Miałem virusa,usunełem ale nadal coś jest nie tak

**Posty:** 25 · przez **casin007** 27 Sie 2008, 20:04

witam, prosze o sprawdzenie loga, mialem virusa pozbylem się go ale nadal cos jest nie tak cghodzi o to ze komp chodzi poprawnie przez jakis czas potem np po 2h zacznie strasznie strasznie mulić(głównie internet) przez np 2min albo tak przez 1h moze mulic a potem znów normalnie

hijackthis

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:54:23, on 2008-08-27 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\System32\nvraidservice.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\System32\wbem\unsecapp.exe C:\Program Files\Executive Software\DiskeeperLite\DKService.exe C:\Program Files\Gadu-Gadu\gg.exe C:\WINDOWS\explorer.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O3 - Toolbar: Pasek &Crawler - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll O4 - HKLM\..\Run: [NVRaidService] C:\WINDOWS\System32\nvraidservice.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Crawler Search - tbr:iemenu O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1214583870484 O17 - HKLM\System\CCS\Services\Tcpip\..\{8A34DFE9-F749-4021-AB42-DFCF370F7BEE}: NameServer = 208.67.222.222,208.67.220.220 O17 - HKLM\System\CS1\Services\Tcpip\..\{8A34DFE9-F749-4021-AB42-DFCF370F7BEE}: NameServer = 208.67.222.222,208.67.220.220 O17 - HKLM\System\CS2\Services\Tcpip\..\{8A34DFE9-F749-4021-AB42-DFCF370F7BEE}: NameServer = 208.67.222.222,208.67.220.220 O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\DiskeeperLite\DKService.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe -- End of file - 5756 bytes

combo fix

Kod: Zaznacz wszystko: ComboFix 08-08-26.03 - Łukasz 2008-08-27 19:51:07.1 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.3.1250.1.1045.18.1050 [GMT 2:00] Running from: C:\Documents and Settings\Łukasz\Pulpit\ComboFix.exe * Created a new restore point [color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color] . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\Adrian\Cookies\adrian@nuggad[1].txt C:\Documents and Settings\Adrian\Cookies\adrian@nuggad[2].txt C:\Documents and Settings\Adrian\Cookies\adrian@tradedoubler[2].txt C:\Documents and Settings\All Users\Dane aplikacji\Secure Solutions C:\Documents and Settings\All Users\Dane aplikacji\Secure Solutions\Antispyware 2008 XP\as2008xp.exe C:\Documents and Settings\All Users\Dane aplikacji\Secure Solutions\Antispyware 2008 XP\LOG\20080818225600593.log C:\WINDOWS\etwb.exe . ((((((((((((((((((((((((( Files Created from 2008-07-27 to 2008-08-27 ))))))))))))))))))))))))))))))) . 2008-08-27 13:16 . 2008-08-27 13:16 <DIR> d-------- C:\Program Files\VentriloMIX 2008-08-27 12:51 . 2008-08-27 12:52 <DIR> d-------- C:\Program Files\Executive Software 2008-08-27 12:42 . 2008-08-27 12:42 <DIR> d-------- C:\Documents and Settings\Łukasz\Dane aplikacji\TuneUp Software 2008-08-27 12:42 . 2008-08-27 12:42 355,584 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe 2008-08-27 12:42 . 2008-05-29 09:28 28,416 --a------ C:\WINDOWS\system32\uxtuneup.dll 2008-08-27 12:41 . 2008-08-27 12:42 <DIR> d-------- C:\Program Files\TuneUp Utilities 2008 2008-08-27 12:41 . 2008-08-27 12:41 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software 2008-08-27 12:31 . 2008-08-27 12:40 <DIR> d-------- C:\Program Files\Tweak-XP Pro 4 2008-08-27 12:31 . 2008-08-27 12:31 737,280 --a------ C:\WINDOWS\iun6002.exe 2008-08-27 10:43 . 2008-08-27 12:15 <DIR> d-------- C:\Documents and Settings\Mama\Gadu-Gadu 2008-08-22 21:55 . 2008-08-22 21:55 58,368 --ah----- C:\WINDOWS\photothumb.db 2008-08-22 13:23 . 2008-08-27 13:45 162,008 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys 2008-08-22 13:23 . 2008-08-27 13:45 111,928 --a------ C:\WINDOWS\system32\PnkBstrB.exe 2008-08-22 13:23 . 2008-08-22 13:23 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe 2008-08-22 12:56 . 2008-08-22 12:56 <DIR> d-------- C:\directx 2008-08-22 12:46 . 2008-08-22 12:46 <DIR> d-------- C:\Documents and Settings\Łukasz\Dane aplikacji\InstallShield 2008-08-19 21:05 . 2008-08-19 21:05 <DIR> dr-h----- C:\Documents and Settings\Łukasz\Dane aplikacji\SecuROM 2008-08-19 19:37 . 2008-08-19 19:37 <DIR> d-------- C:\Program Files\TacView 2008-08-19 19:37 . 2002-08-09 13:00 4,082,688 --a------ C:\WINDOWS\system32\qtintf70.dll 2008-08-19 19:01 . 2008-08-19 19:01 271,360 --a------ C:\WINDOWS\system32\drivers\atksgt.sys 2008-08-19 19:01 . 2008-08-19 19:01 18,048 --a------ C:\WINDOWS\system32\drivers\lirsgt.sys 2008-08-19 18:58 . 2006-07-28 09:30 236,824 --a------ C:\WINDOWS\system32\xactengine2_3.dll 2008-08-19 18:58 . 2006-07-28 09:30 62,744 --a------ C:\WINDOWS\system32\xinput1_2.dll 2008-08-19 18:55 . 2005-05-26 15:34 2,297,552 --a------ C:\WINDOWS\system32\d3dx9_26.dll 2008-08-19 16:46 . 2008-08-19 16:46 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy 2008-08-19 16:46 . 2008-08-19 17:15 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy 2008-08-19 16:43 . 2008-08-19 16:43 <DIR> d-------- C:\Program Files\Lavasoft 2008-08-19 16:43 . 2008-08-27 12:41 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard 2008-08-19 16:43 . 2008-08-19 16:50 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Lavasoft 2008-08-19 15:29 . 2008-08-19 15:29 <DIR> d-------- C:\Program Files\Panda Security 2008-08-18 22:56 . 2008-08-18 23:01 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\services 2008-08-18 22:54 . 2008-08-18 12:33 86,016 --a------ C:\WINDOWS\tqwolser.exe 2008-08-18 22:49 . 2008-08-18 22:49 <DIR> d-------- C:\Documents and Settings\Łukasz\Dane aplikacji\Sports Interactive 2008-08-18 22:18 . 2008-08-18 22:20 <DIR> d--h----- C:\Program Files\Zero G Registry 2008-08-18 22:18 . 2008-08-18 22:18 <DIR> d--h----- C:\Documents and Settings\Łukasz\InstallAnywhere 2008-08-18 22:18 . 2008-08-18 22:18 <DIR> d--h----- C:\Documents and Settings\Łukasz\InstallAnywhere 2008-08-18 22:17 . 2008-08-18 22:17 <DIR> d-------- C:\Program Files\DAEMON Tools Lite 2008-08-18 22:13 . 2008-08-18 22:13 <DIR> d-------- C:\Documents and Settings\Łukasz\Dane aplikacji\DAEMON Tools 2008-08-18 22:13 . 2008-08-18 22:13 717,296 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2008-08-16 08:36 . 2008-04-14 19:20 221,184 --a------ C:\WINDOWS\system32\wmpns.dll 2008-08-15 09:10 . 2008-05-01 16:37 331,776 -----c--- C:\WINDOWS\system32\dllcache\msadce.dll 2008-08-15 09:09 . 2008-04-11 21:06 691,712 -----c--- C:\WINDOWS\system32\dllcache\inetcomm.dll 2008-08-08 12:53 . 2008-08-08 12:53 <DIR> d-------- C:\WINDOWS\Sun 2008-08-07 21:14 . 2008-08-07 21:14 <DIR> d-------- C:\Program Files\Sun 2008-08-07 21:14 . 2008-06-10 02:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl 2008-08-07 21:13 . 2008-08-07 21:14 <DIR> d-------- C:\Program Files\Java 2008-08-07 21:12 . 2008-08-07 21:12 <DIR> d-------- C:\Program Files\Common Files\Java 2008-08-06 18:38 . 2008-08-06 18:38 <DIR> d-------- C:\Program Files\MSECache 2008-08-06 00:52 . 2008-08-06 00:52 <DIR> d-------- C:\Documents and Settings\Łukasz\Dane aplikacji\GanymedeNet 2008-08-06 00:51 . 2008-08-06 00:51 <DIR> d-------- C:\Program Files\Ganymede 2008-08-05 18:41 . 2008-08-05 18:41 <DIR> d-------- C:\Documents and Settings\Adrian\Dane aplikacji\Media Player Classic 2008-08-03 21:46 . 2004-08-03 16:25 294,912 -ra------ C:\WINDOWS\system32\atiiiexx.dll 2008-08-03 21:46 . 2004-08-03 16:12 135,168 -ra------ C:\WINDOWS\system32\ATIDEMGR.dll 2008-07-30 18:39 . 2008-08-19 15:33 <DIR> d-------- C:\WINDOWS\BDOSCAN8 2008-07-29 17:02 . 2008-08-22 21:55 <DIR> d-------- C:\Program Files\Windows Media Connect 2 2008-07-29 16:51 . 2008-08-22 13:23 <DIR> d-------- C:\WINDOWS\system32\LogFiles 2008-07-29 16:51 . 2008-07-29 16:56 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF 2008-07-28 20:14 . 2008-07-28 20:14 <DIR> d-------- C:\Program Files\Common Files\Adobe AIR 2008-07-28 20:05 . 2008-07-28 20:08 <DIR> d-------- C:\Program Files\Common Files\Adobe 2008-07-28 00:21 . 2008-08-27 13:31 <DIR> d-------- C:\Documents and Settings\Łukasz\Dane aplikacji\Ventrilo . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-08-27 11:45 --------- d-----w C:\Program Files\Crawler 2008-08-22 19:55 --------- d-----w C:\Program Files\PhotoScape 2008-08-22 14:19 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\Spyware Terminator 2008-08-22 10:47 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-08-22 09:00 --------- d-----w C:\Documents and Settings\Adrian\Dane aplikacji\Spyware Terminator 2008-08-07 19:51 --------- d-----w C:\Program Files\MoorHunt 2008-08-03 15:34 --------- d-----w C:\Program Files\ATI Technologies 2008-07-23 20:04 --------- d-----w C:\Documents and Settings\Michał\Dane aplikacji\ATI 2008-07-19 13:16 --------- d-----w C:\Documents and Settings\Łukasz\Dane aplikacji\Media Player Classic 2008-07-19 13:08 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Trymedia 2008-07-19 11:49 --------- d-----w C:\Documents and Settings\Łukasz\Dane aplikacji\GetRightToGo 2008-07-18 12:24 --------- d-----w C:\Documents and Settings\Mama\Dane aplikacji\Winamp 2008-07-18 08:08 --------- d-----w C:\Program Files\FotkaPRO 2008-07-17 12:15 108,144 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2008-07-16 19:04 --------- d-----w C:\Program Files\Philips Flat Panel Adjust 2008-07-16 13:41 --------- d-----w C:\Program Files\Altiris 2008-07-12 16:19 --------- d-----w C:\Documents and Settings\Adrian\Dane aplikacji\DeepBurner 2008-07-11 21:48 --------- d-----w C:\Documents and Settings\Adrian\Dane aplikacji\DivX 2008-07-11 17:51 --------- d-----w C:\Program Files\K-Lite Codec Pack 2008-07-11 06:21 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Skype 2008-07-09 20:44 --------- d-----w C:\Documents and Settings\Adrian\Dane aplikacji\Winamp 2008-07-07 20:29 253,952 ----a-w C:\WINDOWS\system32\es.dll 2008-07-04 13:46 --------- d-----w C:\Documents and Settings\Łukasz\Dane aplikacji\Winamp 2008-07-02 18:12 --------- d-----w C:\Program Files\RegCleaner 2008-07-01 18:51 --------- d-----w C:\Documents and Settings\Łukasz\Dane aplikacji\DeepBurner 2008-07-01 18:47 --------- d-----w C:\Program Files\Astonsoft 2008-07-01 16:26 --------- d-----w C:\Program Files\HP 2008-07-01 15:57 --------- d-----w C:\Documents and Settings\Adrian\Dane aplikacji\ATI 2008-07-01 09:48 --------- d-----w C:\Documents and Settings\Łukasz\Dane aplikacji\ATI 2008-06-29 17:02 --------- d-----w C:\Program Files\Winamp 2008-06-29 14:05 --------- d-----w C:\Documents and Settings\Adrian\Dane aplikacji\skypePM 2008-06-29 13:22 56 ---ha-w C:\Documents and Settings\All Users\Dane aplikacji\ezsidmv.dat 2008-06-28 18:50 --------- d-----w C:\Program Files\NAPI-PROJEKT 2008-06-28 18:45 --------- d-----w C:\Program Files\MarBit 2008-06-28 10:24 --------- d-----w C:\Documents and Settings\Mama\Dane aplikacji\Spyware Terminator 2008-06-27 18:56 --------- d-----w C:\Program Files\MSXML 6.0 2008-06-27 18:56 --------- d-----w C:\Program Files\Gadu-Gadu 2008-06-27 18:27 --------- d-----w C:\Program Files\C-Media 3D Audio 2008-06-27 17:51 --------- d-----w C:\Program Files\Alwil Software 2008-06-27 16:20 --------- d-----w C:\Program Files\SAGEM 2008-06-27 16:03 --------- d-----w C:\Program Files\Common Files\InstallShield 2008-06-27 15:30 558,142 ----a-w C:\WINDOWS\java\Packages\NT7T793J.ZIP 2008-06-27 15:30 155,995 ----a-w C:\WINDOWS\java\Packages\BX3133VP.ZIP 2008-06-27 15:30 --------- d-----w C:\Program Files\microsoft frontpage 2008-06-27 15:27 --------- d-----w C:\Program Files\Usługi online 2008-06-24 16:46 74,240 ----a-w C:\WINDOWS\system32\mscms.dll 2008-06-23 15:13 668,672 ----a-w C:\WINDOWS\system32\wininet.dll 2008-06-20 17:48 246,784 ----a-w C:\WINDOWS\system32\mswsock.dll 2008-06-12 18:36 7,680 ----a-w C:\WINDOWS\system32\ff_vfw.dll 2008-06-03 02:33 48,128 ----a-w C:\WINDOWS\system32\amdpcom32.dll 2008-05-30 23:22 683,520 ----a-w C:\WINDOWS\system32\divx.dll 2004-09-28 01:00 26,240 ----a-w C:\WINDOWS\inf\RAMDSK.SYS 2001-11-23 11:08 712,704 ----a-r C:\WINDOWS\inf\OTHER\AUDIO3D.DLL . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 19:21 15360] "Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2005-03-31 11:18 790528] "DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-07-24 17:02 490952] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NVRaidService"="C:\WINDOWS\System32\nvraidservice.exe" [2004-06-11 12:15 83968] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 16:38 78008] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2008-04-14 19:21 15360] C:\Documents and Settings\Mama\Menu Start\Programy\Autostart\ prfBB.tmp [2008-06-28 12:05:20 0] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.YV12"= yv12vfw.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "C:\\Program Files\\Gadu-Gadu\\gg.exe"= "d:\\Football Manager 2008\\fm.exe"= R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 16:35] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 16:37] R2 UxTuneUp;TuneUp Theme Extension;C:\WINDOWS\System32\svchost.exe [2008-04-14 19:21] S3 AEXPAM;Philips SmartManage Service;C:\WINDOWS\system32\Drivers\aexpamdrv.sys [2005-12-20 10:57] S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-08-27 12:42] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp *Newly Created Service* - CATCHME *Newly Created Service* - DISKEEPER *Newly Created Service* - PROCEXP90 *Newly Created Service* - TUNEUP.DEFRAG . Contents of the 'Scheduled Tasks' folder 2008-08-27 C:\WINDOWS\Tasks\1-Click Maintenance.job - C:\Program Files\TuneUp Utilities 2008\OneClickStarter.exe [2008-06-20 09:09] . . ------- Supplementary Scan ------- . FireFox -: Profile - C:\Documents and Settings\Łukasz\Dane aplikacji\Mozilla\Firefox\Profiles\s6lm4wnt.default\ FF -: plugin - C:\Program Files\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nppl3260.dll FF -: plugin - C:\Program Files\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nprpjplug.dll FF -: plugin - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll FF -: plugin - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-08-27 19:52:43 Windows 5.1.2600 Dodatek Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- PROCESS: C:\WINDOWS\system32\winlogon.exe -> C:\WINDOWS\system32\Ati2evxx.dll . Completion time: 2008-08-27 19:53:29 ComboFix-quarantined-files.txt 2008-08-27 17:53:26 Pre-Run: 16,634,490,880 bajtów wolnych Post-Run: 17,876,815,872 bajtów wolnych 202 --- E O F --- 2008-08-16 12:00:29

optymilizacje systemu zrobilem moze troche lepiej jest jesli chodzi o system ale internet bez zmian
i jescze nie moge sciagnac silent runners- zapisuje sie jako plik txt nie wiem czemu zawsze sciagalem bez problemowo(antyviry powylaczalem)

**Posty:** 8001 · przez **Okocza** 27 Sie 2008, 20:17

casin007, wwstaw logi w odpowiednie tagi "code"

**Posty:** 25 · przez **casin007** 27 Sie 2008, 21:24

teraz bedzie dobrze?

**Posty:** 18165 · przez **wojtas** 28 Sie 2008, 09:50

1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp

2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem

i usun plik:

C:\WINDOWS\tqwolser.exe