niestety ten mam najmocniejszy 400 WATT potem mam tylko 300 WATT załoze ten 300 WATT i zobaczę ale to jutro bo zaraz na imprezkę idę xd 
– Dodane 29.09.2013 (N) 22:55 –
zmiana zasilacza nie pomogła ;/ co jeszcze może być przyczyną? Pliska pomóżcie 
– Dodane 30.09.2013 (Pn) 15:32 –
Macie log z Combofix’a
ComboFix 13-09-30.02 - JA 2013-09-30 14:58:27.2.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.48.1045.18.1535.1156 [GMT 2:00]
Uruchomiony z: c:\documents and settings\JA\Moje dokumenty\Downloads\ComboFix.exe
AV: Emsisoft Anti-Malware *Enabled/Updated* {0F8591BB-342B-4493-91C3-4E948ED21255}
.
.
((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Dane aplikacji\TEMP
c:\documents and settings\All Users\Dane aplikacji\TEMP\RAIDTest
c:\documents and settings\JA\Pulpit\Setup.exe
c:\documents and settings\JA\Ustawienia lokalne\Dane aplikacji\EoRezo
c:\documents and settings\JA\Ustawienia lokalne\Dane aplikacji\EoRezo\eorezo\1.10\eorezo.cyl
c:\documents and settings\JA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\bProtector Web Data
c:\documents and settings\JA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\bProtectorPreferences
c:\documents and settings\JA\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage
c:\program files\Delta\delta\1.8.24.6\bh\delta.dll
c:\program files\Delta\delta\1.8.24.6\deltaApp.dll
c:\program files\Delta\delta\1.8.24.6\deltaEng.dll
c:\program files\Delta\delta\1.8.24.6\deltasrv.exe
c:\program files\Delta\delta\1.8.24.6\deltaTlbr.dll
c:\windows\system32\roboot.exe
c:\windows\system32\TZLog.log
c:\windows\WindowsUpdate.log . . . . nie udało się usunąć
.
.
((((((((((((((((((((((((( Pliki utworzone od 2013-08-28 do 2013-09-30 )))))))))))))))))))))))))))))))
.
.
2013-09-12 15:36 . 2013-09-12 15:36 -------- d-----r- C:\AHCache
2013-09-12 10:40 . 2013-09-12 10:40 -------- d-----r- C:\MSOCache
.
.
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-08-09 01:56 . 2006-03-02 12:00 389632 ----a-w- c:\windows\system32\themeui.dll
2013-08-08 06:09 . 2006-03-02 12:00 1878016 ----a-w- c:\windows\system32\win32k.sys
2013-08-08 06:05 . 2006-03-02 12:00 920064 ----a-w- c:\windows\system32\wininet.dll
2013-08-08 06:05 . 2006-03-02 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2013-08-08 06:05 . 2006-03-02 12:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2013-08-08 06:05 . 2006-03-02 12:00 18944 ----a-w- c:\windows\system32\corpol.dll
2013-08-08 00:04 . 2006-03-02 12:00 385024 ----a-w- c:\windows\system32\html.iec
2013-08-05 13:30 . 2006-03-02 12:00 1289216 ----a-w- c:\windows\system32\ole32.dll
2013-07-31 00:41 . 2006-03-02 12:00 810496 ----a-w- c:\windows\system32\wmvdmod.dll
2013-07-10 10:37 . 2006-03-02 12:00 406016 ----a-w- c:\windows\system32\usp10.dll
2013-07-04 07:34 . 2006-03-02 12:00 2194816 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-07-04 07:34 . 2004-08-04 00:38 2071424 ----a-w- c:\windows\system32\ntkrnlpa.exe
.
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
“DAEMON Tools Lite”=“c:\program files\DAEMON Tools Lite\DTLite.exe” [2013-08-01 3673696]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
“NvCplDaemon”=“c:\windows\system32\NvCpl.dll” [2013-01-31 15517472]
“NvMediaCenter”=“NvMCTray.dll” [2013-01-31 108832]
“nwiz”=“c:\program files\NVIDIA Corporation\nview\nwiz.exe” [2013-01-31 1982312]
“RaidTool”=“c:\program files\VIA\RAID\raid_tool.exe” [2005-11-23 1060864]
“RTHDCPL”=“RTHDCPL.EXE” [2013-09-02 20118088]
“Adobe Reader Speed Launcher”=“c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe” [2012-01-03 37296]
“Adobe ARM”=“c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe” [2013-04-04 958576]
“SunJavaUpdateSched”=“c:\program files\Common Files\Java\Java Update\jusched.exe” [2013-07-02 254336]
“ApnTBMon”=“c:\program files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe” [2013-08-20 1601488]
.
[HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
“CTFMON.EXE”=“c:\windows\system32\CTFMON.EXE” [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@=“Driver”
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
“nvUpdatusService”=2 (0x2)
“NVSvc”=2 (0x2)
“Mobile Partner. RunOuc”=2 (0x2)
“HWDeviceService.exe”=2 (0x2)
“gupdatem”=3 (0x3)
“gupdate”=2 (0x2)
“SkypeUpdate”=2 (0x2)
“ose”=3 (0x3)
“odserv”=3 (0x3)
“MozillaMaintenance”=3 (0x3)
“JavaQuickStarterService”=2 (0x2)
“idsvc”=3 (0x3)
“gusvc”=3 (0x3)
“bonanzadealslivem”=3 (0x3)
“bonanzadealslive”=2 (0x2)
“BitGuard”=2 (0x2)
“APNMCP”=2 (0x2)
“AdobeFlashPlayerUpdateSvc”=3 (0x3)
“a2AntiMalware”=2 (0x2)
.
[HKLM~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
“%windir%\system32\sessmgr.exe”=
“c:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe”=
“%windir%\Network Diagnostic\xpnetdiag.exe”=
“c:\Program Files\Counter-Strike 1.6\hl.exe”=
“c:\Program Files\Gadu-Gadu 10\gg.exe”=
“c:\Program Files\Microsoft Office\Office12\ONENOTE.EXE”=
“c:\WINDOWS\system32\dpvsetup.exe”=
“c:\Program Files\Skype\Phone\Skype.exe”=
“c:\Documents and Settings\JA\Moje dokumenty\Downloads\Nowy folder (3)\Ets Coop.exe”=
“c:\Program Files\Euro Truck Simulator\Ets Coop.exe”=
.
R1 A2DDA;A2 Direct Disk Access Support Driver;c:\program files\Emsisoft Anti-Malware\a2ddax86.sys [2013-09-20 22056]
R1 a2injectiondriver;a2injectiondriver;c:\program files\Emsisoft Anti-Malware\a2dix86.sys [2013-09-20 37856]
R1 a2util;a-squared Malware-IDS utility driver;c:\program files\Emsisoft Anti-Malware\a2util32.sys [2013-09-20 14432]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2013-09-03 243128]
R3 huawei_enumerator;huawei_enumerator;c:\windows\system32\drivers\ew_jubusenum.sys [2013-09-02 76544]
S3 a2acc;a2acc;c:\program files\Emsisoft Anti-Malware\a2accx86.sys [2013-09-20 57944]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2013-09-02 1691480]
S3 cleanhlp;cleanhlp;c:\program files\Emsisoft Anti-Malware\cleanhlp32.sys [2013-09-20 50200]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\drivers\ew_hwusbdev.sys [2013-09-02 102784]
S3 ew_usbenumfilter;huawei_CompositeFilter;c:\windows\system32\drivers\ew_usbenumfilter.sys [2013-09-02 11136]
S3 huawei_cdcacm;huawei_cdcacm;c:\windows\system32\drivers\ew_jucdcacm.sys [2013-09-02 96000]
S3 huawei_cdcecm;huawei_cdcecm;c:\windows\system32\drivers\ew_jucdcecm.sys [2013-09-02 69760]
S3 huawei_ext_ctrl;huawei_ext_ctrl;c:\windows\system32\drivers\ew_juextctrl.sys [2013-09-02 27520]
S4 a2AntiMalware;Emsisoft Anti-Malware 8.0 - Service;c:\program files\Emsisoft Anti-Malware\a2service.exe [2013-09-20 4159464]
S4 APNMCP;Ask Update Service;c:\program files\AskPartnerNetwork\Toolbar\apnmcp.exe [2013-08-20 164816]
S4 HWDeviceService.exe;HWDeviceService.exe;c:\documents and settings\All Users\Dane aplikacji\DatacardService\HWDeviceService.exe [2011-03-14 271712]
S4 Mobile Partner. RunOuc;Mobile Partner. OUC;c:\program files\Mobile Partner\UpdateDog\ouc.exe [2013-09-02 655744]
S4 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-07-25 162672]
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-09-20 22:13 1177552 ----a-w- c:\program files\Google\Chrome\Application\29.0.1547.76\Installer\chrmstp.exe
.
Zawartość folderu ‘Zaplanowane zadania’
.
2013-09-30 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-15 15:52]
.
2013-09-15 c:\windows\Tasks\EPUpdater.job
- c:\docume~1\JA\DANEAP~1\BABSOL~1\Shared\BabMaint.exe [2013-09-02 14:00]
.
2013-09-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-09-02 08:43]
.
2013-09-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-09-02 08:43]
.
.
------- Skan uzupełniający -------
.
uStart Page = hxxp://search.conduit.com?SearchSource= … =CT2463487
mStart Page = hxxp://isearch.brothersoft.com?f=undefined
IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1 192.168.1.1
TCP: Interfaces{9399E7FA-B0F7-4B0C-A5AC-D68612AAEFA8}: NameServer = 194.204.152.34 194.204.159.1
FF - ProfilePath - c:\documents and settings\JA\Dane aplikacji\Mozilla\Firefox\Profiles\72vy73w3.default\
FF - prefs.js: browser.search.selectedEngine - hxxp://isearch.brothersoft.com?f=undefined
FF - prefs.js: browser.startup.homepage - hxxp://isearch.brothersoft.com?f=undefined
FF - ExtSQL: 2013-09-12 17:43; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
-
-
-
- USUNIĘTO PUSTE WPISY - - - -
.
SafeBoot-CleanHlp
SafeBoot-CleanHlp.sys
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-09-30 15:14
Windows 5.1.2600 Dodatek Service Pack 3 NTFS
.
detected NTDLL code modification:
ZwOpenFile
.
skanowanie ukrytych procesów …
.
skanowanie ukrytych wpisów autostartu …
.
skanowanie ukrytych plików …
.
skanowanie pomyślnie ukończone
ukryte pliki: 0
.
**************************************************************************
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------
.
c:\windows\system32\WININET.dll
c:\program files\Emsisoft Anti-Malware\a2hooks32.dll
c:\program files\NVIDIA Corporation\nview\nview.dll
c:\program files\NVIDIA Corporation\nview\NVWRSPL.DLL
c:\windows\system32\WS2_32.dll
c:\windows\system32\WS2HELP.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\MPR.dll
.
------------------------ Pozostałe uruchomione procesy ------------------------
.
c:\windows\system32\RunDLL32.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\rundll32.exe
c:\windows\system32\wpabaln.exe
.
**************************************************************************
.
Czas ukończenia: 2013-09-30 15:24:04 - komputer został uruchomiony ponownie
ComboFix-quarantined-files.txt 2013-09-30 13:24
ComboFix2.txt 2013-09-02 20:17
.
Przed: 23 137 722 368 bajtów wolnych
Po: 23 347 318 784 bajtów wolnych
.
-
- End Of File - - 99C7703B055C0BE149BC79CED1B9BD04
32052574BF9F325AE309ABC7BFD04460