Skocz do zawartości


Zdjęcie

Komputer dziwnie działa


  • Zaloguj się, aby dodać odpowiedź
5 odpowiedzi w tym temacie

#1 Maluch125

Maluch125

    Początkujący

  • 11 postów

Napisano 20 02 2008 - 13:04

Witam jestem nowy i nie przeglądałem dokładnie forum ale nie o tym mowa bo własnie nie dawno instalowalem windows'a xp jakis miesiac temu i tak wszystko ladnie gra ale po pewnym czasie gdy włączam komputer włącza się ok 5min nie wiem dlaczego przy wyłączaniu też nawet ok 8-10min czasami gdy gram z 3h-4h to gra zaczyna bardzo zacinać ale wczesniej chodziła normalnie niżej podaje swój config komputera

*Procesor AMD Athlon(64)3000+2.00ghz
*DDR1 1280Mb ram - 1,25gb ram
*Nvidia GeForce 6200 128
*Windows XP Proffesional 2002
*Dysk 80gb

komputer nie jest zbytnio obciążony wszystkie podstawowe programy: Avira Antyvir , CoD2 - CoD4 , programy te które się wgrywają podczas wgrywania systemu i inne [beeep]erele ares itp... dzieje się tak pierwszy raz a jestem nie zbyt doświadczonym w komputerach znaczy sie w tych problemach itp...

chciałbym jeszcze dodać że internet jest bardzo dziwny mam 512kb/s gdy gram w gry mam ping 40-60 ale jak już coś pobieram to jest 3kb/s 12kb/s wiecie moze dlaczego tak sie dzieje????

  • 0

#2 BlackJack

BlackJack

    Początkujący

  • 105 postów

Napisano 20 02 2008 - 14:24

a moze jakiś virusik ci się dostał ktory zpowalnia kompa przeskanuj dyski dobrym antywirusem np. nod32, zrob pełny scandisc i defregmantacie dysku oraz oczyszczanie

  • 0

#3 wncvirus

wncvirus

    Leń !

  • 851 postów

Napisano 20 02 2008 - 23:45

Chętnie bym zobaczył Twoje logi z combofix'a.
  • 0

#4 Maluch125

Maluch125

    Początkujący

  • 11 postów

Napisano 21 02 2008 - 01:18

hmm confibook czyli co jestem newbie moglibyście powiedzieć gdzie mam wejść itp???? dysk skanowałem żadnych wirusów zadnego niczego.
  • 0

#5 wncvirus

wncvirus

    Leń !

  • 851 postów

Napisano 21 02 2008 - 01:21

http://forum.idg.pl/index.php?showtopic=118804 - poczytaj post filutki.
  • 0

#6 Maluch125

Maluch125

    Początkujący

  • 11 postów

Napisano 21 02 2008 - 01:39

Ok mam tutaj masz ten wykaz z tego combo fix czy cos :P nic z tego nie rozumiem :PP

ComboFix 08-02-21 - Ania 2008-02-21  0:51:00.1 - [color=red][b]FAT32[/b][/color]x86
Microsoft Windows XP Professional  5.1.2600.2.1250.1.1045.18.887 [GMT 1:00]
Running from: C:\Documents and Settings\Assassin's\Pulpit\ComboFix.exe
 * Created a new restore point

[color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED [img]http://www.forum.tweaks.pl/public/style_emoticons/default/excl.gif[/img][/b][/color]
.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\FunWebProducts
C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html
C:\Program Files\internet explorer\msimg32.dll
C:\Program Files\myglobalsearch
C:\Program Files\myglobalsearch\bar\1.bin\M9FFXTBR.JAR
C:\Program Files\myglobalsearch\bar\1.bin\M9FFXTBR.MANIFEST
C:\Program Files\myglobalsearch\bar\1.bin\M9NTSTBR.JAR
C:\Program Files\myglobalsearch\bar\1.bin\M9NTSTBR.MANIFEST
C:\Program Files\myglobalsearch\bar\1.bin\M9PLUGIN.DLL
C:\Program Files\myglobalsearch\bar\1.bin\MGSBAR.DLL
C:\Program Files\myglobalsearch\bar\1.bin\NPMYGLSH.DLL
C:\Program Files\myglobalsearch\bar\Cache\[u]0[/u]09D4EFF
C:\Program Files\myglobalsearch\bar\Cache\[u]0[/u]09D5112
C:\Program Files\myglobalsearch\bar\Cache\[u]0[/u]09D524A.bin
C:\Program Files\myglobalsearch\bar\Cache\[u]0[/u]09D544E.bin
C:\Program Files\myglobalsearch\bar\Cache\[u]0[/u]09D5577.bin
C:\Program Files\myglobalsearch\bar\Cache\files.ini
C:\Program Files\myglobalsearch\bar\History\search
C:\Program Files\myglobalsearch\bar\Settings\prevcfg.htm
C:\Program Files\MyWebSearch
C:\Program Files\MyWebSearch\bar\1.bin\F3BKGERR.JPG
C:\Program Files\MyWebSearch\bar\1.bin\F3BROVLY.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3CJPEG.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3DTACTL.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3HISTSW.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3HTTPCT.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3IMSTUB.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR
C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.EXE
C:\Program Files\MyWebSearch\bar\1.bin\F3SCRCTR.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3SHLLVW.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3SPACER.WMV
C:\Program Files\MyWebSearch\bar\1.bin\F3WALLPP.DAT
C:\Program Files\MyWebSearch\bar\1.bin\F3WPHOOK.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.JAR
C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.MANIFEST
C:\Program Files\MyWebSearch\bar\1.bin\M3HTML.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3IDLE.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3IMPIPE.EXE
C:\Program Files\MyWebSearch\bar\1.bin\M3MSG.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.JAR
C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.MANIFEST
C:\Program Files\MyWebSearch\bar\1.bin\M3OUTLCN.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3SKIN.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3SKPLAY.EXE
C:\Program Files\MyWebSearch\bar\1.bin\M3SLSRCH.EXE
C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE
C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL
C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL
C:\Program Files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL
C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S
C:\Program Files\MyWebSearch\bar\Cache\[u]0[/u]07898DD
C:\Program Files\MyWebSearch\bar\Cache\[u]0[/u]078A9A6
C:\Program Files\MyWebSearch\bar\Cache\[u]0[/u]078AC55.bin
C:\Program Files\MyWebSearch\bar\Cache\[u]0[/u]078AEF5.bin
C:\Program Files\MyWebSearch\bar\Cache\[u]0[/u]078B2FC.bin
C:\Program Files\MyWebSearch\bar\Cache\[u]0[/u]07A661B.bin
C:\Program Files\MyWebSearch\bar\Cache\files.ini
C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S
C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S
C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S
C:\Program Files\MyWebSearch\bar\History\search2
C:\Program Files\MyWebSearch\bar\icons\CM.ICO
C:\Program Files\MyWebSearch\bar\icons\MFC.ICO
C:\Program Files\MyWebSearch\bar\icons\PSS.ICO
C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO
C:\Program Files\MyWebSearch\bar\icons\WB.ICO
C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO
C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S
C:\Program Files\MyWebSearch\bar\Message\COMMON\ask_logo.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\autoup.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\autoup.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\center.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\index.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\mid_dots.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\mws_logo.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\protect.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\shocked.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\stop.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\systray.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\systrayp.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\tp_grad.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\warn.gif
C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S
C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S
C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S
C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S
C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S
C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S
C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S
C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S
C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S
C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S
C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S
C:\Program Files\MyWebSearch\bar\Settings\prevcfg2.htm
C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat
C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
C:\WINDOWS\system32\f3PSSavr.scr
C:\WINDOWS\system32\pskill.exe

.
(((((((((((((((((((((((((   Files Created from 2008-01-21 to 2008-02-21  )))))))))))))))))))))))))))))))
.

2008-02-20 16:35 . 2008-02-20 16:35	<DIR>	d--------	C:\vcs5BGEffects
2008-02-20 16:35 . 2008-02-20 16:35	<DIR>	d--------	C:\Program Files\AV Vcs 6.0 DIAMOND
2008-02-20 13:54 . 2004-08-03 22:39	2,152,960	--a------	C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2008-02-20 13:54 . 2004-08-03 22:54	2,028,800	--a------	C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
2008-02-20 13:54 . 2007-08-13 18:43	541,696	--a------	C:\WINDOWS\system32\dllcache\iexplore.exe
2008-02-20 13:54 . 2008-02-20 13:41	219,648	--a------	C:\WINDOWS\system32\dllcache\uxtheme.dll
2008-02-20 13:54 . 2004-08-03 22:42	210,944	--a------	C:\WINDOWS\system32\dllcache\moricons.dll
2008-02-20 13:41 . 2004-04-02 19:11	3,066,368	--a------	C:\WINDOWS\system32\longhornui.exe
2008-02-20 13:41 . 2003-12-13 00:40	1,485,312	--a------	C:\WINDOWS\system32\LonghornM5.scr
2008-02-20 13:41 . 2003-12-13 00:40	903,680	--a------	C:\WINDOWS\system32\Longhorn.scr
2008-02-20 13:41 . 2001-10-20 19:00	74,752	--a------	C:\WINDOWS\system32\LonghornPDC.scr
2008-02-20 13:40 . 2008-02-20 13:40	<DIR>	d--------	C:\WINDOWS\system32\LHTrans
2008-02-20 13:40 . 2008-02-20 13:40	<DIR>	d--------	C:\WINDOWS\SideBar
2008-02-20 13:40 . 2008-02-20 13:40	<DIR>	d--------	C:\LTPFiles
2008-02-20 13:39 . 2004-09-03 23:43	199	--a------	C:\WINDOWS\system32\paypal.url
2008-02-20 13:39 . 2005-01-28 01:49	111	--a------	C:\WINDOWS\system32\winx.url
2008-02-19 23:50 . 2008-02-19 23:50	1,700,352	--a------	C:\WINDOWS\system32\gdiplus.dll
2008-02-19 23:34 . 2008-02-19 23:34	<DIR>	d--------	C:\Documents and Settings\All Users\Dane aplikacji\Adobe Systems
2008-02-19 23:28 . 2008-02-19 23:28	<DIR>	d--------	C:\Program Files\Common Files\Adobe Systems Shared
2008-02-19 22:08 . 2008-02-19 22:08	<DIR>	d--hs----	C:\FOUND.014
2008-02-18 21:05 . 2008-02-18 21:05	280	--a------	C:\WINDOWS\game.ini
2008-02-18 16:56 . 2005-02-26 06:34	442,368	-ra------	C:\WINDOWS\system32\vp6vfw.dll
2008-02-18 16:29 . 2004-09-13 07:17	2,146,304	---------	C:\WINDOWS\UNNMP.exe
2008-02-18 16:29 . 2004-10-15 11:02	52,536	---------	C:\WINDOWS\UNNMP.cfg
2008-02-18 16:26 . 2008-02-18 16:26	<DIR>	d--------	C:\Documents and Settings\All Users\Dane aplikacji\Ahead
2008-02-18 16:26 . 2004-10-14 09:19	2,285,568	---------	C:\WINDOWS\UNNeroVision.exe
2008-02-18 16:26 . 2004-07-20 17:24	1,568,768	---------	C:\WINDOWS\system32\ImagX7.dll
2008-02-18 16:26 . 2004-07-20 17:24	476,320	---------	C:\WINDOWS\system32\ImagXpr7.dll
2008-02-18 16:26 . 2004-07-20 17:24	471,040	---------	C:\WINDOWS\system32\ImagXRA7.dll
2008-02-18 16:26 . 2004-07-09 09:43	364,544	---------	C:\WINDOWS\system32\TwnLib4.dll
2008-02-18 16:26 . 2004-07-20 17:24	262,144	---------	C:\WINDOWS\system32\ImagXR7.dll
2008-02-18 16:26 . 2000-06-26 11:45	106,496	--a------	C:\WINDOWS\system32\TwnLib20.dll
2008-02-18 16:26 . 2004-10-15 11:02	97,294	---------	C:\WINDOWS\UNNeroVision.cfg
2008-02-18 16:26 . 2001-03-08 19:30	24,064	---------	C:\WINDOWS\system32\msxml3a.dll
2008-02-18 15:05 . 2008-02-18 15:05	<DIR>	d--------	C:\Program Files\PremiumSoft
2008-02-18 14:47 . 2008-02-18 14:47	<DIR>	d--h-----	C:\WINDOWS\system32\GroupPolicy
2008-02-18 13:53 . 2008-02-18 13:53	<DIR>	d--hs----	C:\FOUND.013
2008-02-17 21:06 . 2008-02-12 15:16	717,016	-ra------	C:\WINDOWS\system32\drivers\cfosspeed.sys
2008-02-17 20:49 . 2006-02-04 03:50	5,174	--a------	C:\WINDOWS\system32\nppt9x.vxd
2008-02-17 20:49 . 2006-02-04 03:50	4,682	--a------	C:\WINDOWS\system32\npptNT2.sys
2008-02-17 20:42 . 2008-02-17 20:42	<DIR>	d--------	C:\Documents and Settings\Ania\Dane aplikacji\InstallShield
2008-02-17 19:53 . 2008-02-17 19:53	<DIR>	d--hs----	C:\FOUND.012
2008-02-17 19:43 . 2008-02-17 19:43	<DIR>	d--------	C:\Documents and Settings\Ania\Dane aplikacji\Ahead
2008-02-17 19:41 . 2008-02-17 19:41	<DIR>	d--------	C:\Program Files\Common Files\Ahead
2008-02-17 19:41 . 2008-02-17 19:41	<DIR>	d--------	C:\Program Files\Ahead
2008-02-17 19:41 . 2001-07-06 14:41	569,344	--a------	C:\WINDOWS\system32\imagr5.dll
2008-02-17 19:41 . 2001-07-06 12:44	544,768	--a------	C:\WINDOWS\system32\imagx5.dll
2008-02-17 19:41 . 2001-07-06 18:24	283,920	--a------	C:\WINDOWS\system32\ImagXpr5.dll
2008-02-17 19:41 . 2001-07-09 11:50	155,648	--a------	C:\WINDOWS\system32\NeroCheck.exe
2008-02-17 19:41 . 2003-03-29 16:45	89,184	--a------	C:\WINDOWS\system32\drivers\imagedrv.sys
2008-02-17 19:41 . 2003-07-22 16:29	57,344	--a------	C:\WINDOWS\system32\ImageDrive.cpl
2008-02-17 19:41 . 2001-06-26 08:15	38,912	---------	C:\WINDOWS\system32\picn20.dll
2008-02-17 18:49 . 2008-02-12 15:16	285,912	--a------	C:\WINDOWS\system32\cfosspeed.dll
2008-02-17 10:24 . 2008-02-17 10:24	<DIR>	d--------	C:\Documents and Settings\Ania\Dane aplikacji\TC PowerPack
2008-02-16 22:36 . 2008-02-20 16:46	54,156	--ah-----	C:\WINDOWS\QTFont.qfn
2008-02-16 22:36 . 2008-02-16 22:36	1,409	--a------	C:\WINDOWS\QTFont.for
2008-02-16 22:16 . 2008-02-17 13:10	<DIR>	dr-------	C:\My Downloads
2008-02-16 22:11 . 2008-02-16 22:11	<DIR>	d--------	C:\Program Files\[url="http://www.download.net.pl/44/BearShare-Free/"]BearShare[/url]
2008-02-16 14:22 . 2008-02-16 14:22	59	--a------	C:\WINDOWS\wininit.ini
2008-02-16 14:21 . 2008-02-16 14:21	<DIR>	d--------	C:\Program Files\PowerStrip
2008-02-16 12:45 . 2008-02-16 12:51	745	--a------	C:\WINDOWS\CoD.INI
2008-02-16 11:42 . 2008-02-16 11:42	<DIR>	d--hs----	C:\FOUND.011
2008-02-15 23:35 . 2008-02-15 23:36	<DIR>	d--------	C:\Program Files\Tremulous
2008-02-15 22:54 . 2008-02-15 22:54	<DIR>	d--------	C:\Documents and Settings\Ania\Dane aplikacji\Hamachi
2008-02-15 21:40 . 2008-02-15 21:40	<DIR>	d--------	C:\Program Files\Valve
2008-02-14 18:49 . 2008-02-14 18:49	<DIR>	d--------	C:\Program Files\MML2x Patch
2008-02-14 16:50 . 2008-02-14 16:50	<DIR>	d--hs----	C:\FOUND.010
2008-02-14 16:18 . 2008-02-14 16:18	<DIR>	d--------	C:\Documents and Settings\Ania\Dane aplikacji\skypePM
2008-02-14 16:09 . 2008-02-14 16:09	<DIR>	d--------	C:\Program Files\Skype
2008-02-14 16:07 . 2008-02-14 16:07	<DIR>	d--------	C:\Program Files\Common Files\Skype
2008-02-14 15:36 . 2008-02-14 15:36	<DIR>	d--------	C:\Documents and Settings\Ania\Dane aplikacji\Skype
2008-02-14 15:35 . 2008-02-14 15:35	<DIR>	d--------	C:\Documents and Settings\Ania\Dane aplikacji\Creative
2008-02-14 15:30 . 2000-05-22 09:58	647,872	---------	C:\WINDOWS\system32\Mscomct2.ocx
2008-02-14 15:30 . 1999-10-10 18:00	41,984	---------	C:\WINDOWS\Ctregrun.exe
2008-02-14 15:30 . 2003-06-12 23:25	7,062	--a------	C:\WINDOWS\system32\audiopid.vxd
2008-02-14 15:28 . 2008-02-14 15:28	<DIR>	d--------	C:\Program Files\Creative
2008-02-14 15:02 . 2008-02-14 15:02	<DIR>	d--------	C:\Documents and Settings\Ania\Dane aplikacji\Tibia
2008-02-13 19:54 . 2008-02-13 19:54	<DIR>	d--hs----	C:\FOUND.009
2008-02-13 13:14 . 2008-02-13 13:14	<DIR>	d--------	C:\Documents and Settings\Ania\Dane aplikacji\Xfire
2008-02-13 13:09 . 2008-02-13 13:09	4,299	--a------	C:\WINDOWS\system32\NvApps.xml
2008-02-13 13:08 . 2008-02-13 13:08	<DIR>	d--hs----	C:\FOUND.008
2008-02-13 12:53 . 2008-02-13 12:53	<DIR>	d--------	C:\Program Files\Microsoft Games
2008-02-13 01:26 . 2008-02-13 01:26	<DIR>	d--------	C:\Documents and Settings\Ania\Dane aplikacji\AdobeUM
2008-02-13 01:14 . 2008-02-13 01:14	<DIR>	d--------	C:\Documents and Settings\Ania\Dane aplikacji\Microsoft Games
2008-02-12 20:43 . 2008-02-12 20:43	<DIR>	d--h-----	C:\WINDOWS\PIF
2008-02-11 23:55 . 2008-02-11 23:55	<DIR>	d--hs----	C:\FOUND.007
2008-02-11 00:23 . 2008-02-11 00:23	<DIR>	d--------	C:\Documents and Settings\Ania\Dane aplikacji\Talkback
2008-02-11 00:23 . 2008-02-11 00:23	<DIR>	d--------	C:\Documents and Settings\Ania\Dane aplikacji\Gadu-Gadu
2008-02-11 00:22 . 2008-02-11 00:22	<DIR>	d--------	C:\Documents and Settings\Ania\Gadu-Gadu
2008-02-10 22:51 . 2008-02-10 22:51	<DIR>	d--------	C:\Program Files\WebServ2
2008-02-10 22:51 . 2008-02-10 22:56	40,074	--a------	C:\WINDOWS\php.ini
2008-02-10 22:51 . 2008-02-10 22:52	432	--a------	C:\WINDOWS\my.ini
2008-02-10 22:41 . 2008-02-10 22:41	<DIR>	d--------	C:\Documents and Settings\Assassin's\.mysqlcc
2008-02-10 20:09 . 2008-02-10 20:09	<DIR>	d--------	C:\Program Files\WebServ1
2008-02-10 20:00 . 2008-02-10 20:00	<DIR>	d--------	C:\Program Files\WebServ
2008-02-10 14:26 . 2008-02-10 14:26	<DIR>	d--------	C:\Program Files\No-IP
2008-02-09 20:35 . 2008-02-09 20:35	754	--a------	C:\WINDOWS\WORDPAD.INI
2008-02-08 18:12 . 2008-02-08 18:12	<DIR>	d--------	C:\Program Files\Tibia
2008-02-08 18:12 . 2008-02-08 18:12	<DIR>	d--------	C:\Documents and Settings\Assassin's\Dane aplikacji\Tibia
2008-02-07 22:32 . 2005-09-15 17:45	99,024	--a------	C:\WINDOWS\MozillaUninstall.exe

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-20 21:54	22,328	----a-w	C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-02-20 21:54	107,832	----a-w	C:\WINDOWS\system32\PnkBstrB.exe
2008-02-20 12:41	219,648	----a-w	C:\WINDOWS\system32\uxtheme.dll
2008-01-29 14:35	66,872	----a-w	C:\WINDOWS\system32\PnkBstrA.exe
2008-01-28 10:07	22,328	----a-w	C:\Documents and Settings\Assassin's\Dane aplikacji\PnkBstrK.sys
2008-01-19 22:38	---------	d-----w	C:\Documents and Settings\Assassin's\Dane aplikacji\InstallShield Installation Information
2008-01-19 22:36	---------	d-----w	C:\Program Files\DIFX
2008-01-19 22:36	---------	d-----w	C:\Program Files\Common Files\Wise Installation Wizard
2008-01-19 22:36	---------	d-----w	C:\Program Files\AGEIA Technologies
2008-01-19 21:41	---------	d-----w	C:\Documents and Settings\Assassin's\Dane aplikacji\ViStart
2008-01-19 21:35	---------	d-----w	C:\Program Files\WinFlip
2008-01-19 21:35	---------	d-----w	C:\Program Files\TrueTransparency
2008-01-19 21:35	---------	d-----w	C:\Program Files\Styler
2008-01-18 18:24	---------	d-----w	C:\Program Files\MySQL
2008-01-18 18:16	---------	d-----w	C:\Program Files\Sun
2008-01-14 09:55	163,644	----a-w	C:\WINDOWS\system32\drivers\secdrv.sys
2008-01-13 23:20	---------	d-----w	C:\Program Files\4Musics Multiformat Converter
2008-01-13 11:25	---------	d-----w	C:\Documents and Settings\LocalService\Dane aplikacji\Xfire
2008-01-12 20:36	32	----a-w	C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat
2008-01-12 20:36	---------	d-----w	C:\Documents and Settings\Assassin's\Dane aplikacji\skypePM
2008-01-12 20:34	---------	d-----w	C:\Documents and Settings\Assassin's\Dane aplikacji\Skype
2008-01-12 20:34	---------	d-----w	C:\Documents and Settings\All Users\Dane aplikacji\Skype
2008-01-12 20:03	---------	d-----w	C:\Program Files\Java
2008-01-12 20:00	---------	d-----w	C:\Program Files\Common Files\Java
2008-01-12 19:59	---------	d-----w	C:\Program Files\Azureus
2008-01-12 14:44	---------	d-----w	C:\Documents and Settings\Assassin's\Dane aplikacji\Hamachi
2008-01-12 14:43	25,280	----a-w	C:\WINDOWS\system32\drivers\hamachi.sys
2008-01-12 14:21	685,816	----a-w	C:\WINDOWS\system32\drivers\sptd.sys
2008-01-11 18:25	---------	d--h--w	C:\Documents and Settings\Assassin's\Dane aplikacji\ijjigame
2008-01-11 18:24	---------	d-----w	C:\Program Files\NHN USA
2008-01-11 17:08	489,902	----a-w	C:\WINDOWS\system32\Pajacyki.scr
2008-01-11 17:08	---------	d-----w	C:\Program Files\TheCompany
2008-01-11 12:24	---------	d-----w	C:\Documents and Settings\Assassin's\Dane aplikacji\Gadu-Gadu
2008-01-11 10:15	---------	d-----w	C:\Program Files\Xfire
2008-01-11 10:15	---------	d-----w	C:\Documents and Settings\NetworkService\Dane aplikacji\Xfire
2008-01-11 10:15	---------	d-----w	C:\Documents and Settings\Assassin's\Dane aplikacji\Xfire
2008-01-11 10:01	---------	d-----w	C:\Program Files\Avira
2008-01-11 10:01	---------	d-----w	C:\Documents and Settings\All Users\Dane aplikacji\Avira
2008-01-11 09:32	---------	d-----w	C:\Program Files\Gadu-Gadu
2008-01-10 23:14	---------	d-----w	C:\Program Files\QuickTime
2008-01-10 23:14	---------	d-----w	C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer
2008-01-10 23:11	---------	d-----w	C:\Program Files\Google
2008-01-10 22:20	---------	d-----w	C:\Program Files\ASUSTeK
2008-01-10 22:18	---------	d--h--w	C:\Program Files\InstallShield Installation Information
2008-01-10 22:18	---------	d-----w	C:\Program Files\VID_0E8F&PID_0003
2008-01-10 22:18	---------	d-----w	C:\Program Files\Common Files\InstallShield
2008-01-10 22:13	---------	d-----w	C:\Program Files\C-Media
2008-01-10 22:06	---------	d-----w	C:\Program Files\microsoft frontpage
2008-01-10 22:04	---------	d-----w	C:\Program Files\Usługi online
2007-12-05 01:53	356,352	----a-w	C:\WINDOWS\system32\NVUNINST.EXE
2001-11-23 05:08	712,704	----a-r	C:\WINDOWS\inf\OTHER\AUDIO3D.DLL
.

------- Sigcheck -------

"C:\WINDOWS\system32\drivers\tcpip.sys"
----a-w		   359,040 2004-08-03 20:14:42  C:\WINDOWS\system32\drivers\tcpip.sys

"C:\WINDOWS\system32\ntkrnlpa.exe"
----a-w		 2,028,800 2004-08-03 21:54:52  C:\WINDOWS\system32\ntkrnlpa.exe
----a-w		 2,028,800 2004-08-03 21:54:52  C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
----a-w		 2,058,112 2004-08-03 21:54:52  C:\WINDOWS\system32\LHTrans\ntkrnlpa.exe

"C:\WINDOWS\system32\ntoskrnl.exe"
----a-w		 2,152,960 2004-08-03 21:39:10  C:\WINDOWS\system32\ntoskrnl.exe
----a-w		 2,152,960 2004-08-03 21:39:10  C:\WINDOWS\system32\dllcache\ntoskrnl.exe
----a-w		 2,182,272 2004-08-03 21:39:10  C:\WINDOWS\system32\LHTrans\ntoskrnl.exe
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 22:44 15360]
"Creative WebCam Tray"="C:\Program Files\Creative\Shared Files\CamTray.exe" [2005-10-27 11:00 299008]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-08-04 00:55 1667584]
"ares"="C:\Program Files\Ares\Ares.exe" [2007-02-18 22:30 969728]
"Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-11-14 11:54 2131392]
"Longhorn SideBar"="C:\WINDOWS\SideBar\SideBar.exe" [2005-05-13 18:21 122880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-12-05 01:41 8523776]
"nwiz"="nwiz.exe" [2007-12-05 01:41 1626112 C:\WINDOWS\system32\nwiz.exe]
"C-Media Mixer"="Mixer.exe" [2003-03-20 08:21 1855488 C:\WINDOWS\mixer.exe]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-01-11 00:14 155648]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-01-12 15:29 249896]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe" [2007-12-14 03:42 144784]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-12-05 01:41 81920]
"WebServ"="C:\Program Files\WebServ2\WebServ.exe" [2006-08-22 23:11 3079168]
"[url="http://www.download.net.pl/44/BearShare-Free/"]BearShare[/url]"="C:\Program Files\[url="http://www.download.net.pl/44/BearShare-Free/"]BearShare[/url]\[url="http://www.download.net.pl/44/BearShare-Free/"]BearShare[/url].exe" [2006-08-01 17:04 3313664]
"My Web Search Bar Search Scope Monitor"="C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" [ ]
"cFosSpeed"="C:\Program Files\cFosSpeed\cFosSpeed.exe" [2008-02-12 15:16 863448]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 22:44 15360]

C:\Documents and Settings\Assassin's\Menu Start\Programy\Autostart\
Xfire.lnk - C:\Program Files\Xfire\xfire.exe [2008-01-31 03:02:36 2880336]

C:\Documents and Settings\Ania\Menu Start\Programy\Autostart\
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 19:16:50 113664]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-24 07:05:26 29696]

R1 PStrip;PStrip;C:\WINDOWS\system32\drivers\pstrip.sys [2007-07-15 03:37]
R2 nvcap;nVidia WDM Video Capture (universal);C:\WINDOWS\system32\DRIVERS\nvcap.sys [2004-04-06 11:30]
R2 nvTUNEP;nVidia WDM TVTuner;C:\WINDOWS\system32\DRIVERS\nvtunep.sys [2004-04-06 11:30]
R2 nvtvSND;nVidia WDM TVAudio Crossbar;C:\WINDOWS\system32\DRIVERS\nvtvsnd.sys [2004-04-06 11:31]
R2 NVXBAR;nVidia WDM A/V Crossbar;C:\WINDOWS\system32\DRIVERS\NVxbar.sys [2004-04-06 11:31]
R3 EuMusDesignVirtualAudioCableWdm_s2x;Sound2x Audio Cable (WDM);C:\WINDOWS\system32\DRIVERS\vacs2xkd.sys [2007-11-01 17:53]
R3 V0260VID;Live! Cam Vista IM;C:\WINDOWS\system32\DRIVERS\V0260Vid.sys [2006-04-01 16:16]
S3 ASPI;Advanced SCSI Programming Interface Driver;C:\WINDOWS\System32\DRIVERS\ASPI32.sys [2002-07-17 08:05]
S3 EnumChip;EnumChip;F:\Driver\Gart\EnumChip.sys []
S3 RivaTunerEx;RivaTunerEx;C:\Program Files\RivaTuner\RivaTunerEx.sys [2004-09-05 11:50]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4c07f2e6-bfcd-11dc-9518-806d6172696f}]
\Shell\AutoRun\command - G:\setup\rsrc\Autorun.exe
\Shell\dinstall\command - G:\Directx\dxsetup.exe

*Newly Created Service* - PNKBSTRK
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-21 00:53:07
Windows 5.1.2600 Dodatek Service Pack 2 FAT NTAPI

scanning hidden processes ... 

scanning hidden autostart entries ...

scanning hidden files ... 

scan completed successfully 
hidden files: 0 

**************************************************************************
.
Completion time: 2008-02-21  0:53:24
ComboFix-quarantined-files.txt  2008-02-20 23:53:24


  • 0




Użytkownicy przeglądający ten temat: 0

0 użytkowników, 0 gości, 0 anonimowych