Dziwne procesy nk0,nk1?

system · 2 Styczeń 2011 22:45

Witam. Komputer bardzo zwalnia oraz pojawiły mi się dziwne procesy. Prosiłbym i sprawdzenie i napisanie w jaki sposób się tego pozbyć

OTL: http://wklej.org/id/449225/

Hijackthis: http://wklej.org/id/449228/

Leon1 · 3 Styczeń 2011 10:26

OTL w oknie Custom Scans-Fixes (własne opcje skanowania/skrypt)wklej następujący skrypt:

:OTL PRC - [2011-01-02 22:45:20 | 000,223,232 | ---- | M] (Windows ® Codename Longhorn DDK provider) – C:\Documents and Settings\Robert\Ustawienia lokalne\Temp\Nk0.exe PRC - [2011-01-02 22:45:17 | 000,207,872 | ---- | M] (Windows ® Codename Longhorn DDK provider) – C:\WINDOWS\Ncyloa.exe O4 - HKU\S-1-5-21-1123561945-308236825-1417001333-1005…\Run: [JP595IR86O] C:\Documents and Settings\Robert\Ustawienia lokalne\Temp\Nk0.exe (Windows ® Codename Longhorn DDK provider) O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll File not found MsConfig - StartUpFolder: C:^Documents and Settings^Robert^Menu Start^Programy^Autostart^HDDlife.lnk - C:\Program Files\BinarySense\HDDlife 3\HDDlifePro.exe - File not found MsConfig - StartUpReg: AlcoholAutomount - hkey= - key= - C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe File not found MsConfig - StartUpReg: ares - hkey= - key= - C:\Program Files\Ares\Ares.exe File not found MsConfig - StartUpReg: CTFMON.EXE - hkey= - key= - File not found MsConfig - StartUpReg: DAEMON Tools Lite - hkey= - key= - C:\Program Files\DAEMON Tools Lite\DTLite.exe File not found MsConfig - StartUpReg: DivXUpdate - hkey= - key= - C:\Program Files\DivX\DivX Update\DivXUpdate.exe File not found MsConfig - StartUpReg: egui - hkey= - key= - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe File not found MsConfig - StartUpReg: JP595IR86O - hkey= - key= - C:\Documents and Settings\Robert\Ustawienia lokalne\Temp\Nk0.exe (Windows ® Codename Longhorn DDK provider) MsConfig - StartUpReg: KiesTrayAgent - hkey= - key= - File not found MsConfig - StartUpReg: NPSStartup - hkey= - key= - File not found MsConfig - StartUpReg: VoipCheapCom - hkey= - key= - C:\Program Files\VoipCheapCom.com\VoipCheapCom\VoipCheapCom.exe File not found [2011-01-02 22:45:36 | 000,207,872 | ---- | C] (Windows ® Codename Longhorn DDK provider) – C:\windows\Ncyloa.exe [2011-01-02 23:35:32 | 000,000,286 | -H-- | M] () – C:\windows\tasks{22116563-108C-42c0-A7CE-60161B75E508}.job [2011-01-02 23:29:13 | 000,000,286 | -H-- | M] () – C:\windows\tasks{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job [2011-01-02 23:28:54 | 000,000,248 | -H-- | M] () – C:\windows\tasks{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job :Reg [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2] :Commands [emptytemp] [start explorer] [Reboot]

Kliknij w Run Fix (Wykonaj scrypt). Zatwierdź restart komputera.

potem nowy log OTL robiony opcją Run Scan (Skanuj)