komputer się zacina gdy otwieram aplikacje

[demin]

Witam, mam problem z komputerem. Polega on na tym, że się czasami strasznie zacina np. gdy minimalizuje okno przeglądarki, otwieram notatnik lub inne aplikacje. Tak więc proszę o sprawdzenie logów. Z góry dziękuje.

ComboFix

ComboFix 08-04-29.5 - demin 2008-05-01 12:14:07.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1045.18.175 [GMT 2:00]
Running from: C:\Documents and Settings\demin\Pulpit\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2008-04-01 to 2008-05-01 )))))))))))))))))))))))))))))))
.

2008-05-01 12:11 . 2008-04-29 05:11 <DIR> d-------- C:\SDFix
2008-04-25 22:03 . 2008-04-25 22:03 0 --a------ C:\WINNT\system32\QuickTime.qtp
2008-04-25 19:54 . 2003-06-19 01:31 17,920 --a------ C:\WINNT\system32\mdimon.dll
2008-04-25 19:53 . 2008-04-25 19:53 <DIR> d-------- C:\Program Files\Microsoft.NET
2008-04-25 19:52 . 2008-04-25 19:53 <DIR> d-------- C:\WINNT\SHELLNEW
2008-04-23 20:55 . 2008-04-23 20:55 <DIR> d-------- C:\WINNT\system32\quicktime
2008-04-23 20:55 . 2003-12-14 09:20 5,557,248 --------- C:\WINNT\system32\QuickTime.qts
2008-04-23 20:55 . 2001-08-23 17:25 1,706,800 --------- C:\WINNT\system32\gdiplus.dll
2008-04-23 20:55 . 2004-02-12 09:39 438,272 --------- C:\WINNT\system32\vp6vfw.dll
2008-04-23 20:55 . 2005-07-20 19:05 75,264 --------- C:\WINNT\system32\zlib1.dll
2008-04-23 20:44 . 2008-04-23 20:44 <DIR> d-------- C:\Documents and Settings\demin\Dane aplikacji\Video DVD Maker FREE
2008-04-23 19:57 . 2008-04-23 19:57 <DIR> d-------- C:\WINNT\Sun
2008-04-23 19:45 . 2008-02-22 02:33 69,632 --a------ C:\WINNT\system32\javacpl.cpl
2008-04-23 19:44 . 2008-04-23 19:45 <DIR> d-------- C:\Program Files\Java
2008-04-23 19:42 . 2008-04-23 19:42 <DIR> d-------- C:\Program Files\Common Files\Java
2008-04-23 15:49 . 2008-04-23 15:58 26 --a------ C:\WINNT\VobEdit.INI
2008-04-20 18:48 . 2008-04-20 18:48 <DIR> d-------- C:\Documents and Settings\demin\Dane aplikacji\ArcaBit
2008-04-20 00:12 . 2008-04-20 00:12 <DIR> d-------- C:\Documents and Settings\demin\Dane aplikacji\Media Player Classic
2008-04-19 16:27 . 2008-04-19 16:28 <DIR> d-------- C:\Documents and Settings\dom\Dane aplikacji\Winamp
2008-04-14 00:01 . 2008-05-01 02:07 3,375,681 --a------ C:\WINNT\{00000000-00000000-0000000A-00001102-00000002-100A1102}.BAK
2008-04-13 00:25 . 2008-04-13 00:28 <DIR> d-------- C:\Program Files\RegCleaner
2008-04-07 21:32 . 2008-04-23 21:24 116 --a------ C:\WINNT\NeroDigital.ini
2008-04-02 07:02 . 2008-04-02 07:02 754 --a------ C:\WINNT\WORDPAD.INI

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-29 19:54 --------- d-----w C:\Documents and Settings\demin\Dane aplikacji\Tlen.pl
2008-04-23 19:11 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-04-20 18:22 --------- d-----w C:\Documents and Settings\demin\Dane aplikacji\Tibia
2008-04-01 18:59 --------- d-----w C:\Documents and Settings\demin\Dane aplikacji\Ventrilo
2008-03-31 20:22 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-03-28 20:10 --------- d-----w C:\Documents and Settings\demin\Dane aplikacji\Hamachi
2008-03-28 13:43 --------- d-----w C:\Program Files\Słownik Ang-Pol
2008-03-23 11:42 25,544 ----a-w C:\WINNT\system32\drivers\hamachi.sys
2008-03-22 21:29 --------- d-----w C:\Program Files\DirectX
2008-03-19 22:03 --------- d-----w C:\Program Files\Common Files\Ahead
2008-03-19 22:03 --------- d-----w C:\Program Files\Ahead
2008-03-18 16:51 --------- d-----w C:\Documents and Settings\dardzinsky\Dane aplikacji\Creative
2008-03-18 16:38 --------- d-----w C:\Program Files\Creative
2008-03-16 14:25 --------- d-----w C:\Program Files\Common Files\Agnitum Shared
2008-03-16 14:25 --------- d-----w C:\Program Files\Agnitum
2008-03-12 19:29 --------- d-----w C:\Documents and Settings\dom\Dane aplikacji\OnlineArmor
2008-03-12 19:25 --------- d-----w C:\Documents and Settings\demin\Dane aplikacji\Gadu-Gadu
2008-03-12 18:40 --------- d-----w C:\Documents and Settings\demin\Dane aplikacji\DivX
2008-03-07 21:14 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\MailFrontier
2008-03-07 08:26 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy
2008-03-05 15:03 479,752 ----a-w C:\WINNT\system32\XAudio2_0.dll
2008-03-05 15:03 238,088 ----a-w C:\WINNT\system32\xactengine3_0.dll
2008-03-05 15:00 25,608 ----a-w C:\WINNT\system32\X3DAudio1_3.dll
2008-03-05 14:56 3,786,760 ----a-w C:\WINNT\system32\D3DX9_37.dll
2008-03-05 14:56 1,420,824 ----a-w C:\WINNT\system32\D3DCompiler_37.dll
2008-03-01 20:18 --------- d-----w C:\Documents and Settings\dardzinsky\Dane aplikacji\Media Player Classic
2008-03-01 20:17 --------- d-----w C:\Program Files\Real Alternative
2008-03-01 20:16 --------- d-----w C:\Program Files\K-Lite Codec Pack
2008-02-05 22:07 462,864 ----a-w C:\WINNT\system32\d3dx10_37.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTHelper"="CTHELPER.EXE" [2003-08-28 10:45 24576 C:\WINNT\system32\CTHELPER.EXE]
"UpdReg"="C:\WINNT\UpdReg.EXE" [2000-05-11 02:00 90112]
"Jet Detection"="C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe" [2001-11-29 02:00 28672]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-03-29 19:37 79224]
"Outpost Firewall"="C:\Program Files\Agnitum\Outpost Firewall\outpost.exe" [2007-04-05 17:56 94720]
"OutpostFeedBack"="C:\Program Files\Agnitum\Outpost Firewall\feedback.exe" [2007-06-28 14:18 335872]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nlsf"="cmd.exe" [2004-08-04 02:44 395776 C:\WINNT\system32\cmd.exe]
"tscuninstall"="C:\WINNT\system32\tscupgrd.exe" [2004-08-04 02:33 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.ctmp3"= C:\WINNT\system32\ctmp3.acm
"VIDC.YV12"= yv12vfw.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\Tlen.pl\\tlen.exe"=

R1 aswSP;avast! Self Protection;C:\WINNT\system32\drivers\aswSP.sys [2008-03-29 19:31]
R1 SandBox;Outpost Firewall Sandbox Driver;C:\Program Files\Agnitum\Outpost Firewall\kernel\Sandbox.SYS [2007-06-26 20:01]
R1 VFILT;Outpost Firewall Kernel Driver;C:\Program Files\Agnitum\Outpost Firewall\kernel\FILTNT.SYS [2007-04-05 17:56]
R2 aswFsBlk;aswFsBlk;C:\WINNT\system32\DRIVERS\aswFsBlk.sys [2008-03-29 19:35]
R3 ADBLOCK.DLL;Outpost Firewall PlugIn (ADBLOCK.DLL);C:\Program Files\Agnitum\Outpost Firewall\kernel\ADBLOCK.DLL [2007-04-05 17:57]
R3 ARP.DLL;Outpost Firewall PlugIn (ARP.DLL);C:\Program Files\Agnitum\Outpost Firewall\kernel\ARP.DLL [2007-04-05 17:57]
R3 CONTENT.DLL;Outpost Firewall PlugIn (CONTENT.DLL);C:\Program Files\Agnitum\Outpost Firewall\kernel\CONTENT.DLL [2007-04-05 17:57]
R3 DNSCACHE.DLL;Outpost Firewall PlugIn (DNSCACHE.DLL);C:\Program Files\Agnitum\Outpost Firewall\kernel\DNSCACHE.DLL [2007-04-05 17:57]
R3 FTPFILT.DLL;Outpost Firewall PlugIn (FTPFILT.DLL);C:\Program Files\Agnitum\Outpost Firewall\kernel\FTPFILT.DLL [2007-04-05 17:57]
R3 HTMLFILT.DLL;Outpost Firewall PlugIn (HTMLFILT.DLL);C:\Program Files\Agnitum\Outpost Firewall\kernel\HTMLFILT.DLL [2007-04-05 17:57]
R3 HTTPFILT.DLL;Outpost Firewall PlugIn (HTTPFILT.DLL);C:\Program Files\Agnitum\Outpost Firewall\kernel\HTTPFILT.DLL [2007-04-05 17:57]
R3 IMAPFILT.DLL;Outpost Firewall PlugIn (IMAPFILT.DLL);C:\Program Files\Agnitum\Outpost Firewall\kernel\IMAPFILT.DLL [2007-04-05 17:57]
R3 MAILFILT.DLL;Outpost Firewall PlugIn (MAILFILT.DLL);C:\Program Files\Agnitum\Outpost Firewall\kernel\MAILFILT.DLL [2007-04-05 17:57]
R3 NNTPFILT.DLL;Outpost Firewall PlugIn (NNTPFILT.DLL);C:\Program Files\Agnitum\Outpost Firewall\kernel\NNTPFILT.DLL [2007-04-05 17:57]
R3 POP3FILT.DLL;Outpost Firewall PlugIn (POP3FILT.DLL);C:\Program Files\Agnitum\Outpost Firewall\kernel\POP3FILT.DLL [2007-04-05 17:57]
R3 PROTECT.DLL;Outpost Firewall PlugIn (PROTECT.DLL);C:\Program Files\Agnitum\Outpost Firewall\kernel\PROTECT.DLL [2007-04-05 17:57]
R3 SECRET.DLL;Outpost Firewall PlugIn (SECRET.DLL);C:\Program Files\Agnitum\Outpost Firewall\kernel\SECRET.DLL [2007-04-05 17:57]

*Newly Created Service* - CATCHME
.
**************************************************************************

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-01 12:23:17
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-05-01 12:26:41
ComboFix-quarantined-files.txt 2008-05-01 10:26:28

Pre-Run: 3,399,172,096 bajtów wolnych
Post-Run: 3,703,967,744 bajtów wolnych

122

SDFix

SDFix: Version 1.177
Run by demin on 2008-05-01 at 12:32

Microsoft Windows XP [Wersja 5.1.2600]
Running From: C:\SDFix

Checking Services :


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting


Checking Files :

No Trojan Files Found






Removing Temp Files

ADS Check :



Final Check :

catchme 0.3.1353.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-01 12:36:06
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services :




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\Tlen.pl\\tlen.exe"="C:\\Program Files\\Tlen.pl\\tlen.exe:*:Enabled:Komunikator Tlen.pl"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

Remaining Files :


File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes :


Finished!

HijackThis

Logfile of HijackThis v1.99.1
Scan saved at 12:42:42, on 2008-05-01
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\CTsvcCDA.exe
C:\Program Files\Agnitum\Outpost Firewall\outpost.exe
C:\WINNT\system32\MsPMSPSv.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINNT\system32\CTHELPER.EXE
C:\WINNT\system32\wuauclt.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Tlen.pl\tlen.exe
C:\Program Files\Mozilla Firefox\firefox.exe
F:\Użytki\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://accountservices.passport.net/reg.srf?xpwiz=true&lc=1045&fid=RegXPWizCredOnly
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINNT\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Outpost Firewall] C:\Program Files\Agnitum\Outpost Firewall\outpost.exe /waitservice
O4 - HKLM\..\Run: [OutpostFeedBack] C:\Program Files\Agnitum\Outpost Firewall\feedback.exe /dump:os_startup
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{3C5DAC1F-8D2F-485E-A00D-FAEBB34E4BC2}: NameServer = 194.204.159.1,194.204.152.34
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINNT\system32\CTsvcCDA.exe
O23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum Ltd. - C:\Program Files\Agnitum\Outpost Firewall\outpost.exe

[Okocza]

R3 - URLSearchHook: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

to usuwasz w hijacku

jakiego antywirusa używasz

[demin]

@up

Avast'a

@edit
Już usunąłem ten element, czy coś jeszcze?

[wojtas]

Czysto, wykonaj:

1. Ściągnij OTMoveIt i go włacz i odpal go z opcji CleanUp
2. wykonaj optymalizację windowsa
3.sciagnij ATF_Cleaner
zaznacz
Windows Temp
All users Temp
Temporary internet files
Recycle Bin
i wcisnij EMPTY SELECTED
4.Wyłącz przywracanie systemu ( właściwości mój komputer-zakładka przywracanie - wyłącz przywracanie na wszystkich dyskach). Po chwili włącz je powrotem

[demin]

Zrobiłem wszystko co kazaliście i nadal jest to samo...

[Okocza]

nie jest to wina wirusów, podaj temperatury z everesta z zakładki czujnik

[demin]

Płyta główna - 38
Procesor - 47
Aux - 17
Dysk - 35

[Okocza]

zrób screen w takim razie.

[demin]

[Okocza]

jaki masz zasilacz

[demin]

Mode Com Feel 300W

[Okocza]

bo na linii +5V ma straszne napięcie... spróbuj pożyczyć od kogoś jakiś markowy zasilacz i wtedy zobacz czy będzie dobrze... bo mi się wydaje że te napięcie jest przyczyną..

[demin]

ok, dzięki. A może być tego przyczyną karta graficzna bądź sterowniki ??

[Okocza]

a jaka karta graficzna chociaż wątpię...

[demin]

VIA/S3G UniChrome II Graphics 64mb zintegrowana na płycie

[Okocza]

a reszta sprzętu ile komputer ma lat

[demin]

Komputer ma z 1,5 roku

Procek: AMD Sempron 1600 MHz (8x200) 2600+
System: Windows XP
Pamięć: 512 MB Good Ram
Płyta główna: VIA K8M800/K8N800, AMD Hammer
Grafa: VIA/S3G UniChrome II Graphics 64mb
Zasilacz: Mode Com Feel 300W

[Okocza]

teoretycznie moglby byc to zasilacz... zobacz na jakims markowym.. i grafike tez mozesz przetestowac.. pozycz od kogos..

Autor postu otrzymał pochwałę

[demin]

ok, postaram się załatwić i przetestuje. Dzięki