Komputer sie zawiesz sam restartuje

mama3 · 15 Październik 2007 11:01

mam problem czesto komputer przy wlaczeniu jak mam wybrac uzytkownika sie zacina…

ZAWSZE jak wlaczam komputer on zaczyna wydawac dzwieki jak bysie wylaczal tak kilka razy… monitora lampka swieci sie na pomaranczowo pali sie caly czas czerwona lampka H.D.D i musze go wylaczac i wlaczac…

potem zawiesza sie przy wyborze uzytkownika (czasami)

oto log:

Logfile of HijackThis v1.99.1 Scan saved at 12:58:05, on 2007-10-15 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\FTRTSVC.exe C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Wirtualna Polska\wpkontakt\wpkontakt.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe G:\Gry\lol\qttask.exe C:\Program Files\Eset\nod32kui.exe C:\WINDOWS\wt\updater\wcmdmgr.exe C:\WINDOWS\Logi_MwX.Exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe D:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe C:\PROGRA~1\NEOSTR~1\TaskBarIcon.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBZE.EXE C:\Program Files\Logitech\SetPoint\SetPoint.exe C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE C:\Program Files\Neostrada TP\neostradatp.exe C:\Program Files\Neostrada TP\ComComp.exe C:\PROGRA~1\NEOSTR~1\Toaster.exe C:\PROGRA~1\NEOSTR~1\Inactivity.exe C:\PROGRA~1\NEOSTR~1\PollingModule.exe C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE C:\Program Files\Neostrada TP\Watch.exe G:\Gry\Xfire\xfire.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\rundll32.exe G:\naprawa\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.esl.eu/pl/warrock/cqc/1on1/l … r/2748938/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O4 - HKLM…\Run: [ZipTorrent] D:\Program Files\ZipTorrent\ZipTorrent.exe O4 - HKLM…\Run: [wpkontakt] C:\Program Files\Wirtualna Polska\wpkontakt\wpkontakt.exe -autostart O4 - HKLM…\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM…\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\GestMaj.exe TaskBarIcon.exe O4 - HKLM…\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM…\Run: [wcmdmgr] C:\WINDOWS\wt\updater\wcmdmgrl.exe -launch O4 - HKLM…\Run: [Tibia] C:\Windows\system32\Tibia.exe O4 - HKLM…\Run: [sunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe” O4 - HKLM…\Run: [QuickTime Task] “G:\Gry\lol\qttask.exe” -atboottime O4 - HKLM…\Run: [nod32kui] “C:\Program Files\Eset\nod32kui.exe” /WAITSERVICE O4 - HKLM…\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM…\Run: [Logitech Utility] Logi_MwX.Exe O4 - HKLM…\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM…\Run: [iSUSScheduler] “C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe” -start O4 - HKLM…\Run: [iSUSPM Startup] “C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe” -startup O4 - HKLM…\Run: [DAEMON Tools] “D:\Program Files\DAEMON Tools\daemon.exe” -lang 1033 O4 - HKLM…\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM…\Run: [ATICCC] “C:\Program Files\ATI Technologies\ATI.ACE\cli.exe” runtime -Delay O4 - HKCU…\Run: [VoipDiscount] “G:\Gry\VoipDiscount\VoipDiscount.exe” -nosplash -minimized O4 - HKCU…\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe O4 - HKCU…\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU…\Run: [bitTorrent] “D:\PROGRA~1\BITTOR~1\BITTOR~1.EXE” --force_start_minimized O4 - HKCU…\Run: [ares] “D:\Program Files\Ares\Ares.exe” -h O4 - HKCU…\Run: [EPSON Stylus D92 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBZE.EXE /FU “C:\WINDOWS\TEMP\E_S2BF.tmp” /EF “HKCU” O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe O8 - Extra context menu item: Download all links using BitComet - res://D:\Program Files\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: Download link using &BitComet - res://D:\Program Files\BitComet\BitComet.exe/AddLink.htm O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.pl/resources/virus … nicode.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/Shar … /cabsa.cab O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab O16 - DPF: {BE833F39-1E0C-468C-BA70-25AAEE55775E} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab.cab O17 - HKLM\System\CCS\Services\Tcpip…{E702C9DE-FB74-47B8-8C07-FBCBE4BA51B3}: NameServer = 194.204.159.1 217.98.63.164 O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing) O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

Gutek · 15 Październik 2007 14:45

Daj log z ComboFix

mama3 · 15 Październik 2007 17:23

combo logi:

ComboFix 07-10-12.4 - Micha 2007-10-15 19:16:11.7 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.579 [GMT 2:00] Running from: G:\naprawa\ComboFix.exe * Created a new restore point . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\bobsaver.exe C:\WINDOWS\bobsaver.scr . ((((((((((((((((((((((((( Files Created from 2007-09-15 to 2007-10-15 ))))))))))))))))))))))))))))))) . 2007-10-14 20:36 2007-10-14 18:10 4,992 --a------ C:\WINDOWS\system32\drivers\loop.sys 2007-10-14 18:10 4,992 --a–c— C:\WINDOWS\system32\dllcache\loop.sys 2007-10-11 21:18 2007-10-10 07:28 584,192 -----c— C:\WINDOWS\system32\dllcache\rpcrt4.dll 2007-10-06 17:34 25,544 --a------ C:\WINDOWS\system32\drivers\hamachi.sys 2007-10-06 14:46 2007-10-06 14:46 2007-10-06 14:46 2007-09-29 18:47 2007-09-29 18:43 76,800 --a------ C:\WINDOWS\system32\E_FLBBZE.DLL 2007-09-29 18:43 62,976 --a------ C:\WINDOWS\system32\E_FD4BBZE.DLL 2007-09-29 18:43 49,152 --a------ C:\WINDOWS\system32\E_DCINST.DLL 2007-09-29 18:43 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys 2007-09-29 18:43 25,856 --a–c— C:\WINDOWS\system32\dllcache\usbprint.sys 2007-09-29 18:33 2007-09-29 18:33 2007-09-16 08:38 2007-09-16 08:27 2007-09-15 16:48 2007-09-15 14:42 . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-10-15 16:51 --------- d-----w C:\Program Files\Neostrada TP 2007-10-15 12:24 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys 2007-10-15 12:24 103,736 ----a-w C:\WINDOWS\system32\PnkBstrB.exe 2007-10-14 18:21 --------- d-----w C:\Documents and Settings\Anita\Dane aplikacji\Skype 2007-10-13 06:28 --------- d-----w C:\Program Files\Java 2007-10-06 12:37 --------- d-----w C:\Program Files\SwiftSwitch 2007-10-06 09:59 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-09-29 16:49 --------- d–h--w C:\Program Files\InstallShield Installation Information 2007-09-24 15:56 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\SwiftSwitch 2007-08-21 06:18 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll 2007-08-15 09:38 --------- d—a-w C:\Documents and Settings\All Users\Dane aplikacji\TEMP 2007-08-07 12:26 25,992 ----a-w C:\WINDOWS\system32\pgdfgsvc.exe 2007-08-07 12:25 720,896 ----a-w C:\WINDOWS\iun6002.exe 2007-08-07 08:30 66,872 ----a-w C:\WINDOWS\system32\PnkBstrA.exe 2007-07-30 17:19 92,504 ----a-w C:\WINDOWS\system32\cdm.dll 2007-07-30 17:19 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll 2007-07-30 17:19 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe 2007-07-30 17:19 43,352 ----a-w C:\WINDOWS\system32\wups2.dll 2007-07-30 17:19 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll 2007-07-30 17:19 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll 2007-07-30 17:19 1,712,984 ----a-w C:\WINDOWS\system32\wuaueng.dll 2007-07-30 17:18 33,624 ----a-w C:\WINDOWS\system32\wups.dll 2001-11-23 04:08 712,704 ----a-w C:\WINDOWS\inf\OTHER\AUDIO3D.DLL . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “ZipTorrent”=“D:\Program Files\ZipTorrent\ZipTorrent.exe” [] “wpkontakt”=“C:\Program Files\Wirtualna Polska\wpkontakt\wpkontakt.exe” [2005-05-04 12:05] “WOOWATCH”=“C:\PROGRA~1\NEOSTR~1\Watch.exe” [2004-08-23 14:49] “WOOTASKBARICON”=“C:\PROGRA~1\NEOSTR~1\GestMaj.exe” [2004-10-14 16:55] “WinampAgent”=“C:\Program Files\Winamp\winampa.exe” [2003-12-13 02:50] “wcmdmgr”=“C:\WINDOWS\wt\updater\wcmdmgrl.exe” [2002-02-28 14:57] “Tibia”=“C:\Windows\system32\Tibia.exe” [] “SunJavaUpdateSched”=“C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe” [2007-09-25 01:11] “QuickTime Task”=“G:\Gry\lol\qttask.exe” [2007-02-16 10:54] “nod32kui”=“C:\Program Files\Eset\nod32kui.exe” [2007-06-04 15:18] “NeroFilterCheck”=“C:\WINDOWS\system32\NeroCheck.exe” [2001-07-09 11:50] “Logitech Utility”=“Logi_MwX.Exe” [2003-11-07 11:50 C:\WINDOWS\LOGI_MWX.EXE] “Logitech Hardware Abstraction Layer”=“KHALMNPR.EXE” [2006-07-19 12:03 C:\WINDOWS\KHALMNPR.Exe] “ISUSScheduler”=“C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe” [2005-08-11 15:30] “ISUSPM Startup”=“C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe” [2005-08-11 15:30] “DAEMON Tools”=“D:\Program Files\DAEMON Tools\daemon.exe” [2006-11-12 12:48] “ATIPTA”=“C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe” [2004-08-03 21:10] “ATICCC”=“C:\Program Files\ATI Technologies\ATI.ACE\cli.exe” [2006-01-02 17:41] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “VoipDiscount”=“G:\Gry\VoipDiscount\VoipDiscount.exe” [] “LDM”=“C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe” [2005-12-11 15:04] “CTFMON.EXE”=“C:\WINDOWS\system32\ctfmon.exe” [2004-08-04 00:44] “BitTorrent”=“D:\PROGRA~1\BITTOR~1\BITTOR~1.exe” [] “ares”=“D:\Program Files\Ares\Ares.exe” [] “EPSON Stylus D92 Series”=“C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBZE.exe” [2006-09-27 06:00] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2005-12-11 15:04:53] Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [2005-12-11 15:41:02] R1 oreans32;oreans32;??\C:\WINDOWS\system32\drivers\oreans32.sys R3 e4usbaw;USB ADSL2 WAN Adapter;C:\WINDOWS\system32\DRIVERS\e4usbaw.sys S2 IKANLOADER2;General Purpose USB Driver (e4ldr.sys);C:\WINDOWS\system32\Drivers\e4ldr.sys S3 CCCP106;CIF USB Camera (2110A);C:\WINDOWS\system32\DRIVERS\cccp106.sys S3 msloop;Sterownik karty Microsoft Loopback;C:\WINDOWS\system32\DRIVERS\loop.sys S3 NTProcDrv;Process creation detector for NT.;??\D:\Downloads\NtProcDrv.sys S3 tcpip_patcher;tcpip_patcher;??\G:\Gry\Ares MP3\tcpip_patcher.sys S3 USBSTOR;Sterownik magazynu masowego USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{8f861d2e-1106-11db-845f-000df304a11f}] AutoRun\command - H:\setup.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{8f861d2f-1106-11db-845f-000df304a11f}] AutoRun\command - I:\setup.exe . ************************************************************************** catchme 0.3.1169 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-10-15 19:18:15 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes … scanning hidden autostart entries … scanning hidden files … ************************************************************************** . Completion time: 2007-10-15 19:19:20 C:\ComboFix-quarantined-files.txt … 2007-08-07 13:06 C:\ComboFix2.txt … 2007-08-08 15:19 C:\ComboFix3.txt … 2007-08-07 20:42 . — E O F —

Gutek · 15 Październik 2007 21:28

Użyj jeszcze:

Pobierz program SDFix

mama3 · 16 Październik 2007 05:07

mam problemy z wlaczeniem trybu awaryjnego kiedy mam nacisnac F8?

adam9870 · 16 Październik 2007 13:59

Możesz wcisnąć klawisz F5 bądź F8 gdy komputer nie będzie jeszcze uruchomiony, włączyć komputer i trzymać wciśnięty któryś z tych klawiszy aż do momentu ujrzenia ekranu, na którym możesz dokonać wyboru, w takim trybie system za zostać uruchomiony.