Uzycie procesora 100%

WITAM! !!

:expressionless:

Daj logi.

CTRL+ALT+DELETE i sprawdź w procesach co obciąża

olszaq

Używaj polskich znaków,bo znów temat poleci do kosza,opcja zmień i popraw.JNJN

jak zrobic logi???

Poczytaj tematy przyklejone w tym dziale i wszystko wiesz.

Logfile of HijackThis v1.99.1

Scan saved at 13:29:17, on 2007-06-16

Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Ahead\InCD\InCDsrv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe

C:\Program Files\Ahead\InCD\InCD.exe

C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Kalendarz XP\Kalendarz.exe

C:\Program Files\Netropa\Multimedia Keyboard\TrayMon.exe

C:\Program Files\Netropa\Onscreen Display\OSD.exe

C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\Gadu-Gadu\gg.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\DOCUME~1\admin\USTAWI~1\Temp\Rar$EX00.156\HijackThis.exe

C:\Documents and Settings\admin\Moje dokumenty\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://web.whenu.com/uninstall_weather. … EEPE100501

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll

O4 - HKLM…\Run: [RemoteControl] “C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe”

O4 - HKLM…\Run: [inCD] C:\Program Files\Ahead\InCD\InCD.exe

O4 - HKLM…\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM…\Run: [MULTIMEDIA KEYBOARD] C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe

O4 - HKLM…\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize

O4 - HKLM…\Run: [nwiz] nwiz.exe /install

O4 - HKCU…\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - Global Startup: Kalendarz XP.lnk = C:\Program Files\Kalendarz XP\Kalendarz.exe

O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O17 - HKLM\System\CCS\Services\Tcpip…{03FBB1F1-63DA-4B71-92FA-D8CCFE328ED3}: NameServer = 212.85.112.32,193.110.121.20

O17 - HKLM\System\CS1\Services\Tcpip…{03FBB1F1-63DA-4B71-92FA-D8CCFE328ED3}: NameServer = 212.85.112.32,193.110.121.20

O17 - HKLM\System\CS2\Services\Tcpip…{03FBB1F1-63DA-4B71-92FA-D8CCFE328ED3}: NameServer = 212.85.112.32,193.110.121.20

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe

O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

Daj log z Combofix

Uwaga: Jak wklejasz loga to obejmuj go znacznikiem (tagiem) CODE lub QUOTE

ComboFix 07-06-13.3 - C:\Documents and Settings\admin\Pulpit\ComboFix.exe

“admin” - 2007-06-16 17:09:23 - Dodatek Service Pack 2 NTFS

((((((((((((((((((((((((( Files Created from 2007-05-16 to 2007-06-16 )))))))))))))))))))))))))))))))

2007-06-16 14:02 49,152 --a------ C:\WINDOWS\nircmd.exe

2007-06-16 12:05 5,248 --a------ C:\WINDOWS\system32\drivers\a347scsi.sys

2007-06-16 12:05 160,640 --a------ C:\WINDOWS\system32\drivers\a347bus.sys

2007-06-16 12:05

2007-06-16 12:05

2007-06-14 23:16

2007-06-13 17:28 98,304 -ra------ C:\WINDOWS\system32\nvwrspt.dll

2007-06-13 17:28 98,304 -ra------ C:\WINDOWS\system32\nvwrsit.dll

2007-06-13 17:28 98,304 -ra------ C:\WINDOWS\system32\nvwrses.dll

2007-06-13 17:28 98,304 -ra------ C:\WINDOWS\system32\nvrsja.dll

2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrstr.dll

2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrssk.dll

2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrsru.dll

2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrsptb.dll

2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrspl.dll

2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrsnl.dll

2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrshu.dll

2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrsfr.dll

2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrsfi.dll

2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvwrsde.dll

2007-06-13 17:28 94,208 -ra------ C:\WINDOWS\system32\nvrsko.dll

2007-06-13 17:28 90,112 -ra------ C:\WINDOWS\system32\nvwrssv.dll

2007-06-13 17:28 90,112 -ra------ C:\WINDOWS\system32\nvwrsno.dll

2007-06-13 17:28 86,016 -ra------ C:\WINDOWS\system32\nvwrssl.dll

2007-06-13 17:28 86,016 -ra------ C:\WINDOWS\system32\nvwrseng.dll

2007-06-13 17:28 81,920 -ra------ C:\WINDOWS\system32\nvrszht.dll

2007-06-13 17:28 81,920 -ra------ C:\WINDOWS\system32\nvrszhc.dll

2007-06-13 17:28 77,824 -ra------ C:\WINDOWS\system32\nvwrshe.dll

2007-06-13 17:28 61,440 -ra------ C:\WINDOWS\system32\nvwrsko.dll

2007-06-13 17:28 61,440 -ra------ C:\WINDOWS\system32\nvwrsja.dll

2007-06-13 17:28 49,152 -ra------ C:\WINDOWS\system32\nvwrszht.dll

2007-06-13 17:28 49,152 -ra------ C:\WINDOWS\system32\nvwrszhc.dll

2007-06-13 17:28 266,240 -ra------ C:\WINDOWS\system32\nvrshe.dll

2007-06-13 17:28 139,264 -ra------ C:\WINDOWS\system32\nvrsel.dll

2007-06-13 17:28 135,168 -ra------ C:\WINDOWS\system32\nvrspt.dll

2007-06-13 17:28 135,168 -ra------ C:\WINDOWS\system32\nvrsit.dll

2007-06-13 17:28 135,168 -ra------ C:\WINDOWS\system32\nvrses.dll

2007-06-13 17:28 131,072 -ra------ C:\WINDOWS\system32\nvrstr.dll

2007-06-13 17:28 131,072 -ra------ C:\WINDOWS\system32\nvrssk.dll

2007-06-13 17:28 131,072 -ra------ C:\WINDOWS\system32\nvrsru.dll

2007-06-13 17:28 131,072 -ra------ C:\WINDOWS\system32\nvrsptb.dll

2007-06-13 17:28 131,072 -ra------ C:\WINDOWS\system32\nvrsnl.dll

2007-06-13 17:28 131,072 -ra------ C:\WINDOWS\system32\nvrshu.dll

2007-06-13 17:28 131,072 -ra------ C:\WINDOWS\system32\nvrsfr.dll

2007-06-13 17:28 131,072 -ra------ C:\WINDOWS\system32\nvrsde.dll

2007-06-13 17:28 126,976 -ra------ C:\WINDOWS\system32\nvrssv.dll

2007-06-13 17:28 126,976 -ra------ C:\WINDOWS\system32\nvrspl.dll

2007-06-13 17:28 126,976 -ra------ C:\WINDOWS\system32\nvrsfi.dll

2007-06-13 17:28 122,880 -ra------ C:\WINDOWS\system32\nvrsno.dll

2007-06-13 17:28 122,880 -ra------ C:\WINDOWS\system32\nvrseng.dll

2007-06-13 17:28 102,400 -ra------ C:\WINDOWS\system32\nvwrsel.dll

2007-06-13 17:28 1,290,240 -ra------ C:\WINDOWS\system32\nvrssl.dll

2007-06-13 17:27 94,208 -ra------ C:\WINDOWS\system32\nvinstnt.dll

2007-06-13 17:27 90,112 -ra------ C:\WINDOWS\system32\nvwrsda.dll

2007-06-13 17:27 86,016 -ra------ C:\WINDOWS\system32\nvwrscs.dll

2007-06-13 17:27 81,920 -ra------ C:\WINDOWS\system32\nvwrsar.dll

2007-06-13 17:27 622,592 -ra------ C:\WINDOWS\system32\nvqtwk.dll

2007-06-13 17:27 61,440 -ra------ C:\WINDOWS\system32\nvsvc32.exe

2007-06-13 17:27 540,741 -ra------ C:\WINDOWS\system32\nview.dll

2007-06-13 17:27 372,736 -ra------ C:\WINDOWS\system32\nwiz.exe

2007-06-13 17:27 348,231 -ra------ C:\WINDOWS\system32\nvshell.dll

2007-06-13 17:27 278,528 -ra------ C:\WINDOWS\system32\dmcpl.exe

2007-06-13 17:27 2,912,256 -ra------ C:\WINDOWS\system32\nvoglnt.dll

2007-06-13 17:27 2,043,904 -ra------ C:\WINDOWS\system32\nvcpl.dll

2007-06-13 17:27 126,976 -ra------ C:\WINDOWS\system32\nvrsda.dll

2007-06-13 17:27 126,976 -ra------ C:\WINDOWS\system32\nvrscs.dll

2007-06-13 17:27 118,784 -ra------ C:\WINDOWS\system32\nvrsar.dll

2007-06-13 17:27

2007-06-13 07:31

2007-06-13 07:22 23 --ahs---- C:\WINDOWS\system32\fabeaddaacd8_r.dll

2007-06-12 17:58 6,400 --a------ C:\WINDOWS\system32\drivers\splitter.sys

2007-06-12 17:58 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys

2007-06-12 17:58 142,464 --a------ C:\WINDOWS\system32\drivers\aec.sys

2007-06-12 17:57 82,944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys

2007-06-12 17:57 7,552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys

2007-06-12 17:57 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys

2007-06-12 17:57 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys

2007-06-12 17:57 59,264 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys

2007-06-12 17:57 58,624 --a------ C:\WINDOWS\system32\drivers\redbook.sys

2007-06-12 17:57 52,864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys

2007-06-12 17:57 5,376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys

2007-06-12 17:57 4,992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys

2007-06-12 17:57 4,096 --a------ C:\WINDOWS\system32\ksuser.dll

2007-06-12 17:57 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys

2007-06-12 17:57 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys

2007-06-12 17:57 2,944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys

2007-06-12 17:57 171,776 --a------ C:\WINDOWS\system32\drivers\kmixer.sys

2007-06-12 17:57 145,792 --a------ C:\WINDOWS\system32\drivers\portcls.sys

2007-06-12 17:56 944,330 -ra------ C:\WINDOWS\system32\drivers\nv4_mini.sys

2007-06-12 17:56 77,312 --a------ C:\WINDOWS\system32\usbui.dll

2007-06-12 17:56 3,539,962 -ra------ C:\WINDOWS\system32\nv4_disp.dll

2007-06-12 17:56 10,624 --a------ C:\WINDOWS\system32\drivers\gameenum.sys

2007-06-12 17:55 8,192 -ra------ C:\WINDOWS\system32\kbdhept.dll

2007-06-12 17:55 6,656 -ra------ C:\WINDOWS\system32\kbdhela3.dll

2007-06-12 17:55 6,656 --a------ C:\WINDOWS\system32\kbdsl1.dll

2007-06-12 17:55 6,656 --a------ C:\WINDOWS\system32\kbdsl.dll

2007-06-12 17:55 6,144 -ra------ C:\WINDOWS\system32\kbdtuq.dll

2007-06-12 17:55 6,144 -ra------ C:\WINDOWS\system32\kbdtuf.dll

2007-06-12 17:55 6,144 -ra------ C:\WINDOWS\system32\kbdlv1.dll

2007-06-12 17:55 6,144 -ra------ C:\WINDOWS\system32\kbdlv.dll

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-06-12 14:32:47 49,492 ----a-w C:\WINDOWS\system32\perfc015.dat

2007-06-12 14:32:47 355,486 ----a-w C:\WINDOWS\system32\perfh015.dat

2007-06-12 14:03:23 -------- d-----w C:\Program Files\Usługi online

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll [2003-11-04 00:17]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

“RemoteControl”=“C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe” [2004-11-02 20:24]

“InCD”=“C:\Program Files\Ahead\InCD\InCD.exe” [2006-03-16 10:00]

“MULTIMEDIA KEYBOARD”=“C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe” [2003-09-30 07:09]

“avast!”=“C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe” [2007-04-30 17:42]

“NvCplDaemon”=“NvQTwk” []

“nwiz”=“nwiz.exe” [2002-05-24 06:42 C:\WINDOWS\system32\nwiz.exe]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

“CTFMON.EXE”=“C:\WINDOWS\system32\ctfmon.exe” [2004-08-04 02:44]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{dc66b6b0-1b43-11dc-b031-00138fc89d43}]

AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe

**************************************************************************

catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net

Rootkit scan 2007-06-16 17:10:09

Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully

hidden files: 0

**************************************************************************

Completion time: 2007-06-16 17:10:32

— E O F —

Ściągasz narzędzie KillBox, zaznaczasz Delete on Reboot, potem klikasz All Files i wklejasz do pola Full Path of File to Delete ścieżkę:

C:\WINDOWS\system32\fabeaddaacd8_r.dll

Klikasz X i reset sysa.

Odpowiedz na pytanie, który proces tak obciąża komputer, bez tego nic nie zrobimy. Komp się aby nie przegrzewa?

nie kompa sie nie przegrzewa.

I rzaden proces nie obciąz komputera.

jak może nie obciążać, skoro masz użycie procesora 100% ?? proszę o screen z menedżera zadań

juz wszytko dobrze jest THX za pomoc :))

Złączono Posta : 16.06.2007 (Sob) 22:41

tylko teraz coraz częściej jest tak z 50% użycie procesora.

I jak np mam włączony teledysk to tak ciągle jest dopóki nie wyłączę.