Problem Niewiem Z Czym....

[Dudiusz]

Niewiem czy w dobrym dziale pisze ale to chyba najodpowiednieszy tymbardziej ze niewiem dokladnie w czym jest PRoblem

 

Właczam Komputer i gdy pojawiaja sie juz ikonki na pulpicie Komp sie resetuje czyscilem go mks virem i nic nieznalazl zrobilem przywracanie systemu i przez 10 minut bylo ok i... znowu padl Wkurzylem sie i zrobilem formata bylo tak jak z przywracaniem systemu czyli 10 min ok i reset

 

ps dziala w trybie awaryjnym tylko ( wlasnie dziki temu to pisze :/)

 

w srodku wszysciutko czyscilem (kurz)... otworzylem obudowe poniewaz moglo byc przyczyna czegos sie przegrzanie.

 

uzywalem Hijacka a to ze jestem swiezo po formacie niczego chyba powaznego nieznalazl

 

Logfile of HijackThis v1.99.1

Scan saved at 14:37:15, on 2006-03-08

Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\Programy\Gadu-Gadu\gg.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Documents and Settings\KUBIEC\Pulpit\hijackthis\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe

O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Programy\Gadu-Gadu\gg.exe" /tray

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1141823325757

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1141823275264

O17 - HKLM\System\CCS\Services\Tcpip\..\{D6CD6D19-ED8B-41E3-B49E-D641A0E3490E}: NameServer = 10.1.1.1,194.204.159.1

O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

O23 - Service: Performance True Type Font (PerfFont) - Unknown owner - C:\WINDOWS\System32\perfont.exe

O23 - Service: Win32Sr - Unknown owner - C:\WINDOWS\win32ssr.exe

StartupList report, 2006-03-08, 14:38:31

StartupList version: 1.52.2

Started from : C:\Documents and Settings\KUBIEC\Pulpit\hijackthis\HijackThis.EXE

Detected: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)

Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)

* Using default options

==================================================

 

Running processes:

 

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\Programy\Gadu-Gadu\gg.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Documents and Settings\KUBIEC\Pulpit\hijackthis\HijackThis.exe

 

--------------------------------------------------

 

Checking Windows NT UserInit:

 

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]

UserInit = C:\WINDOWS\system32\userinit.exe,

 

--------------------------------------------------

 

Autorun entries from Registry:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run

 

NvCplDaemon = RUNDLL32.EXE NvQTwk,NvCplDaemon initialize

nwiz = nwiz.exe /install

 

--------------------------------------------------

 

Autorun entries from Registry:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run

 

CTFMON.EXE = C:\WINDOWS\System32\ctfmon.exe

Gadu-Gadu = "C:\Programy\Gadu-Gadu\gg.exe" /tray

 

--------------------------------------------------

 

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

 

Shell=*INI section not found*

SCRNSAVE.EXE=*INI section not found*

drivers=*INI section not found*

 

Shell & screensaver key from Registry:

 

Shell=Explorer.exe

SCRNSAVE.EXE=C:\WINDOWS\System32\logon.scr

drivers=*Registry value not found*

 

Policies Shell key:

 

HKCU\..\Policies: Shell=*Registry key not found*

HKLM\..\Policies: Shell=*Registry value not found*

 

--------------------------------------------------

 

 

Enumerating Download Program Files:

 

[WUWebControl Class]

InProcServer32 = C:\WINDOWS\System32\wuweb.dll

CODEBASE = http://update.microsoft.com/microsoftupdat...b?1141823325757

 

[MUWebControl Class]

InProcServer32 = C:\WINDOWS\System32\muweb.dll

CODEBASE = http://update.microsoft.com/microsoftupdat...b?1141823275264

 

[shockwave Flash Object]

InProcServer32 = C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx

CODEBASE = http://download.macromedia.com/pub/shockwa...ash/swflash.cab

 

--------------------------------------------------

 

Enumerating ShellServiceObjectDelayLoad items:

 

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll

CDBurn: C:\WINDOWS\system32\SHELL32.dll

WebCheck: C:\WINDOWS\System32\webcheck.dll

SysTray: C:\WINDOWS\System32\stobject.dll

 

--------------------------------------------------

End of report, 3 484 bytes

Report generated in 0,050 seconds

 

Command line options:

/verbose - to add additional info on each section

/complete - to include empty sections and unsuspicious data

/full - to include several rarely-important sections

/force9x - to include Win9x-only startups even if running on WinNT

/forcent - to include WinNT-only startups even if running on Win9x

/forceall - to include all Win9x and WinNT startups, regardless of platform

/history - to list version history only

Niewiem co moze byc przyczyna POMOCY!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! :(

[Orgiusz]

Wiecej szczegolow - plyta, procesor, pamiec, grafika, dysk, napedy, zasilacz.

Pozniej sterowniki ( grzebales cos? zmiana z ATi na NV? ), temperatury...

[Dudiusz]

Wiecej szczegolow - plyta, procesor, pamiec, grafika, dysk, napedy, zasilacz.

Pozniej sterowniki ( grzebales cos? zmiana z ATi na NV? ), temperatury...

nic niegrzebalem i napewno nic ze sterami jestes swiezo po frmacie nic neinstalowalem

 

komp wydaje sie byc w porzadku..... moze serwis komputerowy jakis pomoze :(

[Kolobos]

Usun:

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

Uslugi do kasacji:

O23 - Service: Performance True Type Font (PerfFont) - Unknown owner - C:\WINDOWS\System32\perfont.exe

O23 - Service: Win32Sr - Unknown owner - C:\WINDOWS\win32ssr.exe

Po usunieciu uslug, usun oba pliki.

 

 

Start->Uruchom i wpisz tam:

sc stop Win32Sr

sc stop PerfFont

sc delete PerfFont

sc delete Win32Sr

 

Zainstaluj sobie antyvirus avast i przeskanuj system oraz tym:

http://linorg.ciagri.usp.br/ftp/pub/window...ssfsetup1_0.exe

http://download.ewido.net/ewido-setup.exe

Przed skanowaniem zrob update definicji, po przeskanowaniu odinstaluj oba programy.