Zawieszki i spowolnienie

patryk2547 · 14 Kwiecień 2008 20:00

Siema jestem tu nowy a juz mam problem o tuż komputer od jekiegoś czasu mi się spowalnia i może się na jakis czas powiesić mialem kiedyś takie akcje że bufor pamięci mial 1gb i wtedy totalnie były spowlnienia.

Tu daje log:

Logfile of HijackThis v1.99.1 Scan saved at 21:47:17, on 2008-04-14 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16608) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe C:\WINDOWS\V0220Mon.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\Eset\nod32kui.exe C:\Program Files\Winamp\winampa.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Tlen.pl\tlen.exe C:\Program Files\AutoConnect\AutoConnect.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\BitComet\BitComet.exe C:\WINDOWS\System32\alg.exe D:\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.1.2.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM…\Run: [AVFX Engine] C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe O4 - HKLM…\Run: [V0220Mon.exe] C:\WINDOWS\V0220Mon.exe O4 - HKLM…\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup O4 - HKLM…\Run: [iSUSScheduler] “C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe” -start O4 - HKLM…\Run: [nod32kui] “C:\Program Files\Eset\nod32kui.exe” /WAITSERVICE O4 - HKLM…\Run: [WinampAgent] “C:\Program Files\Winamp\winampa.exe” O4 - HKCU…\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU…\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe O4 - HKCU…\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe O4 - HKCU…\Run: [skype] “C:\Program Files\Skype\Phone\Skype.exe” /nosplash /minimized O4 - HKCU…\Run: [Creative Live! Cam Manager] “C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe” O4 - HKCU…\Run: [MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background O4 - HKCU…\Run: [bitComet] “C:\Program Files\BitComet\BitComet.exe” /tray O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.1.2.dll/206 (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [iNTERNATIONAL] International* O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game01.zylom.com/activex/zylomgamesplayer.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s … wflash.cab O17 - HKLM\System\CCS\Services\Tcpip…{9F466254-57A2-4FF6-AB2B-E0AD23BAF380}: NameServer = 85.255.114.102,85.255.112.122 O17 - HKLM\System\CCS\Services\Tcpip…{D0FAB0C6-ABD8-414C-B091-EFC13FEFDE49}: NameServer = 85.255.114.102 85.255.112.122 O17 - HKLM\System\CCS\Services\Tcpip…{F7678EAF-AB48-4C33-A466-28848FDAABCA}: NameServer = 85.255.114.102,85.255.112.122 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.114.102 85.255.112.122 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.114.102 85.255.112.122 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.114.102 85.255.112.122 O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

Pozdrawiam patryk2547

Leon1 · 14 Kwiecień 2008 20:21

wpisy

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.1.2.dll/206 (file missing) O17 - HKLM\System\CCS\Services\Tcpip…{9F466254-57A2-4FF6-AB2B-E0AD23BAF380}: NameServer = 85.255.114.102,85.255.112.122 O17 - HKLM\System\CCS\Services\Tcpip…{D0FAB0C6-ABD8-414C-B091-EFC13FEFDE49}: NameServer = 85.255.114.102 85.255.112.122 O17 - HKLM\System\CCS\Services\Tcpip…{F7678EAF-AB48-4C33-A466-28848FDAABCA}: NameServer = 85.255.114.102,85.255.112.122 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.114.102 85.255.112.122 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.114.102 85.255.112.122 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.114.102 85.255.112.122

usuń HijackThisem >> Fix checked

Wyłącz przywracanie systemu na wszystkich dyskach.http://support.microsoft.com/kb/310405/pl

zrób optymalizacje uruchamiania http://cybertrash.netarteria.pl/cyber/index.php/topic,378.0.html

Pobierz Combofix http://forum.dobreprogramy.pl/viewtopic.php?f=16&t=36654 przeskanuj system daj log

patryk2547 · 14 Kwiecień 2008 20:50

ComboFix 08-04-13.3 - Admin_2 2008-04-14 22:37:55.2 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.2.1250.1.1045.18.252 [GMT 2:00] Running from: C:\Documents and Settings\Admin_2\Pulpit\ComboFix.exe * Resident AV is active WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED . ((((((((((((((((((((((((( Files Created from 2008-03-14 to 2008-04-14 ))))))))))))))))))))))))))))))) . 2008-04-06 14:42 . 2008-04-06 14:42 2008-04-06 14:42 . 2008-04-06 14:42 2008-04-06 14:32 . 2008-04-06 14:51 2008-03-31 21:57 . 2008-03-31 21:572,560–a------C:\WINDOWS\system32\bitcometres.dll 2008-03-29 16:38 . 2008-03-29 16:41 2008-03-29 16:37 . 2008-03-29 16:41 2008-03-29 16:37 . 1999-03-24 02:061,046,288–a------C:\WINDOWS\system32\msjet35.dll 2008-03-29 16:37 . 1997-01-13 01:0037,136–a------C:\WINDOWS\system32\MSJINT35.DLL 2008-03-29 16:37 . 1996-12-02 19:4424,336–a------C:\WINDOWS\system32\MSJTER35.DLL 2008-03-29 16:07 . 2008-03-29 16:08 2008-03-29 16:07 . 2008-03-29 16:07720,896–a------C:\WINDOWS\iun6002.exe 2008-03-29 15:59 . 2008-03-29 15:59 2008-03-29 15:59 . 1998-05-20 22:36254,976–a------C:\WINDOWS\system32\xaudio.dll 2008-03-29 15:18 . 2001-08-17 22:567,552–a------C:\WINDOWS\system32\drivers\SONYPVU1.SYS 2008-03-29 15:18 . 2001-08-17 22:567,552–a--c—C:\WINDOWS\system32\dllcache\sonypvu1.sys 2008-03-18 22:24 . 2008-03-18 22:24512,096–a------C:\WINDOWS\system32\drivers\amon.sys 2008-03-18 22:24 . 2008-03-18 22:24298,104–a------C:\WINDOWS\system32\imon.dll 2008-03-18 22:24 . 2008-03-18 22:2415,424–a------C:\WINDOWS\system32\drivers\nod32drv.sys 2008-03-17 08:33 . 2008-03-17 08:33 . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-04-14 20:45---------d-----wC:\Documents and Settings\Admin_2\Dane aplikacji\Skype 2008-04-14 20:44---------d-----wC:\Program Files\AutoConnect 2008-04-14 20:34---------d-----wC:\Program Files\Eset 2008-04-14 19:07---------d-----wC:\Program Files\Winamp 2008-04-12 14:41---------d-----wC:\Documents and Settings\Admin_2\Dane aplikacji\Tlen.pl 2008-04-09 17:42---------d-----wC:\Documents and Settings\Admin_2\Dane aplikacji\gtk-2.0 2008-04-08 05:47---------d-----wC:\Program Files\BitComet 2008-04-05 20:15---------d-----wC:\Program Files\eMule 2008-03-29 14:42---------d-----wC:\Program Files\Common Files\Wise Installation Wizard 2008-03-18 20:42---------d–h--rC:\Documents and Settings\Admin_2\Dane aplikacji\Win 2008-03-17 05:35---------d–h--wC:\Program Files\InstallShield Installation Information 2008-03-08 21:03---------d-----wC:\Program Files\MSN Messenger 2008-02-24 11:26921,600----a-wC:\WINDOWS\system32\vorbisenc.dll 2008-02-24 11:26892,928----a-wC:\WINDOWS\system32\iconv.dll 2008-02-24 11:2645,056----a-wC:\WINDOWS\system32\ogg.dll 2008-02-24 11:26237,568----a-wC:\WINDOWS\system32\OggDS.dll 2008-02-24 11:26188,416----a-wC:\WINDOWS\system32\vorbis.dll 2008-02-24 11:261,415,680----a-wC:\WINDOWS\system32\WMV9VCM.dll 2008-02-24 11:259,216----a-wC:\WINDOWS\system32\cpuinf32.dll 2008-02-24 11:25524,288----a-wC:\WINDOWS\system32\DivXsm.exe 2008-02-24 11:25391,168----a-wC:\WINDOWS\system32\i263_32.drv 2008-02-24 11:25245,760----a-wC:\WINDOWS\system32\mplvpx.dll 2008-02-24 11:241,559,040----a-wC:\WINDOWS\system32\xvidcore.dll 2008-02-21 10:55---------d-----wC:\Program Files\FLVPlayer 2008-02-21 08:20---------d-----wC:\Documents and Settings\Admin_2\Dane aplikacji\Nokia Multimedia Player 2008-02-21 08:20---------d-----wC:\Documents and Settings\Admin_2\Dane aplikacji\Nokia 2008-02-20 10:40---------d-----wC:\Documents and Settings\Admin_2\Dane aplikacji\PC Suite 2008-02-20 10:39---------d-----wC:\Program Files\PC Connectivity Solution 2008-02-20 10:39---------d-----wC:\Program Files\Nokia 2008-02-20 10:39---------d-----wC:\Program Files\Common Files\PCSuite 2008-02-20 10:39---------d-----wC:\Program Files\Common Files\Nokia 2008-02-20 10:38---------d-----wC:\Documents and Settings\All Users\Dane aplikacji\Installations 2008-02-18 16:51---------d-----wC:\Documents and Settings\Admin_2\Dane aplikacji\Gadu-Gadu 2008-02-18 16:39---------d-----wC:\Program Files\Gadu-Gadu 2008-02-03 08:1960,416----a-wC:\WINDOWS\ALCFDRTM.EXE 2005-03-31 20:1740,960----a-wC:\Program Files\Uninstall_CDS.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE~\Browser Helper Objects{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}] 2008-03-20 00:361267040–a------C:\Program Files\Winamp Toolbar\winamptb.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] “{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}”= “C:\Program Files\Winamp Toolbar\winamptb.dll” [2008-03-20 00:36 1267040] [HKEY_CLASSES_ROOT\clsid{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1] [HKEY_CLASSES_ROOT\TypeLib{538CD77C-BFDD-49b0-9562-77419CAB89D1}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser] “{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}”= C:\Program Files\Winamp Toolbar\winamptb.dll [2008-03-20 00:36 1267040] [HKEY_CLASSES_ROOT\clsid{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1] [HKEY_CLASSES_ROOT\TypeLib{538CD77C-BFDD-49b0-9562-77419CAB89D1}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “CTFMON.EXE”=“C:\WINDOWS\system32\ctfmon.exe” [2004-08-04 14:00 15360] “Komunikator”=“C:\Program Files\Tlen.pl\tlen.exe” [2007-10-16 12:53 6234112] “AutoConnect”=“C:\Program Files\AutoConnect\AutoConnect.exe” [2004-08-28 20:27 295424] “Skype”=“C:\Program Files\Skype\Phone\Skype.exe” [2007-08-17 03:49 23224104] “Creative Live! Cam Manager”=“C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe” [2006-05-31 17:00 143360] “MSMSGS”=“C:\Program Files\Messenger\msmsgs.exe” [2004-10-13 18: 24 1694208] “BitComet”=“C:\Program Files\BitComet\BitComet.exe” [2008-02-01 09:20 2194744] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “NvCplDaemon”=“C:\WINDOWS\system32\NvCpl.dll” [2006-10-22 12: 22 7700480] “AVFX Engine”=“C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe” [2006-06-09 02:11 24576] “V0220Mon.exe”=“C:\WINDOWS\V0220Mon.exe” [2006-06-28 19:01 32768] “ISUSPM Startup”=“C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe” [2004-08-09 06:03 221184] “ISUSScheduler”=“C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe” [2004-08-09 06:03 81920] “nod32kui”=“C:\Program Files\Eset\nod32kui.exe” [2008-03-18 22:24 949376] “WinampAgent”=“C:\Program Files\Winamp\winampa.exe” [2008-04-01 20:49 36352] [HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] “CTFMON.EXE”=“C:\WINDOWS\system32\CTFMON.EXE” [2004-08-04 14:00 15360] “DWQueuedReporting”=“C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe” [2007-03-13 16:38 39264] “Nokia.PCSync”=“C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe” [2007-11-07 18:35 1294336] [HKLM~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] “%windir%\system32\sessmgr.exe”= “C:\Program Files\Tlen.pl\tlen.exe”= “D:\Gry\EA GAMES\MOHAA\MOHAA.exe”= “C:\Program Files\eMule\emule.exe”= “C:\Program Files\BitComet\BitComet.exe”= “C:\Program Files\Gadu-Gadu\gg.exe”= “C:\Program Files\Opera\Opera.exe”= “C:\Program Files\SightSpeed\SightSpeed.exe”= “C:\Program Files\MSN Messenger\msnmsgr.exe”= “C:\Program Files\MSN Messenger\livecall.exe”= “C:\Program Files\Skype\Phone\Skype.exe”= [HKLM~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] “17354:TCP”= 17354:TCP:BitComet 17354 TCP “17354:UDP”= 17354:UDP:BitComet 17354 UDP R3 V0220Dev;Live! Cam Video IM;C:\WINDOWS\system32\DRIVERS\V0220Dev.sys [2006-06-29 07:58] R3 V0220Vfx;V0220VFX;C:\WINDOWS\system32\DRIVERS\V0220Vfx.sys [2006-06-08 10:00] S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 15:18] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2{ac327434-fd92-11dc-bb21-000e50b14408}] \Shell\AutoRun\command - G:\EXPLORER.EXE \Shell\explore\Command - G:\EXPLORER.EXE \Shell\open\Command - G:\EXPLORER.EXE . Contents of the ‘Scheduled Tasks’ folder “2008-04-14 20:47:02 C:\WINDOWS\Tasks\MP Scheduled Scan.job” - C:\Program Files\Windows Defender\MpCmdRun.exe . ************************************************************************** catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-04-14 22:44:33 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes … scanning hidden autostart entries … scanning hidden files … scan completed successfully hidden files: 0 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- PROCESS: C:\WINDOWS\system32\lsass.exe - C:\Program Files\Eset\pr_imon.dll . ------------------------ Other Running Processes ------------------------ . C:\Program Files\Windows Defender\MsMpEng.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe . ************************************************************************** . Completion time: 2008-04-14 22:47:23 - machine was rebooted [Admin_2] ComboFix-quarantined-files.txt 2008-04-14 20:47:19 Pre-Run: 9,237,676,032 bajtów wolnych Post-Run: 11,683,667,968 bajt˘w wolnych . 2008-04-02 04:59:16— E O F — o coś takiego chodziło?

huber2t · 15 Kwiecień 2008 01:50

otwórz notatnik i wklej

zapisz jako typ wszystkie pliki i pod nazwą plik.reg

Uruchom ten plik, uruchom ponownie komputer

patryk2547 · 17 Kwiecień 2008 14:52

a co to jest ten plik? co będzie zmieniał w rejestrze?

huber2t · 17 Kwiecień 2008 15:04

usunie wpis odpowiadający za uruchamianie niechcianych aplikacji

jest klucz w rejestrze

patryk2547 · 17 Kwiecień 2008 15:08

ok, dzięki za pomoc

Leon1 · 17 Kwiecień 2008 17:03

Wyłącz przywracanie systemu na wszystkich dyskach.http://support.microsoft.com/kb/310405/pl

Wylecz pendriva lub kartę pamięci http://www.softpedia.com/get/Security/S … Tool.shtml lub format

zrób optymalizacje uruchamiania http://cybertrash.netarteria.pl/cyber/index.php/topic,378.0.html

usuń ręcznie folder C: \Qoobox usuń instalkę Combofix z dysku.

przeskanuj obszar Mój komputer http://www.kaspersky.pl/virusscanner.html pokaż raport

włącz przywracanie systemu