proszę o sprawdzenie loga. użycie procka 100 %

**Posty:** 6 · przez **MacieiX** 23 Mar 2008, 14:32

Gdy włącze Counter strike 1.6 lub gothic 2 użycie procesora trzyma się ciągle na 100 procentach i wsyzstko dostaje zamułe.

Mój log:

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:44:22, on 2002-03-25 Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\SOUNDMAN.EXE L:\Program Files\Winamp\winampa.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\WINDOWS\System32\ctfmon.exe C:\Program Files\Winamp Remote\bin\OrbTray.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\System32\wpabaln.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Valve\Steam\Steam.exe C:\Program Files\Internet Explorer\iexplore.exe c:\program files\winamp toolbar\WinampTbServer.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [WinampAgent] "l:\Program Files\Winamp\winampa.exe" O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [InvalidDelete] C:\DOCUME~1\dom\USTAWI~1\Temp\KYE\Setup.exe /Delete C:\Program Files\Genius NetScroll+ Traveler Mouse O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "D:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background O4 - HKCU\..\Run: [Steam] "c:\program files\valve\steam\steam.exe" -silent O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- End of file - 3936 bytes

**Posty:** 18165 · przez **wojtas** 23 Mar 2008, 14:37

log nie jest w tagach popraw

**Posty:** 6 · przez **MacieiX** 23 Mar 2008, 14:45

teraz?

**Posty:** 18165 · przez **wojtas** 23 Mar 2008, 14:48

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

Uruchamiasz HijackThis => klikasz Do a system scan only => pokaże się lista wpisów => stawiasz ptaszek przy wpisach, które wymieniłem => klikasz Fix checked i potwierdzasz usunięcie.

Wykonaj to co jest podane w tym temacie

Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu C:\SDFix wrzuc zawartość pliku Report.txt + log z combofixa

**Posty:** 6 · przez **MacieiX** 23 Mar 2008, 15:32

Report:

Kod: Zaznacz wszystko: [b]SDFix: Version 1.160 [/b] Run by dom on 2002-03-25 at 15:17 Microsoft Windows XP [Wersja 5.1.2600] Running From: C:\SDFix [b]Checking Services [/b]: Restoring Windows Registry Values Restoring Windows Default Hosts File Rebooting [b]Checking Files [/b]: No Trojan Files Found Removing Temp Files [b]ADS Check [/b]: [b]Final Check [/b]: catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2002-03-25 15:19:55 Windows 5.1.2600 Dodatek Service Pack. 1 FAT NTAPI scanning hidden processes ... scanning hidden services ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 [b]Remaining Services [/b]: Authorized Application Key Export: [b]Remaining Files [/b]: File Backups: - C:\SDFix\backups\backups.zip [b]Files with Hidden Attributes [/b]: Mon 22 Jul 2002 418,816 ...HR --- "C:\WINDOWS\system32\Tools\All.exe" Fri 19 Jul 2002 390,144 ...HR --- "C:\WINDOWS\system32\Tools\Change.exe" Fri 19 Jul 2002 574,464 ...HR --- "C:\WINDOWS\system32\Tools\CheckPath.exe" Tue 20 Aug 2002 430,592 ...HR --- "C:\WINDOWS\system32\Tools\Counter.exe" Tue 23 Jul 2002 390,656 ...HR --- "C:\WINDOWS\system32\Tools\DelFolders.exe" Fri 22 Nov 2002 399,872 ...HR --- "C:\WINDOWS\system32\Tools\DirectSetup.exe" Fri 19 Jul 2002 388,096 ...HR --- "C:\WINDOWS\system32\Tools\RegClean.exe" Fri 19 Jul 2002 388,608 ...HR --- "C:\WINDOWS\system32\Tools\Regexe.exe" Mon 2 Dec 2002 431,616 ...HR --- "C:\WINDOWS\system32\Tools\Restart.exe" Fri 19 Jul 2002 388,096 ...HR --- "C:\WINDOWS\system32\Tools\RunRegexe.exe" [b]Finished![/b]

Combofix log:

Kod: Zaznacz wszystko: ComboFix 08-03-22.3 - dom 2008-03-24 15:23:40.1 - [color=red][b]FAT32[/b][/color]x86 Microsoft Windows XP Home Edition 5.1.2600.1.1250.1.1045.18.243 [GMT 1:00] Running from: C:\Documents and Settings\dom\Pulpit\ComboFix.exe * Created a new restore point [color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color] . ((((((((((((((((((((((((( Files Created from 2008-02-24 to 2008-03-24 ))))))))))))))))))))))))))))))) . 2008-02-26 06:51 . 2008-02-26 06:51 2,863,616 --a------ C:\WINDOWS\system32\drivers\ati2mtag.sys 2008-02-26 06:51 . 2008-02-26 06:51 2,863,616 --a------ C:\WINDOWS\system32\dllcache\ati2mtag.sys 2008-02-26 04:12 . 2008-02-26 04:12 372,736 --a------ C:\WINDOWS\system32\ATIDEMGX.dll 2008-02-26 04:10 . 2008-02-26 04:11 307,200 --a------ C:\WINDOWS\system32\atiiiexx.dll 2008-02-26 04:10 . 2008-02-26 04:10 299,520 --a------ C:\WINDOWS\system32\dllcache\ati2dvag.dll 2008-02-26 04:10 . 2008-02-26 04:10 299,520 --a------ C:\WINDOWS\system32\ati2dvag.dll 2008-02-26 04:02 . 2008-02-26 04:02 172,032 --a------ C:\WINDOWS\system32\atipdlxx.dll 2008-02-26 04:02 . 2008-02-26 04:02 126,976 --a------ C:\WINDOWS\system32\Oemdspif.dll 2008-02-26 04:01 . 2008-02-26 04:01 126,976 --a------ C:\WINDOWS\system32\ati2evxx.dll 2008-02-26 04:01 . 2008-02-26 04:01 43,520 --a------ C:\WINDOWS\system32\ati2edxx.dll 2008-02-26 04:01 . 2008-02-26 04:01 26,112 --a------ C:\WINDOWS\system32\Ati2mdxx.exe 2008-02-26 04:00 . 2008-02-26 04:00 520,192 --a------ C:\WINDOWS\system32\ati2evxx.exe 2008-02-26 03:59 . 2008-02-26 03:59 9,797,632 --a------ C:\WINDOWS\system32\atioglx2.dll 2008-02-26 03:58 . 2008-02-26 03:58 53,248 --a------ C:\WINDOWS\system32\ATIDDC.DLL 2008-02-26 03:49 . 2008-02-26 03:49 3,176,480 --a------ C:\WINDOWS\system32\ati3duag.dll 2008-02-26 03:41 . 2008-02-26 03:41 3,107,788 --a------ C:\WINDOWS\system32\ativvaxx.dat 2008-02-26 03:41 . 2008-02-26 03:41 3,107,788 --a------ C:\WINDOWS\system32\ativva5x.dat 2008-02-26 03:41 . 2008-02-26 03:41 1,755,264 --a------ C:\WINDOWS\system32\ativvaxx.dll 2008-02-26 03:41 . 2008-02-26 03:41 887,724 --a------ C:\WINDOWS\system32\ativva6x.dat 2008-02-26 03:29 . 2008-02-26 03:29 46,080 --a------ C:\WINDOWS\system32\amdpcom32.dll 2008-02-26 03:25 . 2008-02-26 03:25 393,216 --a------ C:\WINDOWS\system32\atikvmag.dll 2008-02-26 03:23 . 2008-02-26 03:23 17,408 --a------ C:\WINDOWS\system32\atitvo32.dll 2008-02-26 03:22 . 2008-02-26 03:22 49,152 --a------ C:\WINDOWS\system32\drivers\ati2erec.dll 2008-02-26 03:21 . 2008-02-26 03:21 5,439,488 --a------ C:\WINDOWS\system32\atioglxx.dll 2008-02-26 03:19 . 2008-02-26 03:19 167,936 --a------ C:\WINDOWS\system32\atiok3x2.dll 2008-02-26 03:16 . 2008-02-26 03:16 520,192 --a------ C:\WINDOWS\system32\ati2cqag.dll . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-02-25 20:05 593,920 ------w C:\WINDOWS\system32\ati2sgag.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}] 2007-12-13 17:49 1185120 --a------ C:\Program Files\Winamp Toolbar\winamptb.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= "C:\Program Files\Winamp Toolbar\winamptb.dll" [2007-12-13 17:49 1185120] [HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1] [HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser] "{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= C:\Program Files\Winamp Toolbar\winamptb.dll [2007-12-13 17:49 1185120] [HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1] [HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}] [HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\System32\ctfmon.exe" [2002-09-23 12:00 13312] "Gadu-Gadu"="D:\Program Files\Gadu-Gadu\gg.exe" [2007-07-09 08:39 2119104] "Orb"="C:\Program Files\Winamp Remote\bin\OrbTray.exe" [2008-01-07 21:02 495616] "Steam"="c:\program files\valve\steam\steam.exe" [2002-03-23 10:14 1266936] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2002-08-20 15:08 1511453] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SoundMan"="SOUNDMAN.EXE" [2006-03-02 00:22 577536 C:\WINDOWS\soundman.exe] "CTSysVol"="C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe" [2005-10-31 10:51 57344] "UpdReg"="C:\WINDOWS\UpdReg.EXE" [2000-05-11 01:00 90112] "WinampAgent"="l:\Program Files\Winamp\winampa.exe" [2008-01-15 23:54 37376] "NeroCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2003-07-13 02:49 155648] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2002-09-23 12:00 13312] S3 genmcmn;Scroll Mouse Driver;C:\WINDOWS\System32\DRIVERS\gmfiltr.sys [] *Newly Created Service* - ALG *Newly Created Service* - IPNAT *Newly Created Service* - SHAREDACCESS . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-03-24 15:24:22 Windows 5.1.2600 Dodatek Service Pack. 1 FAT NTAPI scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2008-03-24 15:24:42 ComboFix-quarantined-files.txt 2008-03-24 14:24:42

**Posty:** 18165 · przez **wojtas** 23 Mar 2008, 17:37

czysto

**Posty:** 6 · przez **MacieiX** 23 Mar 2008, 20:39

Wielkie dzięki

[ Dodano: Dzisiaj o 14:42 ]
Zrobiłem formata dysku C. Bo miałem dalej duże użycie procesora ( 100%). Po formacie dalej się tak trzyma. Ja nie wiem na kompie wszystko ok ale w grach fatalnie

proszę o sprawdzenie loga. użycie procka 100 %

proszę o sprawdzenie loga. użycie procka 100 %

Kto jest na forum