prosze o sprawdzenie loga....!...

[Lante]

Kod: Zaznacz wszystko

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:42:05, on 2008-01-31
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Winamp Remote\bin\OrbTray.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\SMC\SMCWPCI-G 54Mbps Wireless PCI adapter\Monitor.exe
C:\Program Files\Winamp Remote\bin\Orb.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Tibia\Tibia.exe
C:\Program Files\Tibia Auto\tibiaauto.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\Winamp\winamp.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_1.dll
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb125\Dealio.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb125\SearchSettings.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_1.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb125\Dealio.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\JM\JMInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\JMRaidSetup.exe boot
O4 - HKLM\..\Run: [ASUSGamerOSD] C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: SMCWPCI-G 54Mbps Wireless PCI adapter.lnk = C:\Program Files\SMC\SMCWPCI-G 54Mbps Wireless PCI adapter\Monitor.exe
O8 - Extra context menu item: &Winamp Toolbar Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: AMV convert tool grab multimedia file - C:\Program Files\MP3 Player Utilities 5.02\AMVConverter\grab.html
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\RAFAŁ\Dane aplikacji\Dealio\kb125\res\DealioSearch.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb125\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb125\Dealio.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 7605 bytes
[quote][code][/code][/quote]

[Dzi@dek]

Przeczytaj ten temat - zobacz jak prawidłowo wstawia sie logi
http://forum.programosy.pl/hijackthis-amp-silent-runners-gtobsuga-i-umieszczanie-vt9452.html

[Lante]

Sprawdzi ktos...?

[wojtas]

daj loga z hijacka z naglowkiem i czemu masz takie w logu ****? popraw

[Lante]

Teraz chyba dobrze i prosze o sprawdzenie loga...Z gory dziekuje...

[wojtas]

zaznacz myszka caly log i nacisnij quote lub code i napisz co sie dzieje z komputerem

[Lante]

No teraz musi byc dobrze...

[wojtas]

dobrze tylko powiedz co sie dzieje z kompem? jakis problem masz z nim?

[Lante]

Resetuje sie i wyskakuje bluescreen ale sprawdz loga...

[wojtas]

odinstaluj w Dodaj/Usuń programy Dealio oraz Search Settings, chyba ze sam to instalowales

[Lante]

Procek:CPU Intel Dual Core E6550 2.33 GHz
Ram:RAM DDR2 1GB 800MHz
Zasilacz: Feel 3 400W

Asus 8600GT 256MB


A blad ktory wyskakuje to:
IRQL_NOT_LESS_OR_EQUAL

Wyskakuje tzw.bluescreen jak tylko klikne na jakas gre...

[wojtas]

a kod bledu?

chodzi mi o takie cos 0x00000 itd pokaz caly

przenosze do dzialu System Windows

[Lante]

Ox0000000A,0x000000018,0x0000001C,0x00000000,0x804F9F6A

Oto log z ComboFix'a

Kod: Zaznacz wszystko

ComboFix 08-02.01.1 - RAFAŁ 2008-01-31 22:16:35.1 - NTFSx86
Microsoft Windows XP Professional  5.1.2600.2.1250.1.1045.18.568 [GMT 1:00]
Running from: C:\Documents and Settings\RAFAŁ\Pulpit\ComboFix.exe
* Created a new restore point

[color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color]
.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\OPTIONS\CABS\_desktop.ini

.
(((((((((((((((((((((((((   Files Created from 2008-01-01 to 2008-02.01  )))))))))))))))))))))))))))))))
.

2008-01-27 17:29 . 2008-01-27 17:29   <DIR>   d--------   C:\Documents and Settings\RAFAŁ\SystemRequirementsLab
2008-01-27 17:29 . 2008-01-27 17:29   <DIR>   d--------   C:\Documents and Settings\RAFAŁ\SystemRequirementsLab
2008-01-27 09:39 . 2008-01-27 09:39   <DIR>   d--------   C:\Program Files\Lavalys
2008-01-24 00:41 . 2008-01-24 00:41   <DIR>   d--------   C:\WINDOWS\nview
2008-01-24 00:41 . 2007-12-05 01:41   356,352   --a------   C:\WINDOWS\system32\nvudisp.exe
2008-01-24 00:41 . 2008-01-24 00:42   163,353   --a------   C:\WINDOWS\system32\nvapps.xml
2008-01-24 00:41 . 2007-12-05 01:41   17,737   --a------   C:\WINDOWS\system32\nvdisp.nvu
2008-01-24 00:40 . 2008-01-24 00:40   <DIR>   d--------   C:\NVIDIA
2008-01-24 00:40 . 2007-12-05 02:53   356,352   --a------   C:\WINDOWS\system32\NVUNINST.EXE
2008-01-23 22:12 . 2008-01-23 22:41   <DIR>   d--h-----   C:\WINDOWS\msdownld.tmp
2008-01-23 22:10 . 2008-01-23 22:11   <DIR>   d--------   C:\Program Files\Driver Cleaner
2008-01-22 22:53 . 2008-01-30 12:22   <DIR>   d--------   C:\Program Files\Tibia
2008-01-22 22:53 . 2008-01-30 21:37   <DIR>   d--------   C:\Documents and Settings\RAFAŁ\Dane aplikacji\Tibia
2008-01-21 20:01 . 2008-01-21 20:01   151   --a------   C:\WINDOWS\PhotoSnapViewer.INI
2008-01-20 00:21 . 2008-01-20 00:21   <DIR>   d--------   C:\Program Files\Asprate
2008-01-20 00:12 . 2008-01-31 22:11   664   --a------   C:\WINDOWS\system32\d3d9caps.dat
2008-01-13 13:10 . 2008-01-13 13:10   <DIR>   d--------   C:\Program Files\Opera
2008-01-10 18:06 . 2008-01-31 20:52   <DIR>   d--------   C:\Documents and Settings\RAFAŁ\Dane aplikacji\skypePM
2008-01-10 18:06 . 2008-01-10 18:06   32   --a------   C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat
2008-01-10 18:03 . 2008-01-10 18:03   <DIR>   d--------   C:\Program Files\Skype
2008-01-10 18:03 . 2008-01-10 18:03   <DIR>   d--------   C:\Program Files\Common Files\Skype
2008-01-10 18:03 . 2008-01-31 22:10   <DIR>   d--------   C:\Documents and Settings\RAFAŁ\Dane aplikacji\Skype
2008-01-10 18:03 . 2008-01-10 18:03   <DIR>   d--------   C:\Documents and Settings\All Users\Dane aplikacji\Skype

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-31 20:56   ---------   d-----w   C:\Program Files\Dealio
2008-01-31 19:52   ---------   d-----w   C:\Program Files\Winamp Remote
2008-01-20 09:13   ---------   d--h--w   C:\Program Files\InstallShield Installation Information
2008-01-19 11:16   196,608   ----a-w   C:\WINDOWS\system32\drivers\nStandard.bin
2007-12-29 19:09   98,304   ----a-w   C:\WINDOWS\system32\CmdLineExt.dll
2007-12-27 12:04   ---------   d-----w   C:\Documents and Settings\RAFAŁ\Dane aplikacji\Ahead
2007-12-27 01:58   ---------   d-----w   C:\Program Files\Trend Micro
2007-12-27 01:44   ---------   d-----w   C:\Program Files\Active Ports
2007-12-27 01:29   ---------   d---a-w   C:\Documents and Settings\All Users\Dane aplikacji\TEMP
2007-12-22 11:33   ---------   d-----w   C:\Program Files\Gadu-Gadu
2007-12-21 21:49   ---------   d-----w   C:\Program Files\Tibia Auto
2007-12-21 13:59   ---------   d-----w   C:\Program Files\MP3 Player Utilities 5.02
2007-12-20 15:14   ---------   d-----w   C:\Program Files\Free Audio Pack
2007-12-18 19:29   ---------   d-----w   C:\Documents and Settings\All Users\Dane aplikacji\OrbNetworks
2007-12-18 13:12   ---------   d-----w   C:\Program Files\Winamp
2007-12-17 15:08   ---------   d-----w   C:\Program Files\Toshiba
2007-12-17 15:08   ---------   d-----w   C:\Program Files\Common Files\InstallShield
2007-12-16 12:33   ---------   d-----w   C:\Program Files\Ares
2007-12-13 20:15   ---------   d-----w   C:\Program Files\Java
2007-12-13 20:02   ---------   d-----w   C:\Program Files\Common Files\Java
2007-12-13 19:31   ---------   d-----w   C:\Program Files\Winamp Toolbar
2007-12-13 19:31   ---------   d-----w   C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar
2007-12-13 19:13   ---------   d-----w   C:\Documents and Settings\RAFAŁ\Dane aplikacji\Winamp
2007-12-13 18:29   ---------   d-----w   C:\Documents and Settings\RAFAŁ\Dane aplikacji\Gadu-Gadu
2007-12-13 18:09   17,801   ----a-w   C:\WINDOWS\system32\drivers\AegisP.sys
2007-12-13 18:09   ---------   d-----w   C:\Program Files\SMC
2007-12-13 17:24   ---------   d-----w   C:\Program Files\xp-AntiSpy
2007-12-13 17:24   ---------   d-----w   C:\Program Files\SubEdit-Player
2007-12-13 17:22   ---------   d-----w   C:\Program Files\Common Files\Ahead
2007-12-13 17:22   ---------   d-----w   C:\Documents and Settings\All Users\Dane aplikacji\Ahead
2007-12-13 17:21   ---------   d-----w   C:\Program Files\Nero
2007-12-13 17:21   ---------   d-----w   C:\Documents and Settings\All Users\Dane aplikacji\Nero
2007-12-13 17:14   ---------   d-----w   C:\Program Files\Alwil Software
2007-12-13 16:54   ---------   d-----w   C:\Program Files\My Company Name
2007-12-13 16:53   ---------   d-----w   C:\Program Files\ASUS
2007-12-13 16:49   ---------   d-----w   C:\Program Files\Realtek
2007-12-13 16:47   315,392   ----a-w   C:\WINDOWS\HideWin.exe
2007-12-13 16:47   ---------   d-----w   C:\Documents and Settings\RAFAŁ\Dane aplikacji\InstallShield
2007-12-13 16:46   15,600   ----a-w   C:\WINDOWS\gdrv.sys
2007-12-13 16:44   ---------   d-----w   C:\Program Files\Yahoo!
2007-12-13 16:44   ---------   d-----w   C:\Program Files\Intel
2007-12-13 16:40   ---------   d--h--w   C:\Program Files\Uninstall Information
2007-12-13 16:35   ---------   d-----w   C:\Program Files\microsoft frontpage
2007-12-13 16:34   ---------   d-----w   C:\Program Files\Usługi online
2007-12-05 00:41   81,920   ----a-w   C:\WINDOWS\system32\nvwddi.dll
2007-12-05 00:41   81,920   ----a-w   C:\WINDOWS\system32\nvmctray.dll
2007-12-05 00:41   8,523,776   ----a-w   C:\WINDOWS\system32\nvcpl.dll
2007-12-05 00:41   753,664   ----a-w   C:\WINDOWS\system32\nvcplui.exe
2007-12-05 00:41   7,435,392   ----a-w   C:\WINDOWS\system32\drivers\nv4_mini.sys
2007-12-05 00:41   6,901,760   ----a-w   C:\WINDOWS\system32\nvoglnt.dll
2007-12-05 00:41   6,549,504   ----a-w   C:\WINDOWS\system32\nvdisps.dll
2007-12-05 00:41   5,773,568   ----a-w   C:\WINDOWS\system32\nv4_disp.dll
2007-12-05 00:41   5,611,520   ----a-w   C:\WINDOWS\system32\nvdispsr.dll
2007-12-05 00:41   466,944   ----a-w   C:\WINDOWS\system32\nvshell.dll
2007-12-05 00:41   458,752   ----a-w   C:\WINDOWS\system32\nvmccssr.dll
2007-12-05 00:41   45,056   ----a-w   C:\WINDOWS\system32\nvmccsrs.dll
2007-12-05 00:41   442,368   ----a-w   C:\WINDOWS\system32\nvappbar.exe
2007-12-05 00:41   425,984   ----a-w   C:\WINDOWS\system32\keystone.exe
2007-12-05 00:41   385,024   ----a-w   C:\WINDOWS\system32\nvapi.dll
2007-12-05 00:41   35,328   ----a-w   C:\WINDOWS\system32\nvcodins.dll
2007-12-05 00:41   35,328   ----a-w   C:\WINDOWS\system32\nvcod.dll
2007-12-05 00:41   335,872   ----a-w   C:\WINDOWS\system32\nvwrses.dll
2007-12-05 00:41   335,872   ----a-w   C:\WINDOWS\system32\nvwrsel.dll
2007-12-05 00:41   327,680   ----a-w   C:\WINDOWS\system32\nvwrsfr.dll
2007-12-05 00:41   327,680   ----a-w   C:\WINDOWS\system32\nvwrsesm.dll
2007-12-05 00:41   327,680   ----a-w   C:\WINDOWS\system32\nvrshe.dll
2007-12-05 00:41   327,680   ----a-w   C:\WINDOWS\system32\nvrsar.dll
2007-12-05 00:41   323,584   ----a-w   C:\WINDOWS\system32\nvwrspt.dll
2007-12-05 00:41   323,584   ----a-w   C:\WINDOWS\system32\nvwrsit.dll
2007-12-05 00:41   319,488   ----a-w   C:\WINDOWS\system32\nvwrsptb.dll
2007-12-05 00:41   319,488   ----a-w   C:\WINDOWS\system32\nvwrsnl.dll
2007-12-05 00:41   315,392   ----a-w   C:\WINDOWS\system32\nvwrsru.dll
2007-12-05 00:41   315,392   ----a-w   C:\WINDOWS\system32\nvwrshu.dll
2007-12-05 00:41   311,296   ----a-w   C:\WINDOWS\system32\nvwrsde.dll
2007-12-05 00:41   307,200   ----a-w   C:\WINDOWS\system32\nvexpbar.dll
2007-12-05 00:41   303,104   ----a-w   C:\WINDOWS\system32\nvwrstr.dll
2007-12-05 00:41   303,104   ----a-w   C:\WINDOWS\system32\nvwrssl.dll
2007-12-05 00:41   303,104   ----a-w   C:\WINDOWS\system32\nvwrsfi.dll
2007-12-05 00:41   3,715,072   ----a-w   C:\WINDOWS\system32\nvvitvsr.dll
2007-12-05 00:41   3,710,976   ----a-w   C:\WINDOWS\system32\nvvitvs.dll
2007-12-05 00:41   3,420,160   ----a-w   C:\WINDOWS\system32\nvgames.dll
2007-12-05 00:41   3,334,144   ----a-w   C:\WINDOWS\system32\nvgamesr.dll
2007-12-05 00:41   299,008   ----a-w   C:\WINDOWS\system32\nvwrssk.dll
2007-12-05 00:41   299,008   ----a-w   C:\WINDOWS\system32\nvwrsno.dll
2007-12-05 00:41   294,912   ----a-w   C:\WINDOWS\system32\nvwrssv.dll
2007-12-05 00:41   294,912   ----a-w   C:\WINDOWS\system32\nvwrspl.dll
2007-12-05 00:41   294,912   ----a-w   C:\WINDOWS\system32\nvwrsda.dll
2007-12-05 00:41   290,816   ----a-w   C:\WINDOWS\system32\nvwrsth.dll
2007-12-05 00:41   286,720   ----a-w   C:\WINDOWS\system32\nvwrseng.dll
2007-12-05 00:41   286,720   ----a-w   C:\WINDOWS\system32\nvwrscs.dll
2007-12-05 00:41   286,720   ----a-w   C:\WINDOWS\system32\nvnt4cpl.dll
2007-12-05 00:41   282,624   ----a-w   C:\WINDOWS\system32\nvwrsar.dll
2007-12-05 00:41   282,624   ----a-w   C:\WINDOWS\system32\nvrsfr.dll
2007-12-05 00:41   282,624   ----a-w   C:\WINDOWS\system32\nvrses.dll
2007-12-05 00:41   282,624   ----a-w   C:\WINDOWS\system32\nvrsel.dll
2007-12-05 00:41   278,528   ----a-w   C:\WINDOWS\system32\nvwrshe.dll
2007-12-05 00:41   278,528   ----a-w   C:\WINDOWS\system32\nvrsit.dll
2007-12-05 00:41   278,528   ----a-w   C:\WINDOWS\system32\nvrsde.dll
2007-12-05 00:41   274,432   ----a-w   C:\WINDOWS\system32\nvrspt.dll
2007-12-05 00:41   274,432   ----a-w   C:\WINDOWS\system32\nvrsnl.dll
.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
2007-10-04 21:06   1135968   --a------   C:\Program Files\Winamp Toolbar\winamptb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88}
{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= C:\Program Files\Winamp Toolbar\winamptb.dll [2007-10-04 21:06 1135968]

[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 23:44 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 19:03 152872]
"Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-11-14 11:54 2131392]
"Orb"="C:\Program Files\Winamp Remote\bin\OrbTray.exe" [2008-01-07 21:02 495616]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-12-12 15:23 21686568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-04-12 10:33 16132608 C:\WINDOWS\RTHDCPL.exe]
"JMB36X IDE Setup"="C:\WINDOWS\JM\JMInsIDE.exe" [2006-10-30 13:44 36864]
"36X Raid Configurer"="C:\WINDOWS\system32\JMRaidSetup.exe" [2007-02-06 13:08 1953792]
"ASUSGamerOSD"="C:\Program Files\ASUS\GamerOSD\GamerOSD.exe" [2007-07-12 10:03 380928]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 15:57 153136]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-10-10 06:28 36352]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-12-05 01:41 8523776]
"nwiz"="nwiz.exe" [2007-12-05 01:41 1626112 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-12-05 01:41 81920]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 23:44 15360]

C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\
Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2004-12-21 20:42:22 45056]
SMCWPCI-G 54Mbps Wireless PCI adapter.lnk - C:\Program Files\SMC\SMCWPCI-G 54Mbps Wireless PCI adapter\Monitor.exe [2005-06-07 17:56:34 430080]

R3 asusgsb;ASUS Virtual Video Capture Device Driver;C:\WINDOWS\system32\drivers\asusgsb.sys [2007-07-12 10:03]
R3 SMCWPCIG;SMCWPCI-G 54Mbps Wireless PCI adapter Service;C:\WINDOWS\system32\DRIVERS\SMCWPCIG.sys [2005-04-21 03:09]
R3 Video3D;ASUS Video3D Service;C:\WINDOWS\system32\Drivers\Video3D32.sys [2007-07-12 10:03]
R3 wlanndi5;wlanndi5 NDIS Protocol Driver;C:\WINDOWS\system32\wlanndi5.SYS [2004-04-21 17:51]
S3 gdrv;gdrv;C:\WINDOWS\gdrv.sys [2007-12-13 17:46]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{37e890ed-a99e-11dc-bca2-806d6172696f}]
\Shell\AutoRun\command - E:\setup.exe

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-01 22:17:13
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-02-01 22:17:31
ComboFix-quarantined-files.txt  2008-02-01 21:17:23


[wojtas]

looknij:

http://www.idg.pl/porada/86305.html

[Precel]

albo zasilacz albo ram jest padniety
na poczatek uzyj memtsta z fdd albo cd zostaw na cala noc i zobacz rano wyniki

[Lante]

Czytalem ale nic z tego nie wywnioskowalem...Wiec...?Cos konkretnego?Ide spac jutro do sql o 6.10 wstaje...Pzdro jutro bd

[wojtas]

przeinstaluj sterowniki na poczatek od plyty glownej grafy...

[Lante]

No to moze ty teraz wybierz stery moze lepsze podasz...

MemTest juz 4200.0 % i 0 errors...