Reset kompa prosze o sprawdzenie loga

**Posty:** 2 · przez **Samix** 05 Sie 2008, 04:12

Witam mój problem polega na tym że gdy przykładowo ma uruchomione aplikacje steam , CS , gg teamspeak lub Ventrilo komp sie resetuje nieraz nawet po ponownym uruchomieniu wyskakuje komunikat ze wystąpił błąd czy go wysłać cy nie (ale to czasem) wiec jak była by możliwość sprawdzenia mojego loga z góry thx a jeżeli niebawem wyskoczy mi błąd to dam edita posta i napisze ścieżkę plików

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 04:06:39, on 2008-08-05 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\FTRTSVC.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\Explorer.EXE C:\Program Files\XpertVision\TBPanel.exe C:\WINDOWS\system32\RunDLL32.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\rundll32.exe C:\Program Files\Winamp\winampa.exe C:\WINDOWS\system32\wscntfy.exe C:\PROGRA~1\NEOSTR~1\TaskBarIcon.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Gadu-Gadu\gg.exe C:\program files\valve\steam\steam.exe C:\Program Files\DAEMON Tools Lite\daemon.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe C:\Program Files\neostrada tp\neostradatp.exe C:\Program Files\neostrada tp\ComComp.exe C:\PROGRA~1\NEOSTR~1\Toaster.exe C:\PROGRA~1\NEOSTR~1\Inactivity.exe C:\PROGRA~1\NEOSTR~1\PollingModule.exe C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE C:\Program Files\neostrada tp\Watch.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Winamp\winamp.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.garena.com/portal/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = neostrada tp R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll O4 - HKLM\..\Run: [Gainward] C:\Program Files\XpertVision\TBPanel.exe /A O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\GestMaj.exe TaskBarIcon.exe O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [Steam] "c:\program files\valve\steam\steam.exe" -silent O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSync2.exe" /NoDialog O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{F2A485AB-52CA-427B-8DFB-732B031976EA}: NameServer = 194.204.159.1 217.98.63.164 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- End of file - 5585 bytes

Combo Fix

Kod: Zaznacz wszystko: ComboFix 08-08-04.01 - Kuba 2008-08-05 8:20:58.1 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.2.1250.1.1045.18.387 [GMT 2:00] Running from: C:\Documents and Settings\Kuba\Pulpit\ComboFix.exe * Created a new restore point [color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color] . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Program Files\myglobalsearch C:\Program Files\myglobalsearch\bar\1.bin\M9FFXTBR.JAR C:\Program Files\myglobalsearch\bar\1.bin\M9FFXTBR.MANIFEST C:\Program Files\myglobalsearch\bar\1.bin\M9NTSTBR.JAR C:\Program Files\myglobalsearch\bar\1.bin\M9NTSTBR.MANIFEST C:\Program Files\myglobalsearch\bar\1.bin\M9PLUGIN.DLL C:\Program Files\myglobalsearch\bar\1.bin\MGSBAR.DLL C:\Program Files\myglobalsearch\bar\1.bin\NPMYGLSH.DLL C:\Program Files\myglobalsearch\bar\Cache\[u]0[/u]004B5EE C:\Program Files\myglobalsearch\bar\Cache\[u]0[/u]045C1E9.bin C:\Program Files\myglobalsearch\bar\Cache\[u]0[/u]045C8FD.bin C:\Program Files\myglobalsearch\bar\Cache\[u]0[/u]045CD04.bin C:\Program Files\myglobalsearch\bar\Cache\files.ini C:\Program Files\myglobalsearch\bar\History\search C:\Program Files\myglobalsearch\bar\Settings\prevcfg.htm C:\WINDOWS\system32\setup.ini . ((((((((((((((((((((((((( Files Created from 2008-07-05 to 2008-08-05 ))))))))))))))))))))))))))))))) . 2008-08-05 03:34 . 2008-08-05 03:34 <DIR> d-------- C:\Program Files\Trend Micro 2008-08-04 08:25 . 2008-08-04 08:25 <DIR> d-------- C:\Program Files\Headshot Player 2008-07-29 20:20 . 2008-07-29 20:20 <DIR> d-------- C:\Program Files\WoW-FE 2008-07-28 00:47 . 2008-07-28 00:47 <DIR> d-------- C:\Program Files\PowerISO 2008-07-28 00:23 . 2008-07-28 00:23 <DIR> d-------- C:\Logs 2008-07-28 00:03 . 2008-07-30 22:36 <DIR> d-------- C:\Program Files\Common Files\Blizzard Entertainment 2008-07-27 19:09 . 2008-07-27 19:09 <DIR> d--hs---- C:\Documents and Settings\Kuba\Phone Browser 2008-07-27 03:32 . 2008-07-27 03:32 <DIR> d-------- C:\Documents and Settings\Kuba\Dane aplikacji\BESTplayer 2008-07-27 03:00 . 2008-07-27 03:03 <DIR> d-------- C:\Program Files\uTorrent 2008-07-27 03:00 . 2008-07-27 03:08 <DIR> d-------- C:\Documents and Settings\Kuba\Dane aplikacji\uTorrent 2008-07-25 16:27 . 2008-07-25 16:27 <DIR> d-------- C:\Documents and Settings\Kuba\Dane aplikacji\dBpoweramp 2008-07-25 00:21 . 2008-07-25 01:33 <DIR> d-------- C:\Program Files\Metin2_PL 2008-07-24 03:58 . 2008-07-24 03:58 <DIR> d-------- C:\Program Files\Selteco 2008-07-21 18:29 . 2008-07-21 18:29 <DIR> d-------- C:\Program Files\Audacity 2008-07-21 14:57 . 2008-07-24 15:54 754 --a------ C:\WINDOWS\WORDPAD.INI 2008-07-19 04:30 . 2008-07-24 02:13 <DIR> d-------- C:\Program Files\Garena 2008-07-19 04:30 . 2008-07-19 04:30 <DIR> d-------- C:\Documents and Settings\Kuba\Dane aplikacji\InstallShield 2008-07-18 11:52 . 2008-07-18 11:52 <DIR> d-------- C:\Program Files\DAEMON Tools Toolbar 2008-07-18 11:51 . 2008-07-18 11:52 <DIR> d-------- C:\Program Files\DAEMON Tools Lite 2008-07-18 01:55 . 2008-07-18 01:55 <DIR> d-------- C:\Documents and Settings\Kuba\Dane aplikacji\DAEMON Tools 2008-07-18 01:55 . 2008-07-18 01:55 717,296 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2008-07-12 12:56 . 2008-07-12 12:56 <DIR> d-------- C:\Program Files\FDRLab 2008-07-10 16:24 . 2008-07-10 16:24 <DIR> d-------- C:\Program Files\BearShare 2008-07-10 16:24 . 2008-07-10 16:24 <DIR> d-------- C:\My Downloads 2008-07-08 14:43 . 2008-07-28 03:23 <DIR> d-------- C:\Program Files\Tibia 8.11 2008-07-08 13:31 . 2008-07-08 13:31 <DIR> d-------- C:\Program Files\ffdshow 2008-07-08 13:31 . 2008-07-08 13:31 <DIR> d-------- C:\Program Files\DirectShow Pack 2008-07-08 13:29 . 2008-07-08 13:32 <DIR> d-------- C:\Program Files\Lonely Cat Games 2008-07-08 12:28 . 2004-08-03 23:08 25,600 --a------ C:\WINDOWS\system32\drivers\usbser.sys 2008-07-08 12:28 . 2004-08-03 23:08 25,600 --a--c--- C:\WINDOWS\system32\dllcache\usbser.sys 2008-07-08 12:27 . 2008-07-08 12:27 0 --ah----- C:\WINDOWS\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf 2008-07-08 12:27 . 2008-07-08 12:27 0 --ah----- C:\WINDOWS\system32\drivers\Msft_Kernel_ccdcmb_01005.Wdf 2008-07-08 12:26 . 2008-07-08 12:26 <DIR> d-------- C:\Program Files\DIFX 2008-07-08 12:26 . 2008-07-08 12:26 <DIR> d-------- C:\Program Files\Common Files\PCSuite 2008-07-08 12:26 . 2008-07-08 12:26 <DIR> d-------- C:\Program Files\Common Files\Nokia 2008-07-08 12:26 . 2008-07-08 12:28 <DIR> d-------- C:\Documents and Settings\Kuba\Dane aplikacji\PC Suite 2008-07-08 12:26 . 2008-07-27 19:20 <DIR> d-------- C:\Documents and Settings\Kuba\Dane aplikacji\Nokia 2008-07-08 12:26 . 2008-07-08 12:26 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite 2008-07-08 12:26 . 2007-09-17 15:53 21,632 --a------ C:\WINDOWS\system32\drivers\pccsmcfd.sys 2008-07-08 12:25 . 2008-07-08 12:26 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE 2008-07-08 12:25 . 2008-07-08 12:25 <DIR> d-------- C:\Program Files\PC Connectivity Solution 2008-07-08 12:25 . 2008-07-08 12:26 <DIR> d-------- C:\Program Files\Nokia 2008-07-08 12:25 . 2007-11-29 10:33 1,419,232 --a------ C:\WINDOWS\system32\wdfcoinstaller01005.dll 2008-07-08 12:25 . 2007-11-29 10:39 95,744 --a------ C:\WINDOWS\system32\nmwcdcocls.dll 2008-07-08 12:25 . 2007-11-29 10:32 48,128 --a------ C:\WINDOWS\system32\nmwcdcls.dll 2008-07-08 12:25 . 2007-11-29 10:39 19,328 --a------ C:\WINDOWS\system32\drivers\ccdcmbo.sys 2008-07-08 12:25 . 2007-11-29 10:39 16,896 --a------ C:\WINDOWS\system32\drivers\ccdcmb.sys 2008-07-08 12:25 . 2007-11-29 10:39 8,064 --a------ C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys 2008-07-08 12:25 . 2007-11-29 10:39 8,064 --a------ C:\WINDOWS\system32\drivers\usbser_lowerflt.sys 2008-07-08 12:24 . 2008-07-08 12:24 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Installations 2008-07-07 09:40 . 2008-07-07 09:40 56,108 --a------ C:\WINDOWS\system32\drivers\scdemu.sys 2008-07-06 11:52 . 2008-07-06 11:52 1,154 --a------ C:\WINDOWS\bestplayer.ini 2008-07-06 11:52 . 2008-07-06 11:52 52 --a------ C:\WINDOWS\bestplayer.bpp 2008-07-06 11:52 . 2008-07-06 11:52 0 --a------ C:\WINDOWS\bestplayer.bbt . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-08-05 06:24 --------- d-----w C:\Program Files\neostrada tp 2008-08-04 22:57 --------- d-----w C:\Documents and Settings\Kuba\Dane aplikacji\teamspeak2 2008-08-01 20:47 --------- d-----w C:\Documents and Settings\Kuba\Dane aplikacji\Tibia 2008-07-24 23:17 --------- d-----w C:\Documents and Settings\Kuba\Dane aplikacji\Skype 2008-07-24 22:51 --------- d-----w C:\Documents and Settings\Kuba\Dane aplikacji\skypePM 2008-07-21 03:09 --------- d-----w C:\Program Files\BitComet 2008-07-19 12:18 --------- d-----w C:\Program Files\Valve 2008-07-19 02:30 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-07-14 12:00 --------- d-----w C:\Program Files\Tibia 2008-07-08 21:51 --------- d-----w C:\Program Files\Gadu-Gadu 2008-07-05 10:21 --------- d-----w C:\Program Files\TibiaBot NG 2008-07-03 17:11 --------- d-----w C:\Program Files\Tibia 8.10 2008-07-02 01:36 32 ----a-w C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat 2008-07-02 01:33 --------- d-----w C:\Program Files\Skype 2008-07-02 01:33 --------- d-----w C:\Program Files\Common Files\Skype 2008-07-02 01:33 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Skype 2008-06-30 18:28 --------- d-----w C:\Program Files\TechSmith 2008-06-30 18:28 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\TechSmith 2008-06-30 18:27 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard 2008-06-29 14:37 --------- d-----w C:\Program Files\NCH Software 2008-06-29 14:35 --------- d-----w C:\Program Files\NCH Swift Sound 2008-06-29 14:35 --------- d-----w C:\Documents and Settings\Kuba\Dane aplikacji\NCH Swift Sound 2008-06-29 14:35 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\NCH Swift Sound 2008-06-29 14:08 --------- d-----w C:\Program Files\Illustrate 2008-06-29 14:08 --------- d-----w C:\Documents and Settings\Kuba\Dane aplikacji\AccurateRip 2008-06-27 23:57 --------- d-----w C:\Program Files\Asprate 2008-06-27 23:04 --------- d-----w C:\Program Files\Common Files\Adobe 2008-06-27 23:00 --------- d-----w C:\Program Files\Common Files\Adobe Systems Shared 2008-06-27 23:00 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Adobe Systems 2008-06-26 18:24 --------- d-----w C:\Program Files\Fox Magic 2008-06-26 17:43 --------- d-----w C:\Program Files\Sony 2008-06-26 17:42 --------- d-----w C:\Program Files\Microsoft SQL Server 2008-06-26 17:41 --------- d-----w C:\Program Files\Vstplugins 2008-06-26 17:41 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Sony 2008-06-26 17:40 --------- d-----w C:\Program Files\Sony Setup 2008-06-26 03:04 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\nView_Profiles 2008-06-26 02:46 --------- d-----w C:\Program Files\Lavalys 2008-06-25 22:19 --------- d-----w C:\Documents and Settings\Kuba\Dane aplikacji\Sony 2008-06-25 22:19 --------- d-----w C:\Documents and Settings\Kuba\Dane aplikacji\Publish Providers 2008-06-25 22:19 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\TEMP 2008-06-25 17:32 --------- d-----w C:\Program Files\Reference Assemblies 2008-06-25 17:32 --------- d-----w C:\Program Files\MSBuild 2008-06-25 16:37 --------- d-----w C:\Program Files\MSXML 6.0 2008-06-25 14:52 --------- d-----w C:\Documents and Settings\Kuba\Dane aplikacji\Sony Setup 2008-06-20 18:56 --------- d-----w C:\Documents and Settings\Kuba\Dane aplikacji\Winamp 2008-06-20 18:55 --------- d-----w C:\Program Files\Winamp 2008-06-20 18:50 --------- d-----w C:\Program Files\Rockstar Games 2008-06-20 18:50 --------- d-----w C:\Documents and Settings\Kuba\Dane aplikacji\Ventrilo 2008-06-20 18:49 --------- d-----w C:\Program Files\Ventrilo Mix 2008-06-20 18:37 --------- d-----w C:\Program Files\ZTE ZXDSL 852 2008-06-20 18:37 --------- d-----w C:\Program Files\Java 2008-06-20 18:34 --------- d-----w C:\Documents and Settings\Kuba\Dane aplikacji\InterTrust 2008-06-20 18:33 --------- d-----w C:\Program Files\Ahead 2008-06-20 18:32 --------- d-----w C:\Program Files\CyberLink DVD Solution 2008-06-20 18:32 --------- d-----w C:\Program Files\Common Files\InstallShield 2008-06-20 18:32 --------- d-----w C:\Program Files\Common Files\Ahead 2008-06-20 18:30 --------- d-----w C:\Program Files\Teamspeak2_RC2 2008-06-20 18:29 --------- d-----w C:\Program Files\Microsoft GIF Animator 2008-06-20 18:29 --------- d-----w C:\Documents and Settings\Kuba\Dane aplikacji\Gadu-Gadu 2008-06-20 18:25 --------- d-----w C:\Program Files\Realtek 2008-06-20 18:22 --------- d-----w C:\Program Files\Intel 2008-06-20 18:19 --------- d-----w C:\Program Files\XpertVision 2008-06-20 14:41 --------- d-----w C:\Program Files\microsoft frontpage 2008-06-20 14:40 --------- d-----w C:\Program Files\Usługi online 2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys 2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys 2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys 2008-06-14 18:01 273,024 ------w C:\WINDOWS\system32\drivers\bthport.sys 2004-10-01 13:00 40,960 ----a-w C:\Program Files\Uninstall_CDS.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 14:00 15360] "Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2008-03-20 12:04 2127296] "Steam"="c:\program files\valve\steam\steam.exe" [2008-06-20 21:07 1271032] "Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PCSync2.exe" [2008-03-26 18:41 1232896] "DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-07-04 17:01 486856] "PC Suite Tray"="C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" [2008-03-28 11:20 1079296] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Gainward"="C:\Program Files\XpertVision\TBPanel.exe" [2006-08-02 14:11 2146304] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-06-01 11:22 7618560] "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648] "WOOWATCH"="C:\PROGRA~1\NEOSTR~1\Watch.exe" [2004-08-23 14:49 20480] "WOOTASKBARICON"="C:\PROGRA~1\NEOSTR~1\GestMaj.exe" [2004-10-14 16:55 32768] "WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-10-10 07:28 36352] "PWRISOVM.EXE"="C:\Program Files\PowerISO\PWRISOVM.EXE" [2008-07-07 09:34 167936] "nwiz"="nwiz.exe" [2006-06-01 11:22 1519616 C:\WINDOWS\system32\nwiz.exe] "NvMediaCenter"="NvMCTray.dll" [2006-06-01 11:22 86016 C:\WINDOWS\system32\nvmctray.dll] "RTHDCPL"="RTHDCPL.EXE" [2006-05-18 08:27 16207872 C:\WINDOWS\RTHDCPL.exe] "SkyTel"="SkyTel.EXE" [2006-05-16 12:04 2879488 C:\WINDOWS\SkyTel.exe] "AdslTaskBar"="stmctrl.dll" [2006-06-02 11:01 151552 C:\WINDOWS\system32\stmctrl.dll] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 14:00 15360] C:\Documents and Settings\Kuba\Menu Start\Programy\Autostart\ Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 19:16:50 113664] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.FMVC"= fmcodec.dll [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^SnagIt 8.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\SnagIt 8.lnk backup=C:\WINDOWS\pss\SnagIt 8.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BearShare] --a------ 2006-08-01 17:04 3313664 C:\Program Files\BearShare\BearShare.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray] --a------ 2008-03-28 11:20 1079296 C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] -ra------ 2008-02-06 18:37 21898024 C:\Program Files\Skype\Phone\Skype.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\SOULMU\\SOUL-MU.exe"= "C:\\Program Files\\Valve\\Steam\\SteamApps\\s4mix\\counter-strike\\hl.exe"= "C:\\Program Files\\Valve\\Steam\\SteamApps\\s4mix\\condition zero\\hl.exe"= "F:\\TibiCam\\TibiCAM.exe"= "C:\\Program Files\\Sony\\Vegas 7.0\\VegSrv70.exe"= "D:\\Gry\\UnrealTournament\\System\\UnrealTournament.exe"= "C:\\Program Files\\Valve\\hl.exe"= "C:\\Program Files\\Garena\\Garena.exe"= "C:\\Program Files\\BitComet\\BitComet.exe"= "C:\\totalcmd\\TOTALCMD.EXE"= "C:\\Program Files\\Gadu-Gadu\\gg.exe"= "C:\\Program Files\\Skype\\Phone\\Skype.exe"= "C:\\Program Files\\Metin2_PL\\metin2.bin"= "C:\\Program Files\\uTorrent\\uTorrent.exe"= R3 Stmatm;ATM/ADSL miniport;C:\WINDOWS\system32\DRIVERS\stmatm.sys [2003-08-12 14:51] R3 TaurusUsb;ADSL Modem USB Service;C:\WINDOWS\system32\DRIVERS\torususb.sys [2006-05-25 15:28] . - - - - ORPHANS REMOVED - - - - WebBrowser-{8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - (no file) HKCU-Run-dxlock - (no file) . ------- Supplementary Scan ------- . FireFox -: Profile - C:\Documents and Settings\Kuba\Dane aplikacji\Mozilla\Firefox\Profiles\v67tqd9z.default\ ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-08-05 08:24:20 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . ------------------------ Other Running Processes ------------------------ . C:\WINDOWS\system32\FTRTSVC.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\wdfmgr.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\NEOSTR~1\TaskBarIcon.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe C:\Program Files\neostrada tp\neostradatp.exe C:\Program Files\neostrada tp\ComComp.exe C:\PROGRA~1\NEOSTR~1\Toaster.exe C:\PROGRA~1\NEOSTR~1\Inactivity.exe C:\PROGRA~1\NEOSTR~1\PollingModule.exe C:\WINDOWS\system32\ALERTM~1\ALERTM~1.EXE C:\Program Files\Ventrilo Mix\data\Programs\Ventrilo 2.1.4.exe C:\PROGRA~1\MOZILL~1\firefox.exe . ************************************************************************** . Completion time: 2008-08-05 8:26:20 - machine was rebooted ComboFix-quarantined-files.txt 2008-08-05 06:26:17 Pre-Run: 3,082,121,216 bajtów wolnych Post-Run: 3,371,065,344 bajt˘w wolnych 259 --- E O F --- 2008-07-08 22:07:40

**Posty:** 684 · przez **djarta** 05 Sie 2008, 08:10

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL
O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL

Te w/w wpisy sfiksuj w Hijacku:
>>Hijack>>scan(Do a system scan only)>>zaznacz je >>Fix checked

Daj log z -----> ComboFix.

Dodano Dzisiaj, 08:35:
Jest prawie czysto,jest tylko wpis w rejestrze.

Wklej do notatnika taki tekst:

Kod: Zaznacz wszystko: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AdslTaskBar"=-

Z menu Notatnika >>> Plik >>> Zapisz jako >>> Ustaw rozszerzenie na: "Wszystkie pliki" >>> Zapisz jako FIX.REG>>>
plik uruchom (dwuklik i OK- zgódź się na dodanie do Rejestru).
Zrestartuj komputer.

Usuń ręcznie folder C:\Qoobox,

Usuń instalkę ComboFix z dysku.

Wykonaj optymalizację autostartu

Przeczyść komputer Ccleanerem

Wyłącz i włącz przywracanie systemu na wszystkich dyskach.Instrukcja

Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum

lub

Dr.WEB CureIt!.

Autor postu otrzymał pochwałę