Net strasznie zwolniła przy pobieraniu prze przegladarke

niezDarek · 7 Listopad 2007 14:01

jak w temacie przy pobieraniu prze przegladarke transfera jest na poziomie

6 KB/sek a mam neta 512 kb/sek więc powinno byc ok 64 KB/sek

a przy pobieraniu prze bitcomet transfera jest normalny

log z HijackThis

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:53:41, on 2007-11-07 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Unable to get Internet Explorer version! Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\cFosSpeed\spd.exe C:\WINDOWS\Explorer.EXE F:\Eset\nod32krn.exe C:\WINDOWS\system32\HPZipm12.exe C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe C:\Program Files\cFosSpeed\cFosSpeed.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE E:\Mozilla Firefox\firefox.exe D:\BitComet\Downloads\Microsoft Office 2007 Enterprise PL+14 ŁATEK [535 MB]\Microsoft Office Word 2007.exe D:\BitComet\BitComet.exe F:\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: My Search BHO - {014DA6C1-189F-421a-88CD-07CFE51CFF10} - C:\Program Files\MySearch\bar\1.bin\S4BAR.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll O2 - BHO: TBSB05590 - {A3FC7223-752E-495B-9951-CE360FA1180C} - (no file) O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\pl-pl\msntb.dll O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\pl-pl\msntb.dll O3 - Toolbar: (no name) - {BEBD573C-8315-43A8-9EA0-7028D471CC81} - (no file) O3 - Toolbar: My Search Bar - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - C:\Program Files\MySearch\bar\1.bin\S4BAR.DLL O4 - HKLM…\Run: [speedTouch USB Diagnostics] “C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe” /icon O4 - HKLM…\Run: [cFosSpeed] C:\Program Files\cFosSpeed\cFosSpeed.exe O4 - HKLM…\Run: [sunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe” O4 - HKLM…\Run: [ATICCC] “C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe” O4 - HKCU…\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU…\Run: [bitComet] “D:\BitComet\BitComet.exe” O4 - HKCU…\Run: [speedX] E:\Speed-X\SpeedX.exe O4 - HKCU…\Run: [Gadu-Gadu] “E:\Gadu-Gadu\gg.exe” /tray O4 - HKUS\S-1-5-19…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘USŁUGA LOKALNA’) O4 - HKUS\S-1-5-20…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘USŁUGA SIECIOWA’) O4 - HKUS\S-1-5-18…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SYSTEM’) O4 - HKUS.DEFAULT…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘Default user’) O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - F:\VisualRoute\vrie.dll O9 - Extra ‘Tools’ menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - F:\VisualRoute\vrie.dll O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip…{8EC020D0-692F-4604-A180-F430918EE718}: NameServer = 194.204.159.1 217.98.63.164 O20 - AppInit_DLLs: F:\KASPER~1\adialhk.dll,wbsys.dll O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: cFosSpeed System Service (cFosSpeedS) - cFos Software GmbH - C:\Program Files\cFosSpeed\spd.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - F:\Eset\nod32krn.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe – End of file - 4515 bytes

jessica · 7 Listopad 2007 14:25

Nie zajmuję się rozwiązywaniem problemów, więc Ci nie pomogę w Twoim.

Mogę pomóc tylko w sprawach związanych z logami.

Ściągnji -->ComboFix.

Wklej do Notatnika :

File::

C:\Program Files\MySearch\bar\1.bin\S4BAR.DLL


Folder::

C:\Program Files\MySearch


Registry::

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

"{BEBD573C-8315-43A8-9EA0-7028D471CC81}"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

"{014DA6C9-189F-421a-88CD-07CFE51CFF10}"=-

[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3FC7223-752E-495B-9951-CE360FA1180C}]

[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{014DA6C1-189F-421a-88CD-07CFE51CFF10}]

>>Plik>>Zapisz jako… >>> CFScript (najwygodniej będzie, jeśli zapiszesz w takiej lokalizacji, by ikonka CFScript.txt znalazła się obok ikonki ComboFix.exe )

Przeciągnij i upuść plik CFScript.txt na plik ComboFix.exe (czyli ikonkę CFScript.txt na ikonkę ComboFix.exe )

– podobnie jak na tym obrazku –>

(jeśli pojawi się pytanie " 1 or 2" - to wpisz 1 i naciśnij ENTER) Ma się rozpocząć usuwanie. (i powstanie log)

Po restarcie usuń ręcznie folder C:** Qoobox**.

Daj ten log.

jessi

niezDarek · 8 Listopad 2007 13:05

ComboFix 07-11-08.1 - frog 2007-11-08 13:55:13.2 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.2.1250.1.1045.18.231 [GMT 1:00] Running from: C:\Documents and Settings\frog\Pulpit\ComboFix.exe Command switches used :: C:\Documents and Settings\frog\Pulpit\CFScript.txt * Created a new restore point FILE C:\Program Files\MySearch\bar\1.bin\S4BAR.DLL . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Program Files\MySearch C:\Program Files\MySearch\bar\1.bin\NPMYSRCH.DLL C:\Program Files\MySearch\bar\1.bin\S4BAR.DLL C:\Program Files\MySearch\bar\1.bin\S4FFXTBR.JAR C:\Program Files\MySearch\bar\1.bin\S4FFXTBR.MANIFEST C:\Program Files\MySearch\bar\1.bin\S4NTSTBR.JAR C:\Program Files\MySearch\bar\1.bin\S4NTSTBR.MANIFEST C:\Program Files\MySearch\bar\1.bin\S4PLUGIN.DLL C:\Program Files\MySearch\bar\Cache\008F6653 C:\Program Files\MySearch\bar\Cache\00902D5C C:\Program Files\MySearch\bar\Cache\009032FA.bmp C:\Program Files\MySearch\bar\Cache\00903ED1.bmp C:\Program Files\MySearch\bar\Cache\files.ini C:\Program Files\MySearch\bar\History\search2 C:\Program Files\MySearch\bar\Settings\prevcfg2.htm . ((((((((((((((((((((((((( Files Created from 2007-10-08 to 2007-11-08 ))))))))))))))))))))))))))))))) . 2007-11-06 18:50 2007-11-06 18:05 2007-11-06 17:46 2007-11-06 17:45 2007-11-06 17:39 520,192 --------- C:\WINDOWS\system32\ati2sgag.exe 2007-11-06 17:36 2007-11-06 15:40 41,068 --------- C:\WINDOWS\system32\ActPanel.dll 2007-11-06 14:51 2007-11-05 16:16 0 --a------ C:\WINDOWS\nsreg.dat 2007-11-05 16:10 2007-11-05 16:10 2007-11-04 11:02 2007-11-04 11:00 2007-11-04 11:00 2007-11-04 10:48 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys 2007-11-04 10:48 15,104 --a–c— C:\WINDOWS\system32\dllcache\usbscan.sys 2007-11-04 10:40 306,688 --a------ C:\WINDOWS\IsUninst.exe 2007-11-04 10:40 278,584 --a------ C:\WINDOWS\system32\HPZidr12.dll 2007-11-04 10:40 204,800 --a------ C:\WINDOWS\system32\HPZipr12.dll 2007-11-04 10:40 94,208 --a------ C:\WINDOWS\system32\HPZipt12.dll 2007-11-04 10:40 69,632 --a------ C:\WINDOWS\system32\HPZipm12.exe 2007-11-04 10:40 61,440 --a------ C:\WINDOWS\system32\HPZinw12.exe 2007-11-04 10:40 57,344 --a------ C:\WINDOWS\system32\HPZisn12.dll 2007-11-04 10:36 113,073 --a------ C:\WINDOWS\hpoins07.dat 2007-11-04 10:36 21,124 --------- C:\WINDOWS\hpomdl07.dat 2007-11-04 10:35 26,496 --a–c— C:\WINDOWS\system32\dllcache\usbstor.sys 2007-11-03 13:37 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-11-03 13:11 974,848 --a------ C:\WINDOWS\system32\mfc70.dll 2007-11-03 13:11 638,976 --a------ C:\WINDOWS\system32\divx.dll 2007-11-03 13:11 524,288 --a------ C:\WINDOWS\system32\xvidcore.dll 2007-11-03 13:11 487,424 --a------ C:\WINDOWS\system32\msvcp70.dll 2007-11-03 13:11 413,760 --a------ C:\WINDOWS\system32\mpg4c32.dll 2007-11-03 13:11 344,064 --a------ C:\WINDOWS\system32\msvcr70.dll 2007-11-03 13:11 261,632 --a------ C:\WINDOWS\system32\mcdvd_32.dll 2007-11-03 13:11 139,264 --a------ C:\WINDOWS\system32\xvidvfw.dll 2007-11-02 18:09 2007-11-02 18:04 1,700,352 --a------ C:\WINDOWS\system32\gdiplus.dll 2007-11-02 17:58 2007-11-02 17:57 2007-11-02 16:39 219,648 --a–c— C:\WINDOWS\system32\dllcache\uxtheme.dll 2007-11-02 14:31 187,392 --a------ C:\WINDOWS\system32\JPGUtils.dll 2007-11-02 14:03 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys 2007-11-02 14:03 31,616 --a–c— C:\WINDOWS\system32\dllcache\usbccgp.sys 2007-11-02 14:03 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys 2007-11-02 14:03 25,856 --a–c— C:\WINDOWS\system32\dllcache\usbprint.sys 2007-11-02 13:53 737,280 --a------ C:\WINDOWS\iun6002.exe 2007-11-02 13:44 11,347,410 --a------ C:\WINDOWS\ie-ads.reg 2007-11-02 13:44 119,808 --a------ C:\WINDOWS\system32\Msstdfmt.dll 2007-11-02 13:44 32,768 --a------ C:\WINDOWS\system32\ServiceRepair.exe 2007-11-02 13:44 23,130 --a------ C:\WINDOWS\system32\tcpipbak.reg 2007-11-02 13:44 674 --a------ C:\WINDOWS\ie-ads-uninst.reg 2007-11-02 13:44 492 --a------ C:\WINDOWS\system32\outfix.reg 2007-11-02 13:44 300 --a------ C:\WINDOWS\totals.reg 2007-11-02 12:01 2007-11-02 12:01 2007-11-02 11:59 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll 2007-11-02 11:59 60,273 --a------ C:\WINDOWS\system32\pthreadGC2.dll 2007-11-02 11:59 7,680 --a------ C:\WINDOWS\system32\ff_vfw.dll 2007-11-02 09:49 2007-10-31 18:58 2007-10-31 18:12 2,560 --a------ C:\WINDOWS_MSRSTRT.EXE 2007-10-31 17:41 10 --a------ C:\WINDOWS\system32\wfxhelp2.dll 2007-10-31 16:57 142,848 --a------ C:\WINDOWS\system32\Newcpl(2).exe 2007-10-31 11:40 36,864 --------- C:\WINDOWS\system32\wbsys.dll 2007-10-31 11:40 20,480 --a------ C:\WINDOWS\system32\wbload.dll 2007-10-30 15:06 2007-10-30 15:06 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll 2007-10-30 10:52 512,096 --a------ C:\WINDOWS\system32\drivers\amon.sys 2007-10-30 10:52 298,104 --a------ C:\WINDOWS\system32\imon.dll 2007-10-30 10:52 15,424 --a------ C:\WINDOWS\system32\drivers\nod32drv.sys 2007-10-29 10:36 2007-10-29 07:48 2007-10-29 07:46 2007-10-29 06:33 23,856 --a------ C:\WINDOWS\system32\spupdsvc.exe 2007-10-28 18:43 657 --a------ C:\WINDOWS\mozver.dat 2007-10-28 17:32 172,416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys 2007-10-28 17:32 142,464 --a------ C:\WINDOWS\system32\drivers\aec.sys 2007-10-28 17:32 82,944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys 2007-10-28 17:32 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys 2007-10-28 17:32 52,864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys 2007-10-28 17:32 6,400 --a------ C:\WINDOWS\system32\drivers\splitter.sys 2007-10-28 17:32 2,944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys 2007-10-28 17:30 9,196,032 --a------ C:\WINDOWS\system32\RTLCPL.EXE 2007-10-28 17:30 208,896 --------- C:\WINDOWS\alcupd.exe 2007-10-28 17:30 139,264 --------- C:\WINDOWS\alcrmv.exe 2007-10-28 17:30 584 --------- C:\WINDOWS\system32\drivers\alcxinit.dat 2007-10-28 16:57 641,752 -ra------ C:\WINDOWS\system32\drivers\cfosspeed.sys 2007-10-28 16:54 277,720 --a------ C:\WINDOWS\system32\cfosspeed.dll 2007-10-28 16:49 2,576 --a------ C:\WINDOWS\unins000.dat 2007-10-28 16:30 2007-10-28 16:26 2007-10-28 16:04 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys 2007-10-28 16:03 58,624 --a------ C:\WINDOWS\system32\drivers\redbook.sys 2007-10-28 16:02 2,373,088 --a------ C:\WINDOWS\system32\ati3duag.dll 2007-10-28 16:02 2,354,720 --a------ C:\WINDOWS\system32\ativvaxx.dll 2007-10-28 16:02 1,681,920 --a------ C:\WINDOWS\system32\drivers\ati2mtag.sys 2007-10-28 16:02 870,784 --a------ C:\WINDOWS\system32\ati3d1ag.dll 2007-10-28 16:02 286,720 --a------ C:\WINDOWS\system32\ati2cqag.dll 2007-10-28 16:02 258,048 --a------ C:\WINDOWS\system32\ati2dvag.dll 2007-10-28 16:02 46,464 --a------ C:\WINDOWS\system32\drivers\GAGP30KX.SYS . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-08 12:57 --------- d-----w C:\Program Files\cFosSpeed 2007-11-06 14:54 --------- d-----w C:\Program Files\Java 2007-11-04 10:08 --------- d-----w C:\Documents and Settings\frog\Dane aplikacji\HP 2007-11-04 09:59 --------- d-----w C:\Program Files\Common Files\HP 2007-11-03 12:27 --------- d-----w C:\Program Files\Common Files\AVSMedia 2007-11-02 17:02 12,400 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys 2007-11-02 16:02 --------- d-----w C:\Program Files\Common Files\COWON 2007-10-31 17:47 --------- d-----w C:\Program Files\Windows Media Connect 2 2007-10-31 13:33 --------- d-----w C:\Program Files\Common Files\Stardock 2007-10-29 16:49 --------- d-----w C:\Program Files\Winamp 2007-10-29 16:47 --------- d-----w C:\Program Files\Neostrada TP 2007-10-29 16:47 --------- d-----w C:\Program Files\MultiRes 2007-10-29 16:44 --------- d-----w C:\Program Files\Microsoft Location Finder 2007-10-29 16:44 --------- d-----w C:\Program Files\Java Web Start 2007-10-29 15:14 63,488 ----a-w C:\Program Files\xpicleanup.exe 2007-10-28 16:31 --------- d-----w C:\Program Files\AvRack 2007-10-28 14:21 --------- d-----w C:\Program Files\Thomson 2007-10-28 13:45 233,472 ----a-w C:\Documents and Settings\LocalService.ZARZąDZANIE NT.004\NTUSER.DAT 2007-10-28 13:45 229,376 ----a-w C:\Documents and Settings\NetworkService.ZARZąDZANIE NT.004\NTUSER.DAT 2007-10-27 14:11 --------- d-----w C:\Program Files\Support Tools 2007-10-27 14:10 --------- d-----w C:\Program Files\res 2007-10-27 13:58 --------- d-----w C:\Program Files\AdVantage 2007-10-26 15:46 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard 2007-10-25 08:07 --------- d-----w C:\Program Files\Microsoft Bootvis 2007-10-24 11:40 --------- d-----w C:\Program Files\sisagp 2007-10-21 14:19 --------- d-----w C:\Documents and Settings\frog\Dane aplikacji\Ashampoo 2007-10-16 11:45 --------- d-----w C:\Program Files\Common Files\InstallShield 2007-10-13 17:31 --------- d–h--w C:\Program Files\InstallShield Installation Information 2007-10-08 16:58 --------- d-----w C:\Program Files\HP 2007-10-04 09:55 --------- d-----w C:\Documents and Settings\frog\Dane aplikacji\GeoVid 2007-10-04 06:52 --------- d-----w C:\Program Files\Nowy folder (3) 2007-10-04 06:52 --------- d-----w C:\Program Files\Nowy folder (2) 2007-10-04 06:26 --------- d-----w C:\Program Files\C-Media Audio 2007-10-04 06:22 --------- d-----w C:\Program Files\C-Media 3D Audio 2007-10-02 16:38 --------- d-----w C:\Documents and Settings\frog\Dane aplikacji\Ahead 2007-10-02 16:37 --------- d-----w C:\Documents and Settings\frog\Dane aplikacji\Media Player Classic 2007-10-02 16:37 --------- d-----w C:\Documents and Settings\frog\Dane aplikacji\Lavasoft 2007-10-02 16:37 --------- d-----w C:\Documents and Settings\frog\Dane aplikacji\Gadu-Gadu 2007-10-02 16:37 --------- d-----w C:\Documents and Settings\frog\Dane aplikacji\COWON 2007-10-02 16:37 --------- d-----w C:\Documents and Settings\frog\Dane aplikacji\atitray 2007-10-02 16:35 --------- d-----w C:\Documents and Settings\frog\Dane aplikacji\zvprt50 2007-10-02 16:35 --------- d-----w C:\Documents and Settings\frog\Dane aplikacji\TuneUp Software 2007-10-02 16:32 --------- d-s—w C:\Documents and Settings\LocalService.ZARZąDZANIE NT.004\Dane aplikacji\Microsoft 2007-10-02 16:31 --------- d-s—w C:\Documents and Settings\NetworkService.ZARZąDZANIE NT.004\Dane aplikacji\Microsoft 2007-10-02 15:05 --------- d-----w C:\Program Files\SiSLan 2007-10-02 12:29 233,472 ----a-w C:\Documents and Settings\NetworkService.ZARZąDZANIE NT.003\NTUSER.DAT 2007-10-02 12:29 233,472 ----a-w C:\Documents and Settings\LocalService.ZARZąDZANIE NT.003\NTUSER.DAT 2007-09-29 16:42 --------- d-----w C:\Program Files\Joost 2007-09-25 15:20 --------- d-----w C:\Program Files\Bonjour 2007-09-24 20:15 159 ----a-w C:\fix.reg 2007-09-22 14:11 --------- d-----w C:\Program Files\MSECACHE 2007-09-18 16:56 --------- d-----w C:\Program Files\Microsoft Visual Studio 8 2007-09-18 13:06 786,432 ----a-w C:\Documents and Settings\NetworkService.ZARZąDZANIE NT.001\NTUSER.DAT 2007-09-18 13:06 786,432 ----a-w C:\Documents and Settings\LocalService.ZARZąDZANIE NT.001\NTUSER.DAT 2007-09-18 13:06 262,144 —ha-w C:\Documents and Settings\NetworkService.ZARZąDZANIE NT\NTUSER.DAT 2007-09-18 13:06 262,144 —ha-w C:\Documents and Settings\LocalService.ZARZąDZANIE NT\NTUSER.DAT 2007-09-18 13:06 262,144 ------w C:\Documents and Settings\NetworkService.ZARZąDZANIE NT.000\NTUSER.DAT 2007-09-18 13:06 262,144 ------w C:\Documents and Settings\LocalService.ZARZąDZANIE NT.000\NTUSER.DAT 2007-09-18 13:06 233,472 ----a-w C:\Documents and Settings\NetworkService.ZARZąDZANIE NT.002\NTUSER.DAT 2007-09-18 13:06 233,472 ----a-w C:\Documents and Settings\LocalService.ZARZąDZANIE NT.002\NTUSER.DAT 2007-09-18 13:00 --------- d-----w C:\Program Files\Common Files\Nero 2007-09-18 12:46 --------- d-----w C:\Program Files\Common Files\Ahead 2007-09-15 16:37 --------- d-----w C:\Program Files\AskTBar 2007-09-13 15:42 --------- d-----w C:\Program Files\Kaspersky Lab 2007-03-20 16:59 1,441 ----a-w C:\Program Files\install.log 2007-01-15 12:28 0 -c–a-w C:\Program Files.autoreg 2006-12-28 13:33 956 ----a-w C:\Program Files\updates.xml 2006-12-28 13:33 7,786 -c–a-w C:\Program Files\xpcom.dll 2006-12-28 13:33 68,213 -c–a-w C:\Program Files\xpcom_compat.dll 2006-12-28 13:33 6,768 -c–a-w C:\Program Files\xpistub.dll 2006-12-28 13:33 57 ----a-w C:\Program Files\active-update.xml 2006-12-28 13:33 420,967 -c–a-w C:\Program Files\js3250.dll 2006-12-28 13:33 400,496 ----a-w C:\Program Files\xpcom_core.dll 2006-12-28 13:33 364,654 -c–a-w C:\Program Files\softokn3.dll 2006-12-28 13:33 364,646 -c–a-w C:\Program Files\nss3.dll 2006-12-28 13:33 28,787 -c–a-w C:\Program Files\plc4.dll 2006-12-28 13:33 24,686 -c–a-w C:\Program Files\plds4.dll 2006-12-28 13:33 237,677 -c–a-w C:\Program Files\nssckbi.dll 2006-12-28 13:33 155,758 -c–a-w C:\Program Files\nspr4.dll 2006-12-28 13:33 110,694 -c–a-w C:\Program Files\ssl3.dll 2006-12-28 13:33 106,602 -c–a-w C:\Program Files\smime3.dll 2006-12-28 13:32 8,322 -c–a-w C:\Program Files\AccessibleMarshal.dll 2006-12-25 10:39 324 -c–a-w C:\Program Files\README.txt 2006-12-25 10:39 30,869 -c–a-w C:\Program Files\LICENSE 2006-12-25 10:39 145 -c–a-w C:\Program Files\updater.ini 2006-12-25 10:39 1,694 ----a-w C:\Program Files\removed-files 2006-12-11 01:03 171 ----a-w C:\Program Files\browserconfig.properties 2006-12-05 15:08 2,983 -c–a-w C:\Program Files\install_wizard.log 2006-12-05 15:08 1,743 -c–a-w C:\Program Files\install_status.log

Gutek · 8 Listopad 2007 23:24

Daj log z Silenta - http://forum.dobreprogramy.pl/viewtopic.php?t=36654

niezDarek · 9 Listopad 2007 08:45

“Silent Runners.vbs”, revision 52, http://www.silentrunners.org/ Operating System: Windows XP SP2 Output limited to non-default values, except where indicated by “{++}” Startup items buried in registry: --------------------------------- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++} “CTFMON.EXE” = “C:\WINDOWS\system32\ctfmon.exe” [MS] “BitComet” = ““D:\BitComet\BitComet.exe”” [“www.BitComet.com”] “SpeedX” = “E:\Speed-X\SpeedX.exe” [“MyPortal.pl”] “Gadu-Gadu” = ““E:\Gadu-Gadu\gg.exe” /tray” [“Gadu-Gadu S.A.”] HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++} “SpeedTouch USB Diagnostics” = ““C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe” /icon” [“THOMSON Telecom Belgium”] “cFosSpeed” = “C:\Program Files\cFosSpeed\cFosSpeed.exe” [“cFos Software GmbH”] “SunJavaUpdateSched” = ““C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe”” [“Sun Microsystems, Inc.”] “Ad Muncher” = ““F:\ad-muncher\AdMunch.exe” /bt” [null data] “SmartDefrag” = ““F:\IObit SmartDefrag\IObit SmartDefrag.exe” /startup” [null data] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}(Default) = (no title provided) -> {HKLM…CLSID} = “SSVHelper Class” \InProcServer32(Default) = “C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll” [“Sun Microsystems, Inc.”] {9030D464-4C02-4ABF-8ECC-5164760863C6}(Default) = (no title provided) -> {HKLM…CLSID} = “Windows Live Sign-in Helper” \InProcServer32(Default) = “C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll” [MS] {9394EDE7-C8B5-483E-8773-474BF36AF6E4}(Default) = (no title provided) -> {HKLM…CLSID} = “ST” \InProcServer32(Default) = “C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll” [MS] {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}(Default) = (no title provided) -> {HKLM…CLSID} = “MSNToolBandBHO” \InProcServer32(Default) = “C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\pl-pl\msntb.dll” [MS] HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ “{42071714-76d4-11d1-8b24-00a0c9068ff3}” = “Rozszerzenie CPL kadrowania wyświetlania” -> {HKLM…CLSID} = “Rozszerzenie CPL kadrowania wyświetlania” \InProcServer32(Default) = “deskpan.dll” [file not found] “{88895560-9AA2-1069-930E-00AA0030EBC8}” = “Rozszerzenie ikony HyperTerminalu” -> {HKLM…CLSID} = “HyperTerminal Icon Ext” \InProcServer32(Default) = “C:\WINDOWS\system32\hticons.dll” [“Hilgraeve, Inc.”] “{B41DB860-8EE4-11D2-9906-E49FADC173CA}” = “WinRAR shell extension” -> {HKLM…CLSID} = “WinRAR” \InProcServer32(Default) = “F:\winrar\rarext.dll” [null data] “{FC9FB64A-1EB2-4CCF-AF5E-1A497A9B5C2D}” = “Messenger Sharing Folders” -> {HKLM…CLSID} = “Moje foldery udostępniania” \InProcServer32(Default) = “C:\Program Files\MSN Messenger\fsshext.8.1.0178.00.dll” [MS] “{2F5AC606-70CF-461C-BFE1-734234536262}” = “WindowBlinds CPL Extension” -> {HKLM…CLSID} = “DisplayCplExt Class” \InProcServer32(Default) = “F:\Program Files\Stardock\Object Desktop\WindowBlinds\wbui.dll” [“Stardock.Net, Inc”] “{8D1636FD-CA49-4B4E-90E4-0A20E03A15E8}” = “jetAudio” -> {HKLM…CLSID} = “JetFlExt Class” \InProcServer32(Default) = “F:\jetaudio\JetFlExt.dll” [“COWON America”] “{5E2121EE-0300-11D4-8D3B-444553540000}” = “Catalyst Context Menu extension” -> {HKLM…CLSID} = “SimpleShlExt Class” \InProcServer32(Default) = “C:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll” [empty string] HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ “WPDShServiceObj” = “{AAA288BA-9A4C-45B0-95D7-94D524869DB5}” -> {HKLM…CLSID} = “WPDShServiceObj Class” \InProcServer32(Default) = “C:\WINDOWS\system32\WPDShServiceObj.dll” [MS] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ <> AtiExtEvent\DLLName = “Ati2evxx.dll” [“ATI Technologies Inc.”] <> WBSrv\DLLName = “F:\PROGRA~1\Stardock\OBJECT~1\WindowBlinds\wbsrv.dll” [“Stardock”] HKLM\Software\Classes*\shellex\ContextMenuHandlers\ WinRAR(Default) = “{B41DB860-8EE4-11D2-9906-E49FADC173CA}” -> {HKLM…CLSID} = “WinRAR” \InProcServer32(Default) = “F:\winrar\rarext.dll” [null data] HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\ jetAudio(Default) = “{8D1636FD-CA49-4B4E-90E4-0A20E03A15E8}” -> {HKLM…CLSID} = “JetFlExt Class” \InProcServer32(Default) = “F:\jetaudio\JetFlExt.dll” [“COWON America”] WinRAR(Default) = “{B41DB860-8EE4-11D2-9906-E49FADC173CA}” -> {HKLM…CLSID} = “WinRAR” \InProcServer32(Default) = “F:\winrar\rarext.dll” [null data] HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\ jetAudio(Default) = “{8D1636FD-CA49-4B4E-90E4-0A20E03A15E8}” -> {HKLM…CLSID} = “JetFlExt Class” \InProcServer32(Default) = “F:\jetaudio\JetFlExt.dll” [“COWON America”] WinRAR(Default) = “{B41DB860-8EE4-11D2-9906-E49FADC173CA}” -> {HKLM…CLSID} = “WinRAR” \InProcServer32(Default) = “F:\winrar\rarext.dll” [null data] Group Policies {policy setting}: -------------------------------- Note: detected settings may not have any effect. HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\ “ClearRecentDocsOnExit” = (REG_DWORD) hex:0x00000001 {unrecognized setting} “NoLowDiskSpaceChecks” = (REG_DWORD) hex:0x00000001 {unrecognized setting} “NoInstrumentation” = (REG_DWORD) hex:0x00000001 {unrecognized setting} HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\ “NoRemoteRecursiveEvents” = (REG_DWORD) hex:0x00000001 {unrecognized setting} “ClearRecentDocsOnExit” = (REG_DWORD) hex:0x00000001 {unrecognized setting} HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\ “shutdownwithoutlogon” = (REG_DWORD) hex:0x00000001 {Shutdown: Allow system to be shut down without having to log on} “undockwithoutlogon” = (REG_DWORD) hex:0x00000001 {Devices: Allow undock without having to log on} Active Desktop and Wallpaper: ----------------------------- Active Desktop may be disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState Displayed if Active Desktop enabled and wallpaper not set by Group Policy: HKCU\Software\Microsoft\Internet Explorer\Desktop\General\ “Wallpaper” = “C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp” Displayed if Active Desktop disabled and wallpaper not set by Group Policy: HKCU\Control Panel\Desktop\ “Wallpaper” = “C:\Documents and Settings\frog\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp” Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = “%SystemRoot%\System32\mswsock.dll” [MS] 000000000002\LibraryPath = “%SystemRoot%\System32\winrnr.dll” [MS] 000000000003\LibraryPath = “%SystemRoot%\System32\mswsock.dll” [MS] Transport Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: C:\WINDOWS\system32\imon.dll ["Eset "], 01 - 05, 11 %SystemRoot%\system32\mswsock.dll [MS], 06 - 08, 12 - 19 %SystemRoot%\system32\rsvpsp.dll [MS], 09 - 10 Toolbars, Explorer Bars, Extensions: ------------------------------------ Toolbars HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ “{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}” -> {HKLM…CLSID} = “MSN” \InProcServer32(Default) = “C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\pl-pl\msntb.dll” [MS] HKLM\Software\Microsoft\Internet Explorer\Toolbar\ “{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}” = “0” -> {HKLM…CLSID} = “MSN” \InProcServer32(Default) = “C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\pl-pl\msntb.dll” [MS] Extensions (Tools menu items, main toolbar menu buttons) HKLM\Software\Microsoft\Internet Explorer\Extensions\ {04849C74-016E-4A43-8AA5-1F01DE57F4A1}\ “ButtonText” = “Trace” “MenuText” = “VisualRoute Trace” “CLSIDExtension” = “{8C85E2EE-9FD6-11D5-B770-504D54C10000}” -> {HKLM…CLSID} = “vrie” \InProcServer32(Default) = “F:\VisualRoute\vrie.dll” [“VisualWare”] {08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ “MenuText” = “Sun Java Console” “CLSIDExtension” = “{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}” -> {HKCU…CLSID} = “Java Plug-in 1.6.0_03” \InProcServer32(Default) = “C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll” [“Sun Microsystems, Inc.”] -> {HKLM…CLSID} = “Java Plug-in 1.6.0_03” \InProcServer32(Default) = “C:\Program Files\Java\jre1.6.0_03\bin\npjpi160_03.dll” [“Sun Microsystems, Inc.”] {FB5F1910-F110-11D2-BB9E-00C04F795683}\ “ButtonText” = “Messenger” “MenuText” = “Windows Messenger” “Exec” = “C:\Program Files\Messenger\msmsgs.exe” [MS] Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ cFosSpeed System Service, cFosSpeedS, ““C:\Program Files\cFosSpeed\spd.exe” -service” [“cFos Software GmbH”] NOD32 Kernel Service, NOD32krn, ““F:\Eset\nod32krn.exe”” ["Eset "] Pml Driver HPZ12, Pml Driver HPZ12, “C:\WINDOWS\system32\HPZipm12.exe” [“HP”] Print Monitors: --------------- HKLM\System\CurrentControlSet\Control\Print\Monitors\ HP Standard TCP/IP Port\Driver = “HpTcpMon.dll” [“Hewlett Packard”] hpzsnt12\Driver = “hpzsnt12.dll” [“HP”] ---------- (launch time: 2007-11-09 09:43:27) <>: Suspicious data at a malware launch point. + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + To search all directories of local fixed drives for DESKTOP.INI DLL launch points, use the -supp parameter or answer “No” at the first message box and “Yes” at the second message box. ---------- (total run time: 36 seconds, including 3 seconds for message boxes)

Gutek · 9 Listopad 2007 19:56

Czyszczenie rejestru:

RegCleaner - http://www.dobreprogramy.pl/index.php?dz=2&t=29&id=177

możesz rejestr przelecieć albo

jv16 PowerTools - http://www.dobreprogramy.pl/index.php?dz=2&t=29&id=509

Opis RegCleaner - http://www.agavk.p9.pl/strony/progra_regcleaner.php

Zobacz - Obsługa jv16 PowerTools