proszę o sprawdzenie loga.

**Posty:** 57 · przez **Inik** 22 Gru 2007, 18:51

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 17:46:21, on 2007-12-22 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0011) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PnkBstrA.exe C:\Program Files\Spyware Doctor\svcntaux.exe C:\Program Files\Spyware Doctor\swdsvc.exe C:\WINDOWS\system32\wdfmgr.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\Explorer.EXE C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\wuauclt.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe C:\Program Files\Spyware Doctor\SDTrayApp.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe C:\Program Files\PLANET WL-8314\WLANMON.exe C:\WINDOWS\system32\taskmgr.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Alwil Software\Avast4\setup\avast.setup C:\Documents and Settings\x\Moje dokumenty\Programy\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.megainternet.pl:3128 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll (file missing) O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\2.bin\MGSBAR.DLL O2 - BHO: ActivationManager module - {86A44EF7-78FC-4e18-A564-B18F806F7F56} - C:\Program Files\ActivationManager\ActivationManager.dll.upd (file missing) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\2.bin\MGSBAR.DLL O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKCU\..\Run: [CS Update] copy /Y "C:\Program Files\ActivationManager\ActivationManager.dll.upd" "C:\Program Files\ActivationManager\ActivationManager.dll" O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: WL-8314 Configuration Utility.lnk = ? O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://D:\PROGRA~1\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [INTERNATIONAL] International* O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{637CA5CE-3D45-426D-A0CC-1ED9926B871F}: NameServer = 85.117.17.1 O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe

Od jakiegoś czasu pokazuje mi się ten błąd, nie wiem skąd, nie wiem po co i od czego to jest. Może mi ktoś powiedzieć jak zlikwidować ten błąd żeby więcej się już nie pokazywał?

Chodzi o ten plik:

No i mi sie pieprzy co chwile dźwięk, tzn. co pare godzin, jak zainstaluje sterowniki do karty dźwiek. to głos porwraca a gdy włącze kompa za pare godzin to jest przez godzine a potem sie wyłącza i wtedy często pokazuje mi sie ten błąd, glosniki sa ok bo sprawdzalem.

Sprawdzalem jeszcze tym:

część wirusów usunąłem ale część pozostała i przy każdorazowym skanowaniu się pojawia.

**Posty:** 18165 · przez **wojtas** 22 Gru 2007, 19:31

skasuj te wpisy w hijacku + pogrubiony do kosza:

O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\2.bin\MGSBAR.DLL
O2 - BHO: ActivationManager module - {86A44EF7-78FC-4e18-A564-B18F806F7F56} - C:\Program Files\ActivationManager\ActivationManager.dll.upd (file missing)
O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\2.bin\MGSBAR.DLL
O4 - HKCU\..\Run: [CS Update] copy /Y "C:\Program Files\ActivationManager\ActivationManager.dll.upd" "C:\Program Files\ActivationManager\ActivationManager.dll"

Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu C:\SDFix wrzuc zawartość pliku Report.txt + log z combofixa oraz z hijacka

**Posty:** 57 · przez **Inik** 22 Gru 2007, 20:26

Combo fix:

Kod: Zaznacz wszystko: "x" - 2007-12-22 19:17:25 Dodatek Service Pack 2 ComboFix 07-05.27.V - Running from: "C:\Documents and Settings\x\Moje dokumenty\Programy\" ((((((((((((((((((((((((((((((( Files Created from 2007-11-22 to 2007-12-22 )))))))))))))))))))))))))))))))))) 2007-12-22 19:05 <DIR> d-------- C:\WINDOWS\ERUNT 2007-12-22 17:41 43,352 --a------ C:\WINDOWS\system32\wups2.dll 2007-12-22 17:40 <DIR> d-------- C:\WINDOWS\system32\SoftwareDistribution 2007-12-22 17:37 <DIR> dr------- C:\DOCUME~1\LOCALS~1\Ulubione 2007-12-22 17:37 <DIR> d-------- C:\DOCUME~1\LOCALS~1\DANEAP~1\Talkback 2007-12-22 17:05 79,688 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys 2007-12-22 17:05 62,280 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys 2007-12-22 17:05 41,288 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys 2007-12-22 17:05 29,000 --a------ C:\WINDOWS\system32\drivers\kcom.sys 2007-12-22 17:05 <DIR> d-------- C:\Program Files\Spyware Doctor 2007-12-22 17:05 <DIR> d-------- C:\DOCUME~1\x\DANEAP~1\PC Tools 2007-12-22 16:07 626,688 --a------ C:\WINDOWS\system32\msvcr80.dll 2007-12-22 16:07 <DIR> d-------- C:\Program Files\Common Files\Download Manager 2007-12-22 12:37 32,768 --a------ C:\WINDOWS\system32\UnAudioNT.dll 2007-12-22 12:37 <DIR> d-------- C:\Program Files\VIA Technologies, Inc 2007-12-22 12:36 73,856 --a------ C:\WINDOWS\system32\drivers\viaudio.sys 2007-12-22 10:15 <DIR> d-------- C:\Program Files\Kurka Wodna 3 2007-12-22 08:58 <DIR> d-------- C:\Program Files\AvRack 2007-12-22 08:58 <DIR> d-------- C:\Program Files\Avance Sound Manager 2007-12-21 06:15 <DIR> d-------- C:\Program Files\Deluxe Ski Jump 3 2007-12-16 17:05 101,376 --a------ C:\WINDOWS\system32\drivers\ACEDRV07.sys 2007-12-09 13:04 22,328 --a------ C:\DOCUME~1\x\DANEAP~1\PnkBstrK.sys 2007-12-09 13:03 669,184 --a------ C:\WINDOWS\system32\pbsvc.exe 2007-12-09 10:59 50,688 --a------ C:\WINDOWS\system32\wbhelp2.dll 2007-12-09 10:59 <DIR> d-a------ C:\DOCUME~1\ALLUSE~1\DANEAP~1\TEMP 2007-12-08 13:28 <DIR> d-------- C:\Documents and Settings\x\.thumbnails 2007-12-08 13:28 <DIR> d-------- C:\DOCUME~1\x\DANEAP~1\gtk-2.0 2007-12-08 13:28 <DIR> d-------- C:\DOCUME~1\x\.thumbnails 2007-12-08 13:23 <DIR> d-------- C:\Documents and Settings\x\.gimp-2.4 2007-12-08 13:23 <DIR> d-------- C:\DOCUME~1\x\.gimp-2.4 2007-12-08 13:22 <DIR> d-------- C:\Program Files\GIMP-2.0 2007-12-04 17:05 <DIR> d-------- C:\cda 2007-11-27 15:27 <DIR> d-------- C:\Program Files\WUUP! (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-12-22 17:43:24 75,486 ----a-w C:\WINDOWS\system32\perfc015.dat 2007-12-22 17:43:24 451,220 ----a-w C:\WINDOWS\system32\perfh015.dat 2007-12-22 17:25:44 -------- d-----w C:\Program Files\Opera 2007-12-09 12:04:04 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys 2007-12-09 12:03:57 103,736 ----a-w C:\WINDOWS\system32\PnkBstrB.exe 2007-12-09 12:03:52 66,872 ----a-w C:\WINDOWS\system32\PnkBstrA.exe 2007-12-04 14:56:02 93,264 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys 2007-12-04 14:55:46 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys 2007-12-04 14:53:39 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys 2007-12-04 14:51:52 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys 2007-12-04 14:49:02 26,624 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys 2007-12-04 13:04:28 837,496 ----a-w C:\WINDOWS\system32\aswBoot.exe 2007-12-04 12:54:04 95,608 ----a-w C:\WINDOWS\system32\AVASTSS.scr 2007-11-30 19:12:48 -------- d-----w C:\Program Files\SopCast 2007-11-27 09:05:00 -------- d-----w C:\DOCUME~1\x\DANEAP~1\SopCast 2007-11-16 18:00:13 -------- d--h--w C:\Program Files\InstallShield Installation Information 2007-11-16 14:28:13 -------- d-----w C:\DOCUME~1\x\DANEAP~1\Orbit 2007-11-11 13:16:23 -------- d-----w C:\Program Files\UltimateZip 2007 2007-11-11 09:14:54 -------- d-----w C:\DOCUME~1\x\DANEAP~1\Sports Interactive 2007-11-11 09:11:14 -------- d--h--w C:\Program Files\Zero G Registry 2007-11-07 07:35:58 -------- d-----w C:\Program Files\Alcohol Soft 2007-11-07 07:24:15 1,405 ----a-w C:\WINDOWS\mozver.dat 2007-11-05 12:03:56 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-11-04 17:04:47 -------- d-----w C:\DOCUME~1\x\DANEAP~1\Hamachi 2007-11-02 11:41:12 -------- d-----w C:\Program Files\IrfanView 2007-10-28 13:18:22 -------- d-----w C:\Program Files\FlashGet 2007-10-24 15:00:03 -------- d-----w C:\Program Files\SkanerOnline (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {AA58ED58-01DD-4d91-8333-CF10577473F7}=c:\program files\google\googletoolbar1.dll [2007-05-05 17:20] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D}=C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll [2007-07-07 16:01] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 19:24] "SoundMan"="SOUNDMAN.EXE" [] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-10-22 11:22] "nwiz"="nwiz.exe" [2006-10-22 11:22 C:\WINDOWS\system32\nwiz.exe] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-10-22 11:22] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe" [2005-08-26 17:14] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 23:44] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-07 16:01] "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2007-08-29 16:09] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\sdauxservice] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\sdcoreservice] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Orbit.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Orbit.lnk backup=C:\WINDOWS\pss\Orbit.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EdHTML] C:\Program Files\Binboy\EdHTMLv5.0\EdHTML.exe /none [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] C:\Program Files\Winamp\winampa.exe

Hijack:

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 19:20:58, on 2007-12-22 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0011) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PnkBstrA.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\WINDOWS\SOUNDMAN.EXE C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\PLANET WL-8314\WLANMON.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\WINDOWS\explorer.exe C:\Program Files\Opera\Opera.exe C:\Documents and Settings\x\Moje dokumenty\Programy\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.megainternet.pl:3128 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: WL-8314 Configuration Utility.lnk = ? O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://D:\PROGRA~1\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [INTERNATIONAL] International* O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{637CA5CE-3D45-426D-A0CC-1ED9926B871F}: NameServer = 85.117.17.1 O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe

Report.txt:

Kod: Zaznacz wszystko: SDFix: Version 1.119 Run by x on 2007-12-22 at 19:06 Microsoft Windows XP [Wersja 5.1.2600] Running From: C:\SDFix Safe Mode: Checking Services: Restoring Windows Registry Values Restoring Windows Default Hosts File Rebooting... Normal Mode: Checking Files: No Trojan Files Found Removing Temp Files... ADS Check: C:\WINDOWS No streams found. C:\WINDOWS\system32 No streams found. C:\WINDOWS\system32\svchost.exe No streams found. C:\WINDOWS\system32\ntoskrnl.exe No streams found. Final Check: catchme 0.3.1333.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-22 19:11:04 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden services & system hive ... [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg] "s1"=dword:45b63030 "s2"=dword:ccaae823 "h0"=dword:00000002 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04] "h0"=dword:00000001 "ujdew"=hex:42,a6,e3,f9,cc,a0,53,5c,9c,17,2b,ff,5d,96,89,e5,ea,4e,a7,0d,0e,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "h0"=dword:00000000 "khjeh"=hex:55,37,99,9e,01,cb,f8,82,73,e2,a2,dc,e3,67,50,2c,53,85,f6,2c,00,.. "p0"="C:\Program Files\DAEMON Tools\" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,45,f5,18,f8,f2,c2,5b,ea,4d,a4,6e,ec,43,d1,1b,0b,3b,.. "khjeh"=hex:75,41,65,1e,9e,76,81,5e,ba,4b,25,b1,91,41,aa,39,71,8c,7d,9a,9f,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:ed,37,e0,48,a8,e9,24,7b,67,9c,6b,0e,74,05,ee,bd,80,8a,15,5c,e1,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04] "h0"=dword:00000001 "ujdew"=hex:42,a6,e3,f9,cc,a0,53,5c,9c,17,2b,ff,5d,96,89,e5,ea,4e,a7,0d,0e,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "h0"=dword:00000000 "khjeh"=hex:55,37,99,9e,01,cb,f8,82,73,e2,a2,dc,e3,67,50,2c,53,85,f6,2c,00,.. "p0"="C:\Program Files\DAEMON Tools\" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,45,f5,18,f8,f2,c2,5b,ea,4d,a4,6e,ec,43,d1,1b,0b,3b,.. "khjeh"=hex:75,41,65,1e,9e,76,81,5e,ba,4b,25,b1,91,41,aa,39,71,8c,7d,9a,9f,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:ed,37,e0,48,a8,e9,24,7b,67,9c,6b,0e,74,05,ee,bd,80,8a,15,5c,e1,.. scanning hidden registry entries ... [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\A\1\5\1c] "Order"=hex:08,00,00,00,02,00,00,00,b8,01,00,00,01,00,00,00,04,00,00,00,8c,.. scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 Remaining Services: ------------------ Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "C:\\Program Files\\Gadu-Gadu\\gg.exe"="C:\\Program Files\\Gadu-Gadu\\gg.exe:*:Enabled:Gadu-Gadu - program g˘wny" "C:\\Program Files\\SopCast\\SopCast.exe"="C:\\Program Files\\SopCast\\SopCast.exe:*:Enabled:SopCast Main Application" "C:\\Documents and Settings\\x\\Dane aplikacji\\SopCast\\adv\\SopAdver.exe"="C:\\Documents and Settings\\x\\Dane aplikacji\\SopCast\\adv\\SopAdver.exe:*:Enabled:SopCast Adver" "D:\\Program Files\\eMule\\emule.exe"="D:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule" "D:\\Program Files\\BearShare\\BearShare.exe"="D:\\Program Files\\BearShare\\BearShare.exe:*:Enabled:BearShare" "C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Firefox" "C:\\Program Files\\SopCast\\adv\\SopAdver.exe"="C:\\Program Files\\SopCast\\adv\\SopAdver.exe:*:Enabled:SopCast Adver" "D:\\Program Files\\DAP\\DAP.exe"="D:\\Program Files\\DAP\\DAP.exe:*:Enabled:Download Accelerator Plus (DAP)" "C:\\WINDOWS\\system32\\PnkBstrA.exe"="C:\\WINDOWS\\system32\\PnkBstrA.exe:*:Enabled:PnkBstrA" "C:\\WINDOWS\\system32\\PnkBstrB.exe"="C:\\WINDOWS\\system32\\PnkBstrB.exe:*:Enabled:PnkBstrB" "D:\\Program Files\\KONAMI\\Pro Evolution Soccer 2008\\PES2008.exe"="D:\\Program Files\\KONAMI\\Pro Evolution Soccer 2008\\PES2008.exe:*:Enabled:Pro Evolution Soccer 2008" "C:\\Program Files\\Kurka Wodna 3\\kurka.exe"="C:\\Program Files\\Kurka Wodna 3\\kurka.exe:*:Enabled:kurka" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" Remaining Files: --------------- Files with Hidden Attributes: Wed 26 Sep 2007 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak" Sun 9 Dec 2007 3,108 ...HR --- "C:\Documents and Settings\x\Dane aplikacji\SecuROM\UserData\securom_v7_01.bak" Finished!

Chciałem jeszcze powiedzieć że po wyskoczeniu tego błędu(również po zrobieniu czynności które kazałeś mi wykonać)windows na chwilę zmienia skórkę na tą z win.98, dotyczy to również tego pliku svchost.exe

Dziwne, ale nie mogę uruchomić zapory windows firewall...

[ Dodano: Dzisiaj o 5:55 ]
odświeżam

[ Dodano: Dzisiaj o 14:34 ]
odświeżam

**Posty:** 18165 · przez **wojtas** 23 Gru 2007, 15:34

daj pelen log z combofixa ten jest uciety

**Posty:** 57 · przez **Inik** 23 Gru 2007, 17:14

Kod: Zaznacz wszystko: "x" - 2007-12-23 16:10:42 Dodatek Service Pack 2 ComboFix 07-05.27.V - Running from: "C:\Documents and Settings\x\Moje dokumenty\Programy\" ((((((((((((((((((((((((((((((( Files Created from 2007-11-23 to 2007-12-23 )))))))))))))))))))))))))))))))))) 2007-12-23 10:16 <DIR> d-------- C:\Program Files\Game Graphic Studio 2007-12-23 09:31 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\ESET 2007-12-23 06:56 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\InstallShield 2007-12-23 06:40 <DIR> d-------- C:\DOCUME~1\x\DANEAP~1\InstallShield 2007-12-23 05:26 <DIR> d-------- C:\WINDOWS\system32\PreInstall 2007-12-22 19:05 <DIR> d-------- C:\WINDOWS\ERUNT 2007-12-22 17:41 43,352 --a------ C:\WINDOWS\system32\wups2.dll 2007-12-22 17:40 <DIR> d-------- C:\WINDOWS\system32\SoftwareDistribution 2007-12-22 17:37 <DIR> dr------- C:\DOCUME~1\LOCALS~1\Ulubione 2007-12-22 17:37 <DIR> d-------- C:\DOCUME~1\LOCALS~1\DANEAP~1\Talkback 2007-12-22 16:07 626,688 --a------ C:\WINDOWS\system32\msvcr80.dll 2007-12-22 16:07 <DIR> d-------- C:\Program Files\Common Files\Download Manager 2007-12-22 12:37 32,768 --a------ C:\WINDOWS\system32\UnAudioNT.dll 2007-12-22 12:37 <DIR> d-------- C:\Program Files\VIA Technologies, Inc 2007-12-22 12:36 73,856 --a------ C:\WINDOWS\system32\drivers\viaudio.sys 2007-12-22 10:15 <DIR> d-------- C:\Program Files\Kurka Wodna 3 2007-12-22 08:58 <DIR> d-------- C:\Program Files\AvRack 2007-12-22 08:58 <DIR> d-------- C:\Program Files\Avance Sound Manager 2007-12-21 06:15 <DIR> d-------- C:\Program Files\Deluxe Ski Jump 3 2007-12-16 17:05 101,376 --a------ C:\WINDOWS\system32\drivers\ACEDRV07.sys 2007-12-09 13:04 22,328 --a------ C:\DOCUME~1\x\DANEAP~1\PnkBstrK.sys 2007-12-09 13:03 669,184 --a------ C:\WINDOWS\system32\pbsvc.exe 2007-12-09 10:59 50,688 --a------ C:\WINDOWS\system32\wbhelp2.dll 2007-12-09 10:59 <DIR> d-a------ C:\DOCUME~1\ALLUSE~1\DANEAP~1\TEMP 2007-12-08 13:28 <DIR> d-------- C:\Documents and Settings\x\.thumbnails 2007-12-08 13:28 <DIR> d-------- C:\DOCUME~1\x\DANEAP~1\gtk-2.0 2007-12-08 13:28 <DIR> d-------- C:\DOCUME~1\x\.thumbnails 2007-12-08 13:23 <DIR> d-------- C:\Documents and Settings\x\.gimp-2.4 2007-12-08 13:23 <DIR> d-------- C:\DOCUME~1\x\.gimp-2.4 2007-12-08 13:22 <DIR> d-------- C:\Program Files\GIMP-2.0 2007-12-04 17:05 <DIR> d-------- C:\cda 2007-11-27 15:27 <DIR> d-------- C:\Program Files\WUUP! (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-12-23 11:56:22 -------- d--h--w C:\Program Files\InstallShield Installation Information 2007-12-23 05:57:09 -------- d--h--r C:\DOCUME~1\x\DANEAP~1\SecuROM 2007-12-23 05:44:50 -------- d-----w C:\Program Files\Common Files\InstallShield 2007-12-22 17:43:24 75,486 ----a-w C:\WINDOWS\system32\perfc015.dat 2007-12-22 17:43:24 451,220 ----a-w C:\WINDOWS\system32\perfh015.dat 2007-12-22 17:25:44 -------- d-----w C:\Program Files\Opera 2007-12-09 12:04:04 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys 2007-12-09 12:03:57 103,736 ----a-w C:\WINDOWS\system32\PnkBstrB.exe 2007-12-09 12:03:52 66,872 ----a-w C:\WINDOWS\system32\PnkBstrA.exe 2007-12-04 14:56:02 93,264 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys 2007-12-04 14:55:46 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys 2007-12-04 14:53:39 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys 2007-12-04 14:51:52 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys 2007-12-04 14:49:02 26,624 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys 2007-12-04 13:04:28 837,496 ----a-w C:\WINDOWS\system32\aswBoot.exe 2007-12-04 12:54:04 95,608 ----a-w C:\WINDOWS\system32\AVASTSS.scr 2007-11-30 19:12:48 -------- d-----w C:\Program Files\SopCast 2007-11-27 09:05:00 -------- d-----w C:\DOCUME~1\x\DANEAP~1\SopCast 2007-11-16 14:28:13 -------- d-----w C:\DOCUME~1\x\DANEAP~1\Orbit 2007-11-11 13:16:23 -------- d-----w C:\Program Files\UltimateZip 2007 2007-11-11 09:14:54 -------- d-----w C:\DOCUME~1\x\DANEAP~1\Sports Interactive 2007-11-11 09:11:14 -------- d--h--w C:\Program Files\Zero G Registry 2007-11-07 07:35:58 -------- d-----w C:\Program Files\Alcohol Soft 2007-11-07 07:24:15 1,405 ----a-w C:\WINDOWS\mozver.dat 2007-11-05 12:03:56 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-11-04 17:04:47 -------- d-----w C:\DOCUME~1\x\DANEAP~1\Hamachi 2007-11-02 11:41:12 -------- d-----w C:\Program Files\IrfanView 2007-10-28 13:18:22 -------- d-----w C:\Program Files\FlashGet 2007-10-24 15:00:03 -------- d-----w C:\Program Files\SkanerOnline (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {AA58ED58-01DD-4d91-8333-CF10577473F7}=c:\program files\google\googletoolbar1.dll [2007-05-05 17:20] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D}=C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll [2007-07-07 16:01] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 19:24] "SoundMan"="SOUNDMAN.EXE" [] "nwiz"="nwiz.exe" [2006-10-22 11:22 C:\WINDOWS\system32\nwiz.exe] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe" [2005-08-26 17:14] "ISUSPM"="C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" [] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 23:44] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-07 16:01] "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2007-08-29 16:09] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Orbit.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Orbit.lnk backup=C:\WINDOWS\pss\Orbit.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EdHTML] C:\Program Files\Binboy\EdHTMLv5.0\EdHTML.exe /none [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] C:\Program Files\Winamp\winampa.exe ******************************************************************** catchme 0.3.681 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-23 16:12:34 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ******************************************************************** Completion time: 2007-12-23 16:13:41 C:\ComboFix2.txt ... 2007-12-23 14:39 C:\ComboFix3.txt ... 2007-12-22 19:18 --- E O F ---

**Posty:** 18165 · przez **wojtas** 23 Gru 2007, 17:16

czysto

**Posty:** 57 · przez **Inik** 23 Gru 2007, 17:22

no a co z tym dźwiękiem? i z plikiem svchost.exe?

**Posty:** 18165 · przez **wojtas** 23 Gru 2007, 17:34

uzyj moze przywracania systemu

start>programy>akcesoria>narzedzia systemowe> przywracanie systemu

**Posty:** 57 · przez **Inik** 30 Gru 2007, 22:58

a inny sposób?

**Posty:** 18165 · przez **wojtas** 30 Gru 2007, 23:10

wejdz do konsoli odzyskiwania

W linii komend wpisz polecenie:

expand X:\i386\svchost.ex_ C:\Windows\system32\svchost.exe

X- litera napędu z płytką windowsaa

proszę o sprawdzenie loga.

proszę o sprawdzenie loga.

Kto jest na forum