Wolno chodzi komp/ i czesto sie wiesza

tomek.zielony · 30 Listopad 2007 19:01

elo

bardzo dawno już nie dawałem loga do sprawdzenia i jeszcze ostatnio komp mi chodzi jak czole optymalizacje XP już stosowałem działała przez jaski czas

oto log

Logfile of Trend Micro HijackThis v2.0.0 (BETA) Scan saved at 20:00:51, on 2007-11-30 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Avast4\aswUpdSv.exe C:\Program Files\Avast4\ashServ.exe C:\PROGRA~1\Avast4\ashDisp.exe C:\Program Files\WhatPulse\WhatPulse.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\System32\PSIService.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Avast4\ashMaiSv.exe C:\Program Files\Avast4\ashWebSv.exe C:\Program Files\foobar2000\foobar2000.exe C:\Program Files\Avast4\ashSimpl.exe C:\Program Files\Ganymede\billiards.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Zielony\Pulpit\inne\HiJackThis_v2.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O4 - HKLM…\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe O4 - HKCU…\Run: [WhatPulse] C:\Program Files\WhatPulse\WhatPulse.exe O4 - HKUS\S-1-5-19…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘USŁUGA LOKALNA’) O4 - HKUS\S-1-5-20…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘USŁUGA SIECIOWA’) O4 - HKUS\S-1-5-18…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘SYSTEM’) O4 - HKUS.DEFAULT…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘Default user’) O4 - Startup: Mozilla Firefox.lnk = C:\Program Files\Mozilla Firefox\firefox.exe O4 - Startup: Skrót do licence.lnk = C:\Documents and Settings\Zielony\Moje dokumenty\Moje wideo\Legalizacja Windows XP\licence.cmd O4 - Global Startup: Kalendarz XP.lnk = C:\Program Files\Kalendarz XP\Kalendarz.exe O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: Add to AMV Convert Tool… - C:\Program Files\MP3 Player Utilities 4.00\AMVConverter\grab.html O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.00\MediaManager\grab.html O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.8.30.dll O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan … asinst.cab O17 - HKLM\System\CCS\Services\Tcpip…{3CB45462-8681-4218-9879-01A334A9A359}: NameServer = 194.204.159.1 217.98.63.164 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll O22 - SharedTaskScheduler: Moduł wstępnego ładowania interfejsu Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll O22 - SharedTaskScheduler: Demon buforu kategorii składników - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Avast4\ashWebSv.exe O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\System32\PSIService.exe – End of file - 5159 bytes

Gutek · 30 Listopad 2007 22:50

Optymalizacja XP: http://forum.dobreprogramy.pl/viewtopic.php?t=76580

Czyszczenie rejestru:

RegCleaner - http://www.dobreprogramy.pl/index.php?dz=2&t=29&id=177

możesz rejestr przelecieć albo

jv16 PowerTools - http://www.dobreprogramy.pl/index.php?dz=2&t=29&id=509

Opis RegCleaner - http://www.agavk.p9.pl/strony/progra_regcleaner.php

Zobacz - Obsługa jv16 PowerTools

tomek.zielony · 30 Listopad 2007 23:52

Wszystko Juz dawno zrobione

jeszcze przed daniem loga na forum

Gutek · 2 Grudzień 2007 00:01

W logu nic nie widze, możesz - Daj log z ComboFix

tomek.zielony · 2 Grudzień 2007 10:22

ComboFix 07-12-02.5 - Zielony 2007-12-02 11:17:56.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.1077 [GMT 1:00] Running from: C:\Documents and Settings\Zielony\Pulpit\prog.sciagniete\ComboFix.exe * Created a new restore point . ((((((((((((((((((((((((( Files Created from 2007-11-02 to 2007-12-02 ))))))))))))))))))))))))))))))) . 2007-12-01 17:16 . 2007-12-01 17:16 335 --a------ C:\WINDOWS\mozregistry.dat 2007-12-01 10:44 . 2007-12-01 10:44 2007-12-01 10:44 . 2007-07-28 09:56 60,273 --a------ C:\WINDOWS\system32\pthreadGC2.dll 2007-12-01 10:44 . 2007-07-28 09:56 7,680 --a------ C:\WINDOWS\system32\ff_vfw.dll 2007-12-01 10:44 . 2007-07-28 09:56 6,144 --a------ C:\WINDOWS\system32\ff_acm.acm 2007-12-01 10:44 . 2007-07-28 09:56 547 --a------ C:\WINDOWS\system32\ff_vfw.dll.manifest 2007-11-27 01:58 . 2007-11-27 01:58 2007-11-26 14:20 . 2007-11-26 18:32 2007-11-13 20:23 . 2007-11-21 21:48 2007-11-13 20:23 . 2007-11-13 20:23 2007-11-13 09:28 . 2007-11-13 09:28 2007-11-03 10:57 . 2007-11-29 00:26 2007-11-02 02:29 . 2007-11-03 12:58 . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-02 10:13 --------- d-----w C:\Program Files\Mozilla Thunderbird 2007-12-02 10:08 --------- d-----w C:\Program Files\Kalendarz XP 2007-12-01 16:00 --------- dc----w C:\Documents and Settings\Zielony\Dane aplikacji\GanymedeNet 2007-11-30 20:16 --------- dc----w C:\Documents and Settings\Zielony\Dane aplikacji\foobar2000 2007-11-28 13:43 --------- dc----w C:\Documents and Settings\Zielony\Dane aplikacji\Skype 2007-11-28 10:50 --------- d-----w C:\Program Files\Ganymede 2007-11-27 11:29 --------- d-----w C:\Program Files\AutoConnect 2007-11-26 16:34 --------- dc----w C:\Documents and Settings\Zielony\Dane aplikacji\BearShare 2007-11-23 14:57 --------- d-----w C:\Program Files\FarCry 2007-11-13 19:20 --------- d-----w C:\Program Files\Gadu-Gadu 2007-11-12 16:07 --------- d-----w C:\Program Files\NAPI-PROJEKT 2007-11-08 16:05 --------- dc----w C:\Documents and Settings\Zielony\Dane aplikacji\FreeCall 2007-11-01 20:49 --------- d-----w C:\Program Files\Binboy 2007-10-31 16:17 --------- d-----w C:\Program Files\Opera 2007-10-31 13:41 --------- d-----w C:\Program Files\Common Files\InstallShield 2007-10-31 12:21 --------- dc----w C:\Documents and Settings\Zielony\Dane aplikacji\TeamViewer 2007-10-31 12:21 --------- d-----w C:\Program Files\TeamViewer3 2007-10-30 09:35 --------- d-----w C:\Program Files\FIFA 08 2007-10-29 16:16 --------- d–h--w C:\Program Files\InstallShield Installation Information 2007-10-29 16:16 --------- d-----w C:\Program Files\Kolekcja Klasyki 2007-10-29 16:08 163,644 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys 2007-10-23 12:17 --------- dc----w C:\Documents and Settings\Zielony\Dane aplikacji\Apple Computer 2007-10-23 12:16 --------- dc----w C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer 2007-10-23 12:03 --------- d-----w C:\Program Files\QuickTime 2007-10-23 12:02 --------- dc----w C:\Documents and Settings\All Users\Dane aplikacji\Apple 2007-10-23 12:02 --------- d-----w C:\Program Files\Apple Software Update 2007-10-23 06:23 --------- d-----w C:\Program Files\FileZilla 2007-10-23 06:20 --------- dc----w C:\Documents and Settings\Zielony\Dane aplikacji\FileZilla 2007-10-12 17:47 --------- dc----w C:\Documents and Settings\Zielony\Dane aplikacji\Media Player Classic 2007-10-12 17:46 --------- d-----w C:\Program Files\Real Alternative 2007-10-11 19:01 --------- d-----w C:\Program Files\AIDA32 - Enterprise System Information 2007-10-11 18:51 --------- d-----w C:\Program Files\Common Files\Real 2007-10-11 16:42 --------- d-----w C:\Program Files\Real 2007-10-08 13:21 --------- d-----w C:\Program Files\Gronzo 2007-09-25 14:12 560 —ha-w C:\WINDOWS\Fonts\SWFont9.fnt 2007-06-19 22:16 88 --sha-r C:\WINDOWS\system32\72361EBA32.sys 2007-06-19 22:18 2,516 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “WhatPulse”=“C:\Program Files\WhatPulse\WhatPulse.exe” [2004-12-05 11:20] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “avast!”=“C:\PROGRA~1\Avast4\ashDisp.exe” [2007-04-30 16:42] [HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] “CTFMON.EXE”=“C:\WINDOWS\System32\CTFMON.EXE” [2004-08-03 23:44] “ATICCC”=“C:\Program Files\ATI Technologies\ATI.ACE\cli.exe” [2004-08-25 13:25] C:\Documents and Settings\Zielony\Menu Start\Programy\Autostart\ Mozilla Firefox.lnk - C:\Program Files\Mozilla Firefox\firefox.exe [2007-04-05 15:17:31] Skr˘t do licence.lnk - C:\Documents and Settings\Zielony\Moje dokumenty\Moje wideo\Legalizacja Windows XP\licence.cmd [2007-09-13 15:10:20] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ Kalendarz XP.lnk - C:\Program Files\Kalendarz XP\Kalendarz.exe [2007-09-22 12:34:44] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] “NoRecentDocsHistory”= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Gamma Loader.lnk] backup=C:\WINDOWS\pss\Adobe Gamma Loader.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Adobe Reader Speed Launch.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^ATI CATALYST System Tray.lnk] backup=C:\WINDOWS\pss\ATI CATALYST System Tray.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^BlueSoleil.lnk] backup=C:\WINDOWS\pss\BlueSoleil.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^DSLMON.lnk] backup=C:\WINDOWS\pss\DSLMON.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^HaloNet Softphone.lnk] backup=C:\WINDOWS\pss\HaloNet Softphone.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Kontroler.lnk] backup=C:\WINDOWS\pss\Kontroler.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Zielony^Menu Start^Programy^Autostart^VirtualExpander.lnk] backup=C:\WINDOWS\pss\VirtualExpander.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\adiras] adiras.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ares] C:\Program Files\Ares\Ares.exe -h [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC] C:\Program Files\ATI Technologies\ATI.ACE\cli.exe runtime [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA] 2004-08-25 11:52 339968 --a------ C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AutoConnect] 2006-12-03 00:14 310784 --a------ C:\Program Files\AutoConnect\AutoConnect.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BigDog303] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Domino] C:\WINDOWS\Domino.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EdHTML] C:\Program Files\Binboy\EdHTMLv5.0\EdHTML.exe /none [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeRAM XP] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lexmark 2200 Series] 2004-02-13 14:34 57344 --a------ C:\Program Files\Lexmark 2200 Series\lxbvbmgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] 2001-07-09 09:50 155648 --a------ C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\pviever] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Program Files\QuickTime\QTTask.exe -atboottime [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl] 2003-10-31 18:42 32768 --a------ C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Services] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] C:\Program Files\Skype\Phone\Skype.exe /nosplash /minimized [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan] SOUNDMAN.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] 2006-12-15 02:23 75520 --a------ C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\svghost] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VMSnap3] 2006-08-30 03:58 49152 -ra------ C:\WINDOWS\VMSnap3.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VoipCheapCom] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VS Online] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WooCnxMon] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOTASKBARICON] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOWATCH] R1 sdpiosys;sdpiosys;C:\WINDOWS\system32\drivers\sdpiosys.sys R2 SetupNT;SetupNT;C:\WINDOWS\system32\SetupNT.sys S3 BTNetFilter;Bluetooth Network Filter;??\C:\WINDOWS\system32\drivers\BTNetFilter.sys S3 CAM1690;USB 2.0 Compliance JPEG Video Camera;C:\WINDOWS\system32\Drivers\cam1690.sys S3 GVCplDrv;GVCplDrv;C:\WINDOWS\system32\drivers\GVCplDrv.sys S3 vmfilter303;vmfilter303;C:\WINDOWS\system32\drivers\vmfilter303.sys S3 ZSMC303;X-calibur USB PC Camera (Vimicro301 Neptune);C:\WINDOWS\system32\Drivers\usbVM303.sys [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components{10880D85-AAD9-4558-ABDC-2AB1552D831F}] “C:\Program Files\Common Files\LightScribe\LSRunOnce.exe” . Contents of the ‘Scheduled Tasks’ folder “2007-11-26 16:54:02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job” . ************************************************************************** catchme 0.3.1318 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-02 11:19:15 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-12-02 11:19:53 . — E O F —

Gutek · 2 Grudzień 2007 16:38

Log czysty