Rozłączanie się gg / jabbera.

**Posty:** 2008 · przez **fibi07** 08 Paź 2008, 22:10

j/w rozłącza mi się gg w samym programie gg, jak i protokół, przez jabbera. co do częstotliwości, to różnie od 1 minuty, do xx minut. a łączy sie od 3sekund do 10minut

Kod: Zaznacz wszystko: Combo: http://www.wklej.org/hash/65dbe94d24/ HJT: http://www.wklej.org/hash/4c50d8f590/ SR: http://www.wklej.org/hash/7683584f6c/

**Posty:** 7956 · przez **Magik** 08 Paź 2008, 22:21

Ludzie, wklejajcie logi na forum w tagi 'code'...... :!:

Sprobuj w opcjach wpisac serwer

http://www.kadu.net/monitor/

przyczyny w logach w tym przypadku nie szukaj

**Posty:** 2008 · przez **fibi07** 08 Paź 2008, 22:32

ogólnie, to nie da się wpisać serwera dal gg w psi (program dla jabbera, protokół gg, który idzie przez serwer.)

Magik napisał(a):przyczyny w logach w tym przypadku nie szukaj

nie kumam.

dobra,
comba

Kod: Zaznacz wszystko: ComboFix 08-10-08.01 - Fibi 2008-10-08 21:54:06.4 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.93 [GMT 2:00] Uruchomiony z: C:\Documents and Settings\Fibi\Pulpit\ComboFix.exe * Utworzono nowy punkt przywracania * Resident AV is active [COLOR=RED][B]UWAGA - TEN KOMPUTER NIE MA ZAINSTALOWANEJ KONSOLI ODZYSKIWANIA !![/B][/COLOR] . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\Fibi\Ustawienia lokalne\Temporary Internet Files\firmware.inf C:\Documents and Settings\Fibi\Ustawienia lokalne\Temporary Internet Files\ip3picfile.temp C:\Documents and Settings\Fibi\Ustawienia lokalne\Temporary Internet Files\ip3Wmapic.temp C:\WINDOWS\IE4 Error Log.txt . ((((((((((((((((((((((((( Pliki utworzone od 2008-09-08 do 2008-10-08 ))))))))))))))))))))))))))))))) . 2008-10-06 23:06 . 2008-10-06 23:06 <DIR> d-------- C:\Program Files\Psi 2008-10-06 22:45 . 2008-10-06 22:45 <DIR> d-------- C:\Documents and Settings\Fibi\JAJC 2008-09-15 18:33 . 2008-09-15 18:42 <DIR> d-------- C:\Documents and Settings\Fibi\Dane aplikacji\Ulead Systems 2008-09-15 18:31 . 2008-09-15 18:31 <DIR> d-------- C:\Program Files\Windows Media Components 2008-09-15 18:30 . 2008-09-15 18:47 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\Ulead Systems 2008-09-09 21:12 . 2008-09-09 21:12 <DIR> d-------- C:\Logs 2008-09-09 18:44 . 2008-09-19 19:56 <DIR> d-------- C:\World of Warcraft 2008-09-09 18:44 . 2008-09-09 18:44 <DIR> d-------- C:\Program Files\Common Files\Blizzard Entertainment . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-10-08 14:17 --------- d-----w C:\Program Files\Mozilla Thunderbird 2008-10-06 21:44 --------- d-----w C:\Documents and Settings\Fibi\Dane aplikacji\foobar2000 2008-10-05 12:49 --------- d-----w C:\Documents and Settings\Fibi\Dane aplikacji\uTorrent 2008-10-04 09:58 --------- d-----w C:\Program Files\Tibia 2008-10-04 09:58 --------- d-----w C:\Documents and Settings\Fibi\Dane aplikacji\Tibia 2008-09-27 12:24 --------- d-----w C:\Documents and Settings\Fibi\Dane aplikacji\Skype 2008-09-27 11:03 --------- d-----w C:\Documents and Settings\Fibi\Dane aplikacji\skypePM 2008-09-15 16:48 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-09-09 18:19 --------- d-----w C:\Documents and Settings\Fibi\Dane aplikacji\gtk-2.0 2008-09-06 15:39 --------- d-----w C:\Program Files\Linren CD Ripper 2008-09-06 15:34 --------- d-----w C:\Program Files\NO1 CD Ripper 2008-09-06 15:22 --------- d-----w C:\Program Files\Image-Line 2008-09-06 15:22 --------- d-----w C:\Program Files\Gadu-Gadu 2008-09-06 15:19 --------- d-----w C:\Program Files\VstPlugins 2008-08-27 16:37 --------- d-----w C:\Program Files\Ipswitch 2008-08-27 16:37 --------- d-----w C:\Documents and Settings\Fibi\Dane aplikacji\Ipswitch 2008-08-27 16:37 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Ipswitch 2008-08-26 14:14 --------- d-----w C:\Program Files\Picasa2 2008-08-26 14:13 --------- d-----w C:\Program Files\Google 2008-08-12 21:43 --------- d-----w C:\Program Files\Ganymede 2008-08-12 21:40 --------- d-----w C:\Documents and Settings\Fibi\Dane aplikacji\GanymedeNet 2008-08-12 19:35 --------- d-----w C:\Program Files\Outsim 2008-07-23 15:34 219,648 ----a-w C:\WINDOWS\system32\uxtheme.dll . ------- Sigcheck ------- 2002-09-20 19:05 601600 4965c02574610e9b2d1e18d63d11a772 C:\WINDOWS\$NtServicePackUninstall$\wininet.dll 2004-08-04 00:44 803840 fa593fc36ac2ed005c1ec09a3e991ec4 C:\WINDOWS\ServicePackFiles\i386\wininet.dll 2004-08-04 00:44 803840 fa593fc36ac2ed005c1ec09a3e991ec4 C:\WINDOWS\system32\wininet.dll 2004-08-04 00:44 658944 d37dafb534ac8343d59a1b501abe852c C:\WINDOWS\VistaMizer\old\wininet.dll 2002-09-20 19:05 519168 8b6e6bb5d451f8bbc0621203b687d993 C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe 2004-08-04 00:44 544256 87d414eba254e42649f4d0a00bb653c6 C:\WINDOWS\ServicePackFiles\i386\winlogon.exe 2004-08-04 00:44 544256 87d414eba254e42649f4d0a00bb653c6 C:\WINDOWS\system32\winlogon.exe 2004-08-04 00:44 504832 0344407089b08548d4feba62bb0f32d0 C:\WINDOWS\VistaMizer\old\winlogon.exe 2002-09-20 19:18 1949184 79d262478c985e736deb38ce2224fc75 C:\WINDOWS\$NtServicePackUninstall$\ntkrnlpa.exe 2004-08-04 00:38 2315392 37e799d6050ae484152b039cc2f06e5d C:\WINDOWS\ServicePackFiles\i386\ntkrnlpa.exe 2004-08-04 00:38 2315392 37e799d6050ae484152b039cc2f06e5d C:\WINDOWS\system32\ntkrnlpa.exe 2004-08-04 00:38 2058112 44d1bc1b05e0c7c82e81687b79c653c7 C:\WINDOWS\VistaMizer\old\ntkrnlpa.exe 2002-09-20 18:12 2043520 ae94ae0da6ed874ce08912fc63f8c6c2 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe 2004-08-04 00:39 2439552 c9d5b530332fe1f4c7c2189104da7ffd C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe 2004-08-04 00:39 2439552 c9d5b530332fe1f4c7c2189104da7ffd C:\WINDOWS\system32\ntoskrnl.exe 2004-08-04 00:39 2182272 dcf53422b7edded3b7431fbae4a7ee3f C:\WINDOWS\VistaMizer\old\ntoskrnl.exe 2004-08-04 00:44 1551872 fe6ddf00b672c3647b9f20e09b7774ee C:\WINDOWS\explorer.exe 2002-09-20 19:05 1005568 f4af85d918e83d71341fce2aa5318181 C:\WINDOWS\$NtServicePackUninstall$\explorer.exe 2004-08-04 00:44 1551872 fe6ddf00b672c3647b9f20e09b7774ee C:\WINDOWS\ServicePackFiles\i386\explorer.exe 2004-08-04 00:44 1033728 379098a96e6c165b659de7e4328010ea C:\WINDOWS\VistaMizer\old\explorer.exe 2002-09-20 19:05 13312 0c4c012b0a8960f48a666c240a7baa3d C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe 2004-08-04 00:44 25088 36eab91ffd244d3202830e417c45e0a5 C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe 2004-08-04 00:44 25088 36eab91ffd244d3202830e417c45e0a5 C:\WINDOWS\system32\ctfmon.exe 2004-08-04 00:44 15360 cbfa30492d70ce3938d8a7783d0c0436 C:\WINDOWS\VistaMizer\old\ctfmon.exe 2002-09-20 19:05 142336 2bdcbf19c5222fda21b049d1fbac7b36 C:\WINDOWS\$NtServicePackUninstall$\wuauclt.exe 2004-08-04 00:44 112128 0e83c0f3d9594854e83df1051e694966 C:\WINDOWS\ServicePackFiles\i386\wuauclt.exe 2004-08-04 00:44 112128 0e83c0f3d9594854e83df1051e694966 C:\WINDOWS\system32\wuauclt.exe 2004-08-04 00:44 112128 ebf4ac22004504c422fc8b5ee5b6ffd1 C:\WINDOWS\VistaMizer\old\wuauclt.exe . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "egui"="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" [2008-02-20 1443072] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-08-11 7630848] "Glass2k"="C:\Program Files\Glass2k\Glass2k.exe" [2007-10-17 56325] "DrvIcon"="C:\Program Files\VistaDriveIcon\DrvIcon.exe" [2008-04-13 49152] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-04 25088] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.YV12"= yv12vfw.dll [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^DSLMON.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\DSLMON.lnk backup=C:\WINDOWS\pss\DSLMON.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Microsoft Office.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^Fibi^Menu Start^Programy^Autostart^Blaero Start Orb.lnk] path=C:\Documents and Settings\Fibi\Menu Start\Programy\Autostart\Blaero Start Orb.lnk backup=C:\WINDOWS\pss\Blaero Start Orb.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^Fibi^Menu Start^Programy^Autostart^Thoosje Sidebar.lnk] path=C:\Documents and Settings\Fibi\Menu Start\Programy\Autostart\Thoosje Sidebar.lnk backup=C:\WINDOWS\pss\Thoosje Sidebar.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^Fibi^Menu Start^Programy^Autostart^WinFlip.lnk] path=C:\Documents and Settings\Fibi\Menu Start\Programy\Autostart\WinFlip.lnk backup=C:\WINDOWS\pss\WinFlip.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a------ 2008-01-11 22:16 39792 C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE] --a------ 2004-08-04 00:44 25088 C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools] --a------ 2005-11-09 00:00 128920 C:\Program Files\DAEMON Tools\daemon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] --a------ 2004-08-04 00:44 1799168 C:\Program Files\Messenger\msmsgs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] --a------ 2001-07-09 11:50 155648 C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] --a------ 2006-08-11 15:43 7630848 C:\WINDOWS\system32\nvcpl.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] --a------ 2006-08-11 15:43 86016 C:\WINDOWS\system32\nvmctray.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication] --a------ 2006-04-26 08:29 237568 C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync] --a------ 2006-04-11 17:52 1409024 C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] --a------ 2008-02-22 04:25 144784 C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueTransparency] --a------ 2008-05-27 21:04 371200 C:\Program Files\TrueTransparency\TrueTransparency.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VisualTaskTips] --a------ 2008-05-31 12:50 65536 C:\Program Files\VisualTaskTips\VisualTaskTips.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] --a------ 2006-08-11 15:43 1519616 C:\WINDOWS\system32\nwiz.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan] --a------ 2006-11-17 05:42 577536 C:\WINDOWS\soundman.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\uTorrent\\uTorrent.exe"= "C:\\WINDOWS\\system32\\dplaysvr.exe"= "C:\\Program Files\\Java\\jre1.6.0_05\\bin\\javaw.exe"= "C:\\Program Files\\Java\\jre1.6.0_05\\bin\\java.exe"= "C:\\Program Files\\Java\\jre1.6.0_05\\launch4j-tmp\\JDownloader.exe"= "C:\\Program Files\\Skype\\Phone\\Skype.exe"= "C:\\Program Files\\Psi\\psi.exe"= R1 epfwtdir;epfwtdir;C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2008-02-20 33800] S2 NOD32FiXTemDono;Eset Nod32 Boot;C:\WINDOWS\system32\regedt32.exe [2001-10-26 25600] . - - - - USUNIĘTO PUSTE WPISY - - - - MSConfigStartUp-WinampAgent - C:\Program Files\Winamp\winampa.exe . ------- Skan uzupełniający ------- . FireFox -: Profile - C:\Documents and Settings\Fibi\Dane aplikacji\Mozilla\Firefox\Profiles\c20ymn4q.default\ FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://wyspaman.art.pl/ . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-10-08 21:56:00 Windows 5.1.2600 Dodatek Service Pack 2 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . Czas ukończenia: 2008-10-08 21:57:18 ComboFix-quarantined-files.txt 2008-10-08 19:57:14 Przed: 22 958 243 840 bajtów wolnych Po: 23,055,785,984 bajtów wolnych 173

hjt

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:50:55, on 2008-10-08 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\Program Files\Glass2k\Glass2k.exe C:\Program Files\VistaDriveIcon\DrvIcon.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\foobar2000\foobar2000.exe C:\Program Files\Last.fm\LastFM.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Fibi\Pulpit\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [Glass2k] C:\Program Files\Glass2k\Glass2k.exe O4 - HKLM\..\Run: [DrvIcon] C:\Program Files\VistaDriveIcon\DrvIcon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe -- End of file - 3901 bytes

sr

Kod: Zaznacz wszystko: "Silent Runners.vbs", revision 58, http://www.silentrunners.org/ Operating System: Windows XP SP2 Output limited to non-default values, except where indicated by "{++}" Startup items buried in registry: --------------------------------- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++} "egui" = ""C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice" ["ESET"] "NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup" [MS] "Glass2k" = "C:\Program Files\Glass2k\Glass2k.exe" ["Chime Softwares"] "DrvIcon" = "C:\Program Files\VistaDriveIcon\DrvIcon.exe" ["artArmin"] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided) -> {HKLM...CLSID} = "Adobe PDF Reader Link Helper" \InProcServer32\(Default) = "C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided) -> {HKLM...CLSID} = "SSVHelper Class" \InProcServer32\(Default) = "C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll" ["Sun Microsystems, Inc."] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\ "{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania" -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania" \InProcServer32\(Default) = "deskpan.dll" [file not found] "{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu" -> {HKLM...CLSID} = "HyperTerminal Icon Ext" \InProcServer32\(Default) = "C:\WINDOWS\System32\hticons.dll" ["Hilgraeve, Inc."] "{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class" -> {HKLM...CLSID} = "DesktopContext Class" \InProcServer32\(Default) = "C:\WINDOWS\System32\nvcpl.dll" ["NVIDIA Corporation"] "{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper" -> {HKLM...CLSID} = "NVIDIA CPL Extension" \InProcServer32\(Default) = "C:\WINDOWS\System32\nvcpl.dll" ["NVIDIA Corporation"] "{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer" -> {HKLM...CLSID} = "Desktop Explorer" \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu" -> {HKLM...CLSID} = "nView Desktop Context Menu" \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{B089FE88-FB52-11D3-BDF1-0050DA34150D}" = "Eset Smart Security - Context Menu Shell Extension" -> {HKLM...CLSID} = "Eset Smart Security - Context Menu Shell Extension" \InProcServer32\(Default) = "C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll" ["ESET"] "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] "{0006F045-0000-0000-C000-000000000046}" = "Microsoft Outlook Custom Icon Handler" -> {HKLM...CLSID} = "Rozszerzenie ikon plików programu Outlook" \InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office\OLKFSTUB.DLL" [MS] "{416651E4-9C3C-11D9-8BDE-F66BAD1E3F3A}" = "PhoneBrowser" -> {HKLM...CLSID} = "Nokia Phone Browser" \InProcServer32\(Default) = "C:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll" ["Nokia"] HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\ {F9DB5320-233E-11D1-9F84-707F02C10627}\(Default) = "PDF Column Info" -> {HKLM...CLSID} = "PDF Shell Extension" \InProcServer32\(Default) = "C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll" ["Adobe Systems, Inc."] HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\ Eset Smart Security - Context Menu Shell Extension\(Default) = "{B089FE88-FB52-11D3-BDF1-0050DA34150D}" -> {HKLM...CLSID} = "Eset Smart Security - Context Menu Shell Extension" \InProcServer32\(Default) = "C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll" ["ESET"] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] WS_FTP\(Default) = "{797F3885-5429-11D4-8823-0050DA59922B}" -> {HKLM...CLSID} = "RtClkCtxMenu Class" \InProcServer32\(Default) = "C:\Program Files\Ipswitch\WS_FTP Professional\wsftpsi.dll" ["Ipswitch, Inc. 10 Maguire Road - Suite 220 Lexington, MA 02421"] HKLM\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\ WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] HKLM\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\ Eset Smart Security - Context Menu Shell Extension\(Default) = "{B089FE88-FB52-11D3-BDF1-0050DA34150D}" -> {HKLM...CLSID} = "Eset Smart Security - Context Menu Shell Extension" \InProcServer32\(Default) = "C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll" ["ESET"] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] WS_FTP\(Default) = "{797F3885-5429-11D4-8823-0050DA59922B}" -> {HKLM...CLSID} = "RtClkCtxMenu Class" \InProcServer32\(Default) = "C:\Program Files\Ipswitch\WS_FTP Professional\wsftpsi.dll" ["Ipswitch, Inc. 10 Maguire Road - Suite 220 Lexington, MA 02421"] Group Policies {GPedit.msc branch and setting}: ----------------------------------------------- Note: detected settings may not have any effect. HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\ "NoDrives" = (REG_DWORD) dword:0x00000000 {unrecognized setting} HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ "NoDrives" = (REG_DWORD) dword:0x00000000 {unrecognized setting} HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\ "HideLegacyLogonScripts" = (REG_DWORD) dword:0x00000000 {unrecognized setting} "HideLogoffScripts" = (REG_DWORD) dword:0x00000000 {unrecognized setting} "RunLogonScriptSync" = (REG_DWORD) dword:0x00000001 {unrecognized setting} "RunStartupScriptSync" = (REG_DWORD) dword:0x00000000 {unrecognized setting} "HideStartupScripts" = (REG_DWORD) dword:0x00000000 {unrecognized setting} HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ "shutdownwithoutlogon" = (REG_DWORD) dword:0x00000001 {Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| Shutdown: Allow system to be shut down without having to log on} "undockwithoutlogon" = (REG_DWORD) dword:0x00000001 {Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options| Devices: Allow undock without having to log on} "DisableRegistryTools" = (REG_DWORD) dword:0x00000000 {unrecognized setting} "HideLegacyLogonScripts" = (REG_DWORD) dword:0x00000000 {unrecognized setting} "HideLogoffScripts" = (REG_DWORD) dword:0x00000000 {unrecognized setting} "RunLogonScriptSync" = (REG_DWORD) dword:0x00000001 {unrecognized setting} "RunStartupScriptSync" = (REG_DWORD) dword:0x00000000 {unrecognized setting} "HideStartupScripts" = (REG_DWORD) dword:0x00000000 {unrecognized setting} Active Desktop and Wallpaper: ----------------------------- Active Desktop may be disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState Displayed if Active Desktop enabled and wallpaper not set by Group Policy: HKCU\Software\Microsoft\Internet Explorer\Desktop\General\ "Wallpaper" = "C:\WINDOWS\system32\config\systemprofile\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp" Displayed if Active Desktop disabled and wallpaper not set by Group Policy: HKCU\Control Panel\Desktop\ "Wallpaper" = "C:\Documents and Settings\Fibi\Dane aplikacji\Mozilla\Firefox\Tapeta pulpitu.bmp" Windows Portable Device AutoPlay Handlers ----------------------------------------- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ MPCPlayCDAudioOnArrival\ "Provider" = "Media Player Classic" "InvokeProgID" = "MediaPlayerClassic.Autorun" "InvokeVerb" = "PlayCDAudio" HKLM\SOFTWARE\Classes\MediaPlayerClassic.Autorun\shell\PlayCDAudio\command\(Default) = ""C:\Program Files\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" %1 /cd" ["Gabest"] MPCPlayDVDMovieOnArrival\ "Provider" = "Media Player Classic" "InvokeProgID" = "MediaPlayerClassic.Autorun" "InvokeVerb" = "PlayDVDMovie" HKLM\SOFTWARE\Classes\MediaPlayerClassic.Autorun\shell\PlayDVDMovie\command\(Default) = ""C:\Program Files\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" %1 /dvd" ["Gabest"] MPCPlayMusicFilesOnArrival\ "Provider" = "Media Player Classic" "InvokeProgID" = "MediaPlayerClassic.Autorun" "InvokeVerb" = "PlayMusicFiles" HKLM\SOFTWARE\Classes\MediaPlayerClassic.Autorun\shell\PlayMusicFiles\command\(Default) = ""C:\Program Files\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" %1" ["Gabest"] MPCPlayVideoFilesOnArrival\ "Provider" = "Media Player Classic" "InvokeProgID" = "MediaPlayerClassic.Autorun" "InvokeVerb" = "PlayVideoFiles" HKLM\SOFTWARE\Classes\MediaPlayerClassic.Autorun\shell\PlayVideoFiles\command\(Default) = ""C:\Program Files\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" %1" ["Gabest"] NeroAutoPlay2CDAudio\ "Provider" = "Nero Express" "InvokeProgID" = "Nero.AutoPlay2" "InvokeVerb" = "HandleCDBurningOnArrival_CDAudio" HKLM\SOFTWARE\Classes\Nero.AutoPlay2\shell\HandleCDBurningOnArrival_CDAudio\command\(Default) = "C:\Program Files\Ahead\nero\nero.exe /w /New:AudioCD /Drive:%L" ["Ahead Software AG"] NeroAutoPlay2CopyCD\ "Provider" = "Nero Express" "InvokeProgID" = "Nero.AutoPlay2" "InvokeVerb" = "PlayCDAudioOnArrival_CopyCD" HKLM\SOFTWARE\Classes\Nero.AutoPlay2\shell\PlayCDAudioOnArrival_CopyCD\command\(Default) = "C:\Program Files\Ahead\nero\nero.exe /w /Dialog:DiscCopy /Drive:%L" ["Ahead Software AG"] NeroAutoPlay2DataDisc\ "Provider" = "Nero Express" "InvokeProgID" = "Nero.AutoPlay2" "InvokeVerb" = "HandleCDBurningOnArrival_DataDisc" HKLM\SOFTWARE\Classes\Nero.AutoPlay2\shell\HandleCDBurningOnArrival_DataDisc\command\(Default) = "C:\Program Files\Ahead\nero\nero.exe /w /New:ISODisc /Drive:%L" ["Ahead Software AG"] NeroAutoPlay2LaunchNeroStartSmart\ "Provider" = "Nero StartSmart" "InvokeProgID" = "Nero.AutoPlay2" "InvokeVerb" = "HandleCDBurningOnArrival_LaunchNeroStartSmart" HKLM\SOFTWARE\Classes\Nero.AutoPlay2\shell\HandleCDBurningOnArrival_LaunchNeroStartSmart\command\(Default) = "C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart.exe /AutoPlay /Drive:%L" ["Ahead Software AG"] NMMPlayCDAudioOnArrival\ "Provider" = "Nokia Music Manager" "InvokeProgID" = "NokiaMusicManager" "InvokeVerb" = "NMMPlayCD" HKLM\SOFTWARE\Classes\NokiaMusicManager\shell\NMMPlayCD\command\(Default) = "C:\Program Files\Nokia\Nokia PC Suite 6\MusicManager.exe /playCD "%L"" ["Nokia"] NMMRipCDAudioOnArrival\ "Provider" = "Nokia Music Manager" "InvokeProgID" = "NokiaMusicManager" "InvokeVerb" = "NMMRipCD" HKLM\SOFTWARE\Classes\NokiaMusicManager\shell\NMMRipCD\command\(Default) = "C:\Program Files\Nokia\Nokia PC Suite 6\MusicManager.exe /ripCD "%L"" ["Nokia"] Picasa2ImportPicturesOnArrival\ "Provider" = "Picasa2" "InvokeProgID" = "picasa2.autoplay" "InvokeVerb" = "import" HKLM\SOFTWARE\Classes\picasa2.autoplay\shell\import\command\(Default) = "C:\Program Files\Picasa2\Picasa2.exe "%1"" ["Google Inc."] Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] 000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS] 000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] Transport Service Providers HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: %SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 15 %SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05 Toolbars, Explorer Bars, Extensions: ------------------------------------ Toolbars HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ "{D2F8F919-690B-4EA2-9FA7-A203D1E04F75}" = (no title provided) -> {HKLM...CLSID} = "StylerToolBar" \InProcServer32\(Default) = "C:\Program Files\Styler\TB\StylerTB.dll" ["StyleFantasist"] Extensions (Tools menu items, main toolbar menu buttons) HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\ {08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ "MenuText" = "Sun Java Console" "CLSIDExtension" = "{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}" -> {HKCU...CLSID} = "Java Plug-in 1.6.0_05" \InProcServer32\(Default) = "C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll" ["Sun Microsystems, Inc."] -> {HKLM...CLSID} = "Java Plug-in 1.6.0_05" \InProcServer32\(Default) = "C:\Program Files\Java\jre1.6.0_05\bin\npjpi160_05.dll" ["Sun Microsystems, Inc."] {FB5F1910-F110-11D2-BB9E-00C04F795683}\ "ButtonText" = "Messenger" "MenuText" = "Windows Messenger" "Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS] Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ Eset Service, ekrn, ""C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe"" ["ESET"] Machine Debug Manager, MDM, ""C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe"" [MS] NVIDIA Display Driver Service, NVSvc, "C:\WINDOWS\System32\nvsvc32.exe" ["NVIDIA Corporation"] Windows User Mode Driver Framework, UMWdf, "C:\WINDOWS\system32\wdfmgr.exe" [MS] Print Monitors: --------------- HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors\ Microsoft Office Document Image Writer Monitor\Driver = "mdimon.dll" [MS] ---------- (launch time: 2008-10-08 21:51:09) + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + To search all directories of local fixed drives for DESKTOP.INI DLL launch points, use the -supp parameter or answer "No" at the first message box and "Yes" at the second message box. ---------- (total run time: 82 seconds, including 5 seconds for message boxes)

**Posty:** 7956 · przez **Magik** 08 Paź 2008, 22:41

fibi07 napisał(a):nie kumam.

no chodzi o to, ze w nich nic ciekawego nie ma....bo liczysz ze jakis syf Ci blokuje polaczenie ale nie w tym przypadku

pzrez normalne gg tez Ci tak laczy dlugo ??

**Posty:** 2008 · przez **fibi07** 08 Paź 2008, 22:43

nie, przez normalne gg łączy się szybko około 1 sekundy, ale też przerywa nie wiem na ile, bo samo nie podłącza się znowu. używam jabbera tylko dla tego, że przez to mam im+ na komórkę (jabber i gg za darmo)

**Posty:** 7956 · przez **Magik** 08 Paź 2008, 22:54

bynajmniej to nie wina syfu......

krotki fragment pewnej historyjki

Kod: Zaznacz wszystko: Zaczęło się od serwera jabber.wroc.pl. Używałem go przez dość długi czas, aż pewnego dnia transport GG zaczął na nim kuleć - łączyć się parę minut, itp. Pisałem wtedy nawet do administratora, częściowo rozwiązaliśmy problem poprzez zmianę serwera GG, z którego korzystał transport. Ale to dalej nie było to. Przerzuciłem się bowiem na jabber.autocom.pl. Było dobrze, nawet bardzo. Stabilny serwer, dużo transportów (w tym wyśmienicie działający GG i SMS). Męki z przerzuceniem historii oraz rostera na ten serwer zostały w pełni wynagrodzone. Po drodze padł serwer chrome.pl. Były podobne narzekania, co teraz. Jednak sielanka się skończyła - zaczęły się problemy z transportem GG. Na początku kolargol stwierdził, że to GG blokuje serwery jabber.autocom.pl..................

zmien serwer jabbera etc.........bo skoro gg laczy sie szybko to trzeba szukac przyczyn w jabberze ew. sofcie

Autor postu otrzymał pochwałę

**Posty:** 2008 · przez **fibi07** 08 Paź 2008, 23:02

aha dzięki wielkie.

w sumie teraz działa, zrobiłem myk z subskrypcją i działa. zobaczymy na jak długo.

Kto jest na forum