self reboots

[magic666]

Mialem juz ten problem, napisalem o tym na forum ale postanowilem sie nie bawić i zrobic format. Pomoglo, niestety problem wrocil self rebooty srednio co 2-3 h. (bez bluescreena)

Kod: Zaznacz wszystko

Logfile of HijackThis v1.99.1
Scan saved at 18:35:14, on 2007-11-06
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ImageShack\QuickShot\QuickShot.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TGTSoft\StyleXP\StyleXP.exe
C:\PROGRA~1\PROXYL~1\ProxyCap\ProxyCap.exe
C:\Program Files\BitTorrent_DNA\dna.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Gigabyte\ET5\GUI.exe
F:\Program Files\Opera\Opera.exe
F:\mIRC\mirc.exe
C:\Documents and Settings\Administrator\Pulpit\Instalki\hijackthis_199\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - F:\flashget\jccatch.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - F:\flashget\getflash.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ImageShackUtil] C:\Program Files\ImageShack\QuickShot\QuickShot.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [ProxyCap] C:\PROGRA~1\PROXYL~1\ProxyCap\ProxyCap.exe
O4 - HKCU\..\Run: [Gadu-Gadu] "F:\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\BitTorrent_DNA\dna.exe"
O4 - Startup: EasyTune5.lnk = C:\Program Files\Gigabyte\ET5\ET5SC.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O8 - Extra context menu item: &Ściągnij przy pomocy FlashGet'a - F:\flashget\jc_link.htm
O8 - Extra context menu item: &Ściągnij wszystko przy pomocy FlashGet'a - F:\flashget\jc_all.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://F:\PROGRA~1\M814F~1.OFF\Office10\EXCEL.EXE/3000
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - F:\flashget\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - F:\flashget\FlashGet.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Broken Internet access because of LSP provider 'w2pxdrv.dll' missing
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0E60181C-1D27-43EF-99BE-4EFE02027361}: NameServer = 194.204.159.1 217.98.63.164
O17 - HKLM\System\CS1\Services\Tcpip\..\{0E60181C-1D27-43EF-99BE-4EFE02027361}: NameServer = 194.204.159.1 217.98.63.164
O17 - HKLM\System\CS2\Services\Tcpip\..\{0E60181C-1D27-43EF-99BE-4EFE02027361}: NameServer = 194.204.159.1 217.98.63.164
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe



[wojtas]

Wykonaj to co jest podane w tym temacie

znasz ta aplikacje:

O4 - HKCU\..\Run: [ProxyCap] C:\PROGRA~1\PROXYL~1\ProxyCap\ProxyCap.exe

Zastosuj SDFix . Po pobraniu uruchom go a rozpakuje się do C:\SDFix. Uruchom komputer w trybie awaryjnym (F8 przy stracie systemu). Będąc w awaryjnym uruchom plik RunThis.bat z folderu SDFixa. Zatwierdź czyszczenie przez Y. Poczekaj aż ukończy i komputer zresetuje

Potem wejdz do folderu SDFix wrzuc zawartość pliku Report.txt + log z combofixa


Prawym na ,,Mój komputer">właściwości>Zakładka "Zaawansowane" -> Uruchamianie i odzyskiwanie i klikamy "ustawienia">
w części "Awaria systemu" odznaczamy pole "Automatycznie uruchom ponownie"

teraz zamiast resetu pojawi sie bluescreen przepisz kod bledu z dolu strony bluescreena

[magic666]

Mam to odznaczone, tak proxycap jest moj sdfixa zaraz wkleje

Kod: Zaznacz wszystko

SDFix: Version 1.113

Run by Administrator on 2007-11-06 at 19:01

Microsoft Windows XP [Wersja 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...


Normal Mode:
Checking Files:

No Trojan Files Found




Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



                                 Final Check:

catchme 0.3.1253 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-06 19:07:15
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="F:\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:8e,86,ad,08,ea,c8,ce,6b,3e,1d,13,a0,4d,b0,c4,6c,99,c2,0c,88,32,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,f1,36,62,9a,3e,b4,22,e0,d1,bd,85,3d,2f,40,82,df,57,..
"khjeh"=hex:b9,e3,50,cd,e6,9d,c3,5b,fb,0d,25,1a,67,55,eb,ed,d1,01,a0,27,37,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:08,a8,32,35,0d,e5,c0,bb,89,a1,74,be,f3,ac,6c,dc,3f,76,b2,60,39,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="F:\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:8e,86,ad,08,ea,c8,ce,6b,3e,1d,13,a0,4d,b0,c4,6c,99,c2,0c,88,32,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,f1,36,62,9a,3e,b4,22,e0,d1,bd,85,3d,2f,40,82,df,57,..
"khjeh"=hex:b9,e3,50,cd,e6,9d,c3,5b,fb,0d,25,1a,67,55,eb,ed,d1,01,a0,27,37,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:08,a8,32,35,0d,e5,c0,bb,89,a1,74,be,f3,ac,6c,dc,3f,76,b2,60,39,..

scanning hidden registry entries ...

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\A\1\5\1c]
"Order"=hex:08,00,00,00,02,00,00,00,b8,01,00,00,01,00,00,00,04,00,00,00,8c,..

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"F:\\Program Files\\Opera\\Opera.exe"="F:\\Program Files\\Opera\\Opera.exe:*:Enabled:Opera"
"F:\\flashget\\flashget.exe"="F:\\flashget\\flashget.exe:*:Enabled:Flashget"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"G:\\Loki\\Loki.exe"="G:\\Loki\\Loki.exe:*:Enabled:Loki"
"G:\\Loki\\Autorun\\AutoRun.exe"="G:\\Loki\\Autorun\\AutoRun.exe:*:Enabled:Loki - AutoRun"
"C:\\Program Files\\BitTorrent_DNA\\dna.exe"="C:\\Program Files\\BitTorrent_DNA\\dna.exe:*:Enabled:BitTorrent DNA"
"C:\\Program Files\\BitTorrent\\bittorrent.exe"="C:\\Program Files\\BitTorrent\\bittorrent.exe:*:Enabled:BitTorrent"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

Remaining Files:
---------------


Files with Hidden Attributes:

Fri 28 Jul 2006       337,320 A..H. --- "C:\Program Files\Common Files\Motorola Shared\MotPCSDrivers\difxapi.dll"

Finished!


[wojtas]

daj loga z combofixa

sprawdz w everescie temperatury i napiecia;

http://www.programosy.pl/program,everest-home-edition.html

i podaj na forum log i temperatury i napiecia

[magic666]

Temp nieobciazonego procka ~23 stopnie
obciazonego ~50 stopni
Napiecie przed zmiana mnoznika 1,4xx
Napiecie po zmianie 1,248
Tak mi wlasnie przyszlo do glowy ze to moze byc procek ktory krecilem z 1,8 do 2,4 zobacze jak bedzie teraz po zmniejszeniu na oryginalna wartosc mnoznika

Kod: Zaznacz wszystko

ComboFix 07-11-06.4 - Administrator 2007-11-06 19:49:31.1 - NTFSx86
Microsoft Windows XP Professional  5.1.2600.2.1250.1.1045.18.100 [GMT 1:00]
Running from: C:\Documents and Settings\Administrator\Moje dokumenty\ComboFix.exe
* Created a new restore point
.

(((((((((((((((((((((((((   Files Created from 2007-10-06 to 2007-11-06  )))))))))))))))))))))))))))))))
.

2007-11-06 19:47   51,200   --a------   C:\WINDOWS\NirCmd.exe
2007-11-06 19:01   <DIR>   d--------   C:\WINDOWS\ERUNT
2007-11-03 21:47   <DIR>   d--------   C:\Program Files\SubEdit-Player
2007-11-03 21:19   <DIR>   d--------   C:\Documents and Settings\Administrator\Dane aplikacji\Media Player Classic
2007-11-03 21:16   <DIR>   d--------   C:\Program Files\Real Alternative
2007-11-03 19:59   <DIR>   d--------   C:\Program Files\BitTorrent_DNA
2007-11-03 19:59   <DIR>   d--------   C:\Program Files\BitTorrent
2007-11-03 19:59   <DIR>   d--------   C:\Documents and Settings\Administrator\Dane aplikacji\BitTorrent DNA
2007-11-03 19:59   <DIR>   d--------   C:\Documents and Settings\Administrator\Dane aplikacji\BitTorrent
2007-10-22 17:03   <DIR>   d--------   C:\Program Files\Moyea
2007-10-22 17:03   <DIR>   d--------   C:\Documents and Settings\Administrator\Dane aplikacji\Moyea
2007-10-22 16:40   <DIR>   d--------   C:\Program Files\YouTube Video Downloader
2007-10-16 18:30   <DIR>   d--------   C:\Program Files\DivX
2007-10-09 16:31   <DIR>   d--------   C:\Documents and Settings\Administrator\Dane aplikacji\ProxyCap
2007-10-09 16:19   <DIR>   d--------   C:\Program Files\Proxy Labs

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-04 11:43   ---------   d-----w   C:\Program Files\NAPI-PROJEKT
2007-11-03 20:15   ---------   d-----w   C:\Program Files\Common Files\Real
2007-10-22 18:40   ---------   d-----w   C:\Documents and Settings\Administrator\Dane aplikacji\LimeWire
2007-10-04 18:15   ---------   d--h--w   C:\Program Files\InstallShield Installation Information
2007-10-02 18:54   ---------   d-----w   C:\Program Files\ImageShack
2007-09-25 17:18   ---------   d-----w   C:\Program Files\MoorHunt
2007-09-17 17:55   ---------   d-----w   C:\Documents and Settings\Administrator\Dane aplikacji\teamspeak2
2007-09-14 14:29   ---------   d-----w   C:\Program Files\Common Files\Wise Installation Wizard
2007-09-09 08:30   ---------   d-----w   C:\Program Files\Common Files\InstallShield
2007-09-08 15:17   23   ----a-w   C:\WINDOWS\system32\drivers\adidsl.cfg
2007-09-08 15:17   ---------   d-----w   C:\Program Files\SAGEM
2007-09-08 14:09   ---------   d---a-w   C:\Documents and Settings\All Users\Dane aplikacji\TEMP
.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-04-19 12:26]
"nwiz"="nwiz.exe" [2007-04-19 12:26 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-04-19 12:26]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-07-27 23:03]
"ImageShackUtil"="C:\Program Files\ImageShack\QuickShot\QuickShot.exe" [2006-04-29 23:42]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:44]
"STYLEXP"="C:\Program Files\TGTSoft\StyleXP\StyleXP.exe" [2006-05-24 19:31]
"ProxyCap"="C:\PROGRA~1\PROXYL~1\ProxyCap\ProxyCap.exe" [2007-10-09 16:26]
"Gadu-Gadu"="F:\Gadu-Gadu\gg.exe" [2006-11-14 10:12]
"BitTorrent DNA"="C:\Program Files\BitTorrent_DNA\dna.exe" [2007-11-03 19:59]

C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\
EasyTune5.lnk - C:\Program Files\Gigabyte\ET5\ET5SC.exe [2007-06-20 11:31:09]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
DSLMON.lnk - C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2007-09-08 16:17:24]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^Microsoft Office.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\adiras]
adiras.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
ALCMTR.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EasyTuneV]
C:\Program Files\Gigabyte\ET5\ETcall.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Flashget]
F:\flashget\FlashGet.exe /min

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadu-Gadu]
"F:\Gadu-Gadu\gg.exe" /tray

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
"C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
C:\WINDOWS\system32\\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nod32kui]
"F:\Program Files\nod32kui.exe" /WAITSERVICE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"F:\QuickTime\qttask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
RTHDCPL.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
SkyTel.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
"C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOTASKBARICON]
C:\PROGRA~1\Wanadoo\TaskbarIcon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOWATCH]
C:\PROGRA~1\Wanadoo\Watch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"wuauserv"=2 (0x2)
"srservice"=2 (0x2)
"CiSvc"=3 (0x3)

R1 bbcap;bbcap;C:\WINDOWS\system32\DRIVERS\bbcap.sys
R3 MarkFun_NT;MarkFun_NT;\??\C:\Program Files\Gigabyte\ET5\markfun.w32
S3 FreshIO;FreshIO;\??\F:\FreshDiagnose\FreshIO.sys
S3 gdrv;gdrv;\??\C:\WINDOWS\gdrv.sys

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0936b3d8-1f16-11dc-89c5-001a4d235d8b}]

HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0936b3d8-1f16-11dc-89c5-001a4d235d8b}\Shell\Auto\command - [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0936b3d8-1f16-11dc-89c5-001a4d235d8b}]

HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0936b3d8-1f16-11dc-89c5-001a4d235d8b}\Shell\AutoRun\command - [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0936b3d8-1f16-11dc-89c5-001a4d235d8b}]

HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0936b3d8-1f16-11dc-89c5-001a4d235d8b}\Shell\explore\Command - [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0936b3d8-1f16-11dc-89c5-001a4d235d8b}]

HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0936b3d8-1f16-11dc-89c5-001a4d235d8b}\Shell\open\Command - [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ec614fdd-3770-11dc-82f2-4d6564696130}]

HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ec614fdd-3770-11dc-82f2-4d6564696130}\Shell\Auto\command - [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ec614fdd-3770-11dc-82f2-4d6564696130}]

HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ec614fdd-3770-11dc-82f2-4d6564696130}\Shell\AutoRun\command - [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ec614fdd-3770-11dc-82f2-4d6564696130}]

HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ec614fdd-3770-11dc-82f2-4d6564696130}\Shell\explore\Command - [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ec614fdd-3770-11dc-82f2-4d6564696130}]
\Shell\open\Command


*Newly Created Service* - CATCHME
*Newly Created Service* - MARKFUN_NT
.


[wojtas]

wklej do notatnika

Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0936b3d8-1f16-11dc-89c5-001a4d235d8b}]

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ec614fdd-3770-11dc-82f2-4d6564696130}]

w notatniku u góry>>>plik zapisz jako>>>Zmien rozszerzenie z TXT na Wszystkie pliki *.* >>> Zapisz pod nazwą FIX.REG

Klikasz dwa razy na powstały plik fix i dodajesz go do rejestru....

Autor postu otrzymał pochwałę

[magic666]

narazie rebootow brak :> bycmoze pomoglo + dla Ciebie