prosze o sprawdzenie loga

**Posty:** 162 · przez **pieter777** 19 Lut 2006, 13:31

komp muli, 100% svchost

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 11:23:33, on 2006-02-19 Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Eset\nod32kui.exe D:\Program Files\DU Meter\DUMeter.exe D:\Program Files\AutoConnect\AutoConnect.exe C:\Program Files\TBNotify\TBNotify.exe C:\Program Files\BitComet\BitComet.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Winamp\winamp.exe D:\Program Files\Gadu-Gadu\gg.exe C:\Documents and Settings\Piotrek\Pulpit\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [NVRTCLK] C:\WINDOWS\System32\NVRTCLK\NVRTClk.exe O4 - HKLM\..\Run: [PathNvidiaTV] C:\Program Files\Gigabyte\Nvidia\patchnvidiaTVout.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [DU Meter] D:\Program Files\DU Meter\DUMeter.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [AutoConnect] D:\Program Files\AutoConnect\AutoConnect.exe O4 - HKCU\..\Run: [Gadu-Gadu] "D:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [TBNotify] "C:\Program Files\TBNotify\TBNotify.exe" /startup O4 - Global Startup: Adobe Reader Speed Launch.lnk = E:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O17 - HKLM\System\CCS\Services\Tcpip\..\{704CB609-1188-4249-AC02-AD2994AF2676}: NameServer = 194.204.152.34 217.98.63.164 O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Performance True Type Font (PerfFont) - Unknown owner - C:\WINDOWS\System32\perfont.exe O23 - Service: Win32Sr - Unknown owner - C:\WINDOWS\win32ssr.exe (file missing)

przez **jeff** 19 Lut 2006, 13:40

wszystkie czynności wykonujesz w trybie awaryjnym z wyłączonym przywracaniem systemu

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

kasujesz wpisy w hijacku

O23 - Service: Win32Sr - Unknown owner - C:\WINDOWS\win32ssr.exe (file missing)

Start >>> Uruchom >>> services.msc >>> zatrzymaj i wyłącz Win32Sr. Potem skasuj recznie plik win32ssr.exe

**Posty:** 162 · przez **pieter777** 19 Lut 2006, 13:51

nadal 100% svchost

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 11:44:04, on 2006-02-19 Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\perfont.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\D-Tools\daemon.exe C:\Program Files\Eset\nod32kui.exe C:\WINDOWS\SOUNDMAN.EXE D:\Program Files\DU Meter\DUMeter.exe D:\Program Files\AutoConnect\AutoConnect.exe D:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\TBNotify\TBNotify.exe C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Piotrek\Pulpit\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [NVRTCLK] C:\WINDOWS\System32\NVRTCLK\NVRTClk.exe O4 - HKLM\..\Run: [PathNvidiaTV] C:\Program Files\Gigabyte\Nvidia\patchnvidiaTVout.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [DU Meter] D:\Program Files\DU Meter\DUMeter.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [AutoConnect] D:\Program Files\AutoConnect\AutoConnect.exe O4 - HKCU\..\Run: [Gadu-Gadu] "D:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [TBNotify] "C:\Program Files\TBNotify\TBNotify.exe" /startup O4 - Global Startup: Adobe Reader Speed Launch.lnk = E:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O17 - HKLM\System\CCS\Services\Tcpip\..\{704CB609-1188-4249-AC02-AD2994AF2676}: NameServer = 194.204.152.34 217.98.63.164 O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Performance True Type Font (PerfFont) - Unknown owner - C:\WINDOWS\System32\perfont.exe

przez **jeff** 19 Lut 2006, 13:57

zgubilem

O23 - Service: Performance True Type Font (PerfFont) - Unknown owner - C:\WINDOWS\System32\perfont.exe (file missing)

Start => Uruchom => wpisz services.msc => zatrzymaj i wyłącz proces Performance True Type Font następnie odpalasz HijackThis Open the Misc Tools => Delete NT service => wpisz PerfFont => Ok i zresetuj komputer.

Plik usuwasz recznie

daj loga z Silent Runners

Ściągnij ten program na dysk i odpal

http://www.silentrunners.org/Silent%20Runners.zip

Pojawi się okienko i klikasz na "Nie ", dzięki czemu otrzymamy pełen log. Poczekaj chwile aż dostaniesz info że log już gotowy i wklej zawartość txt na forum

**Posty:** 162 · przez **pieter777** 19 Lut 2006, 14:05

cos jest nie tak

przez **jeff** 19 Lut 2006, 14:06

pieter777 napisał(a):cos jest nie tak

odpalasz w trybie awaryjnym ???

**Posty:** 162 · przez **pieter777** 19 Lut 2006, 14:18

Kod: Zaznacz wszystko: "Silent Runners.vbs", revision 43, http://www.silentrunners.org/ Operating System: Windows XP Output limited to non-default values, except where indicated by "{++}" Startup items buried in registry: --------------------------------- HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++} "CTFMON.EXE" = "C:\WINDOWS\System32\ctfmon.exe" [MS] "AutoConnect" = "D:\Program Files\AutoConnect\AutoConnect.exe" ["http://autoconnect.prv.pl"] "Gadu-Gadu" = ""D:\Program Files\Gadu-Gadu\gg.exe" /tray" ["sms-express.com"] "TBNotify" = ""C:\Program Files\TBNotify\TBNotify.exe" /startup" [null data] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++} "NVRTCLK" = "C:\WINDOWS\System32\NVRTCLK\NVRTClk.exe" [empty string] "PathNvidiaTV" = "C:\Program Files\Gigabyte\Nvidia\patchnvidiaTVout.exe" [file not found] "NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup" [MS] "nwiz" = "nwiz.exe /install" ["NVIDIA Corporation"] "NvMediaCenter" = "RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit" [MS] "DAEMON Tools-1033" = ""C:\Program Files\D-Tools\daemon.exe" -lang 1033" ["DAEMON'S HOME"] "nod32kui" = ""C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE" ["Eset "] "SoundMan" = "SOUNDMAN.EXE" ["Realtek Semiconductor Corp."] "DU Meter" = "D:\Program Files\DU Meter\DUMeter.exe" ["Hagel Technologies"] "SunJavaUpdateSched" = "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe" ["Sun Microsystems, Inc."] "BearShare" = ""C:\Program Files\BearShare\BearShare.exe" /pause" ["Free Peers, Inc."] HKLM\Software\Microsoft\Active Setup\Installed Components\ {306D6C21-C1B6-4629-986C-E59E1875B8AF}\(Default) = (no title provided) \StubPath = ""C:\WINDOWS\System32\rundll32.exe" "C:\Program Files\Messenger\msgsc.dll",ShowIconsUser" [MS] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = "AcroIEHlprObj Class" [from CLSID] -> {CLSID}\InProcServer32\(Default) = "E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"] {53707962-6F74-2D53-2644-206D7942484F}\(Default) = (no title provided) -> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\SPYBOT~1\SDHelper.dll" ["Safer Networking Limited"] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = "SSVHelper Class" [from CLSID] -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll" ["Sun Microsystems, Inc."] {E5A1691B-D188-4419-AD02-90002030B8EE}\(Default) = "FlashFXP Helper for Internet Explorer" [from CLSID] -> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\FlashFXP\IEFlash.dll" ["IniCom Networks, Inc."] HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ "{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania" -> {CLSID}\InProcServer32\(Default) = "deskpan.dll" [file not found] "{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\hticons.dll" ["Hilgraeve, Inc."] "{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\nvcpl.dll" ["NVIDIA Corporation"] "{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\nvcpl.dll" ["NVIDIA Corporation"] "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] "{B089FE88-FB52-11d3-BDF1-0050DA34150D}" = "NOD32 Context Menu Shell Extension" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Eset\nodshex.dll" ["Eset "] "{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\nvshell.dll" ["NVIDIA Corporation"] "{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Microsoft Office\OFFICE11\msohev.dll" [MS] HKLM\Software\Classes\PROTOCOLS\Filter\ INFECTION WARNING! text/xml\CLSID = "{807553E5-5146-11D5-A672-00B0D022E945}" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL" [MS] HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ NOD32 Context Menu Shell Extension\(Default) = "{B089FE88-FB52-11d3-BDF1-0050DA34150D}" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Eset\nodshex.dll" ["Eset "] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\ WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\ NOD32 Context Menu Shell Extension\(Default) = "{B089FE88-FB52-11d3-BDF1-0050DA34150D}" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Eset\nodshex.dll" ["Eset "] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] Active Desktop and Wallpaper: ----------------------------- Active Desktop is disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState HKCU\Control Panel\Desktop\ "Wallpaper" = "C:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp" Enabled Screen Saver: --------------------- HKCU\Control Panel\Desktop\ "SCRNSAVE.EXE" = "C:\WINDOWS\System32\logon.scr" [MS] Startup items in "Piotrek" & "All Users" startup folders: --------------------------------------------------------- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart "Adobe Reader Speed Launch" -> shortcut to: "E:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe" ["Adobe Systems Incorporated"] "DSLMON" -> shortcut to: "C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe" [empty string] Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] 000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS] 000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] Transport Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: imon.dll ["Eset "], 01 - 05, 11 %SystemRoot%\system32\mswsock.dll [MS], 06 - 08, 12 - 21 %SystemRoot%\system32\rsvpsp.dll [MS], 09 - 10 Toolbars, Explorer Bars, Extensions: ------------------------------------ Explorer Bars Dormant Explorer Bars in "View, Explorer Bar" menu HKLM\Software\Classes\CLSID\{FF059E31-CC5A-4E2E-BF3B-96E929D65503}\ = "&Badanie" Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar] InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL" [MS] Extensions (Tools menu items, main toolbar menu buttons) HKLM\Software\Microsoft\Internet Explorer\Extensions\ {08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ "MenuText" = "Sun Java Console" "CLSIDExtension" = "{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll" ["Sun Microsystems, Inc."] {92780B25-18CC-41C8-B9BE-3C9C571A8263}\ "ButtonText" = "Badanie" All Non-Disabled Services (Display Name, Service Name, Path {Service DLL}): --------------------------------------------------------------------------- Karta wydajności WMI, WmiApSrv, "C:\WINDOWS\System32\wbem\wmiapsrv.exe" [MS] NOD32 Kernel Service, NOD32krn, ""C:\Program Files\Eset\nod32krn.exe"" ["Eset "] NVIDIA Display Driver Service, NVSvc, "C:\WINDOWS\System32\nvsvc32.exe" ["NVIDIA Corporation"] Office Source Engine, ose, "C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" [MS] Portable Media Serial Number Service, WmdmPmSN, "C:\WINDOWS\System32\svchost.exe -k netsvcs" {"C:\WINDOWS\System32\MsPMSNSv.dll" [MS]} Usługa administracyjna Menedżera dysków logicznych, dmadmin, "C:\WINDOWS\System32\dmadmin.exe /com" ["Microsoft Corp., Veritas Software"] Windows User Mode Driver Framework, UMWdf, "C:\WINDOWS\System32\wdfmgr.exe" [MS] ---------- + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + The search for DESKTOP.INI DLL launch points on all local fixed drives took 123 seconds. + The search for all Registry CLSIDs containing dormant Explorer Bars took 14 seconds. ---------- (total run time: 225 seconds)

przez **jeff** 19 Lut 2006, 14:52

ten log jest ok

**Posty:** 162 · przez **pieter777** 19 Lut 2006, 14:55

ale nadal mam 100% svchosta

nod 32 nic nie wykrywa

przez **jeff** 19 Lut 2006, 14:56

pieter777 napisał(a):ale nadal mam 100% svchosta

daj screena

**Posty:** 162 · przez **pieter777** 19 Lut 2006, 14:58

[ Dodano: Dzisiaj o 6:56 ]
sory za double posta ale... potrzebuje pomocy a temat juz zosatal zakopany

**Posty:** 8694 · przez **Red** 20 Lut 2006, 10:24

sciagnij na pulpit :
http://bilder.informationsarchiv.net/Nikitas_Tools/pv.zip

wypakuj i uruchom to z folderu runme.bat i daj log z opcji 4 czyli wklep 4 i enter.

**Posty:** 162 · przez **pieter777** 20 Lut 2006, 15:15

Kod: Zaznacz wszystko: Module information for 'svchost.exe' MODULE BASE SIZE PATH svchost.exe 1000000 24576 C:\WINDOWS\system32\svchost.exe 5.1.2600.0 (xpclient.010817-1148) Generic Host Process for Win32 Services ntdll.dll 77f50000 692224 C:\WINDOWS\System32\ntdll.dll 5.1.2600.1106 (xpsp1.020828-1920) Biblioteka NT Layer DLL kernel32.dll 77e60000 970752 C:\WINDOWS\system32\kernel32.dll 5.1.2600.1106 (xpsp1.020828-1920) Biblioteka DLL klienta Windows NT BASE API ADVAPI32.dll 77dc0000 647168 C:\WINDOWS\system32\ADVAPI32.dll 5.1.2600.1106 (xpsp1.020828-1920) Advanced Windows 32 Base API RPCRT4.dll 78000000 548864 C:\WINDOWS\system32\RPCRT4.dll 5.1.2600.1106 (xpsp1.020828-1920) Remote Procedure Call Runtime rpcss.dll 75810000 274432 c:\windows\system32\rpcss.dll 5.1.2600.1106 (xpsp1.020828-1920) Distributed COM Services msvcrt.dll 77c00000 339968 C:\WINDOWS\system32\msvcrt.dll 7.0.2600.1106 (xpsp1.020828-1920) Windows NT CRT DLL WS2_32.dll 71a50000 86016 c:\windows\system32\WS2_32.dll 5.1.2600.0 (xpclient.010817-1148) Windows Socket 2.0 32-Bit DLL WS2HELP.dll 71a40000 32768 c:\windows\system32\WS2HELP.dll 5.1.2600.0 (xpclient.010817-1148) Windows Socket 2.0 Helper dla Windows NT USER32.dll 77d30000 573440 C:\WINDOWS\system32\USER32.dll 5.1.2600.1106 (xpsp1.020828-1920) Biblioteka DLL klienta Windows XP USER API GDI32.dll 77c60000 262144 C:\WINDOWS\system32\GDI32.dll 5.1.2600.1106 (xpsp1.020828-1920) GDI Client DLL Secur32.dll 76f80000 65536 c:\windows\system32\Secur32.dll 5.1.2600.1106 (xpsp1.020828-1920) Security Support Provider Interface userenv.dll 75a40000 679936 C:\WINDOWS\system32\userenv.dll 5.1.2600.1106 (xpsp1.020828-1920) Userenv mswsock.dll 719f0000 245760 C:\WINDOWS\system32\mswsock.dll 5.1.2600.0 (xpclient.010817-1148) Microsoft Windows Sockets 2.0 Dostawca usługi imon.dll 20b00000 282624 C:\WINDOWS\system32\imon.dll 2, 50, 41 NOD32 IMON - Internet scanning support WSOCK32.dll 71a70000 36864 C:\WINDOWS\system32\WSOCK32.dll 5.1.2600.0 (xpclient.010817-1148) 32-bitowa biblioteka Windows Socket NTMARTA.DLL 76cd0000 126976 C:\WINDOWS\system32\NTMARTA.DLL 5.1.2600.1106 (xpsp1.020828-1920) Windows NT - dostawca MARTA WLDAP32.dll 76f50000 184320 C:\WINDOWS\system32\WLDAP32.dll 5.1.2600.1106 (xpsp1.020828-1920) Win32 LDAP API DLL ole32.dll 771a0000 1183744 C:\WINDOWS\system32\ole32.dll 5.1.2600.1106 (xpsp1.020828-1920) Microsoft OLE for Windows SAMLIB.dll 71ba0000 69632 C:\WINDOWS\system32\SAMLIB.dll 5.1.2600.1106 (xpsp1.020828-1920) SAM Library DLL wshtcpip.dll 71a30000 32768 C:\WINDOWS\System32\wshtcpip.dll 5.1.2600.0 (xpclient.010817-1148) Windows Sockets Helper DLL DNSAPI.dll 76f10000 151552 C:\WINDOWS\system32\DNSAPI.dll 5.1.2600.1106 (xpsp1.020828-1920) DNS Client API DLL iphlpapi.dll 76d50000 94208 C:\WINDOWS\system32\iphlpapi.dll 5.1.2600.2 (xpsp1.020828-1920) Interfejs API Pomocnika IP winrnr.dll 76fa0000 28672 C:\WINDOWS\System32\winrnr.dll 5.1.2600.0 (xpclient.010817-1148) LDAP RnR Provider DLL rasadhlp.dll 76fb0000 20480 C:\WINDOWS\system32\rasadhlp.dll 5.1.2600.0 (xpclient.010817-1148) Remote Access AutoDial Helper CLBCATQ.DLL 76fc0000 491520 C:\WINDOWS\system32\CLBCATQ.DLL 2001.12.4414.42 OLEAUT32.dll 77110000 569344 C:\WINDOWS\system32\OLEAUT32.dll 3.50.5016.0 Microsoft OLE 3.50 for Windows NT(TM) and Windows 95(TM) Operating Systems COMRes.dll 77040000 839680 C:\WINDOWS\system32\COMRes.dll 2001.12.4414.42 VERSION.dll 77bf0000 28672 C:\WINDOWS\system32\VERSION.dll 5.1.2600.0 (xpclient.010817-1148) Version Checking and File Installation Libraries Module information for 'svchost.exe' MODULE BASE SIZE PATH svchost.exe 1000000 24576 C:\WINDOWS\System32\svchost.exe 5.1.2600.0 (xpclient.010817-1148) Generic Host Process for Win32 Services ntdll.dll 77f50000 692224 C:\WINDOWS\System32\ntdll.dll 5.1.2600.1106 (xpsp1.020828-1920) Biblioteka NT Layer DLL kernel32.dll 77e60000 970752 C:\WINDOWS\system32\kernel32.dll 5.1.2600.1106 (xpsp1.020828-1920) Biblioteka DLL klienta Windows NT BASE API ADVAPI32.dll 77dc0000 647168 C:\WINDOWS\system32\ADVAPI32.dll 5.1.2600.1106 (xpsp1.020828-1920) Advanced Windows 32 Base API RPCRT4.dll 78000000 548864 C:\WINDOWS\system32\RPCRT4.dll 5.1.2600.1106 (xpsp1.020828-1920) Remote Procedure Call Runtime ole32.dll 771a0000 1183744 C:\WINDOWS\system32\ole32.dll 5.1.2600.1106 (xpsp1.020828-1920) Microsoft OLE for Windows GDI32.dll 77c60000 262144 C:\WINDOWS\system32\GDI32.dll 5.1.2600.1106 (xpsp1.020828-1920) GDI Client DLL USER32.dll 77d30000 573440 C:\WINDOWS\system32\USER32.dll 5.1.2600.1106 (xpsp1.020828-1920) Biblioteka DLL klienta Windows XP USER API shsvcs.dll 76bb0000 131072 c:\windows\system32\shsvcs.dll 6.00.2800.1106 (xpsp1.020828-1920) Biblioteka DLL usług powłoki systemu Windows msvcrt.dll 77c00000 339968 C:\WINDOWS\system32\msvcrt.dll 7.0.2600.1106 (xpsp1.020828-1920) Windows NT CRT DLL SHLWAPI.dll 570000 409600 C:\WINDOWS\system32\SHLWAPI.dll 6.00.2800.1106 (xpsp1.020828-1920) Biblioteka dodatkowych narzędzi powłoki shell32.dll 773c0000 8380416 C:\WINDOWS\system32\shell32.dll 6.00.2800.1106 (xpsp1.020828-1920) Wspólna biblioteka DLL Powłoki systemu Windows comctl32.dll 78090000 933888 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\comctl32.dll 6.0 (xpsp1.020828-1920) User Experience Controls Library comctl32.dll 77330000 569344 C:\WINDOWS\system32\comctl32.dll 5.82 (xpsp1.020828-1920) Common Controls Library WINSTA.dll 76330000 61440 C:\WINDOWS\System32\WINSTA.dll 5.1.2600.1106 (xpsp1.020828-1920) Winstation Library dhcpcsvc.dll 76d70000 110592 c:\windows\system32\dhcpcsvc.dll 5.1.2600.1106 (xpsp1.020828-1920) Usługa klienta DHCP DNSAPI.dll 76f10000 151552 c:\windows\system32\DNSAPI.dll 5.1.2600.1106 (xpsp1.020828-1920) DNS Client API DLL WS2_32.dll 71a50000 86016 c:\windows\system32\WS2_32.dll 5.1.2600.0 (xpclient.010817-1148) Windows Socket 2.0 32-Bit DLL WS2HELP.dll 71a40000 32768 c:\windows\system32\WS2HELP.dll 5.1.2600.0 (xpclient.010817-1148) Windows Socket 2.0 Helper dla Windows NT iphlpapi.dll 76d50000 94208 c:\windows\system32\iphlpapi.dll 5.1.2600.2 (xpsp1.020828-1920) Interfejs API Pomocnika IP Secur32.dll 76f80000 65536 c:\windows\system32\Secur32.dll 5.1.2600.1106 (xpsp1.020828-1920) Security Support Provider Interface UxTheme.dll 5b1d0000 212992 C:\WINDOWS\System32\UxTheme.dll 6.00.2800.1106 (xpsp1.020828-1920) Biblioteka Microsoft UxTheme rsaenh.dll ffd0000 143360 C:\WINDOWS\System32\rsaenh.dll 5.1.2600.1029 (xpsp1.020426-1800) Microsoft Base Cryptographic Provider wzcsvc.dll 77ca0000 278528 c:\windows\system32\wzcsvc.dll 5.1.2600.1106 (xpsp1.020828-1920) Usługa konfiguracji zerowej sieci bezprzewodowej rtutils.dll 76e70000 53248 c:\windows\system32\rtutils.dll 5.1.2600.0 (xpclient.010817-1148) Routing Utilities WMI.dll 76d20000 16384 c:\windows\system32\WMI.dll 5.1.2600.0 (XPClient.010817-1148) WMI DC and DP functionality OLEAUT32.dll 77110000 569344 C:\WINDOWS\system32\OLEAUT32.dll 3.50.5016.0 Microsoft OLE 3.50 for Windows NT(TM) and Windows 95(TM) Operating Systems CRYPT32.dll 76290000 573440 C:\WINDOWS\system32\CRYPT32.dll 5.131.2600.1106 (xpsp1.020828-1920) Crypto API32 MSASN1.dll 76270000 61440 C:\WINDOWS\system32\MSASN1.dll 5.1.2600.0 (XPClient.010817-1148) ASN.1 Runtime APIs WTSAPI32.dll 76f40000 32768 c:\windows\system32\WTSAPI32.dll 5.1.2600.1106 (xpsp1.020828-1920) Windows Terminal Server SDK APIs ESENT.dll 69c20000 1048576 c:\windows\system32\ESENT.dll 5.1.2468.0 (Lab03_N(jliem).010306-1456) Server Database Storage Engine WLDAP32.dll 76f50000 184320 C:\WINDOWS\system32\WLDAP32.dll 5.1.2600.1106 (xpsp1.020828-1920) Win32 LDAP API DLL NETAPI32.dll 71bd0000 319488 c:\windows\system32\NETAPI32.dll 5.1.2600.1106 (xpsp1.020828-1920) Net Win32 API DLL NTMARTA.DLL 76cd0000 126976 C:\WINDOWS\System32\NTMARTA.DLL 5.1.2600.1106 (xpsp1.020828-1920) Windows NT - dostawca MARTA SAMLIB.dll 71ba0000 69632 C:\WINDOWS\System32\SAMLIB.dll 5.1.2600.1106 (xpsp1.020828-1920) SAM Library DLL rastls.dll 74ec0000 106496 C:\WINDOWS\System32\rastls.dll 5.1.2600.1106 (xpsp1.020828-1920) Remote Access PPP EAP-TLS ATL.DLL 76b00000 86016 C:\WINDOWS\System32\ATL.DLL 3.00.9435 ATL Module for Windows NT (Unicode) CRYPTUI.dll 75480000 491520 C:\WINDOWS\System32\CRYPTUI.dll 5.131.2600.1106 (xpsp1.020828-1920) Dostawca interfejsu zaufania Microsoft WINTRUST.dll 76c20000 176128 C:\WINDOWS\System32\WINTRUST.dll 5.131.2600.0 (xpclient.010817-1148) Interfejsy API potwierdzania zaufania firmy Microsoft IMAGEHLP.dll 76c80000 139264 C:\WINDOWS\system32\IMAGEHLP.dll 5.1.2600.1106 (xpsp1.020828-1920) Windows NT Image Helper WININET.dll 761d0000 626688 C:\WINDOWS\system32\WININET.dll 6.00.2800.1106 (xpsp1.020828-1920) Rozszerzenia internetowe Win32 MPRAPI.dll 76d30000 90112 C:\WINDOWS\System32\MPRAPI.dll 5.1.2600.0 (xpclient.010817-1148) Windows NT MP Router Administration DLL ACTIVEDS.dll 76e30000 192512 C:\WINDOWS\System32\ACTIVEDS.dll 5.1.2600.0 (xpclient.010817-1148) ADs Router Layer DLL adsldpc.dll 76e00000 151552 C:\WINDOWS\System32\adsldpc.dll 5.1.2600.1106 (xpsp1.020828-1920) ADs LDAP Provider C DLL SETUPAPI.dll 76650000 958464 C:\WINDOWS\System32\SETUPAPI.dll 5.1.2600.1106 (xpsp1.020828-1920) Interfejs API Instalatora systemu Windows RASAPI32.dll 76ed0000 225280 C:\WINDOWS\System32\RASAPI32.dll 5.1.2600.1106 (xpsp1.020828-1920) Interfejs API usługi Dostęp zdalny rasman.dll 76e80000 69632 C:\WINDOWS\System32\rasman.dll 5.1.2600.1106 (xpsp1.020828-1920) Remote Access Connection Manager TAPI32.dll 76ea0000 176128 C:\WINDOWS\System32\TAPI32.dll 5.1.2600.1106 (xpsp1.020828-1920) Biblioteka DLL klienta interfejsu API usługi Telefonii dla systemu Microsoft® Windows(TM) WINMM.dll 76b20000 184320 C:\WINDOWS\System32\WINMM.dll 5.1.2600.1106 (xpsp1.020828-1920) MCI API DLL SCHANNEL.dll 767d0000 147456 C:\WINDOWS\System32\SCHANNEL.dll 5.1.2600.1106 (xpsp1.020828-1920) TLS / SSL Security Provider USERENV.dll 75a40000 679936 C:\WINDOWS\system32\USERENV.dll 5.1.2600.1106 (xpsp1.020828-1920) Userenv WinSCard.dll 72380000 106496 C:\WINDOWS\System32\WinSCard.dll 5.1.2600.0 (xpclient.010817-1148) Microsoft Smart Card API raschap.dll 74fb0000 69632 C:\WINDOWS\System32\raschap.dll 5.1.2600.1106 (xpsp1.020828-1920) Remote Access PPP CHAP msv1_0.dll 76d00000 118784 C:\WINDOWS\system32\msv1_0.dll 5.1.2600.1106 (xpsp1.020828-1920) Microsoft Authentication Package v1.0 CLBCATQ.DLL 76fc0000 491520 C:\WINDOWS\System32\CLBCATQ.DLL 2001.12.4414.42 COMRes.dll 77040000 839680 C:\WINDOWS\System32\COMRes.dll 2001.12.4414.42 VERSION.dll 77bf0000 28672 C:\WINDOWS\system32\VERSION.dll 5.1.2600.0 (xpclient.010817-1148) Version Checking and File Installation Libraries schedsvc.dll 75180000 176128 c:\windows\system32\schedsvc.dll 5.1.2600.1106 (xpsp1.020828-1920) Aparat Harmonogramu zadań NTDSAPI.dll 76780000 77824 c:\windows\system32\NTDSAPI.dll 5.1.2600.0 (xpclient.010817-1148) NT5DS mswsock.dll 719f0000 245760 C:\WINDOWS\System32\mswsock.dll 5.1.2600.0 (xpclient.010817-1148) Microsoft Windows Sockets 2.0 Dostawca usługi imon.dll 20b00000 282624 C:\WINDOWS\System32\imon.dll 2, 50, 41 NOD32 IMON - Internet scanning support WSOCK32.dll 71a70000 36864 C:\WINDOWS\System32\WSOCK32.dll 5.1.2600.0 (xpclient.010817-1148) 32-bitowa biblioteka Windows Socket wshtcpip.dll 71a30000 32768 C:\WINDOWS\System32\wshtcpip.dll 5.1.2600.0 (xpclient.010817-1148) Windows Sockets Helper DLL MSIDLE.DLL 74f00000 20480 C:\WINDOWS\System32\MSIDLE.DLL 6.00.2600.0000 (xpclient.010817-1148) User Idle Monitor audiosrv.dll 70e00000 53248 c:\windows\system32\audiosrv.dll 5.1.2600.1106 (xpsp1.020828-1920) Windows Audio Service wkssvc.dll 75120000 131072 c:\windows\system32\wkssvc.dll 5.1.2600.0 (xpclient.010817-1148) Workstation Service DLL cryptsvc.dll 74f50000 65536 c:\windows\system32\cryptsvc.dll 5.1.2600.1106 (xpsp1.020828-1920) Cryptographic Services certcli.dll 75300000 204800 c:\windows\system32\certcli.dll 5.1.2600.1106 (xpsp1.020828-1920) Klient usług certyfikatów Microsoft® srvsvc.dll 75040000 94208 c:\windows\system32\srvsvc.dll 5.1.2600.0 (xpclient.010817-1148) Server Service DLL hidserv.dll 68de0000 32768 c:\windows\system32\hidserv.dll 5.1.2600.1106 (xpsp1.020828-1920) HID Audio Service HID.DLL 68df0000 36864 c:\windows\system32\HID.DLL 5.1.2600.0 (XPClient.010817-1148) Hid User Library pchsvc.dll 74ef0000 40960 c:\windows\pchealth\helpctr\binaries\pchsvc.dll 5.1.2600.1106 (xpsp1.020828-1920) Microsoft PCHealth Service Holder es.dll 76b50000 249856 c:\windows\system32\es.dll 2001.12.4414.46 ersvc.dll 74f30000 32768 c:\windows\system32\ersvc.dll 5.1.2600.1106 (xpsp1.020828-1920) Windows Error Reporting Service dmserver.dll 74f40000 36864 c:\windows\system32\dmserver.dll 2600.0.503.0 Biblioteka DLL usługi Menedżera dysków logicznych seclogon.dll 73cb0000 36864 c:\windows\system32\seclogon.dll 5.1.2600.0 (xpclient.010817-1148) Biblioteka DLL dla pomocniczej usługi logowania sens.dll 72280000 49152 c:\windows\system32\sens.dll 5.1.2600.1106 (xpsp1.020828-1920) System Event Notification Service (SENS) srsvc.dll 75150000 176128 c:\windows\system32\srsvc.dll 5.1.2600.1106 (xpsp1.020828-1920) Usługa przywracania systemu POWRPROF.dll 74a80000 28672 c:\windows\system32\POWRPROF.dll 6.00.2600.0000 (xpclient.010817-1148) Power Profile Helper DLL trkwks.dll 75020000 94208 c:\windows\system32\trkwks.dll 5.1.2600.1106 (xpsp1.020828-1920) Distributed Link Tracking Client SXS.DLL 75e60000 684032 C:\WINDOWS\System32\SXS.DLL 5.1.2600.1106 (xpsp1.020828-1920) Fusion 2.5 winspool.drv 72f90000 143360 C:\WINDOWS\System32\winspool.drv 5.1.2600.1106 (xpsp1.020828-1920) Windows Spooler Driver browser.dll 74f90000 61440 c:\windows\system32\browser.dll 5.1.2600.1106 (xpsp1.020828-1920) Computer Browser Service DLL wuauserv.dll 74e70000 24576 c:\windows\system32\wuauserv.dll 5.4.3630.1106 (xpsp1.020828-1920) Windows Update AutoUpdate Service wuaueng.dll 76d90000 200704 C:\WINDOWS\System32\wuaueng.dll 5.4.3630.1106 (xpsp1.020828-1920) Aparat autoaktualizacji Windows Update ADVPACK.dll 75210000 159744 C:\WINDOWS\System32\ADVPACK.dll 6.00.2800.1106 (xpsp1.020828-1920) ADVPACK sfc.dll 76b90000 16384 C:\WINDOWS\System32\sfc.dll 5.1.2600.0 (xpclient.010817-1148) Windows File Protection sfc_os.dll 76c50000 167936 C:\WINDOWS\System32\sfc_os.dll 5.1.2600.1106 (xpsp1.020828-1920) Ochrona plików systemu Windows wmisvc.dll 598e0000 114688 c:\windows\system32\wbem\wmisvc.dll 5.1.2600.1106 (xpsp1.020828-1920) WMI wbemcomn.dll 75240000 229376 c:\windows\system32\wbem\wbemcomn.dll 5.1.2600.1106 (xpsp1.020828-1920) WMI VSSAPI.DLL 75390000 425984 C:\WINDOWS\System32\VSSAPI.DLL 5.1.2600.1106 (xpsp1.020828-1920) Microsoft® Volume Shadow Copy Requestor/Writer Services API DLL w32time.dll 767a0000 176128 c:\windows\system32\w32time.dll 5.1.2600.1106 (xpsp1.020828-1920) Usługa Czas systemu Windows MSVCP60.dll 76050000 397312 c:\windows\system32\MSVCP60.dll 6.00.8972.0 Microsoft (R) C++ Runtime Library comsvcs.dll 756f0000 1179648 C:\WINDOWS\system32\comsvcs.dll 2001.12.4414.46 MTXCLU.DLL 750a0000 73728 C:\WINDOWS\system32\MTXCLU.DLL 2001.12.4414.42 MS DTC amd MTS clustering support DLL colbact.DLL 750e0000 77824 C:\WINDOWS\system32\colbact.DLL 2001.12.4414.42 CLUSAPI.DLL 74f70000 69632 C:\WINDOWS\System32\CLUSAPI.DLL 5.1.2600.1106 (xpsp1.020828-1920) Cluster API Library RESUTILS.DLL 75060000 69632 C:\WINDOWS\System32\RESUTILS.DLL 5.1.2600.0 (xpclient.010817-1148) Microsoft Cluster Resource Utility DLL mtxoci.dll 75080000 94208 C:\WINDOWS\System32\mtxoci.dll 2001.12.4414.42 Microsoft database support DLL for Oracle termsrv.dll 75280000 245760 c:\windows\system32\termsrv.dll 5.1.2600.1106 (xpsp1.020828-1920) Usługa serwera terminali ICAAPI.dll 74f20000 20480 c:\windows\system32\ICAAPI.dll 5.1.2600.1106 (xpsp1.020828-1920) DLL Interface to TermDD Device Driver AUTHZ.dll 76cb0000 65536 c:\windows\system32\AUTHZ.dll 5.1.2600.0 (xpclient.010817-1148) Authorization Framework mstlsapi.dll 750c0000 114688 c:\windows\system32\mstlsapi.dll 5.1.2600.0 (xpclient.010817-1148) Microsoft® Terminal Server Licensing REGAPI.dll 76ba0000 57344 C:\WINDOWS\System32\REGAPI.dll 5.1.2600.1106 (xpsp1.020828-1920) Registry Configuration APIs netman.dll 76dd0000 163840 c:\windows\system32\netman.dll 5.1.2600.1106 (xpsp1.020828-1920) Menedżer połączeń sieciowych NETSHELL.dll 75cc0000 1650688 C:\WINDOWS\system32\NETSHELL.dll 5.1.2600.1106 (xpsp1.020828-1920) Powłoka połączeń sieciowych credui.dll 76bf0000 184320 C:\WINDOWS\system32\credui.dll 5.1.2600.1106 (xpsp1.020828-1920) Interfejs użytkownika menedżera poświadczeń hnetcfg.dll 68d80000 258048 C:\WINDOWS\System32\hnetcfg.dll 5.1.2600.1106 (xpsp1.020828-1920) Menedżer konfiguracji sieci domowej wbemcore.dll 75400000 491520 C:\WINDOWS\System32\Wbem\wbemcore.dll 5.1.2600.1106 (xpsp1.020828-1920) WMI esscli.dll 752c0000 245760 C:\WINDOWS\System32\Wbem\esscli.dll 5.1.2600.1106 (xpsp1.020828-1920) WMI FastProx.dll 75650000 577536 C:\WINDOWS\System32\Wbem\FastProx.dll 5.1.2600.1106 (xpsp1.020828-1920) WMI wmiutils.dll 74fd0000 118784 C:\WINDOWS\System32\wbem\wmiutils.dll 5.1.2600.1106 (xpsp1.020828-1920) WMI repdrvfs.dll 751b0000 147456 C:\WINDOWS\System32\wbem\repdrvfs.dll 5.1.2600.1106 (xpsp1.020828-1920) WMI upnp.dll 74ff0000 135168 C:\WINDOWS\System32\upnp.dll 5.1.2600.1106 (xpsp1.020828-1920) Universal Plug and Play API SSDPAPI.dll 74eb0000 40960 C:\WINDOWS\System32\SSDPAPI.dll 5.1.2600.1106 (xpsp1.020828-1920) SSDP Client API DLL wmiprvi.dll 10000000 552960 C:\WINDOWS\System32\wbem\wmiprvi.dll wmiprvsd.dll 59930000 421888 C:\WINDOWS\System32\wbem\wmiprvsd.dll 5.1.2600.1106 (xpsp1.020828-1920) WMI NCObjAPI.DLL 5fc00000 57344 C:\WINDOWS\System32\NCObjAPI.DLL 5.1.2600.1106 (xpsp1.020828-1920) wbemess.dll 75340000 270336 C:\WINDOWS\System32\wbem\wbemess.dll 5.1.2600.1106 (xpsp1.020828-1920) WMI netcfgx.dll 755b0000 602112 C:\WINDOWS\System32\netcfgx.dll 5.1.2600.1106 (xpsp1.020828-1920) Obiekty konfiguracji sieci rasadhlp.dll 76fb0000 20480 C:\WINDOWS\System32\rasadhlp.dll 5.1.2600.0 (xpclient.010817-1148) Remote Access AutoDial Helper rasmans.dll 72410000 180224 C:\WINDOWS\System32\rasmans.dll 5.1.2600.1106 (xpsp1.020828-1920) Remote Access Connection Manager WINIPSEC.DLL 74310000 40960 C:\WINDOWS\System32\WINIPSEC.DLL 5.1.2600.0 (xpclient.010817-1148) Windows IPSec SPD Client DLL tapisrv.dll 73370000 245760 c:\windows\system32\tapisrv.dll 5.1.2600.1106 (xpsp1.020828-1920) Serwer Telefonii Microsoft® Windows(TM) PSAPI.DLL 76be0000 45056 c:\windows\system32\PSAPI.DLL 5.1.2600.1106 (xpsp1.020828-1920) Process Status Helper rastapi.dll 72010000 65536 C:\WINDOWS\System32\rastapi.dll 5.1.2600.1106 (xpsp1.020828-1920) Remote Access TAPI Compliance Layer unimdm.tsp 57de0000 200704 C:\WINDOWS\System32\unimdm.tsp 5.1.2600.0 (xpclient.010817-1148) Dostawca usług Unimodem 5 uniplat.dll 71fb0000 28672 C:\WINDOWS\System32\uniplat.dll 5.1.2600.0 (xpclient.010817-1148) Unimodem AT Mini Driver Platform Driver for Windows NT kmddsp.tsp 57e60000 45056 C:\WINDOWS\System32\kmddsp.tsp 5.1.2600.0 (xpclient.010817-1148) Dostawca usług trybu jądra TAPI ndptsp.tsp 57e40000 65536 C:\WINDOWS\System32\ndptsp.tsp 5.1.2600.0 (xpclient.010817-1148) Dostawca usług NDIS Proxy TAPI ipconf.tsp 57e70000 28672 C:\WINDOWS\System32\ipconf.tsp 5.1.2600.0 (xpclient.010817-1148) Dostawca usług Microsoft Multicast Conference TAPI h323.tsp 57e90000 274432 C:\WINDOWS\System32\h323.tsp 5.1.2600.0 (xpclient.010817-1148) Dostawca usługi telefonii Microsoft H.323 hidphone.tsp 57e80000 40960 C:\WINDOWS\System32\hidphone.tsp 5.1.2600.0 (xpclient.010817-1148) Microsoft HID Phone TSP rasppp.dll 721f0000 204800 C:\WINDOWS\System32\rasppp.dll 5.1.2600.1106 (xpsp1.020828-1920) Remote Access PPP ntlsapi.dll 72440000 20480 C:\WINDOWS\System32\ntlsapi.dll 5.1.2600.0 (xpclient.010817-1148) Microsoft® License Server Interface DLL RASDLG.dll 75500000 663552 C:\WINDOWS\System32\RASDLG.dll 5.1.2600.1106 (xpsp1.020828-1920) Interfejs API dla wspólnych okien dialogowych usługi Dostęp zdalny winhttp.dll 4020000 327680 C:\WINDOWS\System32\winhttp.dll 5.1.2600.1106 (xpsp1.020828-1920) Windows HTTP Services ncprov.dll 5fbd0000 69632 C:\WINDOWS\System32\wbem\ncprov.dll 5.1.2600.1106 (xpsp1.020828-1920) Non-COM WMI Event Provision APIs wbemsvc.dll 74e80000 61440 C:\WINDOWS\System32\wbem\wbemsvc.dll 5.1.2600.0 (xpclient.010817-1148) WMI Apphelp.dll 75f10000 122880 C:\WINDOWS\system32\Apphelp.dll 5.1.2600.1106 (xpsp1.020828-1920) Application Compatibility Client Library Module information for 'svchost.exe' MODULE BASE SIZE PATH svchost.exe 1000000 24576 C:\WINDOWS\System32\svchost.exe 5.1.2600.0 (xpclient.010817-1148) Generic Host Process for Win32 Services ntdll.dll 77f50000 692224 C:\WINDOWS\System32\ntdll.dll 5.1.2600.1106 (xpsp1.020828-1920) Biblioteka NT Layer DLL kernel32.dll 77e60000 970752 C:\WINDOWS\system32\kernel32.dll 5.1.2600.1106 (xpsp1.020828-1920) Biblioteka DLL klienta Windows NT BASE API ADVAPI32.dll 77dc0000 647168 C:\WINDOWS\system32\ADVAPI32.dll 5.1.2600.1106 (xpsp1.020828-1920) Advanced Windows 32 Base API RPCRT4.dll 78000000 548864 C:\WINDOWS\system32\RPCRT4.dll 5.1.2600.1106 (xpsp1.020828-1920) Remote Procedure Call Runtime dnsrslvr.dll 76750000 53248 c:\windows\system32\dnsrslvr.dll 5.1.2600.0 (xpclient.010817-1148) Usługa buforowanego rozpoznawania nazw DNS msvcrt.dll 77c00000 339968 C:\WINDOWS\system32\msvcrt.dll 7.0.2600.1106 (xpsp1.020828-1920) Windows NT CRT DLL USER32.dll 77d30000 573440 C:\WINDOWS\system32\USER32.dll 5.1.2600.1106 (xpsp1.020828-1920) Biblioteka DLL klienta Windows XP USER API GDI32.dll 77c60000 262144 C:\WINDOWS\system32\GDI32.dll 5.1.2600.1106 (xpsp1.020828-1920) GDI Client DLL DNSAPI.dll 76f10000 151552 c:\windows\system32\DNSAPI.dll 5.1.2600.1106 (xpsp1.020828-1920) DNS Client API DLL WS2_32.dll 71a50000 86016 c:\windows\system32\WS2_32.dll 5.1.2600.0 (xpclient.010817-1148) Windows Socket 2.0 32-Bit DLL WS2HELP.dll 71a40000 32768 c:\windows\system32\WS2HELP.dll 5.1.2600.0 (xpclient.010817-1148) Windows Socket 2.0 Helper dla Windows NT iphlpapi.dll 76d50000 94208 c:\windows\system32\iphlpapi.dll 5.1.2600.2 (xpsp1.020828-1920) Interfejs API Pomocnika IP imon.dll 20b00000 282624 C:\WINDOWS\System32\imon.dll 2, 50, 41 NOD32 IMON - Internet scanning support WSOCK32.dll 71a70000 36864 C:\WINDOWS\System32\WSOCK32.dll 5.1.2600.0 (xpclient.010817-1148) 32-bitowa biblioteka Windows Socket NTMARTA.DLL 76cd0000 126976 C:\WINDOWS\System32\NTMARTA.DLL 5.1.2600.1106 (xpsp1.020828-1920) Windows NT - dostawca MARTA WLDAP32.dll 76f50000 184320 C:\WINDOWS\system32\WLDAP32.dll 5.1.2600.1106 (xpsp1.020828-1920) Win32 LDAP API DLL ole32.dll 771a0000 1183744 C:\WINDOWS\system32\ole32.dll 5.1.2600.1106 (xpsp1.020828-1920) Microsoft OLE for Windows SAMLIB.dll 71ba0000 69632 C:\WINDOWS\System32\SAMLIB.dll 5.1.2600.1106 (xpsp1.020828-1920) SAM Library DLL mswsock.dll 719f0000 245760 C:\WINDOWS\system32\mswsock.dll 5.1.2600.0 (xpclient.010817-1148) Microsoft Windows Sockets 2.0 Dostawca usługi wshtcpip.dll 71a30000 32768 C:\WINDOWS\System32\wshtcpip.dll 5.1.2600.0 (xpclient.010817-1148) Windows Sockets Helper DLL Module information for 'svchost.exe' MODULE BASE SIZE PATH svchost.exe 1000000 24576 C:\WINDOWS\System32\svchost.exe 5.1.2600.0 (xpclient.010817-1148) Generic Host Process for Win32 Services ntdll.dll 77f50000 692224 C:\WINDOWS\System32\ntdll.dll 5.1.2600.1106 (xpsp1.020828-1920) Biblioteka NT Layer DLL kernel32.dll 77e60000 970752 C:\WINDOWS\system32\kernel32.dll 5.1.2600.1106 (xpsp1.020828-1920) Biblioteka DLL klienta Windows NT BASE API ADVAPI32.dll 77dc0000 647168 C:\WINDOWS\system32\ADVAPI32.dll 5.1.2600.1106 (xpsp1.020828-1920) Advanced Windows 32 Base API RPCRT4.dll 78000000 548864 C:\WINDOWS\system32\RPCRT4.dll 5.1.2600.1106 (xpsp1.020828-1920) Remote Procedure Call Runtime ole32.dll 771a0000 1183744 C:\WINDOWS\system32\ole32.dll 5.1.2600.1106 (xpsp1.020828-1920) Microsoft OLE for Windows GDI32.dll 77c60000 262144 C:\WINDOWS\system32\GDI32.dll 5.1.2600.1106 (xpsp1.020828-1920) GDI Client DLL USER32.dll 77d30000 573440 C:\WINDOWS\system32\USER32.dll 5.1.2600.1106 (xpsp1.020828-1920) Biblioteka DLL klienta Windows XP USER API lmhsvc.dll 74bf0000 24576 c:\windows\system32\lmhsvc.dll 5.1.2600.0 (xpclient.010817-1148) TCPIP NetBios Transport Services DLL msvcrt.dll 77c00000 339968 C:\WINDOWS\system32\msvcrt.dll 7.0.2600.1106 (xpsp1.020828-1920) Windows NT CRT DLL iphlpapi.dll 76d50000 94208 c:\windows\system32\iphlpapi.dll 5.1.2600.2 (xpsp1.020828-1920) Interfejs API Pomocnika IP WS2_32.dll 71a50000 86016 c:\windows\system32\WS2_32.dll 5.1.2600.0 (xpclient.010817-1148) Windows Socket 2.0 32-Bit DLL WS2HELP.dll 71a40000 32768 c:\windows\system32\WS2HELP.dll 5.1.2600.0 (xpclient.010817-1148) Windows Socket 2.0 Helper dla Windows NT webclnt.dll 5ab30000 81920 c:\windows\system32\webclnt.dll 5.1.2600.1106 (xpsp1.020828-1920) Web DAV Service DLL WININET.dll 761d0000 626688 C:\WINDOWS\system32\WININET.dll 6.00.2800.1106 (xpsp1.020828-1920) Rozszerzenia internetowe Win32 SHLWAPI.dll 620000 409600 C:\WINDOWS\system32\SHLWAPI.dll 6.00.2800.1106 (xpsp1.020828-1920) Biblioteka dodatkowych narzędzi powłoki CRYPT32.dll 76290000 573440 C:\WINDOWS\system32\CRYPT32.dll 5.131.2600.1106 (xpsp1.020828-1920) Crypto API32 MSASN1.dll 76270000 61440 C:\WINDOWS\system32\MSASN1.dll 5.1.2600.0 (XPClient.010817-1148) ASN.1 Runtime APIs OLEAUT32.dll 77110000 569344 C:\WINDOWS\system32\OLEAUT32.dll 3.50.5016.0 Microsoft OLE 3.50 for Windows NT(TM) and Windows 95(TM) Operating Systems comctl32.dll 78090000 933888 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\comctl32.dll 6.0 (xpsp1.020828-1920) User Experience Controls Library shell32.dll 773c0000 8380416 C:\WINDOWS\system32\shell32.dll 6.00.2800.1106 (xpsp1.020828-1920) Wspólna biblioteka DLL Powłoki systemu Windows comctl32.dll 77330000 569344 C:\WINDOWS\system32\comctl32.dll 5.82 (xpsp1.020828-1920) Common Controls Library Secur32.dll 76f80000 65536 C:\WINDOWS\System32\Secur32.dll 5.1.2600.1106 (xpsp1.020828-1920) Security Support Provider Interface wsock32.dll 71a70000 36864 C:\WINDOWS\System32\wsock32.dll 5.1.2600.0 (xpclient.010817-1148) 32-bitowa biblioteka Windows Socket ssdpsrv.dll 74bc0000 57344 c:\windows\system32\ssdpsrv.dll 5.1.2600.1106 (xpsp1.020828-1920) SSDP Service DLL imon.dll 20b00000 282624 C:\WINDOWS\System32\imon.dll 2, 50, 41 NOD32 IMON - Internet scanning support NTMARTA.DLL 76cd0000 126976 C:\WINDOWS\System32\NTMARTA.DLL 5.1.2600.1106 (xpsp1.020828-1920) Windows NT - dostawca MARTA WLDAP32.dll 76f50000 184320 C:\WINDOWS\system32\WLDAP32.dll 5.1.2600.1106 (xpsp1.020828-1920) Win32 LDAP API DLL SAMLIB.dll 71ba0000 69632 C:\WINDOWS\System32\SAMLIB.dll 5.1.2600.1106 (xpsp1.020828-1920) SAM Library DLL mswsock.dll 719f0000 245760 C:\WINDOWS\system32\mswsock.dll 5.1.2600.0 (xpclient.010817-1148) Microsoft Windows Sockets 2.0 Dostawca usługi wshtcpip.dll 71a30000 32768 C:\WINDOWS\System32\wshtcpip.dll 5.1.2600.0 (xpclient.010817-1148) Windows Sockets Helper DLL uxtheme.dll 5b1d0000 212992 C:\WINDOWS\System32\uxtheme.dll 6.00.2800.1106 (xpsp1.020828-1920) Biblioteka Microsoft UxTheme Module information for 'svchost.exe' MODULE BASE SIZE PATH svchost.exe 1000000 24576 C:\WINDOWS\System32\svchost.exe 5.1.2600.0 (xpclient.010817-1148) Generic Host Process for Win32 Services ntdll.dll 77f50000 692224 C:\WINDOWS\System32\ntdll.dll 5.1.2600.1106 (xpsp1.020828-1920) Biblioteka NT Layer DLL kernel32.dll 77e60000 970752 C:\WINDOWS\system32\kernel32.dll 5.1.2600.1106 (xpsp1.020828-1920) Biblioteka DLL klienta Windows NT BASE API ADVAPI32.dll 77dc0000 647168 C:\WINDOWS\system32\ADVAPI32.dll 5.1.2600.1106 (xpsp1.020828-1920) Advanced Windows 32 Base API RPCRT4.dll 78000000 548864 C:\WINDOWS\system32\RPCRT4.dll 5.1.2600.1106 (xpsp1.020828-1920) Remote Procedure Call Runtime wiaservc.dll 739d0000 331776 c:\windows\system32\wiaservc.dll 5.1.2600.1106 (xpsp1.020828-1920) Usługa urządzeń do przetwarzania obrazów nieruchomych msvcrt.dll 77c00000 339968 C:\WINDOWS\system32\msvcrt.dll 7.0.2600.1106 (xpsp1.020828-1920) Windows NT CRT DLL USER32.dll 77d30000 573440 C:\WINDOWS\system32\USER32.dll 5.1.2600.1106 (xpsp1.020828-1920) Biblioteka DLL klienta Windows XP USER API GDI32.dll 77c60000 262144 C:\WINDOWS\system32\GDI32.dll 5.1.2600.1106 (xpsp1.020828-1920) GDI Client DLL OLEAUT32.dll 77110000 569344 C:\WINDOWS\system32\OLEAUT32.dll 3.50.5016.0 Microsoft OLE 3.50 for Windows NT(TM) and Windows 95(TM) Operating Systems OLE32.DLL 771a0000 1183744 C:\WINDOWS\system32\OLE32.DLL 5.1.2600.1106 (xpsp1.020828-1920) Microsoft OLE for Windows SHLWAPI.dll 2f0000 409600 C:\WINDOWS\system32\SHLWAPI.dll 6.00.2800.1106 (xpsp1.020828-1920) Biblioteka dodatkowych narzędzi powłoki CFGMGR32.dll 74a90000 28672 c:\windows\system32\CFGMGR32.dll 5.1.2600.0 (xpclient.010817-1148) Configuration Manager Forwarder DLL setupapi.dll 76650000 958464 C:\WINDOWS\System32\setupapi.dll 5.1.2600.1106 (xpsp1.020828-1920) Interfejs API Instalatora systemu Windows USERENV.dll 75a40000 679936 C:\WINDOWS\system32\USERENV.dll 5.1.2600.1106 (xpsp1.020828-1920) Userenv mscms.dll 73ac0000 77824 c:\windows\system32\mscms.dll 5.1.2600.1106 (xpsp1.020828-1920) Microsoft Color Matching System DLL WINSPOOL.DRV 72f90000 143360 c:\windows\system32\WINSPOOL.DRV 5.1.2600.1106 (xpsp1.020828-1920) Windows Spooler Driver WINSTA.dll 76330000 61440 c:\windows\system32\WINSTA.dll 5.1.2600.1106 (xpsp1.020828-1920) Winstation Library VERSION.dll 77bf0000 28672 C:\WINDOWS\system32\VERSION.dll 5.1.2600.0 (xpclient.010817-1148) Version Checking and File Installation Libraries CLBCATQ.DLL 76fc0000 491520 C:\WINDOWS\System32\CLBCATQ.DLL 2001.12.4414.42 COMRes.dll 77040000 839680 C:\WINDOWS\System32\COMRes.dll 2001.12.4414.42 actxprxy.dll 71cf0000 110592 C:\WINDOWS\System32\actxprxy.dll 6.00.2600.0000 (XPClient.010817-1148) ActiveX Interface Marshaling Library sti.dll 73b30000 77824 C:\WINDOWS\System32\sti.dll 5.1.2600.1106 (xpsp1.020828-1920) Biblioteka DLL klienta urządzeń do przetwarzania obrazów nieruchomych

**Posty:** 8694 · przez **Red** 20 Lut 2006, 15:34

tu jest ok,wykonaj jeszcze taką akcję:

Ctrl+Alt+ Delete w Menu>Widok>Wybierz kolumny i zaznacz PID (idenfikator procesu)
Nastepnie Start>Uruchom i wklej:
cmd /c tasklist /svc > Pulpit\tasklist.txt
Nastepnie klikasz ok ....

pojawi ci sie dokument tekstowy tasklist.txt otwórz ten dokument nastepnie skopiuj i wklej zawartość na forum....

**Posty:** 162 · przez **pieter777** 20 Lut 2006, 15:39

hm....zrobilem wszystko tak jak mowisz,na pulpicie utworzyl sie ten tasklist.txt ale w nim jest pusto

**Posty:** 8694 · przez **Red** 20 Lut 2006, 15:42

Wybierz kolumny i zaznacz PID

zrobiles to??

**Posty:** 162 · przez **pieter777** 20 Lut 2006, 15:46

tak, i pojawila mi sie w memadżerze kolumna PID i sa tam jakies cyferki pod nia

**Posty:** 8694 · przez **Red** 20 Lut 2006, 16:09

brm nie wiem dlaczego tak jest jak piszesz

zrobmy jeszcze jeden myk:

sciagnij
http://www.billsway.com/vbspage/vbsfiles/RegSrch.zip

i daj na szukanie frazy:
win32ssr.exe

**Posty:** 162 · przez **pieter777** 20 Lut 2006, 16:21

"no instances of win32ssr.ese found"

cos jeszcze? nadal te 100% ;/

prosze o sprawdzenie loga

prosze o sprawdzenie loga

Kto jest na forum