proszę o sprawdzenie loga

[DjAnarbes]

Mam problem z pisaniem a mianowicie jak pisze to niepokazuja mi sie odrazu litery tylko po jakims czasie roznica moze 2 sek. wtedy pokazuje sie caly wyraz
oto log:

Kod: Zaznacz wszystko

Logfile of HijackThis v1.99.1
Scan saved at 13:23:24, on 2007-06-21
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\windows\System32\smss.exe
C:\windows\SYSTEM32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\System32\Ati2evxx.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\windows\SYSTEM32\Ati2evxx.exe
C:\windows\Explorer.EXE
C:\windows\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\QuickTime\qttask.exe
C:\windows\System32\atiptaxx.exe
C:\Program Files\Ad Muncher\AdMunch.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\windows\System32\ctfmon.exe
C:\Program Files\Radeon Omega Drivers\v3.8.360\ATI Tray Tools\atitray.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Administrator\Pulpit\hijackthis_199\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [LClock] C:\Program Files\LClock\LClock.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [Ad Muncher] C:\Program Files\Ad Muncher\AdMunch.exe /bt
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\System32\ctfmon.exe
O4 - HKCU\..\Run: [AtiTrayTools] "C:\Program Files\Radeon Omega Drivers\v3.8.360\ATI Tray Tools\atitray.exe"
O8 - Extra context menu item: Block frame with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=0.4&pass=2VQ43I10&id=menu_ie_frame
O8 - Extra context menu item: Block image with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=0.4&pass=2VQ43I10&id=menu_ie_image
O8 - Extra context menu item: Block link with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=0.4&pass=2VQ43I10&id=menu_ie_link
O8 - Extra context menu item: Don't filter page with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=0.4&pass=2VQ43I10&id=menu_ie_exclude
O8 - Extra context menu item: Report page to the Ad Muncher developers - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=0.4&pass=2VQ43I10&id=menu_ie_report
O17 - HKLM\System\CCS\Services\Tcpip\..\{42775A59-A229-466E-AD48-5FF538CDCA51}: NameServer = 213.227.75.1,213.227.72.1,213.77.21.150
O17 - HKLM\System\CCS\Services\Tcpip\..\{ED36C144-A3BA-4FE9-A8C9-3050FB520AE7}: NameServer = 213.227.75.1,213.227.72.1,213.77.21.150
O17 - HKLM\System\CS1\Services\Tcpip\..\{42775A59-A229-466E-AD48-5FF538CDCA51}: NameServer = 213.227.75.1,213.227.72.1,213.77.21.150
O17 - HKLM\System\CS2\Services\Tcpip\..\{42775A59-A229-466E-AD48-5FF538CDCA51}: NameServer = 213.227.75.1,213.227.72.1,213.77.21.150
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\windows\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe


[wojtas]

log ok zrob defragmentacje dysku

[DjAnarbes]

aha mam pytanie bo avast znajduje mi robaki wczoraj 1 znalazl mi w pamieci jak robil skan podczas uruchamiania robaki to win32:banwarum i win32 vb-cd
narazie dalem kawrantanne naprawic sie nieda a niewiem czy wywalic bo to w systemie siedzi chyba











Ok. zrobilem defragmentacje dysku ale nadal to samo

[wojtas]

daj loga z:

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

[DjAnarbes]

oto on:

Kod: Zaznacz wszystko

ComboFix 07-06-21.3
"Administrator" - 2007-06-21 16:19:47   NTFS 


(((((((((((((((((((((((((   Files Created from 2007-05-21 to 2007-06-21  )))))))))))))))))))))))))))))))


2007-06-21 16:19   49,152   --a------   C:\WINDOWS\nircmd.exe
2007-06-21 15:51   <DIR>   d--------   C:\Program Files\CAPCOM
2007-06-20 22:36   95,872   --a------   C:\WINDOWS\system32\AvastSS.scr
2007-06-20 22:36   94,552   --a------   C:\WINDOWS\system32\drivers\aswmon2.sys
2007-06-20 22:36   85,952   --a------   C:\WINDOWS\system32\drivers\aswmon.sys
2007-06-20 22:36   745,600   --a------   C:\WINDOWS\system32\aswBoot.exe
2007-06-20 22:36   499,712   --a------   C:\WINDOWS\system32\MSVCP71.dll
2007-06-20 22:36   43,176   --a------   C:\WINDOWS\system32\drivers\aswTdi.sys
2007-06-20 22:36   348,160   --a------   C:\WINDOWS\system32\MSVCR71.dll
2007-06-20 22:36   26,888   --a------   C:\WINDOWS\system32\drivers\aavmker4.sys
2007-06-20 22:36   23,416   --a------   C:\WINDOWS\system32\drivers\aswRdr.sys
2007-06-20 22:36   1,060,864   --a------   C:\WINDOWS\system32\MFC71.dll
2007-06-20 22:36   <DIR>   d--------   C:\Program Files\Alwil Software
2007-06-20 22:20   <DIR>   d--------   C:\Program Files\Ad Muncher
2007-06-20 22:08   <DIR>   d--------   C:\Program Files\NetMeter
2007-06-20 21:34   684,248   -ra------   C:\WINDOWS\system32\drivers\cfosspeed.sys
2007-06-20 21:29   281,816   --a------   C:\WINDOWS\system32\cfosspeed.dll
2007-06-20 21:29   <DIR>   d--------   C:\Program Files\cFosSpeed
2007-06-20 11:43   <DIR>   d--------   C:\Program Files\VID_0E8F&PID_0003
2007-06-19 21:10   <DIR>   d--------   C:\Program Files\Samurize
2007-06-18 19:28   13,147   --a------   C:\WINDOWS\system32\delrad.exe
2007-06-18 17:51   <DIR>   d--hs----   C:\WINDOWS\ftpcache
2007-06-17 17:04   <DIR>   d--------   C:\Program Files\Common Files\DirectX
2007-06-17 13:06   <DIR>   d--------   C:\Program Files\MadOnion.com
2007-06-17 12:24   <DIR>   d--------   C:\DOCUME~1\ADMINI~1\DANEAP~1\atitray
2007-06-17 12:22   516,096   ---------   C:\WINDOWS\system32\ati2sgag.exe
2007-06-17 12:20   451,072   --a------   C:\WINDOWS\Radeon Omega Drivers v3.8.360 Uninstall.exe
2007-06-17 12:20   <DIR>   d--------   C:\Program Files\Radeon Omega Drivers
2007-06-17 12:20   <DIR>   d--------   C:\Program Files\MultiRes
2007-06-17 11:29   <DIR>   d--------   C:\DOCUME~1\ADMINI~1\DANEAP~1\ATI
2007-06-16 18:53   <DIR>   d--------   C:\Program Files\RivaTuner v2.01
2007-06-16 17:51   86,016   --a------   C:\WINDOWS\system32\OpenAL32.dll
2007-06-16 17:51   5,632   --a------   C:\WINDOWS\system32\drivers\Entech64.sys
2007-06-16 17:51   3,972   --a------   C:\WINDOWS\system32\drivers\PciBus.sys
2007-06-16 17:51   262,144   --a------   C:\WINDOWS\system32\wrap_oal.dll
2007-06-16 17:51   21,664   --a------   C:\WINDOWS\system32\drivers\Entech.sys
2007-06-16 17:51   <DIR>   d--------   C:\WINDOWS\system32\Futuremark
2007-06-16 17:49   <DIR>   d--------   C:\Program Files\Futuremark
2007-06-16 14:16   <DIR>   d--------   C:\Program Files\jv16 PowerTools
2007-06-16 13:57   23   --ahs----   C:\WINDOWS\system32\dcdbcb4_r.dll
2007-06-16 13:14   <DIR>   d--------   C:\WINDOWS\pss
2007-06-16 13:05   <DIR>   d--------   C:\Program Files\Winamp
2007-06-16 12:50   81,768   --a------   C:\WINDOWS\system32\xinput1_3.dll
2007-06-16 12:50   62,744   --a------   C:\WINDOWS\system32\xinput1_2.dll
2007-06-16 12:50   443,752   --a------   C:\WINDOWS\system32\d3dx10_33.dll
2007-06-16 12:50   3,495,784   --a------   C:\WINDOWS\system32\d3dx9_33.dll
2007-06-16 12:50   3,426,072   --a------   C:\WINDOWS\system32\d3dx9_32.dll
2007-06-16 12:50   261,480   --a------   C:\WINDOWS\system32\xactengine2_7.dll
2007-06-16 12:50   255,848   --a------   C:\WINDOWS\system32\xactengine2_6.dll
2007-06-16 12:50   251,672   --a------   C:\WINDOWS\system32\xactengine2_5.dll
2007-06-16 12:50   237,848   --a------   C:\WINDOWS\system32\xactengine2_4.dll
2007-06-16 12:50   236,824   --a------   C:\WINDOWS\system32\xactengine2_3.dll
2007-06-16 12:50   2,414,360   --a------   C:\WINDOWS\system32\d3dx9_31.dll
2007-06-16 12:50   15,128   --a------   C:\WINDOWS\system32\x3daudio1_1.dll
2007-06-16 12:50   1,123,696   --a------   C:\WINDOWS\system32\D3DCompiler_33.dll
2007-06-16 12:49   2,297,552   --a------   C:\WINDOWS\system32\d3dx9_26.dll
2007-06-16 12:49   <DIR>   d--------   C:\WINDOWS\LastGood
2007-06-16 12:40   <DIR>   d--------   C:\DOCUME~1\ADMINI~1\DANEAP~1\Help
2007-06-16 10:06   <DIR>   d--------   C:\Program Files\thriXXX
2007-06-15 19:54   <DIR>   d--------   C:\Program Files\QuickTime
2007-06-15 19:54   <DIR>   d--------   C:\Program Files\iTunes
2007-06-15 19:54   <DIR>   d--------   C:\Program Files\iPod
2007-06-15 19:54   <DIR>   d--------   C:\DOCUME~1\ADMINI~1\DANEAP~1\Apple Computer
2007-06-15 19:53   <DIR>   d--------   C:\DOCUME~1\ALLUSE~1\DANEAP~1\Apple Computer
2007-06-15 19:15   <DIR>   d--------   C:\DOCUME~1\ADMINI~1\.musikproject
2007-06-14 17:44   <DIR>   d--------   C:\WINDOWS\LastGood.Tmp
2007-06-14 12:10   43,776   -ra------   C:\WINDOWS\system32\drivers\viaudio.sys
2007-06-14 12:10   32,768   --a------   C:\WINDOWS\system32\UnAudioNT.dll
2007-06-13 20:34   <DIR>   d--------   C:\Program Files\Odkurzacz
2007-06-13 19:49   <DIR>   d--------   C:\Program Files\EA SPORTS
2007-06-13 19:26   1,156   --a------   C:\WINDOWS\mozver.dat
2007-06-13 19:17   23,600   --a------   C:\WINDOWS\system32\drivers\TVICHW32.SYS
2007-06-13 18:39   <DIR>   d--------   C:\DOCUME~1\ALLUSE~1\DANEAP~1\Test Drive Unlimited
2007-06-13 18:10   <DIR>   d--------   C:\Program Files\Atari
2007-06-12 21:19   <DIR>   d--------   C:\DOCUME~1\ADMINI~1\DANEAP~1\Locktime
2007-06-12 21:16   <DIR>   d--------   C:\DOCUME~1\ALLUSE~1\DANEAP~1\Locktime
2007-06-12 16:26   98,816   --a------   C:\WINDOWS\system32\dmstyle.dll
2007-06-12 16:26   974,848   --a------   C:\WINDOWS\system32\dxdiag.exe
2007-06-12 16:26   83,968   --a------   C:\WINDOWS\system32\drivers\nabtsfec.sys
2007-06-12 16:26   8,192   --a------   C:\WINDOWS\system32\d3d8thk.dll
2007-06-12 16:26   797,184   --a------   C:\WINDOWS\system32\d3dim700.dll
2007-06-12 16:26   79,360   --a------   C:\WINDOWS\system32\dpwsockx.dll
2007-06-12 16:26   77,824   --a------   C:\WINDOWS\system32\dpmodemx.dll
2007-06-12 16:26   76,800   --a------   C:\WINDOWS\system32\dmscript.dll
2007-06-12 16:26   733,184   --a------   C:\WINDOWS\system32\qedwipes.dll
2007-06-12 16:26   723,968   --a------   C:\WINDOWS\system32\dpnet.dll
2007-06-12 16:26   7,424   --a------   C:\WINDOWS\system32\drivers\mskssrv.sys
2007-06-12 16:26   68,096   --a------   C:\WINDOWS\system32\dpnhupnp.dll
2007-06-12 16:26   667,648   --a------   C:\WINDOWS\system32\dinput8.dll
2007-06-12 16:26   648,704   --a------   C:\WINDOWS\system32\dinput.dll
2007-06-12 16:26   64,512   --a------   C:\WINDOWS\system32\amstream.dll
2007-06-12 16:26   602,624   --a------   C:\WINDOWS\system32\dx7vb.dll
2007-06-12 16:26   58,368   --a------   C:\WINDOWS\system32\dmcompos.dll
2007-06-12 16:26   52,096   --a------   C:\WINDOWS\system32\drivers\msdv.sys
2007-06-12 16:26   5,504   --a------   C:\WINDOWS\system32\drivers\mstee.sys
2007-06-12 16:26   5,248   --a------   C:\WINDOWS\system32\drivers\mspclock.sys
2007-06-12 16:26   491,520   --a------   C:\WINDOWS\system32\dsdmoprp.dll
2007-06-12 16:26   48,512   --a------   C:\WINDOWS\system32\drivers\stream.sys
2007-06-12 16:26   470,528   --a------   C:\WINDOWS\system32\qdvd.dll
2007-06-12 16:26   47,104   --a------   C:\WINDOWS\system32\wstdecod.dll


((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-06-19 08:44:30   1,986,560   ----a-w   C:\windows\system32\drivers\ati2mtag.sys
2007-06-17 09:33:50   74,450   ----a-w   C:\windows\system32\perfc015.dat
2007-06-17 09:33:50   448,348   ----a-w   C:\windows\system32\perfh015.dat
2007-06-11 19:47:13   --------   d-----w   C:\Program Files\Usługi online


(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LClock"="C:\Program Files\LClock\LClock.exe" []
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-04-27 09:41]
"AtiPTA"="atiptaxx.exe" [2006-02-22 02:05 C:\WINDOWS\system32\atiptaxx.exe]
"Ad Muncher"="C:\Program Files\Ad Muncher\AdMunch.exe" [2007-06-20 22:20]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-04-30 17:42]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\windows\System32\ctfmon.exe" [2001-10-26 19:29]
"AtiTrayTools"="C:\Program Files\Radeon Omega Drivers\v3.8.360\ATI Tray Tools\atitray.exe" [2007-05-22 11:04]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:\Program Files]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:\Program Files\NetMeter]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:\Program Files\NetMeter\NetMeter.exe]
C:\Program Files\NetMeter\NetMeter.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
"C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadu-Gadu]
"D:\Program Files\Gadu-Gadu\gg.exe" /tray

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
"C:\Program Files\iTunes\iTunesHelper.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
"C:\Program Files\Messenger\msmsgs.exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
C:\Program Files\Winamp\winampa.exe


**************************************************************************

catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-06-21 16:20:30
Windows 5.1.2600  NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-06-21 16:20:57

   --- E O F ---


[wojtas]

log czysty tez

[DjAnarbes]

to moze to od karty graficznej radeon 9600 pro?? krecona troche ale na zwyklych ustawieniach to samo

[wojtas]

nie sadze zeby od karty...moze cos w procesach siedzi co zabiera duzo procka

[DjAnarbes]

firefox.exe mi zere 95% uzycia procka podczas pisania moze to on ???

[wojtas]

przeinstaluj firefoxa

Autor postu otrzymał pochwałę

[DjAnarbes]

dalej to samo zere jak pisze od 90-100% procka heh









ok.juz pozbylem sie tego problemu poprzez zainstalowanie opery a wywalenie firefoxa teraz bierze od ok1-20% to chyba dobrzedzieki za pomoc wojtas 19162 oczywiscie pochwale otrzymujesz pozdro.