|
Napisano: 13 Mar 2010 10:48
Ne razumem, pre par dana lap top je počeo da bude nenormalno spor, uprkos gašenju svih nepotrebnih programa.
CPU je 100% od momenta paljenja, pa nekih 15 minuta posle (kažem otprilike), ali nijedan program ne utiče na to, jer za to vreme je sve isto pokrenuto.
Evo, dok ovo sad pišem, lap top je opet normalan.
Skinuo sam spyware doctor 7, on je našao neka 3 čuda, jedan visok, srednji i nizak i sredio ih je.
Pošto sam se utripovao da je on prouzrokovao slabost sistema, obrisao sam ga.
DDS (Ver_09-12-01.01) - NTFSx86
Run by AleX at 10:15:27.03 on Sat 03/13/2010
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_17
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.894.421 [GMT 1:00]
AV: avast! antivirus 4.8.1356 [VPS 100313-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
d:\Program\Super_DVD_Creator_9.8\NMSAccessU.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\S3trayp.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\sm56hlpr.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\taskmgr.exe
D:\down\dds.com
============== Pseudo HJT Report ===============
uStart Page = hxxp://eu.ask.com?o=14978&l=dis
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: IEPlugin Class: {11222041-111b-46e3-bd29-efb2449479b1} - d:\progra~1\arcsoft\mediac~1\intern~1\ARCURL~1.DLL
BHO: Skype add-on (mastermind): {22bf413b-c6d2-4d91-82a9-a0f997ba588c} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL
BHO: Windows Live pomagac za prijavljivanje: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: FDMIECookiesBHO Class: {cc59e0f9-7e43-44fa-9faa-8377850bf205} - c:\program files\free download manager\iefdm2.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
uRun: [Google Update] "c:\documents and settings\alex\local settings\application data\google\update\GoogleUpdate.exe" /c
mRun: [VTTimer] VTTimer.exe
mRun: [S3Trayp] S3trayp.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [SMSERIAL] c:\windows\sm56hlpr.exe
mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe
mRun: [Sony Ericsson PC Suite] "c:\program files\sony ericsson\mobile2\application launcher\Application Launcher.exe" /startoptions
mRun: [googletalk] c:\program files\google\google talk\googletalk.exe /autostart
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [4shared Update] "c:\program files\4shared desktop\checkUpdate.exe"
mRun: [ArcSoft Connection Service] c:\program files\common files\arcsoft\connection service\bin\ACDaemon.exe
mRun: [HDAudDeck] c:\program files\via\viaudioi\hdadeck\HDeck.exe 1
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\alex\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE
IE: &Download all 4shared files - c:\program files\4shared desktop\down_all.htm
IE: &Download using 4shared Desktop - c:\program files\4shared desktop\down_link.htm
IE: Download all with Free Download Manager - file://c:\program files\free download manager\dlall.htm
IE: Download selected with Free Download Manager - file://c:\program files\free download manager\dlselected.htm
IE: Download video with Free Download Manager - file://c:\program files\free download manager\dlfvideo.htm
IE: Download with Free Download Manager - file://c:\program files\free download manager\dllink.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {5067A26B-1337-4436-8AFE-EE169C2DA79F} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
IE: {77BF5300-1474-4EC7-9980-D32B190E9B07} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\progra~1\micros~2\office12\GR99D3~1.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL
================= FIREFOX ===================
FF - ProfilePath - c:\docume~1\alex\applic~1\mozilla\firefox\profiles\9mfxge01.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://www.google.rs/
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
FF - component: d:\program files\arcsoft\media converter for philips\internet video downloader\plugin_firefox\components\nsURLRecordEx.dll
FF - plugin: c:\documents and settings\alex\application data\mozilla\plugins\npgoogletalk.dll
FF - plugin: c:\documents and settings\alex\local settings\application data\google\update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: c:\documents and settings\alex\local settings\application data\yahoo!\browserplus\2.4.21\plugins\npybrowserplus_2.4.21.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
============= SERVICES / DRIVERS ===============
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-11-6 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-11-6 20560]
R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast4\ashServ.exe [2009-11-6 138680]
R3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast4\ashMaiSv.exe [2009-11-6 254040]
R3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast4\ashWebSv.exe [2009-11-6 352920]
R3 S3GIGP;S3GIGP;c:\windows\system32\drivers\S3gIGPm.sys [2009-11-6 659456]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2010-2-28 208384]
=============== Created Last 30 ================
2010-03-07 10:49:42 401484 ----a-w- c:\windows\system32\msvcrtd.dll
2010-03-07 10:46:43 0 d-----w- c:\program files\Mobiola Web Camera for S60
2010-03-06 23:36:05 32592 ----a-w- c:\windows\system32\msonpmon.dll
2010-03-06 23:25:40 0 d-----w- c:\program files\Microsoft Visual Studio 8
2010-03-02 19:52:43 114688 ----a-w- c:\windows\system32\BTCamVideoSource.dll
2010-02-28 14:06:45 8704 ----a-r- c:\windows\system32\viahdcpl.cpl
2010-02-28 14:06:41 208384 ----a-r- c:\windows\system32\drivers\viahduaa.sys
2010-02-27 12:05:02 0 d-----w- C:\vcs5BGEffects
2010-02-27 11:56:49 0 d-----w- c:\program files\AV Vcs 6.0 DIAMOND
2010-02-27 11:25:44 0 d-----w- c:\docume~1\alluse~1\applic~1\DriverScanner
2010-02-27 11:25:44 0 d-----w- c:\docume~1\alex\applic~1\Uniblue
2010-02-25 12:32:35 3255 ----a-w- c:\windows\system32\wbem\Outlook_01cab6169b96ea18.mof
2010-02-20 15:04:33 0 d-----w- c:\program files\common files\Macrovision Shared
2010-02-20 14:28:51 0 d-----w- c:\docume~1\alex\applic~1\Autodesk
2010-02-20 14:19:02 74072 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2010-02-20 14:19:02 528216 ----a-w- c:\windows\system32\XAudio2_6.dll
2010-02-20 14:19:01 238936 ----a-w- c:\windows\system32\xactengine3_6.dll
2010-02-20 14:19:01 22360 ----a-w- c:\windows\system32\X3DAudio1_7.dll
2010-02-20 14:19:00 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
2010-02-20 14:19:00 238936 ----a-w- c:\windows\system32\xactengine3_5.dll
2010-02-20 14:14:08 0 d-----w- c:\windows\Logs
2010-02-20 14:11:52 0 d-----w- c:\program files\common files\Autodesk Shared
2010-02-20 14:11:52 0 d-----w- c:\program files\Autodesk
2010-02-20 13:43:50 0 d-----w- c:\windows\system32\XPSViewer
2010-02-20 13:43:13 14048 ------w- c:\windows\system32\spmsg2.dll
2010-02-20 12:21:53 0 ---ha-w- c:\windows\system32\drivers\Msft_User_PCCSWpdDriver_01_07_00.Wdf
2010-02-20 12:21:44 0 ---ha-w- c:\windows\system32\drivers\MsftWdf_user_01_07_00.Wdf
2010-02-17 10:29:12 0 d-----w- c:\program files\WinSCP
2010-02-17 08:58:55 0 d-----w- c:\program files\Windows Media Connect 2
2010-02-17 08:57:05 0 d-----w- c:\windows\system32\LogFiles
2010-02-17 08:07:37 0 d--h--w- c:\docume~1\alluse~1\applic~1\ArcSoft
2010-02-17 08:07:23 245408 ----a-w- c:\windows\system32\unicows.dll
2010-02-17 08:07:23 1645320 ----a-w- c:\windows\system32\gdiplus.dll
2010-02-17 07:52:01 0 d-----w- c:\windows\system32\appmgmt
2010-02-12 14:17:27 0 d-----w- c:\windows\system32\wbem\Repository
2010-02-11 18:00:44 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2010-02-11 17:59:02 33280 ----a-w- c:\windows\system32\csrsrv.dll
2010-02-11 17:58:53 455424 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
==================== Find3M ====================
2010-01-20 19:37:30 737280 ----a-w- c:\windows\iun6002.exe
2009-12-22 05:21:05 667136 ----a-w- c:\windows\system32\wininet.dll
2009-12-22 05:20:58 81920 ----a-w- c:\windows\system32\ieencode.dll
2009-12-16 18:43:27 343040 ----a-w- c:\windows\system32\mspaint.exe
============= FINISH: 10:16:37.54 ===============
mycity.rs/must-login.png
Već pola sata čekam da mi se prvi put gmer skenira (gmer1).
Kad se završi skeniranje, naknadno ću ga postaviti.
Ranije je mnogo brže išlo.
Dopuna: 13 Mar 2010 11:08
mycity.rs/must-login.png
mycity.rs/must-login.png
mycity.rs/must-login.png
|
