WITAM!
Daj logi.
CTRL+ALT+DELETE i sprawdź w procesach co obciąża
olszaq
Używaj polskich znaków,bo znów temat poleci do kosza,opcja zmień i popraw.JNJN
jak zrobic logi???
Poczytaj tematy przyklejone w tym dziale i wszystko wiesz.
Logfile of HijackThis v1.99.1
Scan saved at 13:29:17, on 2007-06-16
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Kalendarz XP\Kalendarz.exe
C:\Program Files\Netropa\Multimedia Keyboard\TrayMon.exe
C:\Program Files\Netropa\Onscreen Display\OSD.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\Rar$EX00.156\HijackThis.exe
C:\Documents and Settings\admin\Moje dokumenty\hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://web.whenu.com/uninstall_weather. … EEPE100501
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O4 - HKLM…\Run: [RemoteControl] “C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe”
O4 - HKLM…\Run: [inCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM…\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM…\Run: [MULTIMEDIA KEYBOARD] C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
O4 - HKLM…\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM…\Run: [nwiz] nwiz.exe /install
O4 - HKCU…\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Kalendarz XP.lnk = C:\Program Files\Kalendarz XP\Kalendarz.exe
O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip…{03FBB1F1-63DA-4B71-92FA-D8CCFE328ED3}: NameServer = 212.85.112.32,193.110.121.20
O17 - HKLM\System\CS1\Services\Tcpip…{03FBB1F1-63DA-4B71-92FA-D8CCFE328ED3}: NameServer = 212.85.112.32,193.110.121.20
O17 - HKLM\System\CS2\Services\Tcpip…{03FBB1F1-63DA-4B71-92FA-D8CCFE328ED3}: NameServer = 212.85.112.32,193.110.121.20
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
ComboFix 07-06-13.3 - C:\Documents and Settings\admin\Pulpit\ComboFix.exe
“admin” - 2007-06-16 17:09:23 - Dodatek Service Pack 2 NTFS
((((((((((((((((((((((((( Files Created from 2007-05-16 to 2007-06-16 )))))))))))))))))))))))))))))))
2007-06-16 14:02 49,152 --a------ C:\WINDOWS\nircmd.exe
2007-06-16 12:05 5,248 --a------ C:\WINDOWS\system32\drivers\a347scsi.sys
2007-06-16 12:05 160,640 --a------ C:\WINDOWS\system32\drivers\a347bus.sys
2007-06-16 12:05
2007-06-16 12:05
2007-06-14 23:16
2007-06-13 17:28 98,304 -ra------ C:\WINDOWS\system32\nvwrspt.dll
2007-06-13 17:28 98,304 -ra------ C:\WINDOWS\system32\nvwrsit.dll
2007-06-13 17:28 98,304 -ra------ C:\WINDOWS\system32\nvwrses.dll
2007-06-13 17:28 98,304 -ra------ C:\WINDOWS\system32\nvrsja.dll
2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrstr.dll
2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrssk.dll
2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrsru.dll
2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrsptb.dll
2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrspl.dll
2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrsnl.dll
2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrshu.dll
2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrsfr.dll
2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrsfi.dll
2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrsde.dll
2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvrsko.dll
2007-06-13 17:28 90,112 -ra------ C:\WINDOWS\system32\nvwrssv.dll
2007-06-13 17:28 90,112 -ra------ C:\WINDOWS\system32\nvwrsno.dll
2007-06-13 17:28 86,016 -ra------ C:\WINDOWS\system32\nvwrssl.dll
2007-06-13 17:28 86,016 -ra------ C:\WINDOWS\system32\nvwrseng.dll
2007-06-13 17:28 81,920 -ra------ C:\WINDOWS\system32\nvrszht.dll
2007-06-13 17:28 81,920 -ra------ C:\WINDOWS\system32\nvrszhc.dll
2007-06-13 17:28 77,824 -ra------ C:\WINDOWS\system32\nvwrshe.dll
2007-06-13 17:28 61,440 -ra------ C:\WINDOWS\system32\nvwrsko.dll
2007-06-13 17:28 61,440 -ra------ C:\WINDOWS\system32\nvwrsja.dll
2007-06-13 17:28 49,152 -ra------ C:\WINDOWS\system32\nvwrszht.dll
2007-06-13 17:28 49,152 -ra------ C:\WINDOWS\system32\nvwrszhc.dll
2007-06-13 17:28 266,240 -ra------ C:\WINDOWS\system32\nvrshe.dll
2007-06-13 17:28 139,264 -ra------ C:\WINDOWS\system32\nvrsel.dll
2007-06-13 17:28 135,168 -ra------ C:\WINDOWS\system32\nvrspt.dll
2007-06-13 17:28 135,168 -ra------ C:\WINDOWS\system32\nvrsit.dll
2007-06-13 17:28 135,168 -ra------ C:\WINDOWS\system32\nvrses.dll
2007-06-13 17:28 131,072 -ra------ C:\WINDOWS\system32\nvrstr.dll
2007-06-13 17:28 131,072 -ra------ C:\WINDOWS\system32\nvrssk.dll
2007-06-13 17:28 131,072 -ra------ C:\WINDOWS\system32\nvrsru.dll
2007-06-13 17:28 131,072 -ra------ C:\WINDOWS\system32\nvrsptb.dll
2007-06-13 17:28 131,072 -ra------ C:\WINDOWS\system32\nvrsnl.dll
2007-06-13 17:28 131,072 -ra------ C:\WINDOWS\system32\nvrshu.dll
2007-06-13 17:28 131,072 -ra------ C:\WINDOWS\system32\nvrsfr.dll
2007-06-13 17:28 131,072 -ra------ C:\WINDOWS\system32\nvrsde.dll
2007-06-13 17:28 126,976 -ra------ C:\WINDOWS\system32\nvrssv.dll
2007-06-13 17:28 126,976 -ra------ C:\WINDOWS\system32\nvrspl.dll
2007-06-13 17:28 126,976 -ra------ C:\WINDOWS\system32\nvrsfi.dll
2007-06-13 17:28 122,880 -ra------ C:\WINDOWS\system32\nvrsno.dll
2007-06-13 17:28 122,880 -ra------ C:\WINDOWS\system32\nvrseng.dll
2007-06-13 17:28 102,400 -ra------ C:\WINDOWS\system32\nvwrsel.dll
2007-06-13 17:28 1,290,240 -ra------ C:\WINDOWS\system32\nvrssl.dll
2007-06-13 17:27 94,208 -ra------ C:\WINDOWS\system32\nvinstnt.dll
2007-06-13 17:27 90,112 -ra------ C:\WINDOWS\system32\nvwrsda.dll
2007-06-13 17:27 86,016 -ra------ C:\WINDOWS\system32\nvwrscs.dll
2007-06-13 17:27 81,920 -ra------ C:\WINDOWS\system32\nvwrsar.dll
2007-06-13 17:27 622,592 -ra------ C:\WINDOWS\system32\nvqtwk.dll
2007-06-13 17:27 61,440 -ra------ C:\WINDOWS\system32\nvsvc32.exe
2007-06-13 17:27 540,741 -ra------ C:\WINDOWS\system32\nview.dll
2007-06-13 17:27 372,736 -ra------ C:\WINDOWS\system32\nwiz.exe
2007-06-13 17:27 348,231 -ra------ C:\WINDOWS\system32\nvshell.dll
2007-06-13 17:27 278,528 -ra------ C:\WINDOWS\system32\dmcpl.exe
2007-06-13 17:27 2,912,256 -ra------ C:\WINDOWS\system32\nvoglnt.dll
2007-06-13 17:27 2,043,904 -ra------ C:\WINDOWS\system32\nvcpl.dll
2007-06-13 17:27 126,976 -ra------ C:\WINDOWS\system32\nvrsda.dll
2007-06-13 17:27 126,976 -ra------ C:\WINDOWS\system32\nvrscs.dll
2007-06-13 17:27 118,784 -ra------ C:\WINDOWS\system32\nvrsar.dll
2007-06-13 17:27
2007-06-13 07:31
2007-06-13 07:22 23 --ahs---- C:\WINDOWS\system32\fabeaddaacd8_r.dll
2007-06-12 17:58 6,400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2007-06-12 17:58 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2007-06-12 17:58 142,464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2007-06-12 17:57 82,944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2007-06-12 17:57 7,552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys
2007-06-12 17:57 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2007-06-12 17:57 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-06-12 17:57 59,264 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys
2007-06-12 17:57 58,624 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2007-06-12 17:57 52,864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys
2007-06-12 17:57 5,376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2007-06-12 17:57 4,992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys
2007-06-12 17:57 4,096 --a------ C:\WINDOWS\system32\ksuser.dll
2007-06-12 17:57 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2007-06-12 17:57 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2007-06-12 17:57 2,944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2007-06-12 17:57 171,776 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2007-06-12 17:57 145,792 --a------ C:\WINDOWS\system32\drivers\portcls.sys
2007-06-12 17:56 944,330 -ra------ C:\WINDOWS\system32\drivers\nv4_mini.sys
2007-06-12 17:56 77,312 --a------ C:\WINDOWS\system32\usbui.dll
2007-06-12 17:56 3,539,962 -ra------ C:\WINDOWS\system32\nv4_disp.dll
2007-06-12 17:56 10,624 --a------ C:\WINDOWS\system32\drivers\gameenum.sys
2007-06-12 17:55 8,192 -ra------ C:\WINDOWS\system32\kbdhept.dll
2007-06-12 17:55 6,656 -ra------ C:\WINDOWS\system32\kbdhela3.dll
2007-06-12 17:55 6,656 --a------ C:\WINDOWS\system32\kbdsl1.dll
2007-06-12 17:55 6,656 --a------ C:\WINDOWS\system32\kbdsl.dll
2007-06-12 17:55 6,144 -ra------ C:\WINDOWS\system32\kbdtuq.dll
2007-06-12 17:55 6,144 -ra------ C:\WINDOWS\system32\kbdtuf.dll
2007-06-12 17:55 6,144 -ra------ C:\WINDOWS\system32\kbdlv1.dll
2007-06-12 17:55 6,144 -ra------ C:\WINDOWS\system32\kbdlv.dll
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
2007-06-12 14:32:47 49,492 ----a-w C:\WINDOWS\system32\perfc015.dat
2007-06-12 14:32:47 355,486 ----a-w C:\WINDOWS\system32\perfh015.dat
2007-06-12 14:03:23 -------- d-----w C:\Program Files\Usługi online
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll [2003-11-04 00:17]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
“RemoteControl”=“C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe” [2004-11-02 20:24]
“InCD”=“C:\Program Files\Ahead\InCD\InCD.exe” [2006-03-16 10:00]
“MULTIMEDIA KEYBOARD”=“C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe” [2003-09-30 07:09]
“avast!”=“C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe” [2007-04-30 17:42]
“NvCplDaemon”=“NvQTwk” []
“nwiz”=“nwiz.exe” [2002-05-24 06:42 C:\WINDOWS\system32\nwiz.exe]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
“CTFMON.EXE”=“C:\WINDOWS\system32\ctfmon.exe” [2004-08-04 02:44]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{dc66b6b0-1b43-11dc-b031-00138fc89d43}]
AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe
**************************************************************************
catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-06-16 17:10:09
Windows 5.1.2600 Dodatek Service Pack 2 NTFS
scanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0
**************************************************************************
Completion time: 2007-06-16 17:10:32
— E O F —
Ściągasz narzędzie KillBox, zaznaczasz Delete on Reboot, potem klikasz All Files i wklejasz do pola Full Path of File to Delete ścieżkę:
C:\WINDOWS\system32\fabeaddaacd8_r.dll
Klikasz X i reset sysa.
Odpowiedz na pytanie, który proces tak obciąża komputer, bez tego nic nie zrobimy. Komp się aby nie przegrzewa?
nie kompa sie nie przegrzewa.
I rzaden proces nie obciąz komputera.
jak może nie obciążać, skoro masz użycie procesora 100% ?? proszę o screen z menedżera zadań
juz wszytko dobrze jest THX za pomoc
Złączono Posta : 16.06.2007 (Sob) 22:41
tylko teraz coraz częściej jest tak z 50% użycie procesora.
I jak np mam włączony teledysk to tak ciągle jest dopóki nie wyłączę.