Po formatowaniu komputer strasznie sie wiesza

**Posty:** 24 · przez **JaYo^** 08 Lis 2008, 14:54

Witam sformatowalem koma i strasznie mi sie on wiesza ;/ oto logi:

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:52:30, on 2008-11-08 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\Ati2evxx.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\svchost.exe C:\Program Files\Ad-Aware\aawservice.exe D:\WINDOWS\system32\spoolsv.exe D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\system32\wscntfy.exe D:\WINDOWS\system32\Ati2evxx.exe D:\WINDOWS\Explorer.EXE D:\Program Files\ATI Technologies\ATI.ACE\cli.exe D:\WINDOWS\SOUNDMAN.EXE D:\Program Files\Java\jre1.6.0_01\bin\jusched.exe D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe D:\WINDOWS\system32\rundll32.exe D:\WINDOWS\system32\ctfmon.exe D:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\Program Files\BlueSoleil\BlueSoleil.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Logitech\SetPoint\KEM.exe C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe C:\Program Files\Mozilla Firefox 3\firefox.exe C:\Program Files\AIMP2\AIMP2.exe C:\Program Files\Gadu-Gadu\gg.exe D:\Documents and Settings\Administrator\Moje dokumenty\FireFox\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O4 - HKLM\..\Run: [ATICCC] "D:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.plk O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" O4 - HKLM\..\Run: [AVP] "D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [04e37ae5] rundll32.exe "D:\WINDOWS\system32\kioxrgff.dll",b O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: ATI CATALYST – pasek zadań.lnk = D:\Program Files\ATI Technologies\ATI.ACE\CLI.exe O4 - Global Startup: BlueSoleil.lnk = C:\Program Files\BlueSoleil\BlueSoleil.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe O8 - Extra context menu item: &Stáhnout &vše FlashGetem - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: &Stáhnout FlashGetem - C:\Program Files\FlashGet\jc_link.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: Statystyki dla ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{84DF13BE-72C5-4F75-A312-7BB9643A17D9}: NameServer = 194.204.152.34,192.204.159.1 O20 - AppInit_DLLs: lnlhuq.dll O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Ad-Aware\aawservice.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exe O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Kaspersky Lab - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe O23 - Service: Pml Driver HPZ12 - HP - D:\WINDOWS\system32\HPZipm12.exe O23 - Service: ServiceLayer - Nokia. - D:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- End of file - 5110 bytes

**Posty:** 3475 · przez **Dementor** 08 Lis 2008, 14:57

Podaj dokładna konfiguracje komputera wraz z marką ui moca zasilacza.Czy wszystkie potrzebne steroniki zainstalowane??

**Posty:** 8001 · przez **Okocza** 08 Lis 2008, 14:57

Kod: Zaznacz wszystko: O4 - HKLM\..\Run: [ATICCC] "D:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.plk O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" O4 - HKLM\..\Run: [AVP] "D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [04e37ae5] rundll32.exe "D:\WINDOWS\system32\kioxrgff.dll",b O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: ATI CATALYST – pasek zadań.lnk = D:\Program Files\ATI Technologies\ATI.ACE\CLI.exe O4 - Global Startup: BlueSoleil.lnk = C:\Program Files\BlueSoleil\BlueSoleil.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe

nie dziw że się wiesza skoro tyle rzeczy w autostarcie.

jaki masz sprzęt? cały konfig razem z marką i mocą zasilacza podaj

**Posty:** 684 · przez **djarta** 08 Lis 2008, 15:08

1) Jest infekcja.
2) Wykonaj optymalizację autostartu
3) Daj log z ComboFixa.

===================
K.

**Posty:** 24 · przez **JaYo^** 08 Lis 2008, 15:26

To moj zasilacz:

Revoltec Star Chromus II RPS-400V2

A to konfiguracja:

Mainboard : DFI Corp,LTD LP NF4 Series
Chipset : nVidia nForce4
Processor : AMD Athlon 64 3000+ @ 1800 MHz
Physical Memory : 1024 MB (2 x 512 DDR-SDRAM )
Video Card : RADEON X800 GTO
Hard Disk : SAMSUNG (200 GB)
DVD-Rom Drive : BENQ DVD DD DW1640
DVD-Rom Drive : PIONEER DVD-ROM DVD-105
Monitor Type : Samsung SyncMaster - 19 inches
Network Card : Marvell Semiconductor (Was: Galileo Technology Ltd) Yukon 88E8001/8003/8010 PCI Gigabit Ethernet Controller (Copper)
Operating System : Microsoft Windows XP Professional 5.01.2600 Dodatek Service Pack 2
DirectX : Version 9.0c (lipiec 2007)

**Posty:** 7956 · przez **Magik** 08 Lis 2008, 15:29

gdzie log z combofixa??
gdzie screen z autostartu??

ten zasilacz ma slabiutkie chlodzenie//wklej temp i napiecia z evereta

**Posty:** 24 · przez **JaYo^** 08 Lis 2008, 16:05

Już daje . . .

Kod: Zaznacz wszystko: ComboFix 08-11-07.01 - Administrator 2008-11-08 14:44:22.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.427 [GMT 1:00] Uruchomiony z: d:\documents and settings\Administrator\Moje dokumenty\FireFox\ComboFix.exe * Utworzono nowy punkt przywracania . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . D:\resycled d:\resycled\boot.com d:\windows\system32\ahuttv.dll d:\windows\system32\ffgrxoik.ini d:\windows\system32\gfcwdfld.ini d:\windows\system32\gstfnv.dll d:\windows\system32\hpaaubhs.dll d:\windows\system32\kioxrgff.dll d:\windows\system32\kkfhgmph.dll d:\windows\system32\lnlhuq.dll d:\windows\system32\pmnOhIBs.dll d:\windows\system32\sBIhOnmp.ini d:\windows\system32\sBIhOnmp.ini2 d:\windows\system32\ulqmecxt.ini d:\windows\system32\vwbypbgg.ini d:\windows\system32\wrbhntcu.dll . ((((((((((((((((((((((((( Pliki utworzone od 2008-10-08 do 2008-11-08 ))))))))))))))))))))))))))))))) . 2008-11-08 14:07 . 2007-09-15 16:11 27,136 --a------ d:\windows\system32\PCWizard.cpl 2008-11-07 13:33 . 2004-08-04 00:44 91,136 --a------ d:\windows\system32\kswdmcap.ax 2008-11-07 13:33 . 2004-08-04 00:44 91,136 --a--c--- d:\windows\system32\dllcache\kswdmcap.ax 2008-11-07 13:33 . 2004-08-04 00:44 61,952 --a------ d:\windows\system32\kstvtune.ax 2008-11-07 13:33 . 2004-08-04 00:44 61,952 --a--c--- d:\windows\system32\dllcache\kstvtune.ax 2008-11-07 13:33 . 2004-08-04 00:44 54,784 --a------ d:\windows\system32\vfwwdm32.dll 2008-11-07 13:33 . 2004-08-04 00:44 54,784 --a--c--- d:\windows\system32\dllcache\vfwwdm32.dll 2008-11-07 13:33 . 2004-08-04 00:44 43,008 --a------ d:\windows\system32\ksxbar.ax 2008-11-07 13:33 . 2004-08-04 00:44 43,008 --a--c--- d:\windows\system32\dllcache\ksxbar.ax 2008-11-07 13:33 . 2004-08-04 00:44 28,672 --a------ d:\windows\system32\vidcap.ax 2008-11-07 13:33 . 2004-08-04 00:44 28,672 --a--c--- d:\windows\system32\dllcache\vidcap.ax 2008-11-07 13:33 . 2008-11-07 13:33 13,824 --a------ d:\windows\system32\drivers\splitcam.sys 2008-11-07 13:25 . 2008-11-07 13:25 62 --a------ d:\windows\wininit.ini 2008-11-07 13:22 . 2008-11-07 13:22 <DIR> d-------- d:\program files\SplitCam 2008-11-07 13:22 . 2003-05-14 21:07 389,120 --a------ d:\windows\system32\actskn43.ocx 2008-11-07 13:19 . 2007-09-20 13:04 114,688 --a------ d:\windows\system32\BTCamVideoSource.dll 2008-11-07 13:16 . 2008-11-07 13:16 <DIR> d-------- d:\documents and settings\Administrator\Dane aplikacji\Thinstall 2008-11-07 09:00 . 2008-11-07 09:00 <DIR> d--hs---- d:\windows\ftpcache 2008-11-07 09:00 . 2008-11-07 09:00 <DIR> d-------- d:\documents and settings\Administrator\Dane aplikacji\Logitech 2008-11-06 21:32 . 2004-04-26 07:09 71,405 --a------ d:\windows\system32\drivers\LMouKE.Sys 2008-11-06 21:32 . 2004-04-26 07:09 54,657 --------- d:\windows\system32\drivers\L8042MOU.SYS 2008-11-06 21:32 . 2004-04-26 07:10 38,081 --a------ d:\windows\system32\drivers\LHidUsbK.sys 2008-11-06 21:31 . 2008-11-06 21:31 <DIR> d-------- d:\program files\Common Files\Logitech 2008-11-06 21:31 . 2004-04-26 07:06 29,696 --a------ d:\windows\KHALMNPR.Exe 2008-11-06 21:31 . 2004-04-26 07:09 24,605 --a------ d:\windows\system32\drivers\LHidKE.Sys 2008-11-06 16:17 . 2008-11-08 14:48 103,936 --a------ d:\windows\system32\fjynqglr.dll 2008-11-06 14:17 . 2008-11-06 14:17 <DIR> d-------- d:\documents and settings\Administrator\Dane aplikacji\InstallShield 2008-11-05 18:13 . 2007-07-19 18:14 3,727,720 --a------ d:\windows\system32\d3dx9_35.dll 2008-11-05 18:13 . 2007-05-16 16:45 3,497,832 --a------ d:\windows\system32\d3dx9_34.dll 2008-11-05 18:13 . 2007-07-19 18:14 1,358,192 --a------ d:\windows\system32\D3DCompiler_35.dll 2008-11-05 18:13 . 2007-05-16 16:45 1,124,720 --a------ d:\windows\system32\D3DCompiler_34.dll 2008-11-05 18:13 . 2007-07-19 18:14 444,776 --a------ d:\windows\system32\d3dx10_35.dll 2008-11-05 18:13 . 2007-05-16 16:45 443,752 --a------ d:\windows\system32\d3dx10_34.dll 2008-11-05 18:13 . 2007-07-20 00:57 267,112 --a------ d:\windows\system32\xactengine2_9.dll 2008-11-05 18:13 . 2007-06-20 20:46 266,088 --a------ d:\windows\system32\xactengine2_8.dll 2008-11-05 18:13 . 2007-04-04 18:55 261,480 --a------ d:\windows\system32\xactengine2_7.dll 2008-11-05 18:13 . 2007-04-04 18:53 81,768 --a------ d:\windows\system32\xinput1_3.dll 2008-11-05 18:13 . 2007-07-20 00:54 18,280 --a------ d:\windows\system32\x3daudio1_2.dll 2008-11-05 18:13 . 2008-11-05 18:13 4,096 --a------ d:\windows\d3dx.dat 2008-11-05 00:27 . 2007-03-07 00:45 3,086,336 --a------ d:\windows\system32\NCMedia.dll 2008-11-05 00:27 . 2007-03-07 00:45 3,086,336 --a------ d:\windows\system32\flvvideo.dll 2008-11-05 00:27 . 2007-02-25 15:36 383,238 --a------ d:\windows\system32\libmp3lame-0.dll 2008-11-05 00:24 . 2008-11-05 00:24 <DIR> d-------- d:\documents and settings\Administrator\Dane aplikacji\DivX 2008-11-05 00:06 . 2008-11-05 00:07 <DIR> d-------- d:\documents and settings\Administrator\Phone Browser 2008-11-04 23:58 . 2008-11-04 23:59 <DIR> d-------- d:\documents and settings\All Users\Dane aplikacji\Bluetooth 2008-11-04 23:36 . 2008-11-07 15:40 69 --a------ d:\windows\NeroDigital.ini 2008-11-04 22:34 . 2008-11-04 23:01 32 --a------ d:\windows\[u]0[/u] 2008-11-04 22:34 . 2008-11-04 22:34 0 --a------ d:\windows\system32\[u]0[/u] 2008-11-04 16:36 . 2008-11-04 20:13 <DIR> d-------- d:\documents and settings\Administrator\dwhelper 2008-11-04 15:52 . 2008-11-04 16:07 96,976 --a------ d:\windows\system32\drivers\klin.dat 2008-11-04 15:52 . 2008-11-04 16:07 87,855 --a------ d:\windows\system32\drivers\klick.dat 2008-11-04 15:51 . 2008-11-04 15:51 <DIR> d-------- d:\program files\Kaspersky Lab 2008-11-04 15:51 . 2008-11-08 11:04 <DIR> d-------- d:\documents and settings\All Users\Dane aplikacji\Kaspersky Lab 2008-11-04 15:51 . 2008-11-08 14:55 4,551,712 --ahs---- d:\windows\system32\drivers\fidbox.dat 2008-11-04 15:51 . 2008-11-08 14:52 75,224 --ahs---- d:\windows\system32\drivers\fidbox.idx 2008-11-04 15:51 . 2008-11-08 14:55 49,952 --ahs---- d:\windows\system32\drivers\fidbox2.dat 2008-11-04 15:51 . 2008-11-08 14:52 8,720 --ahs---- d:\windows\system32\drivers\fidbox2.idx 2008-11-04 15:33 . 2008-11-04 15:33 120 ---hs---- d:\windows\system32\bhubkjop.ini 2008-11-04 00:14 . 2008-11-04 00:14 <DIR> d-------- d:\documents and settings\Administrator\Dane aplikacji\Gadu-Gadu 2008-11-03 23:25 . 2008-11-03 23:25 <DIR> d-------- d:\windows\Sun 2008-11-03 23:25 . 2008-11-04 19:52 <DIR> d-------- d:\documents and settings\Administrator\Gadu-Gadu 2008-11-03 23:14 . 2008-11-03 23:14 0 --a------ d:\windows\nsreg.dat 2008-11-03 22:54 . 2004-08-03 23:44 221,184 --a------ d:\windows\system32\wmpns.dll 2008-11-03 22:50 . 2008-11-03 22:51 <DIR> d-------- d:\program files\Windows Media Connect 2 2008-11-03 22:48 . 2007-03-14 02:04 69,632 --a------ d:\windows\system32\javacpl.cpl 2008-11-03 22:36 . 2008-11-03 22:43 <DIR> d-------- d:\program files\Java 2008-11-03 22:36 . 2008-11-03 22:36 <DIR> d-------- d:\program files\Common Files\Java 2008-11-03 22:34 . 2008-11-03 22:34 <DIR> d-------- d:\windows\system32\LogFiles 2008-11-03 22:34 . 2008-11-05 00:04 <DIR> d-------- d:\windows\system32\drivers\UMDF 2008-11-03 22:34 . 2008-11-05 00:03 <DIR> d-------- d:\documents and settings\All Users\Dane aplikacji\PC Suite 2008-11-03 22:34 . 2008-11-03 22:34 <DIR> d-------- d:\documents and settings\Administrator\Dane aplikacji\Nokia 2008-11-03 22:30 . 2006-09-16 03:02 23,856 --a------ d:\windows\system32\spupdsvc.exe 2008-11-03 22:27 . 2008-11-03 22:27 <DIR> d-------- d:\program files\Common Files\PCSuite 2008-11-03 22:27 . 2008-11-03 22:28 <DIR> d-------- d:\program files\Common Files\Nokia 2008-11-03 22:22 . 2008-11-03 22:22 <DIR> d----c--- d:\windows\system32\DRVSTORE 2008-11-03 22:22 . 2008-11-03 22:22 <DIR> d-------- d:\program files\PC Connectivity Solution 2008-11-03 22:22 . 2008-11-03 22:22 <DIR> d-------- d:\program files\DIFX 2008-11-03 22:22 . 2008-11-03 22:22 <DIR> d-------- d:\documents and settings\Administrator\Dane aplikacji\PC Suite 2008-11-03 22:22 . 2007-02-22 11:15 90,624 --a------ d:\windows\system32\nmwcdcls.dll 2008-11-03 22:21 . 2008-11-03 22:21 <DIR> d-------- d:\documents and settings\All Users\Dane aplikacji\Installations 2008-11-03 22:20 . 2008-11-03 22:20 <DIR> d-------- d:\program files\Common Files\Nero 2008-11-03 22:20 . 2008-11-03 22:20 <DIR> d-------- d:\documents and settings\All Users\Dane aplikacji\Nero 2008-11-03 22:20 . 2006-03-17 12:45 1,757,184 --a------ d:\windows\system32\imagX7.dll 2008-11-03 22:20 . 2006-03-17 12:45 802,816 --a------ d:\windows\system32\imagXRA7.dll 2008-11-03 22:20 . 2006-03-17 12:45 497,296 --a------ d:\windows\system32\imagXpr7.dll 2008-11-03 22:20 . 2006-03-17 15:49 368,640 --a------ d:\windows\system32\TwnLib4.dll 2008-11-03 22:20 . 2006-03-17 12:45 258,048 --a------ d:\windows\system32\imagXR7.dll 2008-11-03 22:16 . 2004-08-03 22:14 359,040 --a------ d:\windows\system32\drivers\tcpip.sys.flg 2008-11-03 22:12 . 2008-11-03 22:12 <DIR> d-------- d:\documents and settings\All Users\Dane aplikacji\Hagel Technologies 2008-11-03 22:07 . 2008-11-07 12:50 <DIR> d-------- d:\documents and settings\All Users\Dane aplikacji\Lavasoft 2008-11-03 22:06 . 2008-11-03 22:06 <DIR> d-------- d:\program files\Common Files\Wise Installation Wizard . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-11-07 12:22 --------- d--h--w d:\program files\InstallShield Installation Information 2008-11-06 20:31 --------- d-----w d:\program files\Common Files\InstallShield 2008-11-04 15:07 112,144 ----a-w d:\windows\system32\drivers\kl1.sys 2008-11-04 14:55 --------- d-----w d:\documents and settings\Administrator\Dane aplikacji\HP 2008-11-03 20:55 --------- d-----w d:\documents and settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files 2008-11-03 20:53 --------- d-----w d:\documents and settings\All Users\Dane aplikacji\HP 2008-11-03 20:52 --------- d-----w d:\program files\Common Files\Sonic Shared 2008-11-03 20:52 --------- d-----w d:\program files\Common Files\HP 2008-11-03 20:52 --------- d-----w d:\documents and settings\All Users\Dane aplikacji\Sonic 2008-11-03 20:50 --------- d-----w d:\program files\Hewlett-Packard 2008-11-03 20:49 --------- d-----w d:\program files\Common Files\Hewlett-Packard 2008-11-03 20:46 --------- d-----w d:\program files\HP 2008-11-03 20:42 --------- d-----w d:\program files\Marvell 2008-11-03 20:38 --------- d-----w d:\program files\Realtek Sound Manager 2008-11-03 20:38 --------- d-----w d:\program files\AvRack 2008-11-03 20:29 --------- d-----w d:\documents and settings\Administrator\Dane aplikacji\ATI 2008-11-03 20:26 --------- d-----w d:\program files\ATI Technologies 2008-11-03 20:04 --------- d-----w d:\program files\microsoft frontpage 2008-11-03 20:03 --------- d-----w d:\program files\Usługi online . ------- Sigcheck ------- 2004-08-03 22:14 359040 9f4b36614a0fc234525ba224957de55c d:\windows\system32\dllcache\tcpip.sys 2004-08-03 22:14 359040 6a603809f598332dbedd535bdbce313e d:\windows\system32\drivers\tcpip.sys . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="d:\windows\system32\ctfmon.exe" [2004-08-03 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ATICCC"="d:\program files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-06 61440] "SunJavaUpdateSched"="d:\program files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 83608] "MSConfig"="d:\windows\PCHealth\HelpCtr\Binaries\MSConfig.exe" [2004-08-03 159744] "AVP"="d:\program files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" [2007-12-18 227856] "SoundMan"="SOUNDMAN.EXE" [2005-01-12 d:\windows\SOUNDMAN.EXE] "Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2004-04-26 d:\windows\KHALMNPR.Exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="d:\windows\system32\CTFMON.EXE" [2004-08-03 15360] "Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 1241088] d:\documents and settings\All Users\Menu Start\Programy\Autostart\ ATI CATALYST - pasek zadaä.lnk - d:\program files\ATI Technologies\ATI.ACE\CLI.exe [2005-08-06 61440] BlueSoleil.lnk - c:\program files\BlueSoleil\BlueSoleil.exe [2007-06-06 657168] Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\KEM.exe [2008-11-06 573440] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=lnlhuq.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.l3acm"= l3codecp.acm [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Start^Programy^Autostart^HP Image Zone - szybkie uruchamianie.lnk] path=d:\documents and settings\All Users\Menu Start\Programy\Autostart\HP Image Zone - szybkie uruchamianie.lnk backup=d:\windows\pss\HP Image Zone - szybkie uruchamianie.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DU Meter] --a------ 2004-09-19 12:24 1469952 c:\program files\DU Meter\DUMeter.plk [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Flashget] --a------ 2007-05-16 14:02 1974345 c:\program files\FlashGet\flashget.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadu-Gadu] --a------ 2008-03-20 11:04 2127296 c:\program files\Gadu-Gadu\gg.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] --a------ 2005-05-11 23:12 49152 c:\program files\HP\HP Software Update\hpwuSchd2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odkurzacz-MCD] --a------ 2007-05-03 10:02 264704 c:\program files\Odkurzacz\odk_mcd.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication] --a------ 2007-06-18 15:10 271360 c:\program files\Nokia\Nokia PC Suite 6\LaunchApplication.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"= "c:\\Program Files\\FlashGet\\flashget.exe"= "d:\\Documents and Settings\\All Users\\Dane aplikacji\\Kaspersky Lab Setup Files\\Kaspersky Anti-Virus 7.0.1.321\\Polish\\setup.exe"= "c:\\Program Files\\Gadu-Gadu\\gg.exe"= "c:\\Program Files\\BlueSoleil\\BlueSoleil.exe"= "c:\\Program Files\\Mobiola Web Camera for S60\\webcam.exe"= "f:\\Download\\Programy\\Drobne\\Skype\\Skype 3.6.0.248 PL.exe"= R3 klim5;Kaspersky Anti-Virus NDIS Filter;d:\windows\system32\DRIVERS\klim5.sys [2007-12-13 24592] . - - - - USUNIĘTO PUSTE WPISY - - - - BHO-{bc4f2678-3385-455d-abb4-086939747e52} - d:\windows\system32\lnlhuq.dll BHO-{FB1553AD-FA92-496C-9124-1191E1E9D881} - d:\windows\system32\pmnOhIBs.dll Notify-mlJYrPif - (no file) MSConfigStartUp-04e37ae5 - d:\windows\system32\kioxrgff.dll . ------- Skan uzupełniający ------- . FireFox -: Profile - d:\documents and settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\41dzb1up.default\ FireFox -: prefs.js - STARTUP.HOMEPAGE - www.google.pl FF -: plugin - c:\program files\Mozilla Firefox 3\plugins\npnul32.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-11-08 14:54:30 Windows 5.1.2600 Dodatek Service Pack 2 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- PROCES: d:\windows\explorer.exe -> c:\program files\Logitech\SetPoint\lgscroll.dll . ------------------------ Pozostałe uruchomione procesy ------------------------ . d:\windows\system32\ati2evxx.exe c:\program files\Ad-Aware\aawservice.exe d:\windows\system32\HPZipm12.exe d:\windows\system32\ati2evxx.exe c:\program files\Logitech\SetPoint\KHALMNPR.exe . ************************************************************************** . Czas ukończenia: 2008-11-08 14:57:40 - komputer został uruchomiony ponownie ComboFix-quarantined-files.txt 2008-11-08 13:57:28 Przed: 17 632 174 080 bajtów wolnych Po: 17,668,177,920 bajtów wolnych WindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect 259

Oto Ci chodziło? :

Kod: Zaznacz wszystko: Hardware Monitoring : ITE IT8712F Voltage CPU : 1.33 V DIMM : 1.17 V +3.3V Voltage : 3.31 V +5V Voltage : 5.03 V +12V Voltage : 12.03 V Chassis Fan : 3668 rpm Power/Aux Fan : 4326 rpm Processor Temperature : 42 °C Mainboard Temperature : 35 °C Power/Aux Temperature : 49 °C ACPI Thermal Zone : 40 °C : Processor : Thermal Diode AMD Athlon 64 (Diode) : 26 °C : Hard Disk Monitoring : S.M.A.R.T Hard Disk SAMSUNG SP2004C : 36 °C : nVidia Monitoring : NVSU Interface Processor Temperature : 35 °C Mainboard Temperature : 42 °C Chassis Fan : 3668 rpm

**Posty:** 7956 · przez **Magik** 08 Lis 2008, 16:13

odhacz jusched

do tego podlacz inny zasilacz, bo ten ma naprawde kiepskie chlodzenie i jak sie angrzeje moze zawieszac kompa

**Posty:** 684 · przez **djarta** 08 Lis 2008, 16:19

Ja się zajmę infekcją, a inni Twoim Autostartem i "Zasilaczem".

Wklej do Notatnika:

Kod: Zaznacz wszystko: File:: d:\windows\system32\fjynqglr.dll d:\windows\0 d:\windows\system32\0 d:\windows\system32\bhubkjop.ini Folder:: c:\resycled Registry:: [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=- "AppInit_DLLs"=""

>>Plik>>Zapisz jako... >>> CFScript
Przeciągnij i upuść plik CFScript.txt na plik ComboFix.exe
-->

Ma się rozpocząć usuwanie. (i powstanie log).Daj ten log, który powstanie w trakcie usuwania.
Jeśli pójdzie dobrze, to: Po restarcie usuń ręcznie folder C:\Qoobox.

=============
K.

**Posty:** 24 · przez **JaYo^** 08 Lis 2008, 16:39

Kod: Zaznacz wszystko: ComboFix 08-11-07.01 - Administrator 2008-11-08 15:28:05.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.473 [GMT 1:00] Uruchomiony z: d:\documents and settings\Administrator\Moje dokumenty\FireFox\ComboFix.exe Użyto następujących komend :: d:\documents and settings\Administrator\Moje dokumenty\FireFox\cfscript.txt * Utworzono nowy punkt przywracania FILE :: d:\windows\[u]0[/u] d:\windows\system32\[u]0[/u] d:\windows\system32\bhubkjop.ini d:\windows\system32\fjynqglr.dll . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\resycled c:\resycled\boot.com d:\windows\[u]0[/u] d:\windows\system32\[u]0[/u] d:\windows\system32\bhubkjop.ini d:\windows\system32\fjynqglr.dll . ((((((((((((((((((((((((( Pliki utworzone od 2008-10-08 do 2008-11-08 ))))))))))))))))))))))))))))))) . 2008-11-08 14:56 . <DIR> d:\windows\LastGood.Tmp 2008-11-08 14:07 . 2007-09-15 16:11 27,136 --a------ d:\windows\system32\PCWizard.cpl 2008-11-07 13:33 . 2004-08-04 00:44 91,136 --a------ d:\windows\system32\kswdmcap.ax 2008-11-07 13:33 . 2004-08-04 00:44 91,136 --a--c--- d:\windows\system32\dllcache\kswdmcap.ax 2008-11-07 13:33 . 2004-08-04 00:44 61,952 --a------ d:\windows\system32\kstvtune.ax 2008-11-07 13:33 . 2004-08-04 00:44 61,952 --a--c--- d:\windows\system32\dllcache\kstvtune.ax 2008-11-07 13:33 . 2004-08-04 00:44 54,784 --a------ d:\windows\system32\vfwwdm32.dll 2008-11-07 13:33 . 2004-08-04 00:44 54,784 --a--c--- d:\windows\system32\dllcache\vfwwdm32.dll 2008-11-07 13:33 . 2004-08-04 00:44 43,008 --a------ d:\windows\system32\ksxbar.ax 2008-11-07 13:33 . 2004-08-04 00:44 43,008 --a--c--- d:\windows\system32\dllcache\ksxbar.ax 2008-11-07 13:33 . 2004-08-04 00:44 28,672 --a------ d:\windows\system32\vidcap.ax 2008-11-07 13:33 . 2004-08-04 00:44 28,672 --a--c--- d:\windows\system32\dllcache\vidcap.ax 2008-11-07 13:33 . 2008-11-07 13:33 13,824 --a------ d:\windows\system32\drivers\splitcam.sys 2008-11-07 13:25 . 2008-11-07 13:25 62 --a------ d:\windows\wininit.ini 2008-11-07 13:22 . 2008-11-07 13:22 <DIR> d-------- d:\program files\SplitCam 2008-11-07 13:22 . 2003-05-14 21:07 389,120 --a------ d:\windows\system32\actskn43.ocx 2008-11-07 13:19 . 2007-09-20 13:04 114,688 --a------ d:\windows\system32\BTCamVideoSource.dll 2008-11-07 13:16 . 2008-11-07 13:16 <DIR> d-------- d:\documents and settings\Administrator\Dane aplikacji\Thinstall 2008-11-07 09:00 . 2008-11-07 09:00 <DIR> d--hs---- d:\windows\ftpcache 2008-11-07 09:00 . 2008-11-07 09:00 <DIR> d-------- d:\documents and settings\Administrator\Dane aplikacji\Logitech 2008-11-06 21:32 . 2004-04-26 07:09 71,405 --a------ d:\windows\system32\drivers\LMouKE.Sys 2008-11-06 21:32 . 2004-04-26 07:09 54,657 --------- d:\windows\system32\drivers\L8042MOU.SYS 2008-11-06 21:32 . 2004-04-26 07:10 38,081 --a------ d:\windows\system32\drivers\LHidUsbK.sys 2008-11-06 21:31 . 2008-11-06 21:31 <DIR> d-------- d:\program files\Common Files\Logitech 2008-11-06 21:31 . 2004-04-26 07:06 29,696 --a------ d:\windows\KHALMNPR.Exe 2008-11-06 21:31 . 2004-04-26 07:09 24,605 --a------ d:\windows\system32\drivers\LHidKE.Sys 2008-11-06 14:17 . 2008-11-06 14:17 <DIR> d-------- d:\documents and settings\Administrator\Dane aplikacji\InstallShield 2008-11-05 18:13 . 2007-07-19 18:14 3,727,720 --a------ d:\windows\system32\d3dx9_35.dll 2008-11-05 18:13 . 2007-05-16 16:45 3,497,832 --a------ d:\windows\system32\d3dx9_34.dll 2008-11-05 18:13 . 2007-07-19 18:14 1,358,192 --a------ d:\windows\system32\D3DCompiler_35.dll 2008-11-05 18:13 . 2007-05-16 16:45 1,124,720 --a------ d:\windows\system32\D3DCompiler_34.dll 2008-11-05 18:13 . 2007-07-19 18:14 444,776 --a------ d:\windows\system32\d3dx10_35.dll 2008-11-05 18:13 . 2007-05-16 16:45 443,752 --a------ d:\windows\system32\d3dx10_34.dll 2008-11-05 18:13 . 2007-07-20 00:57 267,112 --a------ d:\windows\system32\xactengine2_9.dll 2008-11-05 18:13 . 2007-06-20 20:46 266,088 --a------ d:\windows\system32\xactengine2_8.dll 2008-11-05 18:13 . 2007-04-04 18:55 261,480 --a------ d:\windows\system32\xactengine2_7.dll 2008-11-05 18:13 . 2007-04-04 18:53 81,768 --a------ d:\windows\system32\xinput1_3.dll 2008-11-05 18:13 . 2007-07-20 00:54 18,280 --a------ d:\windows\system32\x3daudio1_2.dll 2008-11-05 18:13 . 2008-11-05 18:13 4,096 --a------ d:\windows\d3dx.dat 2008-11-05 00:27 . 2007-03-07 00:45 3,086,336 --a------ d:\windows\system32\NCMedia.dll 2008-11-05 00:27 . 2007-03-07 00:45 3,086,336 --a------ d:\windows\system32\flvvideo.dll 2008-11-05 00:27 . 2007-02-25 15:36 383,238 --a------ d:\windows\system32\libmp3lame-0.dll 2008-11-05 00:24 . 2008-11-05 00:24 <DIR> d-------- d:\documents and settings\Administrator\Dane aplikacji\DivX 2008-11-05 00:06 . 2008-11-05 00:07 <DIR> d-------- d:\documents and settings\Administrator\Phone Browser 2008-11-04 23:58 . 2008-11-04 23:59 <DIR> d-------- d:\documents and settings\All Users\Dane aplikacji\Bluetooth 2008-11-04 23:36 . 2008-11-07 15:40 69 --a------ d:\windows\NeroDigital.ini 2008-11-04 16:36 . 2008-11-04 20:13 <DIR> d-------- d:\documents and settings\Administrator\dwhelper 2008-11-04 15:52 . 2008-11-04 16:07 96,976 --a------ d:\windows\system32\drivers\klin.dat 2008-11-04 15:52 . 2008-11-04 16:07 87,855 --a------ d:\windows\system32\drivers\klick.dat 2008-11-04 15:51 . 2008-11-04 15:51 <DIR> d-------- d:\program files\Kaspersky Lab 2008-11-04 15:51 . 2008-11-08 11:04 <DIR> d-------- d:\documents and settings\All Users\Dane aplikacji\Kaspersky Lab 2008-11-04 15:51 . 2008-11-08 15:35 4,759,584 --ahs---- d:\windows\system32\drivers\fidbox.dat 2008-11-04 15:51 . 2008-11-08 15:33 78,320 --ahs---- d:\windows\system32\drivers\fidbox.idx 2008-11-04 15:51 . 2008-11-08 15:34 58,144 --ahs---- d:\windows\system32\drivers\fidbox2.dat 2008-11-04 15:51 . 2008-11-08 15:33 9,536 --ahs---- d:\windows\system32\drivers\fidbox2.idx 2008-11-04 00:14 . 2008-11-04 00:14 <DIR> d-------- d:\documents and settings\Administrator\Dane aplikacji\Gadu-Gadu 2008-11-03 23:25 . 2008-11-03 23:25 <DIR> d-------- d:\windows\Sun 2008-11-03 23:25 . 2008-11-04 19:52 <DIR> d-------- d:\documents and settings\Administrator\Gadu-Gadu 2008-11-03 23:14 . 2008-11-03 23:14 0 --a------ d:\windows\nsreg.dat 2008-11-03 22:54 . 2004-08-03 23:44 221,184 --a------ d:\windows\system32\wmpns.dll 2008-11-03 22:50 . 2008-11-03 22:51 <DIR> d-------- d:\program files\Windows Media Connect 2 2008-11-03 22:48 . 2007-03-14 02:04 69,632 --a------ d:\windows\system32\javacpl.cpl 2008-11-03 22:36 . 2008-11-03 22:43 <DIR> d-------- d:\program files\Java 2008-11-03 22:36 . 2008-11-03 22:36 <DIR> d-------- d:\program files\Common Files\Java 2008-11-03 22:34 . 2008-11-03 22:34 <DIR> d-------- d:\windows\system32\LogFiles 2008-11-03 22:34 . 2008-11-05 00:04 <DIR> d-------- d:\windows\system32\drivers\UMDF 2008-11-03 22:34 . 2008-11-05 00:03 <DIR> d-------- d:\documents and settings\All Users\Dane aplikacji\PC Suite 2008-11-03 22:34 . 2008-11-03 22:34 <DIR> d-------- d:\documents and settings\Administrator\Dane aplikacji\Nokia 2008-11-03 22:30 . 2006-09-16 03:02 23,856 --a------ d:\windows\system32\spupdsvc.exe 2008-11-03 22:27 . 2008-11-03 22:27 <DIR> d-------- d:\program files\Common Files\PCSuite 2008-11-03 22:27 . 2008-11-03 22:28 <DIR> d-------- d:\program files\Common Files\Nokia 2008-11-03 22:22 . 2008-11-03 22:22 <DIR> d----c--- d:\windows\system32\DRVSTORE 2008-11-03 22:22 . 2008-11-03 22:22 <DIR> d-------- d:\program files\PC Connectivity Solution 2008-11-03 22:22 . 2008-11-03 22:22 <DIR> d-------- d:\program files\DIFX 2008-11-03 22:22 . 2008-11-03 22:22 <DIR> d-------- d:\documents and settings\Administrator\Dane aplikacji\PC Suite 2008-11-03 22:22 . 2007-02-22 11:15 90,624 --a------ d:\windows\system32\nmwcdcls.dll 2008-11-03 22:21 . 2008-11-03 22:21 <DIR> d-------- d:\documents and settings\All Users\Dane aplikacji\Installations 2008-11-03 22:20 . 2008-11-03 22:20 <DIR> d-------- d:\program files\Common Files\Nero 2008-11-03 22:20 . 2008-11-03 22:20 <DIR> d-------- d:\documents and settings\All Users\Dane aplikacji\Nero 2008-11-03 22:20 . 2006-03-17 12:45 1,757,184 --a------ d:\windows\system32\imagX7.dll 2008-11-03 22:20 . 2006-03-17 12:45 802,816 --a------ d:\windows\system32\imagXRA7.dll 2008-11-03 22:20 . 2006-03-17 12:45 497,296 --a------ d:\windows\system32\imagXpr7.dll 2008-11-03 22:20 . 2006-03-17 15:49 368,640 --a------ d:\windows\system32\TwnLib4.dll 2008-11-03 22:20 . 2006-03-17 12:45 258,048 --a------ d:\windows\system32\imagXR7.dll 2008-11-03 22:16 . 2004-08-03 22:14 359,040 --a------ d:\windows\system32\drivers\tcpip.sys.flg 2008-11-03 22:12 . 2008-11-03 22:12 <DIR> d-------- d:\documents and settings\All Users\Dane aplikacji\Hagel Technologies 2008-11-03 22:07 . 2008-11-07 12:50 <DIR> d-------- d:\documents and settings\All Users\Dane aplikacji\Lavasoft 2008-11-03 22:06 . 2008-11-03 22:06 <DIR> d-------- d:\program files\Common Files\Wise Installation Wizard . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-11-07 12:22 --------- d--h--w d:\program files\InstallShield Installation Information 2008-11-06 20:31 --------- d-----w d:\program files\Common Files\InstallShield 2008-11-04 15:07 112,144 ----a-w d:\windows\system32\drivers\kl1.sys 2008-11-04 14:55 --------- d-----w d:\documents and settings\Administrator\Dane aplikacji\HP 2008-11-03 20:55 --------- d-----w d:\documents and settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files 2008-11-03 20:53 --------- d-----w d:\documents and settings\All Users\Dane aplikacji\HP 2008-11-03 20:52 --------- d-----w d:\program files\Common Files\Sonic Shared 2008-11-03 20:52 --------- d-----w d:\program files\Common Files\HP 2008-11-03 20:52 --------- d-----w d:\documents and settings\All Users\Dane aplikacji\Sonic 2008-11-03 20:50 --------- d-----w d:\program files\Hewlett-Packard 2008-11-03 20:49 --------- d-----w d:\program files\Common Files\Hewlett-Packard 2008-11-03 20:46 --------- d-----w d:\program files\HP 2008-11-03 20:42 --------- d-----w d:\program files\Marvell 2008-11-03 20:38 --------- d-----w d:\program files\Realtek Sound Manager 2008-11-03 20:38 --------- d-----w d:\program files\AvRack 2008-11-03 20:29 --------- d-----w d:\documents and settings\Administrator\Dane aplikacji\ATI 2008-11-03 20:26 --------- d-----w d:\program files\ATI Technologies 2008-11-03 20:04 --------- d-----w d:\program files\microsoft frontpage 2008-11-03 20:03 --------- d-----w d:\program files\Usługi online . ((((((((((((((((((((((((((((( snapshot@2008-11-08_14.56.04.25 ))))))))))))))))))))))))))))))))))))))))) . + 2004-08-03 22:43:54 66,560 ----a-w d:\windows\LastGood.Tmp\system32\cdm.dll + 2004-08-03 22:44:16 431,616 ----a-w d:\windows\LastGood.Tmp\system32\wuapi.dll + 2004-08-03 22:44:30 112,128 ----a-w d:\windows\LastGood.Tmp\system32\wuauclt.exe + 2004-08-03 22:44:16 1,134,592 ----a-w d:\windows\LastGood.Tmp\system32\wuaueng.dll + 2004-08-03 22:44:16 113,664 ----a-w d:\windows\LastGood.Tmp\system32\wucltui.dll + 2004-08-03 22:44:16 36,864 ----a-w d:\windows\LastGood.Tmp\system32\wups.dll + 2004-08-03 22:44:16 120,320 ----a-w d:\windows\LastGood.Tmp\system32\wuweb.dll - 2004-08-03 22:43:54 66,560 ----a-w d:\windows\system32\cdm.dll + 2007-07-30 18:19:20 92,504 ----a-w d:\windows\system32\cdm.dll - 2004-08-03 22:43:54 66,560 -c--a-w d:\windows\system32\dllcache\cdm.dll + 2007-07-30 18:19:20 92,504 -c--a-w d:\windows\system32\dllcache\cdm.dll - 2004-08-03 22:44:16 431,616 -c--a-w d:\windows\system32\dllcache\wuapi.dll + 2007-07-30 18:19:36 549,720 -c--a-w d:\windows\system32\dllcache\wuapi.dll - 2004-08-03 22:44:30 112,128 -c--a-w d:\windows\system32\dllcache\wuauclt.exe + 2007-07-30 18:19:16 53,080 -c--a-w d:\windows\system32\dllcache\wuauclt.exe - 2004-08-03 22:44:16 1,134,592 -c--a-w d:\windows\system32\dllcache\wuaueng.dll + 2007-07-30 18:19:42 1,712,984 -c--a-w d:\windows\system32\dllcache\wuaueng.dll - 2004-08-03 22:44:16 113,664 -c--a-w d:\windows\system32\dllcache\wucltui.dll + 2007-07-30 18:19:32 325,976 -c--a-w d:\windows\system32\dllcache\wucltui.dll - 2004-08-03 22:44:16 36,864 -c--a-w d:\windows\system32\dllcache\wups.dll + 2007-07-30 18:18:40 33,624 -c--a-w d:\windows\system32\dllcache\wups.dll - 2004-08-03 22:44:16 120,320 -c--a-w d:\windows\system32\dllcache\wuweb.dll + 2007-07-30 18:19:28 203,096 -c--a-w d:\windows\system32\dllcache\wuweb.dll + 2007-07-30 18:18:40 33,624 ----a-w d:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.0.6000.381\wups.dll - 2004-08-03 22:44:16 431,616 ----a-w d:\windows\system32\wuapi.dll + 2007-07-30 18:19:36 549,720 ----a-w d:\windows\system32\wuapi.dll - 2004-08-03 22:44:30 112,128 ----a-w d:\windows\system32\wuauclt.exe + 2007-07-30 18:19:16 53,080 ----a-w d:\windows\system32\wuauclt.exe - 2004-08-03 22:44:16 1,134,592 ----a-w d:\windows\system32\wuaueng.dll + 2007-07-30 18:19:42 1,712,984 ----a-w d:\windows\system32\wuaueng.dll - 2004-08-03 22:44:16 113,664 ----a-w d:\windows\system32\wucltui.dll + 2007-07-30 18:19:32 325,976 ----a-w d:\windows\system32\wucltui.dll - 2004-08-03 22:44:16 36,864 ----a-w d:\windows\system32\wups.dll + 2007-07-30 18:18:40 33,624 ----a-w d:\windows\system32\wups.dll + 2007-07-30 18:19:12 43,352 ----a-w d:\windows\system32\wups2.dll - 2004-08-03 22:44:16 120,320 ----a-w d:\windows\system32\wuweb.dll + 2007-07-30 18:19:28 203,096 ----a-w d:\windows\system32\wuweb.dll . -- Migawka wyzerowana -- . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="d:\windows\system32\ctfmon.exe" [2004-08-03 15360] "Gadu-Gadu"="c:\program files\Gadu-Gadu\gg.exe" [2008-03-20 2127296] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ATICCC"="d:\program files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-06 61440] "SunJavaUpdateSched"="d:\program files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 83608] "AVP"="d:\program files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" [2007-12-18 227856] "SoundMan"="SOUNDMAN.EXE" [2005-01-12 d:\windows\SOUNDMAN.EXE] "Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2004-04-26 d:\windows\KHALMNPR.Exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="d:\windows\system32\CTFMON.EXE" [2004-08-03 15360] "Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 1241088] d:\documents and settings\All Users\Menu Start\Programy\Autostart\ ATI CATALYST - pasek zadaä.lnk - d:\program files\ATI Technologies\ATI.ACE\CLI.exe [2005-08-06 61440] BlueSoleil.lnk - c:\program files\BlueSoleil\BlueSoleil.exe [2007-06-06 657168] Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\KEM.exe [2008-11-06 573440] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.l3acm"= l3codecp.acm [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Start^Programy^Autostart^HP Image Zone - szybkie uruchamianie.lnk] path=d:\documents and settings\All Users\Menu Start\Programy\Autostart\HP Image Zone - szybkie uruchamianie.lnk backup=d:\windows\pss\HP Image Zone - szybkie uruchamianie.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DU Meter] --a------ 2004-09-19 12:24 1469952 c:\program files\DU Meter\DUMeter.plk [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Flashget] --a------ 2007-05-16 14:02 1974345 c:\program files\FlashGet\flashget.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadu-Gadu] --a------ 2008-03-20 11:04 2127296 c:\program files\Gadu-Gadu\gg.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] --a------ 2005-05-11 23:12 49152 c:\program files\HP\HP Software Update\hpwuSchd2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odkurzacz-MCD] --a------ 2007-05-03 10:02 264704 c:\program files\Odkurzacz\odk_mcd.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication] --a------ 2007-06-18 15:10 271360 c:\program files\Nokia\Nokia PC Suite 6\LaunchApplication.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"= "c:\\Program Files\\FlashGet\\flashget.exe"= "d:\\Documents and Settings\\All Users\\Dane aplikacji\\Kaspersky Lab Setup Files\\Kaspersky Anti-Virus 7.0.1.321\\Polish\\setup.exe"= "c:\\Program Files\\Gadu-Gadu\\gg.exe"= "c:\\Program Files\\BlueSoleil\\BlueSoleil.exe"= "c:\\Program Files\\Mobiola Web Camera for S60\\webcam.exe"= "f:\\Download\\Programy\\Drobne\\Skype\\Skype 3.6.0.248 PL.exe"= R3 klim5;Kaspersky Anti-Virus NDIS Filter;d:\windows\system32\DRIVERS\klim5.sys [2007-12-13 24592] . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-11-08 15:34:59 Windows 5.1.2600 Dodatek Service Pack 2 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . --------------------- Pliki DLL ładowane pod uruchomionymi procesami --------------------- PROCES: d:\windows\explorer.exe -> c:\program files\Logitech\SetPoint\lgscroll.dll . ------------------------ Pozostałe uruchomione procesy ------------------------ . d:\windows\system32\ati2evxx.exe c:\program files\Ad-Aware\aawservice.exe d:\windows\system32\ati2evxx.exe d:\windows\system32\HPZipm12.exe c:\program files\Logitech\SetPoint\KHALMNPR.exe . ************************************************************************** . Czas ukończenia: 2008-11-08 15:37:50 - komputer został uruchomiony ponownie ComboFix-quarantined-files.txt 2008-11-08 14:37:43 ComboFix2.txt 2008-11-08 13:57:47 Przed: 17 662 570 496 bajtów wolnych Po: 17,652,723,712 bajtów wolnych 270

Podłacz tzn ze mam kupic nowy ? ;> Jaki polecacie ? ;>

**Posty:** 684 · przez **djarta** 08 Lis 2008, 16:42

Log jest czysty.

JaYo^ napisał(a):Podłacz tzn ze mam kupic nowy ? ;> Jaki polecacie ? ;>

Do jakiej kwoty?

===========
K.

**Posty:** 7956 · przez **Magik** 08 Lis 2008, 16:44

mozesz najpierw pozyczyc inny od kumpla to raz, dwa Chieftec 400W

**Posty:** 24 · przez **JaYo^** 08 Lis 2008, 16:48

nie no a moze nie jest az tak bardzo konieczne wymiana zasilacza bo komp jako tako dziala. nie dostrzegam po wyczysczeniu zbyt duzego zawieszania sie. Wiec moze jakos pocaigne na tym zasilaczu ?

**Posty:** 7956 · przez **Magik** 08 Lis 2008, 16:49

JaYo^ napisał(a):Wiec moze jakos pocaigne na tym zasilaczu ?

mozesz, nie musisz, bynajmniej cudu techniki nie posiadasz a nie jest to na szczescie Tracer wiec.....

Pozdrawiam

**Posty:** 24 · przez **JaYo^** 08 Lis 2008, 17:11

wiec ... ? ;> No smiało powiedz powiedz

**Posty:** 7956 · przez **Magik** 08 Lis 2008, 17:15

JaYo^ napisał(a):wiec ... ? ;> No smiało powiedz powiedz

hehehehehheehhehe

chodzi mianowicie o to, ze jak w ktoryms momencie bedziesz mial nadmiar gotowki to mozesz zainwestowac w nowa zasilke, na cos "pewniejszego"

**Posty:** 24 · przez **JaYo^** 08 Lis 2008, 17:17

komputer juz ma kilka lat

Wiec jak za jakis czas nie bedzie mi nic chodzic to sie pomysli

Kto jest na forum