Spowolnienie komputera - proszę o sprawdzenie loga

system · 8 Sierpień 2007 19:07

komputer wolniej chodzi i przeglądarka się zawiesza - proszę o sprawdzenie loga

Logfile of HijackThis v1.99.1 Scan saved at 20:59:27, on 2007-08-08 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Unable to get Internet Explorer version! Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Kerio\Personal Firewall\persfw.exe C:\WINDOWS\System32\snmp.exe C:\Program Files\Spamihilator\spamihilator.exe C:\WINDOWS\system32\wscntfy.exe c:\program files\a-squared free\a2service.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe D:\Programy użytkowe\eMule\eMule.exe D:\Programy użytkowe\anty-trojan\Programy do logów\HijackThis.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\userdump.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/ O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O4 - HKLM…\Run: [kav] “C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe” O4 - HKCU…\Run: [spamihilator] “C:\Program Files\Spamihilator\spamihilator.exe” O4 - HKCU…\Run: [Gadu-Gadu] “C:\Program Files\Gadu-Gadu\gg.exe” /tray O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra button: Ochrona WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O17 - HKLM\System\CCS\Services\Tcpip…{76AF6661-0E3C-4CE6-9F2C-05285B73184F}: NameServer = 213.241.79.37 83.238.255.76 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - c:\program files\a-squared free\a2service.exe O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing) O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: Kerio Personal Firewall (PersFw) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall\persfw.exe

Kuba11 · 8 Sierpień 2007 19:20

W logu jest OK.

Dołącz log z ComboFix

system · 8 Sierpień 2007 20:05

ComboFix 07-08-04.3 - “adam” 2007-08-08 21:55:06.1 BĄd wejcia: Brak aparatu skrypt˘w dla plik˘w o rozszerzeniu “.vbs”. - NTFS BĄd wejcia: Brak aparatu skrypt˘w dla plik˘w o rozszerzeniu “.vbs”. BĄd wejcia: Brak aparatu skrypt˘w dla plik˘w o rozszerzeniu “.vbs”. ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) C:\DOCUME~1\adam\Pulpit\internet.lnk ((((((((((((((((((((((((( Files Created from 2007-07-08 to 2007-08-08 ))))))))))))))))))))))))))))))) 2007-08-08 21:54 51,200 --a------ C:\WINDOWS\nircmd.exe (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-08-08 21:56 23812128 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat 2007-08-08 21:55 1390112 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat 2007-08-08 21:45 --------- d-------- C:\Program Files\Mozilla Thunderbird 2007-08-08 20:59 --------- d-------- C:\Program Files\Kaspersky Lab 2007-08-08 16:55 --------- d-------- C:\Program Files\a-squared Free 2007-08-07 23:53 310316 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx 2007-08-07 23:53 128396 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.idx 2007-07-29 21:45 --------- d-------- C:\Program Files\Winamp 2007-07-15 21:23 --------- d-------- C:\Program Files\MarBit 2007-06-18 23:14 --------- d-------- C:\Program Files\PhotoFiltre Studio 2007-06-18 23:01 41 —h----- C:\WINDOWS\dsez0174.dat 2007-05-16 17:19 85504 --a–c— C:\WINDOWS\system32\dllcache\wabimp.dll 2007-05-16 17:19 510976 --a–c— C:\WINDOWS\system32\dllcache\wab32.dll 2007-05-16 17:19 1314816 --a–c— C:\WINDOWS\system32\dllcache\msoe.dll 2007-05-16 17:18 86528 --a–c— C:\WINDOWS\system32\dllcache\directdb.dll 2007-05-16 17:18 683520 --a–c— C:\WINDOWS\system32\dllcache\inetcomm.dll 2007-05-16 17:18 683520 --a------ C:\WINDOWS\system32\inetcomm.dll 2007-05-16 15:30 67078 --a------ C:\WINDOWS\system32\perfc015.dat 2007-05-16 15:30 435978 --a------ C:\WINDOWS\system32\perfh015.dat ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “kav”=“C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe” [2006-03-24 20:09] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “Spamihilator”=“C:\Program Files\Spamihilator\spamihilator.exe” [2007-01-24 15:49] “Gadu-Gadu”=“C:\Program Files\Gadu-Gadu\gg.exe” [2007-03-19 19:17] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] “Authentication Packages”= msv1_0 relog_ap [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] SecurityProviders schannel.dll, digest.dll ************************************************************************** catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-08-08 21:56:27 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes … scanning hidden registry entries … [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\A\1\5\1c] “Order”=hex:08,00,00,00,02,00,00,00,0c,00,00,00,01,00,00,00,00,00,00,00 scanning hidden files … scan completed successfully hidden files: 0 ************************************************************************** Completion time: 2007-08-08 21:57:18 C:\ComboFix-quarantined-files.txt … 2007-08-08 21:57 — E O F —

Kuba11 · 8 Sierpień 2007 20:14

Start>Panel Sterowania>Opcje Folderów>Widok>usuń zaznaczenie przy ukryj chronione pliki systemowe

>zaznacz przy Pokaż ukryte pliki >Zastosuj>OK

Przeskanuj ten plik

C:\WINDOWS\ dsez0174.dat

na stronie http://www.virustotal.com i wklej raport.

system · 8 Sierpień 2007 20:30

Plik dsez0174.dat otrzymany 2007.08.08 22:21:12 (CET) Antywirus Wersja Ostatnia aktualizacja Wynik AhnLab-V3 2007.8.3.0 2007.08.08 - AntiVir 7.4.0.57 2007.08.08 - Authentium 4.93.8 2007.08.08 - Avast 4.7.1029.0 2007.08.08 - AVG 7.5.0.476 2007.08.08 - BitDefender 7.2 2007.08.08 - CAT-QuickHeal 9.00 2007.08.08 - ClamAV 0.91 2007.08.08 - DrWeb 4.33 2007.08.08 - eSafe 7.0.15.0 2007.07.31 - eTrust-Vet 31.1.5043 2007.08.08 - Ewido 4.0 2007.08.08 - FileAdvisor 1 2007.08.08 - Fortinet 2.91.0.0 2007.08.08 - F-Prot 4.3.2.48 2007.08.08 - F-Secure 6.70.13030.0 2007.08.08 - Ikarus T3.1.1.12 2007.08.08 - Kaspersky 4.0.2.24 2007.08.08 - McAfee 5093 2007.08.08 - Microsoft 1.2704 2007.08.08 - NOD32v2 2445 2007.08.08 - Norman 5.80.02 2007.08.08 - Panda 9.0.0.4 2007.08.08 - Prevx1 V2 2007.08.08 - Rising 19.35.22.00 2007.08.08 - Sophos 4.19.0 2007.08.01 - Sunbelt 2.2.907.0 2007.08.07 - Symantec 10 2007.08.08 - TheHacker 6.1.7.164 2007.08.08 - VBA32 3.12.2.2 2007.08.07 - VirusBuster 4.3.26:9 2007.08.08 - Webwasher-Gateway 6.0.1 2007.08.08 - Dodatkowe informacje File size: 41 bytes MD5: 94ddec55f01cde66cc67f6221b465382 SHA1: aee549c167113153f1683111d291388a9bc26640

qrczak13 · 9 Sierpień 2007 21:20

Jest ok.

Przejrzyj:

Optymalizacja i odchudzanie Windows XP