Duży ping

[dgL (Get Fear)]

A więc tak od jakiś 2-3 dni mam tak, że gdy gram tak co 30 minut mam lagi przez jakąś 1 minute i ping podchodzi mi z 90 do 200-300…

Ogólnie ping moim zdaniem jest dziwny, gdyż zawsze mam po 40-50 pingu a teraz 70-100+ pinga. Nie wiem co jest. Proszę o pomoc. Logi daje poniżej:

http://wklej.org/id/278989/ HijackThis

http://wklej.org/id/278997/ SRE

http://wklej.org/id/279000/ OTL

Dodam, że mam internet Vectra 2mb, mój sprzęt to 2,66GHz, Pentium 4, 512mb ram, geforce 6200. I jakoś wcześniej jak wyżej nie miałem problemu z pingiem. ;/

Poza tym jak sprawdzałem na http://www.speedtest.net to mam ping 145 ;/

– Dodane 14.02.2010 (N) 10:32 –

Nikt ni pomoże?? ;/

[jessica]

[2010-02-08 14:58:19 | 000,002,432 | ---- | M] () – C:\TEMPiAH444.html [2010-02-02 21:23:02 | 000,002,089 | ---- | M] () – C:\TEMPiG3696.html [2010-02-08 14:56:58 | 000,002,432 | ---- | M] () – C:\TEMPIN3480.html [2010-02-06 21:48:55 | 000,002,089 | ---- | M] () – C:\TEMPjb3640.html

Znasz te powyższe?

Jeśli je znasz, to trzeba będzie zmienić Script usuwający.

Jest infekcja: SSHNAS

Dziwne jest to, że w logu OTL w ogóle jej nie widać, mimo specjalnych ustawień skanowania.

Widać to tylko w logu SRENG.

Uruchom OTL i w oknie Custom Scans/Fixes wklej to:

:OTL O3 - HKCU…\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found. O4 - HKCU…\Run: [F5JMWNZTHI] C:\TEMP\Jcd.exe File not found [2010-02-01 11:19:04 | 000,000,000 | —D | C] – C:\Documents and Settings\Damian Michalek\iss145D.tmp [2010-02-12 20:46:10 | 000,002,432 | ---- | M] () – C:\TEMPNg1216.html [2010-02-12 20:46:10 | 000,002,089 | ---- | M] () – C:\TEMPRF1216.html [2010-02-12 09:56:06 | 000,002,432 | ---- | M] () – C:\TEMPHL3704.html [2010-02-12 09:56:06 | 000,002,089 | ---- | M] () – C:\TEMPPj3704.html [2010-02-11 22:28:12 | 000,002,432 | ---- | M] () – C:\TEMPBT2952.html [2010-02-11 22:28:12 | 000,002,089 | ---- | M] () – C:\TEMPGa2952.html [2010-02-11 11:51:06 | 000,002,432 | ---- | M] () – C:\TEMPgJ2792.html [2010-02-11 11:51:06 | 000,002,089 | ---- | M] () – C:\TEMPML2792.html [2010-02-09 21:17:56 | 000,002,432 | ---- | M] () – C:\TEMPEFC128.html [2010-02-09 21:17:56 | 000,002,089 | ---- | M] () – C:\TEMPXDe128.html [2010-02-09 16:11:55 | 000,002,432 | ---- | M] () – C:\TEMPrd4080.html [2010-02-09 16:11:55 | 000,002,089 | ---- | M] () – C:\TEMPjC4080.html [2010-02-08 15:34:03 | 000,002,432 | ---- | M] () – C:\TEMPea1740.html [2010-02-08 15:34:03 | 000,002,089 | ---- | M] () – C:\TEMPrQ1740.html [2010-02-08 14:58:19 | 000,002,432 | ---- | M] () – C:\TEMPiAH444.html [2010-02-08 14:58:19 | 000,002,089 | ---- | M] () – C:\TEMPbUi444.html [2010-02-08 14:56:58 | 000,002,432 | ---- | M] () – C:\TEMPIN3480.html [2010-02-08 14:56:58 | 000,002,089 | ---- | M] () – C:\TEMPZU3480.html [2010-02-06 21:48:55 | 000,002,432 | ---- | M] () – C:\TEMPJQ3640.html [2010-02-06 21:48:55 | 000,002,089 | ---- | M] () – C:\TEMPjb3640.html [2010-02-06 20:32:47 | 000,002,432 | ---- | M] () – C:\TEMPGR2436.html [2010-02-03 21:26:26 | 000,002,432 | ---- | M] () – C:\TEMPDv1372.html [2010-02-03 21:26:26 | 000,002,089 | ---- | M] () – C:\TEMPQz1372.html [2010-02-03 09:19:41 | 000,002,432 | ---- | M] () – C:\TEMPyh3204.html [2010-02-02 21:23:02 | 000,002,432 | ---- | M] () – C:\TEMPDT3696.html [2010-02-02 21:23:02 | 000,002,089 | ---- | M] () – C:\TEMPiG3696.html [2010-02-02 10:34:38 | 000,002,432 | ---- | M] () – C:\TEMPCw3532.html [2010-02-02 10:34:38 | 000,002,089 | ---- | M] () – C:\TEMPzn3532.html [2010-02-02 00:13:07 | 000,002,432 | ---- | M] () – C:\TEMPTU3872.html [2010-02-02 00:13:07 | 000,002,089 | ---- | M] () – C:\TEMPdu3872.html [2010-02-02 00:13:00 | 000,002,432 | ---- | M] () – C:\TEMPHo3872.html [2010-02-02 00:13:00 | 000,002,089 | ---- | M] () – C:\TEMPDb3872.html [2010-02-12 18:27:06 | 000,002,432 | ---- | C] () – C:\TEMPNg1216.html [2010-02-12 18:27:06 | 000,002,089 | ---- | C] () – C:\TEMPRF1216.html [2010-02-12 08:03:45 | 000,002,432 | ---- | C] () – C:\TEMPHL3704.html [2010-02-12 08:03:45 | 000,002,089 | ---- | C] () – C:\TEMPPj3704.html [2010-02-11 21:54:01 | 000,002,432 | ---- | C] () – C:\TEMPBT2952.html [2010-02-11 21:54:01 | 000,002,089 | ---- | C] () – C:\TEMPGa2952.html [2010-02-11 09:47:32 | 000,002,432 | ---- | C] () – C:\TEMPgJ2792.html [2010-02-11 09:47:32 | 000,002,089 | ---- | C] () – C:\TEMPML2792.html [2010-02-09 20:23:09 | 000,002,432 | ---- | C] () – C:\TEMPEFC128.html [2010-02-09 20:23:09 | 000,002,089 | ---- | C] () – C:\TEMPXDe128.html [2010-02-09 16:11:27 | 000,002,432 | ---- | C] () – C:\TEMPrd4080.html [2010-02-09 16:11:27 | 000,002,089 | ---- | C] () – C:\TEMPjC4080.html [2010-02-08 15:33:06 | 000,002,432 | ---- | C] () – C:\TEMPea1740.html [2010-02-08 15:33:06 | 000,002,089 | ---- | C] () – C:\TEMPrQ1740.html [2010-02-08 14:57:11 | 000,002,432 | ---- | C] () – C:\TEMPiAH444.html [2010-02-08 14:57:11 | 000,002,089 | ---- | C] () – C:\TEMPbUi444.html [2010-02-08 14:55:44 | 000,002,432 | ---- | C] () – C:\TEMPIN3480.html [2010-02-08 14:55:44 | 000,002,089 | ---- | C] () – C:\TEMPZU3480.html [2010-02-06 20:48:15 | 000,002,432 | ---- | C] () – C:\TEMPJQ3640.html [2010-02-06 20:48:15 | 000,002,089 | ---- | C] () – C:\TEMPjb3640.html [2010-02-06 20:32:32 | 000,002,432 | ---- | C] () – C:\TEMPGR2436.html [2010-02-03 21:18:45 | 000,002,432 | ---- | C] () – C:\TEMPDv1372.html [2010-02-03 21:18:45 | 000,002,089 | ---- | C] () – C:\TEMPQz1372.html [2010-02-03 09:18:23 | 000,002,432 | ---- | C] () – C:\TEMPyh3204.html [2010-02-02 20:53:48 | 000,002,432 | ---- | C] () – C:\TEMPDT3696.html [2010-02-02 20:53:48 | 000,002,089 | ---- | C] () – C:\TEMPiG3696.html [2010-02-02 10:27:45 | 000,002,432 | ---- | C] () – C:\TEMPCw3532.html [2010-02-02 10:27:45 | 000,002,089 | ---- | C] () – C:\TEMPzn3532.html [2010-02-02 00:12:15 | 000,002,432 | ---- | C] () – C:\TEMPHo3872.html [2010-02-02 00:12:15 | 000,002,089 | ---- | C] () – C:\TEMPDb3872.html [2010-02-02 00:10:36 | 000,002,432 | ---- | C] () – C:\TEMPTU3872.html [2010-02-02 00:10:36 | 000,002,089 | ---- | C] () – C:\TEMPdu3872.html [2010-02-11 22:28:12 | 000,002,432 | ---- | M] () – C:\TEMPBT2952.html [2010-02-08 14:58:19 | 000,002,089 | ---- | M] () – C:\TEMPbUi444.html [2010-02-02 10:34:38 | 000,002,432 | ---- | M] () – C:\TEMPCw3532.html [2010-02-02 00:13:00 | 000,002,089 | ---- | M] () – C:\TEMPDb3872.html [2010-02-02 21:23:02 | 000,002,432 | ---- | M] () – C:\TEMPDT3696.html [2010-02-02 00:13:07 | 000,002,089 | ---- | M] () – C:\TEMPdu3872.html [2010-02-03 21:26:26 | 000,002,432 | ---- | M] () – C:\TEMPDv1372.html [2010-02-08 15:34:03 | 000,002,432 | ---- | M] () – C:\TEMPea1740.html [2010-02-09 21:17:56 | 000,002,432 | ---- | M] () – C:\TEMPEFC128.html [2010-02-11 22:28:12 | 000,002,089 | ---- | M] () – C:\TEMPGa2952.html [2010-02-11 11:51:06 | 000,002,432 | ---- | M] () – C:\TEMPgJ2792.html [2010-02-06 20:32:47 | 000,002,432 | ---- | M] () – C:\TEMPGR2436.html [2010-02-12 09:56:06 | 000,002,432 | ---- | M] () – C:\TEMPHL3704.html [2010-02-02 00:13:00 | 000,002,432 | ---- | M] () – C:\TEMPHo3872.html [2010-02-08 14:58:19 | 000,002,432 | ---- | M] () – C:\TEMPiAH444.html [2010-02-02 21:23:02 | 000,002,089 | ---- | M] () – C:\TEMPiG3696.html [2010-02-08 14:56:58 | 000,002,432 | ---- | M] () – C:\TEMPIN3480.html [2010-02-06 21:48:55 | 000,002,089 | ---- | M] () – C:\TEMPjb3640.html [2010-02-09 16:11:55 | 000,002,089 | ---- | M] () – C:\TEMPjC4080.html [2010-02-06 21:48:55 | 000,002,432 | ---- | M] () – C:\TEMPJQ3640.html [2010-02-11 11:51:06 | 000,002,089 | ---- | M] () – C:\TEMPML2792.html [2010-02-12 20:46:10 | 000,002,432 | ---- | M] () – C:\TEMPNg1216.html [2010-02-12 09:56:06 | 000,002,089 | ---- | M] () – C:\TEMPPj3704.html [2010-02-03 21:26:26 | 000,002,089 | ---- | M] () – C:\TEMPQz1372.html [2010-02-09 16:11:55 | 000,002,432 | ---- | M] () – C:\TEMPrd4080.html [2010-02-12 20:46:10 | 000,002,089 | ---- | M] () – C:\TEMPRF1216.html [2010-02-08 15:34:03 | 000,002,089 | ---- | M] () – C:\TEMPrQ1740.html [2010-02-02 00:13:07 | 000,002,432 | ---- | M] () – C:\TEMPTU3872.html [2010-02-09 21:17:56 | 000,002,089 | ---- | M] () – C:\TEMPXDe128.html [2010-02-03 09:19:41 | 000,002,432 | ---- | M] () – C:\TEMPyh3204.html [2010-02-02 10:34:38 | 000,002,089 | ---- | M] () – C:\TEMPzn3532.html [2010-02-08 14:56:58 | 000,002,089 | ---- | M] () – C:\TEMPZU3480.html :Files C:\WINDOWS\system32\sshnas21.dll :Services SSHNAS :NetSvcs SSHNAS :Commands [emptytemp] [Reboot]

Kliknij w Run Fix. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.

Następnie uruchom OTL ponownie, tym razem kliknij “Run Scan”.

Pokaż nowy log OTL.txt oraz raport z usuwania.

Log z SRENG też się przyda, skoro to tylko w nim widać.

jessi

[dgL (Get Fear)]

Raport OTL po rr >> http://wklej.org/id/280221/

Raport OTL >> http://wklej.org/id/280226/

Raport SRENG >>> http://wklej.org/id/280222/

[jessica]

[2010-02-15 22:04:38 | 000,002,432 | ---- | C] () – C:\TEMPnl4060.html [2010-02-15 22:04:38 | 000,002,089 | ---- | C] () – C:\TEMPDE4060.html [2010-02-15 21:47:20 | 000,002,432 | ---- | C] () – C:\TEMPrG4036.html [2010-02-15 21:47:20 | 000,002,089 | ---- | C] () – C:\TEMPTT4036.html [2010-02-15 20:36:12 | 000,002,432 | ---- | C] () – C:\TEMPvr1644.html [2010-02-15 20:36:12 | 000,002,089 | ---- | C] () – C:\TEMPTw1644.html

“SSHNAS” nie widać już w nowych logach, więc raczej zostało usunięte.

Zastanawiam się nad tymi powyższymi plikami: co je tworzy, czy są szkodliwe, czy to może wytwory jakiegoś Twojego programu?

Daję je teraz do usuwania, ale jeśli w nowym logu znów się pojawią, to damy sobie spokój z ich usuwaniem - przyjmiemy, że tworzy je Twój program (tylko jaki?).

Uruchom OTL i w oknie Custom Scans/Fixes wklej to:

:OTL [2010-02-15 22:14:01 | 000,002,432 | ---- | M] () – C:\TEMPnl4060.html [2010-02-15 22:14:01 | 000,002,089 | ---- | M] () – C:\TEMPDE4060.html [2010-02-15 21:50:08 | 000,002,432 | ---- | M] () – C:\TEMPrG4036.html [2010-02-15 21:50:08 | 000,002,089 | ---- | M] () – C:\TEMPTT4036.html [2010-02-15 20:38:01 | 000,002,432 | ---- | M] () – C:\TEMPvr1644.html [2010-02-15 20:38:01 | 000,002,089 | ---- | M] () – C:\TEMPTw1644.html [2010-02-15 20:32:48 | 000,002,432 | ---- | M] () – C:\TEMPCY2116.html [2010-02-15 20:32:48 | 000,002,089 | ---- | M] () – C:\TEMPiY2116.html [2010-02-15 15:14:35 | 000,002,432 | ---- | M] () – C:\TEMPLC1044.html [2010-02-15 15:14:35 | 000,002,089 | ---- | M] () – C:\TEMPzg1044.html [2010-02-14 20:47:14 | 000,002,432 | ---- | M] () – C:\TEMPhf3788.html [2010-02-14 20:47:14 | 000,002,089 | ---- | M] () – C:\TEMPTl3788.html [2010-02-14 12:32:57 | 000,002,432 | ---- | M] () – C:\TEMPwd4088.html [2010-02-14 12:32:57 | 000,002,089 | ---- | M] () – C:\TEMPnt4088.html [2010-02-14 00:09:29 | 000,002,432 | ---- | M] () – C:\TEMPJp4072.html [2010-02-14 00:09:28 | 000,002,089 | ---- | M] () – C:\TEMPBR4072.html :Commands [emptytemp] [Reboot]

Kliknij w Run Fix. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.

Następnie uruchom OTL ponownie, tym razem kliknij “Run Scan”.

Pokaż nowy log OTL.txt oraz raport z usuwania.

jessi

[dgL (Get Fear)]

Raport OTL po rr >> http://wklej.org/id/280459/

Raport OTL >> http://wklej.org/id/280463/

[jessica]

[2010-02-16 18:19:38 | 000,002,432 | ---- | M] () – C:\TEMPsCt300.html [2010-02-16 18:19:38 | 000,002,089 | ---- | M] () – C:\TEMPuhR300.html [2010-02-16 13:57:17 | 000,002,432 | ---- | M] () – C:\TEMPPsm416.html [2010-02-16 13:57:17 | 000,002,089 | ---- | M] () – C:\TEMPLBG416.html [2010-02-16 10:53:06 | 000,002,432 | ---- | M] () – C:\TEMPCU2380.html [2010-02-16 10:53:06 | 000,002,089 | ---- | M] () – C:\TEMPmx2380.html

Te pliki znów się utworzyły.

Ale nie będziemy już ich usuwać, bo pewnie trzeba by było usuwać do śmierci.

Poza tym - czysto.

jessi