Bardzo slaby framerate w grach mmo

**Posty:** 68 · przez **Kajtek** 11 Kwi 2009, 19:35

witam, wczoraj wymienilem stacjonarny pc na lapka i mimo ze specyfikacja sprzetowal jest prawie identyczna strasznie laguje w grach mmo nie sa to zwykle lagi tylko wlasnie wyglada jakby biegalo w 10fpsach

probowalem juz wszystkiego zmiany ip servera przekierowanie portow updaty roznej masci reinstalki etc etc i kompletnie nic nie pomaga

lapek ma 2 rdzeniowy procesor intela 2x 1.8 3gb ddr2 i karte graficzna SiS 3 256mb chodzi pod vista home premium - dodam jeszcze ze mam w domu router choc nie wiem czy to ma cos wspolnego. juz nie wiem gdzie szukac problemu wiec pomyslalem aby sprawdzic logi byc moze tu lezy przyczyna, ponizej zamieszczam z hijackthis

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:26:44, on 2009-04-11 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18000) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Windows\system32\wbem\unsecapp.exe C:\Windows\explorer.exe C:\Users\Rafał\Downloads\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll O4 - HKLM\..\Run: [SiSTray] C:\Program Files\SiS VGA Utilities\SiSTray.exe O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html O13 - Gopher Prefix: O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe -- End of file - 3193 bytes

**Posty:** 18165 · przez **wojtas** 11 Kwi 2009, 19:52

Wykonaj to co jest podane w tym temacie

Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu C:\SDFix wrzuc zawartość pliku Report.txt + log z combofixa oraz daj loga z pijacka

**Posty:** 68 · przez **Kajtek** 12 Kwi 2009, 04:55

erm... sprzet chyba niezle zarazony jest... bo wwdc wyskakuje blad "Value in registry cant be open, system\currentcontrolset\services\netbd\parameters" pierwsza i czwarta opcja sa zielone piata zolta a druga i trzecia z czerwonym X i wlasnie przy probie ich zmiany wyskakuje powyzszy blad ;/ SDFix tez nie dziala, na niecala sekunde wyskakuje niebieskie okno i znika jedynie combofixa udalo sie uzyc ponizej zamieszczam log

Kod: Zaznacz wszystko: ComboFix 09-04-04.01 - Rafał 2009-04-12 4:42:35.2 - NTFSx86 Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1250.1.1045.18.2940.2298 [GMT 2:00] Uruchomiony z: c:\users\Rafał\Downloads\ComboFix.exe * Utworzono nowy punkt przywracania . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\programdata\Microsoft\Network\Downloader\qmgr0.dat c:\programdata\Microsoft\Network\Downloader\qmgr1.dat ----- BITS: Możliwe zainfekowane strony ----- hxxp://sunmicro.ht.rd.llnw.net . ((((((((((((((((((((((((( Pliki utworzone od 2009-03-12 do 2009-04-12 ))))))))))))))))))))))))))))))) . 2009-04-12 04:11 . 2008-11-06 02:03 <DIR> d-------- C:\SDFix 2009-04-11 13:16 . 2009-04-11 13:16 <DIR> d-------- c:\program files\CCleaner 2009-04-11 13:03 . 2008-06-26 06:25 337,920 --a------ c:\windows\System32\drivers\RTL8187B.sys 2009-04-11 06:27 . 2009-04-12 04:37 65,536 --------- c:\windows\System32\Ikeext.etl 2009-04-10 19:31 . 2009-02-08 20:15 258,352 --a------ c:\windows\System32\unicows.dll 2009-04-10 19:10 . 2009-04-10 19:11 <DIR> d-------- c:\program files\Gadu-Gadu 2009-04-07 16:39 . 2009-04-07 16:46 <DIR> d-------- C:\AGATA 2009-04-05 23:08 . 2009-04-05 23:17 139,264 --a------ c:\windows\War3Unin.exe 2009-04-05 23:08 . 2009-04-05 23:22 78,735 --a------ c:\windows\War3Unin.dat 2009-04-05 23:08 . 2009-04-05 23:17 2,829 --a------ c:\windows\War3Unin.pif . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-04-12 02:42 1,572,864 --sha-w c:\users\Rafał\NTUSER.DAT 2009-04-12 02:42 1,572,864 --sha-w c:\users\Rafał\NTUSER.DAT 2009-04-11 12:24 --------- d-----w c:\program files\PFConfig 2009-04-11 11:04 --------- d--h--w c:\program files\InstallShield Installation Information 2009-04-11 04:24 --------- d-s---w c:\users\Rafał\AppData\Roaming\Microsoft 2009-04-10 18:27 --------- d-----w c:\program files\PokerStars 2009-04-10 17:00 --------- d-----w c:\users\Rafał\AppData\Roaming\Nowe Gadu-Gadu 2009-04-06 12:51 66,872 ----a-w c:\windows\System32\PnkBstrA.exe 2009-04-06 12:51 22,328 ----a-w c:\windows\system32\drivers\PnkBstrK.sys 2009-04-06 12:51 22,328 ----a-w c:\users\Rafał\AppData\Roaming\PnkBstrK.sys 2009-04-06 12:51 2,246,144 ----a-w c:\windows\System32\pbsvc.exe 2009-04-06 12:51 107,832 ----a-w c:\windows\System32\PnkBstrB.exe 2009-03-29 20:54 --------- d-----w c:\users\Rafał\AppData\Roaming\BESTplayer 2009-03-25 11:06 --------- d-----w c:\program files\Java 2009-03-20 10:14 --------- d-----w c:\program files\Warcraft III 2009-03-13 23:00 --------- d-----w c:\program files\Opera 2009-03-04 16:06 --------- d-----w c:\programdata\id Software 2009-03-03 19:55 --------- d-----w c:\program files\Quake III Arena 2009-02-24 10:35 --------- d-----w c:\users\Rafał\AppData\Roaming\Adobe 2009-02-24 10:34 --------- d-----w c:\program files\Common Files\Adobe 2009-02-17 12:50 --------- d-----w c:\programdata\Tlen.pl 2008-12-19 21:28 7,408,784 ----a-w c:\users\Rafał\Opera_963_in_Setup.exe 2008-12-19 21:28 7,408,784 ----a-w c:\users\Rafał\Opera_963_in_Setup.exe 2008-01-21 02:43 174 --sha-w c:\program files\desktop.ini . ((((((((((((((((((((((((((((( snapshot@2008-11-07_ 1.12.42,51 ))))))))))))))))))))))))))))))))))))))))) . - 2008-11-06 13:55:43 53,248 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll + 2009-01-12 19:30:46 53,248 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll - 2008-11-06 13:55:43 12,800 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll + 2009-01-12 19:30:46 12,800 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll - 2008-11-06 13:55:43 473,600 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll + 2009-01-12 19:30:46 473,600 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll - 2008-11-06 13:55:41 2,676,224 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-01-12 19:30:41 2,676,224 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2008-11-06 13:55:42 2,846,720 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-01-12 19:30:43 2,846,720 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2008-11-06 13:55:42 563,712 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-01-12 19:30:44 563,712 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2008-11-06 13:55:42 567,296 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-01-12 19:30:44 567,296 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2008-11-06 13:55:42 576,000 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-01-12 19:30:44 576,000 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2008-11-06 13:55:42 577,024 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-01-12 19:30:44 577,024 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2008-11-06 13:55:42 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-01-12 19:30:44 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2008-11-06 13:55:42 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-01-12 19:30:45 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2008-11-06 13:55:42 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-01-12 19:30:45 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2008-11-06 13:55:43 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2009-01-12 19:30:46 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2008-11-06 13:55:43 145,920 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll + 2009-01-12 19:30:46 145,920 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll - 2008-11-06 13:55:43 159,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll + 2009-01-12 19:30:47 159,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll - 2008-11-06 13:55:43 364,544 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll + 2009-01-12 19:30:47 364,544 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll - 2008-11-06 13:55:43 178,176 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll + 2009-01-12 19:30:47 178,176 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll - 2008-11-06 13:55:43 223,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll + 2009-01-12 19:30:46 223,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll + 2008-10-04 19:16:46 1,887,080 ----a-w c:\windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe - 2005-10-20 19:02:28 163,328 ----a-w c:\windows\ERDNT\Hiv-backup\ERDNT.EXE + 2005-10-20 18:02:28 163,328 ----a-w c:\windows\ERDNT\Hiv-backup\ERDNT.EXE - 2008-11-06 09:13:21 51,200 ----a-w c:\windows\inf\infpub.dat + 2009-04-11 11:05:19 51,200 ----a-w c:\windows\inf\infpub.dat - 2008-11-06 09:13:14 86,016 ----a-w c:\windows\inf\infstor.dat + 2009-04-11 11:05:16 86,016 ----a-w c:\windows\inf\infstor.dat - 2008-11-06 09:13:20 86,016 ----a-w c:\windows\inf\infstrng.dat + 2009-04-11 11:05:18 86,016 ----a-w c:\windows\inf\infstrng.dat + 2007-12-12 14:06:42 295,606 ----a-r c:\windows\Installer\{AC76BA86-7AD7-1045-7B44-A90000000001}\SC_Reader.exe + 2009-01-12 19:53:43 4,369,408 ----a-r c:\windows\Installer\{E6D22FE1-AB5F-42CA-9480-6F70B96DDD88}\EAregister.exe + 2009-01-12 19:53:43 3,262 ----a-r c:\windows\Installer\{E6D22FE1-AB5F-42CA-9480-6F70B96DDD88}\nfs_icon.exe + 1999-10-09 16:30:50 305,152 ----a-w c:\windows\IsUninst.exe - 2000-08-31 07:00:00 28,672 ----a-w c:\windows\NIRCMD.exe + 2000-08-31 06:00:00 29,696 ----a-w c:\windows\NIRCMD.exe - 2008-11-06 20:17:20 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2009-04-12 02:36:56 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2008-11-06 20:17:20 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2009-04-12 02:36:56 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2008-11-06 10:29:01 262,144 ----a-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\usrclass.dat + 2009-04-09 20:21:15 262,144 ----a-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\usrclass.dat - 2008-11-06 20:18:39 262,144 --sha-w c:\windows\ServiceProfiles\LocalService\NTUSER.DAT + 2009-04-12 02:38:14 262,144 --sha-w c:\windows\ServiceProfiles\LocalService\NTUSER.DAT + 2009-04-12 02:38:14 262,144 ---ha-w c:\windows\ServiceProfiles\LocalService\ntuser.dat.LOG1 - 2008-11-06 10:29:39 262,144 ----a-w c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\usrclass.dat + 2009-04-09 20:21:15 262,144 ----a-w c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\usrclass.dat - 2008-11-06 09:06:10 2,633,508 -c--a-w c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing\tokens.dat + 2008-11-13 13:44:44 2,677,520 -c--a-w c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing\tokens.dat - 2008-11-06 20:18:44 262,144 --sha-w c:\windows\ServiceProfiles\NetworkService\NTUSER.DAT + 2009-04-12 02:44:49 262,144 --sha-w c:\windows\ServiceProfiles\NetworkService\NTUSER.DAT - 2000-08-31 07:00:00 161,792 ----a-w c:\windows\SWREG.exe + 2000-08-31 06:00:00 161,792 ----a-w c:\windows\SWREG.exe - 2008-11-06 13:31:37 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-04-11 11:16:08 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2008-11-06 13:31:37 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-04-11 11:16:08 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2008-11-06 13:31:37 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-04-11 11:16:08 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2008-11-07 00:08:47 262,144 ----a-w c:\windows\System32\config\systemprofile\ntuser.dat + 2009-04-12 02:42:20 262,144 ----a-w c:\windows\System32\config\systemprofile\ntuser.dat + 2009-04-12 02:42:20 262,144 ---ha-w c:\windows\System32\config\systemprofile\ntuser.dat.LOG1 + 2008-11-10 04:43:30 410,984 ----a-w c:\windows\System32\deploytk.dll + 2008-09-16 00:11:56 683,520 ----a-w c:\windows\System32\divx.dll + 2008-09-16 00:12:02 81,920 ----a-w c:\windows\System32\dpl100.dll + 2008-11-14 15:53:54 717,296 ----a-w c:\windows\System32\drivers\sptd.sys + 2008-06-26 04:25:58 337,920 ----a-w c:\windows\System32\DriverStore\FileRepository\net8187b.inf_698a671e\RTL8187B.sys + 2007-08-12 19:33:48 2,599,936 ----a-w c:\windows\System32\DriverStore\FileRepository\netw2.inf_6243d326\NETw2v32.sys + 2007-08-27 09:12:00 745,472 ----a-w c:\windows\System32\DriverStore\FileRepository\netw2.inf_6243d326\NETw4c32.dll + 2007-08-27 09:12:58 2,777,088 ----a-w c:\windows\System32\DriverStore\FileRepository\netw2.inf_6243d326\NETw4r32.dll + 2007-08-27 09:12:00 745,472 ----a-w c:\windows\System32\DriverStore\FileRepository\netw4v32.inf_28433588\NETw4c32.dll + 2007-08-27 09:12:58 2,777,088 ----a-w c:\windows\System32\DriverStore\FileRepository\netw4v32.inf_28433588\NETw4r32.dll + 2007-10-31 09:36:32 2,252,800 ----a-w c:\windows\System32\DriverStore\FileRepository\netw4v32.inf_28433588\NETw4v32.sys - 2006-01-17 19:50:28 61,952 ----a-w c:\windows\System32\execryptorvb.dll + 2006-01-17 19:50:29 61,952 ----a-w c:\windows\System32\execryptorvb.dll - 2008-06-12 19:36:38 7,680 ----a-w c:\windows\System32\ff_vfw.dll + 2008-06-12 18:36:38 7,680 ----a-w c:\windows\System32\ff_vfw.dll - 2008-11-06 13:17:57 229,752 ----a-w c:\windows\System32\FNTCACHE.DAT + 2009-04-12 02:33:47 229,008 ----a-w c:\windows\System32\FNTCACHE.DAT + 2008-07-04 09:23:36 1,757,184 ----a-w c:\windows\System32\imagX7.dll + 2008-07-04 09:23:38 497,296 ----a-w c:\windows\System32\imagXpr7.dll + 2008-07-04 09:23:42 258,048 ----a-w c:\windows\System32\imagXR7.dll + 2008-07-04 09:23:46 802,816 ----a-w c:\windows\System32\imagXRA7.dll + 2008-11-10 04:43:37 144,792 ----a-w c:\windows\System32\java.exe + 2008-11-10 04:43:38 144,792 ----a-w c:\windows\System32\javaw.exe + 2008-11-10 04:43:39 148,888 ----a-w c:\windows\System32\javaws.exe + 2008-10-05 03:16:26 235,936 ----a-r c:\windows\System32\Macromed\Flash\FlashUtil10a.exe + 2008-11-13 15:05:36 89,102 ----a-w c:\windows\System32\Macromed\Flash\uninstall_activeX.exe + 2003-03-18 20:20:00 1,060,864 ----a-w c:\windows\System32\MFC71.dll + 2003-04-18 15:46:22 1,233,920 ----a-w c:\windows\System32\msxml4.dll + 2003-04-18 15:29:26 82,432 ----a-w c:\windows\System32\msxml4r.dll + 2009-04-10 16:56:57 2,456 ----a-w c:\windows\System32\networklist\icons\{BA562950-5C9D-4380-8A67-1C5BA9C65D62}_24.bin + 2009-04-10 16:56:57 4,280 ----a-w c:\windows\System32\networklist\icons\{BA562950-5C9D-4380-8A67-1C5BA9C65D62}_32.bin + 2009-04-10 16:56:57 9,560 ----a-w c:\windows\System32\networklist\icons\{BA562950-5C9D-4380-8A67-1C5BA9C65D62}_48.bin - 2008-11-06 20:23:44 101,250 ----a-w c:\windows\System32\perfc009.dat + 2009-04-12 02:44:31 101,250 ----a-w c:\windows\System32\perfc009.dat - 2008-11-06 20:23:44 126,908 ----a-w c:\windows\System32\perfc015.dat + 2009-04-12 02:44:31 126,908 ----a-w c:\windows\System32\perfc015.dat - 2008-11-06 20:23:44 587,178 ----a-w c:\windows\System32\perfh009.dat + 2009-04-12 02:44:31 587,178 ----a-w c:\windows\System32\perfh009.dat - 2008-11-06 20:23:44 662,112 ----a-w c:\windows\System32\perfh015.dat + 2009-04-12 02:44:31 662,112 ----a-w c:\windows\System32\perfh015.dat + 2007-03-07 23:51:00 547,576 ------w c:\windows\System32\px.dll + 2007-03-07 23:51:00 129,784 ------w c:\windows\System32\pxafs.dll + 2007-03-07 23:51:00 64,760 ------w c:\windows\System32\pxcpya64.exe + 2007-03-07 23:51:00 510,712 ------w c:\windows\System32\pxdrv.dll + 2007-03-07 23:51:00 72,440 ------w c:\windows\System32\pxhpinst.exe + 2007-03-07 23:51:00 64,760 ------w c:\windows\System32\pxinsa64.exe + 2007-03-07 23:51:00 187,128 ------w c:\windows\System32\pxmas.dll + 2007-03-07 23:51:00 1,628,920 ------w c:\windows\System32\pxsfs.dll + 2007-03-07 23:51:00 379,640 ------w c:\windows\System32\pxwave.dll + 2008-09-16 00:14:24 3,596,288 ----a-w c:\windows\System32\qt-dx331.dll + 2006-11-02 15:10:16 80,912 ----a-w c:\windows\System32\sherlock2.exe - 2008-01-21 06:25:04 6,291,456 ----a-w c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT + 2009-01-18 23:13:27 6,291,456 ----a-w c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT + 2006-03-17 14:49:46 368,640 ----a-w c:\windows\System32\twnlib4.dll + 2003-01-26 23:48:58 147,456 ----a-w c:\windows\System32\vbzip11.dll + 2007-03-07 23:51:00 39,672 ------w c:\windows\System32\vxblock.dll - 2008-11-06 20:19:06 2,306 ----a-w c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3000515279-2910344208-3769843057-1000_UserData.bin + 2009-04-12 02:38:39 11,216 ----a-w c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3000515279-2910344208-3769843057-1000_UserData.bin - 2008-11-06 20:19:06 46,602 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin + 2009-04-12 02:38:39 78,548 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin + 2009-04-09 09:24:57 3,640 ----a-w c:\windows\System32\WDI\ERCQueuedResolutions.dat - 2008-11-06 20:19:05 15,996 ----a-w c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin + 2009-04-12 02:38:38 28,582 ----a-w c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin - 2008-11-06 20:14:44 65,242 ----a-w c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin + 2009-04-11 04:37:58 257,268 ----a-w c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin + 2009-04-06 11:13:39 147,714 ----a-w c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S4.bin - 2008-04-12 06:30:20 765,952 ----a-w c:\windows\System32\xvidcore.dll + 2008-01-10 12:15:30 755,027 ----a-w c:\windows\System32\xvidcore.dll - 2008-04-12 06:41:20 180,224 ----a-w c:\windows\System32\xvidvfw.dll + 2008-01-10 12:16:20 159,839 ----a-w c:\windows\System32\xvidvfw.dll + 2004-01-25 16:18:44 217,088 ----a-w c:\windows\System32\yv12vfw.dll + 2009-04-11 09:38:29 65,536 ----a-w c:\windows\tracing\IPSEC.BIN + 2009-04-11 09:38:30 65,536 ----a-w c:\windows\tracing\RASL2TP.BIN + 2009-04-11 09:38:29 65,536 ----a-w c:\windows\tracing\RASPPTP.BIN + 2009-04-11 09:38:30 196,608 ----a-w c:\windows\tracing\RASSSTP.BIN - 2008-11-06 09:03:16 800,206 ----a-w c:\windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin + 2009-01-18 12:39:10 828,481 ----a-w c:\windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin + 2009-01-18 12:39:06 1,233,920 ----a-w c:\windows\winsxs\x86_microsoft.msxml2_6bd6b9abf345378f_4.20.9818.0_none_b7e811947b297f6d\msxml4.dll + 2009-01-18 12:39:09 82,432 ----a-w c:\windows\winsxs\x86_microsoft.msxml2r_6bd6b9abf345378f_4.1.0.0_none_3658456fda6654f6\msxml4r.dll + 2009-01-18 12:38:18 96,256 ----a-w c:\windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.762_none_11ecb0ab9b2caf3c\ATL80.dll + 2009-01-18 12:38:23 479,232 ----a-w c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_none_10b2f55f9bffb8f8\msvcm80.dll + 2009-01-18 12:38:23 548,864 ----a-w c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_none_10b2f55f9bffb8f8\msvcp80.dll + 2009-01-18 12:38:23 626,688 ----a-w c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_none_10b2f55f9bffb8f8\msvcr80.dll + 2009-01-18 12:38:26 1,101,824 ----a-w c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\mfc80.dll + 2009-01-18 12:38:26 1,093,120 ----a-w c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\mfc80u.dll + 2009-01-18 12:38:26 69,632 ----a-w c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\mfcm80.dll + 2009-01-18 12:38:26 57,856 ----a-w c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\mfcm80u.dll + 2009-01-18 12:38:30 40,960 ----a-w c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131\mfc80CHS.dll + 2009-01-18 12:38:30 45,056 ----a-w c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131\mfc80CHT.dll + 2009-01-18 12:38:30 65,536 ----a-w c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131\mfc80DEU.dll + 2009-01-18 12:38:30 57,344 ----a-w c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131\mfc80ENU.dll + 2009-01-18 12:38:30 61,440 ----a-w c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131\mfc80ESP.dll + 2009-01-18 12:38:30 61,440 ----a-w c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131\mfc80FRA.dll + 2009-01-18 12:38:30 61,440 ----a-w c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131\mfc80ITA.dll + 2009-01-18 12:38:30 49,152 ----a-w c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131\mfc80JPN.dll + 2009-01-18 12:38:30 49,152 ----a-w c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131\mfc80KOR.dll + 2009-01-18 12:38:34 65,536 ----a-w c:\windows\winsxs\x86_microsoft.vc80.openmp_1fc8b3b9a1e18e3b_8.0.50727.762_none_7b33aa7d218504d2\vcomp.dll . -- Migawka wyzerowana -- . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{57BCA5FA-5DBB-45a2-B558-1755C3F6253B}"= "c:\program files\Winamp Toolbar\winamptb.dll" [2008-07-16 1266992] [HKEY_CLASSES_ROOT\clsid\{57bca5fa-5dbb-45a2-b558-1755c3f6253b}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLTBSearch.1] [HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLTBSearch] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240] "Gadu-Gadu"="c:\program files\Gadu-Gadu\gg.exe" [2008-03-20 2127296] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SiSTray"="c:\program files\SiS VGA Utilities\SiSTray.exe" [2007-12-07 552960] "WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-08-04 36352] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.divxa32"= divxa32.acm [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-3000515279-2910344208-3769843057-1000] "EnableNotificationsRef"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules] "TCP Query User{E83B9F38-79C7-4D04-B68C-74FAEB42CC30}d:\\gry\\warcraft iii\\war3.exe"= UDP:d:\gry\warcraft iii\war3.exe:Warcraft III "UDP Query User{13430E9C-6238-47D7-B220-8E1BAC075593}d:\\gry\\warcraft iii\\war3.exe"= TCP:d:\gry\warcraft iii\war3.exe:Warcraft III "{A6052BAC-72FA-48CA-B689-F433699AB8C5}"= UDP:c:\program files\Winamp Remote\bin\Orb.exe:Orb "{D57190FD-07C6-4D16-9FCD-871F034BD078}"= TCP:c:\program files\Winamp Remote\bin\Orb.exe:Orb "{1CAB72A3-34CC-47DA-A444-2374CA39AED7}"= UDP:c:\program files\Winamp Remote\bin\OrbTray.exe:OrbTray "{F67ADDB9-8967-42B5-A59E-2BBE31BA412B}"= TCP:c:\program files\Winamp Remote\bin\OrbTray.exe:OrbTray "{04A1786C-6F21-4F0D-8F04-C22FC401D49A}"= UDP:c:\program files\Winamp Remote\bin\OrbIR.exe:OrbIR "{BF53C1A0-6E05-42BA-915A-DF3990C916FE}"= TCP:c:\program files\Winamp Remote\bin\OrbIR.exe:OrbIR "{0C002F77-0F94-4541-997C-93D61543482A}"= UDP:c:\program files\Winamp Remote\bin\OrbStreamerClient.exe:Orb Stream Client "{4466D5E7-6376-4FA0-B986-79F51EDE281A}"= TCP:c:\program files\Winamp Remote\bin\OrbStreamerClient.exe:Orb Stream Client "{150CB1BE-7A74-414B-9C8F-8770D8D30616}"= UDP:c:\windows\System32\PnkBstrA.exe:PnkBstrA "{D1961246-BE15-466F-9B18-5053603C2DE5}"= TCP:c:\windows\System32\PnkBstrA.exe:PnkBstrA "{C89B584A-6713-41C9-B2AF-B8801653BE37}"= UDP:c:\windows\System32\PnkBstrB.exe:PnkBstrB "{FBA3A626-FF63-41D8-B4DE-BDD82F5FC960}"= TCP:c:\windows\System32\PnkBstrB.exe:PnkBstrB "{1661A8BC-32E6-4FBA-8442-9BDCAD28F9B0}"= UDP:d:\perfect world\element\elementclient.exe:elementclient "{4CC2C5C8-59DE-4932-AE06-34DEE2F5D341}"= TCP:d:\perfect world\element\elementclient.exe:elementclient "TCP Query User{1A566632-0170-49F8-96BB-B49AF2F1EF58}d:\\program files\\warcraft iii\\war3.exe"= UDP:d:\program files\warcraft iii\war3.exe:Warcraft III "UDP Query User{C991F673-A2DE-44F9-B62F-B4E638C562F3}d:\\program files\\warcraft iii\\war3.exe"= TCP:d:\program files\warcraft iii\war3.exe:Warcraft III "TCP Query User{9F9F724E-9356-42E1-BA84-B61188B2D5E8}c:\\program files\\dc++\\dcplusplus.exe"= UDP:c:\program files\dc++\dcplusplus.exe:DC++ "UDP Query User{2E29B71B-2805-4F04-9525-0E73286405E5}c:\\program files\\dc++\\dcplusplus.exe"= TCP:c:\program files\dc++\dcplusplus.exe:DC++ [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile] "EnableFirewall"= 0 (0x0) R3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\System32\drivers\RTL8187B.sys [2009-04-11 337920] R3 SiS6350;SiS6350;c:\windows\System32\drivers\SISGRKMD.sys [2008-11-06 453632] R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\System32\drivers\SiSGB6.sys [2008-11-06 47616] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2fe74cf5-ec62-11dd-80ee-001e682484ba}] \shell\AutoRun\command - F:\autorun.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e0551b19-0297-11de-b426-001e682484ba}] \shell\AutoRun\command - I:\ \shell\open\Command - rundll32.exe .\\sdhlinst.dll,InstallM [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ea7dcee6-21a9-11de-bedf-001e682484ba}] \shell\AutoRun\command - F:\ \shell\open\Command - rundll32.exe .\\quarez.dll,InstallM . . ------- Skan uzupełniający ------- . uStart Page = hxxp://www.daemon-search.com/startpage IE: &Winamp Search - c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html FF - ProfilePath - c:\users\Rafał\AppData\Roaming\Mozilla\Firefox\Profiles\wnabqyjj.default\ FF - prefs.js: browser.search.defaulturl - hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query= FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: keyword.URL - hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampab&query= FF - plugin: c:\program files\Opera\program\plugins\npganymedenet.dll FF - plugin: c:\programdata\id Software\QuakeLive\npquakezero.dll . ************************************************************************** catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-04-12 04:44:51 Windows 6.0.6001 Service Pack 1 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . Czas ukończenia: 2009-04-12 4:46:29 ComboFix-quarantined-files.txt 2009-04-12 02:46:27 ComboFix2.txt 2008-11-07 00:14:11 Przed: 11 971 239 936 bajtów wolnych Po: 11,745,763,328 bajtów wolnych 318

oraz hijackthis

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 04:53:52, on 2009-04-12 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18000) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\System32\mobsync.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Windows\system32\wbem\unsecapp.exe C:\Windows\Explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Users\Rafał\Downloads\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll O4 - HKLM\..\Run: [SiSTray] C:\Program Files\SiS VGA Utilities\SiSTray.exe O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html O13 - Gopher Prefix: O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe -- End of file - 2983 bytes

**Posty:** 18165 · przez **wojtas** 12 Kwi 2009, 10:16

wklej do notatnika

Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e0551b19-0297-11de-b426-001e682484ba}]

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ea7dcee6-21a9-11de-bedf-001e682484ba}]

w notatniku u góry>>>plik zapisz jako>>>Zmien rozszerzenie z TXT na Wszystkie pliki *.* >>> Zapisz pod nazwą FIX.REG

Klikasz dwa razy na powstały plik fix i dodajesz go do rejestru....

1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp

oraz skasuj folder C:\Qoobox
2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
5. Wykonaj skan Dr. Web CureIt
6. Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

i tym:

FixIEDef.

**Posty:** 68 · przez **Kajtek** 13 Kwi 2009, 09:22

zrobilem wszystko, kaspersky cala noc pracowal i dotarl tylko do 51% potem juz wylaczylem bo dysk D skanowalo a tam raczej nie ma wirrusow juz systemowy byl czysty fixiedef tez niczego nie znalazl jednak nadal jest slaby ramerate