Problem z wyglądem windows .muli ... . brak netu

[barti_x]

witam mam taki poroblem że gdy włanczam komputer pierwszwe nie widzi karty dźwiękowej drugie jest klasyczny widok paków taki z 98 i nie da się tego zmienić trzecie strasznie muli czwarte sa zablokowane wszystkie polączenia do internetu

oto logi

Logfile of HijackThis v1.99.1

Scan saved at 11:00:54, on 2008-01-12

Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)


Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\cFosSpeed\LoveSpeed.exe

C:\Program Files\Speeditup Free\PCCheckup\PCCheckUp.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\WINDOWS\System32\RUNDLL32.EXE

C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe

C:\WINDOWS\adiras.exe

C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe

C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.1\apdproxy.exe

C:\Program Files\Speeditup Free\SpeedItUp.exe

C:\WINDOWS\System32\ctfmon.exe

C:\Program Files\Speeditup Free\SearchDefender.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\rundll32.exe

D:\pcformat.exe

D:\Ochrona\HijackThis 1.99.1\HijackThis.exe


R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.searchgateway.net/search

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.searchgateway.net/search

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.searchgateway.net/search-Google-Gateway.php?sa=Search+Here&client=pub-4642981363251965&forid=1&ie=ISO-8859-1&oe=ISO-8859-1&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A11&q=%s

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://csearcher.50webs.com/Krakersik2008.zip

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O4 - HKLM\..\Run: [cFosSpeed] C:\Program Files\cFosSpeed\LoveSpeed.exe

O4 - HKLM\..\Run: [PC-Checkup] "C:\Program Files\Speeditup Free\PCCheckup\PCCheckUp.exe" -mini

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [jv16PT - Privacy Protector] C:\Program Files\jv16 PowerTools 2005\jv16PT.exe -ExecTask "C:\Program Files\jv16 PowerTools 2005\Tasks\_PrivacyProtector\Task.jvb"

O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe

O4 - HKLM\..\Run: [adiras] C:\WINDOWS\adiras.exe

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033

O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.1\apdproxy.exe"

O4 - HKCU\..\Run: [SpeedItUpEX] C:\Program Files\Speeditup Free\SpeedItUp.exe -MINI

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe

O4 - HKCU\..\Run: [Search Defender] "C:\Program Files\Speeditup Free\SearchDefender.exe"

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"

O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O17 - HKLM\System\CCS\Services\Tcpip\..\{134C898C-03EF-44A7-8CB5-662A3CF596FA}: NameServer = 213.241.79.37 83.238.255.76

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL

O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll

O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

[Gutek]

Zmiana zasad wklejania logów na forum - viewtopic.php?f=16&t=213350

Użyj ComboFix

[barti_x]

zrobiłem tu są jakieś logi

ComboFix 08-01-13.1 - Barti_x 2008-01-12 21:39:41.1 - NTFSx86 Running from: K:\ComboFix.exe WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED . ((((((((((((((((((((((((( Files Created from 2007-12-13 to 2008-01-13 ))))))))))))))))))))))))))))))) . 2008-01-12 21:37 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe 2008-01-12 20:28 . 2008-01-12 20:28 2008-01-12 16:22 . 2001-10-26 18:28 13,463,552 --a–c— C:\WINDOWS\system32\dllcache\hwxjpn.dll 2008-01-12 16:21 . 2001-10-26 18:28 1,677,824 --a–c— C:\WINDOWS\system32\dllcache\chsbrkr.dll 2008-01-12 16:19 . 2001-10-26 18:29 159,744 --a–c— C:\WINDOWS\system32\dllcache\icwhelp.dll 2008-01-12 16:17 . 2006-11-08 16:43 633,344 -ra------ C:\WINDOWS\system32\drivers\cfosspeed.sys 2008-01-12 16:12 . 2001-08-17 20:12 23,070 --a------ C:\WINDOWS\system32\drivers\RTL8139.sys 2008-01-12 15:16 . 2008-01-12 15:16 2008-01-12 15:01 . 2008-01-12 15:01 2008-01-12 15:01 . 2008-01-12 15:01 2008-01-12 15:01 . 2008-01-12 15:01 2008-01-12 15:01 . 2008-01-12 15:01 2008-01-12 15:01 . 2008-01-12 15:01 2008-01-12 15:01 . 2008-01-12 15:01 2008-01-12 15:01 . 2008-01-12 15:01 2008-01-12 15:01 . 2008-01-12 15:01 2008-01-12 15:01 . 2008-01-12 15:01 2008-01-12 15:01 . 2008-01-12 15:01 2008-01-12 14:57 . 2008-01-12 14:57 2008-01-12 14:56 . 2008-01-12 15:01 2008-01-12 14:56 . 2008-01-12 15:01 2008-01-12 14:56 . 2008-01-12 15:01 2008-01-12 14:56 . 2008-01-12 15:01 2008-01-12 14:56 . 2008-01-12 15:01 2008-01-12 14:56 . 2008-01-12 15:01 2008-01-12 14:56 . 2008-01-12 15:01 2008-01-12 14:56 . 2008-01-12 15:01 2008-01-12 10:34 . 2008-01-12 15:01 2008-01-12 10:34 . 2008-01-12 15:01 2008-01-12 10:34 . 2008-01-12 15:01 2008-01-12 09:10 . 2008-01-12 09:17 169 --a------ C:\WINDOWS\adidsl.ini 2008-01-12 09:10 . 2008-01-12 09:10 21 --a------ C:\WINDOWS\Fast800.ini 2008-01-12 00:55 . 2008-01-12 00:55 2008-01-12 00:55 . 2008-01-12 00:55 2008-01-11 22:23 . 2008-01-12 11:49 54,635 --a------ C:\WINDOWS\setupapi.old 2008-01-11 22:11 . 2008-01-11 22:11 2008-01-11 19:27 . 2001-10-26 18:29 3,346,432 --a–c— C:\WINDOWS\system32\dllcache\msgr3en.dll 2008-01-11 19:27 . 2001-10-26 18:29 106,562 --a–c— C:\WINDOWS\system32\dllcache\srchctls.dll 2008-01-11 19:25 . 2001-10-26 18:29 869,376 --a------ C:\WINDOWS\system32\msdtctm.dll 2008-01-11 19:24 . 2002-09-20 17:03 1,268,224 --a–c— C:\WINDOWS\system32\dllcache\cimwin32.dll 2008-01-11 19:22 . 2001-08-17 21:59 50,048 --a------ C:\WINDOWS\system32\drivers\DMusic.sys 2008-01-11 19:22 . 2002-08-29 01:32 5,888 --a------ C:\WINDOWS\system32\drivers\splitter.sys 2008-01-11 19:21 . 2002-09-20 17:18 57,856 --a------ C:\WINDOWS\system32\drivers\redbook.sys 2008-01-11 19:21 . 2002-08-29 01:50 24,960 --a------ C:\WINDOWS\system32\drivers\usbprint.sys 2008-01-11 19:19 . 2002-08-29 01:06 182,400 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys 2008-01-11 19:19 . 2001-10-26 17:30 117,248 --a------ C:\WINDOWS\system32\ksproxy.ax 2008-01-11 19:19 . 2002-09-20 18:06 38,024 --a------ C:\WINDOWS\system32\drivers\termdd.sys 2008-01-11 19:19 . 2001-10-26 17:27 4,096 --a------ C:\WINDOWS\system32\ksuser.dll 2008-01-11 19:18 . 2002-09-20 22:25 1,086,182 -ra------ C:\WINDOWS\SET47.tmp 2008-01-11 19:18 . 2002-09-20 17:04 696,320 --a–c— C:\WINDOWS\system32\dllcache\sapi.dll 2008-01-11 19:18 . 2002-09-20 17:05 147,456 --a–c— C:\WINDOWS\system32\dllcache\sapi.cpl 2008-01-11 19:18 . 2002-09-20 17:06 132,096 --a------ C:\WINDOWS\system\WINSPOOL.DRV 2008-01-11 19:18 . 2002-09-20 18:04 72,192 --a------ C:\WINDOWS\system32\storprop.dll 2008-01-11 19:18 . 2001-10-27 12:34 13,923 -ra------ C:\WINDOWS\SET5C.tmp 2008-01-11 19:18 . 2001-08-17 22:51 10,496 --a------ C:\WINDOWS\system32\drivers\irenum.sys 2008-01-11 19:18 . 2001-08-17 22:51 10,496 --a–c— C:\WINDOWS\system32\dllcache\irenum.sys 2008-01-11 16:45 . 2008-01-11 16:45 2008-01-11 16:45 . 2006-09-25 17:45 666,240 --a------ C:\WINDOWS\system32\aswBoot.exe 2008-01-11 16:45 . 2004-01-09 11:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx 2008-01-11 16:45 . 2006-09-25 17:37 90,112 --a------ C:\WINDOWS\system32\AVASTSS.scr 2008-01-11 16:45 . 2006-09-25 17:40 87,424 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys 2008-01-11 16:45 . 2006-09-25 17:40 85,952 --a------ C:\WINDOWS\system32\drivers\aswmon.sys 2008-01-11 16:45 . 2006-09-25 17:39 36,176 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys 2008-01-11 16:45 . 2006-09-25 17:37 24,560 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys 2008-01-11 16:45 . 2006-09-25 17:39 16,352 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys 2008-01-11 16:35 . 2008-01-11 16:35 2008-01-11 16:35 . 2008-01-12 00:30 2008-01-11 16:34 . 2008-01-11 16:35 2008-01-11 15:49 . 2008-01-11 15:49 2008-01-11 15:46 . 2008-01-11 15:46 2008-01-11 15:46 . 2008-01-11 15:46 2008-01-05 13:05 . 2008-01-05 13:48 22 --a------ C:\WINDOWS\papatka.cfg 2008-01-05 13:04 . 2008-01-05 13:04 2008-01-04 14:23 . 2008-01-04 14:23 2008-01-04 14:22 . 2008-01-04 14:22 2007-12-31 11:05 . 2008-01-10 16:06 2007-12-31 11:05 . 2006-03-10 14:03 96,352 -ra------ C:\WINDOWS\system32\drivers\k310mdm.sys 2007-12-31 11:05 . 2006-03-10 14:03 87,824 -ra------ C:\WINDOWS\system32\drivers\k310mgmt.sys 2007-12-31 11:05 . 2006-03-10 14:03 85,696 -ra------ C:\WINDOWS\system32\drivers\k310obex.sys 2007-12-31 11:05 . 2006-03-10 14:03 60,800 -ra------ C:\WINDOWS\system32\drivers\k310bus.sys 2007-12-31 11:05 . 2006-03-10 14:03 9,264 -ra------ C:\WINDOWS\system32\drivers\k310mdfl.sys 2007-12-31 11:05 . 2006-03-10 14:03 6,208 -ra------ C:\WINDOWS\system32\drivers\k310cmnt.sys 2007-12-31 11:05 . 2006-03-10 14:03 6,208 -ra------ C:\WINDOWS\system32\drivers\k310cm.sys 2007-12-31 11:05 . 2006-03-10 14:03 5,840 -ra------ C:\WINDOWS\system32\drivers\k310whnt.sys 2007-12-31 11:05 . 2006-03-10 14:03 5,840 -ra------ C:\WINDOWS\system32\drivers\k310wh.sys 2007-12-31 11:02 . 2007-12-31 11:02 2007-12-31 11:00 . 2008-01-12 00:30 2007-12-31 11:00 . 2008-01-10 16:04 2007-12-31 10:39 . 2008-01-12 00:30 2007-12-30 22:18 . 2001-02-08 02:31 307,200 --a------ C:\WINDOWS\IsUninst.exe 2007-12-30 20:54 . 2007-12-30 20:54 2007-12-30 14:34 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll 2007-12-30 14:34 . 2006-12-08 12:02 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll 2007-12-30 11:11 . 2007-12-30 11:11 2007-12-30 00:57 . 2008-01-11 16:11 67 --a------ C:\WINDOWS\Clony2.ini 2007-12-30 00:56 . 2007-12-30 00:56 2007-12-30 00:53 . 2007-12-30 00:53 2007-12-30 00:24 . 2007-12-30 00:24 331 --a------ C:\WINDOWS\doom3.ini 2007-12-30 00:21 . 2007-12-30 00:42 2007-12-29 23:32 . 2007-12-29 23:32 . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-01-12 20:31 --------- d-----w C:\Program Files\cFosSpeed 2008-01-12 08:33 --------- d-----w C:\Program Files\SnadBoy’s Revelation v2 2008-01-12 08:10 33 ----a-w C:\WINDOWS\system32\drivers\adidsl.cfg 2008-01-12 08:09 --------- d–h--w C:\Program Files\InstallShield Installation Information 2008-01-11 16:21 --------- d-----w C:\Program Files\Perfect Keylogger Lite 2007-12-30 10:10 --------- d-----w C:\Program Files\EA GAMES 2007-12-29 23:20 --------- d-----w C:\Program Files\Common Files\InstallShield 2007-12-28 21:46 --------- d-----w C:\Documents and Settings\Barti_x\Dane aplikacji\BitTorrent 2007-12-01 18:51 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\NVIDIA 2007-11-25 18:37 --------- d-----w C:\Program Files\Micro DVD Player 2007-11-25 18:14 --------- d-----w C:\Program Files\ffdshow 2007-11-25 10:08 --------- d-----w C:\Documents and Settings\Barti_x\Dane aplikacji\Nero 2007-11-25 10:04 --------- d-----w C:\Program Files\Common Files\Nero 2007-11-25 10:00 --------- d-----w C:\Program Files\Nero 2007-11-25 10:00 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Nero 2007-11-25 09:47 --------- d-----w C:\Program Files\Ahead 2007-11-25 08:27 --------- d-----w C:\Documents and Settings\Barti_x\Dane aplikacji\Ulead Systems 2007-11-25 08:27 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Ulead Systems 2007-11-25 08:26 --------- d-----w C:\Program Files\Ulead Systems 2007-11-25 08:26 --------- d-----w C:\Program Files\Common Files\Ulead Systems 2007-11-24 18:48 --------- d-----w C:\Program Files\MSBuild 2007-11-24 18:48 --------- d-----w C:\Program Files\Microsoft Works 2007-11-24 15:30 --------- d-----w C:\Documents and Settings\Barti_x\Dane aplikacji\Ahead 2007-11-24 12:46 --------- d-----w C:\Program Files\Ares 2007-11-24 12:40 --------- d-----w C:\Program Files\LimeWire 2007-11-24 12:40 --------- d-----w C:\Program Files\Java 2007-11-24 12:38 --------- d-----w C:\Program Files\Common Files\Java 2007-11-24 11:16 --------- d-----w C:\Documents and Settings\Barti_x\Dane aplikacji\AdobeUM 2007-11-24 10:41 --------- d-----w C:\Program Files\TryMedia 2007-11-24 08:56 --------- d-----w C:\Program Files\Mirage Interactive 2007-11-23 20:55 --------- d-----w C:\Program Files\Real Alternative 2007-11-23 19:30 --------- d-----w C:\Program Files\Common Files\Adobe 2007-11-23 19:29 --------- d-----w C:\Documents and Settings\Barti_x\Dane aplikacji\Gadu-Gadu 2007-11-23 19:21 --------- d-----w C:\Program Files\BitTorrent_DNA 2007-11-23 19:21 --------- d-----w C:\Program Files\BitTorrent 2007-11-23 19:12 --------- d-----w C:\Program Files\MarBit 2007-11-23 18:22 --------- d-----w C:\Program Files\microsoft frontpage 2007-11-23 18:21 558,142 ----a-w C:\WINDOWS\java\Packages\SSFF7H7T.ZIP 2007-11-23 18:21 155,995 ----a-w C:\WINDOWS\java\Packages\7ZL3BFTF.ZIP 2007-11-23 18:19 --------- d-----w C:\Program Files\Usługi online 2007-10-23 13:20 972,072 ----a-w C:\WINDOWS\UNNeroMediaHome.exe 2007-10-22 07:51 972,072 ----a-w C:\WINDOWS\UNRecode.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “SpeedItUpEX”=“C:\Program Files\Speeditup Free\SpeedItUp.exe” [2007-08-30 00:57 2124800] “ctfmon.exe”=“C:\WINDOWS\System32\ctfmon.exe” [2002-09-20 17:05 13312] “Search Defender”=“C:\Program Files\Speeditup Free\SearchDefender.exe” [2007-08-02 02:54 541696] “MSMSGS”=“C:\Program Files\Messenger\msmsgs.exe” [2004-08-04 00:44 1667584] “BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}”=“C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe” [2007-10-23 14:18 202024] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “cFosSpeed”=“C:\Program Files\cFosSpeed\LoveSpeed.exe” [2005-10-28 15:40 513277] “PC-Checkup”=“C:\Program Files\Speeditup Free\PCCheckup\PCCheckUp.exe” [2007-08-02 02:08 3965440] “avast!”=“C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe” [2006-09-25 17:42 108160] “NvCplDaemon”=“C:\WINDOWS\system32\NvCpl.dll” [2006-10-22 12:22 7700480] “nwiz”=“nwiz.exe” [2006-10-22 12:22 1622016 C:\WINDOWS\system32\nwiz.exe] “HPDJ Taskbar Utility”=“C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe” [2002-03-28 10:20 188416] “adiras”=“C:\WINDOWS\adiras.exe” [2007-02-13 16:19 194128] “SunJavaUpdateSched”=“C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe” [2007-07-12 04:00 132496] “NeroFilterCheck”=“C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe” [2007-03-01 14:57 153136] “NBKeyScan”=“C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe” [2007-09-20 08:51 1836328] “GrooveMonitor”=“C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe” [2006-10-27 00:47 31016] “DAEMON Tools”=“C:\Program Files\DAEMON Tools\daemon.exe” [2006-11-12 11:48 157592] “Adobe Photo Downloader”=“C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.1\apdproxy.exe” [2007-06-26 17:58 61440] “NvMediaCenter”=“C:\WINDOWS\system32\NvMcTray.dll” [2006-10-22 12:22 86016] [HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] “CTFMON.EXE”=“C:\WINDOWS\System32\CTFMON.EXE” [2002-09-20 17:05 13312] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ DSLMON.lnk - C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2008-01-12 09:09:53] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] “NoInstrumentation”= 1 (0x1) [HKLM~\startupfolder\C:^Documents and Settings^Barti_x^Menu Start^Programy^Autostart^Microsoft Office Groove.lnk] backup=C:\WINDOWS\pss\Microsoft Office Groove.lnkStartup [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D] \Shell\AutoRun\command - D:\pcformat.exe *Newly Created Service* - PROCEXP90 . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-13 21:41:40 Windows 5.1.2600 Dodatek Service Pack. 1 NTFS scanning hidden processes … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2008-01-13 21:43:00 aha nic nie dało to dalej tak jest

[Gutek]

Najpierw użyj -

Pobierz program SDFix

[barti_x]

oto ten log z report i chciałem jeszcze powiedzieć że od wtedy kiedy to się stało strasznie długo odpala się komp

SDFix: Version 1.126 Run by Barti_x on 2008-01-14 at 11:56 Microsoft Windows XP [Wersja 5.1.2600] Running From: C:\sdfix\SDFix Safe Mode: Checking Services: Restoring Windows Registry Values Restoring Windows Default Hosts File Rebooting… Normal Mode: Checking Files: Trojan Files Found: C:\WINDOWS\system32\CatRoot\TMPB.tmp - Deleted C:\WINDOWS\system32\CatRoot\TMPC.tmp - Deleted Removing Temp Files… ADS Check: C:\WINDOWS No streams found. C:\WINDOWS\system32 No streams found. C:\WINDOWS\system32\svchost.exe No streams found. C:\WINDOWS\system32\ntoskrnl.exe No streams found. Final Check: catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-14 12:01:15 Windows 5.1.2600 Dodatek Service Pack. 1 NTFS scanning hidden processes … scanning hidden services & system hive … [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] “p0”=“C:\Program Files\DAEMON Tools” “h0”=dword:00000000 “khjeh”=hex:7e,b2,c1,12,cb,e8,f8,0e,aa,c9,b9,40,69,d1,a0,17,ea,11,d3,73,57,… [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] “a0”=hex:20,01,00,00,0b,f7,fc,02,20,a5,3f,95,87,82,77,5a,4d,12,a7,34,1d,… “khjeh”=hex:8d,d5,de,86,94,a2,79,0e,e7,03,ea,98,8c,c3,58,13,9d,26,8d,42,23,… [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] “khjeh”=hex:79,02,ff,c4,cc,a8,57,64,d1,7d,fc,68,a1,e1,20,70,ad,2a,b8,f7,40,… [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41] “khjeh”=hex:6c,62,30,2c,21,98,2f,89,97,ab,27,22,41,bb,d3,c7,e8,da,89,f7,6f,… [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42] “khjeh”=hex:63,0b,8a,77,58,cb,54,8d,31,a9,76,82,0c,13,c6,ac,07,af,08,84,80,… [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43] “khjeh”=hex:24,5c,82,66,1e,51,14,32,25,1f,a8,a6,5e,e6,f0,11,ee,46,a5,39,0a,… [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] “p0”=“C:\Program Files\DAEMON Tools” “h0”=dword:00000000 “khjeh”=hex:7e,b2,c1,12,cb,e8,f8,0e,aa,c9,b9,40,69,d1,a0,17,ea,11,d3,73,57,… [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] “a0”=hex:20,01,00,00,0b,f7,fc,02,20,a5,3f,95,87,82,77,5a,4d,12,a7,34,1d,… “khjeh”=hex:8d,d5,de,86,94,a2,79,0e,e7,03,ea,98,8c,c3,58,13,9d,26,8d,42,23,… [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] “khjeh”=hex:79,02,ff,c4,cc,a8,57,64,d1,7d,fc,68,a1,e1,20,70,ad,2a,b8,f7,40,… [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41] “khjeh”=hex:6c,62,30,2c,21,98,2f,89,97,ab,27,22,41,bb,d3,c7,e8,da,89,f7,6f,… [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42] “khjeh”=hex:63,0b,8a,77,58,cb,54,8d,31,a9,76,82,0c,13,c6,ac,07,af,08,84,80,… [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43] “khjeh”=hex:24,5c,82,66,1e,51,14,32,25,1f,a8,a6,5e,e6,f0,11,ee,46,a5,39,0a,… [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] “p0”=“C:\Program Files\DAEMON Tools” “h0”=dword:00000000 “khjeh”=hex:7e,b2,c1,12,cb,e8,f8,0e,aa,c9,b9,40,69,d1,a0,17,ea,11,d3,73,57,… [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] “a0”=hex:20,01,00,00,0b,f7,fc,02,20,a5,3f,95,87,82,77,5a,4d,12,a7,34,1d,… “khjeh”=hex:8d,d5,de,86,94,a2,79,0e,e7,03,ea,98,8c,c3,58,13,9d,26,8d,42,23,… [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] “khjeh”=hex:79,02,ff,c4,cc,a8,57,64,d1,7d,fc,68,a1,e1,20,70,ad,2a,b8,f7,40,… [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41] “khjeh”=hex:6c,62,30,2c,21,98,2f,89,97,ab,27,22,41,bb,d3,c7,e8,da,89,f7,6f,… [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42] “khjeh”=hex:63,0b,8a,77,58,cb,54,8d,31,a9,76,82,0c,13,c6,ac,07,af,08,84,80,… [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43] “khjeh”=hex:24,5c,82,66,1e,51,14,32,25,1f,a8,a6,5e,e6,f0,11,ee,46,a5,39,0a,… [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] “p0”=“C:\Program Files\DAEMON Tools” “h0”=dword:00000000 “khjeh”=hex:7e,b2,c1,12,cb,e8,f8,0e,aa,c9,b9,40,69,d1,a0,17,ea,11,d3,73,57,… [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] “a0”=hex:20,01,00,00,0b,f7,fc,02,20,a5,3f,95,87,82,77,5a,4d,12,a7,34,1d,… “khjeh”=hex:8d,d5,de,86,94,a2,79,0e,e7,03,ea,98,8c,c3,58,13,9d,26,8d,42,23,… [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] “khjeh”=hex:79,02,ff,c4,cc,a8,57,64,d1,7d,fc,68,a1,e1,20,70,ad,2a,b8,f7,40,… [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41] “khjeh”=hex:6c,62,30,2c,21,98,2f,89,97,ab,27,22,41,bb,d3,c7,e8,da,89,f7,6f,… [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42] “khjeh”=hex:63,0b,8a,77,58,cb,54,8d,31,a9,76,82,0c,13,c6,ac,07,af,08,84,80,… [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43] “khjeh”=hex:24,5c,82,66,1e,51,14,32,25,1f,a8,a6,5e,e6,f0,11,ee,46,a5,39,0a,… scanning hidden registry entries … [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\A\1\5\1c] “Order”=hex:08,00,00,00,02,00,00,00,b8,01,00,00,01,00,00,00,04,00,00,00,8c,… scanning hidden files … scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 Remaining Services: ------------------ Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] Remaining Files: --------------- File Backups: - C:\sdfix\SDFix\backups\backups.zip Files with Hidden Attributes: Thu 29 Nov 2007 4,348 …SH. — “C:\Documents and Settings\All Users\DRM\DRMv1.bak” Finished!

[Gutek]

Ja chce powiedzieć - Zmiana zasad wklejania logów na forum - viewtopic.php?f=16&t=213350

Nowy log z Combo +

Optymalizacja XP: viewtopic.php?t=76580

Optymalizacja autostartu: http://www.bezpieczenstwosystemow.pl/in … opic=116.0

Czyszczenie rejestru:

RegCleaner - http://www.dobreprogramy.pl/index.php?dz=2&t=29&id=177

możesz rejestr przelecieć albo

jv16 PowerTools - http://www.dobreprogramy.pl/index.php?dz=2&t=29&id=509

Opis RegCleaner - http://www.agavk.p9.pl/strony/progra_regcleaner.php

Zobacz - Obsługa jv16 PowerTools