3.DLL O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe – End of file - 7652 bytes

Leon1 · 16 Wrzesień 2008 17:27

wpisy

usuń HijackThisem >> Fix checked

Pobierz Combofix http://forum.dobreprogramy.pl/viewtopic.php?f=16&t=36654 przeskanuj system daj log

TheMrFoka · 16 Wrzesień 2008 18:13

http://wklej.org/id/4624/

Leon1 · 16 Wrzesień 2008 18:35

Otwórz notatnik i wklej

File:: C:\WINDOWS\Internet Logs\xDB4F.tmp C:\WINDOWS\Internet Logs\xDB4D.tmp C:\WINDOWS\Internet Logs\xDB4E.tmp C:\WINDOWS\Internet Logs\xDB4B.tmp C:\WINDOWS\Internet Logs\xDB4C.tmp C:\WINDOWS\Internet Logs\xDB49.tmp C:\WINDOWS\Internet Logs\xDB4A.tmp C:\WINDOWS\Internet Logs\xDB48.tmp C:\WINDOWS\Internet Logs\tvDebug.zip C:\WINDOWS\Internet Logs\xDB47.tmp C:\WINDOWS\Internet Logs\xDB46.tmp C:\WINDOWS\Internet Logs\xDB44.tmp C:\WINDOWS\Internet Logs\xDB45.tmp C:\WINDOWS\Internet Logs\xDB42.tmp C:\WINDOWS\Internet Logs\xDB43.tmp C:\WINDOWS\Internet Logs\xDB41.tmp C:\WINDOWS\Internet Logs\xDB40.tmp C:\WINDOWS\Internet Logs\xDB3E.tmp C:\WINDOWS\Internet Logs\xDB3F.tmp C:\WINDOWS\Internet Logs\xDB3D.tmp C:\WINDOWS\Internet Logs\xDB3C.tmp C:\WINDOWS\Internet Logs\xDB3A.tmp C:\WINDOWS\Internet Logs\xDB3B.tmp C:\WINDOWS\Internet Logs\xDB38.tmp C:\WINDOWS\Internet Logs\xDB39.tmp C:\WINDOWS\Internet Logs\xDB36.tmp C:\WINDOWS\Internet Logs\xDB37.tmp C:\WINDOWS\Internet Logs\xDB34.tmp C:\WINDOWS\Internet Logs\xDB35.tmp C:\WINDOWS\Internet Logs\xDB32.tmp C:\WINDOWS\Internet Logs\xDB33.tmp C:\WINDOWS\Internet Logs\xDB30.tmp C:\WINDOWS\Internet Logs\xDB31.tmp C:\WINDOWS\Internet Logs\xDB2E.tmp C:\WINDOWS\Internet Logs\xDB2F.tmp C:\WINDOWS\Internet Logs\xDB2D.tmp C:\WINDOWS\Internet Logs\xDB2C.tmp C:\WINDOWS\Internet Logs\xDB2B.tmp C:\WINDOWS\Internet Logs\xDB2A.tmp C:\WINDOWS\Internet Logs\xDB28.tmp C:\WINDOWS\Internet Logs\xDB29.tmp C:\WINDOWS\Internet Logs\xDB27.tmp C:\WINDOWS\Internet Logs\xDB26.tmp C:\WINDOWS\Internet Logs\xDB24.tmp C:\WINDOWS\Internet Logs\xDB25.tmp C:\WINDOWS\Internet Logs\xDB22.tmp C:\WINDOWS\Internet Logs\xDB23.tmp C:\WINDOWS\Internet Logs\xDB20.tmp C:\WINDOWS\Internet Logs\xDB21.tmp C:\WINDOWS\Internet Logs\xDB1F.tmp Registry:: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] “WIAWizardMenu”=- [HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] “nltide_3”=-

zapisz jako CFScript.txt (zapisz by ikonka CFScript.txt była obok ikonki ComboFix.exe) >> Przeciągnij i upuść ikonkę CFScript.txt na ikonkę ComboFix.exe

http://img.wklej.org/images/88953CFScri … iemoes.gif

Powinno rozpocząć się usuwanie

Potem log z usuwania Combofix

TheMrFoka · 17 Wrzesień 2008 14:54

http://wklej.org/id/4795/

mam nadzieję, że moje problemy się niedługo skończa

Leon1 · 17 Wrzesień 2008 15:04

Otwórz notatnik i wklej

File:: C:\WINDOWS\Internet Logs\xDB1E.tmp C:\WINDOWS\Internet Logs\xDB1D.tmp C:\WINDOWS\Internet Logs\xDB1B.tmp C:\WINDOWS\Internet Logs\xDB1C.tmp C:\WINDOWS\Internet Logs\xDB1A.tmp C:\WINDOWS\Internet Logs\xDB19.tmp C:\WINDOWS\Internet Logs\xDB17.tmp C:\WINDOWS\Internet Logs\xDB18.tmp C:\WINDOWS\Internet Logs\xDB15.tmp C:\WINDOWS\Internet Logs\xDB16.tmp C:\WINDOWS\Internet Logs\xDB13.tmp C:\WINDOWS\Internet Logs\xDB14.tmp C:\WINDOWS\Internet Logs\xDB11.tmp C:\WINDOWS\Internet Logs\xDB12.tmp C:\WINDOWS\Internet Logs\xDB10.tmp C:\WINDOWS\Internet Logs\xDBF.tmp C:\WINDOWS\Internet Logs\xDBE.tmp C:\WINDOWS\Internet Logs\xDBD.tmp C:\WINDOWS\Internet Logs\xDBC.tmp C:\WINDOWS\Internet Logs\xDBB.tmp C:\WINDOWS\Internet Logs\xDB9.tmp C:\WINDOWS\Internet Logs\xDBA.tmp C:\WINDOWS\Internet Logs\xDB8.tmp C:\WINDOWS\Internet Logs\xDB7.tmp C:\WINDOWS\Internet Logs\xDB5.tmp C:\WINDOWS\Internet Logs\xDB6.tmp C:\WINDOWS\Internet Logs\xDB3.tmp C:\WINDOWS\Internet Logs\xDB4.tmp C:\WINDOWS\Internet Logs\xDB1.tmp C:\WINDOWS\Internet Logs\xDB2.tmp

zapisz jako CFScript.txt (zapisz by ikonka CFScript.txt była obok ikonki ComboFix.exe) >> Przeciągnij i upuść ikonkę CFScript.txt na ikonkę ComboFix.exe

http://img.wklej.org/images/88953CFScri … iemoes.gif

Powinno rozpocząć się usuwanie

Potem log z usuwania Combofix