Problem z resetem komputera [log]

**Posty:** 16 · przez **JUZEKSKŁAD** 21 Lut 2009, 23:07

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:04:44, on 2009-02-21 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files\Analog Devices\SoundMAX\Smax4.exe C:\Program Files\Winamp\winampa.exe C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe C:\Program Files\Java\j2re1.4.2_15\bin\jusched.exe C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Picasa2\PicasaMediaDetector.exe C:\Program Files\Nowe Gadu-Gadu\gg.exe C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\Program Files\Nowe Gadu-Gadu\spellchecker_gg.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Winamp\winamp.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - (no file) O2 - BHO: BioSmuth - {72132FDD-5B51-4BC1-BCC8-860F20AF1BF9} - (no file) O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [Flashget] C:\Program Files\FlashGet\flashget.exe /min O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\j2re1.4.2_15\bin\jusched.exe" O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe O4 - HKCU\..\Run: [RS Downloader] "C:\Program Files\Rapid Express\Rapid Express.exe" -start O4 - HKCU\..\Run: [Expressivo] "C:\Program Files\ivo\Expressivo\expressivo.exe" -t -nosplash O4 - HKCU\..\Run: [ALLUpdate] "C:\Program Files\ALLPlayer\ALLUpdate.exe" "sleep" O4 - HKCU\..\Run: [Odkurzacz-MCD] C:\Program Files\Odkurzacz\odk_mcd.exe O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h O4 - HKCU\..\Run: [Nowe Gadu-Gadu] "C:\Program Files\Nowe Gadu-Gadu\gg.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: BlueSoleil.lnk = C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe O8 - Extra context menu item: &Ściągnij przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: &Ściągnij wszystko przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 3.80\AMVConverter\grab.html O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.11\AMVConverter\grab.html O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 3.80\MediaManager\grab.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_15\bin\npjpi142_15.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_15\bin\npjpi142_15.dll O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{06A5810B-FFE1-4D9F-A697-A59DBE9533F7}: NameServer = 172.16.1.254,217.96.23.251 O17 - HKLM\System\CS1\Services\Tcpip\..\{06A5810B-FFE1-4D9F-A697-A59DBE9533F7}: NameServer = 172.16.1.254,217.96.23.251 O17 - HKLM\System\CS2\Services\Tcpip\..\{06A5810B-FFE1-4D9F-A697-A59DBE9533F7}: NameServer = 172.16.1.254,217.96.23.251 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Start BT in service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- End of file - 7373 bytes

Chodzi o to , że komputer co chwilę się wyłącza czasami co godzinę a czasami 5 razy w godzinie.

**Posty:** 8001 · przez **Okocza** 21 Lut 2009, 23:08

JUZEKSKŁAD, gdzie opis problemu i log z combofixa ?

**Posty:** 16 · przez **JUZEKSKŁAD** 21 Lut 2009, 23:17

Kod: Zaznacz wszystko: ComboFix 09-02-19.01 - Łukasz 2009-02-21 22:14:20.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.510.92 [GMT 1:00] Uruchomiony z: c:\documents and settings\Łukasz\Pulpit\Saves\ComboFix.exe AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Updated) * Utworzono nowy punkt przywracania . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\Łukasz\Menu Start\Cheap Pharmacy Online.url c:\documents and settings\Łukasz\Menu Start\Search Online.url c:\documents and settings\Łukasz\Menu Start\SMS TRAP.url c:\documents and settings\Łukasz\Menu Start\VIP Casino.url c:\documents and settings\Łukasz\Ulubione\Cheap Pharmacy Online.url c:\documents and settings\Łukasz\Ulubione\Search Online.url c:\documents and settings\Łukasz\Ulubione\SMS TRAP.url c:\documents and settings\Łukasz\Ulubione\VIP Casino.url c:\program files\Mozilla Firefox\plugins\NPMyGlSh.dll c:\program files\myglobalsearch c:\program files\myglobalsearch\bar\1.bin\M9FFXTBR.JAR c:\program files\myglobalsearch\bar\1.bin\M9FFXTBR.MANIFEST c:\program files\myglobalsearch\bar\1.bin\M9NTSTBR.JAR c:\program files\myglobalsearch\bar\1.bin\M9NTSTBR.MANIFEST c:\program files\myglobalsearch\bar\1.bin\NPMYGLSH.DLL c:\program files\myglobalsearch\bar\Cache\[u]0[/u]9F3A4C7 c:\program files\myglobalsearch\bar\Cache\[u]0[/u]9F3A6DA c:\program files\myglobalsearch\bar\Cache\[u]0[/u]9F3A832.bin c:\program files\myglobalsearch\bar\Cache\[u]0[/u]9F3A9B8.bin c:\program files\myglobalsearch\bar\Cache\[u]0[/u]9F3AB00.bin c:\program files\myglobalsearch\bar\Cache\files.ini c:\program files\myglobalsearch\bar\History\search c:\program files\myglobalsearch\bar\Settings\prevcfg.htm c:\windows\ios.dat c:\windows\system32\c.ico c:\windows\system32\m.ico c:\windows\system32\m3.ico c:\windows\system32\p.ico c:\windows\system32\s.ico c:\windows\system32\sf.ico . ((((((((((((((((((((((((( Pliki utworzone od 2009-01-21 do 2009-02-21 ))))))))))))))))))))))))))))))) . 2009-02-21 22:03 . 2009-02-21 22:03 <DIR> d-------- c:\program files\Trend Micro 2009-02-21 21:04 . 2009-02-21 21:09 <DIR> d-------- c:\program files\Nowe Gadu-Gadu 2009-02-21 12:43 . 2009-02-21 12:43 <DIR> d-------- c:\program files\Ares 2009-02-18 17:21 . 2009-02-18 17:21 <DIR> d-------- c:\program files\Windows Installer Clean Up 2009-02-18 17:21 . 2009-02-18 17:21 <DIR> d-------- c:\program files\MSECACHE 2009-02-16 19:56 . 2009-02-16 20:09 <DIR> d-------- C:\YoutubeMusicDownloader 2009-02-16 19:56 . 2009-02-16 20:12 <DIR> d-------- C:\tmpDownload 2009-02-16 14:19 . 2009-02-16 14:19 <DIR> dr-h----- C:\MSOCache 2009-02-14 22:14 . 2009-02-21 20:33 <DIR> d-------- c:\documents and settings\Łukasz\Dane aplikacji\skypePM 2009-02-14 22:14 . 2009-02-21 20:33 <DIR> d-------- c:\documents and settings\Łukasz\Dane aplikacji\skypePM 2009-02-14 22:14 . 2009-02-21 20:33 <DIR> d-------- c:\documents and settings\Łukasz\Dane aplikacji\skypePM 2009-02-14 22:14 . 2009-02-14 22:14 56 --ah----- c:\windows\system32\ezsidmv.dat 2009-02-14 22:12 . 2009-02-21 21:59 <DIR> d-------- c:\documents and settings\Łukasz\Dane aplikacji\Skype 2009-02-14 22:12 . 2009-02-21 21:59 <DIR> d-------- c:\documents and settings\Łukasz\Dane aplikacji\Skype 2009-02-14 22:12 . 2009-02-21 21:59 <DIR> d-------- c:\documents and settings\Łukasz\Dane aplikacji\Skype 2009-02-14 22:11 . 2009-02-14 22:11 <DIR> dr------- c:\program files\Skype 2009-02-14 22:11 . 2009-02-14 22:11 <DIR> d-------- c:\program files\Common Files\Skype 2009-02-14 22:11 . 2009-02-14 22:11 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Skype 2009-02-14 21:10 . 2003-07-20 19:17 5,174 --a------ c:\windows\system32\nppt9x.vxd 2009-02-14 21:10 . 2005-01-04 10:43 4,682 --a------ c:\windows\system32\npptNT2.sys 2009-02-14 21:09 . 2009-02-14 21:09 <DIR> d-------- c:\program files\Common Files\INCA Shared 2009-02-12 22:13 . 2009-02-12 22:15 <DIR> d-------- C:\YouTubeGet 2009-02-09 22:24 . 2009-02-19 07:22 <DIR> d-------- c:\program files\Odkurzacz 2009-02-09 08:25 . 2009-02-09 08:25 <DIR> d-------- c:\program files\Lavasoft 2009-02-09 08:25 . 2009-02-09 08:25 <DIR> d-------- c:\program files\Common Files\Wise Installation Wizard 2009-02-09 08:25 . 2009-02-09 08:37 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Lavasoft 2009-02-09 08:21 . 2009-02-09 08:21 <DIR> d-------- c:\program files\Tibia 2009-02-09 08:21 . 2009-02-09 08:21 <DIR> d-------- c:\documents and settings\Łukasz\Dane aplikacji\Tibia 2009-02-09 08:21 . 2009-02-09 08:21 <DIR> d-------- c:\documents and settings\Łukasz\Dane aplikacji\Tibia 2009-02-09 08:21 . 2009-02-09 08:21 <DIR> d-------- c:\documents and settings\Łukasz\Dane aplikacji\Tibia 2009-02-08 17:12 . 2009-02-08 17:13 32 --a------ C:\VDFS.DMP 2009-02-06 14:29 . 2009-02-06 14:29 <DIR> d-------- c:\documents and settings\Łukasz\Dane aplikacji\Reallusion 2009-02-06 14:29 . 2009-02-06 14:29 <DIR> d-------- c:\documents and settings\Łukasz\Dane aplikacji\Reallusion 2009-02-06 14:29 . 2009-02-06 14:29 <DIR> d-------- c:\documents and settings\Łukasz\Dane aplikacji\Reallusion 2009-02-06 14:27 . 2009-02-06 14:27 <DIR> d-------- c:\program files\Reallusion 2009-02-06 14:27 . 2009-02-06 14:27 <DIR> d-------- c:\program files\Common Files\Reallusion 2009-02-05 14:45 . 2009-02-05 14:45 <DIR> d-------- c:\program files\Microsoft.NET 2009-02-04 13:25 . 2009-02-09 09:38 46,065 --a------ C:\Program1.RPT 2009-02-04 09:16 . 2009-02-04 09:16 4,096 --a------ c:\windows\d3dx.dat 2009-02-03 20:47 . 2009-02-03 20:47 72 --a------ c:\windows\MediaManager.INI 2009-02-03 20:42 . 2009-02-03 20:42 <DIR> d-------- c:\program files\MP3 Player Utilities 3.80 2009-02-03 20:41 . 2009-02-03 20:41 <DIR> d-------- c:\windows\system32\recover 2009-02-03 20:38 . 2009-02-03 20:38 <DIR> d-------- c:\windows\system32\IOSUBSYS 2009-02-03 20:38 . 2009-02-03 20:38 <DIR> d-------- c:\program files\MP3 2009-02-03 20:38 . 2009-02-03 20:38 <DIR> d-------- c:\documents and settings\Łukasz\WINDOWS 2009-02-03 20:38 . 2009-02-03 20:38 <DIR> d-------- c:\documents and settings\Łukasz\WINDOWS 2009-02-03 20:38 . 1998-01-23 12:22 304,128 --a------ c:\windows\IsUninst.exe 2009-02-03 20:38 . 2003-03-25 09:05 18,912 --a------ c:\windows\system32\drivers\SMMD.sys 2009-02-02 16:02 . 2009-02-02 16:02 <DIR> d-------- c:\program files\counter-strike 2009-02-02 14:20 . 2009-02-02 14:20 <DIR> d-------- c:\program files\Ascaron 2009-02-02 10:37 . 2009-02-02 10:37 <DIR> d-------- c:\program files\CGArchive.com 2009-01-31 14:03 . 2009-01-31 14:04 <DIR> d-------- c:\program files\SystemRequirementsLab 2009-01-31 09:02 . 2000-12-08 21:59 122,880 --a------ c:\windows\UnGins.exe 2009-01-31 09:00 . 2009-02-02 15:34 <DIR> d-------- c:\program files\Honor_pol 2009-01-30 15:05 . 2009-01-30 15:05 <DIR> d-------- c:\program files\Common Files\Adobe Systems Shared 2009-01-30 15:05 . 2009-01-30 15:05 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\Adobe Systems 2009-01-30 12:32 . 2009-01-30 12:32 280 --a------ c:\windows\game.ini 2009-01-29 16:26 . 2000-05-21 23:00 140,488 --a------ c:\windows\system32\comdlg32.ocx 2009-01-29 16:26 . 1998-06-23 23:00 115,016 --a------ c:\windows\system32\MSINET.OCX 2009-01-29 16:26 . 1998-06-17 23:00 89,360 --a------ c:\windows\system32\VB5DB.DLL 2009-01-29 16:26 . 2000-03-17 08:21 69,632 --a------ c:\windows\system32\xmltok.dll 2009-01-29 16:26 . 2000-03-17 08:21 36,864 --a------ c:\windows\system32\xmlparse.dll 2009-01-29 16:26 . 2002-04-24 11:43 35,840 --a------ c:\windows\system32\comdlg32.oca 2009-01-29 16:26 . 2002-04-09 16:23 29,184 --a------ c:\windows\system32\MSINET.oca 2009-01-29 16:26 . 2002-10-17 09:35 26,096 --a------ c:\windows\system32\xmlinst.exe 2009-01-29 14:36 . 2009-01-29 14:36 <DIR> d-------- c:\program files\Activision 2009-01-29 14:32 . 2009-01-29 14:32 <DIR> d--hs---- c:\windows\ftpcache 2009-01-27 17:36 . 2009-01-27 17:36 <DIR> d-------- c:\program files\ESET 2009-01-27 17:36 . 2009-01-27 17:36 <DIR> d-------- c:\documents and settings\All Users\Dane aplikacji\ESET 2009-01-26 11:58 . 2009-01-29 16:26 <DIR> d-------- c:\program files\Ubisoft 2009-01-24 21:41 . 2004-08-03 23:44 221,184 --a------ c:\windows\system32\wmpns.dll 2009-01-24 14:50 . 2009-01-24 14:50 <DIR> d-------- c:\program files\FotkaPRO 2009-01-24 14:49 . 2007-03-08 00:51 129,784 --------- c:\windows\system32\pxafs.dll 2009-01-24 12:44 . 2009-01-24 12:45 <DIR> d-------- c:\windows\system32\URTTemp 2009-01-21 16:46 . 2009-01-21 16:46 530 --a------ C:\Dokument1.rtf . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-02-21 20:59 --------- d-----w c:\program files\FlashGet 2009-02-18 16:58 --------- d-----w c:\program files\MP3Gain 2009-02-17 15:24 --------- d-----w c:\program files\BearShare 2009-02-12 12:53 --------- d-----w c:\program files\Mozilla Thunderbird 2009-02-09 21:35 --------- d-----w c:\program files\NAPI-PROJEKT 2009-02-09 21:35 --------- d-----w c:\program files\IrfanView 2009-02-09 08:40 --------- d--h--w c:\program files\InstallShield Installation Information 2009-02-03 19:40 --------- d-----w c:\program files\Common Files\Adobe 2009-02-02 13:20 --------- d-----w c:\program files\Common Files\InstallShield 2009-01-29 15:25 11,973 ----a-w c:\windows\system32\drivers\secdrv.sys 2009-01-29 15:18 --------- d-----w c:\program files\Gadu-Gadu 2009-01-25 18:26 --------- d-----w c:\program files\Google 2009-01-24 15:15 --------- d-----w c:\documents and settings\Łukasz\Dane aplikacji\Winamp 2009-01-24 15:15 --------- d-----w c:\documents and settings\Łukasz\Dane aplikacji\Winamp 2009-01-24 15:15 --------- d-----w c:\documents and settings\Łukasz\Dane aplikacji\Winamp 2009-01-24 13:55 --------- d-----w c:\program files\Winamp 2009-01-17 10:42 --------- d-----w c:\program files\Picasa2 2009-01-16 18:04 --------- d-----w c:\program files\Java 2009-01-16 18:02 --------- d-----w c:\program files\Common Files\Java 2009-01-12 13:41 --------- d-----w c:\program files\ALLPlayer 2009-01-12 12:32 --------- d-----w c:\program files\VS Online 2009-01-03 17:28 --------- d-----w c:\documents and settings\Tata\Dane aplikacji\AdobeUM 2009-01-03 15:08 --------- d-----w c:\documents and settings\Łukasz\Dane aplikacji\Nowe Gadu-Gadu 2009-01-03 15:08 --------- d-----w c:\documents and settings\Łukasz\Dane aplikacji\Nowe Gadu-Gadu 2009-01-03 15:08 --------- d-----w c:\documents and settings\Łukasz\Dane aplikacji\Nowe Gadu-Gadu 2009-01-02 22:49 --------- d-----w c:\documents and settings\Łukasz\Dane aplikacji\AdobeUM 2009-01-02 22:49 --------- d-----w c:\documents and settings\Łukasz\Dane aplikacji\AdobeUM 2009-01-02 22:49 --------- d-----w c:\documents and settings\Łukasz\Dane aplikacji\AdobeUM 2009-01-01 19:51 --------- d-----w c:\program files\Microsoft Kalkulator Plus 2008-12-30 22:45 --------- d-----w c:\program files\Rapid Express 2008-12-30 22:38 --------- d-----w c:\program files\Common Files\DirectX 2008-12-30 22:22 --------- d-----w c:\program files\Alcohol Soft 2008-12-30 22:17 716,272 ----a-w c:\windows\system32\drivers\sptd.sys 2008-12-25 20:28 --------- d-----w c:\program files\Ahead 2008-12-25 20:27 --------- d-----w c:\program files\Common Files\Nero 2008-12-25 20:25 --------- d-----w c:\program files\Common Files\Ahead 2008-12-25 20:25 --------- d-----w c:\documents and settings\All Users\Dane aplikacji\Ahead 2008-12-24 20:59 --------- d-----w c:\program files\Valve 2008-12-24 20:30 --------- d-----w c:\program files\Counter-Strike 1.6 2008-12-24 07:01 --------- d-----w c:\program files\REAPER 2008-12-24 07:01 --------- d-----w c:\documents and settings\Łukasz\Dane aplikacji\REAPER 2008-12-24 07:01 --------- d-----w c:\documents and settings\Łukasz\Dane aplikacji\REAPER 2008-12-24 07:01 --------- d-----w c:\documents and settings\Łukasz\Dane aplikacji\REAPER 2008-12-23 20:12 --------- d-----w c:\program files\Deluxe Ski Jump 3 2008-12-23 14:13 --------- d-----w c:\program files\csout 2008-12-14 20:52 368,640 ----a-w c:\windows\system32\ReWire.dll 2006-05-24 15:38 233,472 ----a-w c:\program files\mozilla firefox\plugins\CrazyTalk4Native.dll 2006-05-18 16:00 204,895 ----a-w c:\program files\mozilla firefox\plugins\ctdomemhelper.dll 2005-09-29 13:41 77,824 ----a-w c:\program files\mozilla firefox\plugins\ctframeplayerobject.dll 2006-05-18 15:59 426,081 ----a-w c:\program files\mozilla firefox\plugins\ctplayerobject.dll 2005-02-02 11:19 458,752 ----a-w c:\program files\mozilla firefox\plugins\imagickrt.dll 2006-04-10 17:35 139,264 ----a-w c:\program files\mozilla firefox\plugins\rlcontentclass.dll 2005-11-09 10:10 204,800 ----a-w c:\program files\mozilla firefox\plugins\RLMusicPacker.dll 2005-11-09 10:42 106,496 ----a-w c:\program files\mozilla firefox\plugins\RLMusicUnpacker.dll 2006-01-04 10:22 212,992 ----a-w c:\program files\mozilla firefox\plugins\RLVoicePacker.dll 2006-01-04 10:21 167,936 ----a-w c:\program files\mozilla firefox\plugins\RLVoiceUnpacker.dll . ------- Sigcheck ------- 2008-04-13 20:20 361344 93ea8d04ec73a85db02eb8805988f733 c:\windows\SoftwareDistribution\Download\3ed4af7962c2564903d5c33c33d1489e\tcpip.sys 2004-08-03 22:14 359040 9f4b36614a0fc234525ba224957de55c c:\windows\system32\dllcache\tcpip.sys 2004-08-03 22:14 359040 6a603809f598332dbedd535bdbce313e c:\windows\system32\drivers\tcpip.sys . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-03 15360] "Picasa Media Detector"="c:\program files\Picasa2\PicasaMediaDetector.exe" [2008-08-21 443968] "RS Downloader"="c:\program files\Rapid Express\Rapid Express.exe" [2008-10-29 1147904] "ALLUpdate"="c:\program files\ALLPlayer\ALLUpdate.exe" [2008-11-24 869888] "Odkurzacz-MCD"="c:\program files\Odkurzacz\odk_mcd.exe" [2008-08-16 264704] "Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-02-04 23975720] "ares"="c:\program files\Ares\Ares.exe" [2008-12-16 887808] "Nowe Gadu-Gadu"="c:\program files\Nowe Gadu-Gadu\gg.exe" [2009-02-16 9302632] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-07 13574144] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-10-07 86016] "SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 925696] "WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-08-04 36352] "HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb04.exe" [2001-11-01 196608] "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648] "Flashget"="c:\program files\FlashGet\flashget.exe" [2007-09-25 2007088] "SunJavaUpdateSched"="c:\program files\Java\j2re1.4.2_15\bin\jusched.exe" [2007-05-22 32881] "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2008-09-16 1447168] "nwiz"="nwiz.exe" [2008-10-07 c:\windows\system32\nwiz.exe] "High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2004-10-27 c:\windows\system32\HdAShCut.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360] c:\documents and settings\All Users\Menu Start\Programy\Autostart\ Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-24 29696] BlueSoleil.lnk - c:\program files\IVT Corporation\BlueSoleil\BlueSoleil.exe [2007-04-21 1441792] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.l3fhg"= mp3fhg.acm "msacm.divxa32"= divxa32.acm "VIDC.X264"= x264vfw.dll "VIDC.HFYU"= huffyuv.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"= "d:\\Juzek\\BlueSoleil + Crack\\crack\\BlueSoleil.exe"= "c:\\Program Files\\Gadu-Gadu\\gg.exe"= "c:\\Program Files\\Counter-Strike 1.6\\hl.exe"= "c:\\Program Files\\FlashGet\\flashget.exe"= "c:\\Program Files\\Nowe Gadu-Gadu\\gg.exe"= "c:\\Program Files\\Honor_pol\\MOHAA.EXE"= "c:\\Program Files\\Ares\\Ares.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2008-08-18 34312] R2 ekrn;Eset Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2008-09-17 468224] S3 Start BT in service;Start BT in service;c:\program files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe [2007-04-21 52080] . - - - - USUNIĘTO PUSTE WPISY - - - - HKCU-Run-Expressivo - c:\program files\ivo\Expressivo\expressivo.exe HKLM-Run-BearShare - c:\program files\BearShare\BearShare.exe . ------- Skan uzupełniający ------- . uStart Page = hxxp://google.pl/ uDefault_Search_URL = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: &Ściągnij przy pomocy FlashGet'a - c:\program files\FlashGet\jc_link.htm IE: &Ściągnij wszystko przy pomocy FlashGet'a - c:\program files\FlashGet\jc_all.htm IE: Add to AMV Convert Tool... - c:\program files\MP3 Player Utilities 3.80\AMVConverter\grab.html IE: Add to AMV Converter... - c:\program files\MP3 Player Utilities 4.11\AMVConverter\grab.html IE: MediaManager tool grab multimedia file - c:\program files\MP3 Player Utilities 3.80\MediaManager\grab.html TCP: {06A5810B-FFE1-4D9F-A697-A59DBE9533F7} = 172.16.1.254,217.96.23.251 FF - ProfilePath - c:\documents and settings\Łukasz\Dane aplikacji\Mozilla\Firefox\Profiles\uivxpoxs.default\ FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll FF - plugin: c:\program files\Java\j2re1.4.2_15\bin\NPJava11.dll FF - plugin: c:\program files\Java\j2re1.4.2_15\bin\NPJava12.dll FF - plugin: c:\program files\Java\j2re1.4.2_15\bin\NPJava13.dll FF - plugin: c:\program files\Java\j2re1.4.2_15\bin\NPJava14.dll FF - plugin: c:\program files\Java\j2re1.4.2_15\bin\NPJava32.dll FF - plugin: c:\program files\Java\j2re1.4.2_15\bin\NPJPI142_15.dll FF - plugin: c:\program files\Java\j2re1.4.2_15\bin\NPOJI610.dll FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npRLCT4Player.dll FF - plugin: c:\program files\Picasa2\npPicasa2.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-02-21 22:15:22 Windows 5.1.2600 Dodatek Service Pack 2 NTFS skanowanie ukrytych procesów ... skanowanie ukrytych wpisów autostartu ... skanowanie ukrytych plików ... skanowanie pomyślnie ukończone ukryte pliki: 0 ************************************************************************** . Czas ukończenia: 2009-02-21 22:16:20 ComboFix-quarantined-files.txt 2009-02-21 21:16:18 Przed: 61 210 869 760 bajtów wolnych Po: 61,218,746,368 bajtów wolnych WindowsXP-KB310994-SP2-Pro-BootDisk-PLK.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect 283 --- E O F --- 2009-01-14 11:32:21

Nie wiem czy zrobiłem to co trzeba bo jestem nowicjuszem ale mam nadzieję że pomożecie mi w tej kwestii.

**Posty:** 18165 · przez **wojtas** 22 Lut 2009, 12:34

1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp

oraz skasuj folder C:\Qoobox
2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem
5. Wykonaj skan Dr. Web CureIt
6. Przeskanuj obszar mojego komputera http://www.kaspersky.pl/virusscanner.html (uruchom przez IE) Daj raport z niego na forum.

i tym:

FixIEDef.

**Posty:** 16 · przez **JUZEKSKŁAD** 22 Lut 2009, 22:39

dzieki "wojtas" ale nic z tego , zrobiłem reinstall całego windowsa i dalej mam te resety ;/
pytałem kolegi jaki może być tego problem ? a on na to :
1). zepsuty ram
2). zepsuty plyta glowna
3). zepsuty zasilacz
4). zakurzony w srodku komp
5). uwalony soft - zrob format
6). przegrzewanie - nie ma gdzie ulatywac gorace powietrze z wentulatora

**Posty:** 10264 · przez **Mike** 23 Lut 2009, 22:09

Podaj dokładną konfiguracją kompa oraz markę i moc zasilacza.
Jeżeli komp się odpali, to wstaw napięcia z programu everest z zakładki Czujnik