proszę o sprawdzenie loga

**Posty:** 9 · przez **Kuba13Joker** 02 Gru 2007, 21:05

Przy starcie systemu muli ok.5 min.
I niby wszystko działa do momentu odpalenia Nero. Po odpaleniu Nero wiesza się, przy próbie wyłączenia Nero Ctrl+Alt+Delete bo inaczej nie da rady pojawia się komunikat o tym że system za minute zostanie zamknięty.
Mam problem z wygenerowaniem loga programem Silent Runners załączam
Proszę o pomoc

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 19:20:13, on 2007-12-02 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\autoclk.exe C:\PROGRA~1\Wanadoo\TaskbarIcon.exe C:\WINDOWS\system32\CTHELPER.EXE C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\BTTray.exe C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\bin\btwdins.exe C:\WINDOWS\system32\CTsvcCDA.exe C:\Program Files\Power Translator 11\LogoMedia TranslateDotNet Server.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\MsPMSPSv.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Documents and Settings\Kuba\Pulpit\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O3 - Toolbar: LEC - {1DBAB667-A486-421e-AFE4-CF07DD0088E5} - C:\Program Files\Power Translator 11\Applications\LEC IE Translation Extension.dll O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [autoclk] autoclk.exe O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe" O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - Startup: OpenOffice.org 2.0.3.lnk = C:\Program Files\OpenOffice.org 2.0.3\program\quickstart.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: Wyślij do interfejsu &Bluetooth - C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\btsendto_ie_ctx.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\btsendto_ie.htm O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Oprogramowanie interfejsu Bluetooth\bin\btwdins.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: LEC TranslateDotNet Server - Language Engineering Corporation, LLC - C:\Program Files\Power Translator 11\LogoMedia TranslateDotNet Server.exe O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

GMER 1.0.12.12027 - http://www.gmer.net
Rootkit scan 2007-12-02 19:22:54
Windows 5.1.2600 Dodatek Service Pack 2

Kod: Zaznacz wszystko: ---- System - GMER 1.0.12 ---- SSDT sptd.sys ZwCreateKey SSDT sptd.sys ZwEnumerateKey SSDT sptd.sys ZwEnumerateValueKey SSDT sptd.sys ZwOpenKey SSDT sptd.sys ZwQueryKey SSDT sptd.sys ZwQueryValueKey SSDT sptd.sys ZwSetValueKey ---- Kernel code sections - GMER 1.0.12 ---- .text USBPORT.SYS!DllUnload F921F62C 5 Bytes JMP 81A5B1B8 ---- Devices - GMER 1.0.12 ---- Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_READ 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA 81BDC1D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_PNP 81BDC1D8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CREATE FF1F61D8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CLOSE FF1F61D8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_READ FF1F61D8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_WRITE FF1F61D8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_QUERY_INFORMATION FF1F61D8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SET_INFORMATION FF1F61D8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_QUERY_EA FF1F61D8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SET_EA FF1F61D8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_FLUSH_BUFFERS FF1F61D8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_QUERY_VOLUME_INFORMATION FF1F61D8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SET_VOLUME_INFORMATION FF1F61D8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_DIRECTORY_CONTROL FF1F61D8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_FILE_SYSTEM_CONTROL FF1F61D8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_DEVICE_CONTROL FF1F61D8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SHUTDOWN FF1F61D8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_LOCK_CONTROL FF1F61D8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CLEANUP FF1F61D8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_PNP FF1F61D8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CREATE 81A46908 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CLOSE 81A46908 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_DEVICE_CONTROL 81A46908 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 81A46908 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_POWER 81A46908 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_SYSTEM_CONTROL 81A46908 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_PNP 81A46908 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CREATE 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CLOSE 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_READ 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_WRITE 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_FLUSH_BUFFERS 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_DEVICE_CONTROL 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_INTERNAL_DEVICE_CONTROL 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SHUTDOWN 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_POWER 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SYSTEM_CONTROL 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_PNP 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CREATE 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CLOSE 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_READ 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_WRITE 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_FLUSH_BUFFERS 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_DEVICE_CONTROL 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_INTERNAL_DEVICE_CONTROL 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SHUTDOWN 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_POWER 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SYSTEM_CONTROL 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_PNP 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CREATE 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CLOSE 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_READ 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_WRITE 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_FLUSH_BUFFERS 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_DEVICE_CONTROL 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_INTERNAL_DEVICE_CONTROL 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SHUTDOWN 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_POWER 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SYSTEM_CONTROL 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_PNP 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CREATE 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CLOSE 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_READ 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_WRITE 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_FLUSH_BUFFERS 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_DEVICE_CONTROL 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_INTERNAL_DEVICE_CONTROL 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SHUTDOWN 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_POWER 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SYSTEM_CONTROL 81B6E1D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_PNP 81B6E1D8 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_CREATE 81A46908 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_CLOSE 81A46908 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_DEVICE_CONTROL 81A46908 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 81A46908 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_POWER 81A46908 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_SYSTEM_CONTROL 81A46908 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_PNP 81A46908 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_CREATE 81A46908 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_CLOSE 81A46908 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_DEVICE_CONTROL 81A46908 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_INTERNAL_DEVICE_CONTROL 81A46908 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_POWER 81A46908 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_SYSTEM_CONTROL 81A46908 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_PNP 81A46908 Device \Driver\usbehci \Device\USBPDO-3 IRP_MJ_CREATE 81A161D8 Device \Driver\usbehci \Device\USBPDO-3 IRP_MJ_CLOSE 81A161D8 Device \Driver\usbehci \Device\USBPDO-3 IRP_MJ_DEVICE_CONTROL 81A161D8 Device \Driver\usbehci \Device\USBPDO-3 IRP_MJ_INTERNAL_DEVICE_CONTROL 81A161D8 Device \Driver\usbehci \Device\USBPDO-3 IRP_MJ_POWER 81A161D8 Device \Driver\usbehci \Device\USBPDO-3 IRP_MJ_SYSTEM_CONTROL 81A161D8 Device \Driver\usbehci \Device\USBPDO-3 IRP_MJ_PNP 81A161D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_READ 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_WRITE 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_FLUSH_BUFFERS 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_DEVICE_CONTROL 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_INTERNAL_DEVICE_CONTROL 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SHUTDOWN 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CLEANUP 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_POWER 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SYSTEM_CONTROL 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_PNP 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_READ 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_WRITE 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_FLUSH_BUFFERS 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_DEVICE_CONTROL 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_INTERNAL_DEVICE_CONTROL 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SHUTDOWN 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CLEANUP 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_POWER 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SYSTEM_CONTROL 81BDE1D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_PNP 81BDE1D8

---- EOF - GMER 1.0.12 ----

**Posty:** 18165 · przez **wojtas** 02 Gru 2007, 21:07

przeinstaluj nero i daj loga z combofixa (tylko przed uzyciem go zmien date w komputerze np. na 15.11.2007 zeby byla wczesniejsza niz dzisiejsza data)

**Posty:** 9 · przez **Kuba13Joker** 02 Gru 2007, 21:30

Nero odinstalowany , zegar przestawiony, log poniżej;

Kod: Zaznacz wszystko: "Kuba" - 2007-11-02 20:24:23 - ComboFix 07-07-23.6 - Dodatek Service Pack 2 NTFS ((((((((((((((((((((((((( Files Created from 2007-10-02 to 2007-11-02 ))))))))))))))))))))))))))))))) 2007-11-28 22:49 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\Nokia 2007-11-27 16:37 <DIR> d-------- C:\WINDOWS\CSI Kryminalne Zagadki Las Vegas - Mroczne Motywy 2007-11-27 16:37 <DIR> d-------- C:\Program Files\Ubisoft 2007-10-23 09:36 <DIR> d-------- C:\Program Files\Bob Budowniczy 2007-10-13 22:13 90,112 --a------ C:\WINDOWS\unvise32.exe 2007-10-13 22:02 <DIR> d-------- C:\Program Files\DreamCatcher 2007-10-12 09:38 <DIR> d-------- C:\DOCUME~1\Kuba\DANEAP~1\Disney Interactive 2007-10-12 09:37 <DIR> d-------- C:\Program Files\Disney Interactive (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-12-02 18:21:22 -------- d-----w C:\Program Files\PowerArchiver 2007-11-30 23:18:02 -------- d-----w C:\Program Files\English Translator 3 2007-11-28 22:00:50 -------- d-----w C:\Program Files\Common Files\PCSuite 2007-11-02 19:20:51 -------- d-----w C:\Program Files\Wanadoo 2007-11-02 19:14:10 24 ----a-w C:\WINDOWS\system32\DVCStateBkp-{00000000-00000000-0000000B-00001102-00000002-80651102}.dat 2007-11-02 19:14:10 24 ----a-w C:\WINDOWS\system32\DVCState-{00000000-00000000-0000000B-00001102-00000002-80651102}.dat 2007-11-02 19:13:16 -------- d-----w C:\Program Files\Common Files\Ahead 2007-10-31 00:54:18 -------- d-----w C:\DOCUME~1\Kuba\DANEAP~1\Skype 2007-10-28 21:04:50 494,204 ----a-w C:\WINDOWS\system32\perfh015.dat 2007-10-28 21:04:49 87,386 ----a-w C:\WINDOWS\system32\perfc015.dat 2007-10-12 22:53:23 -------- d-----w C:\DOCUME~1\Kuba\DANEAP~1\Nokia 2007-10-12 08:39:01 -------- d--h--w C:\Program Files\InstallShield Installation Information ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "nwiz"="nwiz.exe" [2006-10-22 12:22 C:\WINDOWS\system32\nwiz.exe] "autoclk"="autoclk.exe" [2003-01-30 09:48 C:\WINDOWS\autoclk.exe] "WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2002-12-09 18:24] "WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\TaskbarIcon.exe" [2002-12-09 18:24] "WINDVDPatch"="CTHELPER.EXE" [2002-07-02 10:56 C:\WINDOWS\system32\CTHELPER.EXE] "Jet Detection"="C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe" [2001-11-29 01:00] "CTStartup"="C:\Program Files\Creative\Splash Screen\CTEaxSpl.exe" [2001-12-20 01:00] "Disc Detector"="C:\Program Files\Creative\ShareDLL\CtNotify.exe" [2001-12-25 19:00] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-04-30 16:42] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] @= R0 videX32;videX32;C:\WINDOWS\system32\DRIVERS\videX32.sys R1 msikbd2k;Multimedia Keyboard Filter Driver;C:\WINDOWS\system32\DRIVERS\msikbd2k.sys R2 BTSERIAL;Bluetooth Serial Driver;\??\C:\WINDOWS\system32\drivers\btserial.sys R2 BTSLBCSP;Bluetooth Port Client Driver;\??\C:\WINDOWS\system32\drivers\btslbcsp.sys R2 nhksrv;Netropa NHK Server;C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe R3 adiusbaw;USB ADSL WAN Adapter;C:\WINDOWS\system32\DRIVERS\adiusbaw.sys S2 ADILOADER;General Purpose USB Driver (adildr.sys);C:\WINDOWS\system32\Drivers\adildr.sys S3 btwmodem;Modem Bluetooth;C:\WINDOWS\system32\DRIVERS\btwmodem.sys S3 ctljystk;Port gier dla karty Creative SB Live!;C:\WINDOWS\system32\DRIVERS\ctljystk.sys S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0;c:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe S3 idsvc;Windows CardSpace;"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe" S3 SNPP106;PC Camera (6029 CIF);C:\WINDOWS\system32\DRIVERS\snpp106.sys S4 NetTcpPortSharing;Net.Tcp Port Sharing Service;"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe" ************************************************************************** catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-02 20:27:00 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden registry entries ... [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\A\1\5\1c] "Order"=hex:08,00,00,00,02,00,00,00,b8,01,00,00,01,00,00,00,04,00,00,00,8c,.. scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** Completion time: 2007-11-02 20:27:58 C:\ComboFix2.txt ... 2007-12-02 20:02 C:\ComboFix3.txt ... 2007-12-02 19:30 --- E O F ---

**Posty:** 18165 · przez **wojtas** 02 Gru 2007, 22:23

czysty masz system

**Posty:** 9 · przez **Kuba13Joker** 02 Gru 2007, 22:26

To wszystko tylko dzięki odinstalowaniu Nero???

**Posty:** 18165 · przez **wojtas** 03 Gru 2007, 16:57

no nie wiem w logu masz czysto nie masz wirusow

proszę o sprawdzenie loga

Proszę o sprawdzenie loga

Kto jest na forum