wieszający się komputer

**Posty:** 8001 · przez **Okocza** 20 Lut 2008, 19:36

A więc tak, mój komputer nie wiedzieć czemu wolno chodzi, czasem potrafi się przymulić tak że trzeba go resetować (conajmniej 2 razy dziennie a przy większym obciążeniu nawet i więcej...) Poza tym czasem jest tak że nie mogę wywołać menedżera aplikacji... Zamieszczam loga..

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 18:33:48, on 2008-02-20 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\RTHDCPL.EXE C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe C:\Program Files\Eset\nod32kui.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe H:\Programy\AutoConnect\AutoConnect.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\TGTSoft\StyleXP\StyleXP.exe H:\Programy\PeerGuardian2\pg2.exe C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\System32\svchost.exe H:\Programy\Foobar\foobar2000.exe C:\Program Files\Mozilla Firefox\firefox.exe F:\Progsy\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - H:\Programy\Acrobat Reader\ActiveX\AcroIEHelper.dll O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\Flash Get\jccatch.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\Flash Get\getflash.dll O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file) O3 - Toolbar: (no name) - {0D704FAD-66E9-4F0A-BFED-4F665770DDB3} - (no file) O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKCU\..\Run: [AutoConnect] H:\Programy\AutoConnect\AutoConnect.exe O4 - HKCU\..\Run: [updateMgr] "H:\Programy\Acrobat Reader\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide O4 - HKCU\..\Run: [PeerGuardian] H:\Programy\PeerGuardian2\pg2.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = H:\Programy\Acrobat Reader\Reader\reader_sl.exe O8 - Extra context menu item: &Ściągnij przy pomocy FlashGet'a - C:\Program Files\Flash Get\jc_link.htm O8 - Extra context menu item: &Ściągnij wszystko przy pomocy FlashGet'a - C:\Program Files\Flash Get\jc_all.htm O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Pobierz z &BitSpirit - D:\BitSpirit\bsurl.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {B46B0919-62BA-4D99-A5C4-916B57A6805C} - C:\WINDOWS\System32\shdocvw.dll O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\Flash Get\FlashGet.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\Flash Get\FlashGet.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{F25BF52D-4341-404C-8C0E-316637769526}: NameServer = 194.204.159.1 217.98.63.164 O23 - Service: BlueSoleil Hid Service - Unknown owner - H:\Programy\Bluetooth\BTNtService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe

**Posty:** 18165 · przez **wojtas** 20 Lut 2008, 19:47

skasuj:

O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: (no name) - {0D704FAD-66E9-4F0A-BFED-4F665770DDB3} - (no file)

daj loga z combofixa

**Posty:** 8001 · przez **Okocza** 20 Lut 2008, 19:55

Kod: Zaznacz wszystko: ComboFix 07-09-21.2 - "RAFAť" 2007-02-20 18:53:31.1 - [color=red][b]FAT32[/b][/color]x86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.1483 [GMT 1:00] * Created a new restore point . ((((((((((((((((((((((((( Files Created from 2007-08-21 to 2007-09-21 ))))))))))))))))))))))))))))))) . 2007-09-21 16:50 <DIR> d--h----- C:\WINDOWS\$hf_mig$ 2007-09-21 16:01 2,820 --a------ C:\WINDOWS\system32\tmp.reg 2007-09-21 16:00 81,920 --a------ C:\WINDOWS\system32\IEDFix.exe 2007-09-21 16:00 53,248 --a------ C:\WINDOWS\system32\Process.exe 2007-09-21 16:00 51,200 --a------ C:\WINDOWS\system32\dumphive.exe 2007-09-21 16:00 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe 2007-09-21 16:00 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe 2007-09-21 16:00 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-02-20 16:15 --------- d-------- C:\Program Files\Flash Get 2008-02-14 12:48 --------- d--h----- C:\Program Files\Zero G Registry 2008-02-13 13:47 --------- d-------- C:\Program Files\Common Files\EZB Systems 2008-02-13 10:30 --------- d-------- C:\Program Files\Common Files\Wise Installation Wizard 2008-02-10 17:40 --------- d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\Bluetooth 2008-02-10 17:36 --------- d-------- C:\Program Files\TGTSoft 2008-01-15 20:58 --------- d-------- C:\Program Files\Borland 2008-01-15 20:58 --------- d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\TEMP 2008-01-05 15:28 --------- d-------- C:\Program Files\Common Files\DirectX 2007-12-18 19:57 278984 --a------ C:\WINDOWS\system32\drivers\atksgt.sys 2007-12-18 19:57 25416 --a------ C:\WINDOWS\system32\drivers\lirsgt.sys 2007-12-17 18:17 --------- d-------- C:\Program Files\PC Connectivity Solution 2007-12-17 18:17 --------- d-------- C:\Program Files\Nokia 2007-12-17 18:17 --------- d-------- C:\Program Files\Common Files\PCSuite 2007-12-17 18:17 --------- d-------- C:\Program Files\Common Files\Nokia 2007-12-17 18:17 --------- d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\PC Suite 2007-12-17 18:17 --------- d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\Installations 2007-12-16 20:34 --------- d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\vsosdk 2007-12-16 18:20 47360 --a------ C:\WINDOWS\system32\drivers\pcouffin.sys 2007-12-14 16:06 --------- d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\Ahead 2007-12-13 18:02 512096 --a------ C:\WINDOWS\system32\drivers\amon.sys 2007-12-13 18:02 15424 --a------ C:\WINDOWS\system32\drivers\nod32drv.sys 2007-12-13 00:10 --------- d-------- C:\Program Files\Microsoft.NET 2007-12-10 16:50 96256 --a------ C:\WINDOWS\system32\drivers\sptddrv1.sys 2007-12-07 16:40 --------- d-------- C:\Program Files\Real 2007-12-07 16:40 --------- d-------- C:\Program Files\Common Files\Real 2007-12-05 20:34 --------- d-------- C:\Program Files\WIBUKEY 2007-12-05 20:34 --------- d-------- C:\Program Files\WIBU-SYSTEMS 2007-12-05 18:40 --------- d-------- C:\Program Files\Common Files\Ahead 2007-12-05 18:40 --------- d-------- C:\Program Files\Ahead 2007-12-03 18:47 --------- d-------- C:\Program Files\AutoConnect 2007-12-03 18:41 --------- d-------- C:\Program Files\Gadu-Gadu 2007-12-03 18:35 --------- d-------- C:\Program Files\SAGEM 2007-12-03 18:34 --------- d-------- C:\Program Files\Neostrada TP 2007-12-03 18:34 --------- d-------- C:\Program Files\Java Web Start 2007-12-03 18:09 611064 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2007-12-03 17:35 23 --a------ C:\WINDOWS\system32\drivers\adidsl.cfg 2007-12-02 22:02 --------- d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\sentinel 2007-12-02 22:00 --------- d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\Backup 2007-12-02 21:18 --------- d-------- C:\Program Files\My Company Name 2007-12-02 21:17 --------- d-------- C:\Program Files\ASUS 2007-12-02 21:11 --------- d-------- C:\Program Files\U-ABIT 2007-12-02 21:07 --------- d-------- C:\Program Files\Marvell 2007-12-02 21:03 --------- d--h----- C:\Program Files\InstallShield Installation Information 2007-12-02 21:03 --------- d-------- C:\Program Files\Realtek 2007-12-02 21:03 --------- d-------- C:\Program Files\Common Files\InstallShield 2007-12-02 21:02 --------- d-------- C:\Program Files\Intel 2007-12-02 20:55 --------- d-------- C:\Program Files\microsoft frontpage 2007-10-25 18:17 7426112 --a------ C:\WINDOWS\system32\drivers\nv4_mini.sys 2007-09-13 16:54 12416 --a------ C:\WINDOWS\system32\drivers\asusgsb.sys 2007-09-13 15:54 12288 --a------ C:\WINDOWS\system32\drivers\EIO.sys 2007-07-30 20:19 549720 --a------ C:\WINDOWS\system32\wuapi.dll 2007-07-30 20:19 53080 --a------ C:\WINDOWS\system32\wuauclt.exe 2007-07-30 20:19 43352 --a------ C:\WINDOWS\system32\wups2.dll 2007-07-30 20:19 1712984 --a------ C:\WINDOWS\system32\wuaueng.dll 2007-07-30 20:18 33624 --a------ C:\WINDOWS\system32\wups.dll 2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\cdm.dll 2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\wucltui.dll 2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\wuweb.dll 2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\dllcache\wups.dll 2007-07-20 00:57 267112 --a------ C:\WINDOWS\system32\xactengine2_9.dll 2007-07-20 00:54 18280 --a------ C:\WINDOWS\system32\x3daudio1_2.dll 2007-07-19 18:14 444776 --a------ C:\WINDOWS\system32\d3dx10_35.dll 2007-07-19 18:14 3727720 --a------ C:\WINDOWS\system32\d3dx9_35.dll 2007-07-19 18:14 1358192 --a------ C:\WINDOWS\system32\D3DCompiler_35.dll --------- C:\Program Files\Usługi online . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SkyTel"="SkyTel.EXE" [2006-05-16 11:04 C:\WINDOWS\SkyTel.exe] "RTHDCPL"="RTHDCPL.EXE" [2007-01-30 12:54 C:\WINDOWS\RTHDCPL.exe] "WooCnxMon"="C:\PROGRA~1\NEOSTR~1\CnxMon.exe" [2003-10-16 20:07] "WOOWATCH"="C:\PROGRA~1\NEOSTR~1\Watch.exe" [2003-10-16 20:07] "WOOTASKBARICON"="C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe" [2003-10-16 20:07] "NeroCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50] "nod32kui"="C:\Program Files\Eset\nod32kui.exe" [2007-12-13 18:02] "PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-06-18 16:10] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-10-25 18:17] "nwiz"="nwiz.exe" [2007-10-25 17:17 C:\WINDOWS\system32\nwiz.exe] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-10-25 18:17] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 02:11] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AutoConnect"="H:\Programy\AutoConnect\AutoConnect.exe" [2004-08-28 20:27] "updateMgr"="H:\Programy\Acrobat Reader\Reader\AdobeUpdateManager.exe" [2006-03-30 17:45] "Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2006-11-14 11:12] "STYLEXP"="C:\Program Files\TGTSoft\StyleXP\StyleXP.exe" [2006-05-24 20:31] "PeerGuardian"="H:\Programy\PeerGuardian2\pg2.exe" [2005-09-18 19:40] [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "Nokia.PCSync"=C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog C:\DOCUME~1\ALLUSE~1\MENUST~1\Programy\AUTOST~1\ Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2007-12-09 19:22:01] Adobe Reader Speed Launch.lnk - H:\Programy\Acrobat Reader\Reader\reader_sl.exe [2005-09-23 23:05:26] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programy^Autostart^BlueSoleil.lnk] path=C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BlueSoleil.lnk backup=C:\WINDOWS\pss\BlueSoleil.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^RAFAŁ^Menu Start^Programy^Autostart^Last.fm Helper.lnk] path=C:\Documents and Settings\RAFAŁ\Menu Start\Programy\Autostart\Last.fm Helper.lnk backup=C:\WINDOWS\pss\Last.fm Helper.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS SmartDoctor] C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe /start [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033] "H:\Programy\Daemon\daemon.exe" -lang 1033 R2 WG1N;SyGate for NT, WG1N;C:\WINDOWS\system32\Drivers\WG1N.sys R2 WG2N;SyGate for NT, WG2N;C:\WINDOWS\system32\Drivers\WG2N.sys R2 WIBUKEY;WIBU-KEY Kernel Driver;C:\WINDOWS\system32\DRIVERS\Wibukey.sys R3 ASUSVRC;ASUSTeK Virtual Capture Device;C:\WINDOWS\system32\DRIVERS\AsusVRC.sys R3 pgfilter;pgfilter;\??\H:\Programy\PeerGuardian2\pgfilter.sys S1 aiptektp;HyperPen;C:\WINDOWS\system32\DRIVERS\aiptektp.sys S3 ABIT-IO;ABIT-IO;\??\C:\Program Files\U-ABIT\abitEQ\ABIT-IO.sys S3 Amps2prt;A4Tech PS/2 Port Mouse Driver;C:\WINDOWS\system32\DRIVERS\Amps2prt.sys S3 ASPI;Advanced SCSI Programming Interface Driver;\??\C:\WINDOWS\System32\DRIVERS\ASPI32.sys S3 asusgsb;ASUS Virtual Video Capture Device Driver;C:\WINDOWS\system32\drivers\asusgsb.sys S3 BTNetFilter;Bluetooth Network Filter;\??\C:\WINDOWS\system32\drivers\BTNetFilter.sys S3 cglptnt;cglptnt;\??\H:\Programy\totalcmd\cglptnt.sys S3 Memctl;Memctl;\??\C:\Program Files\U-ABIT\FlashMenu\Memctl.sys S3 Video3D;ASUS Video3D Service;C:\WINDOWS\system32\Drivers\Video3D32.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{dd6ccc9a-a1ba-11dc-86af-001a4d927a7c}] AutoRun\command- J:\autorun.exe . Contents of the 'Scheduled Tasks' folder "2008-02-15 15:15:02 C:\WINDOWS\Tasks\1-Click Maintenance.job" - H:\Programy\TU2007\SystemOptimizer.exe . ************************************************************************** catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-09-21 18:53:58 Windows 5.1.2600 Dodatek Service Pack 2 FAT NTAPI scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-09-21 18:54:12 . --- E O F ---

coś krótko trwało to skanowanie... wcześniej było zawsze dłużej :wow:

**Posty:** 18165 · przez **wojtas** 20 Lut 2008, 20:07

sciagnij ATF_Cleaner
zaznacz
Windows Temp
Temporary internet files
i wcisnij EMPTY SELECTED

i bedzie czysto

**Posty:** 8001 · przez **Okocza** 20 Lut 2008, 20:09

dzięki...

wieszający się komputer

wieszający się komputer

Kto jest na forum