Od kilku dni komputer mojej mamy doprowadza ją do stanu irytacji. Mianowicie wiesza się niemiłosiernie w całkowicie przypadkowych chwilach, podczas skrajnie różnych czynności. Zasilacz sprawdziłem miernikiem, niby wszystko dobrze, ale jednak coś jest nie tak. Dlatego proszę o sprawdzenie logów, może tu jest pies pogrzebany...
Pozdrawiam, Karol
GMER:
- Kod: Zaznacz wszystko
GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-10-25 21:05:28
Windows 5.1.2600 Dodatek Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-5 WDC_WD5000AAKS-22A7B0 rev.01.03B01
Running: b5uz7n1r.exe; Driver: C:\DOCUME~1\WACICI~1\USTAWI~1\Temp\agddrkog.sys
---- System - GMER 1.0.15 ----
INT 0x01 \SystemRoot\system32\DRIVERS\ati2mtag.sys (ATI Radeon WindowsNT Miniport Driver/ATI Technologies Inc.) B9BDA59A
INT 0x03 \SystemRoot\system32\DRIVERS\ati2mtag.sys (ATI Radeon WindowsNT Miniport Driver/ATI Technologies Inc.) B9BDA655
---- Kernel code sections - GMER 1.0.15 ----
.text C:\WINDOWS\system32\DRIVERS\ati2mtag.sys section is writeable [0xB9A5C000, 0x17D80E, 0xE8000020]
---- User code sections - GMER 1.0.15 ----
.text C:\Documents and Settings\All Users\Dane aplikacji\Mozilla Firefox\firefox.exe[3580] ntdll.dll!LdrLoadDll 7C9163A3 5 Bytes JMP 0149A650 C:\Documents and Settings\All Users\Dane aplikacji\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Documents and Settings\All Users\Dane aplikacji\Mozilla Firefox\firefox.exe[3580] kernel32.dll!lstrlenW + 43 7C809ADC 7 Bytes JMP 016D7E1A C:\Documents and Settings\All Users\Dane aplikacji\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Documents and Settings\All Users\Dane aplikacji\Mozilla Firefox\firefox.exe[3580] kernel32.dll!MapViewOfFileEx + 6A 7C80B990 7 Bytes JMP 016D7DF7 C:\Documents and Settings\All Users\Dane aplikacji\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Documents and Settings\All Users\Dane aplikacji\Mozilla Firefox\firefox.exe[3580] kernel32.dll!ValidateLocale + B1E8 7C8449F8 7 Bytes JMP 0149EDB3 C:\Documents and Settings\All Users\Dane aplikacji\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Documents and Settings\All Users\Dane aplikacji\Mozilla Firefox\firefox.exe[3580] GDI32.dll!SetDIBitsToDevice + 209 77F19E04 7 Bytes JMP 016D7D78 C:\Documents and Settings\All Users\Dane aplikacji\Mozilla Firefox\xul.dll (Mozilla Foundation)
---- Devices - GMER 1.0.15 ----
AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
---- Registry - GMER 1.0.15 ----
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x74 0xE2 0x76 0xE2 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x74 0xE2 0x76 0xE2 ...
---- EOF - GMER 1.0.15 ----
