Zawieszanie się komputera siostry

[artide2]

witam!

komputer siostry się notorycznie zawiesza

konfig :asrock k7vt4a+,sempron 2800+,geforce 7300,2x512mb ddr 400,win xp sp2 pl

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:59:11, on 2008-03-15 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINXP\System32\smss.exe C:\WINXP\system32\winlogon.exe C:\WINXP\system32\services.exe C:\WINXP\system32\savedump.exe C:\WINXP\system32\lsass.exe C:\WINXP\system32\svchost.exe C:\WINXP\System32\svchost.exe C:\WINXP\Explorer.EXE C:\WINXP\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\WINXP\system32\nvsvc32.exe C:\WINXP\system32\svchost.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINXP\system32\NvCpl.dll,NvStartup O4 - HKLM…\Run: [avgnt] “C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe” /min O4 - HKCU…\Run: [Gadu-Gadu] “C:\Program Files\Gadu-Gadu\gg.exe” /tray O4 - HKUS\S-1-5-19…\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User ‘?’) O4 - HKUS\S-1-5-20…\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User ‘?’) O4 - HKUS\S-1-5-21-299502267-1035525444-725345543-1003…\Run: [Gadu-Gadu] “C:\Program Files\Gadu-Gadu\gg.exe” /tray (User ‘?’) O4 - HKUS\S-1-5-18…\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User ‘?’) O4 - HKUS.DEFAULT…\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User ‘Default user’) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINXP\system32\nvsvc32.exe – End of file - 2583 bytes

log po skanowaniu avira

AntiVir PersonalEdition Classic Report file date: 15 marca 2008 16:25 Scanning for 1146643 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Dodatek Service Pack 2) [5.1.2600] Username: SYSTEM Computer name: NA Version information: BUILD.DAT : 270 15603 Bytes 2007-09-19 13:32:00 AVSCAN.EXE : 7.0.6.1 290856 Bytes 2007-08-23 13:16:29 AVSCAN.DLL : 7.0.6.0 49192 Bytes 2007-08-16 12:23:51 LUKE.DLL : 7.0.5.3 147496 Bytes 2007-08-14 15:32:47 LUKERES.DLL : 7.0.6.1 10280 Bytes 2007-08-21 12:35:20 ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 2007-07-18 14:27:15 ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 2008-03-07 17:40:09 ANTIVIR2.VDF : 7.0.3.3 2048 Bytes 2008-03-07 17:40:09 ANTIVIR3.VDF : 7.0.3.26 143872 Bytes 2008-03-13 17:38:23 AVEWIN32.DLL : 7.6.0.73 3334656 Bytes 2008-03-01 15:56:17 AVWINLL.DLL : 1.0.0.7 14376 Bytes 2007-02-26 10:36:26 AVPREF.DLL : 7.0.2.2 25640 Bytes 2007-07-18 07:39:17 AVREP.DLL : 7.0.0.1 155688 Bytes 2007-04-16 13:16:24 AVPACK32.DLL : 7.6.0.3 360488 Bytes 2008-02-14 11:44:01 AVREG.DLL : 7.0.1.6 30760 Bytes 2007-07-18 07:17:06 AVARKT.DLL : 1.0.0.20 278568 Bytes 2007-08-28 12:26:33 AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 2007-07-18 07:10:18 NETNT.DLL : 7.0.0.0 7720 Bytes 2007-03-08 11:09:42 RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 2007-08-07 12:38:13 RCTEXT.DLL : 7.0.62.0 86056 Bytes 2007-08-21 12:50:37 SQLITE3.DLL : 3.3.17.1 339968 Bytes 2007-07-23 09:37:21 Configuration settings for the scan: Jobname…: Complete system scan Configuration file…: c:\program files\avira\antivir personaledition classic\sysscan.avp Logging…: low Primary action…: interactive Secondary action…: ignore Scan master boot sector…: off Scan boot sector…: on Boot sectors…: C:, Scan memory…: on Process scan…: on Scan registry…: on Search for rootkits…: off Scan all files…: Intelligent file selection Scan archives…: on Recursion depth…: 20 Smart extensions…: on Macro heuristic…: on File heuristic…: medium Start of the scan: 15 marca 2008 16:25 The scan of running processes will be started Scan process ‘avscan.exe’ - ‘1’ Module(s) have been scanned Scan process ‘wuauclt.exe’ - ‘1’ Module(s) have been scanned Scan process ‘avcenter.exe’ - ‘1’ Module(s) have been scanned Scan process ‘alg.exe’ - ‘1’ Module(s) have been scanned Scan process ‘wdfmgr.exe’ - ‘1’ Module(s) have been scanned Scan process ‘svchost.exe’ - ‘1’ Module(s) have been scanned Scan process ‘nvsvc32.exe’ - ‘1’ Module(s) have been scanned Scan process ‘sched.exe’ - ‘1’ Module(s) have been scanned Scan process ‘gg.exe’ - ‘1’ Module(s) have been scanned Scan process ‘avgnt.exe’ - ‘1’ Module(s) have been scanned Scan process ‘explorer.exe’ - ‘1’ Module(s) have been scanned Scan process ‘avguard.exe’ - ‘1’ Module(s) have been scanned Scan process ‘spoolsv.exe’ - ‘1’ Module(s) have been scanned Scan process ‘svchost.exe’ - ‘1’ Module(s) have been scanned Scan process ‘svchost.exe’ - ‘1’ Module(s) have been scanned Scan process ‘svchost.exe’ - ‘1’ Module(s) have been scanned Scan process ‘svchost.exe’ - ‘1’ Module(s) have been scanned Scan process ‘svchost.exe’ - ‘1’ Module(s) have been scanned Scan process ‘lsass.exe’ - ‘1’ Module(s) have been scanned Scan process ‘services.exe’ - ‘1’ Module(s) have been scanned Scan process ‘winlogon.exe’ - ‘1’ Module(s) have been scanned Scan process ‘csrss.exe’ - ‘1’ Module(s) have been scanned Scan process ‘smss.exe’ - ‘1’ Module(s) have been scanned 23 processes with 23 modules were scanned Start scanning boot sectors: Boot sector ‘C:’ [NOTE] No virus was found! Starting to scan the registry. The registry was scanned ( ‘21’ files ). Starting the file scan: Begin scan in ‘C:’ C:\hiberfil.sys [WARNING] The file could not be opened! C:\pagefile.sys [WARNING] The file could not be opened! C:\WINXP\system32\drivers\sptd.sys [WARNING] The file could not be opened! End of the scan: 15 marca 2008 17:12 Used time: 46:51 min The scan has been done completely. 4690 Scanning directories 274404 Files were scanned 0 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 0 files were moved to quarantine 0 files were renamed 3 Files cannot be scanned 274404 Files not concerned 3315 Archives were scanned 3 Warnings 0 Notes